1397 files changed, 118730 insertions, 0 deletions

diff --git a/debian/.gitignore b/debian/.gitignore
new file mode 100644
index 000000000000..c328c7275416
--- /dev/null
+++ b/debian/.gitignore
@@ -0,0 +1,30 @@
+# Ignore most directories (all built packages)
+/*/
+!/abi/
+!/bin/
+!/certs/
+!/config/
+!/installer/
+!/lib/
+!/patches*/
+!/rules.d/
+!/signing_templates/
+!/source/
+!/templates/
+!/tests/
+!/upstream/
+
+# Ignore files generated by gencontrol
+/*.debhelper
+/*.maintscript
+/*.substvars
+/config.defines.dump
+/control
+/control.*
+/files
+/linux-*
+/rules.gen
+/tests/control
+
+# Ignore compiled Python files
+__pycache__/
diff --git a/debian/README.Debian b/debian/README.Debian
new file mode 100644
index 000000000000..fa3f0a315739
--- /dev/null
+++ b/debian/README.Debian
@@ -0,0 +1,65 @@
+Linux kernel for Debian
+-----------------------
+
+Patches
+-------
+Debian applies small changes to the kernel source. These are split up into
+separated patches addressing individual problems. Each of the patch files
+contains a description and mentions the author. The patches can be found
+in the source package or at
+https://sources.debian.org/src/linux/<version>/debian/patches/
+(with the package version substituted).
+
+Config Files
+------------
+The .config files used to build the various linux-image files are dynamically
+generated during the linux package build.  See the source package for
+details.  Each linux-image-* package provides the complete .config file that
+was used to generate it.  This file is installed in /boot.
+
+Scope of security support
+-------------------------
+Security support is provided not only for the binary builds, but also
+for the full source package, allowing for locally customized kernels.
+However, kernel options that are not enabled in official Debian builds are
+given a lower priority for security support. Options marked as BROKEN
+or EXPERIMENTAL are of very low priority, and should not be enabled in
+customized builds for a security-sensitive environment.
+
+Building custom kernel binary packages
+--------------------------------------
+We recommend using the 'make deb-pkg' target provided by the upstream
+kernel source.
+
+Rebuilding official binary packages
+-----------------------------------
+You can build specific kernel binary packages using the targets in
+debian/rules.gen, which have names of the form:
+    binary-arch_<architecture>_<featureset>_<flavour>
+
+Example:
+    fakeroot make -f debian/rules.gen binary-arch_i386_none_686
+
+Rebuilding Adaptec AIC7xxx/79xx firmware
+----------------------------------------
+You can rebuild the firmware for the Adaptec AIC7xxx/79xx SCSI Adapters. To
+do so you need to set AIC7XXX_BUILD_FIRMWARE/AIC79XX_BUILD_FIRMWARE config
+options.  Note that this requires to have the development packages for
+Berkeley Database (libdb-dev) installed.
+
+Non-free bits removed
+---------------------
+See the Files-Excluded field in debian/copyright.
+
+Changelog
+---------
+Older Debian changelog entries are no longer included in binary
+packages, but can be found in debian/changelog.old in the source
+package.
+
+Further information
+-------------------
+Debian Linux Kernel Handbook:
+             https://kernel-team.pages.debian.net/kernel-handbook/
+             or debian-kernel-handbook package
+Debian Wiki: https://wiki.debian.org/DebianKernel
diff --git a/debian/README.source b/debian/README.source
new file mode 100644
index 000000000000..4a225a402a08
--- /dev/null
+++ b/debian/README.source
@@ -0,0 +1,313 @@
+Checklist for uploaders
+=======================
+
+There is a checklist in the kernel-team.git repository; see
+<https://salsa.debian.org/kernel-team/kernel-team/-/blob/master/docs/kernel-upload-checklist.md>.
+
+Updating the upstream source
+============================
+
+In addition to the build-dependencies, you will need the rsync package
+installed.
+
+1) It is recommended to fetch the release tag from the relevant upstream git
+   repository, one of:
+
+   * https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
+   * https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git
+   * git://kernel.ubuntu.com/ubuntu/linux.git
+
+   However, it is also possible to use upstream tarball and patch releases.
+   Both tags and files should be signed by the relevant maintainer, which
+   you *must* verify using commands such as:
+
+   $ git tag -v v4.5
+   $ xzcat linux-4.5.tar.xz | gpg --verify linux-4.5.tar.sign -
+   $ xzcat patch-4.5.1.xz | gpg --verify patch-4.5.1.sign -
+
+   The upstream maintainers' key fingerprints are:
+
+   pub   2048R/00411886 2011-09-20
+         Key fingerprint = ABAF 11C6 5A29 70B1 30AB  E3C4 79BE 3E43 0041 1886
+   uid                  Linus Torvalds <torvalds@linux-foundation.org>
+   sub   2048R/012F54CA 2011-09-20
+
+   pub   4096R/6092693E 2011-09-23
+         Key fingerprint = 647F 2865 4894 E3BD 4571  99BE 38DB BDC8 6092 693E
+   uid                  Greg Kroah-Hartman (Linux kernel stable release signing key) <greg@kroah.com>
+   sub   4096R/76D54749 2011-09-23
+
+   pub   4096R/FDCE24FC 2011-12-10
+         Key fingerprint = D4E1 E317 4470 9144 B0F8  101A DB74 AEB8 FDCE 24FC
+   uid                  Luis Henriques <luis.henriques@canonical.com>
+   uid                  Luis Henriques <henrix@camandro.org>
+   sub   4096R/EFBC394A 2011-12-10
+
+2) Run: ./debian/bin/genorig.py <repository>
+   or:  ./debian/bin/genorig.py <tarball> [patch]
+
+   This will produce ../orig/linux_<version>.orig.tar.xz
+   (e.g. linux_3.5~rc1.orig.tar.xz).
+
+   It involves deleting files for DFSG compliance, as listed in the
+   Files-Excluded field in debian/copyright.
+
+3) Run: make -f debian/rules orig
+
+   This will apply the main quilt series to the upstream source, which
+   will usually fail due to conflicts with upstream changes.  You need
+   to resolve those by dropping or refreshing patches.
+
+Recording updates in the changelog
+----------------------------------
+
+Upstream commits that we already cherry-picked and included in a
+previous package upload should not be mentioned, since they don't make
+any difference to the package.  Any other commits that fix a Debian
+bug report and/or a security issue with a CVE ID should always be
+listed, along with the (Closes: #nnnnnn) and/or (CVE-yyyy-nnnn)
+reference.
+
+Aside from those general rules:
+
+* For an upstream release candidate, don't attempt to list the changes
+
+* For a stable release by Linus, refer to the summary at
+  kernelnewbies.org, e.g. https://kernelnewbies.org/Linux_4.5
+
+* For a stable update, refer to the changelog on kernel.org, e.g.
+  https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1, and
+  list all changes that are relevant to our package and that fix bugs
+  that we would consider 'important' or higher severity
+
+  - The script debian/bin/stable-update updates the changelog
+    version and inserts the list of changes.  It doesn't attempt to
+    filter out irrelevant or unimportant changes.
+
+  - If you have time, please delete irrelevant changes such as:
+    + Fixes for architectures not supported by the package
+    + Fixes for drivers that aren't enabled in any of our configurations
+    + Build fixes for configurations that we don't use
+    + Fixes for lockdep false positives
+
+If you have time, please add bracketted prefixes to the upstream
+change list as described below under "Changelog conventions".
+
+Applying patches to the Debian kernel tree
+==========================================
+
+The Debian kernel packaging uses the quilt patch system, but with
+multiple series to allow for featuresets.
+
+Patches are stored below debian/patches, loosely sorted in bugfix/,
+features/ and debian/. Patches are in the standard kernel patch
+format (unified diff to be applied with patch -p1) and generally have
+DEP-3 headers.
+
+For each optional featureset there is an additional patch directory
+debian/patches-<featureset>.
+
+If you want to generate a source tree with all patches applied, run
+make -f debian/rules source
+
+The resulting source can be found below debian/build.
+
+Changelog conventions
+=====================
+
+If a change only affects some architectures, flavours or featuresets,
+this should be noted with a bracketted prefix on the changelog line:
+
+* [<fset>] Change to featureset <fset>
+* [<arch>] Change that affects Debian architecture <arch>
+* [<arch1>,<arch2>...] Change that affects Debian architectures
+  <arch1>, <arch2>, ...
+* [<arch>/<flavour>] Change that affects kernel flavour <flavour>
+  on Debian architecture <arch>
+* [<arch>/{<flavour1>,<flavour2>...}] Change that affects kernel
+  flavours <flavour1>, <flavour2>, ... on Debian architecture <arch>
+
+You can use wildcards to cover multiple values, e.g. 'arm*' for armel,
+armhf and arm64 architectures.  Also 'x86' is used to cover the Debian
+architectures amd64, i386 and x32.
+
+Kernel config files
+===================
+
+Each kernel configuration file is constructed dynamically from a
+number of files under debian/config.  They are read in the following
+order, such that files later on the list can override settings from
+earlier files.  Most of the files are optional and the filenames can
+generally be overridden by explicit lists (possibly empty) specified
+in the 'defines' files.
+
+1. Common:
+   - Default filename: config
+   - Filename list: [image]configs in defines
+2. Per kernel architecture:
+   - Filename: kernelarch-<karch>/config (optional)
+3. Per architecture:
+   - Default filename: <arch>/config
+   - Filename list: [image]configs in <arch>/defines
+4. Per architecture and flavour:
+   - Default filename: <arch>/config.<flavour> (optional)
+   - Filename list: [<flavour>_image]configs in <arch>/defines
+5. Per featureset:
+   - Default filename: featureset-<fset>/config (optional)
+   - Filename list: [image]configs in featureset-<fset>/defines
+6. Per architecture and featureset:
+   - Default filename: <arch>/<fset>/config (optional)
+   - Filename list: [image]configs in <arch>/<fset>/defines
+7. Per architecture, featureset, and flavour:
+   - Default filename: <arch>/<fset>/config.<flavour> (optional)
+   - Filename list: [<flavour>_image]configs in <arch>/<fset>/defines
+
+You can check the final list of configuration files by reading
+debian/rules.gen.  Each binary-arch_<arch>_<fset>_<flavour>_real
+rule passes the list to debian/rules.real as the KCONFIG variable.
+
+These files should be kept in order using the kconfigeditor2
+utility from <https://salsa.debian.org/kernel-team/kernel-team>.
+With this source package as your working directory, run:
+
+    debian/rules source
+    .../kernel-team/utils/kconfigeditor2/process.py .
+
+This will also warn about any symbols that no longer exist, or
+cannot be explicitly configured.
+
+Control file
+============
+The master control file debian/control must be generated before
+the package is uploaded. debian/rules contains the debian/control 
+target, which generates the control file by invoking the 
+debian/bin/gencontrol.py script, which combines the templates from
+the templates directory and architecture-specific defines file to
+produce the debian/control file. Note that this target is intentionally
+made to fail with a non-zero exit code to make sure that it is never
+run during an automatic build. The following variables are substituted
+into the templates:
+
+@version@      Upstream kernel version, for example 2.6.11.
+@arch@         The Debian arch name, such as powerpc or i386.
+@flavour@      The build flavour, such as 686 or k7-smp.
+@class@        The CPU/architecture class; displayed in synopsis.  It should
+               be fairly short, as the synopsis is supposed to be <80 chars.
+               It should be in the form "foo class", and will show up in the
+	       description as "foo class machines".
+@longclass@    The CPU/architecture class; displayed in the extended
+               description.  The same rules apply as in @class@.  If
+	       this is unset, it will default to @class@.
+@desc@         (Potentially) multi-line verbiage that's appended to
+               -image descriptions.
+@abiname@      Current abiname, a single digit.
+
+Normally, the arch-specific contents should be controlled by
+adjusting the corresponding defines file.
+
+Build-dependencies that relate to specific binary packages can be
+specified in a Build-Depends field in the template for that binary
+package.  gencontrol.py will append the value to the source package's
+Build-Depends-Arch or Build-Depends-Indep field, as appropriate.  It
+will also use the binary package's Architecture and Build-Profile as
+the architecture-qualification and/or restriction for each build-
+dependency that doesn't already have them.
+
+TODO:
+- Patches applied to the upstream source
+- How to define a flavour
+- More detail on generation of debian/control and configs
+
+Running tests
+=============
+
+linux supports autopkgtest and should be able to run most of the
+kernel's self-tests on any architecture where kexec is supported,
+but it has higher resource requirements than most packages:
+
+- A VM with plenty of disk space (10GB is enough), RAM (1GB is
+  probably enough) and at least 2 CPUs
+- The temporary directory for adt-virt-qemu (-o option) will need
+  several GB of space, so a tmpfs may not be suitable
+
+Note that if you tell adt-run to use an 'unbuilt tree' (i.e. an
+unpacked source package) it does not exclude VCS directories such as
+.git.  Either use a packed source package or copy the working tree
+elsewhere excluding .git.
+
+Example invocation:
+
+    adt-run -B ../linux-image-4.2.0-rc6-amd64_4.2~rc6-1~exp2_amd64.deb \
+        ../linux_4.2~rc6-1~exp2.dsc \
+	--timeout-test=1200 \
+        --- adt-virt-qemu /var/cache/autopkgtest/adt-sid.img -o /var/tmp -c 2
+
+Build profiles
+==============
+
+Several build profiles are understood and supported:
+
+- stage1: Needed when bootstrapping an architecture.  A stage1 build
+  produces only the linux-libc-dev package and has no host
+  build-dependencies.
+- nodoc: Exclude most documentation
+- pkg.linux.notools: Exclude userland tool packages (linux-kbuild-<version>,
+  linux-perf-<version>, etc.)
+- pkg.linux.nokernel: Exclude kernel image and header packages
+- pkg.linux.nosource: Exclude source binary package (linux-source-<version>)
+- cross: Needed when cross-building.  Currently this must be used together
+  with nopython as the build-dependencies will be unsatisfiable otherwise.
+- nopython: Disable Python bindings.  This currently disables building the
+  linux-perf-<version> package, as the perf program embeds Python.
+- pkg.linux.nometa: Exclude most meta-packages.  The linux-compiler-* and
+  linux-headers-*-all* packages can still be built.
+
+Build rules
+===========
+
+The Debian build rules are split across multiple makefiles:
+
+- debian/rules: Standard top-level makefile for Debian package build.
+- debian/rules.gen: Intermediate makefile between debian/rules and
+  debian/rules.real.  This is generated by gencontrol.py based on
+  the configuration under debian/config.
+- debian/rules.real: Makefile for building a single kernel flavour
+  or other group of binary packages.
+- debian/rules.d: Makefiles for building userland code from specific
+  source directories.  The directory structure mirrors the kernel
+  source directories.  debian/rules.real uses the "make-tools" to
+  invoke these makefiles.
+
+All builds *must* be done out-of-tree in a subdirectory of
+debian/build, so that the output files do not end up in the
+linux-source-<version> binary package.  Currently kernel builds use
+debian/build/build_<arch>_<featureset>_<flavour>, userland code uses
+debian/build/build-tools/<source-dir> and documentation uses
+debian/build/build-doc.
+
+Code signing
+============
+
+The kernel image and modules may be signed after building, to support
+a Secure Boot or Trusted Boot policy.  In Debian, this is performed by
+a "code signing service" that is separate from the normal package
+build process.
+
+The initial package build generates binary packages named
+linux-image-<arch>-signed-template, that contain a source package
+template and metadata about the files to be signed.  The code signing
+service will download this and the linux-image packages to be signed.
+It will add detached signatures to the source package, then upload it
+(without ever running debian/rules).
+
+The source package template is generated by
+debian/bin/gencontrol_signed.py and debian/rules.real with files from
+debian/signing_templates and debian/templates.  To test changes to
+these:
+
+1. Build the linux source package.
+2. Generate the signed source package by running the script
+   "debian-test-sign" from the kernel-team.git repository.  It is
+   also possible to set up a development configuration of the
+   official code signing service, but this is more complicated.
+3. Build the signed source package.
diff --git a/debian/bin/abiupdate.py b/debian/bin/abiupdate.py
new file mode 100755
index 000000000000..dbb6f77ba454
--- /dev/null
+++ b/debian/bin/abiupdate.py
@@ -0,0 +1,232 @@
+#!/usr/bin/python3
+
+import sys
+import optparse
+import os
+import shutil
+import tempfile
+
+from urllib.request import urlopen
+from urllib.error import HTTPError
+
+from debian_linux.abi import Symbols
+from debian_linux.config import ConfigCoreDump
+from debian_linux.debian import Changelog, VersionLinux
+
+default_url_base = "https://deb.debian.org/debian/"
+default_url_base_incoming = "https://incoming.debian.org/debian-buildd/"
+default_url_base_ports = "https://deb.debian.org/debian-ports/"
+default_url_base_ports_incoming = "https://incoming.ports.debian.org/"
+default_url_base_security = "https://deb.debian.org/debian-security/"
+
+
+class url_debian_flat(object):
+    def __init__(self, base):
+        self.base = base
+
+    def __call__(self, source, filename, arch):
+        return self.base + filename
+
+
+class url_debian_pool(object):
+    def __init__(self, base):
+        self.base = base
+
+    def __call__(self, source, filename, arch):
+        return (self.base + "pool/main/" + source[0] + "/" + source + "/"
+                + filename)
+
+
+class url_debian_ports_pool(url_debian_pool):
+    def __call__(self, source, filename, arch):
+        if arch == 'all':
+            return url_debian_pool.__call__(self, source, filename, arch)
+        return (self.base + "pool-" + arch + "/main/" + source[0] + "/"
+                + source + "/" + filename)
+
+
+class url_debian_security_pool(url_debian_pool):
+    def __call__(self, source, filename, arch):
+        return (self.base + "pool/updates/main/" + source[0] + "/" + source
+                + "/" + filename)
+
+
+class Main(object):
+    dir = None
+
+    def __init__(self, arch=None, featureset=None, flavour=None):
+        self.log = sys.stdout.write
+
+        self.override_arch = arch
+        self.override_featureset = featureset
+        self.override_flavour = flavour
+
+        changelog = Changelog(version=VersionLinux)
+        while changelog[0].distribution == 'UNRELEASED':
+            changelog.pop(0)
+        changelog = changelog[0]
+
+        self.source = changelog.source
+        self.version = changelog.version.linux_version
+        self.version_source = changelog.version.complete
+
+        if changelog.distribution.endswith('-security'):
+            self.urls = [url_base_security]
+        else:
+            self.urls = [url_base, url_base_ports,
+                         url_base_incoming, url_base_ports_incoming]
+
+        self.config = ConfigCoreDump(fp=open("debian/config.defines.dump",
+                                             "rb"))
+
+        self.version_abi = self.config['version', ]['abiname']
+
+    def __call__(self):
+        self.dir = tempfile.mkdtemp(prefix='abiupdate')
+        try:
+            self.log("Retrieve config\n")
+
+            try:
+                config = self.get_config()
+            except HTTPError as e:
+                self.log("Failed to retrieve %s: %s\n" % (e.filename, e))
+                sys.exit(1)
+
+            if self.override_arch:
+                arches = [self.override_arch]
+            else:
+                arches = config[('base',)]['arches']
+            for arch in arches:
+                self.update_arch(config, arch)
+        finally:
+            shutil.rmtree(self.dir)
+
+    def extract_package(self, filename, base):
+        base_out = self.dir + "/" + base
+        os.mkdir(base_out)
+        os.system("dpkg-deb --extract %s %s" % (filename, base_out))
+        return base_out
+
+    def get_abi(self, arch, prefix):
+        try:
+            version_abi = (self.config[('version',)]['abiname_base'] + '-'
+                           + self.config['abi', arch]['abiname'])
+        except KeyError:
+            version_abi = self.version_abi
+        filename = ("linux-headers-%s-%s_%s_%s.deb" %
+                    (version_abi, prefix, self.version_source, arch))
+        f = self.retrieve_package(filename, arch)
+        d = self.extract_package(f, "linux-headers-%s_%s" % (prefix, arch))
+        f1 = d + ("/usr/src/linux-headers-%s-%s/Module.symvers" %
+                  (version_abi, prefix))
+        s = Symbols(open(f1))
+        shutil.rmtree(d)
+        return version_abi, s
+
+    def get_config(self):
+        # XXX We used to fetch the previous version of linux-support here,
+        # but until we authenticate downloads we should not do that as
+        # pickle.load allows running arbitrary code.
+        return self.config
+
+    def retrieve_package(self, filename, arch):
+        for i, url in enumerate(self.urls):
+            u = url(self.source, filename, arch)
+            filename_out = self.dir + "/" + filename
+
+            try:
+                f_in = urlopen(u)
+            except HTTPError:
+                if i == len(self.urls) - 1:
+                    # No more URLs to try
+                    raise
+                else:
+                    continue
+
+            f_out = open(filename_out, 'wb')
+            while 1:
+                r = f_in.read()
+                if not r:
+                    break
+                f_out.write(r)
+            return filename_out
+
+    def save_abi(self, version_abi, symbols, arch, featureset, flavour):
+        dir = "debian/abi/%s" % version_abi
+        if not os.path.exists(dir):
+            os.makedirs(dir)
+        out = "%s/%s_%s_%s" % (dir, arch, featureset, flavour)
+        symbols.write(open(out, 'w'))
+
+    def update_arch(self, config, arch):
+        if self.override_featureset:
+            featuresets = [self.override_featureset]
+        else:
+            featuresets = config[('base', arch)]['featuresets']
+        for featureset in featuresets:
+            self.update_featureset(config, arch, featureset)
+
+    def update_featureset(self, config, arch, featureset):
+        config_base = config.merge('base', arch, featureset)
+
+        if not config_base.get('enabled', True):
+            return
+
+        if self.override_flavour:
+            flavours = [self.override_flavour]
+        else:
+            flavours = config_base['flavours']
+        for flavour in flavours:
+            self.update_flavour(config, arch, featureset, flavour)
+
+    def update_flavour(self, config, arch, featureset, flavour):
+        self.log("Updating ABI for arch %s, featureset %s, flavour %s: " %
+                 (arch, featureset, flavour))
+        try:
+            if featureset == 'none':
+                localversion = flavour
+            else:
+                localversion = featureset + '-' + flavour
+
+            version_abi, abi = self.get_abi(arch, localversion)
+            self.save_abi(version_abi, abi, arch, featureset, flavour)
+            self.log("Ok.\n")
+        except HTTPError as e:
+            self.log("Failed to retrieve %s: %s\n" % (e.filename, e))
+        except Exception:
+            self.log("FAILED!\n")
+            import traceback
+            traceback.print_exc(None, sys.stdout)
+
+
+if __name__ == '__main__':
+    options = optparse.OptionParser()
+    options.add_option("-u", "--url-base", dest="url_base",
+                       default=default_url_base)
+    options.add_option("--url-base-incoming", dest="url_base_incoming",
+                       default=default_url_base_incoming)
+    options.add_option("--url-base-ports", dest="url_base_ports",
+                       default=default_url_base_ports)
+    options.add_option("--url-base-ports-incoming",
+                       dest="url_base_ports_incoming",
+                       default=default_url_base_ports_incoming)
+    options.add_option("--url-base-security", dest="url_base_security",
+                       default=default_url_base_security)
+
+    opts, args = options.parse_args()
+
+    kw = {}
+    if len(args) >= 1:
+        kw['arch'] = args[0]
+    if len(args) >= 2:
+        kw['featureset'] = args[1]
+    if len(args) >= 3:
+        kw['flavour'] = args[2]
+
+    url_base = url_debian_pool(opts.url_base)
+    url_base_incoming = url_debian_pool(opts.url_base_incoming)
+    url_base_ports = url_debian_ports_pool(opts.url_base_ports)
+    url_base_ports_incoming = url_debian_flat(opts.url_base_ports_incoming)
+    url_base_security = url_debian_security_pool(opts.url_base_security)
+
+    Main(**kw)()
diff --git a/debian/bin/buildcheck.py b/debian/bin/buildcheck.py
new file mode 100755
index 000000000000..3f7ce25a970c
--- /dev/null
+++ b/debian/bin/buildcheck.py
@@ -0,0 +1,285 @@
+#!/usr/bin/python3
+
+import sys
+import glob
+import os
+import re
+
+from debian_linux.abi import Symbols
+from debian_linux.config import ConfigCoreDump
+from debian_linux.debian import Changelog, VersionLinux
+
+
+class CheckAbi(object):
+    class SymbolInfo(object):
+        def __init__(self, symbol, symbol_ref=None):
+            self.symbol = symbol
+            self.symbol_ref = symbol_ref or symbol
+
+        @property
+        def module(self):
+            return self.symbol.module
+
+        @property
+        def name(self):
+            return self.symbol.name
+
+        def write(self, out, ignored):
+            info = []
+            if ignored:
+                info.append("ignored")
+            for name in ('module', 'version', 'export'):
+                data = getattr(self.symbol, name)
+                data_ref = getattr(self.symbol_ref, name)
+                if data != data_ref:
+                    info.append("%s: %s -> %s" % (name, data_ref, data))
+                else:
+                    info.append("%s: %s" % (name, data))
+            out.write("%-48s %s\n" % (self.symbol.name, ", ".join(info)))
+
+    def __init__(self, config, dir, arch, featureset, flavour):
+        self.config = config
+        self.arch, self.featureset, self.flavour = arch, featureset, flavour
+
+        self.filename_new = "%s/Module.symvers" % dir
+
+        try:
+            version_abi = (self.config[('version',)]['abiname_base'] + '-'
+                           + self.config['abi', arch]['abiname'])
+        except KeyError:
+            version_abi = self.config[('version',)]['abiname']
+        self.filename_ref = ("debian/abi/%s/%s_%s_%s" %
+                             (version_abi, arch, featureset, flavour))
+
+    def __call__(self, out):
+        ret = 0
+
+        new = Symbols(open(self.filename_new))
+        unversioned = [name for name in new
+                       if new[name].version == '0x00000000']
+        if unversioned:
+            out.write("ABI is not completely versioned!  "
+                      "Refusing to continue.\n")
+            out.write("\nUnversioned symbols:\n")
+            for name in sorted(unversioned):
+                self.SymbolInfo(new[name]).write(out, False)
+            ret = 1
+
+        try:
+            ref = Symbols(open(self.filename_ref))
+        except IOError:
+            out.write("Can't read ABI reference.  ABI not checked!\n")
+            return ret
+
+        symbols, add, change, remove = self._cmp(ref, new)
+
+        ignore = self._ignore(symbols)
+
+        add_effective = add - ignore
+        change_effective = change - ignore
+        remove_effective = remove - ignore
+
+        if change_effective or remove_effective:
+            out.write("ABI has changed!  Refusing to continue.\n")
+            ret = 1
+        elif change or remove:
+            out.write("ABI has changed but all changes have been ignored.  "
+                      "Continuing.\n")
+        elif add_effective:
+            out.write("New symbols have been added.  Continuing.\n")
+        elif add:
+            out.write("New symbols have been added but have been ignored.  "
+                      "Continuing.\n")
+        else:
+            out.write("No ABI changes.\n")
+
+        if add:
+            out.write("\nAdded symbols:\n")
+            for name in sorted(add):
+                symbols[name].write(out, name in ignore)
+
+        if change:
+            out.write("\nChanged symbols:\n")
+            for name in sorted(change):
+                symbols[name].write(out, name in ignore)
+
+        if remove:
+            out.write("\nRemoved symbols:\n")
+            for name in sorted(remove):
+                symbols[name].write(out, name in ignore)
+
+        return ret
+
+    def _cmp(self, ref, new):
+        ref_names = set(ref.keys())
+        new_names = set(new.keys())
+
+        add = set()
+        change = set()
+        remove = set()
+
+        symbols = {}
+
+        for name in new_names - ref_names:
+            add.add(name)
+            symbols[name] = self.SymbolInfo(new[name])
+
+        for name in ref_names.intersection(new_names):
+            s_ref = ref[name]
+            s_new = new[name]
+
+            if s_ref != s_new:
+                change.add(name)
+                symbols[name] = self.SymbolInfo(s_new, s_ref)
+
+        for name in ref_names - new_names:
+            remove.add(name)
+            symbols[name] = self.SymbolInfo(ref[name])
+
+        return symbols, add, change, remove
+
+    def _ignore_pattern(self, pattern):
+        ret = []
+        for i in re.split(r'(\*\*?)', pattern):
+            if i == '*':
+                ret.append(r'[^/]*')
+            elif i == '**':
+                ret.append(r'.*')
+            elif i:
+                ret.append(re.escape(i))
+        return re.compile('^' + ''.join(ret) + '$')
+
+    def _ignore(self, symbols):
+        # TODO: let config merge this lists
+        configs = []
+        configs.append(self.config.get(('abi', self.arch, self.featureset,
+                                        self.flavour), {}))
+        configs.append(self.config.get(('abi', self.arch, None, self.flavour),
+                                       {}))
+        configs.append(self.config.get(('abi', self.arch, self.featureset),
+                                       {}))
+        configs.append(self.config.get(('abi', self.arch), {}))
+        configs.append(self.config.get(('abi', None, self.featureset), {}))
+        configs.append(self.config.get(('abi',), {}))
+
+        ignores = set()
+        for config in configs:
+            ignores.update(config.get('ignore-changes', []))
+
+        filtered = set()
+        for ignore in ignores:
+            type = 'name'
+            if ':' in ignore:
+                type, ignore = ignore.split(':')
+            if type in ('name', 'module'):
+                p = self._ignore_pattern(ignore)
+                for symbol in symbols.values():
+                    if p.match(getattr(symbol, type)):
+                        filtered.add(symbol.name)
+            else:
+                raise NotImplementedError
+
+        return filtered
+
+
+class CheckImage(object):
+    def __init__(self, config, dir, arch, featureset, flavour):
+        self.dir = dir
+        self.arch, self.featureset, self.flavour = arch, featureset, flavour
+
+        self.changelog = Changelog(version=VersionLinux)[0]
+
+        self.config_entry_base = config.merge('base', arch, featureset,
+                                              flavour)
+        self.config_entry_build = config.merge('build', arch, featureset,
+                                               flavour)
+        self.config_entry_image = config.merge('image', arch, featureset,
+                                               flavour)
+
+    def __call__(self, out):
+        image = self.config_entry_build.get('image-file')
+        uncompressed_image = self.config_entry_build \
+                                 .get('uncompressed-image-file')
+
+        if not image:
+            # TODO: Bail out
+            return 0
+
+        image = os.path.join(self.dir, image)
+        if uncompressed_image:
+            uncompressed_image = os.path.join(self.dir, uncompressed_image)
+
+        fail = 0
+
+        fail |= self.check_size(out, image, uncompressed_image)
+
+        return fail
+
+    def check_size(self, out, image, uncompressed_image):
+        value = self.config_entry_image.get('check-size')
+
+        if not value:
+            return 0
+
+        dtb_size = 0
+        if self.config_entry_image.get('check-size-with-dtb'):
+            for dtb in glob.glob(
+                    os.path.join(self.dir, 'arch',
+                                 self.config_entry_base['kernel-arch'],
+                                 'boot/dts/*.dtb')):
+                dtb_size = max(dtb_size, os.stat(dtb).st_size)
+
+        size = os.stat(image).st_size + dtb_size
+
+        # 1% overhead is desirable in order to cope with growth
+        # through the lifetime of a stable release. Warn if this is
+        # not the case.
+        usage = (float(size)/value) * 100.0
+        out.write('Image size %d/%d, using %.2f%%.  ' % (size, value, usage))
+        if size > value:
+            out.write('Too large.  Refusing to continue.\n')
+            return 1
+        elif usage >= 99.0:
+            out.write('Under 1%% space in %s.  ' % self.changelog.distribution)
+        else:
+            out.write('Image fits.  ')
+        out.write('Continuing.\n')
+
+        # Also check the uncompressed image
+        if uncompressed_image and \
+           self.config_entry_image.get('check-uncompressed-size'):
+            value = self.config_entry_image.get('check-uncompressed-size')
+            size = os.stat(uncompressed_image).st_size
+            usage = (float(size)/value) * 100.0
+            out.write('Uncompressed Image size %d/%d, using %.2f%%.  ' %
+                      (size, value, usage))
+            if size > value:
+                out.write('Too large.  Refusing to continue.\n')
+                return 1
+            elif usage >= 99.0:
+                out.write('Uncompressed Image Under 1%% space in %s.  ' %
+                          self.changelog.distribution)
+            else:
+                out.write('Uncompressed Image fits.  ')
+            out.write('Continuing.\n')
+
+        return 0
+
+
+class Main(object):
+    def __init__(self, dir, arch, featureset, flavour):
+        self.args = dir, arch, featureset, flavour
+
+        self.config = ConfigCoreDump(open("debian/config.defines.dump", "rb"))
+
+    def __call__(self):
+        fail = 0
+
+        for c in CheckAbi, CheckImage:
+            fail |= c(self.config, *self.args)(sys.stdout)
+
+        return fail
+
+
+if __name__ == '__main__':
+    sys.exit(Main(*sys.argv[1:])())
diff --git a/debian/bin/check-patches.sh b/debian/bin/check-patches.sh
new file mode 100755
index 000000000000..093649bd19ef
--- /dev/null
+++ b/debian/bin/check-patches.sh
@@ -0,0 +1,28 @@
+#!/bin/sh -e
+
+TMPDIR=$(mktemp -d)
+trap "rm -rf $TMPDIR" EXIT
+for patchdir in debian/patches*; do
+    sed '/^#/d; /^[[:space:]]*$/d; /^X /d; s/^+ //; s,^,'"$patchdir"'/,' "$patchdir"/series
+done | sort -u > $TMPDIR/used
+find debian/patches* ! -path '*/series' -type f -name "*.diff" -o -name "*.patch" -printf "%p\n" | sort > $TMPDIR/avail
+echo "Used patches"
+echo "=============="
+cat $TMPDIR/used
+echo
+echo "Unused patches"
+echo "=============="
+fgrep -v -f $TMPDIR/used $TMPDIR/avail || test $? = 1
+echo
+echo "Patches without required headers"
+echo "================================"
+xargs egrep -l '^(Subject|Description):' < $TMPDIR/used | xargs egrep -l '^(From|Author|Origin):' > $TMPDIR/goodheaders || test $? = 1
+fgrep -v -f $TMPDIR/goodheaders $TMPDIR/used || test $? = 1
+echo
+echo "Patches without Origin or Forwarded header"
+echo "=========================================="
+xargs egrep -L '^(Origin:|Forwarded: (no\b|not-needed|http))' < $TMPDIR/used || test $? = 1
+echo
+echo "Patches to be forwarded"
+echo "======================="
+xargs egrep -l '^Forwarded: no\b' < $TMPDIR/used || test $? = 1
diff --git a/debian/bin/debian_linux b/debian/bin/debian_linux
new file mode 120000
index 000000000000..01f3e04dc7a6
--- /dev/null
+++ b/debian/bin/debian_linux
@@ -0,0 +1 @@
+../lib/python/debian_linux/
\ No newline at end of file
diff --git a/debian/bin/fix-shebang b/debian/bin/fix-shebang
new file mode 100755
index 000000000000..edf551fa3a93
--- /dev/null
+++ b/debian/bin/fix-shebang
@@ -0,0 +1,12 @@
+#!/usr/bin/perl -pi
+
+# Change "#!/usr/bin/env perl" to "#!/usr/bin/perl" (policy §10.4).
+# Other uses of /usr/bin/env should probably be converted as well, but
+# policy doesn't specify what to do.
+if ($. == 1 && m|^\#!\s*/usr/bin/env\s+(.+)|) {
+    if ($1 eq "perl") {
+	$_ = "#!/usr/bin/perl\n";
+    } else {
+	print STDERR "W: Found #!/usr/bin/env $1 and don't know what to substitute\n";
+    }
+}
diff --git a/debian/bin/gencontrol.py b/debian/bin/gencontrol.py
new file mode 100755
index 000000000000..b0fab1b11741
--- /dev/null
+++ b/debian/bin/gencontrol.py
@@ -0,0 +1,740 @@
+#!/usr/bin/python3
+
+import sys
+import locale
+import io
+import os
+import os.path
+import subprocess
+import re
+
+from debian_linux import config
+from debian_linux.debian import PackageDescription, PackageRelation, \
+    PackageRelationEntry, PackageRelationGroup, VersionLinux
+from debian_linux.gencontrol import Gencontrol as Base, merge_packages, \
+    iter_featuresets, iter_flavours
+from debian_linux.utils import Templates, read_control
+
+locale.setlocale(locale.LC_CTYPE, "C.UTF-8")
+
+
+class Gencontrol(Base):
+    config_schema = {
+        'abi': {
+            'ignore-changes': config.SchemaItemList(),
+        },
+        'build': {
+            'debug-info': config.SchemaItemBoolean(),
+            'signed-code': config.SchemaItemBoolean(),
+            'vdso': config.SchemaItemBoolean(),
+        },
+        'description': {
+            'parts': config.SchemaItemList(),
+        },
+        'image': {
+            'bootloaders': config.SchemaItemList(),
+            'configs': config.SchemaItemList(),
+            'initramfs-generators': config.SchemaItemList(),
+            'check-size': config.SchemaItemInteger(),
+            'check-size-with-dtb': config.SchemaItemBoolean(),
+            'check-uncompressed-size': config.SchemaItemInteger(),
+            'depends': config.SchemaItemList(','),
+            'provides': config.SchemaItemList(','),
+            'suggests': config.SchemaItemList(','),
+            'recommends': config.SchemaItemList(','),
+            'conflicts': config.SchemaItemList(','),
+            'breaks': config.SchemaItemList(','),
+        },
+        'relations': {
+        },
+        'packages': {
+            'docs': config.SchemaItemBoolean(),
+            'installer': config.SchemaItemBoolean(),
+            'libc-dev': config.SchemaItemBoolean(),
+            'meta': config.SchemaItemBoolean(),
+            'tools-unversioned': config.SchemaItemBoolean(),
+            'tools-versioned': config.SchemaItemBoolean(),
+            'source': config.SchemaItemBoolean(),
+        }
+    }
+
+    env_flags = [
+        ('DEBIAN_KERNEL_DISABLE_DEBUG', 'disable_debug', 'debug infos'),
+        ('DEBIAN_KERNEL_DISABLE_INSTALLER', 'disable_installer', 'installer modules'),
+        ('DEBIAN_KERNEL_DISABLE_SIGNED', 'disable_signed', 'signed code'),
+    ]
+
+    def __init__(self, config_dirs=["debian/config"],
+                 template_dirs=["debian/templates"]):
+        super(Gencontrol, self).__init__(
+            config.ConfigCoreHierarchy(self.config_schema, config_dirs),
+            Templates(template_dirs),
+            VersionLinux)
+        self.process_changelog()
+        self.config_dirs = config_dirs
+
+        for env, attr, desc in self.env_flags:
+            setattr(self, attr, False)
+            if os.getenv(env):
+                if self.changelog[0].distribution == 'UNRELEASED':
+                    import warnings
+                    warnings.warn(f'Disable {desc} on request ({env} set)')
+                    setattr(self, attr, True)
+                else:
+                    raise RuntimeError(
+                        f'Unable to disable {desc} in release build ({env} set)')
+
+    def _setup_makeflags(self, names, makeflags, data):
+        for src, dst, optional in names:
+            if src in data or not optional:
+                makeflags[dst] = data[src]
+
+    def do_main_setup(self, vars, makeflags, extra):
+        super(Gencontrol, self).do_main_setup(vars, makeflags, extra)
+        makeflags.update({
+            'VERSION': self.version.linux_version,
+            'UPSTREAMVERSION': self.version.linux_upstream,
+            'ABINAME': self.abiname_version + self.abiname_part,
+            'SOURCEVERSION': self.version.complete,
+        })
+        makeflags['SOURCE_BASENAME'] = vars['source_basename']
+        makeflags['SOURCE_SUFFIX'] = vars['source_suffix']
+
+        # Prepare to generate debian/tests/control
+        self.tests_control = self.process_packages(
+            self.templates['tests-control.main'], vars)
+        self.tests_control_image = None
+
+        self.installer_packages = {}
+
+        if not self.disable_installer and self.config.merge('packages').get('installer', True):
+            # Add udebs using kernel-wedge
+            kw_env = os.environ.copy()
+            kw_env['KW_DEFCONFIG_DIR'] = 'debian/installer'
+            kw_env['KW_CONFIG_DIR'] = 'debian/installer'
+            kw_proc = subprocess.Popen(
+                ['kernel-wedge', 'gen-control', vars['abiname']],
+                stdout=subprocess.PIPE,
+                env=kw_env)
+            if not isinstance(kw_proc.stdout, io.IOBase):
+                udeb_packages = read_control(io.open(kw_proc.stdout.fileno(),
+                                                     closefd=False))
+            else:
+                udeb_packages = read_control(io.TextIOWrapper(kw_proc.stdout))
+            kw_proc.wait()
+            if kw_proc.returncode != 0:
+                raise RuntimeError('kernel-wedge exited with code %d' %
+                                   kw_proc.returncode)
+
+            # All architectures that have some installer udebs
+            arches = set()
+            for package in udeb_packages:
+                arches.update(package['Architecture'])
+
+            # Code-signing status for those architectures
+            # If we're going to build signed udebs later, don't actually
+            # generate udebs.  Just test that we *can* build, so we find
+            # configuration errors before building linux-signed.
+            build_signed = {}
+            for arch in arches:
+                if not self.disable_signed:
+                    build_signed[arch] = self.config.merge('build', arch) \
+                                                    .get('signed-code', False)
+                else:
+                    build_signed[arch] = False
+
+            for package in udeb_packages:
+                # kernel-wedge currently chokes on Build-Profiles so add it now
+                if any(build_signed[arch] for arch in package['Architecture']):
+                    assert all(build_signed[arch]
+                               for arch in package['Architecture'])
+                    # XXX This is a hack to exclude the udebs from
+                    # the package list while still being able to
+                    # convince debhelper and kernel-wedge to go
+                    # part way to building them.
+                    package['Build-Profiles'] = (
+                        '<pkg.linux.udeb-unsigned-test-build>')
+                else:
+                    package['Build-Profiles'] = '<!stage1 !pkg.linux.nokernel>'
+
+                for arch in package['Architecture']:
+                    self.installer_packages.setdefault(arch, []) \
+                                           .append(package)
+
+    def do_main_makefile(self, makefile, makeflags, extra):
+        for featureset in iter_featuresets(self.config):
+            makeflags_featureset = makeflags.copy()
+            makeflags_featureset['FEATURESET'] = featureset
+            cmds_source = ["$(MAKE) -f debian/rules.real source-featureset %s"
+                           % makeflags_featureset]
+            makefile.add('source_%s_real' % featureset, cmds=cmds_source)
+            makefile.add('source_%s' % featureset,
+                         ['source_%s_real' % featureset])
+            makefile.add('source', ['source_%s' % featureset])
+
+        makeflags = makeflags.copy()
+        makeflags['ALL_FEATURESETS'] = ' '.join(iter_featuresets(self.config))
+        super(Gencontrol, self).do_main_makefile(makefile, makeflags, extra)
+
+    def do_main_packages(self, packages, vars, makeflags, extra):
+        packages.extend(self.process_packages(
+            self.templates["control.main"], vars))
+
+        # Only build the metapackages if their names won't exactly match
+        # the packages they depend on
+        do_meta = self.config.merge('packages').get('meta', True) \
+            and vars['source_suffix'] != '-' + vars['version']
+
+        if self.config.merge('packages').get('docs', True):
+            packages.extend(self.process_packages(
+                self.templates["control.docs"], vars))
+            if do_meta:
+                packages.extend(self.process_packages(
+                    self.templates["control.docs.meta"], vars))
+                self.substitute_debhelper_config(
+                    'docs.meta', vars,
+                    '%(source_basename)s-doc%(source_suffix)s' % vars)
+        if self.config.merge('packages').get('tools-unversioned', True):
+            packages.extend(self.process_packages(
+                self.templates["control.tools-unversioned"], vars))
+        if self.config.merge('packages').get('tools-versioned', True):
+            packages.extend(self.process_packages(
+                self.templates["control.tools-versioned"], vars))
+            self.substitute_debhelper_config('perf', vars,
+                                              'linux-perf-%(version)s' % vars)
+            if do_meta:
+                packages.extend(self.process_packages(
+                    self.templates["control.tools-versioned.meta"], vars))
+                self.substitute_debhelper_config('perf.meta', vars,
+                                                  'linux-perf')
+        if self.config.merge('packages').get('source', True):
+            packages.extend(self.process_packages(
+                self.templates["control.sourcebin"], vars))
+            if do_meta:
+                packages.extend(self.process_packages(
+                    self.templates["control.sourcebin.meta"], vars))
+                self.substitute_debhelper_config(
+                    'sourcebin.meta', vars,
+                    '%(source_basename)s-source%(source_suffix)s' % vars)
+
+    def do_indep_featureset_setup(self, vars, makeflags, featureset, extra):
+        makeflags['LOCALVERSION'] = vars['localversion']
+        kernel_arches = set()
+        for arch in iter(self.config['base', ]['arches']):
+            if self.config.get_merge('base', arch, featureset, None,
+                                     'flavours'):
+                kernel_arches.add(self.config['base', arch]['kernel-arch'])
+        makeflags['ALL_KERNEL_ARCHES'] = ' '.join(sorted(list(kernel_arches)))
+
+        vars['featureset_desc'] = ''
+        if featureset != 'none':
+            desc = self.config[('description', None, featureset)]
+            desc_parts = desc['parts']
+            vars['featureset_desc'] = (' with the %s featureset' %
+                                       desc['part-short-%s' % desc_parts[0]])
+
+    def do_indep_featureset_packages(self, packages, makefile, featureset,
+                                     vars, makeflags, extra):
+        headers_featureset = self.templates["control.headers.featureset"]
+        packages.extend(self.process_packages(headers_featureset, vars))
+
+        cmds_binary_arch = ["$(MAKE) -f debian/rules.real "
+                            "binary-indep-featureset %s" %
+                            makeflags]
+        makefile.add('binary-indep_%s_real' % featureset,
+                     cmds=cmds_binary_arch)
+
+    arch_makeflags = (
+        ('kernel-arch', 'KERNEL_ARCH', False),
+    )
+
+    def do_arch_setup(self, vars, makeflags, arch, extra):
+        config_base = self.config.merge('base', arch)
+
+        self._setup_makeflags(self.arch_makeflags, makeflags, config_base)
+
+        try:
+            gnu_type_bytes = subprocess.check_output(
+                ['dpkg-architecture', '-f', '-a', arch,
+                 '-q', 'DEB_HOST_GNU_TYPE'],
+                stderr=subprocess.DEVNULL)
+        except subprocess.CalledProcessError:
+            # This sometimes happens for the newest ports :-/
+            print('W: Unable to get GNU type for %s' % arch, file=sys.stderr)
+        else:
+            vars['gnu-type-package'] = (
+                gnu_type_bytes.decode('utf-8').strip().replace('_', '-'))
+
+    def do_arch_packages(self, packages, makefile, arch, vars, makeflags,
+                         extra):
+        if self.version.linux_modifier is None:
+            try:
+                abiname_part = '-%s' % self.config['abi', arch]['abiname']
+            except KeyError:
+                abiname_part = self.abiname_part
+            makeflags['ABINAME'] = vars['abiname'] = \
+                self.abiname_version + abiname_part
+
+        if not self.disable_signed:
+            build_signed = self.config.merge('build', arch) \
+                                      .get('signed-code', False)
+        else:
+            build_signed = False
+
+        if self.config.merge('packages').get('libc-dev', True):
+            libc_dev = self.templates["control.libc-dev"]
+            merge_packages(packages, self.process_packages(libc_dev, {}), arch)
+
+        if self.config['base', arch].get('featuresets') and \
+           self.config.merge('packages').get('source', True):
+            merge_packages(packages,
+                           self.process_packages(
+                               self.templates["control.config"], vars),
+                           arch)
+
+        cmds_build_arch = ["$(MAKE) -f debian/rules.real build-arch-arch %s" %
+                           makeflags]
+        makefile.add('build-arch_%s_real' % arch, cmds=cmds_build_arch)
+
+        cmds_binary_arch = ["$(MAKE) -f debian/rules.real binary-arch-arch %s"
+                            % makeflags]
+        makefile.add('binary-arch_%s_real' % arch, cmds=cmds_binary_arch,
+                     deps=['setup_%s' % arch])
+
+        udeb_packages = self.installer_packages.get(arch, [])
+        if udeb_packages:
+            merge_packages(packages, udeb_packages, arch)
+
+            # These packages must be built after the per-flavour/
+            # per-featureset packages.  Also, this won't work
+            # correctly with an empty package list.
+            makefile.add(
+                'binary-arch_%s' % arch,
+                cmds=["$(MAKE) -f debian/rules.real install-udeb_%s %s "
+                      "PACKAGE_NAMES='%s' UDEB_UNSIGNED_TEST_BUILD=%s" %
+                      (arch, makeflags,
+                       ' '.join(p['Package'] for p in udeb_packages),
+                       build_signed)])
+
+        # This also needs to be built after the per-flavour/per-featureset
+        # packages.
+        if build_signed:
+            merge_packages(packages,
+                           self.process_packages(
+                               self.templates['control.signed-template'],
+                               vars),
+                           arch)
+            makefile.add(
+                'binary-arch_%s' % arch,
+                cmds=["$(MAKE) -f debian/rules.real "
+                      "install-signed-template_%s %s" %
+                      (arch, makeflags)])
+
+    def do_featureset_setup(self, vars, makeflags, arch, featureset, extra):
+        vars['localversion_headers'] = vars['localversion']
+        makeflags['LOCALVERSION_HEADERS'] = vars['localversion_headers']
+
+        self.default_flavour = self.config.merge('base', arch, featureset) \
+                                          .get('default-flavour')
+        if self.default_flavour is not None:
+            if featureset != 'none':
+                raise RuntimeError("default-flavour set for %s %s,"
+                                   " but must only be set for featureset none"
+                                   % (arch, featureset))
+            if self.default_flavour \
+               not in iter_flavours(self.config, arch, featureset):
+                raise RuntimeError("default-flavour %s for %s %s does not exist"
+                                   % (self.default_flavour, arch, featureset))
+
+    flavour_makeflags_base = (
+        ('compiler', 'COMPILER', False),
+        ('compiler-filename', 'COMPILER', True),
+        ('kernel-arch', 'KERNEL_ARCH', False),
+        ('cflags', 'KCFLAGS', True),
+        ('override-host-type', 'OVERRIDE_HOST_TYPE', True),
+        ('cross-compile-compat', 'CROSS_COMPILE_COMPAT', True),
+    )
+
+    flavour_makeflags_build = (
+        ('image-file', 'IMAGE_FILE', True),
+    )
+
+    flavour_makeflags_image = (
+        ('install-stem', 'IMAGE_INSTALL_STEM', True),
+    )
+
+    flavour_makeflags_other = (
+        ('localversion', 'LOCALVERSION', False),
+        ('localversion-image', 'LOCALVERSION_IMAGE', True),
+    )
+
+    def do_flavour_setup(self, vars, makeflags, arch, featureset, flavour,
+                         extra):
+        config_base = self.config.merge('base', arch, featureset, flavour)
+        config_build = self.config.merge('build', arch, featureset, flavour)
+        config_description = self.config.merge('description', arch, featureset,
+                                               flavour)
+        config_image = self.config.merge('image', arch, featureset, flavour)
+
+        vars['flavour'] = vars['localversion'][1:]
+        vars['class'] = config_description['hardware']
+        vars['longclass'] = (config_description.get('hardware-long')
+                             or vars['class'])
+
+        vars['localversion-image'] = vars['localversion']
+        override_localversion = config_image.get('override-localversion', None)
+        if override_localversion is not None:
+            vars['localversion-image'] = (vars['localversion_headers'] + '-'
+                                          + override_localversion)
+        vars['image-stem'] = config_image.get('install-stem')
+
+        self._setup_makeflags(self.flavour_makeflags_base, makeflags,
+                              config_base)
+        self._setup_makeflags(self.flavour_makeflags_build, makeflags,
+                              config_build)
+        self._setup_makeflags(self.flavour_makeflags_image, makeflags,
+                              config_image)
+        self._setup_makeflags(self.flavour_makeflags_other, makeflags, vars)
+
+    def do_flavour_packages(self, packages, makefile, arch, featureset,
+                            flavour, vars, makeflags, extra):
+        headers = self.templates["control.headers"]
+        assert len(headers) == 1
+
+        do_meta = self.config.merge('packages').get('meta', True)
+        config_entry_base = self.config.merge('base', arch, featureset,
+                                              flavour)
+        config_entry_build = self.config.merge('build', arch, featureset,
+                                               flavour)
+        config_entry_description = self.config.merge('description', arch,
+                                                     featureset, flavour)
+        config_entry_relations = self.config.merge('relations', arch,
+                                                   featureset, flavour)
+
+        def config_entry_image(key, *args, **kwargs):
+            return self.config.get_merge(
+                'image', arch, featureset, flavour, key, *args, **kwargs)
+
+        compiler = config_entry_base.get('compiler', 'gcc')
+
+        # Work out dependency from linux-headers to compiler.  Drop
+        # dependencies for cross-builds.  Strip any remaining
+        # restrictions, as they don't apply to binary Depends.
+        relations_compiler_headers = PackageRelation(
+            self.substitute(config_entry_relations.get('headers%' + compiler)
+                            or config_entry_relations.get(compiler), vars))
+        relations_compiler_headers = PackageRelation(
+            PackageRelationGroup(entry for entry in group
+                                 if 'cross' not in entry.restrictions)
+            for group in relations_compiler_headers)
+        for group in relations_compiler_headers:
+            for entry in group:
+                entry.restrictions = []
+
+        relations_compiler_build_dep = PackageRelation(
+            self.substitute(config_entry_relations[compiler], vars))
+        for group in relations_compiler_build_dep:
+            for item in group:
+                item.arches = [arch]
+        packages['source']['Build-Depends-Arch'].extend(
+            relations_compiler_build_dep)
+
+        image_fields = {'Description': PackageDescription()}
+        for field in ('Depends', 'Provides', 'Suggests', 'Recommends',
+                      'Conflicts', 'Breaks'):
+            image_fields[field] = PackageRelation(
+                config_entry_image(field.lower(), None),
+                override_arches=(arch,))
+
+        generators = config_entry_image('initramfs-generators')
+        group = PackageRelationGroup()
+        for i in generators:
+            i = config_entry_relations.get(i, i)
+            group.append(i)
+            a = PackageRelationEntry(i)
+            if a.operator is not None:
+                a.operator = -a.operator
+                image_fields['Breaks'].append(PackageRelationGroup([a]))
+        for item in group:
+            item.arches = [arch]
+        image_fields['Depends'].append(group)
+
+        bootloaders = config_entry_image('bootloaders', None)
+        if bootloaders:
+            group = PackageRelationGroup()
+            for i in bootloaders:
+                i = config_entry_relations.get(i, i)
+                group.append(i)
+                a = PackageRelationEntry(i)
+                if a.operator is not None:
+                    a.operator = -a.operator
+                    image_fields['Breaks'].append(PackageRelationGroup([a]))
+            for item in group:
+                item.arches = [arch]
+            image_fields['Suggests'].append(group)
+
+        desc_parts = self.config.get_merge('description', arch, featureset,
+                                           flavour, 'parts')
+        if desc_parts:
+            # XXX: Workaround, we need to support multiple entries of the same
+            # name
+            parts = list(set(desc_parts))
+            parts.sort()
+            desc = image_fields['Description']
+            for part in parts:
+                desc.append(config_entry_description['part-long-' + part])
+                desc.append_short(config_entry_description
+                                  .get('part-short-' + part, ''))
+
+        packages_own = []
+
+        if not self.disable_signed:
+            build_signed = config_entry_build.get('signed-code')
+        else:
+            build_signed = False
+
+        image = self.templates[build_signed and "control.image-unsigned"
+                               or "control.image"]
+        assert len(image) == 1
+
+        vars.setdefault('desc', None)
+
+        image_main = self.process_real_image(image[0], image_fields, vars)
+        packages_own.append(image_main)
+        makeflags['IMAGE_PACKAGE_NAME'] = image_main['Package']
+
+        package_headers = self.process_package(headers[0], vars)
+        package_headers['Depends'].extend(relations_compiler_headers)
+        packages_own.append(package_headers)
+        if extra.get('headers_arch_depends'):
+            extra['headers_arch_depends'].append('%s (= ${binary:Version})' %
+                                                 packages_own[-1]['Package'])
+
+        # The image meta-packages will depend on signed linux-image
+        # packages where applicable, so should be built from the
+        # signed source packages The header meta-packages will also be
+        # built along with the signed packages, to create a dependency
+        # relationship that ensures src:linux and src:linux-signed-*
+        # transition to testing together.
+        if do_meta and not build_signed:
+            packages_meta = self.process_packages(
+                self.templates['control.image.meta'], vars)
+            assert len(packages_meta) == 1
+            packages_meta += self.process_packages(
+                self.templates['control.headers.meta'], vars)
+            assert len(packages_meta) == 2
+
+            if flavour == self.default_flavour \
+               and not self.vars['source_suffix']:
+                packages_meta[0].setdefault('Provides', PackageRelation()) \
+                                .append('linux-image-generic')
+                packages_meta[1].setdefault('Provides', PackageRelation()) \
+                                .append('linux-headers-generic')
+
+            packages_own.extend(packages_meta)
+
+            self.substitute_debhelper_config(
+                "image.meta", vars,
+                "linux-image%(localversion)s" % vars)
+            self.substitute_debhelper_config(
+                'headers.meta', vars,
+                'linux-headers%(localversion)s' % vars)
+
+        if config_entry_build.get('vdso', False):
+            makeflags['VDSO'] = True
+
+        if not self.disable_debug:
+            build_debug = config_entry_build.get('debug-info')
+        else:
+            build_debug = False
+
+        if build_debug:
+            makeflags['DEBUG'] = True
+            packages_own.extend(self.process_packages(
+                self.templates['control.image-dbg'], vars))
+            if do_meta:
+                packages_own.extend(self.process_packages(
+                    self.templates["control.image-dbg.meta"], vars))
+                self.substitute_debhelper_config(
+                    'image-dbg.meta', vars,
+                    'linux-image%(localversion)s-dbg' % vars)
+
+        merge_packages(packages, packages_own, arch)
+
+        tests_control = self.process_package(
+            self.templates['tests-control.image'][0], vars)
+        tests_control['Depends'].append(
+            PackageRelationGroup(image_main['Package'],
+                                 override_arches=(arch,)))
+        if self.tests_control_image:
+            self.tests_control_image['Depends'].extend(
+                tests_control['Depends'])
+        else:
+            self.tests_control_image = tests_control
+            self.tests_control.append(tests_control)
+
+        def get_config(*entry_name):
+            entry_real = ('image',) + entry_name
+            entry = self.config.get(entry_real, None)
+            if entry is None:
+                return None
+            return entry.get('configs', None)
+
+        def check_config_default(fail, f):
+            for d in self.config_dirs[::-1]:
+                f1 = d + '/' + f
+                if os.path.exists(f1):
+                    return [f1]
+            if fail:
+                raise RuntimeError("%s unavailable" % f)
+            return []
+
+        def check_config_files(files):
+            ret = []
+            for f in files:
+                for d in self.config_dirs[::-1]:
+                    f1 = d + '/' + f
+                    if os.path.exists(f1):
+                        ret.append(f1)
+                        break
+                else:
+                    raise RuntimeError("%s unavailable" % f)
+            return ret
+
+        def check_config(default, fail, *entry_name):
+            configs = get_config(*entry_name)
+            if configs is None:
+                return check_config_default(fail, default)
+            return check_config_files(configs)
+
+        kconfig = check_config('config', True)
+        # XXX: We have no way to override kernelarch-X configs
+        kconfig.extend(check_config_default(False,
+                       "kernelarch-%s/config" % config_entry_base['kernel-arch']))
+        kconfig.extend(check_config("%s/config" % arch, True, arch))
+        kconfig.extend(check_config("%s/config.%s" % (arch, flavour), False,
+                                    arch, None, flavour))
+        kconfig.extend(check_config("featureset-%s/config" % featureset, False,
+                                    None, featureset))
+        kconfig.extend(check_config("%s/%s/config" % (arch, featureset), False,
+                                    arch, featureset))
+        kconfig.extend(check_config("%s/%s/config.%s" %
+                                    (arch, featureset, flavour), False,
+                                    arch, featureset, flavour))
+        makeflags['KCONFIG'] = ' '.join(kconfig)
+        makeflags['KCONFIG_OPTIONS'] = ''
+        if build_debug:
+            makeflags['KCONFIG_OPTIONS'] += ' -o DEBUG_INFO=y'
+        if build_signed:
+            makeflags['KCONFIG_OPTIONS'] += ' -o MODULE_SIG=y'
+        # Add "salt" to fix #872263
+        makeflags['KCONFIG_OPTIONS'] += \
+            ' -o "BUILD_SALT=\\"%(abiname)s%(localversion)s\\""' % vars
+        if config_entry_build.get('trusted-certs'):
+            makeflags['KCONFIG_OPTIONS'] += \
+                f' -o "SYSTEM_TRUSTED_KEYS=\\"${{CURDIR}}/{config_entry_build["trusted-certs"]}\\""'
+
+        cmds_binary_arch = ["$(MAKE) -f debian/rules.real binary-arch-flavour "
+                            "%s" %
+                            makeflags]
+        cmds_build = ["$(MAKE) -f debian/rules.real build-arch-flavour %s" %
+                      makeflags]
+        cmds_setup = ["$(MAKE) -f debian/rules.real setup-arch-flavour %s" %
+                      makeflags]
+        makefile.add('binary-arch_%s_%s_%s_real' % (arch, featureset, flavour),
+                     cmds=cmds_binary_arch)
+        makefile.add('build-arch_%s_%s_%s_real' % (arch, featureset, flavour),
+                     cmds=cmds_build)
+        makefile.add('setup_%s_%s_%s_real' % (arch, featureset, flavour),
+                     cmds=cmds_setup)
+
+        merged_config = ('debian/build/config.%s_%s_%s' %
+                         (arch, featureset, flavour))
+        makefile.add(merged_config,
+                     cmds=["$(MAKE) -f debian/rules.real %s %s" %
+                           (merged_config, makeflags)])
+
+        self.substitute_debhelper_config(
+            'headers', vars,
+            'linux-headers-%(abiname)s%(localversion)s' % vars)
+        self.substitute_debhelper_config('image', vars, image_main['Package'])
+        if build_debug:
+            self.substitute_debhelper_config(
+                'image-dbg', vars,
+                'linux-image-%(abiname)s%(localversion)s-dbg' % vars)
+
+    def process_changelog(self):
+        version = self.version = self.changelog[0].version
+        if self.version.linux_modifier is not None:
+            self.abiname_part = ''
+        else:
+            self.abiname_part = '-%s' % self.config['abi', ]['abiname']
+        # We need to keep at least three version components to avoid
+        # userland breakage (e.g. #742226, #745984).
+        self.abiname_version = re.sub(r'^(\d+\.\d+)(?=-|$)', r'\1.0',
+                                      self.version.linux_upstream)
+        self.vars = {
+            'upstreamversion': self.version.linux_upstream,
+            'version': self.version.linux_version,
+            'source_basename': re.sub(r'-[\d.]+$', '',
+                                      self.changelog[0].source),
+            'source_upstream': self.version.upstream,
+            'source_package': self.changelog[0].source,
+            'abiname': self.abiname_version + self.abiname_part,
+        }
+        self.vars['source_suffix'] = \
+            self.changelog[0].source[len(self.vars['source_basename']):]
+        self.config['version', ] = {'source': self.version.complete,
+                                    'upstream': self.version.linux_upstream,
+                                    'abiname_base': self.abiname_version,
+                                    'abiname': (self.abiname_version
+                                                + self.abiname_part)}
+
+        distribution = self.changelog[0].distribution
+        if distribution in ('unstable', ):
+            if version.linux_revision_experimental or \
+               version.linux_revision_backports or \
+               version.linux_revision_other:
+                raise RuntimeError("Can't upload to %s with a version of %s" %
+                                   (distribution, version))
+        if distribution in ('experimental', ):
+            if not version.linux_revision_experimental:
+                raise RuntimeError("Can't upload to %s with a version of %s" %
+                                   (distribution, version))
+        if distribution.endswith('-security') or distribution.endswith('-lts'):
+            if version.linux_revision_backports or \
+               version.linux_revision_other:
+                raise RuntimeError("Can't upload to %s with a version of %s" %
+                                   (distribution, version))
+        if distribution.endswith('-backports'):
+            if not version.linux_revision_backports:
+                raise RuntimeError("Can't upload to %s with a version of %s" %
+                                   (distribution, version))
+
+    def process_real_image(self, entry, fields, vars):
+        entry = self.process_package(entry, vars)
+        for key, value in fields.items():
+            if key in entry:
+                real = entry[key]
+                real.extend(value)
+            elif value:
+                entry[key] = value
+        return entry
+
+    def write(self, packages, makefile):
+        self.write_config()
+        super(Gencontrol, self).write(packages, makefile)
+        self.write_tests_control()
+
+    def write_config(self):
+        f = open("debian/config.defines.dump", 'wb')
+        self.config.dump(f)
+        f.close()
+
+    def write_tests_control(self):
+        self.write_rfc822(open("debian/tests/control", 'w'),
+                          self.tests_control)
+
+
+if __name__ == '__main__':
+    Gencontrol()()
diff --git a/debian/bin/gencontrol_signed.py b/debian/bin/gencontrol_signed.py
new file mode 100755
index 000000000000..3015cc4f2310
--- /dev/null
+++ b/debian/bin/gencontrol_signed.py
@@ -0,0 +1,358 @@
+#!/usr/bin/python3
+
+import codecs
+import hashlib
+import io
+import json
+import os.path
+import re
+import ssl
+import subprocess
+import sys
+
+from debian_linux.config import ConfigCoreDump
+from debian_linux.debian import PackageRelation, VersionLinux
+from debian_linux.gencontrol import Gencontrol as Base, merge_packages, \
+    iter_flavours
+from debian_linux.utils import Templates, read_control
+
+
+class Gencontrol(Base):
+    def __init__(self, arch):
+        super(Gencontrol, self).__init__(
+            ConfigCoreDump(fp=open('debian/config.defines.dump', 'rb')),
+            Templates(['debian/signing_templates', 'debian/templates']))
+
+        image_binary_version = self.changelog[0].version.complete
+
+        config_entry = self.config[('version',)]
+        self.version = VersionLinux(config_entry['source'])
+
+        # Check config version matches changelog version
+        assert self.version.complete == re.sub(r'\+b\d+$', r'',
+                                               image_binary_version)
+
+        self.abiname = config_entry['abiname']
+        self.vars = {
+            'upstreamversion': self.version.linux_upstream,
+            'version': self.version.linux_version,
+            'source_basename': re.sub(r'-[\d.]+$', '',
+                                      self.changelog[0].source),
+            'source_upstream': self.version.upstream,
+            'abiname': self.abiname,
+            'imagebinaryversion': image_binary_version,
+            'imagesourceversion': self.version.complete,
+            'arch': arch,
+        }
+        self.vars['source_suffix'] = \
+            self.changelog[0].source[len(self.vars['source_basename']):]
+        self.vars['template'] = \
+            'linux-image%(source_suffix)s-%(arch)s-signed-template' % self.vars
+
+        self.package_dir = 'debian/%(template)s' % self.vars
+        self.template_top_dir = (self.package_dir
+                                 + '/usr/share/code-signing/%(template)s'
+                                 % self.vars)
+        self.template_debian_dir = (self.template_top_dir
+                                    + '/source-template/debian')
+        os.makedirs(self.template_debian_dir, exist_ok=True)
+
+        self.image_packages = []
+
+    def do_main_setup(self, vars, makeflags, extra):
+        makeflags['VERSION'] = self.version.linux_version
+        makeflags['GENCONTROL_ARGS'] = (
+            '-v%(imagebinaryversion)s '
+            '-DBuilt-Using="linux (= %(imagesourceversion)s)"' %
+            vars)
+        makeflags['PACKAGE_VERSION'] = vars['imagebinaryversion']
+
+        self.installer_packages = {}
+
+        if os.getenv('DEBIAN_KERNEL_DISABLE_INSTALLER'):
+            if self.changelog[0].distribution == 'UNRELEASED':
+                import warnings
+                warnings.warn('Disable installer modules on request '
+                              '(DEBIAN_KERNEL_DISABLE_INSTALLER set)')
+            else:
+                raise RuntimeError(
+                    'Unable to disable installer modules in release build '
+                    '(DEBIAN_KERNEL_DISABLE_INSTALLER set)')
+        elif self.config.merge('packages').get('installer', True):
+            # Add udebs using kernel-wedge
+            kw_env = os.environ.copy()
+            kw_env['KW_DEFCONFIG_DIR'] = 'debian/installer'
+            kw_env['KW_CONFIG_DIR'] = 'debian/installer'
+            kw_proc = subprocess.Popen(
+                ['kernel-wedge', 'gen-control', vars['abiname']],
+                stdout=subprocess.PIPE,
+                env=kw_env)
+            if not isinstance(kw_proc.stdout, io.IOBase):
+                udeb_packages = read_control(io.open(kw_proc.stdout.fileno(),
+                                                     closefd=False))
+            else:
+                udeb_packages = read_control(io.TextIOWrapper(kw_proc.stdout))
+            kw_proc.wait()
+            if kw_proc.returncode != 0:
+                raise RuntimeError('kernel-wedge exited with code %d' %
+                                   kw_proc.returncode)
+
+            for package in udeb_packages:
+                for arch in package['Architecture']:
+                    if self.config.merge('build', arch) \
+                                  .get('signed-code', False):
+                        self.installer_packages.setdefault(arch, []) \
+                                               .append(package)
+
+    def do_main_packages(self, packages, vars, makeflags, extra):
+        # Assume that arch:all packages do not get binNMU'd
+        packages['source']['Build-Depends'].append(
+            'linux-support-%(abiname)s (= %(imagesourceversion)s)' % vars)
+
+    def do_main_recurse(self, packages, makefile, vars, makeflags, extra):
+        # Each signed source package only covers a single architecture
+        self.do_arch(packages, makefile, vars['arch'], vars.copy(),
+                     makeflags.copy(), extra)
+
+    def do_extra(self, packages, makefile):
+        pass
+
+    def do_arch_setup(self, vars, makeflags, arch, extra):
+        super(Gencontrol, self).do_main_setup(vars, makeflags, extra)
+
+        if self.version.linux_modifier is None:
+            abiname_part = '-%s' % self.config.merge('abi', arch)['abiname']
+        else:
+            abiname_part = ''
+        makeflags['ABINAME'] = vars['abiname'] = \
+            self.config['version', ]['abiname_base'] + abiname_part
+
+    def do_arch_packages(self, packages, makefile, arch, vars, makeflags,
+                         extra):
+        udeb_packages = self.installer_packages.get(arch, [])
+        if udeb_packages:
+            merge_packages(packages, udeb_packages, arch)
+
+            # These packages must be built after the per-flavour/
+            # per-featureset packages.  Also, this won't work
+            # correctly with an empty package list.
+            if udeb_packages:
+                makefile.add(
+                    'binary-arch_%s' % arch,
+                    cmds=["$(MAKE) -f debian/rules.real install-udeb_%s %s "
+                          "PACKAGE_NAMES='%s'" %
+                          (arch, makeflags,
+                           ' '.join(p['Package'] for p in udeb_packages))])
+
+    def do_featureset_setup(self, vars, makeflags, arch, featureset, extra):
+        self.default_flavour = self.config.merge('base', arch, featureset) \
+                                          .get('default-flavour')
+        if self.default_flavour is not None:
+            if featureset != 'none':
+                raise RuntimeError("default-flavour set for %s %s,"
+                                   " but must only be set for featureset none"
+                                   % (arch, featureset))
+            if self.default_flavour \
+               not in iter_flavours(self.config, arch, featureset):
+                raise RuntimeError("default-flavour %s for %s %s does not exist"
+                                   % (self.default_flavour, arch, featureset))
+
+    def do_flavour_setup(self, vars, makeflags, arch, featureset, flavour,
+                         extra):
+        super(Gencontrol, self).do_flavour_setup(vars, makeflags, arch,
+                                                 featureset, flavour, extra)
+
+        config_description = self.config.merge('description', arch, featureset,
+                                               flavour)
+        config_image = self.config.merge('image', arch, featureset, flavour)
+
+        vars['flavour'] = vars['localversion'][1:]
+        vars['class'] = config_description['hardware']
+        vars['longclass'] = (config_description.get('hardware-long')
+                             or vars['class'])
+
+        vars['image-stem'] = config_image.get('install-stem')
+        makeflags['IMAGE_INSTALL_STEM'] = vars['image-stem']
+
+    def do_flavour_packages(self, packages, makefile, arch, featureset,
+                            flavour, vars, makeflags, extra):
+        config_build = self.config.merge('build', arch, featureset, flavour)
+        if not config_build.get('signed-code', False):
+            return
+
+        image_suffix = '%(abiname)s%(localversion)s' % vars
+        image_package_name = 'linux-image-%s-unsigned' % image_suffix
+
+        # Verify that this flavour is configured to support Secure Boot,
+        # and get the trusted certificates filename.
+        with open('debian/%s/boot/config-%s' %
+                  (image_package_name, image_suffix)) as f:
+            kconfig = f.readlines()
+        assert 'CONFIG_EFI_STUB=y\n' in kconfig
+        assert 'CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y\n' in kconfig
+        cert_file_name = config_build['trusted-certs']
+        self.image_packages.append((image_suffix, image_package_name,
+                                    cert_file_name))
+
+        packages['source']['Build-Depends'].append(
+            image_package_name
+            + ' (= %(imagebinaryversion)s) [%(arch)s]' % vars)
+
+        packages_own = self.process_packages(
+            self.templates['control.image'], vars)
+        assert len(packages_own) == 1
+        cmds_binary_arch = ["$(MAKE) -f debian/rules.real install-signed "
+                            "PACKAGE_NAME='%s' %s" %
+                            (packages_own[0]['Package'], makeflags)]
+
+        if self.config.merge('packages').get('meta', True):
+            packages_meta = self.process_packages(
+                self.templates['control.image.meta'], vars)
+            assert len(packages_meta) == 1
+            packages_meta += self.process_packages(
+                self.templates['control.headers.meta'], vars)
+            assert len(packages_meta) == 2
+
+            # Don't pretend to support build-profiles
+            for package in packages_meta:
+                del package['Build-Profiles']
+
+            if flavour == self.default_flavour \
+               and not self.vars['source_suffix']:
+                packages_meta[0].setdefault('Provides', PackageRelation()) \
+                                .append('linux-image-generic')
+                packages_meta[1].setdefault('Provides', PackageRelation()) \
+                                .append('linux-headers-generic')
+
+            packages_own.extend(packages_meta)
+
+            cmds_binary_arch += [
+                "$(MAKE) -f debian/rules.real install-meta "
+                "PACKAGE_NAME='%s' LINK_DOC_PACKAGE_NAME='%s' %s" %
+                (package['Package'], package['Depends'][0][0].name, makeflags)
+                for package in packages_meta
+            ]
+
+            self.substitute_debhelper_config(
+                'image.meta', vars,
+                'linux-image%(localversion)s' % vars,
+                output_dir=self.template_debian_dir)
+            self.substitute_debhelper_config(
+                'headers.meta', vars,
+                'linux-headers%(localversion)s' % vars,
+                output_dir=self.template_debian_dir)
+
+        merge_packages(packages, packages_own, arch)
+        makefile.add('binary-arch_%s_%s_%s_real' % (arch, featureset, flavour),
+                     cmds=cmds_binary_arch)
+
+        self.substitute_debhelper_config(
+            'image', vars,
+            'linux-image-%(abiname)s%(localversion)s' % vars,
+            output_dir=self.template_debian_dir)
+
+    def write(self, packages, makefile):
+        self.write_changelog()
+        self.write_control(packages.values(),
+                           name=(self.template_debian_dir + '/control'))
+        self.write_makefile(makefile,
+                            name=(self.template_debian_dir + '/rules.gen'))
+        self.write_files_json()
+
+    def write_changelog(self):
+        # Copy the linux changelog, but:
+        # * Change the source package name and version
+        # * Insert a line to refer to refer to the linux source version
+        vars = self.vars.copy()
+        vars['source'] = self.changelog[0].source
+        vars['distribution'] = self.changelog[0].distribution
+        vars['urgency'] = self.changelog[0].urgency
+        vars['signedsourceversion'] = \
+            re.sub(r'\+b(\d+)$', r'.b\1',
+                   re.sub(r'-', r'+', vars['imagebinaryversion']))
+
+        with codecs.open(self.template_debian_dir + '/changelog', 'w',
+                         'utf-8') as f:
+            f.write(self.substitute('''\
+linux-signed@source_suffix@-@arch@ (@signedsourceversion@) @distribution@; urgency=@urgency@
+
+  * Sign kernel from @source@ @imagebinaryversion@
+
+''',
+                                    vars))
+
+            with codecs.open('debian/changelog', 'r', 'utf-8') as changelog_in:
+                # Ignore first two header lines
+                changelog_in.readline()
+                changelog_in.readline()
+
+                for d in changelog_in.read():
+                    f.write(d)
+
+    def write_files_json(self):
+        # Can't raise from a lambda function :-(
+        def raise_func(e):
+            raise e
+
+        # Some functions in openssl work with multiple concatenated
+        # PEM-format certificates, but others do not.
+        def get_certs(file_name):
+            certs = []
+            BEGIN, MIDDLE = 0, 1
+            state = BEGIN
+            with open(file_name) as f:
+                for line in f:
+                    if line == '-----BEGIN CERTIFICATE-----\n':
+                        assert state == BEGIN
+                        certs.append([])
+                        state = MIDDLE
+                    elif line == '-----END CERTIFICATE-----\n':
+                        assert state == MIDDLE
+                        state = BEGIN
+                    else:
+                        assert line[0] != '-'
+                        assert state == MIDDLE
+                    certs[-1].append(line)
+            assert state == BEGIN
+            return [''.join(cert_lines) for cert_lines in certs]
+
+        def get_cert_fingerprint(cert, algo):
+            hasher = hashlib.new(algo)
+            hasher.update(ssl.PEM_cert_to_DER_cert(cert))
+            return hasher.hexdigest()
+
+        all_files = {'packages': {}}
+
+        for image_suffix, image_package_name, cert_file_name in \
+                self.image_packages:
+            package_dir = 'debian/%s' % image_package_name
+            package_files = []
+            package_modules = []
+            package_files.append({'sig_type': 'efi',
+                                  'file': 'boot/vmlinuz-%s' % image_suffix})
+            for root, dirs, files in os.walk('%s/lib/modules' % package_dir,
+                                             onerror=raise_func):
+                for name in files:
+                    if name.endswith('.ko'):
+                        package_modules.append(
+                            '%s/%s' %
+                            (root[(len(package_dir) + 1):], name))
+            package_modules.sort()
+            for module in package_modules:
+                package_files.append(
+                    {'sig_type': 'linux-module',
+                     'file': module})
+            package_certs = [get_cert_fingerprint(cert, 'sha256')
+                             for cert in get_certs(cert_file_name)]
+            assert len(package_certs) >= 1
+            all_files['packages'][image_package_name] = {
+                'trusted_certs': package_certs,
+                'files': package_files
+            }
+
+        with codecs.open(self.template_top_dir + '/files.json', 'w') as f:
+            json.dump(all_files, f)
+
+
+if __name__ == '__main__':
+    Gencontrol(sys.argv[1])()
diff --git a/debian/bin/genorig.py b/debian/bin/genorig.py
new file mode 100755
index 000000000000..aabdd5a9fc30
--- /dev/null
+++ b/debian/bin/genorig.py
@@ -0,0 +1,203 @@
+#!/usr/bin/python3
+
+import sys
+from debian import deb822
+import glob
+import os
+import os.path
+import re
+import shutil
+import subprocess
+import time
+import warnings
+
+from debian_linux.debian import Changelog, VersionLinux
+
+
+class Main(object):
+    def __init__(self, input_files, override_version):
+        self.log = sys.stdout.write
+
+        self.input_files = input_files
+
+        changelog = Changelog(version=VersionLinux)[0]
+        source = changelog.source
+        version = changelog.version
+
+        if override_version:
+            version = VersionLinux('%s-0' % override_version)
+
+        self.version_dfsg = version.linux_dfsg
+        if self.version_dfsg is None:
+            self.version_dfsg = '0'
+
+        self.log('Using source name %s, version %s, dfsg %s\n' %
+                 (source, version.upstream, self.version_dfsg))
+
+        self.orig = '%s-%s' % (source, version.upstream)
+        self.orig_tar = '%s_%s.orig.tar.xz' % (source, version.upstream)
+        self.tag = 'v' + version.linux_upstream_full
+
+    def __call__(self):
+        import tempfile
+        self.dir = tempfile.mkdtemp(prefix='genorig', dir='debian')
+        old_umask = os.umask(0o022)
+        try:
+            if os.path.isdir(self.input_files[0]):
+                self.upstream_export(self.input_files[0])
+            else:
+                self.upstream_extract(self.input_files[0])
+            if len(self.input_files) > 1:
+                self.upstream_patch(self.input_files[1])
+
+            # exclude_files() will change dir mtimes.  Capture the
+            # original release time so we can apply it to the final
+            # tarball.  Note this doesn't work in case we apply an
+            # upstream patch, as that doesn't carry a release time.
+            orig_date = time.strftime(
+                "%a, %d %b %Y %H:%M:%S +0000",
+                time.gmtime(
+                    os.stat(os.path.join(self.dir, self.orig, 'Makefile'))
+                    .st_mtime))
+
+            self.exclude_files()
+            os.umask(old_umask)
+            self.tar(orig_date)
+        finally:
+            os.umask(old_umask)
+            shutil.rmtree(self.dir)
+
+    def upstream_export(self, input_repo):
+        self.log("Exporting %s from %s\n" % (self.tag, input_repo))
+
+        gpg_wrapper = os.path.join(os.getcwd(),
+                                   "debian/bin/git-tag-gpg-wrapper")
+        verify_proc = subprocess.Popen(['git',
+                                        '-c', 'gpg.program=%s' % gpg_wrapper,
+                                        'tag', '-v', self.tag],
+                                       cwd=input_repo)
+        if verify_proc.wait():
+            raise RuntimeError("GPG tag verification failed")
+
+        archive_proc = subprocess.Popen(['git', 'archive', '--format=tar',
+                                         '--prefix=%s/' % self.orig, self.tag],
+                                        cwd=input_repo,
+                                        stdout=subprocess.PIPE)
+        extract_proc = subprocess.Popen(['tar', '-xaf', '-'], cwd=self.dir,
+                                        stdin=archive_proc.stdout)
+
+        ret1 = archive_proc.wait()
+        ret2 = extract_proc.wait()
+        if ret1 or ret2:
+            raise RuntimeError("Can't create archive")
+
+    def upstream_extract(self, input_tar):
+        self.log("Extracting tarball %s\n" % input_tar)
+        match = re.match(r'(^|.*/)(?P<dir>linux-\d+\.\d+(\.\d+)?(-\S+)?)\.tar'
+                         r'(\.(?P<extension>(bz2|gz|xz)))?$',
+                         input_tar)
+        if not match:
+            raise RuntimeError("Can't identify name of tarball")
+
+        cmdline = ['tar', '-xaf', input_tar, '-C', self.dir]
+
+        if subprocess.Popen(cmdline).wait():
+            raise RuntimeError("Can't extract tarball")
+
+        os.rename(os.path.join(self.dir, match.group('dir')),
+                  os.path.join(self.dir, self.orig))
+
+    def upstream_patch(self, input_patch):
+        self.log("Patching source with %s\n" % input_patch)
+        match = re.match(r'(^|.*/)patch-\d+\.\d+(\.\d+)?(-\S+?)?'
+                         r'(\.(?P<extension>(bz2|gz|xz)))?$',
+                         input_patch)
+        if not match:
+            raise RuntimeError("Can't identify name of patch")
+        cmdline = []
+        if match.group('extension') == 'bz2':
+            cmdline.append('bzcat')
+        elif match.group('extension') == 'gz':
+            cmdline.append('zcat')
+        elif match.group('extension') == 'xz':
+            cmdline.append('xzcat')
+        else:
+            cmdline.append('cat')
+        cmdline.append(input_patch)
+        cmdline.append('| (cd %s; patch -p1 -f -s -t --no-backup-if-mismatch)'
+                       % os.path.join(self.dir, self.orig))
+        if os.spawnv(os.P_WAIT, '/bin/sh', ['sh', '-c', ' '.join(cmdline)]):
+            raise RuntimeError("Can't patch source")
+
+    def exclude_files(self):
+        self.log("Excluding file patterns specified in debian/copyright\n")
+        with open("debian/copyright") as f:
+            header = deb822.Deb822(f)
+        patterns = header.get("Files-Excluded", '').strip().split()
+        for pattern in patterns:
+            matched = False
+            for name in glob.glob(os.path.join(self.dir, self.orig, pattern)):
+                try:
+                    shutil.rmtree(name)
+                except NotADirectoryError:
+                    os.unlink(name)
+                matched = True
+            if not matched:
+                warnings.warn("Exclusion pattern '%s' did not match anything"
+                              % pattern,
+                              RuntimeWarning)
+
+    def tar(self, orig_date):
+        out = os.path.join("../orig", self.orig_tar)
+        try:
+            os.mkdir("../orig")
+        except OSError:
+            pass
+        try:
+            os.stat(out)
+            raise RuntimeError("Destination already exists")
+        except OSError:
+            pass
+        self.log("Generate tarball %s\n" % out)
+
+        env = os.environ.copy()
+        env.update({
+            'LC_ALL': 'C',
+        })
+        cmd = [
+            'tar',
+            '-C', self.dir,
+            '--sort=name',
+            '--mtime={}'.format(orig_date),
+            '--owner=root',
+            '--group=root',
+            '--use-compress-program=xz -T0',
+            '-cf',
+            out, self.orig,
+        ]
+
+        try:
+            subprocess.run(cmd, env=env, check=True)
+            os.chmod(out, 0o644)
+        except BaseException:
+            try:
+                os.unlink(out)
+            except OSError:
+                pass
+            raise
+        try:
+            os.symlink(os.path.join('orig', self.orig_tar),
+                       os.path.join('..', self.orig_tar))
+        except OSError:
+            pass
+
+
+if __name__ == '__main__':
+    from optparse import OptionParser
+    parser = OptionParser(usage="%prog [OPTION]... {TAR [PATCH] | REPO}")
+    parser.add_option("-V", "--override-version", dest="override_version",
+                      help="Override version", metavar="VERSION")
+    options, args = parser.parse_args()
+
+    assert 1 <= len(args) <= 2
+    Main(args, options.override_version)()
diff --git a/debian/bin/genpatch-aufs b/debian/bin/genpatch-aufs
new file mode 100755
index 000000000000..8f69f0f0f60e
--- /dev/null
+++ b/debian/bin/genpatch-aufs
@@ -0,0 +1,32 @@
+#!/bin/bash -e
+
+aufs_dir="$1"
+
+export GIT_DIR="$aufs_dir/.git"
+
+from_line='From: J. R. Okajima <hooanon05@yahoo.co.jp>'
+if [ -d "$GIT_DIR" ]; then
+    origin_line="Origin: https://github.com/sfjro/aufs5-standalone/tree/$(git rev-list HEAD -1)"
+else
+    echo >&2 "W: Cannot include a specific origin URL without an aufs git repo"
+    origin_line='Origin: https://github.com/sfjro/aufs5-standalone/branches'
+fi
+bug_line='Bug-Debian: https://bugs.debian.org/541828'
+
+mkdir -p debian/patches/features/all/aufs5
+for patch in aufs5-{base,mmap,standalone}.patch; do
+    {
+	echo "$from_line"
+	if [ -d "$GIT_DIR" ]; then
+	    git log --pretty='Date: %ad' HEAD -1 -- "$patch"
+	fi
+	echo -n 'Subject: '
+	grep -v '^SPDX-License-Identifier:' "$aufs_dir/$patch" | head -1
+	echo "$origin_line"
+	echo "$bug_line"
+	echo
+	echo 'Patch headers added by debian/bin/genpatch-aufs'
+	echo
+	sed 's/^+.*EXPORT_SYMBOL\b/&_GPL/' < "$aufs_dir"/"$patch"
+    } > debian/patches/features/all/aufs5/"$patch"
+done
diff --git a/debian/bin/genpatch-lockdown b/debian/bin/genpatch-lockdown
new file mode 100755
index 000000000000..1aed0c735245
--- /dev/null
+++ b/debian/bin/genpatch-lockdown
@@ -0,0 +1,109 @@
+#!/usr/bin/python3
+
+import io
+import os
+import os.path
+import re
+import subprocess
+import sys
+
+
+def main(repo, range='torvalds/master..dhowells/efi-lock-down'):
+    patch_dir = 'debian/patches'
+    lockdown_patch_dir = 'features/all/lockdown'
+    series_name = 'series'
+
+    # Only replace patches in this subdirectory and starting with a digit
+    # - the others are presumably Debian-specific for now
+    lockdown_patch_name_re = re.compile(
+        r'^' + re.escape(lockdown_patch_dir) + r'/\d')
+    series_before = []
+    series_after = []
+
+    old_series = set()
+    new_series = set()
+
+    try:
+        with open(os.path.join(patch_dir, series_name), 'r') as series_fh:
+            for line in series_fh:
+                name = line.strip()
+                if lockdown_patch_name_re.match(name):
+                    old_series.add(name)
+                elif len(old_series) == 0:
+                    series_before.append(line)
+                else:
+                    series_after.append(line)
+    except FileNotFoundError:
+        pass
+
+    with open(os.path.join(patch_dir, series_name), 'w') as series_fh:
+        for line in series_before:
+            series_fh.write(line)
+
+        # Add directory prefix to all filenames.
+        # Add Origin to all patch headers.
+        def add_patch(name, source_patch, origin):
+            name = os.path.join(lockdown_patch_dir, name)
+            path = os.path.join(patch_dir, name)
+            try:
+                os.unlink(path)
+            except FileNotFoundError:
+                pass
+            with open(path, 'w') as patch:
+                in_header = True
+                for line in source_patch:
+                    if in_header and re.match(r'^(\n|[^\w\s]|Index:)', line):
+                        patch.write('Origin: %s\n' % origin)
+                        if line != '\n':
+                            patch.write('\n')
+                        in_header = False
+                    patch.write(line)
+            series_fh.write(name)
+            series_fh.write('\n')
+            new_series.add(name)
+
+        # XXX No signature to verify
+
+        env = os.environ.copy()
+        env['GIT_DIR'] = os.path.join(repo, '.git')
+        args = ['git', 'format-patch', '--subject-prefix=', range]
+        format_proc = subprocess.Popen(args,
+                                       cwd=os.path.join(patch_dir,
+                                                        lockdown_patch_dir),
+                                       env=env, stdout=subprocess.PIPE)
+        with io.open(format_proc.stdout.fileno(), encoding='utf-8') as pipe:
+            for line in pipe:
+                name = line.strip('\n')
+                with open(os.path.join(patch_dir, lockdown_patch_dir, name)) \
+                     as source_patch:
+                    patch_from = source_patch.readline()
+                    match = re.match(r'From ([0-9a-f]{40}) ', patch_from)
+                    assert match
+                    origin = ('https://git.kernel.org/pub/scm/linux/kernel/'
+                              'git/dhowells/linux-fs.git/commit?id=%s' %
+                              match.group(1))
+                    add_patch(name, source_patch, origin)
+
+        for line in series_after:
+            series_fh.write(line)
+
+    for name in new_series:
+        if name in old_series:
+            old_series.remove(name)
+        else:
+            print('Added patch', os.path.join(patch_dir, name))
+
+    for name in old_series:
+        print('Obsoleted patch', os.path.join(patch_dir, name))
+
+
+if __name__ == '__main__':
+    if not (2 <= len(sys.argv) <= 3):
+        sys.stderr.write('''\
+Usage: %s REPO [REVISION-RANGE]
+REPO is a git repo containing the REVISION-RANGE.  The default range is
+torvalds/master..dhowells/efi-lock-down.
+''' % sys.argv[0])
+        print('BASE is the base branch (default: torvalds/master).')
+        sys.exit(2)
+    main(*sys.argv[1:])
diff --git a/debian/bin/genpatch-rt b/debian/bin/genpatch-rt
new file mode 100755
index 000000000000..e61b5f2423a6
--- /dev/null
+++ b/debian/bin/genpatch-rt
@@ -0,0 +1,152 @@
+#!/usr/bin/python3
+
+import codecs
+import io
+import os
+import os.path
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+
+
+def main(source, version=None):
+    patch_dir = 'debian/patches-rt'
+    series_name = 'series'
+    old_series = set()
+    new_series = set()
+
+    try:
+        with open(os.path.join(patch_dir, series_name), 'r') as series_fh:
+            for line in series_fh:
+                name = line.strip()
+                if name != '' and name[0] != '#':
+                    old_series.add(name)
+    except FileNotFoundError:
+        pass
+
+    with open(os.path.join(patch_dir, series_name), 'w') as series_fh:
+        # Add Origin to all patch headers.
+        def add_patch(name, source_patch, origin):
+            path = os.path.join(patch_dir, name)
+            try:
+                os.unlink(path)
+            except FileNotFoundError:
+                pass
+            with open(path, 'w') as patch:
+                in_header = True
+                for line in source_patch:
+                    if in_header and re.match(r'^(\n|[^\w\s]|Index:)', line):
+                        patch.write('Origin: %s\n' % origin)
+                        if line != '\n':
+                            patch.write('\n')
+                        in_header = False
+                    patch.write(line)
+            new_series.add(name)
+
+        if os.path.isdir(os.path.join(source, '.git')):
+            # Export rebased branch from stable-rt git as patch series
+            up_ver = re.sub(r'-rt\d+$', '', version)
+            env = os.environ.copy()
+            env['GIT_DIR'] = os.path.join(source, '.git')
+            env['DEBIAN_KERNEL_KEYRING'] = 'rt-signing-key.pgp'
+
+            # Validate tag signature
+            gpg_wrapper = os.path.join(os.getcwd(),
+                                       "debian/bin/git-tag-gpg-wrapper")
+            verify_proc = subprocess.Popen(
+                ['git', '-c', 'gpg.program=%s' % gpg_wrapper,
+                 'tag', '-v', 'v%s-rebase' % version],
+                env=env)
+            if verify_proc.wait():
+                raise RuntimeError("GPG tag verification failed")
+
+            args = ['git', 'format-patch',
+                    'v%s..v%s-rebase' % (up_ver, version)]
+            format_proc = subprocess.Popen(args,
+                                           cwd=patch_dir,
+                                           env=env, stdout=subprocess.PIPE)
+            with io.open(format_proc.stdout.fileno(), encoding='utf-8') \
+                 as pipe:
+                for line in pipe:
+                    name = line.strip('\n')
+                    with open(os.path.join(patch_dir, name)) as source_patch:
+                        patch_from = source_patch.readline()
+                        match = re.match(r'From ([0-9a-f]{40}) ', patch_from)
+                        assert match
+                        origin = ('https://git.kernel.org/cgit/linux/kernel/'
+                                  'git/rt/linux-stable-rt.git/commit?id=%s' %
+                                  match.group(1))
+                        add_patch(name, source_patch, origin)
+                        series_fh.write(line)
+
+        else:
+            # Get version and upstream version
+            if version is None:
+                match = re.search(r'(?:^|/)patches-(.+)\.tar\.[gx]z$', source)
+                assert match, 'no version specified or found in filename'
+                version = match.group(1)
+            match = re.match(r'^(\d+\.\d+)(?:\.\d+|-rc\d+)?-rt\d+$', version)
+            assert match, 'could not parse version string'
+            up_ver = match.group(1)
+
+            # Expect an accompanying signature, and validate it
+            source_sig = re.sub(r'.[gx]z$', '.sign', source)
+            unxz_proc = subprocess.Popen(['xzcat', source],
+                                         stdout=subprocess.PIPE)
+            verify_output = subprocess.check_output(
+                ['gpgv', '--status-fd', '1',
+                 '--keyring', 'debian/upstream/rt-signing-key.pgp',
+                 '--ignore-time-conflict', source_sig, '-'],
+                stdin=unxz_proc.stdout)
+            if unxz_proc.wait() or \
+               not re.search(r'^\[GNUPG:\]\s+VALIDSIG\s',
+                             codecs.decode(verify_output),
+                             re.MULTILINE):
+                os.write(2, verify_output)  # bytes not str!
+                raise RuntimeError("GPG signature verification failed")
+
+            temp_dir = tempfile.mkdtemp(prefix='rt-genpatch', dir='debian')
+            try:
+                # Unpack tarball
+                subprocess.check_call(['tar', '-C', temp_dir, '-xaf', source])
+                source_dir = os.path.join(temp_dir, 'patches')
+                assert os.path.isdir(source_dir), \
+                    'tarball does not contain patches directory'
+
+                # Copy patch series
+                origin = ('https://www.kernel.org/pub/linux/kernel/projects/'
+                          'rt/%s/older/patches-%s.tar.xz' %
+                          (up_ver, version))
+                with open(os.path.join(source_dir, 'series'), 'r') \
+                     as source_series_fh:
+                    for line in source_series_fh:
+                        name = line.strip()
+                        if name != '' and name[0] != '#':
+                            with open(os.path.join(source_dir, name)) \
+                                 as source_patch:
+                                add_patch(name, source_patch, origin)
+                        series_fh.write(line)
+            finally:
+                shutil.rmtree(temp_dir)
+
+    for name in new_series:
+        if name in old_series:
+            old_series.remove(name)
+        else:
+            print('Added patch', os.path.join(patch_dir, name))
+
+    for name in old_series:
+        print('Obsoleted patch', os.path.join(patch_dir, name))
+
+
+if __name__ == '__main__':
+    if not (1 <= len(sys.argv) <= 3):
+        print('Usage: %s {TAR [RT-VERSION] | REPO RT-VERSION}' % sys.argv[0],
+              file=sys.stderr)
+        print('TAR is a tarball of patches.', file=sys.stderr)
+        print('REPO is a git repo containing the given RT-VERSION.',
+              file=sys.stderr)
+        sys.exit(2)
+    main(*sys.argv[1:])
diff --git a/debian/bin/getconfig.py b/debian/bin/getconfig.py
new file mode 100755
index 000000000000..b719a17a1299
--- /dev/null
+++ b/debian/bin/getconfig.py
@@ -0,0 +1,25 @@
+#!/usr/bin/python3
+
+import sys
+
+from debian_linux.config import ConfigCoreDump
+
+section = tuple(s or None for s in sys.argv[1:-1])
+key = sys.argv[-1]
+config = ConfigCoreDump(fp=open("debian/config.defines.dump", "rb"))
+try:
+    value = config[section][key]
+except KeyError:
+    sys.exit(1)
+
+if isinstance(value, str):
+    # Don't iterate over it
+    print(value)
+else:
+    # In case it's a sequence, try printing each item
+    try:
+        for item in value:
+            print(item)
+    except TypeError:
+        # Otherwise use the default format
+        print(value)
diff --git a/debian/bin/git-tag-gpg-wrapper b/debian/bin/git-tag-gpg-wrapper
new file mode 100755
index 000000000000..9982b014082c
--- /dev/null
+++ b/debian/bin/git-tag-gpg-wrapper
@@ -0,0 +1,33 @@
+#!/bin/bash -e
+
+# Instead of calling gpg, call gpgv and provide a local keyring
+
+debian_dir="$(readlink -f "$(dirname "$0")/..")"
+
+# Parse the expected options.  If the next two lines are combined, a
+# failure of getopt won't cause the script to exit.
+ordered_args="$(getopt -n "$0" -o "" -l "status-fd:" -l "keyid-format:" -l "verify" -- "$@")"
+eval "set -- $ordered_args"
+gpgv_opts=()
+while true; do
+    case "$1" in
+	--status-fd)
+	    gpgv_opts+=(--status-fd $2)
+	    shift 2
+	    ;;
+	--keyid-format)
+	    # ignore
+	    shift 2
+	    ;;
+	--verify)
+	    # ignore
+	    shift 1
+	    ;;
+	--)
+	    shift 1
+	    break
+	    ;;
+    esac
+done
+
+exec gpgv "${gpgv_opts[@]}" --keyring "$debian_dir/upstream/${DEBIAN_KERNEL_KEYRING:-signing-key.pgp}" -- "$@"
diff --git a/debian/bin/kconfig.py b/debian/bin/kconfig.py
new file mode 100755
index 000000000000..6115355f46e3
--- /dev/null
+++ b/debian/bin/kconfig.py
@@ -0,0 +1,39 @@
+#!/usr/bin/python3
+
+import optparse
+import re
+
+from debian_linux.kconfig import KconfigFile
+
+
+def merge(output, configs, overrides):
+    kconfig = KconfigFile()
+    for c in configs:
+        kconfig.read(open(c))
+    for key, value in overrides.items():
+        kconfig.set(key, value)
+    open(output, "w").write(str(kconfig))
+
+
+def opt_callback_dict(option, opt, value, parser):
+    match = re.match(r'^\s*(\S+)=(\S+)\s*$', value)
+    if not match:
+        raise optparse.OptionValueError('not key=value')
+    dest = option.dest
+    data = getattr(parser.values, dest)
+    data[match.group(1)] = match.group(2)
+
+
+if __name__ == '__main__':
+    parser = optparse.OptionParser(usage="%prog [OPTION]... FILE...")
+    parser.add_option(
+        '-o', '--override',
+        action='callback',
+        callback=opt_callback_dict,
+        default={},
+        dest='overrides',
+        help="Override option",
+        type='string')
+    options, args = parser.parse_args()
+
+    merge(args[0], args[1:], options.overrides)
diff --git a/debian/bin/no-depmod b/debian/bin/no-depmod
new file mode 100755
index 000000000000..ed5a8463f16d
--- /dev/null
+++ b/debian/bin/no-depmod
@@ -0,0 +1,18 @@
+#!/bin/sh
+
+set -e
+
+# This is a dummy substitute for depmod.  Since we run depmod during
+# postinst, we do not need or want to package the files that it
+# generates.
+
+if [ "x$1" = x-V ]; then
+    # Satisfy version test
+    echo 'not really module-init-tools'
+elif [ "x$1" = x-b -a "${2%/depmod.??????}" != "$2" ]; then
+    # Satisfy test of short kernel versions
+    mkdir -p "$2/lib/modules/$3"
+    touch "$2/lib/modules/$3/modules.dep"
+else
+    echo 'skipping depmod'
+fi
diff --git a/debian/bin/stable-update b/debian/bin/stable-update
new file mode 100755
index 000000000000..0ce6112bb5c3
--- /dev/null
+++ b/debian/bin/stable-update
@@ -0,0 +1,135 @@
+#!/usr/bin/python3
+
+import sys
+import os
+import re
+import subprocess
+
+from debian_linux.debian import Changelog, VersionLinux
+
+
+def base_version(ver):
+    # Assume base version is at least 3.0, thus only 2 components wanted
+    match = re.match(r'^(\d+\.\d+)', ver)
+    assert match
+    return match.group(1)
+
+
+def add_update(ver, inc):
+    base = base_version(ver)
+    if base == ver:
+        update = 0
+    else:
+        update = int(ver[len(base)+1:])
+    update += inc
+    if update == 0:
+        return base
+    else:
+        return '{}.{}'.format(base, update)
+
+
+def next_update(ver):
+    return add_update(ver, 1)
+
+
+def print_stable_log(log, cur_ver, new_ver):
+    major_ver = re.sub(r'^(\d+)\..*', r'\1', cur_ver)
+    while cur_ver != new_ver:
+        next_ver = next_update(cur_ver)
+        print('    https://www.kernel.org/pub/linux/kernel/v{}.x/ChangeLog-{}'
+              .format(major_ver, next_ver),
+              file=log)
+        log.flush()  # serialise our output with git's
+        subprocess.check_call(['git', 'log', '--reverse',
+                               '--pretty=    - %s',
+                               'v{}..v{}^'.format(cur_ver, next_ver)],
+                              stdout=log)
+        cur_ver = next_ver
+
+
+def main(repo, new_ver):
+    if os.path.exists(os.path.join(repo, '.git')):
+        os.environ['GIT_DIR'] = os.path.join(repo, '.git')
+    else:
+        os.environ['GIT_DIR'] = repo
+
+    changelog = Changelog(version=VersionLinux)
+    cur_pkg_ver = changelog[0].version
+    cur_ver = cur_pkg_ver.linux_upstream_full
+
+    if base_version(new_ver) != base_version(cur_ver):
+        print('{} is not on the same stable series as {}'
+              .format(new_ver, cur_ver),
+              file=sys.stderr)
+        sys.exit(2)
+
+    new_pkg_ver = new_ver + '-1'
+    if cur_pkg_ver.linux_revision_experimental:
+        new_pkg_ver += '~exp1'
+
+    # Three possible cases:
+    # 1. The current version has been released so we need to add a new
+    #    version to the changelog.
+    # 2. The current version has not been released so we're changing its
+    #    version string.
+    #    (a) There are no stable updates included in the current version,
+    #        so we need to insert an introductory line, the URL(s) and
+    #        git log(s) and a blank line at the top.
+    #    (b) One or more stable updates are already included in the current
+    #        version, so we need to insert the URL(s) and git log(s) after
+    #        them.
+
+    changelog_intro = 'New upstream stable update:'
+
+    # Case 1
+    if changelog[0].distribution != 'UNRELEASED':
+        subprocess.check_call(['dch', '-v', new_pkg_ver, '-D', 'UNRELEASED',
+                               changelog_intro])
+
+    with open('debian/changelog', 'r') as old_log:
+        with open('debian/changelog.new', 'w') as new_log:
+            line_no = 0
+            inserted = False
+            intro_line = '  * {}\n'.format(changelog_intro)
+
+            for line in old_log:
+                line_no += 1
+
+                # Case 2
+                if changelog[0].distribution == 'UNRELEASED' and line_no == 1:
+                    print('{} ({}) UNRELEASED; urgency={}'
+                          .format(changelog[0].source, new_pkg_ver,
+                                  changelog[0].urgency),
+                          file=new_log)
+                    continue
+
+                if not inserted:
+                    # Case 2(a)
+                    if line_no == 3 and line != intro_line:
+                        new_log.write(intro_line)
+                        print_stable_log(new_log, cur_ver, new_ver)
+                        new_log.write('\n')
+                        inserted = True
+                    # Case 1 or 2(b)
+                    elif line_no > 3 and line == '\n':
+                        print_stable_log(new_log, cur_ver, new_ver)
+                        inserted = True
+
+                # Check that we inserted before hitting the end of the
+                # first version entry
+                assert not (line.startswith(' -- ') and not inserted)
+
+                new_log.write(line)
+
+    os.rename('debian/changelog.new', 'debian/changelog')
+
+
+if __name__ == '__main__':
+    if len(sys.argv) != 3:
+        print('''\
+Usage: {} REPO VERSION
+REPO is the git repository to generate a changelog from
+VERSION is the stable version (without leading v)'''.format(sys.argv[0]),
+              file=sys.stderr)
+        sys.exit(2)
+    main(*sys.argv[1:])
diff --git a/debian/bin/stable-update.sh b/debian/bin/stable-update.sh
new file mode 100755
index 000000000000..bd86860c63fc
--- /dev/null
+++ b/debian/bin/stable-update.sh
@@ -0,0 +1,2 @@
+#!/bin/sh -e
+exec "$(dirname "$0")/stable-update" "$@"
diff --git a/debian/bin/test-patches b/debian/bin/test-patches
new file mode 100755
index 000000000000..7ddd3b4956af
--- /dev/null
+++ b/debian/bin/test-patches
@@ -0,0 +1,105 @@
+#!/bin/bash
+
+set -e
+shopt -s extglob
+
+# Set defaults from the running kernel
+arch="$(dpkg --print-architecture)"
+kernelabi="$(uname -r)"
+ff="${kernelabi#+([^-])-@(trunk|?(rc)+([0-9])|+([0-9]).bpo.+([0-9]))-}"
+if [ "x$ff" != "x$kernelabi" ]; then
+    flavour="${ff#@(openvz|rt|vserver|xen)-}"
+    if [ "x$flavour" != "x$ff" ]; then
+	featureset="${ff%-$flavour}"
+    else
+	featureset=none
+    fi
+else
+    flavour=
+    featureset=none
+fi
+
+fuzz=0
+jobs=$(nproc)
+
+eval "set -- $(getopt -n "$0" -o "f:j:s:" -l "fuzz:" -- "$@")"
+while true; do
+    case "$1" in
+	-f) flavour="$2"; shift 2 ;;
+	-j) jobs="$2"; shift 2 ;;
+	-s) featureset="$2"; shift 2 ;;
+	--fuzz) fuzz="$2"; shift 2;;
+	--) shift 1; break ;;
+    esac
+done
+	    
+if [ $# -lt 1 ]; then
+    echo >&2 "Usage: $0 [<options>] <patch>..."
+    cat >&2 <<EOF
+Options:
+     -f <flavour>     specify the 'flavour' of kernel to build, e.g. 686-pae
+     -j <jobs>        specify number of compiler jobs to run in parallel
+                      (default: number of available processors)
+     -s <featureset>  specify an optional featureset to apply, e.g. rt
+     --fuzz <num>     set the maximum patch fuzz factor (default: 0)
+EOF
+    exit 2
+fi
+
+if [ -z "$flavour" ]; then
+    echo >&2 "You must specify a flavour to build with the -f option"
+    exit 2
+fi
+
+export DEB_BUILD_PROFILES=pkg.linux.notools
+export MAKEFLAGS="$MAKEFLAGS -j$jobs"
+
+dpkg-checkbuilddeps -B
+
+# Append 'a~test' to Debian version; this should be less than any official
+# successor and easily recognisable
+version="$(dpkg-parsechangelog | sed 's/^Version: //; t; d')"
+if [ "${version%a~test}" = "$version" ]; then
+    version="$version"a~test
+    dch -v "$version" --distribution UNRELEASED "Testing patches $*"
+fi
+
+# Ignore user's .quiltrc
+alias quilt='quilt --quiltrc -'
+
+# Try to clean up any previous test patches
+if [ "$featureset" = none ]; then
+    patchdir=debian/patches
+    while patch="$(quilt next 2>/dev/null || quilt top 2>/dev/null)" && \
+	[ "${patch#test/}" != "$patch" ]; do
+        quilt delete -r "$patch"
+    done
+else
+    patchdir=debian/patches-${featureset}
+    sed -i '/^test\//d' $patchdir/series
+fi
+
+# Prepare a new directory for the patches
+rm -rf $patchdir/test/
+mkdir $patchdir/test
+
+# Regenerate control and included rules
+rm debian/control debian/rules.gen
+debian/rules debian/control-real && exit 1 || true
+test -f debian/control
+test -f debian/rules.gen
+
+# Clean up old build; apply existing patches for featureset
+debian/rules clean
+debian/rules source
+
+# Apply the additional patches
+for patch in "$@"; do
+    patch_abs="$(readlink -f "$patch")"
+    (cd "debian/build/source_${featureset}" && \
+     quilt import -P "test/$(basename "$patch")" "$patch_abs" && \
+     quilt push --fuzz="$fuzz")
+done
+
+# Build selected binaries
+fakeroot make -f debian/rules.gen binary-arch_"$arch"_"$featureset"_"$flavour"
diff --git a/debian/bin/update-bug-taint-list b/debian/bin/update-bug-taint-list
new file mode 100755
index 000000000000..76bb1fc2e03e
--- /dev/null
+++ b/debian/bin/update-bug-taint-list
@@ -0,0 +1,24 @@
+#!/bin/sh -eu
+
+temp="$(mktemp)"
+trap 'rm -f "$temp"' EXIT
+
+# Copy everything above the existing flag checks.
+sed -rne '/^ +_check /q; p' \
+  < debian/templates/image.bug/include-1tainted >"$temp"
+
+# Generate flag checks from the table in tainted-kernels.rst.  We
+# could alternatively extract them from sysctl/kernel.rst or in the C
+# sources, but this is easy to find and parse and is likely to have
+# the most useful descriptions.
+sed -rne '/^Bit +Log +Number +Reason/,/^$/ {
+              s/^ *([0-9]+) +.\/(.) +[0-9]+ +(.*)/    _check \1 \2 '\''\3'\''/p
+	  }' \
+  < Documentation/admin-guide/tainted-kernels.rst >>"$temp"
+
+# Copy everything below the existing flag checks.
+sed -rne '/^ +echo "\*\* Tainted:/,$p' \
+  < debian/templates/image.bug/include-1tainted >>"$temp"
+
+# Update the bug script in-place.
+cp "$temp" debian/templates/image.bug/include-1tainted
diff --git a/debian/certs/debian-uefi-certs.pem b/debian/certs/debian-uefi-certs.pem
new file mode 100644
index 000000000000..26c5facc084a
--- /dev/null
+++ b/debian/certs/debian-uefi-certs.pem
@@ -0,0 +1,41 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/debian/certs/wireless-regdb-benh@debian.org.pem b/debian/certs/wireless-regdb-benh@debian.org.pem
new file mode 100644
index 000000000000..da3981d84f1a
--- /dev/null
+++ b/debian/certs/wireless-regdb-benh@debian.org.pem
@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/debian/certs/wireless-regdb-romain.perier@gmail.com.pem b/debian/certs/wireless-regdb-romain.perier@gmail.com.pem
new file mode 100644
index 000000000000..b20d608e88ee
--- /dev/null
+++ b/debian/certs/wireless-regdb-romain.perier@gmail.com.pem
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 000000000000..2657511bfded
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,18058 @@
+linux (5.16~rc2-1~exp1) UNRELEASED; urgency=medium
+
+  * New upstream release candidate
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.16-rc2-rt4
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 22 Nov 2021 12:57:16 +0100
+
+linux (5.16~rc1-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.16-rc1-rt2
+  * fs/ksmbd: Enable SMB_SERVER as module (Closes: #998835)
+
+  [ Aurelien Jarno ]
+  * [riscv64] Enable VIRTUALIZATION and KVM.
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 19 Nov 2021 22:45:28 +0100
+
+linux (5.15.3-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3
+    - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
+      (CVE-2021-3640)
+
+  [ Vincent Blut ]
+  * [arm64] sound/soc/meson: Enable SND_MESON_AXG_SOUND_CARD as module
+    (Closes: #999638)
+  * [arm64,armhf] sound/soc/meson: Enable SND_MESON_GX_SOUND_CARD as module
+  * drivers/bluetooth: Enable BT_HCIBTUSB_MTK (Closes: #999748)
+
+  [ Salvatore Bonaccorso ]
+  * mac80211: fix radiotap header generation
+  * [rt] Update to 5.15.2-rt20
+  * [rt] Refresh "printk: introduce kernel sync mode"
+  * [rt] Refresh "printk: move console printing to kthreads"
+  * [rt] Drop "rcutorture: Avoid problematic critical section nesting on
+    PREEMPT_RT"
+  * [rt] Drop "lockdep: Let lock_is_held_type() detect recursive read as read"
+  * [rt] Refresh "x86/softirq: Disable softirq stacks on PREEMPT_RT"
+  * [rt] Refresh "POWERPC: Allow to enable RT"
+  * Set ABI to 1
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 18 Nov 2021 22:32:07 +0100
+
+linux (5.15.2-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.2
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.15-rt17 and reenable (Closes: #995466)
+  * perf srcline: Use long-running addr2line per DSO (Closes: #911815)
+  * Refresh "Export symbols needed by Android drivers"
+  * [rt] Update to 5.15.2-rt19
+  * Input: elantench - fix misreporting trackpoint coordinates (Closes: #989285)
+  * kernel/time: Enable NO_HZ_FULL (Closes: #804857)
+  * io-wq: serialize hash clear with wakeup (Closes: #996951)
+
+  [ Vincent Blut ]
+  * [x86] drivers/ptp: Enable PTP_1588_CLOCK_VMW as module
+  * drivers/ptp: Enable PTP_1588_CLOCK_DTE, PTP_1588_CLOCK_IDT82P33,
+    PTP_1588_CLOCK_IDTCM, PTP_1588_CLOCK_OCP as modules
+  * drivers/ptp, net: Enable DP83640_PHY, PTP_1588_CLOCK_INES,
+    NET_PTP_CLASSIFY, NETWORK_PHY_TIMESTAMPING
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 14 Nov 2021 14:27:40 +0100
+
+linux (5.15.1-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.1
+
+  [ Salvatore Bonaccorso ]
+  * [arm*] drop cc-option fallbacks for architecture selection
+  * net/tls: Enable TLS as module (Closes: #919807)
+
+  [ Diederik de Haas ]
+  * [x86] drivers/hwmon: Enable SENSORS_CORSAIR_PSU as module
+  * [arm64] drivers/hwmon: Enable SENSORS_GPIO_FAN as module
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 07 Nov 2021 11:22:47 +0100
+
+linux (5.15-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Diederik de Haas ]
+  * [arm*] drivers/led/trigger: Make LEDS_TRIGGER_HEARTBEAT builtin
+    (Closes: #992184)
+  * [arm64] sound/soc/codecs: Enable SND_SOC_SPDIF as module
+  * [armel/rpi] Enable RPi's clock framework and CPU Freq scaling
+  * [armel/rpi] Change default governor to 'ondemand' for RPi 0/0w/1
+    (Closes: #991921)
+  * [arm64] sound/soc/rockchip: Enable SND_SOC_ROCKCHIP_PDM as module
+  * [armel] Make explicit that -rpi kernel variant is for RPi 0/0w/1, not the
+    others
+
+  [ Nathan Schulte ]
+  * [arm64] drivers/staging/media/hantro: Enable VIDEO_HANTRO as module
+  * [arm64] drivers/staging/media/rkvdec: Enable VIDEO_ROCKCHIP_VDEC as module
+    (Closes: #993902)
+
+  [ Vincent Blut ]
+  * [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM, CRYPTO_SHA256_ARM and
+    CRYPTO_SHA512_ARM as modules
+  * [armhf] arch/arm/crypto: Enable most NEON based implementation of
+    cryptographic algorithms as modules
+  * [arm] Move CRYPTO_NHPOLY1305_NEON in armhf config file
+  * [arm64] drivers/gpu/drm/vmwgfx: Enable DRM_VMWGFX as module
+    (Closes: #995276)
+  * [armhf] sound/soc/sunxi: Enable SND_SUN4I_I2S as module (Closes: #971892)
+  * [armhf] drivers/gpu/drm/bridge/synopsys: Enable DRM_DW_HDMI_I2S_AUDIO as
+    module
+  * drivers/usb/serial: Enable USB_SERIAL_XR as module (Closes: #996962)
+  * drivers/bus/mhi: Enable MHI_BUS, MHI_BUS_PCI_GENERIC as modules
+    (Closes: #995407)
+  * drivers/net: Enable MHI_NET as module
+  * drivers/net/wwan: Enable WWAN, MHI_WWAN_CTRL as modules
+
+  [ YunQiang Su ]
+  * [mipsel,mips64el/loongson-3] linux-image: Recommend pmon-update
+
+  [ Salvatore Bonaccorso ]
+  * Compile with gcc-11 on all architectures
+  * [arm64] drivers/net: Enable VMXNET3 as module
+
+  [ Uwe Kleine-König ]
+  * [arm64] Enable various symbols for the librem5 devkit and iMX8MN Variscite
+    Symphony (Patches by Guido Günther and Ariel D'Alessandro)
+  * [armhf,arm64] Cherrypick fix for snvs_pwrkey to prevent a machine hang.
+
+  [ Heiko Thiery ]
+  * [arm64] drivers/mtd/spi-nor: enable MTD_SPI_NOR as module
+  * [arm64] drivers/net/can/spi: enable CAN_MCP251X as module
+  * [arm64] drivers/net/phy: enable MICROSEMI_PHY as module
+  * [arm64] drivers/net/usb: enable USB_NET_SMSC95XX as module
+
+  [ Ryutaroh Matsumoto ]
+  * [arm64] Enable TOUCHSCREEN_RASPBERRYPI_FW and
+    REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY (Closes: #977575)
+
+  [ Ariel D'Alessandro ]
+  * [arm64] drivers/regulator: Enable REGULATOR_BD718XX as module
+
+  [ Lubomir Rintel ]
+  * [armhf] Add support for Marvell MMP3
+  * [armhf] Enable SND_MMP_SOC_SSPA, COMMON_CLK_MMP2_AUDIO, PHY_MMP3_USB,
+    MFD_ENE_KB3930 and LEDS_ARIEL as modules.
+
+  [ Sean McAvoy ]
+  * [armel] marvell: Enable CONFIG_SENSORS_LM63 as a module.
+
+  [ Dan Stefura ]
+  * [arm64] enable i6300esb watchdog kernel module
+
+  [ Thore Sommer ]
+  * drivers/md: Enable DM_VERITY_FEC
+
+  [ Aurelien Jarno ]
+  * [riscv64] Enable NUMA (Closes: #993453)
+
+ -- Bastian Blank <bastian.blank@credativ.de>  Thu, 04 Nov 2021 09:01:01 +0100
+
+linux (5.14.16-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.13
+    - ext4: check and update i_disksize properly
+    - ext4: correct the error path of ext4_write_inline_data_end()
+    - [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
+    - ALSA: oxfw: fix transmission method for Loud models based on OXFW971
+    - ALSA: usb-audio: Unify mixer resume and reset_resume procedure
+    - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
+    - netfilter: ip6_tables: zero-initialize fragment offset
+    - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
+    - [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid
+      batching
+    - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
+    - netfilter: nf_nat_masquerade: defer conntrack walk to work queue
+    - mac80211: Drop frames from invalid MAC address in ad-hoc mode
+    - [m68k] Handle arrivals of multiple signals correctly
+    - net: prevent user from passing illegal stab size
+    - mac80211: check return value of rhashtable_init
+    - [x86] vboxfs: fix broken legacy mount signature checking
+    - drm/amdgpu: fix gart.bo pin_count leak
+    - scsi: ses: Fix unsigned comparison with less than zero
+    - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
+    - scsi: qla2xxx: Fix excessive messages during device logout
+    - perf/core: fix userpage->time_enabled of inactive events
+    - sched: Always inline is_percpu_thread()
+    - io_uring: kill fasync
+    - [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.14
+    - ALSA: usb-audio: Add quirk for VF0770
+    - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
+    - ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer
+    - ALSA: seq: Fix a potential UAF by wrong private_free call order
+    - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
+    - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
+    - ALSA: hda/realtek: Complete partial device name to avoid ambiguity
+    - ALSA: hda/realtek: Add quirk for Clevo X170KM-G
+    - ALSA: hda/realtek - ALC236 headset MIC recording issue
+    - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
+    - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
+      13s Gen2
+    - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
+    - [amd64] platform/x86: amd-pmc: Add alternative acpi id for PMC controller
+    - dm: fix mempool NULL pointer race when completing IO
+    - [x86] ACPI: PM: Include alternate AMDI0005 id in special behaviour
+    - dm rq: don't queue request to blk-mq during DM suspend
+    - [s390x] fix strrchr() implementation
+    - drm/fbdev: Clamp fbdev surface size if too large
+    - [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
+    - drm/nouveau/fifo: Reinstate the correct engine bit programming
+    - [arm64] drm/msm: Do not run snapshot on non-DPU devices
+    - [arm64] drm/msm: Avoid potential overflow in timeout_to_jiffies()
+    - btrfs: unlock newly allocated extent buffer after error
+    - btrfs: deal with errors when replaying dir entry during log replay
+    - btrfs: deal with errors when adding inode reference during log replay
+    - btrfs: check for error when looking up inode during dir entry replay
+    - btrfs: update refs for any root except tree log roots
+    - btrfs: fix abort logic in btrfs_replace_file_extents
+    - [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
+    - [x86] mei: me: add Ice Lake-N device id.
+    - [x86] mei: hbm: drop hbm responses on early shutdown
+    - xhci: guard accesses to ep_state in xhci_endpoint_reset()
+    - xhci: add quirk for host controllers that don't update endpoint DCS
+    - xhci: Fix command ring pointer corruption while aborting a command
+    - xhci: Enable trust tx length quirk for Fresco FL11 USB controller
+    - cb710: avoid NULL pointer subtraction
+    - [arm64,x86] efi/cper: use stack buffer for error record decoding
+    - efi: Change down_interruptible() in virt_efi_reset_system() to
+      down_trylock()
+    - [armhf] usb: musb: dsps: Fix the probe error path
+    - Input: xpad - add support for another USB ID of Nacon GC-100
+    - USB: serial: qcserial: add EM9191 QDL support
+    - USB: serial: option: add Quectel EC200S-CN module support
+    - USB: serial: option: add Telit LE910Cx composition 0x1204
+    - USB: serial: option: add prod. id for Quectel EG91
+    - virtio: write back F_VERSION_1 before validate
+    - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
+    - virtio-blk: remove unneeded "likely" statements
+    - Revert "virtio-blk: Add validation for block size in config space"
+    - [x86] fpu: Mask out the invalid MXCSR bits properly
+    - [x86] Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
+      automatically
+    - [powerpc*] xive: Discard disabled interrupts in get_irqchip_state()
+    - [armhf] drivers: bus: simple-pm-bus: Add support for probing simple bus
+      only devices
+    - driver core: Reject pointless SYNC_STATE_ONLY device links
+    - iio: adc: ad7192: Add IRQ flag
+    - iio: adc: ad7780: Fix IRQ flag
+    - iio: adc: ad7793: Fix IRQ flag
+    - iio: adis16480: fix devices that do not support sleep mode
+    - iio: adc128s052: Fix the error handling path of 'adc128_probe()'
+    - iio: adc: max1027: Fix wrong shift with 12-bit devices
+    - iio: adis16475: fix deadlock on frequency set
+    - iio: light: opt3001: Fixed timeout error when 0 lux
+    - iio: adc: max1027: Fix the number of max1X31 channels
+    - eeprom: at25: Add SPI ID table
+    - iio: dac: ti-dac5571: fix an error code in probe()
+    - [arm64] tee: optee: Fix missing devices unregister during optee_remove
+    - [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address
+    - [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
+    - [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
+    - nvme-pci: Fix abort command id
+    - sctp: account stream padding length for reconf chunk
+    - [arm64,armhf] gpio: pca953x: Improve bias setting
+    - net/smc: improved fix wait on already cleared link
+    - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
+    - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
+    - net/mlx5e: Switchdev representors are not vlan challenged
+    - net: stmmac: fix get_hw_feature() on old hardware
+    - net: phy: Do not shutdown PHYs in READY state
+    - [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
+    - [arm64,armhf] net: dsa: fix spurious error message when unoffloaded port
+      leaves bridge
+    - ethernet: s2io: fix setting mac address during resume
+    - nfc: fix error handling of nfc_proto_register()
+    - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
+    - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
+    - pata_legacy: fix a couple uninitialized variable bugs
+    - ata: ahci_platform: fix null-ptr-deref in
+      ahci_platform_enable_regulators()
+    - spi: spidev: Add SPI ID table
+    - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
+    - [arm64] drm/msm: Fix null pointer dereference on pointer edp
+    - [arm64] drm/msm/mdp5: fix cursor-related warnings
+    - [arm64] drm/msm/submit: fix overflow check on 64-bit architectures
+    - [arm64] drm/msm/a6xx: Track current ctx by seqno
+    - [arm64] drm/msm/a4xx: fix error handling in a4xx_gpu_init()
+    - [arm64] drm/msm/a3xx: fix error handling in a3xx_gpu_init()
+    - [arm64] drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
+      poll_for_ready
+    - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
+    - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
+    - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
+    - [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time
+    - mqprio: Correct stats in mqprio_dump_class_stats().
+    - mptcp: fix possible stall on recvmsg()
+    - qed: Fix missing error code in qed_slowpath_start()
+    - ice: fix locking for Tx timestamp tracking flush
+    - nfp: flow_offload: move flow_indr_dev_register from app init to app start
+    - [arm64] net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
+    - [arm64] net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
+    - [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
+      skb
+    - [arm64] net: mscc: ocelot: deny TX timestamping of non-PTP packets
+    - [arm64] net: mscc: ocelot: cross-check the sequence id from the timestamp
+      FIFO with the skb PTP header
+    - [arm64] net: dsa: felix: break at first CPU port during init and teardown
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15
+    - [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address
+    - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
+    - [x86] xen/x86: prevent PVH type from getting clobbered
+    - r8152: avoid to resubmit rx immediately
+    - drm/amdgpu: init iommu after amdkfd device init
+    - NFSD: Keep existing listeners on portlist error
+    - [powerpc*] powerpc/lib: Add helper to check if offset is within
+      conditional branch range
+    - [powerpc*] powerpc/bpf: Validate branch ranges
+    - [powerpc*] powerpc/security: Add a helper to query stf_barrier type
+    - [powerpc*] powerpc/bpf: Emit stf barrier instruction sequences for
+      BPF_NOSPEC
+    - [arm64] KVM: arm64: Fix host stage-2 PGD refcount
+    - [arm64] KVM: arm64: Release mmap_lock when using VM_SHARED with MTE
+    - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
+      value
+    - netfilter: nf_tables: skip netdev events generated on netns removal
+    - ice: Fix failure to re-add LAN/RDMA Tx queues
+    - ice: Avoid crash from unnecessary IDA free
+    - ice: fix getting UDP tunnel entry
+    - ice: Print the api_patch as part of the fw.mgmt.api
+    - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
+    - netfilter: ipvs: make global sysctl readonly in non-init netns
+    - sctp: fix transport encap_port update in sctp_vtag_verify
+    - tcp: md5: Fix overlap between vrf and non-vrf keys
+    - ipv6: When forwarding count rx stats on the orig netdev
+    - hamradio: baycom_epp: fix build for UML
+    - net/sched: act_ct: Fix byte count on fragmented packets
+    - [arm64,armhf] net: dsa: Fix an error handling path in
+      'dsa_switch_parse_ports_of()'
+    - [powerpc*] smp: do not decrement idle task preempt count in CPU offline
+    - [arm64] net: hns3: Add configuration of TM QCN error event
+    - [arm64] net: hns3: reset DWRR of unused tc to zero
+    - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
+    - [arm64] net: hns3: schedule the polling again when allocation fails
+    - [arm64] net: hns3: fix vf reset workqueue cannot exit
+    - [arm64] net: hns3: disable sriov before unload hclge layer
+    - net: stmmac: Fix E2E delay mechanism
+    - ptp: Fix possible memory leak in ptp_clock_register()
+    - e1000e: Fix packet loss on Tiger Lake and later
+    - igc: Update I226_K device ID
+    - ice: Add missing E810 device ids
+    - net/mlx5e: IPsec: Fix a misuse of the software parser's fields
+    - net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags
+    - [arm64] net: enetc: fix ethtool counter name for PM0_TERR
+    - [arm64] net: enetc: make sure all traffic classes can send large frames
+    - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
+      notification
+    - can: peak_pci: peak_pci_remove(): fix UAF
+    - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
+    - can: isotp: isotp_sendmsg(): add result check for
+      wait_event_interruptible()
+    - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
+      isotp_sendmsg()
+    - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
+    - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
+    - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
+      error length
+    - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
+    - ceph: skip existing superblocks that are blocklisted or shut down when
+      mounting
+    - ceph: fix handling of "meta" errors
+    - tracing: Have all levels of checks prevent recursion
+    - ocfs2: fix data corruption after conversion from inline format
+    - ocfs2: mount fails with buffer overflow in strlen
+    - userfaultfd: fix a race between writeprotect and exit_mmap()
+    - mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in
+      mbind()
+    - vfs: check fd has read access in kernel_read_file_from_fd()
+    - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
+    - ALSA: hda/realtek: Add quirk for Clevo PC50HS
+    - ASoC: DAPM: Fix missing kctl change notifications
+    - [x86] ASoC: nau8824: Fix headphone vs headset, button-press detection no
+      longer working
+    - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on
+      blkg->iostat_cpu
+    - audit: fix possible null-pointer dereference in audit_filter_rules
+    - ucounts: Move get_ucounts from cred_alloc_blank to
+      key_change_session_keyring
+    - ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds
+    - ucounts: Proper error handling in set_cred_ucounts
+    - ucounts: Fix signal ucount refcounting
+    - [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in
+      idle_kvm_start_guest()
+    - [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it
+      went to guest (CVE-2021-43056)
+    - [powerpc*] idle: Don't corrupt back chain when going idle
+    - mm, slub: fix mismatch between reconstructed freelist depth and cnt
+    - mm, slub: fix potential memoryleak in kmem_cache_open()
+    - mm, slub: fix potential use-after-free in slab_debugfs_fops
+    - mm, slub: fix incorrect memcg slab count for bulk free
+    - [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode
+    - [x86] KVM: SEV: Flush cache on non-coherent systems before
+      RECEIVE_UPDATE_DATA
+    - [x86] KVM: SEV-ES: rename guest_ins_data to sev_pio_data
+    - [x86] KVM: SEV-ES: clean up kvm_sev_es_ins/outs
+    - [x86] KVM: SEV-ES: keep INS functions together
+    - [x86] KVM: SEV-ES: fix length of string I/O
+    - [x86] KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if
+      needed
+    - [x86] KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
+    - [x86] KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
+    - [x86] KVM: x86: check for interrupts before deciding whether to exit the
+      fast path
+    - [x86] KVM: x86: split the two parts of emulator_pio_in
+    - [x86] KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
+    - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
+    - isdn: cpai: check ctr->cnr to avoid array index out of bound
+      (CVE-2021-3896)
+    - [sh4] net: bridge: mcast: use multicast_membership_interval for IGMPv3
+    - [x86] KVM: SEV-ES: Set guest_state_protected after VMSA update
+    - [arm64] net: hns3: fix the max tx size according to user manual
+    - [x86] KVM: MMU: Reset mmu->pkru_mask to avoid stale data
+    - [arm64] drm/msm/a6xx: Serialize GMU communication
+    - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
+    - btrfs: deal with errors when checking if a dir entry exists during log
+      replay
+    - net: stmmac: add support for dwmac 3.40a
+    - [x86] platform/x86: intel_scu_ipc: Increase virtual timeout to 10s
+    - [x86] platform/x86: intel_scu_ipc: Update timeout value in comment
+    - ALSA: hda: avoid write to STATESTS if controller is in reset
+    - spi: Fix deadlock when adding SPI controllers on SPI buses
+    - spi-mux: Fix false-positive lockdep splats
+    - [x86] perf/x86/msr: Add Sapphire Rapids CPU support
+    - scsi: iscsi: Fix set_param() handling
+    - [x86] scsi: storvsc: Fix validation for unsolicited incoming packets
+    - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
+    - mm/thp: decrease nr_thps in file's mapping on THP split
+    - sched/scs: Reset the shadow stack when idle_task_exit
+    - [arm64] net: hns3: fix for miscalculation of rx unused desc
+    - net/mlx5: Lag, move lag destruction to a workqueue
+    - net/mlx5: Lag, change multipath and bonding to be mutually exclusive
+    - autofs: fix wait name hash calculation in autofs_wait()
+    - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
+    - [s390x] pci: cleanup resources only if necessary
+    - [s390x] pci: fix zpci_zdev_put() on reserve
+    - net: mdiobus: Fix memory leak in __mdiobus_register
+    - e1000e: Separate TGP board type from SPT
+    - [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16
+    - [armel,armhf] 9134/1: remove duplicate memcpy() definition
+    - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
+    - [armel,armhf] 9148/1: handle CONFIG_CPU_ENDIAN_BE32 in
+      arch/arm/kernel/head.S
+    - usbnet: sanity check for maxpacket
+    - usbnet: fix error return code in usbnet_probe()
+    - pinctrl: amd: disable and mask interrupts on probe
+    - ata: sata_mv: Fix the error handling of mv_chip_id()
+    - tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267)
+    - nfc: port100: fix using -ERRNO as command type mask
+    - Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
+    - mmc: vub300: fix control-message timeouts
+    - mmc: cqhci: clear HALT state after CQE enable
+    - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
+    - mmc: sdhci: Map more voltage level to SDHCI_POWER_330
+    - mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield
+    - [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
+      standard tuning circuit
+    - block: Fix partition check for host-aware zoned block devices
+    - ocfs2: fix race between searching chunks and release journal_head from
+      buffer_head
+    - nvme-tcp: fix H2CData PDU send accounting (again)
+    - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
+    - cfg80211: fix management registrations locking
+    - net: lan78xx: fix division by zero in send path
+    - mm: hwpoison: remove the unnecessary THP check
+    - mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
+    - mm, thp: bail out early in collapse_file for writeback page
+    - mm: khugepaged: skip huge page collapse for special files
+    - [arm64] dts: imx8mm-kontron: Fix polarity of reg_rst_eth2
+    - [arm64] dts: imx8mm-kontron: Fix CAN SPI clock frequency
+    - [arm64] dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY
+    - [arm64] dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV
+    - [arm64] dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are
+      correct
+    - mac80211: mesh: fix HE operation element length check
+    - drm/ttm: fix memleak in ttm_transfered_destroy
+    - [x86] drm/i915: Convert unconditional clflush to drm_clflush_virt_range()
+    - [x86] drm/i915: Catch yet another unconditioal clflush
+    - [x86] drm/i915/dp: Skip the HW readout of DPCD on disabled encoders
+    - drm/amdgpu: Fix even more out of bound writes from debugfs
+    - drm/amdgpu: fix out of bounds write (CVE-2021-42327)
+    - drm/amdgpu: support B0&B1 external revision id for yellow carp
+    - drm/amd/display: Limit display scaling to up to true 4k for DCN 3.1
+    - drm/amd/display: Fix prefetch bandwidth calculation for DCN3.1
+    - drm/amd/display: increase Z9 latency to workaround underflow in Z9
+    - drm/amd/display: Increase watermark latencies for DCN3.1
+    - drm/amd/display: Moved dccg init to after bios golden init
+    - drm/amd/display: Fallback to clocks which meet requested voltage on DCN31
+    - drm/amd/display: Fix deadlock when falling back to v2 from v3
+    - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
+    - cgroup: Fix memory leak caused by missing cgroup_bpf_offline
+    - [riscv64] riscv, bpf: Fix potential NULL dereference
+    - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
+    - bpf: Fix potential race in tail call compatibility check
+    - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
+    - [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt
+      fields
+    - [amd64] IB/hfi1: Fix abba locking issue with sc_disable()
+    - nvmet-tcp: fix data digest pointer calculation
+    - nvme-tcp: fix data digest pointer calculation
+    - nvme-tcp: fix possible req->offset corruption
+    - ice: Respond to a NETDEV_UNREGISTER event for LAG
+    - RDMA/mlx5: Set user priority for DCT
+    - ice: check whether PTP is initialized in ice_ptp_release()
+    - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
+    - regmap: Fix possible double-free in regcache_rbtree_exit()
+    - net: batman-adv: fix error handling
+    - net-sysfs: initialize uid and gid before calling net_ns_get_ownership
+    - cfg80211: correct bridge/4addr mode check
+    - net: Prevent infinite while loop in skb_tx_hash()
+    - RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
+    - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
+    - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
+      fails
+    - net: ethernet: microchip: lan743x: Fix dma allocation failure by using
+      dma_set_mask_and_coherent
+    - [arm64] net: hns3: fix pause config problem after autoneg disabled
+    - [arm64] net: hns3: fix data endian problem of some functions of debugfs
+    - net: ethernet: microchip: lan743x: Fix skb allocation failure
+    - phy: phy_ethtool_ksettings_get: Lock the phy for consistency
+    - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
+    - phy: phy_start_aneg: Add an unlocked version
+    - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
+    - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
+    - sctp: fix the processing for INIT chunk (CVE-2021-3772)
+    - sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772)
+    - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
+    - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
+    - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
+    - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
+    - bpf: Use kvmalloc for map values in syscall
+    - [arm64] watchdog: sbsa: only use 32-bit accessors
+    - bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of
+      CONFIG_NET
+    - [arm64] net: hns3: add more string spaces for dumping packets number of
+      queue info in debugfs
+    - [arm64] net: hns3: expand buffer len for some debugfs command
+    - virtio-ring: fix DMA metadata flags
+    - [s390x] KVM: s390: clear kicked_mask before sleeping again
+    - [s390x] KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
+    - [powerpc*] scsi: ibmvfc: Fix up duplicate response detection
+    - [riscv64] fix misalgned trap vector base address
+    - [x86] KVM: switch pvclock_gtod_sync_lock to a raw spinlock
+    - [x86] KVM: SEV-ES: fix another issue with string I/O VMGEXITs
+    - [x86] KVM: Take srcu lock in post_kvm_run_save()
+
+  [ Salvatore Bonaccorso ]
+  * Revert "[amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT"
+  * Bump ABI to 4
+  * media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
+    (Closes: #994050)
+  * [x86] media: ite-cir: IR receiver stop working after receive overflow
+    (Closes: #996672)
+  * scsi: core: Put LLD module refcnt after SCSI device is released
+  * sfc: Fix reading non-legacy supported link modes
+  * vrf: Revert "Reset skb conntrack connection..."
+  * media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
+    (CVE-2021-42739)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 03 Nov 2021 15:35:31 +0100
+
+linux (5.14.12-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10
+    - [arm64,armhf] media: cedrus: Fix SUNXI tile size calculation
+    - [arm64] ASoC: fsl_sai: register platform component before registering cpu
+      dai
+    - [armhf] ASoC: fsl_spdif: register platform component before registering
+      cpu dai
+    - [x86] ASoC: SOF: Fix DSP oops stack dump output contents
+    - [arm64] pinctrl: qcom: spmi-gpio: correct parent irqspec translation
+    - net/mlx4_en: Resolve bad operstate value
+    - [s390x] qeth: Fix deadlock in remove_discipline
+    - [s390x] qeth: fix deadlock during failing recovery
+    - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
+      (CVE-2021-3744, CVE-2021-3764)
+    - [m68k] Update ->thread.esp0 before calling syscall_trace() in
+      ret_from_signal
+    - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference
+    - tty: Fix out-of-bound vmalloc access in imageblit
+    - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
+    - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
+    - drm/amdgpu: adjust fence driver enable sequence
+    - drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2)
+    - drm/amdgpu: stop scheduler when calling hw_fini (v2)
+    - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
+    - scsi: ufs: ufs-pci: Fix Intel LKF link stability
+    - ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
+    - ALSA: firewire-motu: fix truncated bytes in message tracepoints
+    - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
+      15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
+    - [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT
+      table is incorrect
+    - fs-verity: fix signed integer overflow with i_size near S64_MAX
+    - hwmon: (tmp421) handle I2C errors
+    - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
+      structure field
+    - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
+      structure field
+    - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
+      structure field
+    - [arm64,armhf] gpio: pca953x: do not ignore i2c errors
+    - scsi: ufs: Fix illegal offset in UPIU event trace
+    - mac80211: fix use-after-free in CCMP/GCMP RX
+    - [x86] platform/x86/intel: hid: Add DMI switches allow list
+    - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
+    - [x86] ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
+    - [x86] KVM: x86: Fix stack-out-of-bounds memory access from
+      ioapic_write_indirect()
+    - [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12
+    - [x86] KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
+    - [x86] KVM: x86: Swap order of CPUID entry "index" vs. "significant flag"
+      checks
+    - [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was
+      activated
+    - [x86] KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES
+    - [x86] KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
+    - [x86] KVM: SEV: Acquire vcpu mutex when updating VMSA
+    - [x86] KVM: SEV: Allow some commands for mirror VM
+    - [x86] KVM: SVM: fix missing sev_decommission in sev_receive_start
+    - [x86] KVM: nVMX: Fix nested bus lock VM exit
+    - [x86] KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
+    - RDMA/cma: Do not change route.addr.src_addr.ss_family
+    - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
+    - nbd: use shifts rather than multiplies
+    - drm/amd/display: initialize backlight_ramping_override to false
+    - drm/amd/display: Pass PCI deviceid into DC
+    - drm/amd/display: Fix Display Flicker on embedded panels
+    - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
+    - drm/amdgpu: check tiling flags when creating FB on GFX8-
+    - drm/amdgpu: correct initial cp_hqd_quantum for gfx9
+    - [amd64] drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
+    - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
+    - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
+    - IB/cma: Do not send IGMP leaves for sendonly Multicast groups
+    - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
+    - netfilter: nf_tables: unlink table before deleting it
+    - netfilter: log: work around missing softdep backend module
+    - Revert "mac80211: do not use low data rates for data frames with no ack
+      flag"
+    - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
+    - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
+    - mac80211: mesh: fix potentially unaligned access
+    - mac80211-hwsim: fix late beacon hrtimer handling
+    - driver core: fw_devlink: Add support for
+      FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD
+    - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents
+    - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
+    - mptcp: don't return sockets in foreign netns
+    - mptcp: allow changing the 'backup' bit when no sockets are open
+    - [arm64] RDMA/hns: Work around broken constant propagation in gcc 8
+    - hwmon: (tmp421) report /PVLD condition as fault
+    - hwmon: (tmp421) fix rounding for negative values
+    - [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits
+    - net: ipv4: Fix rtnexthop len when RTA_FLOW is present
+    - smsc95xx: fix stalled rx after link change
+    - [x86] drm/i915/request: fix early tracepoints
+    - [x86] drm/i915: Remove warning from the rps worker
+    - [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
+    - [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition
+    - [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for
+      DSA and CPU ports
+    - e100: fix length calculation in e100_get_regs_len
+    - e100: fix buffer overrun in e100_get_regs
+    - [amd64] RDMA/hfi1: Fix kernel pointer leak
+    - [arm64] RDMA/hns: Fix the size setting error when copying CQE in
+      clean_cq()
+    - [arm64] RDMA/hns: Add the check of the CQE size of the user space
+    - bpf: Exempt CAP_BPF from checks against bpf_jit_limit
+    - [amd64] bpf, x86: Fix bpf mapping of atomic fetch implementation
+    - Revert "block, bfq: honor already-setup queue merges"
+    - scsi: csiostor: Add module softdep on cxgb4
+    - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
+    - [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly
+    - [arm64] net: hns3: remove tc enable checking
+    - [arm64] net: hns3: don't rollback when destroy mqprio fail
+    - [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
+      HCLGE_FLAG_DCB_ENABLE
+    - [arm64] net: hns3: fix show wrong state when add existing uc mac address
+    - [arm64] net: hns3: reconstruct function hns3_self_test
+    - [arm64] net: hns3: fix always enable rx vlan filter problem after selftest
+    - [arm64] net: hns3: disable firmware compatible features when uninstall PF
+    - [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
+    - net: sched: flower: protect fl_walk() with rcu
+    - net: stmmac: fix EEE init issue when paired with EEE capable PHYs
+    - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
+    - [x86] perf/x86/intel: Update event constraints for ICX
+    - sched/fair: Add ancestors of unthrottled undecayed cfs_rq
+    - sched/fair: Null terminate buffer when updating tunable_scaling
+    - [armhf] hwmon: (occ) Fix P10 VRM temp sensors
+    - [x86] kvm: fix objtool relocation warning
+    - nvme: add command id quirk for apple controllers
+    - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
+    - driver core: fw_devlink: Improve handling of cyclic dependencies
+    - debugfs: debugfs_create_file_size(): use IS_ERR to check for error
+    - ext4: fix loff_t overflow in ext4_max_bitmap_size()
+    - ext4: fix reserved space counter leakage
+    - ext4: add error checking to ext4_ext_replay_set_iblocks()
+    - ext4: fix potential infinite loop in ext4_dx_readdir()
+    - ext4: flush s_error_work before journal destroy in ext4_fill_super
+    - HID: u2fzero: ignore incomplete packets without data (Closes: #994535)
+    - net: udp: annotate data race around udp_sk(sk)->corkflag
+    - usb: hso: remove the bailout parameter
+    - HID: betop: fix slab-out-of-bounds Write in betop_probe
+    - netfilter: ipset: Fix oversized kvmalloc() calls
+    - mm: don't allow oversized kvmalloc() calls
+    - HID: usbhid: free raw_report buffers in usbhid_stop
+    - [x86] crypto: aesni - xts_crypt() return if walk.nbytes is 0
+    - [x86] KVM: x86: Handle SRCU initialization failure during page track init
+    - netfilter: conntrack: serialize hash resizes and cleanups
+    - netfilter: nf_tables: Fix oversized kvmalloc() calls
+    - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - take 2
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.11
+    - [arm64,armhf] spi: rockchip: handle zero length transfers without timing
+      out
+    - afs: Add missing vnode validation checks
+    - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
+    - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
+    - btrfs: fix mount failure due to past and transient device flush error
+    - net: mdio: introduce a shutdown method to mdio device drivers
+    - xen-netback: correct success/error reporting for the SKB-with-fraglist
+      case
+    - [sparc64] fix pci_iounmap() when CONFIG_PCI is not set
+    - scsi: sd: Free scsi_disk device via put_device()
+    - [arm*] usb: dwc2: check return value after calling platform_get_resource()
+    - Xen/gntdev: don't ignore kernel unmapping error
+    - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests
+    - nvme-fc: update hardware queues before using them
+    - nvme-fc: avoid race between time out and tear down
+    - [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
+    - scsi: ses: Retry failed Send/Receive Diagnostic commands
+    - [arm64,armhf] irqchip/gic: Work around broken Renesas integration
+    - smb3: correct smb3 ACL security descriptor
+    - [x86] insn, tools/x86: Fix undefined behavior due to potential unaligned
+      accesses
+    - io_uring: allow conditional reschedule for intensive iterators
+    - block: don't call rq_qos_ops->done_bio if the bio isn't tracked
+    - KVM: do not shrink halt_poll_ns below grow_start
+    - [x86] KVM: x86: reset pdptrs_from_userspace when exiting smm
+    - [x86] kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
+    - [x86] KVM: x86: nSVM: restore int_vector in svm_clear_vintr
+    - [x86] perf/x86: Reset destroy callback on event init failure
+    - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
+    - Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback"
+    - [armhf] Revert "ARM: imx6q: drop of_platform_default_populate() from
+      init_machine"
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12
+    - usb: cdc-wdm: Fix check for WWAN
+    - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
+    - usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize
+    - USB: cdc-acm: fix racy tty buffer accesses
+    - USB: cdc-acm: fix break reporting
+    - usb: typec: tcpm: handle SRC_STARTUP state if cc changes
+    - [x86] usb: typec: tipd: Remove dependency on "connector" child fwnode
+    - drm/amdgpu: During s0ix don't wait to signal GFXOFF
+    - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
+    - drm/nouveau/ga102-: support ttm buffer moves via copy engine
+    - [x86] drm/i915: Fix runtime pm handling in i915_gem_shrink
+    - [x86] drm/i915: Extend the async flip VT-d w/a to skl/bxt
+    - xen/privcmd: fix error handling in mmap-resource processing
+    - [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
+    - ovl: fix missing negative dentry check in ovl_rename()
+    - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
+    - nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
+    - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
+    - SUNRPC: fix sign error causing rpcsec_gss drops
+    - xen/balloon: fix cancelled balloon action
+    - [armhf] dts: omap3430-sdp: Fix NAND device node
+    - scsi: ufs: core: Fix task management completion
+    - [riscv64] Flush current cpu icache before other cpus
+    - [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc()
+    - iwlwifi: mvm: Fix possible NULL dereference
+    - [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
+    - [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo
+    - [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo
+    - [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child
+      devices from the bus
+    - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
+    - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
+    - netfilter: nf_tables: add position handle in event notification
+    - netfilter: nf_tables: reverse order in rule replacement expansion
+    - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
+    - [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss
+    - bpf: Fix integer overflow in prealloc_elems_and_freelist()
+      (CVE-2021-41864)
+    - net/mlx5e: IPSEC RX, enable checksum complete
+    - net/mlx5e: Keep the value for maximum number of channels in-sync
+    - net/mlx5: E-Switch, Fix double allocation of acl flow counter
+    - net/mlx5: Force round second at 1PPS out start time
+    - net/mlx5: Avoid generating event after PPS out in Real time mode
+    - net/mlx5: Fix length of irq_index in chars
+    - net/mlx5: Fix setting number of EQs of SFs
+    - net/mlx5e: Fix the presented RQ index in PTP stats
+    - phy: mdio: fix memory leak
+    - net_sched: fix NULL deref in fifo_set_limit()
+    - [arm64] net: mscc: ocelot: fix VCAP filters remaining active after being
+      deleted
+    - [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
+    - [mips*] Revert "add support for buggy MT7621S core detection"
+    - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event
+      notification
+    - [i386] ptp_pch: Load module automatically if ID matches
+    - [armhf] dts: imx: change the spi-nor tx
+    - [arm64] dts: imx8: change the spi-nor tx
+    - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
+      sequence
+    - [x86] drm/i915/audio: Use BIOS provided value for RKL HDA link
+    - [x86] drm/i915/jsl: Add W/A 1409054076 for JSL
+    - [x86] drm/i915/tc: Fix TypeC port init/resume time sanitization
+    - [x86] drm/i915/bdb: Fix version check
+    - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
+    - afs: Fix afs_launder_page() to set correct start file position
+    - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
+    - net: bridge: fix under estimation in br_get_linkxstats_size()
+    - net/sched: sch_taprio: properly cancel timer from taprio_destroy()
+    - net: sfp: Fix typo in state machine debug string
+    - net: pcs: xpcs: fix incorrect CL37 AN sequence
+    - netlink: annotate data races around nlk->bound
+    - drm/amdgpu: handle the case of pci_channel_io_frozen only in
+      amdgpu_pci_resume
+    - [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
+    - [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
+    - drm/nouveau: avoid a use-after-free when BO init fails
+    - drm/nouveau/kms/nv50-: fix file release memory leak
+    - drm/nouveau/debugfs: fix file release memory leak
+    - net: pcs: xpcs: fix incorrect steps on disable EEE
+    - net: stmmac: trigger PCS EEE to turn off on link down
+    - [amd64,arm64] gve: Correct available tx qpl check
+    - [amd64,arm64] gve: Avoid freeing NULL pointer
+    - [amd64,arm64] gve: Properly handle errors in gve_assign_qpl
+    - rtnetlink: fix if_nlmsg_stats_size() under estimation
+    - [amd64,arm64] gve: fix gve_get_stats()
+    - [amd64,arm64] gve: report 64bit tx_bytes counter from
+      gve_handle_report_stats()
+    - i40e: fix endless loop under rtnl
+    - i40e: Fix freeing of uninitialized misc IRQ vector
+    - iavf: fix double unlock of crit_lock
+    - net: prefer socket bound to interface when not in VRF
+    - [powerpc*] iommu: Report the correct most efficient DMA mask for PCI
+      devices
+    - i2c: acpi: fix resource leak in reconfiguration device addition
+    - [riscv64] explicitly use symbol offsets for VDSO
+    - [riscv64] vdso: Refactor asm/vdso.h
+    - [riscv64] vdso: Move vdso data page up front
+    - [riscv64] vdso: make arch_setup_additional_pages wait for mmap_sem for
+      write killable
+    - [s390x] bpf, s390: Fix potential memory leak about jit_data
+    - [riscv64] Include clone3() on rv32
+    - scsi: iscsi: Fix iscsi_task use after free
+    - [powerpc*] bpf: Fix BPF_MOD when imm == 1
+    - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
+    - [powerpc*] 64s: fix program check interrupt emergency stack path
+    - [powerpc*] traps: do not enable irqs in _exception
+    - [powerpc*] 64s: Fix unrecoverable MCE calling async handler from NMI
+    - [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
+    - [i386] x86/platform/olpc: Correct ifdef symbol to intended
+      CONFIG_OLPC_XO15_SCI
+    - [x86] fpu: Restore the masking out of reserved MXCSR bits
+    - [x86] entry: Correct reference to intended CONFIG_64_BIT
+    - [x86] hpet: Use another crystalball to evaluate HPET usability
+    - [arm64,armhf] dsa: tag_dsa: Fix mask for trunked packets
+
+  [ Ben Hutchings ]
+  * debian/.gitignore: Ignore debian/tests/control again
+  * integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after 5.13
+  * tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix
+    reproducibility"
+  * debian/rules.real: Stop invoking obsolete headers_check target
+  * libcpupower: Update symbols file for changes in 5.13.9-1~exp1
+
+  [ John Paul Adrian Glaubitz ]
+  * [alpha] Re-enable CONFIG_EISA which was disabled upstream by accident
+
+  [ Salvatore Bonaccorso ]
+  * Bump ABI to 3
+  * mm/secretmem: Fix NULL page->mapping dereference in page_is_secretmem()
+    (Closes: #996175)
+
+  [ Aurelien Jarno ]
+  * [riscv64] Improve HiFive Unmatched support: enable SENSORS_LM90.
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 14 Oct 2021 08:39:01 +0200
+
+linux (5.14.9-2) unstable; urgency=medium
+
+  * [amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT.
+    Do not activate AMD Secure Memory Encryption (SME) by default, until
+    AMDGPU related incompatibilities are fixed. (Closes: #994453)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 03 Oct 2021 22:14:52 +0200
+
+linux (5.14.9-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.7
+    - [amd64] net: stmmac: fix MAC not working when system resume back with WoL
+      active
+    - [amd64,arm64] swiotlb-xen: avoid double free
+    - swiotlb-xen: fix late init retry
+    - [amd64] xen: reset legacy rtc flag for PV domU
+    - [amd64] xen: fix usage of pmd_populate in mremap for pv guests
+    - [arm64] sve: Use correct size when reinitialising SVE state
+    - PCI: Add AMD GPU multi-function power dependencies
+    - drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
+    - drm/amd/display: Fix white screen page fault for gpuvm
+    - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
+    - drm/amdgpu: use IS_ERR for debugfs APIs
+    - drm/amdgpu: fix use after free during BO move
+    - drm/amdgpu: add amdgpu_amdkfd_resume_iommu
+    - drm/amdgpu: move iommu_resume before ip init/resume
+    - drm/radeon: pass drm dev radeon_agp_head_init directly
+    - io_uring: allow retry for O_NONBLOCK if async is supported
+    - [x86] drm/i915/dp: Use max params for panels < eDP 1.4
+    - [armhf] drm/etnaviv: return context from etnaviv_iommu_context_get
+    - [armhf] drm/etnaviv: put submit prev MMU context when it exists
+    - [armhf] drm/etnaviv: stop abusing mmu_context as FE running marker
+    - [armhf] drm/etnaviv: keep MMU context across runtime suspend/resume
+    - [armhf] drm/etnaviv: exec and MMU state is lost when resetting the GPU
+    - [armhf] drm/etnaviv: fix MMU context leak on GPU reset
+    - [armhf] drm/etnaviv: reference MMU context when setting up hardware state
+    - [armhf] drm/etnaviv: add missing MMU context put when reaping MMU mapping
+    - [s390x] sclp: fix Secure-IPL facility detection
+    - net: qrtr: revert check in qrtr_endpoint_post() (Closes: #995491)
+    - [x86] pat: Pass valid address to sanitize_phys()
+    - [x86] mm: Fix kern_addr_valid() to cope with existing but not present
+      entries
+    - x86/mce: Avoid infinite loop for copy from user recovery
+    - tipc: fix an use-after-free issue in tipc_recvmsg
+    - net: remove the unnecessary check in cipso_v4_doi_free
+    - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
+    - net/l2tp: Fix reference count leak in l2tp_udp_recv_core
+    - r6040: Restore MDIO clock frequency after MAC reset
+    - tipc: increase timeout in tipc_sk_enqueue()
+    - [arm64] drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused
+    - rtc: cmos: Disable irq around direct invocation of cmos_interrupt()
+    - [x86] drm/i915/dp: return proper DPRX link training result
+    - net/mlx5: FWTrace, cancel work on alloc pd error flow
+    - net/mlx5: Fix potential sleeping in atomic context
+    - net: stmmac: fix system hang caused by eee_ctrl_timer during
+      suspend/resume
+    - igc: fix tunnel offloading
+    - nvme-tcp: fix io_work priority inversion
+    - [powerpc*] 64s: system call scv tabort fix for corrupt irq soft-mask state
+    - events: Reuse value read using READ_ONCE instead of re-reading it
+    - vhost_net: fix OoB on sendmsg() failure.
+    - net/af_unix: fix a data-race in unix_dgram_poll
+    - [arm64,armhf] net: dsa: destroy the phylink instance on any error in
+      dsa_slave_phy_setup
+    - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
+    - qed: Handle management FW error
+    - udp_tunnel: Fix udp_tunnel_nic work-queue type
+    - dt-bindings: arm: Fix Toradex compatible typo
+    - [powerpc*] KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
+      changing registers
+    - [powerpc*] 64s: system call rfscv workaround for TM bugs
+    - [powerpc*] mce: Fix access error in mce handler
+    - [s390x] pci_mmio: fully validate the VMA before calling follow_pte()
+    - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem()
+    - [arm64] net: hns3: pad the short tunnel frame before sending to hardware
+    - [arm64] net: hns3: change affinity_mask to numa node range
+    - [arm64] net: hns3: disable mac in flr process
+    - [arm64] net: hns3: fix the timing issue of VF clearing interrupt sources
+    - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP
+    - [x86] Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from
+      uio_hv_generic driver
+    - net/mlx5e: Fix mutual exclusion between CQE compression and HW TS
+    - ice: Correctly deal with PFs that do not support RDMA
+    - [arm64] net: hns3: fix the exception when query imp info
+    - nvme: avoid race in shutdown namespace removal
+    - blkcg: fix memory leak in blk_iolatency_init
+    - [arm64,armhf] net: dsa: flush switchdev workqueue before tearing down
+      CPU/DSA ports
+    - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
+    - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
+    - fuse: fix use after free in fuse_read_interrupt()
+    - [arm64,armhf] PCI: tegra: Fix OF node reference leak
+    - [armhf] mfd: Don't use irq_create_mapping() to resolve a mapping
+    - [riscv64] fix the global name pfn_base confliction error
+    - [arm64] KVM: Make hyp_panic() more robust when protected mode is enabled
+    - tracing/probes: Reject events which have the same name of existing one
+    - PCI: Add ACS quirks for Cavium multi-function devices
+    - watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if
+      appropriate
+    - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
+    - flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common()
+    - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
+    - block, bfq: honor already-setup queue merges
+    - [i386] PCI: ibmphp: Fix double unmap of io_mem
+    - loop: reduce the loop_ctl_mutex scope
+    - ethtool: Fix an error code in cxgb2.c
+    - net: phylink: add suspend/resume support
+    - mfd: axp20x: Update AXP288 volatile ranges
+    - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges'
+    - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
+    - [arm64] KVM: Restrict IPA size to maximum 48 bits on 4K and 16K page size
+    - PCI: Fix pci_dev_str_match_path() alloc while atomic bug
+    - mtd: mtdconcat: Judge callback existence based on the master
+    - mtd: mtdconcat: Check _read, _write callbacks existence before assignment
+    - [arm64] KVM: Fix read-side race on updates to vcpu reset state
+    - [arm64] KVM: Handle PSCI resets before userspace touches vCPU state
+    - PCI/PTM: Remove error message at boot
+    - watchdog: Fix NULL pointer dereference when releasing cdev
+    - mtd: rawnand: cafe: Fix a resource leak in the error handling path of
+      'cafe_nand_probe()'
+    - [arm64] gpio: mpc8xxx: Fix a resources leak in the error handling path of
+      'mpc8xxx_probe()'
+    - [arm64] gpio: mpc8xxx: Fix a potential double iounmap call in
+      'mpc8xxx_probe()'
+    - [arm64] gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code
+      and avoid a leak
+    - io_uring: retry in case of short read on block device
+    - mptcp: fix possible divide by zero
+    - net: hso: add failure handler for add_net_device
+    - [armhf] net: dsa: b53: Fix calculating number of switch ports
+    - [armhf] net: dsa: b53: Set correct number of ports in the DSA struct
+    - mptcp: Only send extra TCP acks in eligible socket states
+    - netfilter: socket: icmp6: fix use-after-scope
+    - fq_codel: reject silly quantum parameters
+    - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
+    - iwlwifi: move get pnvm file name to a separate function
+    - iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
+    - ip_gre: validate csum_start only on pull
+    - [armhf] net: dsa: b53: Fix IMP port setup on BCM5301x
+    - bnxt_en: fix stored FW_PSID version masks
+    - bnxt_en: Fix asic.rev in devlink dev info command
+    - bnxt_en: Fix possible unintended driver initiated error recovery
+    - ip6_gre: Revert "ip6_gre: add validation for csum_start"
+    - mfd: lpc_sch: Rename GPIOBASE to prevent build error
+    - cxgb3: fix oops on module removal
+    - bnxt_en: Fix error recovery regression
+    - [armhf] net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports()
+    - [s390x] bpf: Fix optimizing out zero-extensions
+    - [s390x] bpf: Fix 64-bit subtraction of the -0x80000000 constant
+    - [s390x] bpf: Fix branch shortening during codegen pass
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.8
+    - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
+    - [arm64] PCI: aardvark: Fix reporting CRS value
+    - console: consume APC, DM, DCS
+    - [x86] staging: rtl8192u: Fix bitwise vs logical operator in
+      TranslateRxSignalStuff819xUsb()
+    - coredump: fix memleak in dump_vma_snapshot()
+    - [arm64] RDMA/hns: Enable stash feature of HIP09
+    - RDMA/mlx5: Fix xlt_chunk_align calculation
+    - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
+    - staging: rtl8723bs: fix wpa_set_auth_algs() function
+    - [armhf] thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
+    - 9p/trans_virtio: Remove sysfs file on probe failure
+    - prctl: allow to setup brk for et_dyn executables
+    - nilfs2: use refcount_dec_and_lock() to fix potential UAF
+    - profiling: fix shift-out-of-bounds bugs
+    - PM: sleep: core: Avoid setting power.must_resume to false
+    - ceph: cancel delayed work instead of flushing on mdsc teardown
+    - platform/chrome: sensorhub: Add trace events for sample
+    - platform/chrome: cros_ec_trace: Fix format warnings
+    - [s390x] entry: make oklabel within CHKSTG macro local
+    - SUNRPC: don't pause on incomplete allocation
+    - init: move usermodehelper_enable() to populate_rootfs()
+    - thermal/core: Fix thermal_cooling_device_register() prototype
+    - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
+    - [amd64] iommu/amd: Relocate GAMSup check to early_enable_iommus
+    - [amd64] iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
+    - [amd64] iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
+    - [arm64] mm: limit linear region to 51 bits for KVM in nVHE mode
+    - drm/ttm: Fix a deadlock if the target BO is not idle during swap
+    - of: property: Disable fw_devlink DT support for X86
+    - [riscv64] dts: microchip: mpfs-icicle: Fix serial console
+    - [arm64,armhf] ASoC: audio-graph: respawn Platform Support
+    - [x86] ACPI: PM: s2idle: Run both AMD and Microsoft methods if both are
+      supported
+    - ceph: fix memory leak on decode error in ceph_handle_caps
+    - ceph: request Fw caps before updating the mtime in ceph_write_iter
+    - ceph: remove the capsnaps when removing caps
+    - ceph: lockdep annotations for try_nonblocking_invalidate
+    - [s390x] unwind: use current_frame_address() to unwind current task
+    - btrfs: update the bdev time directly when closing
+    - btrfs: delay blkdev_put until after the device remove
+    - btrfs: fix lockdep warning while mounting sprout fs
+    - nilfs2: fix memory leak in nilfs_sysfs_create_device_group
+    - nilfs2: fix NULL pointer in nilfs_##name##_attr_release
+    - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
+    - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
+    - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
+    - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
+    - drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
+    - drm/amdgpu: fix fdinfo race with process exit
+    - [arm64,armhf] pwm: rockchip: Don't modify HW state in .remove() callback
+    - [armhf] pwm: stm32-lp: Don't modify HW state in .remove() callback
+    - nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
+    - block: genhd: don't call blkdev_show() with major_names_lock held
+    - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
+    - blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues
+    - sched/idle: Make the idle timer expire in hard interrupt context
+    - cifs: properly invalidate cached root handle when closing it
+    - io_uring: fix off-by-one in BUILD_BUG_ON check of __REQ_F_LAST_BIT
+    - selinux,smack: fix subjective/objective credential use mixups
+    - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.9
+    - mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
+    - ocfs2: drop acl cache for directories too
+    - mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
+    - mm: fix uninitialized use in overcommit_policy_handler
+    - usb: gadget: u_audio: EP-OUT bInterval in fback frequency
+    - [arm*] usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
+    - [arm*] usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
+    - [armhf] usb: musb: tusb6010: uninitialized data in
+      tusb_fifo_write_unaligned()
+    - cifs: Not to defer close on file when lock is set
+    - cifs: Fix soft lockup during fsstress
+    - cifs: fix incorrect check for null pointer in header_assemble
+    - [xen] x86: fix PV trap handling on secondary processors
+    - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
+    - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
+    - USB: cdc-acm: fix minor-number release
+    - [arm*] binder: make sure fd closes complete
+    - [arm*] binder: fix freeze race
+    - [arm64] usb: isp1760: do not sleep in field register poll
+    - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
+    - [arm64,armhf] usb: dwc3: core: balance phy init and exit
+    - usb: core: hcd: Add support for deferring roothub registration
+    - USB: serial: mos7840: remove duplicated 0xac24 device ID
+    - USB: serial: option: add Telit LN920 compositions
+    - USB: serial: option: remove duplicate USB device ID
+    - USB: serial: option: add device id for Foxconn T99W265
+    - [powerpc*] misc: genwqe: Fixes DMA mask setting
+    - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
+    - erofs: fix up erofs_lookup tracepoint
+    - nexthop: Fix division by zero while replacing a resilient group
+    - btrfs: prevent __btrfs_dump_space_info() to underflow its free space
+    - xhci: Set HCD flag to defer primary roothub registration
+    - [arm64] serial: mvebu-uart: fix driver's tx_empty callback
+    - scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
+    - net: hso: fix muxed tty registration
+    - [amd64] platform/x86: amd-pmc: Increase the response register timeout
+    - [arm64] Restore forced disabling of KPTI on ThunderX
+    - [arm64] Mitigate MTE issues with str{n}cmp()
+    - [x86] comedi: Fix memory leak in compat_insnlist()
+    - afs: Fix page leak
+    - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation
+    - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
+    - afs: Fix updating of i_blocks on file/dir extension
+    - virtio-net: fix pages leaking when building skb in big mode
+    - [arm64] enetc: Fix illegal access when reading affinity_hint
+    - [arm64] enetc: Fix uninitialized struct dim_sample field usage
+    - [arm64,armhf] net: dsa: tear down devlink port regions when tearing down
+      the devlink port on error
+    - napi: fix race inside napi_enable
+    - bnxt_en: Fix TX timeout when TX ring size is set to the smallest
+    - [arm64] net: hns3: fix change RSS 'hfunc' ineffective issue
+    - [arm64] net: hns3: fix inconsistent vf id print
+    - [arm64] net: hns3: fix misuse vf id and vport id in some logs
+    - [arm64] net: hns3: check queue id range before using
+    - [arm64] net: hns3: check vlan id before using it
+    - [arm64] net: hns3: fix a return value error in hclge_get_reset_status()
+    - net/smc: add missing error check in smc_clc_prfx_set()
+    - net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
+    - [arm64,armhf] net: dsa: fix dsa_tree_setup error path
+    - [arm64,armhf] net: dsa: don't allocate the slave_mii_bus using devres
+    - spi: Revert modalias changes
+    - [s390x] qeth: fix NULL deref in qeth_clear_working_pool_list()
+    - gpiolib: acpi: Make set-debounce-timeout failures non fatal
+    - qed: rdma - don't wait for resources under hw error recovery flow
+    - mptcp: ensure tx skbs always have the MPTCP ext
+    - nexthop: Fix memory leaks in nexthop notification chain listeners
+    - [arm64] net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
+      enabled
+    - net/mlx4_en: Don't allow aRFS for encapsulated packets
+    - atlantic: Fix issue in the pm resume flow.
+    - scsi: iscsi: Adjust iface sysfs attr detection
+    - scsi: target: Fix the pgr/alua_support_store functions
+    - [x86] tty: synclink_gt: rename a conflicting function name
+    - [x86] fault: Fix wrong signal when vsyscall fails with pkey
+    - nvme-tcp: fix incorrect h2cdata pdu offset accounting
+    - nvme: keep ctrl->namespaces ordered
+    - thermal/core: Potential buffer overflow in
+      thermal_build_list_of_policies()
+    - cifs: fix a sign extension bug
+    - scsi: sd_zbc: Support disks with more than 2**32 logical blocks
+    - scsi: ufs: Revert "Utilize Transfer Request List Completion Notification
+      Register"
+    - scsi: ufs: Retry aborted SCSI commands instead of completing these
+      successfully
+    - scsi: ufs: core: Unbreak the reset handler
+    - scsi: qla2xxx: Restore initiator in dual mode
+    - scsi: lpfc: Use correct scnprintf() limit
+    - [arm64,armhf] irqchip/gic-v3-its: Fix potential VPE leak on error
+    - md: fix a lock order reversal in md_alloc
+    - [x86] asm: Fix SETZ size enqcmds() build failure
+    - io_uring: fix race between poll completion and cancel_hash insertion
+    - io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
+    - io_uring: put provided buffer meta data under memcg accounting
+    - io_uring: don't punt files update to io-wq unconditionally
+    - blktrace: Fix uaf in blk_trace access after removing by sysfs
+    - net: phylink: Update SFP selected interface on advertising changes
+    - net: stmmac: allow CSR clock of 300MHz
+    - blk-mq: avoid to iterate over stale request
+    - ipv6: delay fib6_sernum increase in fib6_add
+    - [x86] cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
+    - bpf: Add oversize check before call kvcalloc()
+    - xen/balloon: use a kernel thread instead a workqueue
+    - nvme-multipath: fix ANA state updates when a namespace is not present
+    - nvme-rdma: destroy cm id before destroy qp to avoid use after free
+    - amd/display: downgrade validation failure log level
+    - drm/ttm: fix type mismatch error on sparc64
+    - block: check if a profile is actually registered in
+      blk_integrity_unregister
+    - block: flush the integrity workqueue in blk_integrity_unregister
+    - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
+    - compiler.h: Introduce absolute_pointer macro
+    - qnx4: avoid stringop-overread errors
+    - drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
+    - drm/amd/display: Link training retry fix for abort case
+    - amd/display: enable panel orientation quirks
+    - [arm64] Mark __stack_chk_guard as __ro_after_init
+    - net: 6pack: Fix tx timeout and slot time
+    - [arm64] spi: Fix tegra20 build with CONFIG_PM=n
+    - [arm*] Revert drm/vc4 hdmi runtime PM changes
+    - [x86] setup: Call early_reserve_memory() earlier
+    - [x86] thermal/drivers/int340x: Do not set a wrong tcc offset on resume
+    - [armhf] irqchip/armada-370-xp: Fix ack/eoi breakage
+    - [arm64] add MTE supported check to thread switching and syscall entry/exit
+    - USB: serial: cp210x: fix dropped characters with CP2102
+    - software node: balance refcount for managed software nodes
+    - xen/balloon: fix balloon kthread freezing
+    - qnx4: work around gcc false positive warning bug
+    - nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show()
+    - usb: gadget: f_uac2: Add missing companion descriptor for feedback EP
+    - usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
+
+  [ Salvatore Bonaccorso ]
+  * Bump ABI to 2
+  * ext4: limit the number of blocks in one ADD_RANGE TLV (Closes: #995425)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 03 Oct 2021 14:09:38 +0200
+
+linux (5.14.6-3) unstable; urgency=medium
+
+  [ Salvatore Bonaccorso ]
+  * ethtool: Fix rxnfc copy to user buffer overflow (Closes: #995109)
+  * debian/bin/gencontrol.py: Fix under-indented line triggering pycodestyle
+    problem.
+  * [armhf] dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
+
+  [ John Paul Adrian Glaubitz ]
+  * [ia64] Set CONFIG_CRYPTO_ZSTD=y to force CONFIG_ZSTD_COMPRESS=y
+  * [ia64] Drop udebs for legacy IDE support, removed upstream
+  * [m68k] Drop udebs for legacy IDE support, removed upstream
+  * [sh4] Set CONFIG_CC_OPTIMIZE_FOR_SIZE=y to reduce image size
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 28 Sep 2021 06:29:40 +0200
+
+linux (5.14.6-2) unstable; urgency=medium
+
+  * io_uring: ensure symmetry in handling iter types in loop_rw_iter()
+    (CVE-2021-41073)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 19 Sep 2021 10:49:04 +0200
+
+linux (5.14.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.4
+    - locking/mutex: Fix HANDOFF condition
+    - regmap: fix the offset of register error log
+    - sched/deadline: Fix reset_on_fork reporting of DL tasks
+    - power: supply: axp288_fuel_gauge: Report register-address on readb /
+      writeb errors
+    - sched/deadline: Fix missing clock update in migrate_task_rq_dl()
+    - rcu/tree: Handle VM stoppage in stall detection
+    - [x86] EDAC/mce_amd: Do not load edac_mce_amd module on guests
+    - posix-cpu-timers: Force next expiration recalc after itimer reset
+    - hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
+    - hrtimer: Ensure timerfd notification for HIGHRES=n
+    - udf: Check LVID earlier
+    - udf: Fix iocharset=utf8 mount option
+    - isofs: joliet: Fix iocharset=utf8 mount option
+    - bcache: add proper error unwinding in bcache_device_init
+    - nbd: add the check to prevent overflow in __nbd_ioctl()
+    - blk-throtl: optimize IOPS throttle for large IO scenarios
+    - nvme-tcp: don't update queue count when failing to set io queues
+    - nvme-rdma: don't update queue count when failing to set io queues
+    - nvmet: pass back cntlid on successful completion
+    - [s390x] cio: add dev_busid sysfs entry for each subchannel
+    - [s390x] zcrypt: fix wrong offset index for APKA master key valid state
+    - libata: fix ata_host_start()
+    - sched/topology: Skip updating masks for non-online nodes
+    - [x86] crypto: qat - do not ignore errors from enable_vf2pf_comms()
+    - [x86] crypto: qat - handle both source of interrupt in VF ISR
+    - [x86] crypto: qat - fix reuse of completion variable
+    - [x86] crypto: qat - fix naming for init/shutdown VF to PF notifications
+    - [x86] crypto: qat - do not export adf_iov_putmsg()
+    - crypto: tcrypt - Fix missing return value check
+    - fcntl: fix potential deadlocks for &fown_struct.lock
+    - fcntl: fix potential deadlock for &fasync_struct.fa_lock
+    - udf_get_extendedattr() had no boundary checks.
+    - io-wq: remove GFP_ATOMIC allocation off schedule out path
+    - [s390x] pci: fix misleading rc in clp_set_pci_fn()
+    - [s390x] debug: keep debug data on resize
+    - [s390x] debug: fix debug area life cycle
+    - [s390x] ap: fix state machine hang after failure to enable irq
+    - [s390x] smp: enable DAT before CPU restart callback is called
+    - sched/debug: Don't update sched_domain debug directories before
+      sched_debug_init()
+    - [arm64] power: supply: cw2015: use dev_err_probe to allow deferred probe
+    - [x86] crypto: x86/aes-ni - add missing error checks in XTS code
+    - sched/numa: Fix is_core_idle()
+    - sched: Fix UCLAMP_FLAG_IDLE setting
+    - rcu: Fix to include first blocked task in stall warning
+    - rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
+    - block: return ELEVATOR_DISCARD_MERGE if possible
+    - [arm64] spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
+    - [mips64el,mipsel] irqchip/loongson-pch-pic: Improve edge triggered
+      interrupt support
+    - lib/mpi: use kcalloc in mpi_resize
+    - nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
+    - block: nbd: add sanity check for first_minor
+    - [arm64,armhf] irqchip/gic-v3: Fix priority comparison when non-secure
+      priorities are used
+    - [x86] crypto: qat - use proper type for vf_mask
+    - [powerpc*] tpm: ibmvtpm: Avoid error message when process gets signal
+      while waiting
+    - [x86] mce: Defer processing of early errors
+    - blk-crypto: fix check for too-large dun_bytes
+    - [arm64] regulator: vctrl: Use locked regulator_get_voltage in probe path
+    - [arm64] regulator: vctrl: Avoid lockdep warning in enable/disable ops
+    - [arm64,armhf] drm/panfrost: Fix missing clk_disable_unprepare() on error
+      in panfrost_clk_init()
+    - [x86] drm/gma500: Fix end of loop tests for list_for_each_entry
+    - drm/of: free the right object
+    - bpf: Fix a typo of reuseport map in bpf.h.
+    - bpf: Fix potential memleak and UAF in the verifier.
+    - drm/of: free the iterator object on failure
+    - [amd64,arm64] gve: fix the wrong AdminQ buffer overflow check
+    - [armhf] dts: everest: Add phase corrections for eMMC
+    - i40e: improve locking of mac_filter_hash
+    - gfs2: Fix memory leak of object lsi on error return path
+    - firmware: fix theoretical UAF race with firmware cache and resume
+    - driver core: Fix error return code in really_probe()
+    - media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
+    - media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
+    - media: dvb-usb: Fix error handling in dvb_usb_i2c_init
+    - net: usb: asix: ax88772: add missing stop
+    - media: go7007: fix memory leak in go7007_usb_probe
+    - media: go7007: remove redundant initialization
+    - [armhf] media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
+    - Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
+    - Bluetooth: btusb: Fix a unspported condition to set available debug
+      features
+    - [x86] drm/amdgpu/acp: Make PM domain really work
+    - tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
+    - [armhf] dts: meson8b: odroidc1: Fix the pwm regulator supply properties
+    - [armhf] dts: meson8b: mxq: Fix the pwm regulator supply properties
+    - [armhf] dts: meson8b: ec100: Fix the pwm regulator supply properties
+    - net/mlx5e: Prohibit inner indir TIRs in IPoIB
+    - net/mlx5e: Block LRO if firmware asks for tunneled LRO
+    - cgroup/cpuset: Fix a partition bug with hotplug
+    - net: cipso: fix warnings in netlbl_cipsov4_add_std
+    - Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
+    - drm/amd/pm: Fix a bug in semaphore double-lock
+    - net/mlx5: Fix missing return value in
+      mlx5_devlink_eswitch_inline_mode_set()
+    - leds: lt3593: Put fwnode in any case during ->probe()
+    - leds: trigger: audio: Add an activate callback to ensure the initial
+      brightness is set
+    - media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
+    - [armhf] media: omap3isp: Fix missing unlock in
+      isp_subdev_notifier_complete()
+    - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
+    - PCI: PM: Enable PME if it can be signaled from D3cold
+    - [arm64] net: dsa: build tag_8021q.c as part of DSA core
+    - debugfs: Return error during {full/open}_proxy_open() on rmmod
+    - Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
+    - [arm64,armhf] net: dsa: stop syncing the bridge mcast_router attribute at
+      join time
+    - [arm64,armhf] net: dsa: don't disable multicast flooding to the CPU even
+      without an IGMP querier
+    - PM: EM: Increase energy calculation precision
+    - [arm64] drm/msm: Fix error return code in msm_drm_init()
+    - [arm64] drm/msm/mdp4: refactor HW revision detection into
+      read_mdp_hw_revision
+    - [arm64] drm/msm/mdp4: move HW revision detection to earlier phase
+    - [arm64] drm/msm/dp: update is_connected status base on sink count at
+      dp_pm_resume()
+    - [arm64] drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary
+      LMs
+    - cgroup/cpuset: Miscellaneous code cleanup
+    - cgroup/cpuset: Fix violation of cpuset locking rule
+    - [x86] ASoC: Intel: Fix platform ID matching
+    - Bluetooth: fix repeated calls to sco_sock_kill
+    - [arm64] drm/msm/dsi: Fix some reference counted resource leaks
+    - [arm64] drm/msm/dp: replug event is converted into an unplug followed by
+      an plug events
+    - net/mlx5: Fix unpublish devlink parameters
+    - [x86] ASoC: rt5682: Properly turn off regulators if wrong device ID
+    - [arm64,armhf] usb: dwc3: meson-g12a: add IRQ check
+    - [arm64,armhf] usb: dwc3: qcom: add IRQ check
+    - mac80211: remove unnecessary NULL check in ieee80211_register_hw()
+    - [armhf] usb: phy: twl6030: add IRQ checks
+    - devlink: Clear whole devlink_flash_notify struct
+    - net: stmmac: fix INTR TBU status affecting irq count statistic
+    - Bluetooth: Move shutdown callback before flushing tx and rx queue
+    - PM: cpu: Make notifier chain use a raw_spinlock_t
+    - mac80211: Fix insufficient headroom issue for AMSDU
+    - locking/local_lock: Add missing owner initialization
+    - lockd: Fix invalid lockowner cast after vfs_test_lock
+    - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency()
+    - nfsd4: Fix forced-expiry locking
+    - [arm64] dts: marvell: armada-37xx: Extend PCIe MEM space
+    - [arm*] firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
+    - mm/swap: consider max pages in iomap_swapfile_add_extent
+    - Bluetooth: add timeout sanity check to hci_inquiry
+    - [armhf] i2c: s3c2410: fix IRQ check
+    - gfs2: init system threads before freeze lock
+    - rsi: fix error code in rsi_load_9116_firmware()
+    - rsi: fix an error code in rsi_probe()
+    - [x86] ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
+    - [x86] ASoC: Intel: Skylake: Fix module resource and format selection
+    - mmc: sdhci: Fix issue with uninitialized dma_slave_config
+    - [arm64,armhf] mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
+    - bpf: Fix possible out of bound write in narrow load handling
+    - [x86] hv_utils: Set the maximum packet size for VSS driver to the length
+      of the receive buffer
+    - CIFS: Fix a potencially linear read overflow
+    - [arm64] i2c: xlp9xx: fix main IRQ check
+    - [arm*] usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
+    - [arm64] tty: serial: fsl_lpuart: fix the wrong mapbase value
+    - iwlwifi: skip first element in the WTAS ACPI table
+    - net/mlx5: Lag, fix multipath lag activation
+    - net/mlx5: Remove all auxiliary devices at the unregister event
+    - net/mlx5e: Fix possible use-after-free deleting fdb rule
+    - net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
+    - net/mlx5e: Use correct eswitch for stack devices with lag
+    - [x86] misc/pvpanic: fix set driver data
+    - ice: fix Tx queue iteration for Tx timestamp enablement
+    - ice: add lock around Tx timestamp tracker flush
+    - ice: restart periodic outputs around time changes
+    - ice: Only lock to update netdev dev_addr
+    - net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the
+      driver probe list
+    - ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
+    - ALSA: usb-audio: Add lowlatency module option
+    - atlantic: Fix driver resume flow.
+    - bcma: Fix memory leak for internally-handled cores
+    - brcmfmac: pcie: fix oops on failure to resume and reprobe
+    - ipv6: make exception cache less predictible
+    - ipv4: make exception cache less predictible
+    - net: qrtr: make checks in qrtr_endpoint_post() stricter
+    - sch_htb: Fix inconsistency when leaf qdisc creation fails
+    - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
+    - ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
+    - [x86] ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
+    - iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
+    - f2fs: guarantee to write dirty data when enabling checkpoint back
+    - time: Handle negative seconds correctly in timespec64_to_ns()
+    - io_uring: limit fixed table size by RLIMIT_NOFILE
+    - io_uring: IORING_OP_WRITE needs hash_reg_file set
+    - io_uring: io_uring_complete() trace should take an integer
+    - io_uring: fail links of cancelled timeouts
+    - bio: fix page leak bio_add_hw_page failure
+    - raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
+    - cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED
+    - smb3: fix posix extensions mount option
+    - tty: Fix data race between tiocsti() and flush_to_ldisc()
+    - [x86] perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX
+    - [x86] Revert "KVM: x86: mmu: Add guest physical address check in
+      translate_gpa()"
+    - [s390x] KVM: index kvm->arch.idle_mask by vcpu_idx
+    - [x86] KVM: x86: Update vCPU's hv_clock before back to guest when
+      tsc_offset is adjusted
+    - [x86] KVM: x86: clamp host mapping level to max_level in
+      kvm_mmu_max_mapping_level
+    - [x86] KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage
+      stats
+    - [x86] KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
+    - [x86] KVM: nVMX: Unconditionally clear nested.pi_pending on nested
+      VM-Enter
+    - [arm64] KVM: arm64: Unregister HYP sections from kmemleak in protected
+      mode
+    - [arm64] KVM: arm64: vgic: Resample HW pending state on deactivation
+    - io-wq: check max_worker limits if a worker transitions bound state
+    - md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard
+    - fuse: truncate pagecache on atomic_o_trunc
+    - fuse: flush extending writes
+    - fuse: wait for writepages in syncfs
+    - fbmem: don't allow too huge resolutions
+    - [amd64] ACPI: PRM: Find PRMT table before parsing it
+    - RDMA/mlx5: Fix number of allocated XLT entries
+    - backlight: pwm_bl: Improve bootloader/kernel device handover
+    - [armel] clk: kirkwood: Fix a clocking boot regression
+    - devlink: Break parameter notification sequence to be before/after
+      unload/load driver
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.5
+    - Revert "posix-cpu-timers: Force next expiration recalc after itimer reset"
+    - Revert "time: Handle negative seconds correctly in timespec64_to_ns()"
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.6
+    - io_uring: place fixed tables under memcg limits
+    - io_uring: add ->splice_fd_in checks
+    - io_uring: fix io_try_cancel_userdata race for iowq
+    - io-wq: fix wakeup race when adding new work
+    - io-wq: fix race between adding work and activating a free worker
+    - btrfs: use delalloc_bytes to determine flush amount for shrink_delalloc
+    - btrfs: wake up async_delalloc_pages waiters after submit
+    - btrfs: wait on async extents when flushing delalloc
+    - btrfs: reduce the preemptive flushing threshold to 90%
+    - btrfs: do not do preemptive flushing if the majority is global rsv
+    - btrfs: zoned: fix block group alloc_offset calculation
+    - btrfs: zoned: suppress reclaim error message on EAGAIN
+    - btrfs: fix upper limit for max_inline for page size 64K
+    - btrfs: reset replace target device to allocation state on close
+    - btrfs: zoned: fix double counting of split ordered extent
+    - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
+    - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
+    - [powerpc*] perf/hv-gpci: Fix counter value parsing
+    - xen: fix setting of max_pfn in shared_info
+    - 9p/xen: Fix end of loop tests for list_for_each_entry
+    - ceph: fix dereference of null pointer cf
+    - Input: elan_i2c - reduce the resume time for controller in Whitebox
+    - [armhf] soc: aspeed: lpc-ctrl: Fix boundary check for mmap
+    - [armhf] soc: aspeed: p2a-ctrl: Fix boundary check for mmap
+    - [arm64] Move .hyp.rodata outside of the _sdata.._edata range
+    - [arm64] mm: Fix TLBI vs ASID rollover
+    - [arm64] head: avoid over-mapping in map_memory
+    - [arm64] Do not trap PMSNEVFR_EL1
+    - iio: ltc2983: fix device probe
+    - [arm64] wcn36xx: Ensure finish scan is not requested before start scan
+    - block: bfq: fix bfq_set_next_ioprio_data()
+    - [x86] power: supply: max17042: handle fails of reading status register
+    - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
+    - [x86] crypto: ccp - shutdown SEV firmware on kexec
+    - [x86] VMCI: fix NULL pointer dereference when unmapping queue pair
+    - media: uvc: don't do DMA on stack
+    - media: rc-loopback: return number of emitters rather than error
+    - nvmem: core: fix error handling while validating keepout regions
+    - [s390x] qdio: fix roll-back after timeout on ESTABLISH ccw
+    - [s390x] qdio: cancel the ESTABLISH ccw after timeout
+    - [armhf] Revert "dmaengine: imx-sdma: refine to load context only once"
+    - [armhf] dmaengine: imx-sdma: remove duplicated sdma_load_context
+    - [x86] watchdog: iTCO_wdt: Fix detection of SMI-off case
+    - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
+    - sched: Prevent balance_push() on remote runqueues
+    - f2fs: let's keep writing IOs on SBI_NEED_FSCK
+    - f2fs: fix to do sanity check for sb/cp fields correctly
+    - PCI/portdrv: Enable Bandwidth Notification only if port supports it
+    - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
+    - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
+    - [arm64] PCI: xilinx-nwl: Enable the clock through CCF
+    - [arm64] PCI: aardvark: Configure PCIe resources from 'ranges' DT property
+    - [arm64] PCI: aardvark: Fix checking for PIO status
+    - [arm64] PCI: aardvark: Increase polling delay to 1.5s while waiting for
+      PIO response
+    - [arm64] PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
+    - HID: input: do not report stylus battery state as "full"
+    - f2fs: quota: fix potential deadlock
+    - [arm64] pinctrl: armada-37xx: Correct PWM pins definitions
+    - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
+    - [arm64,armhf] clk: rockchip: drop GRF dependency for rk3328/rk3036 pll
+      types
+    - [amd64] IB/hfi1: Adjust pkey entry in index 0
+    - RDMA/iwcm: Release resources if iw_cm module initialization fails
+    - docs: Fix infiniband uverbs minor number
+    - scsi: BusLogic: Use %X for u32 sized integer rather than %lX
+    - [armhf] pinctrl: samsung: Fix pinctrl bank pin count
+    - f2fs: do not submit NEW_ADDR to read node block
+    - f2fs: turn back remapped address in compressed page endio
+    - f2fs: fix wrong checkpoint_changed value in f2fs_remount()
+    - scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
+    - scsi: ufs: Use DECLARE_COMPLETION_ONSTACK() where appropriate
+    - scsi: ufs: Fix the SCSI abort handler
+    - [powerpc*] cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
+    - [powerpc*] stacktrace: Include linux/delay.h
+    - [arm64] RDMA/hns: Don't overwrite supplied QP attributes
+    - RDMA/mlx5: Delete not-available udata check
+    - [powerpc*] cpuidle: pseries: Mark pseries_idle_proble() as __init
+    - f2fs: reduce the scope of setting fsck tag when de->name_len is zero
+    - xprtrdma: Put rpcrdma_reps before waking the tear-down completion
+    - NFSv4/pNFS: Fix a layoutget livelock loop
+    - NFSv4/pNFS: Always allow update of a zero valued layout barrier
+    - NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
+    - SUNRPC: Fix potential memory corruption
+    - SUNRPC/xprtrdma: Fix reconnection locking
+    - sunrpc: Fix return value of get_srcport()
+    - scsi: ufs: Fix unsigned int compared with less than zero
+    - scsi: ufshcd: Fix device links when BOOT WLUN fails to probe
+    - [arm64,armhf] pinctrl: single: Fix error return code in
+      pcs_parse_bits_in_pinctrl_entry()
+    - [powerpc*] numa: Consider the max NUMA node for migratable LPAR
+    - scsi: smartpqi: Fix an error code in pqi_get_raid_map()
+    - scsi: qedi: Fix error codes in qedi_alloc_global_queues()
+    - scsi: qedf: Fix error codes in qedf_alloc_global_queues()
+    - f2fs: fix to keep compatibility of fault injection interface
+    - iommu/vt-d: Update the virtual command related registers
+    - [arm64] RDMA/hns: Fix return in hns_roce_rereg_user_mr()
+    - [amd64] HID: amd_sfh: Fix period data field to enable sensor
+    - HID: i2c-hid: Fix Elan touchpad regression
+    - HID: thrustmaster: clean up Makefile and adapt quirks
+    - [arm64] RDMA/hns: Ownerbit mode add control field
+    - [arm64] clk: imx8mm: use correct mux type for clkout path
+    - [arm64,armhf] clk: imx8m: fix clock tree update of TF-A managed clocks
+    - [powerpc*] KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
+    - [powerpc*] KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when
+      guest SPRs are live
+    - [powerpc*] powerpc/perf: Fix the check for SIAR value
+    - [arm64] RDMA/hns: Fix incorrect lsn field
+    - [arm64] RDMA/hns: Bugfix for data type of dip_idx
+    - [arm64] RDMA/hns: Bugfix for the missing assignment for dip_idx
+    - [arm64] RDMA/hns: Bugfix for incorrect association between dip_idx and
+      dgid
+    - [x86] platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from
+      run_smbios_call
+    - [powerpc*] smp: Fix a crash while booting kvm guest with nr_cpus=2
+    - [powerpc*] smp: Update cpu_core_map on all PowerPc systems
+    - [arm64] RDMA/hns: Fix query destination qpn
+    - [arm64] RDMA/hns: Fix QP's resp incomplete assignment
+    - fscache: Fix cookie key hashing
+    - [powerpc*] KVM: PPC: Fix clearing never mapped TCEs in realmode
+    - f2fs: fix to account missing .skipped_gc_rwsem
+    - f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
+    - f2fs: fix to unmap pages from userspace process in punch_hole()
+    - f2fs: deallocate compressed pages when error happens
+    - f2fs: should put a page beyond EOF when preparing a write
+    - [mips64el,mipsel] Malta: fix alignment of the devicetree buffer
+    - userfaultfd: prevent concurrent API initialization
+    - [x86] drm/vmwgfx: Fix subresource updates with new contexts
+    - [x86] drm/vmwgfx: Fix some static checker warnings
+    - [arm*] drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
+    - drm/ttm: Fix multihop assert on eviction.
+    - [armhf] drm/omap: Follow implicit fencing in prepare_fb
+    - drm/amdgpu: Fix amdgpu_ras_eeprom_init()
+    - drm/amdgpu: Fix koops when accessing RAS EEPROM
+    - [arm*] drm: vc4: Fix pixel-wrap issue with DVP teardown
+    - dma-buf: fix dma_resv_test_signaled test_all handling v2
+    - drm/panel: Fix up DT bindings for Samsung lms397kf04
+    - [armhf] ASoC: ti: davinci-mcasp: Fix DIT mode support
+    - media: dib8000: rewrite the init prbs logic
+    - [x86] hyperv: fix for unwanted manipulation of sched_clock when TSC marked
+      unstable
+    - PCI: Use pci_update_current_state() in pci_enable_device_flags()
+    - tipc: keep the skb in rcv queue until the whole data is read
+    - net: phy: Fix data type in DP83822 dp8382x_disable_wol()
+    - iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
+    - iavf: do not override the adapter state in the watchdog task
+    - iavf: fix locking of critical sections
+    - video: fbdev: kyro: fix a DoS bug by restricting user input
+    - drm/ast: Disable fast reset after DRAM initial
+    - netlink: Deal with ESRCH error in nlmsg_notify()
+    - [arm64] dts: qcom: Fix usb entries for SA8155p adp board
+    - drm: avoid blocking in drm_clients_info's rcu section
+    - drm: serialize drm_file.master with a new spinlock
+    - drm: protect drm_master pointers in drm_lease.c
+    - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
+    - igc: Check if num of q_vectors is smaller than max before array access
+    - usb: gadget: u_ether: fix a potential null pointer dereference
+    - [armhf] USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
+    - usb: gadget: composite: Allow bMaxPower=0 if self-powered
+    - tty: serial: jsm: hold port lock when reporting modem line changes
+    - [arm64] bus: fsl-mc: fix arg in call to dprc_scan_objects()
+    - [arm64] bus: fsl-mc: fix mmio base address for child DPRCs
+    - [x86] misc/pvpanic-pci: Allow automatic loading
+    - nfp: fix return statement in nfp_net_parse_meta()
+    - ethtool: improve compat ioctl handling
+    - drm/amdgpu: Fix a printing message
+    - [arm64] dts: allwinner: h6: tanix-tx6: Fix regulator node names
+    - video: fbdev: kyro: Error out if 'pixclock' equals zero
+    - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
+    - flow_dissector: Fix out-of-bounds warnings
+    - [s390x] jump_label: print real address in a case of a jump label bug
+    - [s390x] make PCI mio support a machine flag
+    - serial: 8250: Define RX trigger levels for OxSemi 950 devices
+    - serial: 8250_pci: make setup_port() parameters explicitly unsigned
+    - vt: keyboard.c: make console an unsigned int
+    - Bluetooth: skip invalid hci_sync_conn_complete_evt
+    - workqueue: Fix possible memory leaks in wq_numa_init()
+    - [arm64] drm/msm/a6xx: Fix llcc configuration for a660 gpu
+    - netfilter: nft_compat: use nfnetlink_unicast()
+    - bonding: 3ad: fix the concurrency between __bond_release_one() and
+      bond_3ad_state_machine_handler()
+    - [x86] ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps
+      for the matching in-/output
+    - Bluetooth: Fix not generating RPA when required
+    - [armhf] media: imx: imx7-media-csi: Fix buffer return upon stream start
+      failure
+    - media: v4l2-dv-timings.c: fix wrong condition in two for-loops
+    - gfs2: Fix glock recursion in freeze_go_xmote_bh
+    - [arm*] misc: sram: Only map reserved areas in Tegra SYSRAM
+    - [armhf] dts: imx53-ppd: Fix ACHC entry
+    - [arm64] dts: qcom: sdm660: use reg value for memory node
+    - [arm64] nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
+    - [arm64] net: ethernet: stmmac: Do not use unreachable() in
+      ipq806x_gmac_probe()
+    - [arm64] drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
+    - [arm64] drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
+    - [x86] thunderbolt: Fix port linking by checking all adapters
+    - [x86] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
+    - staging: rtl8723bs: fix right side of condition
+    - Bluetooth: schedule SCO timeouts with delayed_work
+    - Bluetooth: avoid circular locks in sco_sock_connect
+    - [arm64] drm/msm/dp: reduce link rate if failed at link training 1
+    - [arm64] drm/msm/dp: reset aux controller after dp_aux_cmd_fifo_tx()
+      failed.
+    - [arm64] drm/msm/dp: return correct edid checksum after corrupted edid
+      checksum read
+    - [arm64] drm/msm/dp: do not end dp link training until video is ready
+    - net/mlx5: Fix variable type to match 64bit
+    - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable
+      access in amdgpu_i2c_router_select_ddc_port()
+    - mac80211: Fix monitor MTU limit so that A-MSDUs get through
+    - nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
+    - nvme: code command_id with a genctr for use-after-free validation
+    - Bluetooth: Fix handling of LE Enhanced Connection Complete
+    - Bluetooth: Fix race condition in handling NOP command
+    - opp: Don't print an error if required-opps is missing
+    - [sh4] serial: sh-sci: fix break handling for sysrq
+    - iomap: pass writeback errors to the mapping
+    - tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
+    - locking/rtmutex: Set proper wait context for lockdep
+    - rpc: fix gss_svc_init cleanup on failure
+    - iavf: use mutexes for locking of critical sections
+    - [armhf] hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
+    - [x86] staging: rts5208: Fix get_ms_information() heap buffer size
+    - net: Fix offloading indirect devices dependency on qdisc order creation
+    - gfs2: Don't call dlm after protocol is unmounted
+    - [arm64,armhf] usb: chipidea: host: fix port index underflow and UBSAN
+      complains
+    - lockd: lockd server-side shouldn't set fl_ops
+    - [armhf] drm/exynos: Always initialize mapping in exynos_drm_register_dma()
+    - rtl8xxxu: Fix the handling of TX A-MPDU aggregation
+    - rtw88: use read_poll_timeout instead of fixed sleep
+    - rtw88: wow: build wow function only if CONFIG_PM is on
+    - rtw88: wow: fix size access error of probe request
+    - btrfs: remove racy and unnecessary inode transaction update when using
+      no-holes
+    - btrfs: tree-log: check btrfs_lookup_data_extent return value
+    - soundwire: intel: fix potential race condition during power down
+    - [x86] ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
+    - [x86] ASoC: Intel: Skylake: Fix passing loadable flag for module
+    - of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
+    - [arm64] mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for
+      ZynqMP
+    - [arm64] mmc: sdhci-of-arasan: Check return value of non-void funtions
+    - mmc: core: Avoid hogging the CPU while polling for busy in the I/O err
+      path
+    - mmc: core: Avoid hogging the CPU while polling for busy for mmc ioctls
+    - mmc: core: Avoid hogging the CPU while polling for busy after I/O writes
+    - mmc: rtsx_pci: Fix long reads when clock is prescaled
+    - mmc: core: Return correct emmc response in case of ioctl error
+    - cifs: fix wrong release in sess_alloc_buffer() failed path
+    - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
+      quirk set"
+    - [arm64] usb: dwc3: imx8mp: request irq after initializing dwc3
+    - [armhf] usb: musb: musb_dsps: request_irq() after initializing musb
+    - usbip: give back URBs for unsent unlink requests during cleanup
+    - usbip:vhci_hcd USB port can get stuck in the disabled state
+    - [arm64,armhf] ASoC: rockchip: i2s: Fix regmap_ops hang
+    - [arm64,armhf] ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
+    - ASoC: soc-pcm: protect BE dailink state changes in trigger
+    - nfs: don't atempt blocking locks on nfs reexports
+    - nfsd: fix crash on LOCKT on reexported NFSv3
+    - iwlwifi: pcie: free RBs during configure
+    - iwlwifi: mvm: Do not use full SSIDs in 6GHz scan
+    - iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
+    - iwlwifi: mvm: avoid static queue number aliasing
+    - iwlwifi: mvm: Fix umac scan request probe parameters
+    - iwlwifi: mvm: fix access to BSS elements
+    - iwlwifi: fw: correctly limit to monitor dump
+    - iwlwifi: mvm: don't schedule the roc_done_wk if it is already running
+    - iwlwifi: mvm: Fix scan channel flags settings
+    - net/mlx5: DR, fix a potential use-after-free bug
+    - net/mlx5: DR, Enable QP retransmission
+    - [arm64] usb: isp1760: fix memory pool initialization
+    - [arm64] usb: isp1760: fix qtd fill length
+    - [arm64] usb: isp1760: write to status and address register
+    - [arm64] usb: isp1760: use the right irq status bit
+    - [arm64] usb: isp1760: otg control register access
+    - parport: remove non-zero check on count
+    - [arm64] wcn36xx: Fix missing frame timestamp for beacon/probe-resp
+    - ath9k: fix OOB read ar9300_eeprom_restore_internal
+    - ath9k: fix sleeping in atomic context
+    - net: fix NULL pointer reference in cipso_v4_doi_free
+    - fix array-index-out-of-bounds in taprio_change
+    - [arm64] net: hns3: clean up a type mismatch warning
+    - printk/console: Check consistent sequence number when handling race in
+      console_unlock()
+    - ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
+    - scsi: BusLogic: Fix missing pr_cont() use
+    - scsi: qla2xxx: Changes to support kdump kernel
+    - scsi: qla2xxx: Sync queue idx with queue_pair_map idx
+    - [powerpc*] cpufreq: powernv: Fix init_chip_info initialization in numa=off
+    - [s390x] pv: fix the forcing of the swiotlb
+    - [s390x] topology: fix topology information when calling cpu hotplug
+      notifiers
+    - mm: fix panic caused by __page_handle_poison()
+    - hugetlb: fix hugetlb cgroup refcounting during vma split
+    - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
+    - mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
+    - mm/hugetlb: initialize hugetlb_usage in mm_init
+    - mm,vmscan: fix divide by zero in get_scan_count
+    - mm/page_alloc.c: avoid accessing uninitialized pcp page migratetype
+    - mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task
+    - memcg: enable accounting for pids in nested pid namespaces
+    - libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
+    - platform/chrome: cros_ec_proto: Send command again when timeout occurs
+    - net: stmmac: Fix overall budget calculation for rxtx_napi
+    - [x86] drm/mgag200: Select clock in PLL update functions
+    - [arm64] drm/msi/mdp4: populate priv->kms in mdp4_kms_init
+    - drm/dp_mst: Fix return code on sideband message failure
+    - [arm64,armhf] drm/panfrost: Make sure MMU context lifetime is not bound to
+      panfrost_priv
+    - drm/amdgpu: Fix BUG_ON assert
+    - drm/amdgpu: Enable S/G for Yellow Carp
+    - drm/amdgpu: Fix a deadlock if previous GEM object allocation fails
+    - [arm64] drm/msm/disp/dpu1: add safe lut config in dpu driver
+    - drm/ttm: Fix ttm_bo_move_memcpy() for subclassed struct ttm_resource
+    - [arm64,armhf] drm/panfrost: Simplify lock_region calculation
+    - [arm64,armhf] drm/panfrost: Use u64 for size in lock_region
+    - [arm64,armhf] drm/panfrost: Clamp lock region to Bifrost minimum
+
+  [ Vincent Blut ]
+  * [arm64] drivers/bus/fsl-mc: Enable FSL_MC_UAPI_SUPPORT (Closes: #992988)
+  * [arm64] drivers/vfio/fsl-mc: Enable VFIO_FSL_MC as module (Closes: #993000)
+  * [arm64] drivers/firmware: Enable ARM_SCPI_PROTOCOL as module
+    (Closes: #929528)
+  * [arm64] drivers/hwmon: Enable SENSORS_ARM_SCPI as module
+  * [arm64] drivers/mailbox: Enable ARM_MHU, PLATFORM_MHU as modules
+  * [armhf] drivers/input/misc: Enable INPUT_TPS65218_PWRBUTTON as module
+    (Closes: #944518)
+
+  [ Heiko Thiery ]
+  * [arm64] drivers/regulator: Enable REGULATOR_PCA9450 as module
+  * [arm64] drivers/regulator: Enable REGULATOR_PFUZE100 as module
+  * [arm64] drivers/pci/controller: Enable PCI_IMX6
+
+  [ Salvatore Bonaccorso ]
+  * dccp: don't duplicate ccid when cloning dccp sock (CVE-2020-16119)
+  * bnx2x: Fix enabling network interfaces without VFs (Closes: #993948)
+  * Refresh "kbuild: Make the toolchain variables easily overwritable"
+  * Drop "Partially revert "net: socket: implement 64-bit timestamps""
+  * Set ABI to 1
+  * [mipsel] bpf, mips: Validate conditional branch offsets (CVE-2021-38300)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 18 Sep 2021 20:58:49 +0200
+
+linux (5.14.3-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.3
+    - firmware: dmi: Move product_sku info to the end of the modalias
+    - igmp: Add ip_mc_list lock in ip_check_mc_rcu
+    - Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables
+      ASPM"
+    - ALSA: usb-audio: Add registration quirk for JBL Quantum 800
+    - Bluetooth: Add additional Bluetooth part for Realtek 8852AE
+    - Bluetooth: btusb: Make the CSR clone chip force-suspend workaround more
+      generic
+    - xhci: fix even more unsafe memory usage in xhci tracing
+    - xhci: fix unsafe memory usage in xhci tracing
+    - xhci: Fix failure to give back some cached cancelled URBs.
+    - [x86] reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
+    - PCI: Call Max Payload Size-related fixup quirks early
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 12 Sep 2021 19:17:38 +0200
+
+linux (5.14.2-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.2
+    - ext4: fix race writing to an inline_data file while its xattrs are
+      changing
+    - ext4: fix e2fsprogs checksum failure for mounted filesystem
+    - USB: serial: pl2303: fix GL type detection
+    - USB: serial: cp210x: fix control-characters error handling
+    - USB: serial: cp210x: fix flow-control error handling
+    - HID: usbhid: Fix flood of "control queue full" messages
+    - HID: usbhid: Fix warning caused by 0-length input reports
+    - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup
+    - ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC
+    - ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
+    - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
+    - ALSA: usb-audio: Work around for XRUN with low latency playback
+    - media: stkwebcam: fix memory leak in stk_camera_probe
+
+  [ Vincent Blut ]
+  * drivers/media/cec: Enable MEDIA_CEC_RC (Closes: #872650)
+  * drivers/hid: Enable various HID drivers as modules (Closes: #988277)
+  * [x86] drivers/platform/chrome: Enable CROS_EC as module and set
+    CROS_EC_PROTO explicitly
+  * [arm64] sound/soc/generic: Enable SND_AUDIO_GRAPH_CARD as module
+    (Closes: #987576)
+  * drivers/net/wireless/mediatek/mt76/mt7915: Enable MT7915E as module
+    (Closes: #993865)
+  * drivers/net/wireless/mediatek/mt76/mt7921: Enable MT7921E as module
+  * drivers/net/wireless/mediatek/mt76/mt7615: Enable MT7615E, MT7663U as
+    modules
+
+  [ Salvatore Bonaccorso ]
+  * HID: apple: Add missing scan code event for keys handled by hid-apple
+    (Closes: #757356)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 10 Sep 2021 00:20:28 +0200
+
+linux (5.14.1-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.1
+    - vt_kdsetmode: extend console locking (CVE-2021-3753)
+    - Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
+    - btrfs: fix NULL pointer dereference when deleting device by invalid id
+      (CVE-2021-3739)
+    - Revert "floppy: reintroduce O_NDELAY fix"
+    - fscrypt: add fscrypt_symlink_getattr() for computing st_size
+    - ext4: report correct st_size for encrypted symlinks
+    - f2fs: report correct st_size for encrypted symlinks
+    - ubifs: report correct st_size for encrypted symlinks
+    - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
+    - audit: move put_tree() to avoid trim_trees refcount underflow and UAF
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 07 Sep 2021 08:40:13 +0200
+
+linux (5.14-1~exp2) experimental; urgency=medium
+
+  [ Bastian Blank ]
+  * Fix perf build.
+  * Enable EVM, ENCRYPTED_KEYS. (closes: #993535)
+  * Enable IMA_SIG_TEMPLATE.
+  * Enable AMD_SFH_HID, AMD_PMC. (closes: #992832)
+  * Enable TMPFS_INODE64. (closes: #993641)
+  * Move more into nic-shared-modules.
+
+  [ Diederik de Haas ]
+  * [arm64] sound/soc/codecs: Enable SND_SOC_RK3328 as module
+  * [arm64,armhf] drivers/input/misc: Enable INPUT_RK805_PWRKEY as module
+  * [arm64,armhf] drivers/pinctrl: Enable PINCTRL_RK805 (Closes: #990536)
+  * [arm64] drivers/mfd: Make MFD_RK808 builtin
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 05 Sep 2021 20:51:25 +0200
+
+linux (5.14-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.14
+
+  [ Aurelien Jarno ]
+  * [riscv64] Enable KEXEC.
+  * [riscv64] Add initial Microchip Polarfire support: enable
+    SOC_MICROCHIP_POLARFIRE, MMC_SDHCI_PLTFM, MMC_SDHCI_CADENCE and
+    PCIE_MICROCHIP_HOST.
+  * [riscv64] Improve HiFive Unmatched support: enable PCIE_DW_PLAT_HOST and
+    PCIE_FU740.
+
+  [ Vincent Blut ]
+  * [armhf] drivers/leds: Enable LEDS_PCA963X as module (Closes: #908196)
+
+  [ Salvatore Bonaccorso ]
+  * net/batman-adv: Enable BATMAN_ADV_BATMAN_V
+
+  [ Bastian Blank ]
+  * [powerpc*] Disable support for debugging VDSO.
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 01 Sep 2021 21:49:53 +0200
+
+linux (5.13.12-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.10
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.11
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.12
+
+  [ Salvatore Bonaccorso ]
+  * net: Enable MPTCP (Closes: #987815)
+
+  [ Bastian Blank ]
+  * [mips*] Increase RELOCATION_TABLE_SIZE to 0x1c0000.
+  * Enable SECURITY_LANDLOCK, SECURITY_PATH.
+  * Fix external modules build. (closes: #992219)
+  * Force more compressions modules into main installer package.
+    (closes: #992221)
+  * Drop redundant patch for overlay in user namespace.
+
+  [ Uwe Kleine-König ]
+  * [x86] Enable X86_PLATFORM_DRIVERS_DELL which is needed to keep some Dell
+    specific drivers. (Closes: #992251)
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 20 Aug 2021 22:39:29 +0200
+
+linux (5.13.9-1~exp2) experimental; urgency=medium
+
+  * Fix linux-cpupower installation.
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 10 Aug 2021 21:12:41 +0200
+
+linux (5.13.9-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.11
+  * New upstream release: https://kernelnewbies.org/Linux_5.12
+  * New upstream release: https://kernelnewbies.org/Linux_5.13
+
+  [ Bastian Blank ]
+  * Always build-depend on native libelf-dev.
+  * Specify trusted certs file in package config.
+  * Enable PROC_VMCORE.
+  * Enable SECURITYFS.
+  * Re-enable IMA. (closes: #972459)
+  * [x86] Enable AMD_MEM_ENCRYPT. (closes: #983586, #989040)
+  * Enable UNICODE. (closes: #985689)
+  * Enable CGROUP_MISC.
+  * [x86] Enable PINCTRL_ALDERLAKE, PINCTRL_ELKHARTLAKE, PINCTRL_EMMITSBURG,
+    PINCTRL_JASPERLAKE, PINCTRL_LAKEFIELD.
+  * [amd64] Enable MICROSOFT_MANA.
+  * [arm64] Enable GVE. (closes: #991835)
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 09 Aug 2021 18:35:43 +0200
+
+linux (5.10.46-4) unstable; urgency=medium
+
+  * bpf: Introduce BPF nospec instruction for mitigating Spectre v4
+    (CVE-2021-34556, CVE-2021-35477)
+  * bpf: Fix leakage due to insufficient speculative store bypass mitigation
+    (CVE-2021-34556, CVE-2021-35477)
+  * bpf: Remove superfluous aux sanitation on subprog rejection
+  * Ignore ABI changes for bpf_offload_dev_create and bpf_verifier_log_write
+  * bpf: Add kconfig knob for disabling unpriv bpf by default
+  * init: Enable BPF_UNPRIV_DEFAULT_OFF (Closes: #990411)
+  * linux-image: Add NEWS entry documenting that unprivileged calls to bpf() are
+    disabled by default in Debian.
+  * bpf: verifier: Allocate idmap scratch in verifier env
+  * bpf: Fix pointer arithmetic mask tightening under state pruning
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 03 Aug 2021 07:50:50 +0200
+
+linux (5.10.46-3) unstable; urgency=medium
+
+  * [armhf] Add mdio-aspeed to nic-modules.
+    Thanks to Joel Stanley <joel@jms.id.au> (Closes: #991262)
+  * Revert "drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue."
+    (Closes: #990312)
+  * Revert "drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full
+    doorbell." (Closes: #990312)
+  * Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
+    (CVE-2021-3612)
+  * sctp: validate from_addr_param return (CVE-2021-3655)
+  * sctp: add size validation when walking chunks (CVE-2021-3655)
+  * [s390x] sclp_vt220: fix console name to match device (Closes: #961056)
+  * block: return the correct bvec when checking for gaps
+  * sctp: fix return value check in __sctp_rcv_asconf_lookup
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 28 Jul 2021 07:55:40 +0200
+
+linux (5.10.46-2) unstable; urgency=medium
+
+  * swiotlb: manipulate orig_addr when tlb_addr has offset (Closes: #989778)
+  * KVM: do not allow mapping valid but non-reference-counted pages
+    (CVE-2021-22543)
+  * [x86] platform/x86: toshiba_haps: Fix missing newline in pr_debug call in
+    toshiba_haps_notify (Closes: #799193)
+  * seq_file: Disallow extremely large seq buffer allocations (CVE-2021-33909)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 20 Jul 2021 14:06:36 +0200
+
+linux (5.10.46-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.41
+    - context_tracking: Move guest exit context tracking to separate helpers
+    - context_tracking: Move guest exit vtime accounting to separate helpers
+    - [x86] KVM: Defer vtime accounting 'til after IRQ handling
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42
+    - ALSA: hda/realtek: the bass speaker can't output sound on Yoga 9i
+    - ALSA: hda/realtek: Headphone volume is controlled by Front mixer
+    - ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation P340
+    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
+    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook G8
+    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 15
+      G8
+    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 17
+      G8
+    - ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
+    - ALSA: usb-audio: scarlett2: Improve driver startup messages
+    - cifs: set server->cipher_type to AES-128-CCM for SMB3.0
+    - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
+    - iommu/vt-d: Fix sysfs leak in alloc_iommu()
+    - proc: Check /proc/$pid/attr/ writes against file opener
+    - net: hso: fix control-request directions
+    - net/sched: fq_pie: re-factor fix for fq_pie endless loop
+    - net/sched: fq_pie: fix OOB access in the traffic path
+    - netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to
+      non-AVX2 version
+    - mac80211: assure all fragments are encrypted (CVE-2020-26147)
+    - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586,
+      CVE-2020-24587)
+    - mac80211: properly handle A-MSDUs that start with an RFC 1042 header
+    - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24588)
+    - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24588)
+    - mac80211: add fragment cache to sta_info
+    - mac80211: check defrag PN against current frame
+    - mac80211: prevent attacks on TKIP/WEP as well
+    - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-26139)
+    - mac80211: extend protection against mixed key and fragment cache attacks
+      (CVE-2020-24586, CVE-2020-24587)
+    - ath10k: add CCMP PN replay protection for fragmented frames for PCIe
+    - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-26145)
+    - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-26145)
+    - ath10k: drop MPDU which has discard flag set by firmware for SDIO
+      (CVE-2020-24588)
+    - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-26141)
+    - ath10k: Validate first subframe of A-MSDU before processing the list
+    - ath11k: Clear the fragment cache during key install (CVE-2020-24587)
+    - dm snapshot: properly fix a crash when an origin has no snapshots
+    - drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate
+    - [amd64] drm/amdkfd: correct sienna_cichlid SDMA RLC register offset error
+    - drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate
+    - drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate
+    - drm/amdgpu/jpeg2.0: add cancel_delayed_work_sync before power gate
+    - Documentation: seccomp: Fix user notification documentation
+    - seccomp: Refactor notification handler to prepare for new semantics
+    - serial: core: fix suspicious security_locked_down() call
+    - misc/uss720: fix memory leak in uss720_probe
+    - [x86] thunderbolt: usb4: Fix NVM read buffer bounds and offset issue
+    - [x86] thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
+    - [x86] KVM: Fix vCPU preempted state from guest's point of view
+    - [arm64] KVM: Prevent mixed-width VM creation
+    - [x86] mei: request autosuspend after sending rx flow control
+    - iio: gyro: fxas21002c: balance runtime power in error path
+    - iio: dac: ad5770r: Put fwnode in error case during ->probe()
+    - iio: adc: ad7768-1: Fix too small buffer passed to
+      iio_push_to_buffers_with_timestamp()
+    - iio: adc: ad7124: Fix missbalanced regulator enable / disable on error.
+    - iio: adc: ad7124: Fix potential overflow due to non sequential channel
+      numbers
+    - iio: adc: ad7923: Fix undersized rx buffer.
+    - iio: adc: ad7793: Add missing error code in ad7793_setup()
+    - iio: adc: ad7192: Avoid disabling a clock that was never enabled.
+    - iio: adc: ad7192: handle regulator voltage error first
+    - serial: 8250: Add UART_BUG_TXRACE workaround for Aspeed VUART
+    - serial: 8250_dw: Add device HID for new AMD UART controller
+    - serial: 8250_pci: Add support for new HPE serial device
+    - serial: 8250_pci: handle FL_NOIRQ board flag
+    - USB: trancevibrator: fix control-request direction
+    - Revert "irqbypass: do not start cons/prod when failed connect"
+    - USB: usbfs: Don't WARN about excessively large memory allocations
+    - drivers: base: Fix device link removal
+    - [arm64,armhf] serial: tegra: Fix a mask operation that is always true
+    - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
+    - USB: serial: ti_usb_3410_5052: add startech.com device id
+    - USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
+    - USB: serial: ftdi_sio: add IDs for IDS GmbH Products
+    - USB: serial: pl2303: add device id for ADLINK ND-6530 GC
+    - [x86] thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID
+    - [arm64,armhf] usb: dwc3: gadget: Properly track pending and queued SG
+    - [arm64,x86] usb: typec: mux: Fix matching with typec_altmode_desc
+    - net: usb: fix memory leak in smsc75xx_bind
+    - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
+    - fs/nfs: Use fatal_signal_pending instead of signal_pending
+    - NFS: fix an incorrect limit in filelayout_decode_layout()
+    - NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
+    - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
+    - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
+    - [arm64] drm/meson: fix shutdown crash when component not probed
+    - net/mlx5e: reset XPS on error flow if netdev isn't registered yet
+    - net/mlx5e: Fix multipath lag activation
+    - net/mlx5e: Fix error path of updating netdev queues
+    - {net,vdpa}/mlx5: Configure interface MAC into mpfs L2 table
+    - net/mlx5e: Fix nullptr in add_vlan_push_action()
+    - net/mlx5: Set reformat action when needed for termination rules
+    - net/mlx5e: Fix null deref accessing lag dev
+    - net/mlx4: Fix EEPROM dump support
+    - net/mlx5: Set term table as an unmanaged flow table
+    - SUNRPC in case of backlog, hand free slots directly to waiting task
+    - Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
+    - tipc: wait and exit until all work queues are done
+    - tipc: skb_linearize the head skb when reassembling msgs
+    - [arm64] spi: spi-fsl-dspi: Fix a resource leak in an error handling path
+    - netfilter: flowtable: Remove redundant hw refresh bit
+    - [arm64,armhf] net: dsa: fix a crash if ->get_sset_count() fails
+    - [armhf] i2c: s3c2410: fix possible NULL pointer deref on read message
+      after write
+    - [x86] i2c: i801: Don't generate an interrupt on bus reset
+    - afs: Fix the nlink handling of dir-over-dir rename
+    - nvmet-tcp: fix inline data size comparison in nvmet_tcp_queue_response
+    - [x86] platform/x86: hp_accel: Avoid invoking _INI to speed up resume
+    - [arm64] Revert "crypto: cavium/nitrox - add an error message to explain
+      the failure of pci_request_mem_regions"
+    - Revert "media: usb: gspca: add a missed check for goto_low_power"
+    - [i386] Revert "ALSA: sb: fix a missing check of snd_ctl_add"
+    - Revert "net: fujitsu: fix a potential NULL pointer dereference"
+    - net: fujitsu: fix potential null-ptr-deref
+    - Revert "net/smc: fix a NULL pointer dereference"
+    - net/smc: properly handle workqueue allocation failure
+    - [x86] Revert "char: hpet: fix a missing check of ioremap"
+    - [x86] char: hpet: add checks after calling ioremap
+    - [i386] Revert "ALSA: gus: add a check of the status of snd_ctl_add"
+    - Revert "isdn: mISDNinfineon: fix potential NULL pointer dereference"
+    - isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
+    - Revert "ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()"
+    - ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()
+    - Revert "isdn: mISDN: Fix potential NULL pointer dereference of kzalloc"
+    - isdn: mISDN: correctly handle ph_info allocation failure in
+      hfcsusb_ph_info
+    - [arm64] Revert "dmaengine: qcom_hidma: Check for driver register failure"
+    - [arm64] dmaengine: qcom_hidma: comment platform_driver_register call
+    - Revert "libertas: add checks for the return value of sysfs_create_group"
+    - libertas: register sysfs groups properly
+    - Revert "media: dvb: Add check on sp8870_readreg"
+    - media: dvb: Add check on sp8870_readreg return
+    - Revert "media: gspca: mt9m111: Check write_bridge for timeout"
+    - media: gspca: mt9m111: Check write_bridge for timeout
+    - Revert "media: gspca: Check the return value of write_bridge for timeout"
+    - media: gspca: properly check for errors in po1030_probe()
+    - Revert "net: liquidio: fix a NULL pointer dereference"
+    - net: liquidio: Add missing null pointer checks
+    - Revert "brcmfmac: add a check for the status of usb_register"
+    - brcmfmac: properly check for bus register errors
+    - btrfs: return whole extents in fiemap
+    - [powerpc,x86] scsi: BusLogic: Fix 64-bit system enumeration error for
+      Buslogic
+    - scsi: pm80xx: Fix drives missing during rmmod/insmod loop
+    - btrfs: release path before starting transaction when cloning inline extent
+    - btrfs: do not BUG_ON in link_to_fixup_dir
+    - [x86] platform/x86: hp-wireless: add AMD's hardware id to the supported
+      list
+    - SMB3: incorrect file id in requests compounded with open
+    - drm/amd/amdgpu: fix refcount leak
+    - drm/amdgpu: Fix a use-after-free
+    - drm/amd/amdgpu: fix a potential deadlock in gpu reset
+    - drm/amdgpu: stop touching sched.ready in the backend
+    - block: fix a race between del_gendisk and BLKRRPART
+    - linux/bits.h: fix compilation error with GENMASK
+    - [arm64,armhf] net: dsa: fix error code getting shifted with 4 in
+      dsa_slave_get_sset_count
+    - net: stmmac: Fix MAC WoL not working if PHY does not support WoL
+    - spi: Assume GPIO CS active high in ACPI case
+    - net: really orphan skbs tied to closing sk
+    - net: packetmmap: fix only tx timestamp on request
+    - [arm64,armhf] net: fec: fix the potential memory leak in fec_enet_init()
+    - [arm64] net: mdio: thunder: Fix a double free issue in the .remove
+      function
+    - [mips64el,mipsel] net: mdio: octeon: Fix some double free issues
+    - cxgb4/ch_ktls: Clear resources when pf4 device is removed
+    - openvswitch: meter: fix race when getting now_ms.
+    - net: sched: fix packet stuck problem for lockless qdisc
+    - net: sched: fix tx action rescheduling issue during deactivation
+    - net: sched: fix tx action reschedule issue with stopped queue
+    - net: hso: check for allocation failure in hso_create_bulk_serial_device()
+    - net: bnx2: Fix error return code in bnx2_init_board()
+    - bnxt_en: Include new P5 HV definition in VF check.
+    - bnxt_en: Fix context memory setup for 64K page size.
+    - mld: fix panic in mld_newpack()
+    - net/smc: remove device from smcd_dev_list after failed device_add()
+    - [amd64] gve: Check TX QPL was actually assigned
+    - [amd64] gve: Update mgmt_msix_idx if num_ntfy changes
+    - [amd64] gve: Add NULL pointer checks when freeing irqs.
+    - [amd64] gve: Upgrade memory barrier in poll routine
+    - [amd64] gve: Correct SKB queue index validation.
+    - [arm64] net: hns3: fix incorrect resp_msg issue
+    - [arm64] net: hns3: put off calling register_netdev() until client
+      initialize complete
+    - [amd64] iommu/vt-d: Use user privilege for RID2PASID translation
+    - cxgb4: avoid accessing registers when clearing filters
+    - bpf, offload: Reorder offload callback 'prepare' in verifier
+    - bpf: Set mac_len in bpf_skb_change_head
+    - ixgbe: fix large MTU request from VF
+    - [arm64] ASoC: qcom: lpass-cpu: Use optional clk APIs
+    - scsi: libsas: Use _safe() loop in sas_resume_port()
+    - ipv6: record frag_max_size in atomic fragments in input path
+    - ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be
+      static
+    - sch_dsmark: fix a NULL deref in qdisc_reset()
+    - net: zero-initialize tc skb extension on allocation
+    - [arm64,armhf] net: mvpp2: add buffer header handling in RX
+    - [x86] i915: fix build warning in intel_dp_get_link_status()
+    - [arm64] net: hns3: check the return of skb_checksum_help()
+    - bpftool: Add sock_release help info for cgroup attach/prog load command
+    - SUNRPC: More fixes for backlog congestion
+    - net: hso: bail out on interrupt URB allocation failure
+    - neighbour: Prevent Race condition in neighbour subsytem
+    - usb: core: reduce power-on-good delay time of root hub
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43
+    - btrfs: tree-checker: do not error out if extent ref hash doesn't match
+    - net: usb: cdc_ncm: don't spew notifications (Closes: #989451)
+    - [x86] hwmon: (dell-smm-hwmon) Fix index values
+    - netfilter: conntrack: unregister ipv4 sockopts on error unwind
+    - efi/fdt: fix panic when no valid fdt found
+    - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared
+    - efi/libstub: prevent read overflow in find_file_option()
+    - [arm64,x86] efi: cper: fix snprintf() use in cper_dimm_err_location()
+    - vfio/pci: Fix error return code in vfio_ecap_init()
+    - ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
+    - HID: logitech-hidpp: initialize level variable
+    - HID: pidff: fix error return code in hid_pidff_init()
+    - [arm64,x86] HID: i2c-hid: fix format string mismatch
+    - devlink: Correct VIRTUAL port to not have phys_port attributes
+    - net/sched: act_ct: Offload connections with commit action
+    - net/sched: act_ct: Fix ct template allocation for zone 0
+    - nvme-rdma: fix in-casule data send for chained sgls
+    - ACPICA: Clean up context mutex during object deletion
+    - perf probe: Fix NULL pointer dereference in convert_variable_location()
+    - net: sock: fix in-kernel mark setting
+    - net/mlx5e: Fix incompatible casting
+    - net/mlx5: Check firmware sync reset requested is set before trying to
+      abort it
+    - net/mlx5e: Check for needed capability for cvlan matching
+    - net/mlx5: DR, Create multi-destination flow table with level less than 64
+    - nvmet: fix freeing unallocated p2pmem
+    - netfilter: nft_ct: skip expectations for confirmed conntrack
+    - netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
+    - bpf: Simplify cases in bpf_base_func_proto
+    - bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks
+    - ieee802154: fix error return code in ieee802154_add_iface()
+    - ieee802154: fix error return code in ieee802154_llsec_getparams()
+    - igb: add correct exception tracing for XDP
+    - ixgbevf: add correct exception tracing for XDP
+    - cxgb4: fix regression with HASH tc prio value update
+    - ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
+    - ice: Fix allowing VF to request more/less queues via virtchnl
+    - ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared
+    - ice: handle the VF VSI rebuild failure
+    - ice: report supported and advertised autoneg using PHY capabilities
+    - ice: Allow all LLDP packets from PF to Tx
+    - cxgb4: avoid link re-train during TC-MQPRIO configuration
+    - i40e: optimize for XDP_REDIRECT in xsk path
+    - i40e: add correct exception tracing for XDP
+    - ice: simplify ice_run_xdp
+    - ice: optimize for XDP_REDIRECT in xsk path
+    - ice: add correct exception tracing for XDP
+    - ixgbe: optimize for XDP_REDIRECT in xsk path
+    - ixgbe: add correct exception tracing for XDP
+    - [arm64] optee: use export_uuid() to copy client UUID
+    - [armhf] bus: ti-sysc: Fix am335x resume hang for usb otg module
+    - [arm64] dts: freescale: sl28: var4: fix RGMII clock and voltage
+    - [armhf] bus: ti-sysc: Fix flakey idling of uarts and stop using
+      swsup_sidle_act
+    - tipc: add extack messages for bearer/media failure
+    - tipc: fix unique bearer names sanity check
+    - [armhf] serial: stm32: fix threaded interrupt handling
+    - io_uring: fix link timeout refs
+    - io_uring: use better types for cflags
+    - drm/amdgpu/vcn3: add cancel_delayed_work_sync before power gate
+    - drm/amdgpu/jpeg2.5: add cancel_delayed_work_sync before power gate
+    - drm/amdgpu/jpeg3: add cancel_delayed_work_sync before power gate
+    - Bluetooth: fix the erroneous flush_work() order (CVE-2021-3564)
+    - Bluetooth: use correct lock to prevent UAF of hdev object (CVE-2021-3573)
+    - wireguard: do not use -O3
+    - wireguard: peer: allocate in kmem_cache
+    - wireguard: use synchronize_net rather than synchronize_rcu
+    - wireguard: allowedips: initialize list head in selftest
+    - wireguard: allowedips: remove nodes in O(1)
+    - wireguard: allowedips: allocate nodes in kmem_cache
+    - wireguard: allowedips: free empty intermediate nodes when removing single
+      node
+    - [arm64,x86] HID: i2c-hid: Skip ELAN power-on command after reset
+    - HID: magicmouse: fix NULL-deref on disconnect
+    - HID: multitouch: require Finger field to mark Win8 reports as MT
+    - gfs2: fix scheduling while atomic bug in glocks
+    - ALSA: timer: Fix master timer notification
+    - ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx
+    - ALSA: hda: update the power_state during the direct-complete
+    - ext4: fix memory leak in ext4_fill_super
+    - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
+    - ext4: fix fast commit alignment issues
+    - ext4: fix memory leak in ext4_mb_init_backend on error path.
+    - ext4: fix accessing uninit percpu counter variable with fast_commit
+    - [arm*] usb: dwc2: Fix build in periphal-only mode
+    - pid: take a reference when initializing `cad_pid`
+    - ocfs2: fix data corruption by fallocate
+    - mm/page_alloc: fix counting of free pages after take off from buddy
+    - [x86] cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
+      update_pasid()
+    - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
+      (CVE-2021-3587)
+    - drm/amdgpu: Don't query CE and UE errors
+    - drm/amdgpu: make sure we unpin the UVD BO
+    - [x86] apic: Mark _all_ legacy interrupts when IO/APIC is missing
+    - [powerpc] kprobes: Fix validation of prefixed instructions across page
+      boundary
+    - btrfs: mark ordered extent and inode with error if we fail to finish
+    - btrfs: fix error handling in btrfs_del_csums
+    - btrfs: return errors from btrfs_del_csums in cleanup_ref_head
+    - btrfs: fixup error handling in fixup_inode_link_counts
+    - btrfs: abort in rename_exchange if we fail to insert the second ref
+    - btrfs: fix deadlock when cloning inline extents and low on available space
+    - mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
+    - [arm64] drm/msm/dpu: always use mdp device to scale bandwidth
+    - btrfs: fix unmountable seed device after fstrim
+    - [x86] KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode
+    - [arm64] KVM: Fix debug register indexing
+    - [x86] kvm: Teardown PV features on boot CPU as well
+    - [x86] kvm: Disable kvmclock on all CPUs on shutdown
+    - [x86] kvm: Disable all PV features on crash
+    - lib/lz4: explicitly support in-place decompression
+    - netfilter: nf_tables: missing error reporting for not selected expressions
+    - xen-netback: take a reference to the RX task thread (CVE-2021-28691)
+    - neighbour: allow NUD_NOARP entries to be forced GCed
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44
+    - proc: Track /proc/$pid/attr/ opener mm_struct
+    - [amd64] ASoC: amd: fix for pcm_read() error
+    - spi: Fix spi device unregister flow
+    - bpf: Forbid trampoline attach for functions with variable arguments
+    - net/nfc/rawsock.c: fix a permission check bug
+    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L
+      tablet
+    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830
+      tablet
+    - [arm64,armhf] usb: chipidea: udc: assign interrupt number to USB gadget
+      structure
+    - bonding: init notify_work earlier to avoid uninitialized use
+    - netlink: disable IRQs for netlink_lock_table()
+    - net: mdiobus: get rid of a BUG_ON()
+    - cgroup: disable controllers at parse time
+    - wq: handle VM suspension in stall detection
+    - net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
+    - RDS tcp loopback connection can hang
+    - net:sfc: fix non-freed irq in legacy irq mode
+    - scsi: bnx2fc: Return failure if io_req is already in ABTS processing
+    - [x86] scsi: vmw_pvscsi: Set correct residual data length
+    - [arm64] scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated
+      irq
+    - scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
+    - net: macb: ensure the device is available before accessing GEMGXL control
+      registers
+    - nvme-fabrics: decode host pathing error for connect
+    - dm verity: fix require_signatures module_param permissions
+    - bnx2x: Fix missing error code in bnx2x_iov_init_one()
+    - nvmet: fix false keep-alive timeout when a controller is torn down
+    - spi: Don't have controller clean up spi device before driver unbind
+    - spi: Cleanup on failure of initial setup
+    - [powerpc] i2c: mpc: Make use of i2c_recover_bus()
+    - [powerpc] i2c: mpc: implement erratum A-004447 workaround
+    - ALSA: seq: Fix race of snd_seq_timer_open()
+    - ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun()
+    - ALSA: hda/realtek: headphone and mic don't work on an Acer laptop
+    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite
+      Dragonfly G2
+    - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360
+      1040 G8
+    - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8
+    - ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
+    - [arm*] spi: bcm2835: Fix out-of-bounds access with more than 4 slaves
+    - Revert "ACPI: sleep: Put the FACS table after using it"
+    - drm: Fix use-after-free read in drm_getunique()
+    - drm: Lock pointer access in drm_master_release()
+    - [x86] perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server
+    - [x86] KVM: X86: MMU: Use the correct inherited permissions to get shadow
+      page
+    - kvm: avoid speculation-based attacks from out-of-range memslot accesses
+    - [arm64,x86] staging: rtl8723bs: Fix uninitialized variables
+    - async_xor: check src_offs is not NULL before updating it
+    - btrfs: return value from btrfs_mark_extent_written() in case of error
+    - btrfs: promote debugging asserts to full-fledged checks in validate_super
+    - cgroup1: don't allow '\n' in renaming
+    - ftrace: Do not blindly read the ip address in ftrace_bug()
+    - USB: f_ncm: ncm_bitrate (speed) is unsigned
+    - usb: f_ncm: only first packet of aggregate needs to start timer
+    - usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
+    - [arm64,armhf] usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is
+      disabled
+    - [arm64,armhf] usb: dwc3: meson-g12a: Disable the regulator in the error
+      handling path of the probe
+    - [arm64,armhf] usb: dwc3: gadget: Bail from dwc3_gadget_exit() if
+      dwc->gadget is NULL
+    - [arm64,armhf] usb: dwc3: ep0: fix NULL pointer exception
+    - [arm64,armhf] usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling
+    - usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
+    - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
+    - USB: serial: ftdi_sio: add NovaTech OrionMX product ID
+    - USB: serial: omninet: add device id for Zyxel Omni 56K Plus
+    - USB: serial: quatech2: fix control-request directions
+    - USB: serial: cp210x: fix alternate function for CP2102N QFN20
+    - usb: gadget: eem: fix wrong eem header operation
+    - usb: fix various gadgets null ptr deref on 10gbps cabling.
+    - usb: fix various gadget panics on 10gbps cabling
+    - usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister
+      tcpm port
+    - usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port
+    - regulator: core: resolve supply for boot-on/always-on regulators
+    - [arm64] regulator: max77620: Use device_set_of_node_from_dev()
+    - regulator: bd71828: Fix .n_voltages settings
+    - [arm64,armhf] usb: dwc3: gadget: Disable gadget IRQ during pullup disable
+    - usb: typec: mux: Fix copy-paste mistake in typec_mux_match
+    - [arm64] drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650
+    - [arm64] drm/msm/a6xx: update/fix CP_PROTECT initialization
+    - [arm64] drm/msm/a6xx: avoid shadow NULL reference in failure path
+    - RDMA/ipoib: Fix warning caused by destroying non-initial netns
+    - RDMA/mlx4: Do not map the core_clock page to user space unless enabled
+    - ASoC: core: Fix Null-point-dereference in fmt_single_name()
+    - perf: Fix data race between pin_count increment/decrement
+    - sched/fair: Keep load_avg and load_sum synced
+    - sched/fair: Make sure to update tg contrib for blocked load
+    - sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling
+    - [x86] nmi_watchdog: Fix old-style NMI watchdog regression on old Intel
+      CPUs
+    - [x86] KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint
+      message
+    - IB/mlx5: Fix initializing CQ fragments buffer
+    - NFS: Fix a potential NULL dereference in nfs_get_client()
+    - NFSv4: Fix deadlock between nfs4_evict_inode() and
+      nfs4_opendata_get_inode()
+    - kvm: fix previous commit for 32-bit builds
+    - NFS: Fix use-after-free in nfs4_init_client()
+    - NFSv4: Fix second deadlock in nfs4_evict_inode()
+    - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
+    - scsi: core: Fix error handling of scsi_host_alloc()
+    - scsi: core: Fix failure handling of scsi_add_host_with_dma()
+    - scsi: core: Put .shost_dev in failure path if host state changes to
+      RUNNING
+    - scsi: core: Only put parent device if host state differs from
+      SHOST_CREATED
+    - tracing: Correct the length check which causes memory corruption
+    - proc: only require mm_struct for writing
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.45
+    - net: ieee802154: fix null deref in parse dev addr
+    - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
+    - HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95
+    - HID: hid-input: add mapping for emoji picker key
+    - HID: hid-sensor-hub: Return error for hid_set_field() failure
+    - HID: quirks: Add quirk for Lenovo optical mouse
+    - HID: multitouch: set Stylus suffix for Stylus-application devices, too
+    - HID: Add BUS_VIRTUAL to hid_connect logging
+    - HID: usbhid: fix info leak in hid_submit_ctrl
+    - [arm64,armhf] drm/tegra: sor: Do not leak runtime PM reference
+    - [arm64,armhf] gpu: host1x: Split up client initalization and registration
+    - [arm64,armhf] drm/tegra: sor: Fully initialize SOR before registration
+    - gfs2: Prevent direct-I/O write fallback errors from getting lost
+    - gfs2: fix a deadlock on withdraw-during-mount
+    - HID: gt683r: add missing MODULE_DEVICE_TABLE
+    - gfs2: Fix use-after-free in gfs2_glock_shrink_scan
+    - scsi: target: core: Fix warning on realtime kernels
+    - ethernet: myri10ge: Fix missing error code in myri10ge_probe()
+    - scsi: qedf: Do not put host in qedf_vport_create() unconditionally
+    - Bluetooth: Add a new USB ID for RTL8822CE
+    - scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
+    - net: ipconfig: Don't override command-line hostnames or domains
+    - drm/amd/display: Allow bandwidth validation for 0 streams.
+    - drm/amdgpu: refine amdgpu_fru_get_product_info
+    - drm/amd/display: Fix potential memory leak in DMUB hw_init
+    - drm/amd/amdgpu:save psp ring wptr to avoid attack
+    - rtnetlink: Fix missing error code in rtnl_bridge_notify()
+    - net: Return the correct errno code
+    - fib: Return the correct errno code
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46
+    - afs: Fix an IS_ERR() vs NULL check
+    - mm/memory-failure: make sure wait for page writeback in memory_failure
+    - [x86] kvm: LAPIC: Restore guard to prevent illegal APIC register access
+    - fanotify: fix copy_event_to_user() fid error clean up
+    - batman-adv: Avoid WARN_ON timing related checks
+    - mac80211: fix skb length check in ieee80211_scan_rx()
+    - net: ipv4: fix memory leak in netlbl_cipsov4_add_std
+    - vrf: fix maximum MTU
+    - net: rds: fix memory leak in rds_recvmsg
+    - [arm64] net: dsa: felix: re-enable TX flow control in ocelot_port_flush()
+    - netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local
+    - ice: add ndo_bpf callback for safe mode netdev ops
+    - ice: parameterize functions responsible for Tx ring management
+    - udp: fix race between close() and udp_abort()
+    - rtnetlink: Fix regression in bridge VLAN configuration
+    - net/sched: act_ct: handle DNAT tuple collision
+    - net/mlx5e: Fix page reclaim for dead peer hairpin
+    - net/mlx5: Consider RoCE cap before init RDMA resources
+    - net/mlx5: DR, Allow SW steering for sw_owner_v2 devices
+    - net/mlx5: DR, Don't use SW steering when RoCE is not supported
+    - net/mlx5e: Block offload of outer header csum for UDP tunnels
+    - netfilter: synproxy: Fix out of bounds when parsing TCP options
+    - sch_cake: Fix out of bounds when parsing TCP options and header
+    - alx: Fix an error handling path in 'alx_probe()'
+    - cxgb4: fix endianness when flashing boot image
+    - cxgb4: fix sleep in atomic when flashing PHY firmware
+    - cxgb4: halt chip before flashing PHY firmware image
+    - net: make get_net_ns return error if NET_NS is disabled
+    - ethtool: strset: fix message length calculation
+    - qlcnic: Fix an error handling path in 'qlcnic_probe()'
+    - netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
+    - cxgb4: fix wrong ethtool n-tuple rule lookup
+    - ipv4: Fix device used for dst_alloc with local routes
+    - net: qrtr: fix OOB Read in qrtr_endpoint_post
+    - bpf: Fix leakage under speculation on mispredicted branches
+      (CVE-2021-33624)
+    - ptp: improve max_adj check against unreasonable values
+    - net: cdc_ncm: switch to eth%d interface naming
+    - net: usb: fix possible use-after-free in smsc75xx_bind
+    - [arm64,armhf] net: fec_ptp: fix issue caused by refactor the fec_devtype
+    - net: ipv4: fix memory leak in ip_mc_add1_src
+    - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
+    - net/mlx5: E-Switch, Read PF mac address
+    - net/mlx5: E-Switch, Allow setting GUID for host PF vport
+    - net/mlx5: Reset mkey index on creation
+    - be2net: Fix an error handling path in 'be_probe()'
+    - net: hamradio: fix memory leak in mkiss_close
+    - net: cdc_eem: fix tx fixup skb leak
+    - cxgb4: fix wrong shift.
+    - bnxt_en: Rediscover PHY capabilities after firmware reset
+    - bnxt_en: Fix TQM fastpath ring backing store computation
+    - bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path
+    - icmp: don't send out ICMP messages with a source address of 0.0.0.0
+    - [x86] platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support
+    - sched/pelt: Ensure that *_sum is always synced with *_avg
+    - [armhf] spi: stm32-qspi: Always wait BUSY bit to be cleared in
+      stm32_qspi_wait_cmd()
+    - ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire
+      mode
+    - [arm64,armhf] drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device
+    - [arm64] ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin
+    - radeon: use memcpy_to/fromio for UVD fw upload
+    - mm: relocate 'write_protect_seq' in struct mm_struct
+    - [arm64,armhf] irqchip/gic-v3: Workaround inconsistent PMR setting on NMI
+      entry
+    - bpf: Inherit expanded/patched seen count from old aux data
+      (CVE-2021-33624)
+    - bpf: Do not mark insn as seen under speculative path verification
+      (CVE-2021-33624)
+    - can: bcm: fix infoleak in struct bcm_msg_head (CVE-2021-34693)
+    - can: bcm/raw/isotp: use per module netdevice notifier
+    - can: j1939: fix Use-after-Free, hold skb ref while in use
+    - can: mcba_usb: fix memory leak in mcba_usb
+    - usb: core: hub: Disable autosuspend for Cypress CY7C65632
+    - [arm64,armhf] usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
+    - tracing: Do not stop recording cmdlines when tracing is off
+    - tracing: Do not stop recording comms if the trace file is being read
+    - tracing: Do no increment trace_clock_global() by one
+    - PCI: Mark TI C667X to avoid bus reset
+    - PCI: Mark some NVIDIA GPUs to avoid bus reset
+    - [arm64] PCI: aardvark: Fix kernel panic during PIO transfer
+    - PCI: Add ACS quirk for Broadcom BCM57414 NIC
+    - PCI: Work around Huawei Intelligent NIC VF FLR erratum
+    - [x86] KVM: x86: Immediately reset the MMU context when the SMM flag is
+      cleared
+    - [x86] KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU
+    - [x86] KVM: X86: Fix x86_emulator slab cache leak
+    - [s390x] mcck: fix calculation of SIE critical section size
+    - [s390x] ap: Fix hanging ioctl caused by wrong msg counter
+    - [amd64] x86/mm: Avoid truncating memblocks for SGX memory
+    - [x86] process: Check PF_KTHREAD and not current->mm for kernel threads
+    - [x86] ioremap: Map EFI-reserved memory as encrypted for SEV
+    - [x86] pkru: Write hardware init value to PKRU when xstate is init
+    - [x86] fpu: Prevent state corruption in __fpu__restore_sig()
+    - [x86] fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
+    - [x86] fpu: Reset state for all signal restore failures
+    - crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo
+    - [arm64,armhf] dmaengine: pl330: fix wrong usage of spinlock flags in
+      dma_cyclc
+    - mac80211: Fix NULL ptr deref for injected rate info
+    - cfg80211: avoid double free of PMSR request
+    - drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full
+      doorbell.
+    - drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue.
+    - net: ll_temac: Fix TX BD buffer overwrite
+    - net: bridge: fix vlan tunnel dst null pointer dereference
+    - net: bridge: fix vlan tunnel dst refcnt when egressing
+    - mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare
+    - mm/slub: clarify verification reporting
+    - mm/slub: fix redzoning for small allocations
+    - mm/slub: actually fix freelist pointer vs redzoning
+    - mm/slub.c: include swab.h
+    - net: stmmac: disable clocks in stmmac_remove_config_dt()
+    - [arm64,armhf] net: fec_ptp: add clock rate zero check
+    - [arm64,armhf] usb: dwc3: debugfs: Add and remove endpoint dirs dynamically
+    - [arm64,armhf] usb: dwc3: core: fix kernel panic when do reboot
+
+  [ Josua Mayer ]
+  * [armhf] drivers/bluetooth: Enable BT_HCIUART as a module, with support
+    for all features already enabled in the generic config. (Closes: #987361)
+  * [armhf] enable i.MX6 MIPI-CSI video capture device. (Closes: #987365)
+    - drivers/mux: Enable MUX_MMIO as a module.
+    - drivers/media/platform: Enable VIDEO_MUX as a module.
+    - drivers/staging/media/imx: Enable VIDEO_IMX_MEDIA and VIDEO_IMX_CSI as
+      modules.
+
+  [ Uwe Kleine-König ]
+  * [arm64] Update device tree for Kobol's helios64 from next
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Refresh "net/Qdisc: use a seqlock instead seqcount"
+  * Ignore some ABI changes that should not affect OOT modules
+  * Bump ABI to 8
+  * [rt] Refresh "tracing: Merge irqflags + preempt counter"
+  * can: bcm: delay release of struct bcm_op after synchronize_rcu()
+    (CVE-2021-3609)
+  * Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
+    (Closes: #990008)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Add pwm-rockchip to fb-modules udeb.
+  * [arm64] Add fusb302, tcpm and typec to usb-modules udeb.
+  * [armhf] Add gpio-mxc to kernel-image udeb. Thanks to Rick Thomas.
+    (Closes: #982270)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 24 Jun 2021 14:11:37 +0200
+
+linux (5.10.40-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.39
+    - [x86] msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
+    - [x86] drm/i915/display: fix compiler warning about array overrun
+    - airo: work around stack usage warning
+    - usb: sl811-hcd: improve misleading indentation
+    - cxgb4: Fix the -Wmisleading-indentation warning
+    - isdn: capi: fix mismatched prototypes
+    - virtio_net: Do not pull payload in skb->head
+    - [armel,armhf] 9066/1: ftrace: pause/unpause function graph tracer in
+      cpu_suspend()
+    - [arm64,x86] ACPI / hotplug / PCI: Fix reference count leak in
+      enable_slot()
+    - [arm64] Input: elants_i2c - do not bind to i2c-hid compatible ACPI
+      instantiated devices
+    - NFS: NFS_INO_REVAL_PAGECACHE should mark the change attribute invalid
+    - [armel,armhf] 9075/1: kernel: Fix interrupted SMC calls
+    - [arm64] platform/chrome: cros_ec_typec: Add DP mode check
+    - scsi: lpfc: Fix illegal memory access on Abort IOCBs
+    - ceph: fix fscache invalidation
+    - ceph: don't clobber i_snap_caps on non-I_NEW inode
+    - ceph: don't allow access to MDS-private inodes
+    - scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not
+      found
+    - bridge: Fix possible races between assigning rx_handler_data and setting
+      IFF_BRIDGE_PORT bit
+    - nvmet: remove unsupported command noise
+    - drm/amd/display: Fix two cursor duplication when using overlay
+    - [arm64,x86] gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10
+      Pro 5055
+    - net:CXGB4: fix leak if sk_buff is not used
+    - ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
+    - block: reexpand iov_iter after read/write
+    - net: stmmac: Do not enable RX FIFO overflow interrupts
+    - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
+    - sit: proper dev_{hold|put} in ndo_[un]init methods
+    - ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
+    - ipv6: remove extra dev_hold() for fallback tunnels
+    - tweewide: Fix most Shebang lines
+    - scripts: switch explicitly to Python 3
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.40
+    - RDMA/core: Prevent divide-by-zero error triggered by the user
+    - RDMA/rxe: Clear all QP fields if creation failed
+    - scsi: ufs: core: Increase the usable queue depth
+    - scsi: qedf: Add pointer checks in qedf_update_link_speed()
+    - scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword()
+    - RDMA/mlx5: Recover from fatal event in dual port mode
+    - RDMA/core: Don't access cm_id after its destruction
+    - nvmet: remove unused ctrl->cqs
+    - nvmet: fix memory leak in nvmet_alloc_ctrl()
+    - nvme-tcp: rerun io_work if req_list is not empty
+    - nvme-fc: clear q_live at beginning of association teardown
+    - [x86] platform/x86: intel_int0002_vgpio: Only call enable_irq_wake() when
+      using s2idle
+    - [x86] platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
+    - RDMA/mlx5: Fix query DCT via DEVX
+    - RDMA/uverbs: Fix a NULL vs IS_ERR() bug
+    - [powerpc*] pseries: Fix hcall tracing recursion in pv queued spinlocks
+    - ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
+    - nvmet: seset ns->file when open fails
+    - [x86] perf/x86: Avoid touching LBR_TOS MSR for Arch LBR
+    - locking/lockdep: Correct calling tracepoints
+    - locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal
+    - [powerpc*] Fix early setup to make early_ioremap() work
+    - btrfs: avoid RCU stalls while running delayed iputs
+    - cifs: fix memory leak in smb2_copychunk_range
+    - misc: eeprom: at24: check suspend status before disable regulator
+    - ALSA: dice: fix stream format for TC Electronic Konnekt Live at high
+      sampling transfer frequency
+    - ALSA: intel8x0: Don't update period unless prepared
+    - ALSA: firewire-lib: fix amdtp_packet tracepoints event for packet_index
+      field
+    - ALSA: line6: Fix racy initialization of LINE6 MIDI
+    - ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26
+    - ALSA: firewire-lib: fix calculation for size of IR context payload
+    - ALSA: usb-audio: Validate MS endpoint descriptors
+    - ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro
+    - ALSA: hda: fixup headset for ASUS GU502 laptop
+    - Revert "ALSA: sb8: add a check for request_region"
+    - ALSA: firewire-lib: fix check for the size of isochronous packet payload
+    - ALSA: hda/realtek: reset eapd coeff to default value for alc287
+    - ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293
+    - ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA
+    - ALSA: hda/realtek: Add fixup for HP OMEN laptop
+    - ALSA: hda/realtek: Add fixup for HP Spectre x360 15-df0xxx
+    - [x86] uio_hv_generic: Fix a memory leak in error handling paths
+    - [arm64] Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer
+      dereference"
+    - nvme-tcp: fix possible use-after-completion
+    - drm/amdgpu: Fix GPU TLB update error when PAGE_SIZE > AMDGPU_PAGE_SIZE
+    - drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang
+    - drm/amdgpu: update gc golden setting for Navi12
+    - drm/amdgpu: update sdma golden setting for Navi12
+    - [powerpc*] 64s/syscall: Use pt_regs.trap to distinguish syscall ABI
+      difference between sc and scv syscalls
+    - [powerpc*] 64s/syscall: Fix ptrace syscall info with scv syscalls
+    - mmc: sdhci-pci-gli: increase 1.8V regulator wait
+    - [x86] xen-pciback: redo VF placement in the virtual topology
+    - [x86] xen-pciback: reconfigure also from backend watch handler
+    - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry
+    - dm snapshot: fix crash with transient storage and zero chunk size
+    - Revert "video: hgafb: fix potential NULL pointer dereference"
+    - [arm64,armhf] Revert "net: stmicro: fix a missing check of clk_prepare"
+    - Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
+    - Revert "ecryptfs: replace BUG_ON with error handling code"
+    - Revert "rtlwifi: fix a potential NULL pointer dereference"
+    - Revert "qlcnic: Avoid potential NULL pointer dereference"
+    - Revert "niu: fix missing checks of niu_pci_eeprom_read"
+    - ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read()
+    - [arm64,armhf] net: stmicro: handle clk_prepare() failure during init
+    - net: rtlwifi: properly check for alloc_workqueue() failure
+    - ics932s401: fix broken handling of errors when word reading fails
+    - qlcnic: Add null check after calling netdev_alloc_skb
+    - [x86] video: hgafb: fix potential NULL pointer dereference
+    - vgacon: Record video mode changes with VT_RESIZEX
+    - vt_ioctl: Revert VT_RESIZEX parameter handling removal
+    - vt: Fix character height handling with VT_RESIZEX
+    - tty: vt: always invoke vc->vc_sw->con_resize callback
+    - [x86] drm/i915/gt: Disable HiZ Raw Stall Optimization on broken gen7
+    - [amd64] x86/Xen: swap NX determination and GDT setup on BSP
+    - nvme-multipath: fix double initialization of ANA state
+    - [arm64] rtc: pcf85063: fallback to parent of_node
+    - nvmet: use new ana_log_size instead the old one
+    - [x86] video: hgafb: correctly handle card detect failure during probe
+    - Bluetooth: SMP: Fail if remote and local public keys are identical
+
+  [ Salvatore Bonaccorso ]
+  * bpf: Wrap aux data inside bpf_sanitize_info container (CVE-2021-33200)
+  * bpf: Fix mask direction swap upon off reg sign change (CVE-2021-33200)
+  * bpf: No need to simulate speculative domain for immediates (CVE-2021-33200)
+  * [armhf] dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode
+    (Closes: #988574)
+  * [rt] Refresh "ptrace: fix ptrace vs tasklist_lock race"
+  * Deal with vc_data ABI changes in 5.10.40
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 28 May 2021 10:31:38 +0200
+
+linux (5.10.38-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.29
+    - [armhf] bus: ti-sysc: Fix warning on unbind if reset is not deasserted
+    - [x86] platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2
+    - [amd64] bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp
+    - net/mlx5e: Enforce minimum value check for ICOSQ size
+    - mISDN: fix crash in fritzpci
+    - mac80211: Check crypto_aead_encrypt for errors
+    - mac80211: choose first enabled channel for monitor
+    - [arm64] drm/msm/dsi_pll_7nm: Fix variable usage for pll_lockdet_rate
+    - [arm64] drm/msm/adreno: a5xx_power: Don't apply A540 lm_setup to other
+      GPUs
+    - [arm64] drm/msm: Ratelimit invalid-fence message
+    - netfilter: conntrack: Fix gre tunneling over ipv6
+    - netfilter: nftables: skip hook overlap logic if flowtable is stale
+    - [x86] platform/x86: thinkpad_acpi: Allow the FnLock LED to change state
+    - [arm64] drm/msm/disp/dpu1: icc path needs to be set before dpu runtime
+      resume
+    - block: clear GD_NEED_PART_SCAN later in bdev_disk_changed
+    - [x86] platform/x86: intel_pmc_core: Ignore GBE LTR on Tiger Lake platforms
+    - [arm64] ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation
+    - scsi: target: pscsi: Clean up after failure in pscsi_map_sg()
+    - [ia64] mca: allocate early mca with GFP_ATOMIC
+    - [ia64] fix format strings for err_inject
+    - cifs: revalidate mapping when we open files for SMB1 POSIX
+    - cifs: Silently ignore unknown oplock break handle
+    - io_uring: fix timeout cancel return code
+    - math: Export mul_u64_u64_div_u64
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.30
+    - ALSA: aloop: Fix initialization of controls
+    - ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1
+    - ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model
+    - [x86] ASoC: intel: atom: Stop advertising non working S24LE support
+    - nfc: fix refcount leak in llcp_sock_bind() (CVE-2020-25670)
+    - nfc: fix refcount leak in llcp_sock_connect() (CVE-2020-25671)
+    - nfc: fix memory leak in llcp_sock_connect() (CVE-2020-25672)
+    - nfc: Avoid endless loops caused by repeated llcp_sock_connect()
+    - selinux: make nslot handling in avtab more robust
+    - selinux: fix cond_list corruption when changing booleans
+    - selinux: fix race between old and new sidtab
+    - xen/evtchn: Change irq_info lock to raw_spinlock_t
+    - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh
+    - [x86] drm/i915: Fix invalid access to ACPI _DSM objects
+    - [amd64] IB/hfi1: Fix probe time panic when AIP is enabled with a buggy
+      BIOS
+    - LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late
+    - [ia64] fix user_stack_pointer() for ptrace()
+    - ocfs2: fix deadlock between setattr and dio_end_io_write
+    - fs: direct-io: fix missing sdio->boundary
+    - ethtool: fix incorrect datatype in set_eee ops
+    - of: property: fw_devlink: do not link ".*,nr-gpios"
+    - [armhf] dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin
+    - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
+    - ice: Continue probe on link/PHY errors
+    - ice: Increase control queue timeout
+    - ice: prevent ice_open and ice_stop during reset
+    - ice: fix memory allocation call
+    - ice: remove DCBNL_DEVRESET bit from PF state
+    - ice: Fix for dereference of NULL pointer
+    - ice: Use port number instead of PF ID for WoL
+    - ice: Cleanup fltr list in case of allocation issues
+    - iwlwifi: pcie: properly set LTR workarounds on 22000 devices
+    - ice: fix memory leak of aRFS after resuming from suspend
+    - net: hso: fix null-ptr-deref during tty device unregistration
+    - bpf: Enforce that struct_ops programs be GPL-only
+    - bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET
+    - ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx
+    - bpf: Refcount task stack in bpf_get_task_stack
+    - bpf, sockmap: Fix sk->prot unhash op reset
+    - bpf, sockmap: Fix incorrect fwd_alloc accounting
+    - net: ensure mac header is set in virtio_net_hdr_to_skb()
+    - i40e: Fix sparse warning: missing error code 'err'
+    - i40e: Fix sparse error: 'vsi->netdev' could be null
+    - i40e: Fix sparse error: uninitialized symbol 'ring'
+    - i40e: Fix sparse errors in i40e_txrx.c
+    - net: sched: sch_teql: fix null-pointer dereference
+    - net: sched: fix action overwrite reference counting
+    - nl80211: fix beacon head validation
+    - nl80211: fix potential leak of ACL params
+    - cfg80211: check S1G beacon compat element length
+    - mac80211: fix time-is-after bug in mlme
+    - mac80211: fix TXQ AC confusion
+    - net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind()
+    - net: let skb_orphan_partial wake-up waiters.
+    - [x86] thunderbolt: Fix a leak in tb_retimer_add()
+    - [x86] thunderbolt: Fix off by one in tb_port_find_retimer()
+    - usbip: add sysfs_lock to synchronize sysfs code paths
+    - usbip: stub-dev synchronize sysfs code paths
+    - usbip: vudc synchronize sysfs code paths
+    - usbip: synchronize event handler with sysfs code paths
+    - driver core: Fix locking bug in deferred_probe_timeout_work_func()
+    - scsi: pm80xx: Fix chip initialization failure
+    - scsi: target: iscsi: Fix zero tag inside a trace event
+    - percpu: make pcpu_nr_empty_pop_pages per chunk type
+    - i2c: turn recovery error on init to debug
+    - [x86] KVM: x86/mmu: change TDP MMU yield function returns to match
+      cond_resched
+    - [x86] KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched
+    - [x86] KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn
+    - [x86] KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter
+    - [x86] KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed
+    - [x86] KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range
+      zap
+    - [x86] KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping
+    - [x86] KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages
+    - [x86] KVM: x86/mmu: preserve pending TLB flush across calls to
+      kvm_tdp_mmu_zap_sp
+    - net: sched: fix err handler in tcf_action_init()
+    - ice: Refactor DCB related variables out of the ice_port_info struct
+    - ice: Recognize 860 as iSCSI port in CEE mode
+    - xfrm: interface: fix ipv4 pmtu check to honor ip header df
+    - xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume
+    - [armhf] OMAP4: PM: update ROM return address for OSWR and OFF
+    - net: xfrm: Localize sequence counter per network namespace
+    - esp: delete NETIF_F_SCTP_CRC bit from features for esp offload
+    - [x86] ASoC: SOF: Intel: HDA: fix core status verification
+    - xfrm: Fix NULL pointer dereference on policy lookup
+    - virtchnl: Fix layout of RSS structures
+    - i40e: Added Asym_Pause to supported link modes
+    - i40e: Fix kernel oops when i40e driver removes VF's
+    - vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP
+      reply
+    - geneve: do not modify the shared tunnel info when PMTU triggers an ICMP
+      reply
+    - sch_red: fix off-by-one checks in red_check_params()
+    - drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit
+    - xfrm: Provide private skb extensions for segmented and hw offloaded ESP
+      packets
+    - can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE
+    - can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE
+    - ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso
+    - gianfar: Handle error code at MAC address change
+    - [arm64,armhf] net: dsa: Fix type was not set for devlink port
+    - cxgb4: avoid collecting SGE_QBASE regs during traffic
+    - net:tipc: Fix a double free in tipc_sk_mcast_rcv
+    - [armhf] net/ncsi: Avoid channel_monitor hrtimer deadlock
+    - net: qrtr: Fix memory leak on qrtr_tx_wait failure
+    - nfp: flower: ignore duplicate merge hints from FW
+    - net: phy: broadcom: Only advertise EEE for supported modes
+    - [armhf] ASoC: sunxi: sun4i-codec: fill ASoC card owner (Closes: #980539)
+    - net/mlx5e: Fix mapping of ct_label zero
+    - net/mlx5e: Fix ethtool indication of connector type
+    - net/mlx5: Don't request more than supported EQs
+    - net/rds: Fix a use after free in rds_message_map_pages
+    - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model
+    - i40e: Fix display statistics for veb_tc
+    - [arm64] drm/msm: Set drvdata to NULL when msm_drm_init() fails
+    - net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...);
+    - scsi: ufs: core: Fix task management request completion timeout
+    - scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs
+    - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb
+    - [arm64,riscv64] net: macb: restore cmp registers on resume path
+    - clk: fix invalid usage of list cursor in register
+    - clk: fix invalid usage of list cursor in unregister
+    - workqueue: Move the position of debug_work_activate() in __queue_work()
+    - [s390x] cpcmd: fix inline assembly register clobbering
+    - net: openvswitch: conntrack: simplify the return expression of
+      ovs_ct_limit_get_default_limit()
+    - openvswitch: fix send of uninitialized stack memory in ct limit reply
+    - i2c: designware: Adjust bus_freq_hz when refuse high speed mode set
+    - iwlwifi: fix 11ax disabled bit in the regulatory capability flags
+    - tipc: increment the tmp aead refcnt before attaching it
+    - [arm64] net: hns3: clear VF down state bit before request link status
+    - net/mlx5: Fix placement of log_max_flow_counter
+    - net/mlx5: Fix PPLM register mapping
+    - net/mlx5: Fix PBMC register mapping
+    - RDMA/cxgb4: check for ipv6 address properly while destroying listener
+    - RDMA/qedr: Fix kernel panic when trying to access recv_cq
+    - [arm*] drm/vc4: crtc: Reduce PV fifo threshold on hvs4
+    - i40e: Fix parameters in aq_get_phy_register()
+    - RDMA/addr: Be strict with gid size
+    - [armhf] clk: socfpga: fix iomem pointer cast on 64-bit
+    - dt-bindings: net: ethernet-controller: fix typo in NVMEM
+    - net: sched: bump refcount for new action in ACT replace mode
+    - gpiolib: Read "gpio-line-names" from a firmware node
+    - cfg80211: remove WARN_ON() in cfg80211_sme_connect
+    - net: tun: set tun->dev->addr_len during TUNSETLINK processing
+    - drivers: net: fix memory leak in atusb_probe
+    - drivers: net: fix memory leak in peak_usb_create_dev
+    - net: mac802154: Fix general protection fault (CVE-2021-33033)
+    - net: ieee802154: nl-mac: fix check on panid
+    - net: ieee802154: fix nl802154 del llsec key
+    - net: ieee802154: fix nl802154 del llsec dev
+    - net: ieee802154: fix nl802154 add llsec key
+    - net: ieee802154: fix nl802154 del llsec devkey
+    - net: ieee802154: forbid monitor for set llsec params
+    - net: ieee802154: forbid monitor for del llsec seclevel
+    - net: ieee802154: stop dump llsec params for monitors
+    - Revert "net: sched: bump refcount for new action in ACT replace mode"
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.31
+    - gfs2: Flag a withdraw if init_threads() fails
+    - [arm64] KVM: Hide system instruction access to Trace registers
+    - [arm64] KVM: Disable guest access to trace filter controls
+    - [armhf] drm/imx: imx-ldb: fix out of bounds array access warning
+    - gfs2: report "already frozen/thawed" errors
+    - ftrace: Check if pages were allocated before calling free_pages()
+    - [arm64,armhf] drm/tegra: dc: Don't set PLL clock to 0Hz
+    - [arm64,armhf] gpu: host1x: Use different lock classes for each client
+    - XArray: Fix splitting to non-zero orders
+    - block: only update parent bi_status when bio fail
+    - null_blk: fix command timeout completion handling
+    - io_uring: don't mark S_ISBLK async work as unbounded
+    - [riscv64] entry: fix misaligned base for excp_vect_table
+    - block: don't ignore REQ_NOWAIT for direct IO
+    - netfilter: x_tables: fix compat match/target pad out-of-bound write
+    - net: sfp: relax bitrate-derived mode check
+    - net: sfp: cope with SFPs that set both LOS normal and LOS inverted
+    - xen/events: fix setting irq affinity
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.32
+    - net/sctp: fix race condition in sctp_destroy_sock
+    - gpio: sysfs: Obey valid_mask
+    - dmaengine: Fix a double free in dma_async_device_register
+    - [x86] ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade()
+    - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
+    - xfrm: BEET mode doesn't support fragments for inner packets
+    - ASoC: max98373: Changed amp shutdown register as volatile
+    - ASoC: max98373: Added 30ms turn on/off time delay
+    - [x86] gpu/xen: Fix a use after free in xen_drm_drv_init
+    - neighbour: Disregard DEAD dst in neigh_update
+    - [arm64] drm/msm: Fix a5xx/a6xx timestamps
+    - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state
+    - iwlwifi: add support for Qu with AX201 device
+    - net: ieee802154: stop dump llsec keys for monitors
+    - net: ieee802154: forbid monitor for add llsec key
+    - net: ieee802154: forbid monitor for del llsec key
+    - net: ieee802154: stop dump llsec devs for monitors
+    - net: ieee802154: forbid monitor for add llsec dev
+    - net: ieee802154: forbid monitor for del llsec dev
+    - net: ieee802154: stop dump llsec devkeys for monitors
+    - net: ieee802154: forbid monitor for add llsec devkey
+    - net: ieee802154: forbid monitor for del llsec devkey
+    - net: ieee802154: stop dump llsec seclevels for monitors
+    - net: ieee802154: forbid monitor for add llsec seclevel
+    - pcnet32: Use pci_resource_len to validate PCI resource
+    - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
+    - Input: i8042 - fix Pegatron C15B ID entry
+    - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices
+    - readdir: make sure to verify directory entry for legacy interfaces too
+    - [arm64] fix inline asm in load_unaligned_zeropad()
+    - [arm64] alternatives: Move length validation in alternative_{insn, endif}
+    - vfio/pci: Add missing range check in vfio_pci_mmap
+    - scsi: libsas: Reset num_scatter if libata marks qc as NODATA
+    - ixgbe: fix unbalanced device enable/disable in suspend/resume
+    - netfilter: flowtable: fix NAT IPv6 offload mangling
+    - netfilter: conntrack: do not print icmpv6 as unknown via /proc
+    - ice: Fix potential infinite loop when using u8 loop counter
+    - libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC
+    - netfilter: bridge: add pre_exit hooks for ebtable unregistration
+    - netfilter: arp_tables: add pre_exit hook for table unregister
+    - [arm64,riscv64] net: macb: fix the restore of cmp registers
+    - net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta
+    - netfilter: nft_limit: avoid possible divide error in nft_limit_init
+    - net/mlx5e: Fix setting of RS FEC mode
+    - net: sit: Unregister catch-all devices
+    - net: ip6_tunnel: Unregister catch-all devices
+    - mm: ptdump: fix build failure
+    - net: Make tcp_allowed_congestion_control readonly in non-init netns
+    - i40e: fix the panic when running bpf in xdpdrv mode
+    - ethtool: pause: make sure we init driver stats
+    - [ia64] tools: remove inclusion of ia64-specific version of errno.h header
+    - gro: ensure frag0 meets IP header alignment
+    - [armhf] OMAP2+: Fix warning for omap_init_time_of()
+    - [armhf] OMAP2+: Fix uninitialized sr_inst
+    - [arm64] dts: allwinner: Fix SD card CD GPIO for SOPine systems
+    - [arm64] dts: allwinner: h6: beelink-gs1: Remove ext. 32 kHz osc reference
+    - bpf: Use correct permission flag for mixed signed bounds arithmetic
+      (CVE-2021-29155)
+    - [x86] KVM: VMX: Convert vcpu_vmx.exit_reason to a union
+    - [x86] KVM: VMX: Don't use vcpu->run->internal.ndata as an array index
+      (CVE-2021-3501)
+    - r8169: tweak max read request size for newer chips also in jumbo mtu mode
+    - r8169: don't advertise pause in jumbo mode
+    - bpf: Ensure off_reg has no mixed signed bounds for all types
+      (CVE-2021-29155)
+    - bpf: Move off_reg into sanitize_ptr_alu (CVE-2021-29155)
+    - [armel,armhf] 9071/1: uprobes: Don't hook on thumb instructions
+    - [arm64] mte: Ensure TIF_MTE_ASYNC_FAULT is set atomically
+    - bpf: Rework ptr_limit into alu_limit and add common error path
+      (CVE-2021-29155)
+    - bpf: Improve verifier error messages for users (CVE-2021-29155)
+    - bpf: Move sanitize_val_alu out of op switch
+    - net: phy: marvell: fix detection of PHY on Topaz switches
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.33
+    - [armhf] gpio: omap: Save and restore sysconfig
+    - [x86] pinctrl: lewisburg: Update number of pins in community
+    - block: return -EBUSY when there are open partitions in blkdev_reread_part
+    - pinctrl: core: Show pin numbers for the controllers with base = 0
+    - [arm64] dts: allwinner: Revert SD card CD GPIO for Pine64-LTS
+    - bpf: Permits pointers on stack for helper calls
+    - bpf: Allow variable-offset stack access
+    - bpf: Refactor and streamline bounds check into helper (CVE-2021-29155)
+    - bpf: Tighten speculative pointer arithmetic mask
+    - locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
+    - [x86] perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3
+    - [x86] perf/x86/kvm: Fix Broadwell Xeon stepping in isolation_ucodes[]
+    - HID: alps: fix error return code in alps_input_configured()
+    - HID cp2112: fix support for multiple gpiochips
+    - HID: wacom: Assign boolean values to a bool variable
+    - net: geneve: check skb is large enough for IPv4/IPv6 header
+    - [arm64,armhf] dmaengine: tegra20: Fix runtime PM imbalance on error
+    - [s390x] entry: save the caller of psw_idle
+    - [arm64] kprobes: Restore local irqflag if kprobes is cancelled
+    - xen-netback: Check for hotplug-status existence before watching
+    - [x86] crash: Fix crash_setup_memmap_entries() out-of-bounds access
+    - net: hso: fix NULL-deref on disconnect regression
+    - USB: CDC-ACM: fix poison/unpoison imbalance (Closes: #986995)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.34
+    - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
+    - [x86] mei: me: add Alder Lake P device id.
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.35
+    - [mips*] Do not include hi and lo in clobber list for R6
+    - netfilter: conntrack: Make global sysctls readonly in non-init netns
+    - net: usb: ax88179_178a: initialize local variables before use
+    - igb: Enable RSS for Intel I211 Ethernet Controller
+    - bpf: Fix masking negation logic upon negative dst register
+      (CVE-2021-31829)
+    - bpf: Fix leakage of uninitialized bpf stack under speculation
+      (CVE-2021-31829)
+    - net: qrtr: Avoid potential use after free in MHI send
+    - perf data: Fix error return code in perf_data__create_dir()
+    - capabilities: require CAP_SETFCAP to map uid 0
+    - perf ftrace: Fix access to pid in array when setting a pid filter
+    - driver core: add a min_align_mask field to struct device_dma_parameters
+    - swiotlb: add a IO_TLB_SIZE define
+    - swiotlb: factor out an io_tlb_offset helper
+    - swiotlb: factor out a nr_slots helper
+    - swiotlb: clean up swiotlb_tbl_unmap_single
+    - swiotlb: refactor swiotlb_tbl_map_single
+    - swiotlb: don't modify orig_addr in swiotlb_tbl_sync_single
+    - swiotlb: respect min_align_mask
+    - nvme-pci: set min_align_mask
+    - ovl: fix leaked dentry
+    - ovl: allow upperdir inside lowerdir
+    - ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
+    - USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
+    - USB: Add reset-resume quirk for WD19's Realtek Hub
+    - [x86] platform/x86: thinkpad_acpi: Correct thermal sensor allocation
+    - perf/core: Fix unconditional security_locked_down() call
+    - vfio: Depend on MMU
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.36
+    - bus: mhi: core: Fix check for syserr at power_up
+    - bus: mhi: core: Clear configuration from channel context during reset
+    - bus: mhi: core: Sanity check values from remote device before use
+    - dyndbg: fix parsing file query without a line-range suffix
+    - [s390x] disassembler: increase ebpf disasm buffer size
+    - [s390x] zcrypt: fix zcard and zqueue hot-unplug memleak
+    - [arm64,x86] tpm: acpi: Check eventlog signature before using it
+    - ftrace: Handle commands when closing set_ftrace_filter file
+    - ecryptfs: fix kernel panic with null dev_name
+    - fs/epoll: restore waking from ep_done_scan()
+    - mtd: spi-nor: core: Fix an issue of releasing resources during read/write
+    - Revert "mtd: spi-nor: macronix: Add support for mx25l51245g"
+    - erofs: add unsupported inode i_format check
+    - [armhf] spi: stm32-qspi: fix pm_runtime usage_count counter
+    - [armhf] spi: spi-ti-qspi: Free DMA resources
+    - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
+    - scsi: mpt3sas: Block PCI config access from userspace during reset
+    - mmc: sdhci: Check for reset prior to DMA address unmap
+    - mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
+      controllers
+    - [arm64,armhf] mmc: sdhci-tegra: Add required callbacks to set/clear CQE_EN
+      bit
+    - mmc: block: Update ext_csd.cache_ctrl if it was written
+    - mmc: block: Issue a cache flush only when it's enabled
+    - mmc: core: Do a power cycle when the CMD11 fails
+    - mmc: core: Set read only for SD cards with permanent write protect bit
+    - mmc: core: Fix hanging on I/O during system suspend for removable cards
+    - [arm64,armhf] irqchip/gic-v3: Do not enable irqs when handling spurious
+      interrups
+    - cifs: Return correct error code from smb2_get_enc_key
+    - cifs: fix out-of-bound memory access when calling smb3_notify() at mount
+      point
+    - cifs: detect dead connections only when echoes are enabled.
+    - smb2: fix use-after-free in smb2_ioctl_query_info()
+    - btrfs: handle remount to no compress during compression
+    - btrfs: fix metadata extent leak after failure to create subvolume
+    - [x86] intel_th: pci: Add Rocket Lake CPU support
+    - btrfs: fix race between transaction aborts and fsyncs leading to
+      use-after-free
+    - posix-timers: Preserve return value in clock_adjtime32()
+    - fbdev: zero-fill colormap in fbcmap.c
+    - [armhf] bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices
+      first
+    - staging: wimax/i2400m: fix byte-order issue
+    - bus: mhi: core: Destroy SBL devices when moving to mission mode
+    - crypto: api - check for ERR pointers in crypto_destroy_tfm()
+    - [x86] crypto: qat - fix unmap invalid dma address
+    - usb: gadget: uvc: add bInterval checking for HS mode
+    - usb: webcam: Invalid size of Processing Unit Descriptor
+    - [x86] genirq/matrix: Prevent allocation counter corruption
+    - usb: gadget: f_uac2: validate input parameters
+    - usb: gadget: f_uac1: validate input parameters
+    - [arm64,armhf] usb: dwc3: gadget: Ignore EP queue requests during bus reset
+    - usb: xhci: Fix port minor revision
+    - PCI: PM: Do not read power state in pci_enable_device_flags()
+    - [arm64,armhf] soc/tegra: pmc: Fix completion of power-gate toggling
+    - [arm64] dts: imx8mq-librem5-r3: Mark buck3 as always on
+    - [arm64] tee: optee: do not check memref size on return from Secure World
+    - [arm64,x86] soundwire: cadence: only prepare attached devices on clock
+      stop
+    - [arm*] perf/arm_pmu_platform: Use dev_err_probe() for IRQ errors
+    - [arm*] perf/arm_pmu_platform: Fix error handling
+    - random: initialize ChaCha20 constants with correct endianness
+    - xhci: check port array allocation was successful before dereferencing it
+    - xhci: check control context is valid before dereferencing it.
+    - xhci: fix potential array out of bounds with several interrupters
+    - bus: mhi: core: Clear context for stopped channels from remove()
+    - [arm64] spi: qup: fix PM reference leak in spi_qup_remove()
+    - [arm64,armhf] usb: musb: fix PM reference leak in musb_irq_work()
+    - usb: core: hub: Fix PM reference leak in usb_port_resume()
+    - [arm64,armhf] usb: dwc3: gadget: Check for disabled LPM quirk
+    - tty: n_gsm: check error while registering tty devices
+    - [x86] intel_th: Consistency and off-by-one fix
+    - [armhf] phy: phy-twl4030-usb: Fix possible use-after-free in
+      twl4030_usb_remove()
+    - [arm64] crypto: sun8i-ce - Fix PM reference leak in sun8i_ce_probe()
+    - [armhf] crypto: stm32/hash - Fix PM reference leak on stm32-hash.c
+    - [armhf] crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c
+    - [x86] platform/x86: intel_pmc_core: Don't use global pmcdev in quirks
+    - spi: sync up initial chipselect state
+    - btrfs: do proper error handling in create_reloc_root
+    - btrfs: do proper error handling in btrfs_update_reloc_root
+    - btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
+    - drm: Added orientation quirk for OneGX1 Pro
+    - drm/qxl: do not run release if qxl failed to init
+    - drm/qxl: release shadow on shutdown
+    - drm/ast: Fix invalid usage of AST_MAX_HWC_WIDTH in cursor atomic_check
+    - drm/ast: fix memory leak when unload the driver
+    - drm/amd/display: Check for DSC support instead of ASIC revision
+    - drm/amdgpu/display: buffer INTERRUPT_LOW_IRQ_CONTEXT interrupt work
+    - scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
+    - scsi: lpfc: Fix pt2pt connection does not recover after LOGO
+    - drm/amdgpu: Fix some unload driver issues
+    - sched/pelt: Fix task util_est update filtering
+    - kvfree_rcu: Use same set of GFP flags as does single-argument
+    - scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
+    - [x86] media: ite-cir: check for receive overflow
+    - power: supply: bq27xxx: fix power_avg for newer ICs
+    - media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
+    - media: gspca/sq905.c: fix uninitialized variable
+    - drm/amdgpu: mask the xgmi number of hops reported from psp to kfd
+    - drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
+    - drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool'
+    - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
+    - scsi: qla2xxx: Fix use after free in bsg
+    - [arm64,armhf] mmc: sdhci-esdhc-imx: validate pinctrl before use it
+    - mmc: sdhci-pci: Add PCI IDs for Intel LKF
+    - ata: ahci: Disable SXS for Hisilicon Kunpeng920
+    - nvmet: return proper error code from discovery ctrl
+    - scsi: smartpqi: Use host-wide tag space
+    - scsi: smartpqi: Correct request leakage during reset operations
+    - scsi: smartpqi: Add new PCI IDs
+    - scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
+    - media: em28xx: fix memory leak
+    - media: vivid: update EDID
+    - [arm64] drm/msm/dp: Fix incorrect NULL check kbot warnings in DP driver
+    - [armhf] clk: socfpga: arria10: Fix memory leak of socfpga_clk on error
+      return
+    - media: dvb-usb: fix memory leak in dvb_usb_adapter_init
+    - media: gscpa/stv06xx: fix memory leak
+    - sched/fair: Ignore percpu threads for imbalance pulls
+    - [arm64] drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
+    - [arm64] drm/msm/mdp5: Do not multiply vclk line count by 100
+    - drm/amdgpu/ttm: Fix memory leak userptr pages
+    - drm/radeon/ttm: Fix memory leak userptr pages
+    - drm/amd/display: Try YCbCr420 color when YCbCr444 fails
+    - drm/amdgpu: fix NULL pointer dereference
+    - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO
+      response
+    - scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode
+    - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
+    - mfd: intel-m10-bmc: Fix the register access range
+    - mfd: da9063: Support SMBus and I2C mode
+    - scsi: libfc: Fix a format specifier
+    - perf: Rework perf_event_exit_event()
+    - sched,fair: Alternative sched_slice()
+    - [s390x] archrandom: add parameter check for s390_arch_random_generate
+    - sched,psi: Handle potential task count underflow bugs more gracefully
+    - [i386] ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
+    - ALSA: hda/conexant: Re-order CX5066 quirk table entries
+    - [i386] ALSA: sb: Fix two use after free in snd_sb_qsound_build
+    - ALSA: usb-audio: Explicitly set up the clock selector
+    - ALSA: usb-audio: Add dB range mapping for Sennheiser Communications
+      Headset PC 8
+    - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G7
+    - ALSA: hda/realtek: GA503 use same quirks as GA401
+    - ALSA: hda/realtek: fix mic boost on Intel NUC 8
+    - ALSA: hda/realtek - Headset Mic issue on HP platform
+    - ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
+    - ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
+    - [x86] tools/power/turbostat: Fix turbostat for AMD Zen CPUs
+      (Closes: #985681)
+    - btrfs: fix race when picking most recent mod log operation for an old root
+    - [arm64] vdso: Discard .note.gnu.property sections in vDSO
+    - Makefile: Move -Wno-unused-but-set-variable out of GCC only block
+    - fs: fix reporting supported extra file attributes for statx()
+    - virtiofs: fix memory leak in virtio_fs_probe()
+    - ubifs: Only check replay with inode type to judge if inode linked
+    - f2fs: fix error handling in f2fs_end_enable_verity()
+    - f2fs: fix to avoid out-of-bounds memory access (CVE-2021-3506)
+    - openvswitch: fix stack OOB read while fragmenting IPv4 packets
+    - [arm64] ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe
+      failure
+    - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
+    - NFS: Don't discard pNFS layout segments that are marked for return
+    - NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
+    - jffs2: Fix kasan slab-out-of-bounds problem
+    - jffs2: Hook up splice_write callback
+    - [powerpc*] powernv: Enable HAIL (HV AIL) for ISA v3.1 processors
+    - [powerpc*] eeh: Fix EEH handling for hugepages in ioremap space.
+    - [x86] intel_th: pci: Add Alder Lake-M support
+    - [arm64,x86] tpm: efi: Use local variable for calculating final log size
+    - [arm64,x86] tpm: vtpm_proxy: Avoid reading host log when using a virtual
+      device
+    - [armhf] crypto: arm/curve25519 - Move '.fpu' after '.arch'
+    - md/raid1: properly indicate failure when ending a failed write request
+    - dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
+      sequences
+    - fuse: fix write deadlock
+    - exfat: fix erroneous discard when clear cluster bit
+    - sfc: farch: fix TX queue lookup in TX flush done handling
+    - sfc: farch: fix TX queue lookup in TX event handling
+    - security: commoncap: fix -Wstringop-overread warning
+    - Fix misc new gcc warnings
+    - jffs2: check the validity of dstlen in jffs2_zlib_compress()
+    - smb3: when mounting with multichannel include it in requested capabilities
+    - smb3: do not attempt multichannel to server which does not support it
+    - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT
+      op")
+    - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
+    - [x86] cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
+    - ext4: annotate data race in start_this_handle()
+    - ext4: annotate data race in jbd2_journal_dirty_metadata()
+    - ext4: fix check to prevent false positive report of incorrect used inodes
+    - ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
+    - ext4: fix error code in ext4_commit_super
+    - ext4: fix ext4_error_err save negative errno into superblock
+    - ext4: fix error return code in ext4_fc_perform_commit()
+    - ext4: allow the dax flag to be set and cleared on inline directories
+    - ext4: Fix occasional generic/418 failure
+    - media: dvbdev: Fix memory leak in dvb_media_device_free()
+    - media: dvb-usb: Fix use-after-free access
+    - media: dvb-usb: Fix memory leak at error in dvb_usb_device_init()
+    - media: v4l2-ctrls: fix reference to freed memory
+    - [arm64] media: venus: hfi_parser: Don't initialize parser on v1
+    - usb: gadget: dummy_hcd: fix gpf in gadget_setup
+    - usb: gadget: Fix double free of device descriptor pointers
+    - usb: gadget/function/f_fs string table fix for multiple languages
+    - [arm64,armhf] usb: dwc3: gadget: Remove FS bInterval_m1 limitation
+    - [arm64,armhf] usb: dwc3: gadget: Fix START_TRANSFER link state check
+    - [arm64,armhf] usb: dwc3: core: Do core softreset when switch mode
+    - [arm*] usb: dwc2: Fix session request interrupt handler
+    - tty: fix memory leak in vc_deallocate
+    - [x86] tools/power turbostat: Fix offset overflow issue in index converting
+    - tracing: Map all PIDs to command lines
+    - tracing: Restructure trace_clock_global() to never block
+    - dm space map common: fix division bug in sm_ll_find_free_block()
+    - dm integrity: fix missing goto in bitmap_flush_interval error handling
+    - dm rq: fix double free of blk_mq_tag_set in dev remove after table load
+      fails
+    - lib/vsprintf.c: remove leftover 'f' and 'F' cases from bstr_printf()
+    - [arm*] thermal/drivers/cpufreq_cooling: Fix slab OOB issue
+    - thermal/core/fair share: Lock the thermal zone while looping over
+      instances
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.37
+    - Bluetooth: verify AMP hci_chan before amp_destroy (CVE-2021-33034)
+    - bluetooth: eliminate the potential race condition when removing the HCI
+      controller (CVE-2021-32399)
+    - net/nfc: fix use-after-free llcp_sock_bind/connect (CVE-2021-23134)
+    - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers
+      (CVE-2021-3491)
+    - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL"
+    - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode()
+    - [amd64] tty: moxa: fix TIOCSSERIAL jiffies conversions
+    - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions
+    - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check
+    - [amd64] tty: moxa: fix TIOCSSERIAL permission check
+    - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for fixed
+      supply
+    - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for pps
+      supply
+    - [x86] usb: typec: tcpm: update power supply once partner accepts
+    - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
+    - PCI: Allow VPD access for QLogic ISP2722
+    - [x86] KVM: Defer the MMU unload to the normal path on an global INVPCID
+    - [arm64] PCI: xgene: Fix cfg resource mapping
+    - PM / devfreq: Unlock mutex and free devfreq struct in error path
+    - iio: inv_mpu6050: Fully validate gyro and accel scale writes
+    - iio:accel:adis16201: Fix wrong axis assignment that prevents loading
+    - iio:adc:ad7476: Fix remove handling
+    - misc: lis3lv02d: Fix false-positive WARN on various HP models
+    - [x86] misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
+    - [x86] misc: vmw_vmci: explicitly initialize vmci_datagram payload
+    - selinux: add proper NULL termination to the secclass_map permissions
+    - [x86] sched: Treat Intel SNC topology as default, COD as exception
+    - async_xor: increase src_offs when dropping destination page
+    - md/bitmap: wait for external bitmap writes to complete during tear down
+    - md-cluster: fix use-after-free issue when removing rdev
+    - md: split mddev_find
+    - md: factor out a mddev_find_locked helper from mddev_find
+    - md: md_open returns -EBUSY when entering racing area
+    - md: Fix missing unused status line of /proc/mdstat
+    - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
+    - cfg80211: scan: drop entry from hidden_list on overflow
+    - rtw88: Fix array overrun in rtw_get_tx_power_params()
+    - mt76: fix potential DMA mapping leak
+    - [amd64] drm/i915/gvt: Fix virtual display setup for BXT/APL
+    - [amd64] drm/i915/gvt: Fix vfio_edid issue for BXT/APL
+    - drm/qxl: use ttm bo priorities
+    - [arm64,armhf] drm/panfrost: Clear MMU irqs before handling the fault
+    - [arm64,armhf] drm/panfrost: Don't try to map pages that are already mapped
+    - drm/radeon: fix copy of uninitialized variable back to userspace
+    - drm/dp_mst: Revise broadcast msg lct & lcr
+    - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast
+    - drm: bridge/panel: Cleanup connector on bridge detach
+    - drm/amd/display: Reject non-zero src_y and src_x for video planes
+    - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2
+    - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
+    - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
+    - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
+    - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
+    - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
+    - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
+    - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
+    - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
+    - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
+    - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
+    - ALSA: hda/realtek: Re-order ALC662 quirk table entries
+    - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
+    - ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable
+    - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32
+    - [s390x] KVM: VSIE: correctly handle MVPG when in VSIE
+    - [s390x] KVM: split kvm_s390_logical_to_effective
+    - [s390x] KVM: fix guarded storage control register handling
+    - [s390x] fix detection of vector enhancements facility 1 vs. vector packed
+      decimal facility
+    - [s390x] KVM: VSIE: fix MVPG handling for prefixing and MSO
+    - [s390x] KVM: split kvm_s390_real_to_abs
+    - [s390x] KVM: extend kvm_s390_shadow_fault to return entry pointer
+    - [x86] KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with
+      64-bit
+    - [x86] KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads
+    - [x86] KVM: nSVM: Set the shadow root level to the TDP level for nested NPT
+    - [x86] KVM: SVM: Don't strip the C-bit from CR2 on #PF interception
+    - [x86] KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are
+      created
+    - [x86] KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP
+      unsupported
+    - [x86] KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch
+    - [x86] KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in
+      !64-bit
+    - [x86] KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit
+    - [arm64] KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read
+    - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
+    - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
+    - [arm64] KVM: Fully zero the vcpu state on reset
+    - [arm64] KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read
+    - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit"
+    - Revert "i3c master: fix missing destroy_workqueue() on error in
+      i3c_master_register"
+    - ovl: fix missing revert_creds() on error path
+    - Revert "drm/qxl: do not run release if qxl failed to init"
+    - [x86] usb: gadget: pch_udc: Revert d3cb25a12138 completely
+    - Revert "tools/power turbostat: adjust for temperature offset"
+    - [arm64] firmware: xilinx: Fix dereferencing freed memory
+    - [armhf] memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
+    - [armhf] ARM: dts: exynos: correct fuel gauge interrupt trigger level on
+      GT-I9100
+    - [armhf] ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
+    - [armhf] serial: stm32: fix code cleaning warnings and checks
+    - [armhf] serial: stm32: add "_usart" prefix in functions name
+    - [armhf] serial: stm32: fix probe and remove order for dma
+    - [armhf] serial: stm32: Use of_device_get_match_data()
+    - [armhf] serial: stm32: fix startup by enabling usart for reception
+    - [armhf] serial: stm32: fix incorrect characters on console
+    - [armhf] serial: stm32: fix TX and RX FIFO thresholds
+    - [armhf] serial: stm32: fix a deadlock condition with wakeup event
+    - [armhf] serial: stm32: fix wake-up flag handling
+    - [armhf] serial: stm32: fix a deadlock in set_termios
+    - [armhf] serial: stm32: fix tx dma completion, release channel
+    - [armhf] serial: stm32: call stm32_transmit_chars locked
+    - [armhf] serial: stm32: fix FIFO flush in startup and set_termios
+    - [armhf] serial: stm32: add FIFO flush when port is closed
+    - [armhf] serial: stm32: fix tx_empty condition
+    - [x86] usb: typec: tps6598x: Fix return value check in tps6598x_probe()
+    - regmap: set debugfs_name to NULL after it is freed
+    - [arm64,armhf] spi: rockchip: avoid objtool warning
+    - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions()
+    - mtd: don't lock when recursively deleting partitions
+    - mtd: maps: fix error return code of physmap_flash_remove()
+    - [arm64] dts: qcom: db845c: fix correct powerdown pin for WSA881x
+    - [armhf] spi: stm32: drop devres version of spi_register_master
+    - [armhf] spi: stm32: Fix use-after-free on unbind
+    - [x86] microcode: Check for offline CPUs before requesting new microcode
+    - devtmpfs: fix placement of complete() call
+    - [x86] usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
+    - [x86] usb: gadget: pch_udc: Check if driver is present before calling
+      ->setup()
+    - [x86] usb: gadget: pch_udc: Check for DMA mapping error
+    - [x86] usb: gadget: pch_udc: Initialize device pointer before use
+    - [x86] usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard
+      (v1)
+    - [amd64] crypto: ccp - fix command queuing to TEE ring buffer
+    - [x86] crypto: qat - don't release uninitialized resources
+    - [x86] crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
+    - dt-bindings: serial: stm32: Use 'type: object' instead of false for
+      'additionalProperties'
+    - mtd: require write permissions for locking and badblock ioctls
+    - [arm64] bus: qcom: Put child node before return
+    - soundwire: bus: Fix device found flag correctly
+    - NFSD: Fix sparse warning in nfs4proc.c
+    - NFSv4.2: fix copy stateid copying for the async copy
+    - crypto: poly1305 - fix poly1305_core_setkey() declaration
+    - [x86] crypto: qat - fix error path in adf_isr_resource_alloc()
+    - [armhf] usb: gadget: aspeed: fix dma map failure
+    - [arm64] drivers: nvmem: Fix voltage settings for QTI qfprom-efuse
+    - driver core: platform: Declare early_platform_cleanup() prototype
+    - [armel,armhf] memory: pl353: fix mask of ECC page_size config register
+    - soundwire: stream: fix memory leak in stream config error path
+    - [arm64] firmware: qcom_scm: Make __qcom_scm_is_call_available() return
+      bool
+    - [arm64] firmware: qcom_scm: Reduce locking section for __get_convention()
+    - [arm64] firmware: qcom_scm: Workaround lack of "is available" call on
+      SC7180
+    - [arm64,armhf] irqchip/gic-v3: Fix OF_BAD_ADDR error handling
+    - [x86] staging: rtl8192u: Fix potential infinite loop
+    - PM / devfreq: Use more accurate returned new_freq as resume_freq
+    - [armhf] clocksource/drivers/timer-ti-dm: Fix posted mode status check
+      order
+    - [armhf] clocksource/drivers/timer-ti-dm: Add missing
+      set_state_oneshot_stopped
+    - spi: Fix use-after-free with devm_spi_alloc_*
+    - [arm64] soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
+    - [arm64] soc: qcom: mdt_loader: Detect truncated read of segments
+    - PM: runtime: Replace inline function pm_runtime_callbacks_present()
+    - [amd64,arm64] ACPI: CPPC: Replace cppc_attr with kobj_attribute
+    - [x86] crypto: qat - Fix a double free in adf_create_ring
+    - [arm64] cpufreq: armada-37xx: Fix setting TBG parent for load levels
+    - [arm64] clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU
+      PM clock
+    - [arm64] cpufreq: armada-37xx: Fix the AVS value for load L1
+    - [arm64] clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250
+      Mhz to 1 GHz
+    - [arm64] clk: mvebu: armada-37xx-periph: Fix workaround for switching from
+      L1 to L0
+    - [arm64] cpufreq: armada-37xx: Fix driver cleanup when registration failed
+    - [arm64] cpufreq: armada-37xx: Fix determining base CPU frequency
+    - USB: cdc-acm: fix unprivileged TIOCCSERIAL
+    - USB: cdc-acm: fix TIOCGSERIAL implementation
+    - tty: actually undefine superseded ASYNC flags
+    - tty: fix return value for unsupported ioctls
+    - tty: fix return value for unsupported termiox ioctls
+    - serial: core: return early on unsupported ioctls
+    - node: fix device cleanups in error handling code
+    - crypto: chelsio - Read rxchannel-id from firmware
+    - usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
+    - security: keys: trusted: fix TPM2 authorizations
+    - [x86] platform/x86: pmc_atom: Match all Beckhoff Automation baytrail
+      boards with critclk_systems DMI table
+    - [armhf] dts: aspeed: Rainier: Fix humidity sensor bus address
+    - [x86] Drivers: hv: vmbus: Use after free in __vmbus_open()
+    - [x86] Drivers: hv: vmbus: Increase wait time for VMbus unload
+    - [x86] PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820
+      integrity check
+    - [arm*] usb: dwc2: Fix host mode hibernation exit with remote wakeup flow.
+    - [arm*] usb: dwc2: Fix hibernation between host and device modes.
+    - ttyprintk: Add TTY hangup callback.
+    - [armhf] serial: omap: don't disable rs485 if rts gpio is missing
+    - [armhf] serial: omap: fix rs485 half-duplex filtering
+    - xen-blkback: fix compatibility bug with single page rings
+    - [armhf] soc: aspeed: fix a ternary sign expansion bug
+    - [armhf] drm/tilcdc: send vblank event when disabling crtc
+    - [armhf] drm/stm: Fix bus_flags handling
+    - drm/amd/display: Fix off by one in hdmi_14_process_transaction()
+    - sched/fair: Fix shift-out-of-bounds in load_balance()
+    - afs: Fix updating of i_mode due to 3rd party change
+    - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter()
+    - media: vivid: fix assignment of dev->fbuf_out_flags
+    - media: saa7134: use sg_dma_len when building pgtable
+    - media: saa7146: use sg_dma_len when building pgtable
+    - [armhf] media: aspeed: fix clock handling logic
+    - drm/probe-helper: Check epoch counter in output_poll_execute()
+    - [arm64] media: venus: core: Fix some resource leaks in the error path of
+      'venus_probe()'
+    - media: m88ds3103: fix return value check in m88ds3103_probe()
+    - media: m88rs6000t: avoid potential out-of-bounds reads on arrays
+    - [x86] kprobes: Fix to check non boostable prefixes correctly
+    - sata_mv: add IRQ checks
+    - ata: libahci_platform: fix IRQ check
+    - seccomp: Fix CONFIG tests for Seccomp_filters
+    - nvme-tcp: block BH in sk state_change sk callback
+    - nvmet-tcp: fix incorrect locking in state_change sk callback
+    - [armhf] clk: imx: Fix reparenting of UARTs not associated with stdout
+    - nvme: retrigger ANA log update if group descriptor isn't found
+    - media: v4l2-ctrls.c: fix race condition in hdl->requests list
+    - vfio/pci: Move VGA and VF initialization to functions
+    - vfio/pci: Re-order vfio_pci_probe()
+    - [amd64] vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
+    - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct
+    - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect()
+    - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check()
+    - scsi: pm80xx: Fix potential infinite loop
+    - scsi: ufs: ufshcd-pltfrm: Fix deferred probing
+    - [amd64] scsi: hisi_sas: Fix IRQ checks
+    - [powerpc*] scsi: ibmvfc: Fix invalid state machine BUG_ON()
+    - nvmet-tcp: fix a segmentation fault during io parsing error
+    - nvme-pci: don't simple map sgl when sgls are disabled
+    - [armhf] HSI: core: fix resource leaks in hsi_add_client_from_dt()
+    - [amd64] x86/events/amd/iommu: Fix sysfs type mismatch
+    - [x86] perf/amd/uncore: Fix sysfs type mismatch
+    - io_uring: fix overflows checks in provide buffers
+    - sched/debug: Fix cgroup_path[] serialization
+    - drivers/block/null_blk/main: Fix a double free in null_init.
+    - xsk: Respect device's headroom and tailroom on generic xmit path
+    - HID: plantronics: Workaround for double volume key presses
+    - RDMA/mlx5: Fix mlx5 rates to IB rates map
+    - [x86] KVM: x86/mmu: Retry page faults that hit an invalid memslot
+    - Bluetooth: avoid deadlock between hci_dev->lock and socket lock
+    - bpftool: Fix maybe-uninitialized warnings
+    - iommu: Check dev->iommu in iommu_dev_xxx functions
+    - [amd64] iommu/vt-d: Reject unsupported page request modes
+    - [powerpc*] prom: Mark identical_pvr_fixup as __init
+    - inet: use bigger hash table for IP ID generation
+    - [arm64,armhf] pinctrl: pinctrl-single: remove unused parameter
+    - [arm64,armhf] pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when
+      bits_per_mux is not zero
+    - [mips64el,mipsel] loongson64: fix bug when PAGE_SIZE > 16KB
+    - RDMA/mlx5: Fix drop packet rule in egress table
+    - IB/isert: Fix a use after free in isert_connect_request
+    - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP
+    - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
+    - net: phy: lan87xx: fix access to wrong register of LAN87xx
+    - udp: never accept GSO_FRAGLIST packets
+    - [powerpc*] pseries: Only register vio drivers if vio bus exists
+    - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start()
+    - bug: Remove redundant condition check in report_bug
+    - RDMA/core: Fix corrupted SL on passive side
+    - nfc: pn533: prevent potential memory corruption
+    - [arm64] net: hns3: Limiting the scope of vector_ring_chain variable
+    - [amd64] iommu/vt-d: Don't set then clear private data in
+      prq_event_thread()
+    - iommu: Fix a boundary issue to avoid performance drop
+    - [amd64] iommu/vt-d: Report right snoop capability when using FL for IOVA
+    - [amd64] iommu/vt-d: Report the right page fault address
+    - [amd64] iommu/vt-d: Preset Access/Dirty bits for IOVA over FL
+    - [amd64] iommu/vt-d: Remove WO permissions on second-level paging entries
+    - [amd64] iommu/vt-d: Invalidate PASID cache when root/context entry changed
+    - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
+    - HID: lenovo: Use brightness_set_blocking callback for setting LEDs
+      brightness
+    - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling
+    - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event()
+    - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE
+    - [arm64] KVM: Initialize VCPU mdcr_el2 before loading it
+    - [arm*] ASoC: simple-card: fix possible uninitialized single_cpu local
+      variable
+    - [amd64] IB/hfi1: Use kzalloc() for mmu_rb_handler allocation
+    - [powerpc*] 64s: Fix pte update for kernel memory on radix
+    - [powerpc*] perf: Fix PMU constraint check for EBB events
+    - mac80211: bail out if cipher schemes are invalid
+    - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric
+    - xfs: fix return of uninitialized value in variable error
+    - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page()
+    - mt7601u: fix always true expression
+    - [powerpc*] KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
+    - ovl: invalidate readdir cache on changes to dir with origin
+    - RDMA/qedr: Fix error return code in qedr_iw_connect()
+    - [amd64] IB/hfi1: Fix error return code in parse_platform_config()
+    - cxgb4: Fix unintentional sign extension issues
+    - [arm64] net: thunderx: Fix unintentional sign extension issue
+    - RDMA/srpt: Fix error return code in srpt_cm_req_recv()
+    - [arm64,armhf] i2c: imx: fix reference leak when pm_runtime_get_sync fails
+    - [armhf] i2c: omap: fix reference leak when pm_runtime_get_sync fails
+    - [armhf] i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails
+    - [powerpc*] xive: Drop check on irq_data in xive_core_debug_show()
+    - [powerpc*] xive: Fix xmon command "dxi"
+    - net/packet: make packet_fanout.arr size configurable up to 64K
+    - net/packet: remove data races in fanout operations
+    - [amd64] drm/i915/gvt: Fix error code in intel_gvt_init_device()
+    - [amd64] iommu/amd: Put newline after closing bracket in warning
+    - [mips64el,mipsel] pci-legacy: stop using of_pci_range_to_resource
+    - [powerpc*] pseries: extract host bridge from pci_bus prior to bus removal
+    - [powerpc*] smp: Reintroduce cpu_core_mask
+    - [x86] KVM: dump_vmcs should not assume GUEST_IA32_EFER is valid
+    - rtlwifi: 8821ae: upgrade PHY and RF parameters
+    - [arm64,armhf] wlcore: fix overlapping snprintf arguments in debugfs
+    - mwl8k: Fix a double Free in mwl8k_probe_hw
+    - netfilter: nft_payload: fix C-VLAN offload support
+    - netfilter: nftables_offload: VLAN id needs host byteorder in flow
+      dissector
+    - netfilter: nftables_offload: special ethertype handling for VLAN
+    - [x86] vsock/vmci: log once the failed queue pair allocation
+    - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check
+    - RDMA/cxgb4: add missing qpid increment
+    - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
+    - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
+    - sfc: ef10: fix TX queue lookup in TX event handling
+    - vsock/virtio: free queued packets when closing socket
+    - [armhf] net: davinci_emac: Fix incorrect masking of tx and rx error
+      channel
+    - [amd64] crypto: ccp: Detect and reject "invalid" addresses destined for
+      PSP
+    - nfp: devlink: initialize the devlink port attribute "lanes"
+    - net: stmmac: fix TSO and TBS feature enabling during driver open
+    - RDMA/rxe: Fix a bug in rxe_fill_ip_info()
+    - RDMA/core: Add CM to restrack after successful attachment to a device
+    - [powerpc*] 64: Fix the definition of the fixmap area
+    - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
+    - ath10k: Fix a use after free in ath10k_htc_send_bundle
+    - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock
+    - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size
+    - [powerpc*] perf: Fix the threshold event selection for memory events in
+      power10
+    - net: phy: marvell: fix m88e1011_set_downshift
+    - net: phy: marvell: fix m88e1111_set_downshift
+    - bnxt_en: fix ternary sign extension bug in bnxt_show_temp()
+    - net: geneve: modify IP header check in geneve6_xmit_skb and
+      geneve_xmit_skb
+    - bnxt_en: Fix RX consumer index logic in the error path.
+    - [x86] KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM
+    - [arm64] net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
+    - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds
+    - net: bridge: mcast: fix broken length + header check for MRDv6 Adv.
+    - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
+    - perf tools: Change fields type in perf_record_time_conv
+    - perf jit: Let convert_timestamp() to be backwards-compatible
+    - perf session: Add swap operation for event TIME_CONV
+    - mm/sl?b.c: remove ctor argument from kmem_cache_flags
+    - mm: memcontrol: slab: fix obtain a reference to a freeing memcg
+    - mm/sparse: add the missing sparse_buffer_fini() in error branch
+    - mm/memory-failure: unnecessary amount of unmapping
+    - afs: Fix speculative status fetches
+    - bpf: Fix alu32 const subreg bound tracking on bitwise operations
+      (CVE-2021-3490)
+    - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (CVE-2021-3489)
+    - bpf: Prevent writable memory-mapping of read-only ringbuf pages
+    - [arm64] Remove arm64_dma32_phys_limit and its uses
+    - net: Only allow init netns to set default tcp cong to a restricted algo
+    - smp: Fix smp_call_function_single_async prototype
+    - Revert "net/sctp: fix race condition in sctp_destroy_sock"
+    - sctp: delay auto_asconf init until binding the first addr (CVE-2021-23133)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.38
+    - [arm64,x86] tpm: fix error return code in tpm2_get_cc_attrs_tbl()
+    - [arm64,x86] tpm, tpm_tis: Extend locality handling to TPM2 in
+      tpm_tis_gen_interrupt()
+    - [arm64,x86] tpm, tpm_tis: Reserve locality in tpm_tis_resume()
+    - [x86] KVM: x86/mmu: Remove the defunct update_pte() paging hook
+    - [x86] KVM/VMX: Invoke NMI non-IST entry instead of IST entry
+    - ACPI: PM: Add ACPI ID of Alder Lake Fan
+    - PM: runtime: Fix unpaired parent child_count for force_resume
+    - [x86] cpufreq: intel_pstate: Use HWP if enabled by platform firmware
+    - kvm: Cap halt polling at kvm->max_halt_poll_ns
+    - ath11k: fix thermal temperature read
+    - fs: dlm: fix debugfs dump
+    - fs: dlm: add errno handling to check callback
+    - fs: dlm: check on minimum msglen size
+    - fs: dlm: flush swork on shutdown
+    - tipc: convert dest node's address to network order
+    - [x86] ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus
+      T100TAF
+    - net/mlx5e: Use net_prefetchw instead of prefetchw in MPWQE TX datapath
+    - [arm64] net: stmmac: Set FIFO sizes for ipq806x
+    - Bluetooth: Fix incorrect status handling in LE PHY UPDATE event
+    - i2c: bail out early when RDWR parameters are wrong
+    - ALSA: hdsp: don't disable if not enabled
+    - ALSA: hdspm: don't disable if not enabled
+    - ALSA: rme9652: don't disable if not enabled
+    - ALSA: bebob: enable to deliver MIDI messages for multiple ports
+    - Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
+    - Bluetooth: initialize skb_queue_head at l2cap_chan_create()
+    - net/sched: cls_flower: use ntohs for struct flow_dissector_key_ports
+    - net: bridge: when suppression is enabled exclude RARP packets
+    - Bluetooth: check for zapped sk before connecting
+    - [powerpc] 32: Statically initialise first emergency context
+    - [arm64] net: hns3: remediate a potential overflow risk of bd_num_list
+    - [arm64] net: hns3: add handling for xmit skb with recursive fraglist
+    - ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
+    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet
+    - ice: handle increasing Tx or Rx ring sizes
+    - Bluetooth: btusb: Enable quirk boolean flag for Mediatek Chip.
+    - [x86] ASoC: rt5670: Add a quirk for the Dell Venue 10 Pro 5055
+    - i2c: Add I2C_AQ_NO_REP_START adapter quirk
+    - [mips64el,mipsel] MIPS: Loongson64: Use _CACHE_UNCACHED instead of
+      _CACHE_UNCACHED_ACCELERATED
+    - [amd64] IB/hfi1: Correct oversized ring allocation
+    - mac80211: clear the beacon's CRC after channel switch
+    - [armhf] pinctrl: samsung: use 'int' for register masks in Exynos
+    - rtw88: 8822c: add LC calibration for RTL8822C
+    - mt76: mt76x0: disable GTK offloading
+    - fuse: invalidate attrs when page writeback completes
+    - virtiofs: fix userns
+    - cuse: prevent clone
+    - iwlwifi: pcie: make cfg vs. trans_cfg more robust
+    - [powerpc*] mm: Add cond_resched() while removing hpte mappings
+    - Revert "iommu/amd: Fix performance counter initialization"
+    - [amd64] iommu/amd: Remove performance counter pre-initialization test
+    - ALSA: hda/realtek: Add quirk for Lenovo Ideapad S740
+    - [x86] ASoC: Intel: sof_sdw: add quirk for new ADL-P Rvp
+    - ALSA: hda/hdmi: fix race in handling acomp ELD notification at resume
+    - sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
+    - flow_dissector: Fix out-of-bounds warning in __skb_flow_bpf_to_target()
+    - [powerpc*] smp: Set numa node before updating mask
+    - [x86] ASoC: rt286: Generalize support for ALC3263 codec
+    - ethtool: ioctl: Fix out-of-bounds warning in
+      store_link_ksettings_for_user()
+    - net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule
+    - [powerpc*] pseries: Stop calling printk in rtas_stop_self()
+    - wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
+    - wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
+    - [powerpc*] iommu: Annotate nested lock for lockdep
+    - iavf: remove duplicate free resources calls
+    - kbuild: generate Module.symvers only when vmlinux exists
+    - bnxt_en: Add PCI IDs for Hyper-V VF devices.
+    - [ia64] module: fix symbolizer crash on fdescr
+    - watchdog: rename __touch_watchdog() to a better descriptive name
+    - watchdog: explicitly update timestamp when reporting softlockup
+    - watchdog/softlockup: remove logic that tried to prevent repeated reports
+    - watchdog: fix barriers when printing backtraces from all CPUs
+    - [x86] ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
+    - thermal: thermal_of: Fix error return code of
+      thermal_of_populate_bind_params()
+    - f2fs: move ioctl interface definitions to separated file
+    - f2fs: fix compat F2FS_IOC_{MOVE,GARBAGE_COLLECT}_RANGE
+    - f2fs: fix to allow migrating fully valid segment
+    - f2fs: fix panic during f2fs_resize_fs()
+    - f2fs: fix a redundant call to f2fs_balance_fs if an error occurs
+    - PCI: Release OF node in pci_scan_device()'s error path
+    - [armel,armhf] 9064/1: hw_breakpoint: Do not directly check the event's
+      overflow_handler hook
+    - f2fs: fix to align to section for fallocate() on pinned file
+    - f2fs: fix to update last i_size if fallocate partially succeeds
+    - f2fs: fix to avoid touching checkpointed data in get_victim()
+    - f2fs: fix to cover __allocate_new_section() with curseg_lock
+    - f2fs: Fix a hungtask problem in atomic write
+    - f2fs: fix to avoid accessing invalid fio in f2fs_allocate_data_block()
+    - [arm64] rpmsg: qcom_glink_native: fix error return code of
+      qcom_glink_rx_data()
+    - NFS: nfs4_bitmask_adjust() must not change the server global bitmasks
+    - NFS: Fix attribute bitmask in _nfs42_proc_fallocate()
+    - NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
+    - NFS: Deal correctly with attribute generation counter overflow
+    - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
+    - NFSv4.2 fix handling of sr_eof in SEEK's reply
+    - SUNRPC: Move fault injection call sites
+    - SUNRPC: Remove trace_xprt_transmit_queued
+    - SUNRPC: Handle major timeout in xprt_adjust_timeout()
+    - [arm64] thermal/drivers/tsens: Fix missing put_device error
+    - NFSv4.x: Don't return NFS4ERR_NOMATCHING_LAYOUT if we're unmounting
+    - nfsd: ensure new clients break delegations
+    - SUNRPC: fix ternary sign expansion bug in tracing
+    - xprtrdma: Avoid Receive Queue wrapping
+    - xprtrdma: Fix cwnd update ordering
+    - xprtrdma: rpcrdma_mr_pop() already does list_del_init()
+    - swiotlb: Fix the type of index
+    - ceph: fix inode leak on getattr error in __fh_to_dentry
+    - scsi: qla2xxx: Prevent PRLI in target mode
+    - scsi: ufs: core: Do not put UFS power into LPM if link is broken
+    - scsi: ufs: core: Cancel rpm_dev_flush_recheck_work during system suspend
+    - scsi: ufs: core: Narrow down fast path in system suspend path
+    - rtc: ds1307: Fix wday settings for rx8130
+    - [arm64] net: hns3: fix incorrect configuration for igu_egu_hw_err
+    - [arm64] net: hns3: initialize the message content in hclge_get_link_mode()
+    - [arm64] net: hns3: add check for HNS3_NIC_STATE_INITED in
+      hns3_reset_notify_up_enet()
+    - [arm64] net: hns3: fix for vxlan gpe tx checksum bug
+    - [arm64] net: hns3: use netif_tx_disable to stop the transmit queue
+    - [arm64] net: hns3: disable phy loopback setting in hclge_mac_start_phy
+    - sctp: do asoc update earlier in sctp_sf_do_dupcook_a
+    - [riscv64] Fix error code returned by riscv_hartid_to_cpuid()
+    - sunrpc: Fix misplaced barrier in call_decode
+    - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
+    - sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
+    - netfilter: xt_SECMARK: add new revision to fix structure layout
+    - net: stmmac: Clear receive all(RA) bit when promiscuous mode is off
+    - drm/radeon: Fix off-by-one power_state index heap overwrite
+    - drm/radeon: Avoid power table parsing memory leaks
+    - [arm64] entry: factor irq triage logic into macros
+    - [arm64] entry: always set GIC_PRIO_PSR_I_SET during entry
+    - khugepaged: fix wrong result value for
+      trace_mm_collapse_huge_page_isolate()
+    - mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
+    - mm/migrate.c: fix potential indeterminate pte entry in
+      migrate_vma_insert_page()
+    - ksm: fix potential missing rmap_item for stable_node
+    - mm/gup: check every subpage of a compound page during isolation
+    - mm/gup: return an error on migration failure
+    - mm/gup: check for isolation errors
+    - ethtool: fix missing NLM_F_MULTI flag when dumping
+    - net: fix nla_strcmp to handle more then one trailing null character
+    - smc: disallow TCP_ULP in smc_setsockopt()
+    - netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check
+    - netfilter: nftables: Fix a memleak from userdata error path in new objects
+    - sched: Fix out-of-bound access in uclamp
+    - sched/fair: Fix unfairness caused by missing load decay
+    - fs/proc/generic.c: fix incorrect pde_is_permanent check
+    - kernel: kexec_file: fix error return code of
+      kexec_calculate_store_digests()
+    - kernel/resource: make walk_system_ram_res() find all busy
+      IORESOURCE_SYSTEM_RAM resources
+    - kernel/resource: make walk_mem_res() find all busy IORESOURCE_MEM
+      resources
+    - netfilter: nftables: avoid overflows in nft_hash_buckets()
+    - i40e: fix broken XDP support
+    - i40e: Fix use-after-free in i40e_client_subtask()
+    - i40e: fix the restart auto-negotiation after FEC modified
+    - i40e: Fix PHY type identifiers for 2.5G and 5G adapters
+    - f2fs: avoid unneeded data copy in f2fs_ioc_move_range()
+    - [powerpc*] 64s: Fix crashes when toggling stf barrier
+    - [powerpc*] 64s: Fix crashes when toggling entry flush barrier
+    - hfsplus: prevent corruption in shrinking truncate
+    - squashfs: fix divide error in calculate_skip()
+    - userfaultfd: release page in error path to avoid BUG_ON
+    - mm/hugetlb: fix F_SEAL_FUTURE_WRITE
+    - blk-iocost: fix weight updates of inner active iocgs
+    - [arm64] mte: initialize RGSR_EL1.SEED in __cpu_setup
+    - [arm64] Fix race condition on PG_dcache_clean in __sync_icache_dcache()
+    - btrfs: fix race leading to unpersisted data and metadata on fsync
+    - drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors
+      are connected
+    - [x86] drm/i915: Avoid div-by-zero on gen2
+    - kvm: exit halt polling on need_resched() as well
+    - [x86] KVM: LAPIC: Accurately guarantee busy wait for timer to expire when
+      using hv_timer
+    - [arm64] drm/msm/dp: initialize audio_comp when audio starts
+    - [x86] KVM: x86: Cancel pvclock_gtod_work on module removal
+    - [x86] KVM: x86: Prevent deadlock against tk_core.seq
+    - dax: Add an enum for specifying dax wakup mode
+    - dax: Add a wakeup mode parameter to put_unlocked_entry()
+    - dax: Wake up all waiters after invalidating dax entry
+    - [amd64] xen/unpopulated-alloc: consolidate pgmap manipulation
+    - [amd64] xen/unpopulated-alloc: fix error return code in fill_list()
+    - [arm64,armhf] usb: dwc3: gadget: Free gadget structure only after freeing
+      endpoints
+    - iio: light: gp2ap002: Fix rumtime PM imbalance on error
+    - iio: proximity: pulsedlight: Fix rumtime PM imbalance on error
+    - [armhf] hwmon: (occ) Fix poll rate limiting
+    - ACPI: scan: Fix a memory leak in an error handling path
+    - kyber: fix out of bounds access when preempted
+    - nvmet: add lba to sect conversion helpers
+    - nvmet: fix inline bio check for bdev-ns
+    - nvmet-rdma: Fix NULL deref when SEND is completed with error
+    - f2fs: compress: fix to free compress page correctly
+    - f2fs: compress: fix race condition of overwrite vs truncate
+    - f2fs: compress: fix to assign cc.cluster_idx correctly
+    - nbd: Fix NULL pointer in flush_workqueue
+    - blk-mq: plug request for shared sbitmap
+    - blk-mq: Swap two calls in blk_mq_exit_queue()
+    - [armhf] usb: dwc3: omap: improve extcon initialization
+    - [arm64] usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel
+      Merrifield
+    - usb: xhci: Increase timeout for HC halt
+    - [arm*] usb: dwc2: Fix gadget DMA unmap direction
+    - usb: core: hub: fix race condition about TRSMRCY of resume
+    - [arm64,armhf] usb: dwc3: gadget: Enable suspend events
+    - [arm64,armhf] usb: dwc3: gadget: Return success always for kick transfer
+      in ep queue
+    - [x86] usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4
+    - [x86] usb: typec: ucsi: Put fwnode in any case during ->probe()
+    - xhci-pci: Allow host runtime PM as default for Intel Alder Lake xHCI
+    - xhci: Do not use GFP_KERNEL in (potentially) atomic context
+    - xhci: Add reset resume quirk for AMD xhci controller.
+    - iio: gyro: mpu3050: Fix reported temperature value
+    - iio: tsl2583: Fix division by a zero lux_val
+    - cdc-wdm: untangle a circular dependency between callback and softint
+    - xen/gntdev: fix gntdev_mmap() error exit path
+    - [x86] KVM: Emulate RDPID only if RDTSCP is supported
+    - [x86] KVM: Move RDPID emulation intercept to its own enum
+    - [x86] KVM: nVMX: Always make an attempt to map eVMCS after migration
+    - [x86] KVM: VMX: Do not advertise RDPID if ENABLE_RDTSCP control is
+      unsupported
+    - [x86] KVM: VMX: Disable preemption when probing user return MSRs
+    - Revert "iommu/vt-d: Remove WO permissions on second-level paging entries"
+    - Revert "iommu/vt-d: Preset Access/Dirty bits for IOVA over FL"
+    - iommu/vt-d: Preset Access/Dirty bits for IOVA over FL
+    - iommu/vt-d: Remove WO permissions on second-level paging entries
+    - mm: fix struct page layout on 32-bit systems
+    - [mips*] Reinstate platform `__div64_32' handler
+    - [mips*] Avoid DIVU in `__div64_32' is result would be zero
+    - [mips*] Avoid handcoded DIVU in `__div64_32' altogether
+    - [armhf] clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap
+      issue
+    - [armhf] clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata
+      i940
+    - [armel,armhf] 9011/1: centralize phys-to-virt conversion of DT/ATAGS
+      address
+    - [armel,armhf] 9012/1: move device tree mapping out of linear region
+    - [armel,armhf] 9020/1: mm: use correct section size macro to describe the
+      FDT virtual address
+    - [armel,armhf] 9027/1: head.S: explicitly map DT even if it lives in the
+      first physical section
+    - [x86] usb: typec: tcpm: Fix error while calculating PPS out values
+    - kobject_uevent: remove warning in init_uevent_argv()
+    - [x86] drm/i915/gt: Fix a double free in gen8_preallocate_top_level_pdp
+    - [x86] drm/i915: Read C0DRB3/C1DRB3 as 16 bits again
+    - [x86] drm/i915/overlay: Fix active retire callback alignment
+    - [x86] drm/i915: Fix crash in auto_retire
+    - debugfs: Make debugfs_allow RO after init
+    - ext4: fix debug format string warning
+    - nvme: do not try to reconfigure APST when the controller is not live
+
+  [ Vincent Blut ]
+  * [x86] sound/soc/intel: Enable SND_SOC_INTEL_CATPT as module
+    (Closes: #986822)
+  * [x86] sound/soc/intel/boards: Enable SND_SOC_INTEL_BDW_RT5650_MACH as
+    module
+  * drivers/input/rmi4: Enable RMI4_F3A (Closes: #986848)
+  * [armhf] drivers/gpio: Enable GPIO_MXC as module (Closes: #987019)
+  * [x86] drivers/misc/mei: Enable INTEL_MEI_TXE, INTEL_MEI_HDCP as modules
+    (Closes: #987281)
+
+  [ Uwe Kleine-König ]
+  * [arm64] Enable more options for NXP's i.MX8 (Closes: #985862)
+
+  [ Salvatore Bonaccorso ]
+  * vfs: move cap_convert_nscap() call into vfs_setxattr() (CVE-2021-3493)
+  * Refresh "Makefile: Do not check for libelf when building OOT module"
+  * Bump ABI to 7
+  * Refresh "tools/include/uapi: Fix <asm/errno.h>"
+  * [rt] Update to 5.10.35-rt39
+  * [rt] Refresh "powerpc/mm/highmem: Switch to generic kmap atomic"
+  * [arm64] udeb: Include mdio module for RPi4 ethernet in installer
+    (Closes: #985956)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Disable USB type-C DisplayPort in pinebook pro device-tree.
+  * [arm64] Enable TYPEC_FUSB302, SND_SOC_ES8316, TYPEC and TYPEC_TCPM as
+    modules. (Closes: #987638)
+
+  [ Michal Simek ]
+  * [arm64] Enable clock driver for Xilinx ZynqMP SoC
+
+  [ Valentin Vidic ]
+  * [s390x] udeb: Include standard scsi-modules containing the virtio_blk
+    module (Closes: #988005)
+
+  [ Ben Hutchings ]
+  * kbuild: Abort build if SUBDIRS used (Closes: #987575)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 20 May 2021 07:47:35 +0200
+
+linux (5.10.28-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.27
+    - mm/memcg: rename mem_cgroup_split_huge_fixup to split_page_memcg and add
+      nr_pages argument
+    - mm/memcg: set memcg when splitting page
+    - mt76: fix tx skb error handling in mt76_dma_tx_queue_skb
+    - net: stmmac: fix dma physical address of descriptor when display ring
+    - [arm64,armhf] net: fec: ptp: avoid register access when ipg clock is
+      disabled
+    - [powerpc*] 4xx: Fix build errors from mfdcr()
+    - atm: eni: dont release is never initialized
+    - atm: lanai: dont run lanai_dev_close if not open
+    - Revert "r8152: adjust the settings about MAC clock speed down for RTL8153"
+    - [x86] ALSA: hda: ignore invalid NHLT table
+    - ixgbe: Fix memleak in ixgbe_configure_clsu32
+    - blk-cgroup: Fix the recursive blkg rwstat
+    - net: tehuti: fix error return code in bdx_probe()
+    - net: intel: iavf: fix error return code of iavf_init_get_resources()
+    - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count
+    - gianfar: fix jumbo packets+napi+rx overrun crash (CVE-2021-29264)
+    - cifs: ask for more credit on async read/write code paths
+    - gfs2: fix use-after-free in trans_drain
+    - [arm64,armhf] cpufreq: blacklist Arm Vexpress platforms in
+      cpufreq-dt-platdev
+    - gpiolib: acpi: Add missing IRQF_ONESHOT
+    - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default
+    - NFS: Correct size calculation for create reply length
+    - [arm64] net: hisilicon: hns: fix error return code of
+      hns_nic_clear_all_rx_fetch()
+    - [arm64] net: enetc: set MAC RX FIFO to recommended value
+    - atm: uPD98402: fix incorrect allocation
+    - atm: idt77252: fix null-ptr-dereference
+    - cifs: change noisy error message to FYI
+    - kbuild: add image_name to no-sync-config-targets
+    - umem: fix error return code in mm_pci_probe()
+    - [sparc64] Fix opcode filtering in handling of no fault loads
+    - u64_stats,lockdep: Fix u64_stats_init() vs lockdep
+    - block: Fix REQ_OP_ZONE_RESET_ALL handling
+    - drm/amdgpu: fb BO should be ttm_bo_type_device
+    - drm/radeon: fix AGP dependency
+    - nvme: simplify error logic in nvme_validate_ns()
+    - nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request()
+    - nvme-fc: set NVME_REQ_CANCELLED in nvme_fc_terminate_exchange()
+    - nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted
+    - nvme-core: check ctrl css before setting up zns
+    - nvme-rdma: Fix a use after free in nvmet_rdma_write_data_done
+    - nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a
+    - nfs: we don't support removing system.nfs4_acl
+    - block: Suppress uevent for hidden device when removed
+    - mm/fork: clear PASID for new mm
+    - [ia64] fix ia64_syscall_get_set_arguments() for break-based syscalls
+    - [ia64] fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign
+    - static_call: Pull some static_call declarations to the type headers
+    - [x86] static_call: Allow module use without exposing static_call_key
+    - [x86] static_call: Fix the module key fixup
+    - [x86] static_call: Fix static_call_set_init()
+    - [x86] KVM: Protect userspace MSR filter with SRCU, and set atomically-ish
+    - btrfs: fix sleep while in non-sleep context during qgroup removal
+    - selinux: don't log MAC_POLICY_LOAD record on failed policy load
+    - selinux: fix variable scope issue in live sidtab conversion
+    - [arm64] netsec: restore phy power state after controller reset
+    - [x86] platform/x86: intel-vbtn: Stop reporting SW_DOCK events
+    - psample: Fix user API breakage
+    - z3fold: prevent reclaim/free race for headless pages
+    - squashfs: fix inode lookup sanity checks
+    - squashfs: fix xattr id and id lookup sanity checks
+    - hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared
+      mappings
+    - [x86] ACPI: video: Add missing callback back for Sony VPCEH3U1E
+    - ACPICA: Always create namespace nodes using acpi_ns_create_node()
+    - [arm64] stacktrace: don't trace arch_stack_walk()
+    - integrity: double check iint_cache was initialized
+    - [armhf] drm/etnaviv: Use FOLL_FORCE for userptr
+    - drm/amdgpu: Add additional Sienna Cichlid PCI ID
+    - [x86] drm/i915: Fix the GT fence revocation runtime PM logic
+    - dm verity: fix DM_VERITY_OPTS_MAX value
+    - dm ioctl: fix out of bounds array access when no devices
+    - [armhf] bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
+    - [armhf] OMAP2+: Fix smartreflex init regression after dropping legacy data
+    - [armhf] soc: ti: omap-prm: Fix occasional abort on reset deassert for dra7
+      iva
+    - veth: Store queue_mapping independently of XDP prog presence
+    - bpf: Change inode_storage's lookup_elem return value from NULL to -EBADF
+    - net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets
+    - net/mlx5e: When changing XDP program without reset, take refs for XSK RQs
+    - net/mlx5e: Don't match on Geneve options in case option masks are all zero
+    - ipv6: fix suspecious RCU usage warning
+    - drop_monitor: Perform cleanup upon probe registration failure
+    - macvlan: macvlan_count_rx() needs to be aware of preemption
+    - net: sched: validate stab values
+    - [armhf] net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port
+    - igc: reinit_locked() should be called with rtnl_lock
+    - igc: Fix Pause Frame Advertising
+    - igc: Fix Supported Pause Frame Link Setting
+    - igc: Fix igc_ptp_rx_pktstamp()
+    - e1000e: add rtnl_lock() to e1000_reset_task
+    - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571
+    - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template
+    - net: phy: broadcom: Add power down exit reset state delay
+    - [armhf] ftgmac100: Restart MAC HW once
+    - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (CVE-2021-29647)
+    - flow_dissector: fix byteorder of dissected ICMP ID
+    - netfilter: ctnetlink: fix dump of the expect mask attribute
+    - net: phylink: Fix phylink_err() function name error in
+      phylink_major_config
+    - tipc: better validate user input in tipc_nl_retrieve_key()
+      (CVE-2021-29646)
+    - tcp: relookup sock for RST+ACK packets handled by obsolete req sock
+    - can: isotp: isotp_setsockopt(): only allow to set low level TX flags for
+      CAN-FD
+    - can: isotp: TX-path: ensure that CAN frame flags are initialized
+    - can: peak_usb: add forgotten supported devices
+    - [arm64,armhf] can: flexcan: flexcan_chip_freeze(): fix chip freeze for
+      missing bitrate
+    - can: c_can_pci: c_can_pci_remove(): fix use-after-free
+    - [armhf] can: c_can: move runtime PM enable/disable to c_can_platform
+    - mac80211: fix rate mask reset
+    - mac80211: Allow HE operation to be longer than expected.
+    - nfp: flower: fix unsupported pre_tunnel flows
+    - nfp: flower: add ipv6 bit to pre_tunnel control message
+    - nfp: flower: fix pre_tun mask id allocation
+    - ftrace: Fix modify_ftrace_direct.
+    - [arm64] drm/msm/dsi: fix check-before-set in the 7nm dsi_pll code
+    - net/sched: cls_flower: fix only mask bit check in the validate_ct_state
+    - netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags
+    - netfilter: nftables: allow to update flowtable flags
+    - netfilter: flowtable: Make sure GC works periodically in idle system
+    - [armhf] dts: imx6ull: fix ubi filesystem mount failed
+    - ipv6: weaken the v4mapped source check
+    - net: check all name nodes in __dev_alloc_name
+    - net: cdc-phonet: fix data-interface release on probe failure
+    - igb: check timestamp validity
+    - r8152: limit the RX buffer size of RTL8153A for USB 2.0
+    - [arm64,armhf] net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes
+    - selinux: vsock: Set SID for socket returned by accept()
+    - bpf: Fix umd memory leak in copy_process() (CVE-2021-29649)
+    - can: isotp: tx-path: zero initialize outgoing CAN frames
+    - [arm64] drm/msm: fix shutdown hook in case GPU components failed to bind
+    - [arm64] drm/msm: Fix suspend/resume on i.MX5
+    - [arm64] kdump: update ppos when reading elfcorehdr
+    - PM: runtime: Defer suspending suppliers
+    - net/mlx5: Add back multicast stats for uplink representor
+    - net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP
+    - net/mlx5e: Offload tuple rewrite for non-CT flows
+    - net/mlx5e: Fix error path for ethtool set-priv-flag
+    - PM: EM: postpone creating the debugfs dir till fs_initcall
+    - net: bridge: don't notify switchdev for local FDB addresses
+    - [amd64] xen/x86: make XEN_BALLOON_MEMORY_HOTPLUG_LIMIT depend on
+      MEMORY_HOTPLUG
+    - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening
+      server
+    - bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
+    - net: Consolidate common blackhole dst ops
+    - net, bpf: Fix ip6ip6 crash with collect_md populated skbs
+    - igb: avoid premature Rx buffer reuse
+    - net: phy: introduce phydev->port
+    - net: phy: broadcom: Avoid forward for bcm54xx_config_clock_delay()
+    - net: phy: broadcom: Set proper 1000BaseX/SGMII interface mode for
+      BCM54616S
+    - net: phy: broadcom: Fix RGMII delays for BCM50160 and BCM50610M
+    - Revert "netfilter: x_tables: Switch synchronization to RCU"
+    - netfilter: x_tables: Use correct memory barriers. (CVE-2021-29650)
+    - dm table: Fix zoned model check and zone sectors check
+    - mm/mmu_notifiers: ensure range_end() is paired with range_start()
+    - Revert "netfilter: x_tables: Update remaining dereference to RCU"
+    - ACPI: scan: Rearrange memory allocation in acpi_device_add()
+    - ACPI: scan: Use unique number for instance_no
+    - io_uring: fix provide_buffers sign extension
+    - block: recalculate segment count for multi-segment discards correctly
+    - scsi: Revert "qla2xxx: Make sure that aborted commands are freed"
+    - scsi: qedi: Fix error return code of qedi_alloc_global_queues()
+    - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach()
+    - smb3: fix cached file size problems in duplicate extents (reflink)
+    - cifs: Adjust key sizes and key generation routines for AES256 encryption
+    - locking/mutex: Fix non debug version of mutex_lock_io_nested()
+    - mm/memcg: fix 5.10 backport of splitting page memcg
+    - fs/cachefiles: Remove wait_bit_key layout dependency
+    - can: dev: Move device back to init netns on owning netns delete
+    - r8169: fix DMA being used after buffer free if WoL is enabled
+    - [armhf] net: dsa: b53: VLAN filtering is global to all users
+    - mac80211: fix double free in ibss_leave
+    - ext4: add reclaim checks to xattr code
+    - fs/ext4: fix integer overflow in s_log_groups_per_flex
+    - [amd64] Revert "xen: fix p2m size in dom0 for disabled memory hotplug
+      case"
+    - Revert "net: bonding: fix error return code of bond_neigh_init()"
+    - nvme: fix the nsid value to print in nvme_validate_or_alloc_ns
+    - can: peak_usb: Revert "can: peak_usb: add forgotten supported devices"
+    - xen-blkback: don't leak persistent grants from xen_blkbk_map()
+      (CVE-2021-28688)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.28
+    - [arm64] mm: correct the inside linear map range during hotplug check
+    - bpf: Fix fexit trampoline.
+    - virtiofs: Fail dax mount if device does not support it
+    - ext4: shrink race window in ext4_should_retry_alloc()
+    - ext4: fix bh ref count on error paths
+    - rpc: fix NULL dereference on kmalloc failure
+    - iomap: Fix negative assignment to unsigned sis->pages in
+      iomap_swapfile_activate
+    - [x86] ASoC: rt1015: fix i2c communication error
+    - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10
+    - [x86] ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor
+      of 10
+    - [armhf] ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value
+      on probe
+    - [x86] ASoC: es8316: Simplify adc_pga_gain_tlv table
+    - ASoC: soc-core: Prevent warning if no DMI table is present
+    - NFSD: fix error handling in NFSv4.0 callbacks
+    - kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing
+    - vhost: Fix vhost_vq_reset()
+    - io_uring: fix ->flags races by linked timeouts
+    - scsi: st: Fix a use after free in st_open()
+    - scsi: qla2xxx: Fix broken #endif placement
+    - [x86] staging: comedi: cb_pcidas: fix request_irq() warn
+    - [x86] staging: comedi: cb_pcidas64: fix request_irq() warn
+    - ASoC: rt711: add snd_soc_component remove callback
+    - thermal/core: Add NULL pointer check before using cooling device stats
+    - locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling
+    - locking/ww_mutex: Fix acquire/release imbalance in
+      ww_acquire_init()/ww_acquire_fini()
+    - nvmet-tcp: fix kmap leak when data digest in use
+    - io_uring: imply MSG_NOSIGNAL for send[msg]()/recv[msg]() calls
+    - [x86] static_call: Align static_call_is_init() patching condition
+    - ext4: do not iput inode under running transaction in ext4_rename()
+    - io_uring: call req_set_fail_links() on short send[msg]()/recv[msg]() with
+      MSG_WAITALL
+    - [arm64,armhf] net: mvpp2: fix interrupt mask/unmask skip condition
+    - flow_dissector: fix TTL and TOS dissection on IPv4 fragments
+    - net: introduce CAN specific pointer in the struct net_device
+    - brcmfmac: clear EAP/association status bits on linkdown events
+    - ath11k: add ieee80211_unregister_hw to avoid kernel crash caused by NULL
+      pointer
+    - rtw88: coex: 8821c: correct antenna switch function
+    - iwlwifi: pcie: don't disable interrupts for reg_lock
+    - ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr()
+    - [amd64,arm64] net: ethernet: aquantia: Handle error cleanup of start on
+      open
+    - appletalk: Fix skb allocation size in loopback case
+    - net: wan/lmc: unregister device when no matching device is found
+    - net: 9p: advance iov on empty read
+    - bpf: Remove MTU check in __bpf_skb_max_len
+    - ACPI: tables: x86: Reserve memory occupied by ACPI tables
+    - ACPI: processor: Fix CPU0 wakeup in acpi_idle_play_dead()
+    - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
+    - ALSA: hda: Re-add dropped snd_poewr_change_state() calls
+    - ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks
+    - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO
+    - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook
+    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 640 G8
+    - [x86] KVM: SVM: load control fields from VMCB12 before checking them
+      (CVE-2021-29657)
+    - [x86] KVM: SVM: ensure that EFER.SVME is set when running nested guest or
+      on nested vmexit
+    - PM: runtime: Fix race getting/putting suppliers at probe
+    - PM: runtime: Fix ordering in pm_runtime_get_suppliers()
+    - tracing: Fix stack trace event size
+    - [s390x] vdso: copy tod_steering_delta value to vdso_data page
+    - [s390x] vdso: fix tod_steering_delta type
+    - mm: fix race by making init_zero_pfn() early_initcall
+    - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings()
+    - drm/amdgpu: check alignment on CPU page for bo map
+    - reiserfs: update reiserfs_xattrs_initialized() condition
+    - [armhf] drm/imx: fix memory leak when fails to init
+    - [arm64,armhf] drm/tegra: dc: Restore coupling of display controllers
+    - [arm64,armhf] drm/tegra: sor: Grab runtime PM reference across reset
+    - [arm64,armhf] pinctrl: rockchip: fix restore error in resume
+    - extcon: Add stubs for extcon_register_notifier_all() functions
+    - extcon: Fix error handling in extcon_dev_register
+    - firmware: stratix10-svc: reset COMMAND_RECONFIG_FLAG_PARTIAL to 0
+    - [arm64] usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield
+    - [x86] video: hyperv_fb: Fix a double free in hvfb_probe
+    - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (CVE-2021-3483)
+    - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
+    - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem
+    - [arm64,armhf] usb: musb: Fix suspend with devices connected for a64
+    - cdc-acm: fix BREAK rx code path adding necessary calls
+    - USB: cdc-acm: untangle a circular dependency between callback and softint
+    - USB: cdc-acm: downgrade message to debug
+    - USB: cdc-acm: fix double free on probe failure
+    - USB: cdc-acm: fix use-after-free after probe failure
+    - [i386] usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
+    - [arm*] usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board.
+    - [arm*] usb: dwc2: Prevent core suspend when port connection flag is 0
+    - [arm64] usb: dwc3: qcom: skip interconnect init for ACPI probe
+    - [arm64,armhf] usb: dwc3: gadget: Clear DEP flags after stop transfers in
+      ep disable
+    - soc: qcom-geni-se: Cleanup the code to remove proxy votes
+    - [x86] staging: rtl8192e: Fix incorrect source in memcpy()
+    - [x86] staging: rtl8192e: Change state information from u16 to u8
+    - driver core: clear deferred probe reason on probe retry
+    - drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
+    - [riscv64] evaluate put_user() arg before enabling user access
+    - Revert "kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for
+      freezing"
+    - [amd64] bpf: Use NOP_ATOMIC5 instead of emit_nops(&prog, 5) for
+      BPF_TRAMP_F_CALL_ORIG
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT
+    during updates"
+  * Bump ABI to 6
+  * [rt] Refresh "tracing: Merge irqflags + preempt counter."
+  * bpf, x86: Validate computation of branch displacements for x86-64
+    (CVE-2021-29154)
+  * bpf, x86: Validate computation of branch displacements for x86-32
+    (CVE-2021-29154)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 09 Apr 2021 20:17:58 +0200
+
+linux (5.10.26-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.25
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.26
+    - ALSA: dice: fix null pointer dereference when node is disconnected
+    - ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro
+    - ALSA: hda: generic: Fix the micmute led init state
+    - ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air
+    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 840 G8
+    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8
+    - ALSA: hda/realtek: fix mute/micmute LEDs for HP 850 G8
+    - Revert "PM: runtime: Update device status before letting suppliers
+      suspend"
+    - [s390x] vtime: fix increased steal time accounting
+    - [s390x] pci: refactor zpci_create_device()
+    - [s390x] pci: remove superfluous zdev->zbus check
+    - [s390x] pci: fix leak of PCI device structure
+    - zonefs: Fix O_APPEND async write handling
+    - zonefs: prevent use of seq files as swap file
+    - zonefs: fix to update .i_wr_refcnt correctly in zonefs_open_zone()
+    - btrfs: fix race when cloning extent buffer during rewind of an old root
+      (CVE-2021-28964)
+    - btrfs: fix slab cache flags for free space tree bitmap
+    - vhost-vdpa: fix use-after-free of v->config_ctx (CVE-2021-29266)
+    - [armhf] ASoC: fsl_ssi: Fix TDM slot setup for I2S mode
+    - [x86] ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 10-p0XX OVCD current
+      threshold
+    - [x86] ASoC: SOF: Intel: unregister DMIC device on probe error
+    - [x86] ASoC: SOF: intel: fix wrong poll bits in dsp power down
+    - ASoC: qcom: sdm845: Fix array out of bounds access (CVE-2021-28952)
+    - ASoC: qcom: sdm845: Fix array out of range on rx slim channels
+    - [arm64] ASoC: qcom: lpass-cpu: Fix lpass dai ids parse
+    - [arm*] ASoC: simple-card-utils: Do not handle device clock
+    - afs: Fix accessing YFS xattrs on a non-YFS server
+    - afs: Stop listxattr() from listing "afs.*" attributes
+    - ALSA: usb-audio: Fix unintentional sign extension issue
+    - nvme: fix Write Zeroes limitations
+    - nvme-tcp: fix misuse of __smp_processor_id with preemption enabled
+    - nvme-tcp: fix possible hang when failing to set io queues
+    - nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU
+    - nvmet: don't check iosqes,iocqes for discovery controllers
+    - nfsd: Don't keep looking up unhashed files in the nfsd file cache
+    - nfsd: don't abort copies early
+    - NFSD: Repair misuse of sv_lock in 5.10.16-rt30.
+    - NFSD: fix dest to src mount in inter-server COPY
+    - svcrdma: disable timeouts on rdma backchannel
+    - sunrpc: fix refcount leak for rpc auth modules
+    - [x86] i915/perf: Start hrtimer only if sampling the OA buffer
+    - pstore: Fix warning in pstore_kill_sb()
+    - io_uring: ensure that SQPOLL thread is started for exit (CVE-2021-28951)
+    - net/qrtr: fix __netdev_alloc_skb call
+    - cifs: fix allocation size on newly created files
+    - scsi: lpfc: Fix some error codes in debugfs
+    - scsi: myrs: Fix a double free in myrs_cleanup()
+    - [riscv64] correct enum sbi_ext_rfence_fid
+    - gpiolib: Assign fwnode to parent's if no primary one provided
+    - nvme-rdma: fix possible hang when failing to set io queues
+    - [armhf] tty: serial: stm32-usart: Remove set but unused 'cookie' variables
+    - [armhf] serial: stm32: fix DMA initialization error handling
+    - bpf: Declare __bpf_free_used_maps() unconditionally
+    - module: merge repetitive strings in module_sig_check()
+    - module: avoid *goto*s in module_sig_check()
+    - module: harden ELF info handling
+    - scsi: pm80xx: Make mpi_build_cmd locking consistent
+    - scsi: pm80xx: Make running_req atomic
+    - scsi: pm80xx: Fix pm8001_mpi_get_nvmd_resp() race condition
+    - scsi: pm8001: Neaten debug logging macros and uses
+    - scsi: libsas: Remove notifier indirection
+    - scsi: libsas: Introduce a _gfp() variant of event notifiers
+    - scsi: mvsas: Pass gfp_t flags to libsas event notifiers
+    - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_down()
+    - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_up()
+    - [x86] scsi: isci: Pass gfp_t flags in isci_port_bc_change_received()
+    - RDMA/mlx5: Allow creating all QPs even when non RDMA profile is used
+    - [powerpc*] sstep: Fix load-store and update emulation
+    - [powerpc*] sstep: Fix darn emulation
+    - i40e: Fix endianness conversions
+    - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081
+    - drm/amd/display: turn DPMS off on connector unplug
+    - iwlwifi: Add a new card for MA family
+    - io_uring: fix inconsistent lock state
+    - [arm64,armhf] media: cedrus: h264: Support profile controls
+    - [s390x] qeth: schedule TX NAPI on QAOB completion
+    - io_uring: don't attempt IO reissue from the ring exit path
+    - io_uring: clear IOCB_WAITQ for non -EIOCBQUEUED return
+    - net: bonding: fix error return code of bond_neigh_init()
+    - gfs2: Add common helper for holding and releasing the freeze glock
+    - gfs2: move freeze glock outside the make_fs_rw and _ro functions
+    - gfs2: bypass signal_our_withdraw if no journal
+    - [powerpc*] Force inlining of cpu_has_feature() to avoid build failure
+    - usb-storage: Add quirk to defeat Kindle's automatic unload
+    - usbip: Fix incorrect double assignment to udc->ud.tcp_rx
+    - usb: gadget: configfs: Fix KASAN use-after-free
+    - [x86] usb: typec: Remove vdo[3] part of tps6598x_rx_identity_reg struct
+    - [x86] usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy-
+    - [arm64,armhf] usb: dwc3: gadget: Allow runtime suspend if UDC unbinded
+    - [arm64,armhf] usb: dwc3: gadget: Prevent EP queuing while stopping
+      transfers
+    - [x86] thunderbolt: Initialize HopID IDAs in tb_switch_alloc()
+    - [x86] thunderbolt: Increase runtime PM reference count on DP tunnel
+      discovery
+    - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler
+    - iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask
+    - iio: hid-sensor-prox: Fix scale not correct issue
+    - iio: hid-sensor-temperature: Fix issues of timestamp channel
+    - [powerpc*] PCI: rpadlpar: Fix potential drc_name corruption in store
+      functions (CVE-2021-28972)
+    - [x86] perf/x86/intel: Fix a crash caused by zero PEBS status
+      (CVE-2021-28971)
+    - [x86] perf/x86/intel: Fix unchecked MSR access error caused by VLBR_EVENT
+    - [x86] ioapic: Ignore IRQ2 again
+    - kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data()
+    - [x86] Move TS_COMPAT back to asm/thread_info.h
+    - [x86] Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
+    - efivars: respect EFI_UNSUPPORTED return from firmware
+    - ext4: fix error handling in ext4_end_enable_verity()
+    - ext4: find old entry again if failed to rename whiteout
+    - ext4: stop inode update before return
+    - ext4: do not try to set xattr into ea_inode if value is empty
+    - ext4: fix potential error in ext4_do_update_inode
+    - ext4: fix rename whiteout with fast commit
+    - static_call: Fix static_call_update() sanity check
+    - efi: use 32-bit alignment for efi_guid_t literals
+    - firmware/efi: Fix a use after bug in efi_mem_reserve_persistent
+    - genirq: Disable interrupts for force threaded handlers
+    - [x86] apic/of: Fix CPU devicetree-node lookups
+    - cifs: Fix preauth hash corruption
+
+  [ Salvatore Bonaccorso ]
+  * linux-image: Add Breaks: relation with old fwupdate versions
+    (Closes: #985801)
+  * [rt] Update to 5.10.25-rt35
+  * Refresh "Include package version along with kernel release in stack
+    traces"
+  * Refresh "firmware: Remove redundant log messages from drivers"
+  * Refresh "MODSIGN: checking the blacklisted hash before loading a kernel
+    module"
+  * libsas: Avoid ABI change for removal of notifier indirection
+
+  [ Uwe Kleine-König ]
+  * [arm64] Enable various configurations for i.MX8 (Closes: #985862)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 27 Mar 2021 15:14:11 +0100
+
+linux (5.10.24-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.20
+    - vmlinux.lds.h: add DWARF v5 sections
+    - debugfs: be more robust at handling improper input in debugfs_lookup()
+    - debugfs: do not attempt to create a new file before the filesystem is
+      initalized
+    - scsi: libsas: docs: Remove notify_ha_event()
+    - scsi: qla2xxx: Fix mailbox Ch erroneous error
+    - kdb: Make memory allocations more robust
+    - w1: w1_therm: Fix conversion result for negative temperatures
+    - [arm64] PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064
+    - PCI: Decline to resize resources if boot config must be preserved
+    - [x86] virt: vbox: Do not use wait_event_interruptible when called from
+      kernel context
+    - bfq: Avoid false bfq queue merging
+    - ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode
+    - [mips*] vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section
+    - random: fix the RNDRESEEDCRNG ioctl
+    - ALSA: pcm: Call sync_stop at disconnection
+    - ALSA: pcm: Assure sync with the pending stop operation at suspend
+    - ALSA: pcm: Don't call sync_stop if it hasn't been stopped
+    - [arm64] Bluetooth: btqcomsmd: Fix a resource leak in error handling
+      paths in the probe function
+    - Bluetooth: hci_uart: Fix a race for write_work scheduling
+    - Bluetooth: Fix initializing response id after clearing struct
+    - [armhf] dts: exynos: correct PMIC interrupt trigger level on Spring
+    - [armhf] dts: exynos: correct PMIC interrupt trigger level on Arndale
+      Octa
+    - Bluetooth: hci_qca: Fix memleak in qca_controller_memdump
+    - [arm*] staging: vchiq: Fix bulk userdata handling
+    - [arm*] staging: vchiq: Fix bulk transfers on 64-bit builds
+    - [arm64,armhf] net: stmmac: dwmac-meson8b: fix enabling the
+      timing-adjustment clock
+    - bpf: Add bpf_patch_call_args prototype to include/linux/bpf.h
+    - bpf: Avoid warning when re-casting __bpf_call_base into
+      __bpf_call_base_args
+    - [arm64] dts: allwinner: A64: properly connect USB PHY to port 0
+    - [arm64] dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz
+    - ACPICA: Fix exception code class checks
+    - usb: gadget: u_audio: Free requests only after callback
+    - Bluetooth: drop HCI device reference before return
+    - Bluetooth: Put HCI device if inquiry procedure interrupts
+    - [arm*] usb: dwc2: Do not update data length if it is 0 on inbound
+      transfers
+    - [arm*] usb: dwc2: Abort transaction after errors with unknown reason
+    - [arm*] usb: dwc2: Make "trimming xfer length" a debug message
+    - staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory
+      rules
+    - [x86] MSR: Filter MSR writes through X86_IOC_WRMSR_REGS ioctl too
+    - [armhf] dts: armada388-helios4: assign pinctrl to LEDs
+    - [armhf] dts: armada388-helios4: assign pinctrl to each fan
+    - opp: Correct debug message in _opp_add_static_v2()
+    - Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv
+    - iwlwifi: mvm: set enabled in the PPAG command properly
+    - [arm64] optee: simplify i2c access
+    - ath10k: Fix suspicious RCU usage warning in
+      ath10k_wmi_tlv_parse_peer_stats_info()
+    - ath10k: Fix lockdep assertion warning in ath10k_sta_statistics
+    - iwlwifi: mvm: fix the type we use in the PPAG table validity checks
+    - iwlwifi: mvm: store PPAG enabled/disabled flag properly
+    - iwlwifi: mvm: send stored PPAG command instead of local
+    - iwlwifi: mvm: assign SAR table revision to the command later
+    - iwlwifi: mvm: don't check if CSA event is running before removing
+    - bpf_lru_list: Read double-checked variable once without lock
+    - iwlwifi: pnvm: set the PNVM again if it was already loaded
+    - iwlwifi: pnvm: increment the pointer before checking the TLV
+    - bnxt_en: reverse order of TX disable and carrier off
+    - bnxt_en: Fix devlink info's stored fw.psid version format.
+    - xen/netback: fix spurious event detection for common event case
+    - net: phy: consider that suspend2ram may cut off PHY power
+    - net/mlx5e: Don't change interrupt moderation params when DIM is enabled
+    - net/mlx5e: Change interrupt moderation channel params also when channels
+      are closed
+    - net/mlx5: Fix health error state handling
+    - net/mlx5e: Replace synchronize_rcu with synchronize_net
+    - net/mlx5e: kTLS, Use refcounts to free kTLS RX priv context
+    - net/mlx5: Disable devlink reload for multi port slave device
+    - net/mlx5: Disallow RoCE on multi port slave device
+    - net/mlx5: Disallow RoCE on lag device
+    - net/mlx5: Disable devlink reload for lag devices
+    - net/mlx5e: CT: manage the lifetime of the ct entry object
+    - net/mlx5e: Check tunnel offload is required before setting SWP
+    - mac80211: fix potential overflow when multiplying to u32 integers
+    - libbpf: Ignore non function pointer member in struct_ops
+    - bpf: Fix an unitialized value in bpf_iter
+    - bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation
+    - bpf: Fix bpf_fib_lookup helper MTU check for SKB ctx
+    - tcp: fix SO_RCVLOWAT related hangs under mem pressure
+    - cxgb4/chtls/cxgbit: Keeping the max ofld immediate data size same in
+      cxgb4 and ulds
+    - b43: N-PHY: Fix the update of coef for the PHY revision >= 3case
+    - bpf: Clear subreg_def for global function return values
+    - [amd64,arm64] net: amd-xgbe: Reset the PHY rx data path when mailbox
+      command timeout
+    - [amd64,arm64] net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout
+      warning
+    - [amd64,arm64] net: amd-xgbe: Reset link when the link never comes back
+    - [amd64,arm64] net: amd-xgbe: Fix network fluctuations when using 1G
+      BELFUSE SFP
+    - [arm64,armhf] net: mvneta: Remove per-cpu queue mapping for Armada 3700
+    - tty: convert tty_ldisc_ops 'read()' function to take a kernel pointer
+    - tty: implement read_iter
+    - [x86] drm/gma500: Fix error return code in psb_driver_load()
+    - [x86] gma500: clean up error handling in init
+    - drm/fb-helper: Add missed unlocks in setcmap_legacy()
+    - [arm*] drm/vc4: hdmi: Take into account the clock doubling flag in
+      atomic_check
+    - [arm64] crypto: arm64/aes-ce - really hide slower algos when faster ones
+      are enabled
+    - [mips*] c-r4k: Fix section mismatch for loongson2_sc_init
+    - drm/virtio: make sure context is created in gem open
+    - media: em28xx: Fix use-after-free in em28xx_alloc_urbs
+    - media: media/pci: Fix memleak in empress_init
+    - [x86] media: tm6000: Fix memleak in tm6000_start_stream
+    - sched/fair: Avoid stale CPU util_est value for schedutil in task dequeue
+    - [arm64,armhf] drm/sun4i: tcon: fix inverted DCLK polarity
+    - [mips*] properly stop .eh_frame generation
+    - [arm64,armhf] drm/tegra: Fix reference leak when pm_runtime_get_sync()
+      fails
+    - bsg: free the request before return error code
+    - media: lmedm04: Fix misuse of comma
+    - media: qm1d1c0042: fix error return code in qm1d1c0042_init()
+    - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values
+    - sched/eas: Don't update misfit status if the task is pinned
+    - f2fs: compress: fix potential deadlock
+    - [arm64] ASoC: qcom: lpass-cpu: Remove bit clock state check
+    - perf/arm-cmn: Fix PMU instance naming
+    - perf/arm-cmn: Move IRQs when migrating context
+    - mm: proc: Invalidate TLB after clearing soft-dirty page state
+    - f2fs: fix to avoid inconsistent quota data
+    - f2fs: fix a wrong condition in __submit_bio
+    - [arm64] ASoC: qcom: Fix typo error in HDMI regmap config callbacks
+    - [x86] KVM: nSVM: Don't strip host's C-bit from guest's CR3 when reading
+      PDPTRs
+    - [x86] Drivers: hv: vmbus: Avoid use-after-free in
+      vmbus_onoffer_rescind()
+    - [x86] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A5E
+    - [x86] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A3E
+    - locking/lockdep: Avoid unmatched unlock
+    - [arm64] ASoC: qcom: lpass: Fix i2s ctl register bit map
+    - btrfs: clarify error returns values in __load_free_space_cache
+    - btrfs: fix double accounting of ordered extent for subpage case in
+      btrfs_invalidapge
+    - [x86] KVM: Restore all 64 bits of DR6 and DR7 during RSM on x86-64
+    - [s390x] zcrypt: return EIO when msg retry limit reached
+    - [arm*] drm/vc4: hdmi: Move hdmi reset to bind
+    - [arm*] drm/vc4: hdmi: Fix register offset with longer CEC messages
+    - [arm*] drm/vc4: hdmi: Fix up CEC registers
+    - [arm*] drm/vc4: hdmi: Restore cec physical address on reconnect
+    - [arm*] drm/vc4: hdmi: Compute the CEC clock divider from the clock rate
+    - [arm*] drm/vc4: hdmi: Update the CEC clock divider on HSM rate change
+    - drm/dp_mst: Don't cache EDIDs for physical ports
+    - crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()
+    - io_uring: fix possible deadlock in io_uring_poll
+    - nvme-multipath: set nr_zones for zoned namespaces
+    - nvmet: remove extra variable in identify ns
+    - nvmet: set status to 0 in case for invalid nsid
+    - [armel,armhf] ASoC: simple-card-utils: Fix device module clock
+    - fs/jfs: fix potential integer overflow on shift of a int
+    - jffs2: fix use after free in jffs2_sum_write_data()
+    - smp: Process pending softirqs in flush_smp_call_function_from_idle()
+    - capabilities: Don't allow writing ambiguous v3 file capabilities
+    - [armhf] HSI: Fix PM usage counter unbalance in ssi_hw_init
+    - [arm64,armhf] clk: meson: clk-pll: fix initializing the old rate
+      (fallback) for a PLL
+    - [arm64,armhf] clk: meson: clk-pll: make "ret" a signed integer
+    - [arm64,armhf] clk: meson: clk-pll: propagate the error from
+      meson_clk_pll_set_rate()
+    - quota: Fix memory leak when handling corrupted quota file
+    - [arm64] clk: sunxi-ng: h6: Fix CEC clock
+    - HID: core: detect and skip invalid inputs to snto32()
+    - fdt: Properly handle "no-map" field in the memory region
+    - of/fdt: Make sure no-map does not remove already reserved regions
+    - [armhf] spi: imx: Don't print error on -EPROBEDEFER
+    - RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation
+    - IB/mlx5: Add mutex destroy call to cap_mask_mutex mutex
+    - [arm64] clk: sunxi-ng: h6: Fix clock divider range on some clocks
+    - [arm64,armhf] platform/chrome: cros_ec_proto: Use EC_HOST_EVENT_MASK not
+      BIT
+    - [arm64,armhf] platform/chrome: cros_ec_proto: Add LID and BATTERY to
+      default mask
+    - [arm64,armhf] regulator: axp20x: Fix reference cout leak
+    - watch_queue: Drop references to /dev/watch_queue
+    - certs: Fix blacklist flag type confusion
+    - [armhf] regulator: s5m8767: Fix reference count leak
+    - [armhf] regulator: s5m8767: Drop regulators OF node reference
+    - [arm64,armhf] power: supply: axp20x_usb_power: Init work before enabling
+      IRQs
+    - regulator: core: Avoid debugfs: Directory ... already present! error
+    - isofs: release buffer head before return
+    - objtool: Fix error handling for STD/CLD warnings
+    - objtool: Fix retpoline detection in asm code
+    - objtool: Fix ".cold" section suffix check for newer versions of GCC
+    - scsi: lpfc: Fix ancient double free
+    - iommu: Switch gather->end to the inclusive end
+    - IB/umad: Return EIO in case of when device disassociated
+    - IB/umad: Return EPOLLERR in case of when device disassociated
+    - [ppc64el] KVM: Make the VMX instruction emulation routines static
+    - [powerpc*] time: Enable sched clock for irqtime
+    - [armel,armhf] 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+
+      cores
+    - [arm*] amba: Fix resource leak for drivers without .remove
+    - iommu: Move iotlb_sync_map out from __iommu_map
+    - iommu: Properly pass gfp_t in _iommu_map() to avoid atomic sleeping
+    - IB/mlx5: Return appropriate error code instead of ENOMEM
+    - IB/cm: Avoid a loop when device has 255 ports
+    - tracepoint: Do not fail unregistering a probe due to memory failure
+    - perf tools: Fix DSO filtering when not finding a map for a sampled
+      address
+    - perf vendor events arm64: Fix Ampere eMag event typo
+    - RDMA/rxe: Fix coding error in rxe_recv.c
+    - RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt
+    - RDMA/rxe: Correct skb on loopback path
+    - [powerpc*] pseries/dlpar: handle ibm, configure-connector delay status
+    - [arm64] RDMA/hns: Fixed wrong judgments in the goto branch
+    - [arm64] RDMA/hns: Fix type of sq_signal_bits
+    - [arm64] RDMA/hns: Disable RQ inline by default
+    - clk: divider: fix initialization with parent_hw
+    - [amd64] spi: pxa2xx: Fix the controller numbering for Wildcat Point
+    - [powerpc*] uaccess: Avoid might_fault() when user access is enabled
+    - [powerpc*] kuap: Restore AMR after replaying soft interrupts
+    - perf symbols: Use (long) for iterator for bfd symbols
+    - spi: Skip zero-length transfers in spi_transfer_one_message()
+    - printk: avoid prb_first_valid_seq() where possible
+    - perf symbols: Fix return value when loading PE DSO
+    - nfsd: register pernet ops last, unregister first
+    - svcrdma: Hold private mutex while invoking rdma_accept()
+    - ceph: fix flush_snap logic after putting caps
+    - [arm64] RDMA/hns: Fixes missing error code of CMDQ
+    - RDMA/ucma: Fix use-after-free bug in ucma_create_uevent
+    - Input: sur40 - fix an error code in sur40_probe()
+    - perf record: Fix continue profiling after draining the buffer
+    - perf intel-pt: Fix missing CYC processing in PSB
+    - perf intel-pt: Fix premature IPC
+    - perf intel-pt: Fix IPC with CYC threshold
+    - perf test: Fix unaligned access in sample parsing test
+    - Input: elo - fix an error code in elo_connect()
+    - [arm64,armhf] phy: rockchip-emmc: emmc_phy_init() always return 0
+    - [arm64,armhf] pwm: rockchip: Enable APB clock during register access
+      while probing
+    - [arm64,armhf] pwm: rockchip: rockchip_pwm_probe(): Remove superfluous
+      clk_unprepare()
+    - [arm64,armhf] pwm: rockchip: Eliminate potential race condition when
+      probing
+    - [x86] VMCI: Use set_page_dirty_lock() when unregistering guest memory
+    - PCI: Align checking of syscall user config accessors
+    - [x86] mei: hbm: call mei_set_devstate() on hbm stop response
+    - [arm64] drm/msm: Fix MSM_INFO_GET_IOVA with carveout
+    - [arm64] drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY)
+    - [arm64] drm/msm/mdp5: Fix wait-for-commit for cmd panels
+    - [arm64] drm/msm: Fix race of GPU init vs timestamp power management.
+    - [arm64] drm/msm: Fix races managing the OOB state for timestamp vs
+      timestamps.
+    - [arm64] drm/msm/dp: trigger unplug event in msm_dp_display_disable
+    - [amd64,arm64] vfio/iommu_type1: Populate full dirty when detach
+      non-pinned group
+    - [amd64,arm64] vfio/iommu_type1: Fix some sanity checks in detach group
+    - ext4: fix potential htree index checksum corruption
+    - nvmem: core: Fix a resource leak on error in nvmem_add_cells_from_of()
+    - nvmem: core: skip child nodes not matching binding
+    - soundwire: bus: use sdw_update_no_pm when initializing a device
+    - soundwire: bus: use sdw_write_no_pm when setting the bus scale registers
+    - soundwire: export sdw_write/read_no_pm functions
+    - soundwire: bus: fix confusion on device used by pm_runtime
+    - ext: EXT4_KUNIT_TESTS should depend on EXT4_FS instead of selecting it
+    - PCI: pci-bridge-emul: Fix array overruns, improve safety
+    - i40e: Fix flow for IPv6 next header (extension header)
+    - i40e: Add zero-initialization of AQ command structures
+    - i40e: Fix overwriting flow control settings during driver loading
+    - i40e: Fix addition of RX filters after enabling FW LLDP agent
+    - i40e: Fix VFs not created
+    - Take mmap lock in cacheflush syscall
+    - i40e: Fix add TC filter for IPv6
+    - [amd64,arm64] vfio/type1: Use follow_pte()
+    - ice: report correct max number of TCs
+    - ice: Account for port VLAN in VF max packet size calculation
+    - ice: Fix state bits on LLDP mode switch
+    - ice: update the number of available RSS queues
+    - [arm64,armhf] net: stmmac: fix CBS idleslope and sendslope calculation
+    - net/mlx4_core: Add missed mlx4_free_cmd_mailbox()
+    - [arm64] PCI: rockchip: Make 'ep-gpios' DT property optional
+    - vxlan: move debug check after netdev unregister
+    - wireguard: device: do not generate ICMP for non-IP packets
+    - wireguard: kconfig: use arm chacha even with no neon
+    - ocfs2: fix a use after free on error
+    - mm: memcontrol: fix NR_ANON_THPS accounting in charge moving
+    - mm: memcontrol: fix slub memory accounting
+    - mm/memory.c: fix potential pte_unmap_unlock pte error
+    - mm/hugetlb: fix potential double free in hugetlb_register_node() error
+      path
+    - mm/hugetlb: suppress wrong warning info when alloc gigantic page
+    - mm/compaction: fix misbehaviors of fast_find_migrateblock()
+    - NFSv4: Fixes for nfs4_bitmask_adjust()
+    - [x86] KVM: SVM: Intercept INVPCID when it's disabled to inject #UD
+    - [x86] KVM: x86/mmu: Expand collapsible SPTE zap for TDP MMU to
+      ZONE_DEVICE and HugeTLB pages
+    - [arm64] Add missing ISB after invalidating TLB in __primary_switch
+    - [armhf] i2c: exynos5: Preserve high speed master code
+    - mm,thp,shmem: make khugepaged obey tmpfs mount flags
+    - mm: fix memory_failure() handling of dax-namespace metadata
+    - mm/rmap: fix potential pte_unmap on an not mapped pte
+    - proc: use kvzalloc for our kernel buffer
+    - scsi: sd: sd_zbc: Don't pass GFP_NOIO to kvcalloc
+    - block: reopen the device in blkdev_reread_part
+    - scsi: sd: Fix Opal support
+    - blk-settings: align max_sectors on "logical_block_size" boundary
+    - ACPI: property: Fix fwnode string properties matching
+    - ACPI: configfs: add missing check after
+      configfs_register_default_group()
+    - cpufreq: ACPI: Set cpuinfo.max_freq directly if max boost is known
+    - HID: logitech-dj: add support for keyboard events in eQUAD step 4 Gaming
+    - HID: wacom: Ignore attempts to overwrite the touch_max value from HID
+    - Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox
+      Series X|S
+    - Input: joydev - prevent potential read overflow in ioctl
+    - Input: i8042 - add ASUS Zenbook Flip to noselftest list
+    - media: mceusb: Fix potential out-of-bounds shift
+    - USB: serial: option: update interface mapping for ZTE P685M
+    - [arm64,armhf] usb: musb: Fix runtime PM race in musb_queue_resume_work
+    - [arm64,armhf] usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1
+    - [arm64,armhf] usb: dwc3: gadget: Fix dep->interval for fullspeed
+      interrupt
+    - USB: serial: ftdi_sio: fix FTX sub-integer prescaler
+    - USB: serial: pl2303: fix line-speed handling on newer chips
+    - USB: serial: mos7840: fix error code in mos7840_write()
+    - USB: serial: mos7720: fix error code in mos7720_write()
+    - ALSA: hda: Add another CometLake-H PCI ID
+    - ALSA: hda/hdmi: Drop bogus check at closing a stream
+    - ALSA: hda/realtek: modify EAPD in the ALC886
+    - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup
+    - [mips*] Ingenic: Disable HPTLB for D0 XBurst CPUs too
+    - [mips*] Revert "MIPS: Octeon: Remove special handling of
+      CONFIG_MIPS_ELF_APPENDED_DTB=y"
+    - Revert "bcache: Kill btree_io_wq"
+    - bcache: Give btree_io_wq correct semantics again
+    - bcache: Move journal work to new flush wq
+    - drm/amdgpu: Set reference clock to 100Mhz on Renoir (v2)
+    - drm/nouveau/kms: handle mDP connectors
+    - drm/modes: Switch to 64bit maths to avoid integer overflow
+    - drm/sched: Cancel and flush all outstanding jobs before finish.
+    - selinux: fix inconsistency between inode_getxattr and inode_listsecurity
+    - tpm_tis: Fix check_locality for correct locality acquisition
+    - tpm_tis: Clean up locality release
+    - KEYS: trusted: Fix incorrect handling of tpm_get_random()
+    - KEYS: trusted: Fix migratable=1 failing
+    - KEYS: trusted: Reserve TPM for seal and unseal operations
+    - btrfs: do not cleanup upper nodes in btrfs_backref_cleanup_node
+    - btrfs: do not warn if we can't find the reloc root when looking up
+      backref
+    - btrfs: add asserts for deleting backref cache nodes
+    - btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root
+    - btrfs: fix reloc root leak with 0 ref reloc roots on recovery
+    - btrfs: splice remaining dirty_bg's onto the transaction dirty bg list
+    - btrfs: handle space_info::total_bytes_pinned inside the delayed ref
+      itself
+    - btrfs: account for new extents being deleted in total_bytes_pinned
+    - btrfs: fix extent buffer leak on failure to copy root
+    - [arm64] crypto: arm64/sha - add missing module aliases
+    - [x86] crypto: aesni - prevent misaligned buffers on the stack
+    - crypto: michael_mic - fix broken misalignment handling
+    - seccomp: Add missing return in non-void function
+    - [arm64] ptrace: Fix seccomp of traced syscall -1 (NO_SYSCALL)
+    - misc: rtsx: init of rts522a add OCP power off when no card is present
+    - [x86] drivers/misc/vmw_vmci: restrict too big queue size in
+      qp_host_alloc_queue
+    - pstore: Fix typo in compression option name
+    - staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table
+    - floppy: reintroduce O_NDELAY fix
+    - media: marvell-ccic: power up the device on mclk enable
+    - media: smipcie: fix interrupt handling and IR timeout
+    - [x86] virt: Eat faults on VMXOFF in reboot flows
+    - [x86] reboot: Force all cpus to exit VMX root if VMX is supported
+    - [x86] fault: Fix AMD erratum #91 errata fixup for user code
+    - [x86] entry: Fix instrumentation annotation
+    - [powerpc*] prom: Fix "ibm,arch-vec-5-platform-support" scan
+    - rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers
+    - rcu/nocb: Perform deferred wake up before last idle's need_resched()
+      check
+    - kprobes: Fix to delay the kprobes jump optimization
+    - [arm64] Extend workaround for erratum 1024718 to all versions of
+      Cortex-A55
+    - [arm64] uprobe: Return EOPNOTSUPP for AARCH32 instruction probing
+    - [arm64] module: set plt* section addresses to 0x0
+    - [arm64] spectre: Prevent lockdep splat on v4 mitigation enable path
+    - [arm64] watchdog: qcom: Remove incorrect usage of QCOM_WDT_ENABLE_IRQ
+    - [x86] watchdog: mei_wdt: request stop on unregister
+    - fs/affs: release old buffer head on error path
+    - seq_file: document how per-entry resources are managed.
+    - [x86] fix seq_file iteration for pat/memtype.c
+    - mm: memcontrol: fix swap undercounting in cgroup2
+    - mm: memcontrol: fix get_active_memcg return value
+    - hugetlb: fix update_and_free_page contig page struct assumption
+    - hugetlb: fix copy_huge_page_from_user contig page struct assumption
+    - mm/vmscan: restore zone_reclaim_mode ABI
+    - mm, compaction: make fast_isolate_freepages() stay within zone
+    - [x86] KVM: nSVM: fix running nested guests when npt=0
+    - nvmem: qcom-spmi-sdam: Fix uninitialized pdev pointer
+    - module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols
+    - [armhf] mmc: sdhci-esdhc-imx: fix kernel panic when remove module
+    - mmc: sdhci-pci-o2micro: Bug fix for SDR104 HW tuning failure
+    - [arm64] spmi: spmi-pmic-arb: Fix hw_irq overflow
+    - [x86] mei: fix transfer over dma with extended header
+    - [x86] mei: me: emmitsburg workstation DID
+    - [x86] mei: me: add adler lake point S DID
+    - [x86] mei: me: add adler lake point LP DID
+    - [armhf] gpio: pcf857x: Fix missing first interrupt
+    - printk: fix deadlock when kernel panic
+    - exfat: fix shift-out-of-bounds in exfat_fill_super()
+    - zonefs: Fix file size of zones in full condition
+    - [x86] cpufreq: intel_pstate: Change intel_pstate_get_hwp_max() argument
+    - [x86] cpufreq: intel_pstate: Get per-CPU max freq via
+      MSR_HWP_CAPABILITIES if available
+    - proc: don't allow async path resolution of /proc/thread-self components
+    - [s390x] vtime: fix inline assembly clobber list
+    - [s390x] virtio/s390: implement virtio-ccw revision 2 correctly
+    - f2fs: fix out-of-repair __setattr_copy()
+    - f2fs: enforce the immutable flag on open files
+    - f2fs: flush data when enabling checkpoint back
+    - gfs2: fix glock confusion in function signal_our_withdraw
+    - gfs2: Don't skip dlm unlock if glock has an lvb
+    - gfs2: Lock imbalance on error path in gfs2_recover_one
+    - gfs2: Recursive gfs2_quota_hold in gfs2_iomap_end
+    - dm: fix deadlock when swapping to encrypted device
+    - dm table: fix iterate_devices based device capability checks
+    - dm table: fix DAX iterate_devices based device capability checks
+    - dm table: fix zoned iterate_devices based device capability checks
+    - dm writecache: fix performance degradation in ssd mode
+    - dm writecache: return the exact table values that were set
+    - dm writecache: fix writing beyond end of underlying device when
+      shrinking
+    - dm era: Recover committed writeset after crash
+    - dm era: Update in-core bitset after committing the metadata
+    - dm era: Verify the data block size hasn't changed
+    - dm era: Fix bitset memory leaks
+    - dm era: Use correct value size in equality function of writeset tree
+    - dm era: Reinitialize bitset cache before digesting a new writeset
+    - dm era: only resize metadata in preresume
+    - kgdb: fix to kill breakpoints on initmem after boot
+    - ipv6: silence compilation warning for non-IPV6 builds
+    - net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending
+    - wireguard: queueing: get rid of per-peer ring buffers
+    - net: sched: fix police ext initialization
+    - net_sched: fix RTNL deadlock again caused by request_module()
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.21
+    - net: usb: qmi_wwan: support ZTE P685M modem
+    - Input: elantech - fix protocol errors for some trackpoints in SMBus mode
+    - Input: elan_i2c - add new trackpoint report type 0x5F
+    - drm/virtio: use kvmalloc for large allocations
+    - [x86] build: Treat R_386_PLT32 relocation as R_386_PC32
+    - JFS: more checks for invalid superblock
+    - sched/core: Allow try_invoke_on_locked_down_task() with irqs disabled
+    - udlfb: Fix memory leak in dlfb_usb_probe
+    - media: mceusb: sanity check for prescaler value
+    - erofs: fix shift-out-of-bounds of blkszbits
+    - media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate
+    - xfs: Fix assert failure in xfs_setattr_size()
+    - [s390x] net/af_iucv: remove WARN_ONCE on malformed RX packets
+    - tomoyo: ignore data race while checking quota
+    - net: fix up truesize of cloned skb in skb_prepare_for_shift()
+    - [riscv64] Get rid of MAX_EARLY_MAPPING_SIZE
+    - nbd: handle device refs for DESTROY_ON_DISCONNECT properly
+    - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing
+    - tcp: fix tcp_rmem documentation
+    - net: bridge: use switchdev for port flags set through sysfs too
+    - net/sched: cls_flower: Reject invalid ct_state flags rules
+    - net: psample: Fix netlink skb length with tunnel info
+    - net: fix dev_ifsioc_locked() race condition
+    - dt-bindings: ethernet-controller: fix fixed-link specification
+    - dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/
+    - [arm64] ASoC: qcom: Remove useless debug print
+    - rsi: Fix TX EAPOL packet handling against iwlwifi AP
+    - rsi: Move card interrupt handling to RX thread
+    - [x86] EDAC/amd64: Do not load on family 0x15, model 0x13
+    - [x86] reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk
+    - vt/consolemap: do font sum unsigned
+    - [arm64,armhf] wlcore: Fix command execute failure 19 for wl12xx
+    - Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl
+    - Bluetooth: btusb: fix memory leak on suspend and resume
+    - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()
+    - ath10k: fix wmi mgmt tx queue full due to race condition
+    - net: sfp: add mode quirk for GPON module Ubiquiti U-Fiber Instant
+    - Bluetooth: Add new HCI_QUIRK_NO_SUSPEND_NOTIFIER quirk
+    - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
+    - [arm*] staging: bcm2835-audio: Replace unsafe strcpy() with strscpy()
+    - brcmfmac: Add DMI nvram filename quirk for Predia Basic tablet
+    - brcmfmac: Add DMI nvram filename quirk for Voyo winpad A15 tablet
+    - [arm64] drm/hisilicon: Fix use-after-free
+    - crypto: tcrypt - avoid signed overflow in byte count
+    - fs: make unlazy_walk() error handling consistent
+    - drm/amdgpu: Add check to prevent IH overflow
+    - PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse
+    - [x86] ASoC: Intel: bytcr_rt5640: Add new BYT_RT5640_NO_SPEAKERS
+      quirk-flag
+    - media: uvcvideo: Allow entities with no pads
+    - f2fs: handle unallocated section and zone on pinned/atgc
+    - f2fs: fix to set/clear I_LINKABLE under i_lock
+    - nvme-core: add cancel tagset helpers
+    - nvme-rdma: add clean action for failed reconnection
+    - nvme-tcp: add clean action for failed reconnection
+    - ASoC: Intel: Add DMI quirk table to soc_intel_is_byt_cr()
+    - btrfs: fix error handling in commit_fs_roots
+    - [x86] perf/x86/kvm: Add Cascade Lake Xeon steppings to
+      isolation_ucodes[]
+    - [x86] ASoC: Intel: sof-sdw: indent and add quirks consistently
+    - [x86] ASoC: Intel: sof_sdw: detect DMIC number based on mach params
+    - sched/features: Fix hrtick reprogramming
+    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Estar Beauty HD MID
+      7316R tablet
+    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15
+      tablet
+    - [x86] ASoC: Intel: bytcr_rt5651: Add quirk for the Jumper EZpad 7 tablet
+    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Acer One S1002 tablet
+    - scsi: iscsi: Restrict sessions and handles to admin capabilities
+      (CVE-2021-27363, CVE-2021-27364)
+    - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE
+      (CVE-2021-27365)
+    - scsi: iscsi: Verify lengths on passthrough PDUs (CVE-2021-27365)
+    - Xen/gnttab: handle p2m update errors on a per-slot basis
+      (CVE-2021-28038)
+    - xen-netback: respect gnttab_map_refs()'s return value (CVE-2021-28038)
+    - xen: fix p2m size in dom0 for disabled memory hotplug case
+      (CVE-2021-28039)
+    - zsmalloc: account the number of compacted pages correctly
+    - swap: fix swapfile read/write offset
+    - [powerpc*] sstep: Check instruction validity against ISA version before
+      emulation
+    - [powerpc*] sstep: Fix incorrect return from analyze_instr()
+    - tty: fix up iterate_tty_read() EOVERFLOW handling
+    - tty: fix up hung_up_tty_read() conversion
+    - tty: clean up legacy leftovers from n_tty line discipline
+    - tty: teach n_tty line discipline about the new "cookie continuations"
+    - tty: teach the n_tty ICANON case about the new "cookie continuations"
+      too
+    - media: v4l: ioctl: Fix memory leak in video_usercopy
+    - ALSA: hda/realtek: Add quirk for Clevo NH55RZQ
+    - ALSA: hda/realtek: Add quirk for Intel NUC 10
+    - ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board
+    - net: sfp: VSOL V2801F / CarlitoxxPro CPGOS03-0490 v2.0 workaround
+    - net: sfp: add workaround for Realtek RTL8672 and RTL9601C chips
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.22
+    - ALSA: hda/realtek: Enable headset mic of Acer SWIFT with ALC256
+    - ALSA: usb-audio: Drop bogus dB range in too low level
+    - tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality()
+    - tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality()
+    - btrfs: avoid double put of block group when emptying cluster
+    - btrfs: fix raid6 qstripe kmap
+    - btrfs: fix race between writes to swap files and scrub
+    - btrfs: fix race between swap file activation and snapshot creation
+    - btrfs: fix stale data exposure after cloning a hole with NO_HOLES
+      enabled
+    - btrfs: fix race between extent freeing/allocation when using bitmaps
+    - btrfs: validate qgroup inherit for SNAP_CREATE_V2 ioctl
+    - btrfs: free correct amount of space in
+      btrfs_delayed_inode_reserve_metadata
+    - btrfs: unlock extents in btrfs_zero_range in case of quota reservation
+      errors
+    - btrfs: fix warning when creating a directory with smack enabled
+    - PM: runtime: Update device status before letting suppliers suspend
+    - ring-buffer: Force before_stamp and write_stamp to be different on
+      discard
+    - io_uring: ignore double poll add on the same waitqueue head
+    - dm bufio: subtract the number of initial sectors in
+      dm_bufio_get_device_size
+    - drm/amdgpu:disable VCN for Navi12 SKU
+    - drm/amdgpu: fix parameter error of RREG32_PCIE() in amdgpu_regs_pcie
+    - [arm64] mm: Move reserve_crashkernel() into mem_init()
+    - [arm64] mm: Move zone_dma_bits initialization into zone_sizes_init()
+    - of/address: Introduce of_dma_get_max_cpu_address()
+    - [arm64] mm: Set ZONE_DMA size based on devicetree's dma-ranges
+    - [arm64] mm: Set ZONE_DMA size based on early IORT scan
+    - ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits
+    - RDMA/cm: Fix IRQ restore in ib_send_cm_sidr_rep
+    - IB/mlx5: Add missing error code
+    - ALSA: hda: intel-nhlt: verify config type
+    - ftrace: Have recordmcount use w8 to read relp->r_info in
+      arm64_is_fake_mcount
+    - rsxx: Return -EFAULT if copy_to_user() fails
+    - [amd64] iommu/vt-d: Fix status code for Allocate/Free PASID command
+    - tomoyo: recognize kernel threads correctly
+    - r8169: fix resuming from suspend on RTL8105e if machine runs on battery
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.23
+    - ACPICA: Fix race in generic_serial_bus (I2C) and GPIO op_region
+      parameter handling
+    - nvme-pci: mark Kingston SKC2000 as not supporting the deepest power
+      state
+    - btrfs: export and rename qgroup_reserve_meta
+    - btrfs: don't flush from btrfs_delayed_inode_reserve_metadata
+    - [amd64] iommu/amd: Fix sleeping in atomic in increase_address_space()
+    - Bluetooth: btqca: Add valid le states quirk
+    - mwifiex: pcie: skip cancel_work_sync() on reset failure path
+    - [x86] ASoC: Intel: sof_sdw: add quirk for new TigerLake-SDCA device
+    - [armhf] bus: ti-sysc: Implement GPMC debug quirk to drop platform data
+    - [x86] platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines
+    - [x86] platform/x86: acer-wmi: Cleanup accelerometer device handling
+    - [x86] platform/x86: acer-wmi: Add new force_caps module parameter
+    - [x86] platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability
+      flag
+    - [x86] platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch
+      devices
+    - [x86] platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire
+      Switch 10E SW3-016
+    - HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube
+      Adapter
+    - media: cx23885: add more quirks for reset DMA on some AMD IOMMU
+    - [x86] ACPI: video: Add DMI quirk for GIGABYTE GB-BXBT-2807
+    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for ARCHOS Cesium 140
+    - PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller
+    - [x86] KVM: x86: Supplement __cr4_reserved_bits() with X86_FEATURE_PCID
+      check
+    - [x86] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A32
+    - scsi: ufs: Add a quirk to permit overriding UniPro defaults
+    - misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom
+    - scsi: ufs: Introduce a quirk to allow only page-aligned sg entries
+    - [arm64] drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register
+    - HID: i2c-hid: Add I2C_HID_QUIRK_NO_IRQ_AFTER_RESET for ITE8568 EC on
+      Voyo Winpad A15
+    - ALSA: usb-audio: Add DJM750 to Pioneer mixer quirk
+    - ALSA: usb-audio: add mixer quirks for Pioneer DJM-900NXS2
+    - [x86] ASoC: Intel: sof_sdw: reorganize quirks by generation
+    - [x86] ASoC: Intel: sof_sdw: add quirk for HP Spectre x360 convertible
+    - [x86] KVM: SVM: Clear the CR4 register on reset
+    - nvme-pci: mark Seagate Nytro XM1440 as QUIRK_NO_NS_DESC_LIST.
+    - nvme-pci: add quirks for Lexar 256GB SSD
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.24
+    - uapi: nfnetlink_cthelper.h: fix userspace compilation error
+    - [powerpc*] perf: Fix handling of privilege level checks in perf interrupt
+      context
+    - [powerpc*] pseries: Don't enforce MSI affinity with kdump
+    - ethernet: alx: fix order of calls on resume (Closes: #983595)
+    - [mips*] crypto: mips/poly1305 - enable for all MIPS processors
+    - ath9k: fix transmitting to stations in dynamic SMPS mode
+    - net: Fix gro aggregation for udp encaps with zero csum
+    - net: check if protocol extracted by virtio_net_hdr_set_proto is correct
+    - net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0
+    - net: l2tp: reduce log level of messages in receive path, add counter
+      instead
+    - can: skb: can_skb_set_owner(): fix ref counting if socket was closed
+      before setting skb ownership
+    - [armhf] can: flexcan: assert FRZ bit in flexcan_chip_freeze()
+    - [armhf] can: flexcan: enable RX FIFO after FRZ/HALT valid
+    - [armhf] can: flexcan: invoke flexcan_chip_freeze() to enter freeze mode
+    - tcp: Fix sign comparison bug in getsockopt(TCP_ZEROCOPY_RECEIVE)
+    - tcp: add sanity tests to TCP_QUEUE_SEQ
+    - netfilter: nf_nat: undo erroneous tcp edemux lookup
+    - netfilter: x_tables: gpf inside xt_find_revision()
+    - net: always use icmp{,v6}_ndo_send from ndo_start_xmit
+    - net: phy: fix save wrong speed and duplex problem if autoneg is on
+    - mt76: dma: do not report truncated frames to mac80211
+    - [powerpc*] 603: Fix protection of user pages mapped with PROT_NONE
+    - mount: fix mounting of detached mounts onto targets that reside on shared
+      mounts
+    - cifs: return proper error code in statfs(2)
+    - Revert "mm, slub: consider rest of partial list if acquire_slab() fails"
+    - docs: networking: drop special stable handling
+    - [arm64] net: enetc: don't overwrite the RSS indirection table when
+      initializing
+    - [arm64] net: enetc: take the MDIO lock only once per NAPI poll cycle
+    - [arm64] net: enetc: fix incorrect TPID when receiving 802.1ad tagged
+      packets
+    - [arm64] net: enetc: don't disable VLAN filtering in IFF_PROMISC mode
+    - [arm64] net: enetc: force the RGMII speed and duplex instead of operating
+      in inband mode
+    - [arm64] net: enetc: remove bogus write to SIRXIDR from enetc_setup_rxbdr
+    - [arm64] net: enetc: keep RX ring consumer index in sync with hardware
+    - net/mlx4_en: update moderation when config reset
+    - net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10
+    - nexthop: Do not flush blackhole nexthops when loopback goes down
+    - net: sched: avoid duplicates in classes dump
+    - [arm64] net: mscc: ocelot: properly reject destination IP keys in VCAP IS1
+    - net: usb: qmi_wwan: allow qmimux add/del with master up
+    - cipso,calipso: resolve a number of problems with the DOI refcounts
+    - net: stmmac: Fix VLAN filter delete timeout issue in Intel mGBE SGMII
+    - [x86] stmmac: intel: Fixes clock registration error seen for multiple
+      interfaces
+    - [arm64] net: enetc: allow hardware timestamping on TX queues with tc-etf
+      enabled
+    - net: qrtr: fix error return code of qrtr_sendmsg()
+    - [s390x] qeth: fix memory leak after failed TX Buffer allocation
+    - r8169: fix r8168fp_adjust_ocp_cmd function
+    - ixgbe: fail to create xfrm offload of IPsec tunnel mode SA
+    - net: stmmac: stop each tx channel independently
+    - net: stmmac: fix watchdog timeout during suspend/resume stress test
+    - net: stmmac: fix wrongly set buffer2 valid when sph unsupport
+    - ethtool: fix the check logic of at least one channel for RX/TX
+    - net: phy: make mdio_bus_phy_suspend/resume as __maybe_unused
+    - perf traceevent: Ensure read cmdlines are null terminated.
+    - perf report: Fix -F for branch & mem modes
+    - [arm64] net: hns3: fix query vlan mask value error for flow director
+    - [arm64] net: hns3: fix bug when calculating the TCAM table info
+    - bnxt_en: reliably allocate IRQ table on reset to avoid crash
+    - gpiolib: acpi: Add ACPI_GPIO_QUIRK_ABSOLUTE_NUMBER quirk
+    - gpiolib: acpi: Allow to find GpioInt() resource by name and index
+    - [arm64,armhf] gpio: pca953x: Set IRQ type when handle Intel Galileo Gen 2
+    - gpio: fix gpio-device list corruption
+    - drm/compat: Clear bounce structures
+    - drm/amd/display: Add a backlight module option
+    - drm/amd/display: Fix nested FPU context in dcn21_validate_bandwidth()
+    - drm/shmem-helper: Check for purged buffers in fault handler
+    - drm/shmem-helper: Don't remove the offset in vm_area_struct pgoff
+    - drm: Use USB controller's DMA mask when importing dmabufs
+    - [arm64] drm: meson_drv add shutdown function
+    - drm/shmem-helpers: vunmap: Don't put pages for dma-buf
+    - [x86] drm/i915: Wedge the GPU if command parser setup fails
+    - qxl: Fix uninitialised struct field head.surface_id
+    - media: usbtv: Fix deadlock on suspend
+    - media: rc: compile rc-cec.c into rc-core
+    - cifs: fix credit accounting for extra channel
+    - [arm64] net: hns3: fix error mask definition of flow director
+    - [s390x] qeth: don't replace a fully completed async TX buffer
+    - [s390x] qeth: remove QETH_QDIO_BUF_HANDLED_DELAYED state
+    - [s390x] qeth: improve completion of pending TX buffers
+    - [s390x] qeth: fix notification for pending buffers during teardown
+    - [arm64,armhf] net: dsa: implement a central TX reallocation procedure
+    - [arm64,armhf] net: dsa: trailer: don't allocate additional memory for
+      padding/tagging
+    - [arm64] net: dsa: tag_ocelot: let DSA core deal with TX reallocation
+    - [arm64,armhf] net: dsa: tag_edsa: let DSA core deal with TX reallocation
+    - [armhf] net: dsa: tag_brcm: let DSA core deal with TX reallocation
+    - [arm64,armhf] net: dsa: tag_dsa: let DSA core deal with TX reallocation
+    - [arm64] enetc: Fix unused var build warning for CONFIG_OF
+    - [arm64] net: enetc: initialize RFS/RSS memories for unused ports too
+    - ath11k: peer delete synchronization with firmware
+    - ath11k: start vdev if a bss peer is already created
+    - ath11k: fix AP mode for QCA6390
+    - scsi: ufs: WB is only available on LUN #0 to #7
+    - udf: fix silent AED tagLocation corruption
+    - [amd64] iommu/vt-d: Clear PRQ overflow only when PRQ is empty
+    - [arm*] mmc: sdhci-iproc: Add ACPI bindings for the RPi
+    - Platform: OLPC: Fix probe error handling
+    - [powerpc*] pci: Add ppc_md.discover_phbs()
+    - [armhf] spi: stm32: make spurious and overrun interrupts visible
+    - [powerpc] improve handling of unrecoverable system reset
+    - [powerpc] perf: Record counter overflow always if SAMPLE_IP is unset
+    - HID: logitech-dj: add support for the new lightspeed connection iteration
+    - [powerpc*] 64: Fix stack trace not displaying final frame
+    - [amd64] iommu/amd: Fix performance counter initialization
+    - [arm64] clk: qcom: gdsc: Implement NO_RET_PERIPH flag
+    - [x86] Input: applespi - don't wait for responses to commands indefinitely.
+    - [arm64] PCI: xgene-msi: Fix race in installing chained irq handler
+    - ext4: don't try to processed freed blocks until mballoc is initialized
+    - kbuild: clamp SUBLEVEL to 255
+    - PCI: Fix pci_register_io_range() memory leak
+    - i40e: Fix memory leak in i40e_probe
+    - [s390x] smp: __smp_rescan_cpus() - move cpumask away from stack
+    - drivers/base/memory: don't store phys_device in memory blocks
+    - sysctl.c: fix underflow value setting risk in vm_table
+    - scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling
+    - scsi: target: core: Add cmd length set before cmd complete
+    - scsi: target: core: Prevent underflow for service actions
+    - mmc: sdhci: Update firmware interface API
+    - [arm*] assembler: introduce adr_l, ldr_l and str_l macros
+    - [arm*] efistub: replace adrl pseudo-op with adr_l macro invocation
+    - ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk
+    - ALSA: hda/hdmi: Cancel pending works before suspend
+    - ALSA: hda/conexant: Add quirk for mute LED control on HP ZBook G5
+    - ALSA: hda/ca0132: Add Sound BlasterX AE-5 Plus support
+    - ALSA: hda: Drop the BATCH workaround for AMD controllers
+    - ALSA: hda: Flush pending unsolicited events before suspend
+    - ALSA: hda: Avoid spurious unsol event handling during S3/S4
+    - ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar
+    - ALSA: usb-audio: Apply the control quirk to Plantronics headsets
+    - ALSA: usb-audio: Disable USB autosuspend properly in
+      setup_disable_autosuspend()
+    - ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe
+    - ALSA: usb-audio: fix use after free in usb_audio_disconnect
+    - Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file
+      capabilities")
+    - block: Discard page cache of zone reset target range
+    - block: Try to handle busy underlying device on discard
+    - [arm64] mte: Map hotplugged memory as Normal Tagged
+    - [arm64] perf: Fix 64-bit event counter read truncation
+    - [s390x] dasd: fix hanging DASD driver unbind
+    - [s390]x dasd: fix hanging IO request during DASD driver unbind
+    - software node: Fix node registration
+    - xen/events: reset affinity of 2-level event when tearing it down
+    - [arm64,armhf] mmc: mmci: Add MMC_CAP_NEED_RSP_BUSY for the stm32 variants
+    - mmc: core: Fix partition switch time for eMMC
+    - mmc: cqhci: Fix random crash when remove mmc module/card
+    - cifs: do not send close in compound create+close requests
+    - Goodix Fingerprint device is not a modem
+    - usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio
+      slot
+    - usb: gadget: f_uac1: stop playback on function disable
+    - [arm64] usb: dwc3: qcom: Add missing DWC3 OF node refcount decrement
+    - [arm64] usb: dwc3: qcom: add URS Host support for sdm845 ACPI boot
+    - [arm64] usb: dwc3: qcom: add ACPI device id for sc8180x
+    - [arm64] usb: dwc3: qcom: Honor wakeup enabled/disabled state
+    - USB: usblp: fix a hang in poll() if disconnected
+    - usb: xhci: do not perform Soft Retry for some xHCI hosts
+    - xhci: Improve detection of device initiated wake signal.
+    - usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing
+    - xhci: Fix repeated xhci wake after suspend due to uncleared internal wake
+      state
+    - USB: serial: io_edgeport: fix memory leak in edge_startup
+    - USB: serial: ch341: add new Product ID
+    - USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter
+    - USB: serial: cp210x: add some more GE USB IDs
+    - usbip: fix stub_dev to check for stream socket
+    - usbip: fix vhci_hcd to check for stream socket
+    - usbip: fix vudc to check for stream socket
+    - usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
+    - usbip: fix vhci_hcd attach_store() races leading to gpf
+    - usbip: fix vudc usbip_sockfd_store races leading to gpf
+    - [x86] misc/pvpanic: Export module FDT device table
+    - misc: fastrpc: restrict user apps from sending kernel RPC messages
+      (CVE-2021-28375)
+    - [x86] staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan()
+    - staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan()
+      (CVE-2021-28660)
+    - staging: rtl8712: unterminated string leads to read overflow
+    - staging: rtl8188eu: fix potential memory corruption in
+      rtw_check_beacon_data()
+    - staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd
+    - [x86] staging: rtl8192e: Fix possible buffer overflow in
+      _rtl92e_wx_set_scan
+    - [x86] staging: comedi: addi_apci_1032: Fix endian problem for COS sample
+    - [x86] staging: comedi: addi_apci_1500: Fix endian problem for command
+      sample
+    - [x86] staging: comedi: adv_pci1710: Fix endian problem for AI command data
+    - [i386] staging: comedi: das6402: Fix endian problem for AI command data
+    - [i386] staging: comedi: das800: Fix endian problem for AI command data
+    - [i386] staging: comedi: dmm32at: Fix endian problem for AI command data
+    - [x86] staging: comedi: me4000: Fix endian problem for AI command data
+    - [i386] staging: comedi: pcl711: Fix endian problem for AI command data
+    - [i386] staging: comedi: pcl818: Fix endian problem for AI command data
+    - [arm64] mm: Fix pfn_valid() for ZONE_DEVICE based memory
+    - SUNRPC: Set memalloc_nofs_save() for sync tasks
+    - NFS: Don't revalidate the directory permissions on a lookup failure
+    - NFS: Don't gratuitously clear the inode cache when lookup failed
+    - NFSv4.2: fix return value of _nfs4_get_security_label()
+    - block: rsxx: fix error return code of rsxx_pci_probe()
+    - nvme-fc: fix racing controller reset and create association
+    - configfs: fix a use-after-free in __configfs_open_file
+    - [arm64] mm: use a 48-bit ID map when possible on 52-bit VA builds
+    - perf/core: Flush PMU internal buffers for per-CPU events
+    - [x86] perf/x86/intel: Set PERF_ATTACH_SCHED_CB for large PEBS and LBR
+    - hrtimer: Update softirq_expires_next correctly after
+      __hrtimer_get_next_event()
+    - seqlock,lockdep: Fix seqcount_latch_init()
+    - stop_machine: mark helpers __always_inline
+    - include/linux/sched/mm.h: use rcu_dereference in in_vfork()
+    - zram: fix return value on writeback_store
+    - sched/membarrier: fix missing local execution of ipi_sync_rq_state()
+    - efi: stub: omit SetVirtualAddressMap() if marked unsupported in RT_PROP
+      table
+    - [powerpc*] 64s: Fix instruction encoding for lis in ppc_function_entry()
+    - [powerpc*] Fix inverted SET_FULL_REGS bitop
+    - [powerpc*] Fix missing declaration of [en/dis]able_kernel_vsx()
+    - binfmt_misc: fix possible deadlock in bm_register_write
+    - [amd64] x86/unwind/orc: Disable KASAN checking in the ORC unwinder, part 2
+    - [x86] entry: Move nmi entry/exit into common code
+    - [x86] entry: Fix entry/exit mismatch on failed fast 32-bit syscalls
+    - [x86] KVM: Ensure deadline timer has truly expired before posting its IRQ
+    - [x86] KVM: kvmclock: Fix vCPUs > 64 can't be online/hotpluged
+    - [arm64] KVM: Fix range alignment when walking page tables
+    - [arm64] KVM: Avoid corrupting vCPU context register in guest exit
+    - [arm64] KVM: nvhe: Save the SPE context early
+    - [arm64] KVM: Reject VM creation when the default IPA size is unsupported
+    - [arm64] KVM: Fix exclusive limit for IPA size
+    - mm/userfaultfd: fix memory corruption due to writeprotect
+    - mm/madvise: replace ptrace attach requirement for process_madvise
+    - [arm64] KVM: Ensure I-cache isolation between vcpus of a same VM
+    - mm/page_alloc.c: refactor initialization of struct page for holes in
+      memory layout
+    - xen/events: don't unmask an event channel when an eoi is pending
+    - xen/events: avoid handling the same event on two cpus at the same time
+    - [arm64] KVM: Fix nVHE hyp panic host context restore
+    - RDMA/umem: Use ib_dma_max_seg_size instead of dma_get_max_seg_size
+
+  [ Salvatore Bonaccorso ]
+  * Bump ABI to 5
+  * [rt] Refresh "printk: remove logbuf_lock"
+  * [rt] Refresh "printk: remove safe buffers"
+  * [rt] Refresh "printk: remove deferred printing"
+  * [rt] Refresh "mm/memcontrol: Replace local_irq_disable with local locks"
+  * [rt] Update to 5.10.21-rt34
+  * Refresh "Include package version along with kernel release in stack
+    traces"
+  * bpf: Prohibit alu ops for pointer types not defining ptr_limit
+    (CVE-2020-27170)
+  * bpf: Fix off-by-one for area size in creating mask to left
+    (CVE-2020-27171)
+  * bpf: Simplify alu_limit masking for pointer arithmetic
+  * bpf: Add sanity check for upper ptr_limit
+  * bpf, selftests: Fix up some test_verifier cases for unprivileged
+  * [x86] crypto: aesni - Use TEST %reg,%reg instead of CMP $0,%reg
+  * [x86] crypto: x86/aes-ni-xts - use direct calls to and 4-way stride
+  * RDMA/srp: Fix support for unpopulated and unbalanced NUMA nodes
+  * fuse: fix live lock in fuse_iget()
+  * Revert "nfsd4: remove check_conflicting_opens warning"
+  * Revert "nfsd4: a client's own opens needn't prevent delegations"
+  * ALSA: usb-audio: Don't avoid stopping the stream at disconnection
+  * [armhf] net: dsa: b53: Support setting learning on port
+
+  [ Wookey ]
+  * [arm64] drivers/perf: Enable ARM_CMN as module (Closes: #981186)
+
+  [ Vincent Blut ]
+  * [arm64] drivers/perf: Enable ARM_SMMU_V3_PMU as module
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 19 Mar 2021 19:20:52 +0100
+
+linux (5.10.19-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.14
+    - [armhf] net: fec: put child node on error path
+    - [x86] stmmac: intel: Configure EHL PSE0 GbE and PSE1 GbE to 32 bits DMA
+      addressing
+    - [armhf] net: dsa: bcm_sf2: put device node before return
+    - net: switchdev: don't set port_obj_info->handled true when -EOPNOTSUPP
+    - [arm64,armhf] iommu/io-pgtable-arm: Support coherency for Mali LPAE
+    - [arm64,armhf] drm/panfrost: Support cache-coherent integrations
+    - [arm64] Fix kernel address detection of __is_lm_address()
+    - [arm64] Do not pass tagged addresses to __is_lm_address()
+    - Revert "x86/setup: don't remove E820_TYPE_RAM for pfn 0"
+    - [amd64] iommu/vt-d: Do not use flush-queue when caching-mode is on
+    - [x86] platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix
+      touchscreen on Estar Beauty HD tablet
+    - [x86] platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron
+      7352
+    - [x86] __always_inline __{rd,wr}msr()
+    - scsi: scsi_transport_srp: Don't block target in failfast state
+    - scsi: libfc: Avoid invoking response handler twice if ep is already
+      completed
+    - [x86] scsi: fnic: Fix memleak in vnic_dev_init_devcmd2
+    - [x86] ASoC: SOF: Intel: hda: Resume codec to do jack detection
+    - ALSA: hda: Add AlderLake-P PCI ID and HDMI codec vid
+    - mac80211: fix fast-rx encryption check
+    - mac80211: fix encryption key selection for 802.3 xmit
+    - [powerpc*] scsi: ibmvfc: Set default timeout to avoid crash during
+      migration
+    - ALSA: hda: Add Cometlake-R PCI ID
+    - [arm64,armhf] i2c: tegra: Create i2c_writesl_vi() to use with VI I2C for
+      filling TX FIFO
+    - udf: fix the problem that the disc content is not displayed
+    - nvme: check the PRINFO bit before deciding the host buffer length
+    - nvme-rdma: avoid request double completion for concurrent
+      nvme_rdma_timeout
+    - nvme-tcp: avoid request double completion for concurrent
+      nvme_tcp_timeout
+    - nvme-pci: allow use of cmb on v1.4 controllers
+    - nvmet: set right status on error in id-ns handler
+    - [x86] platform/x86: thinkpad_acpi: Add P53/73 firmware to
+      fan_quirk_table for dual fan control
+    - objtool: Don't fail the kernel build on fatal errors
+    - [x86] cpu: Add another Alder Lake CPU to the Intel family
+    - kthread: Extract KTHREAD_IS_PER_CPU
+    - workqueue: Restrict affinity change to rescuer
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.15
+    - USB: serial: cp210x: add pid/vid for WSDA-200-USB
+    - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
+    - USB: serial: option: Adding support for Cinterion MV31
+    - [arm64,armhf] usb: host: xhci: mvebu: make USB 3.0 PHY optional for
+      Armada 3720
+    - USB: gadget: legacy: fix an error code in eth_bind()
+    - [armhf] usb: gadget: aspeed: add missing of_node_put
+    - USB: usblp: don't call usb_set_interface if there's a single alt
+    - [arm*] usb: dwc2: Fix endpoint direction check in ep_from_windex
+    - [arm64,armhf] usb: dwc3: fix clock issue during resume in OTG mode
+    - [arm64] dts: qcom: c630: keep both touchpad devices enabled
+    - Input: i8042 - unbreak Pegatron C15B
+    - [arm64] dts: rockchip: Use only supported PCIe link speed on Pinebook
+      Pro
+    - bpf, cgroup: Fix optlen WARN_ON_ONCE toctou (CVE-2021-20194)
+    - bpf, cgroup: Fix problematic bounds check (CVE-2021-20194)
+    - bpf, inode_storage: Put file handler if no storage was found
+    - bpf, preload: Fix build when $(O) points to a relative path
+    - [arm64] dts: meson: switch TFLASH_VDD_EN pin to open drain on Odroid-C4
+    - r8169: work around RTL8125 UDP hw bug
+    - rxrpc: Fix deadlock around release of dst cached on udp tunnel
+    - SUNRPC: Fix NFS READs that start at non-page-aligned offsets
+    - igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr
+    - igc: check return value of ret_val in igc_config_fc_after_link_up
+    - i40e: Revert "i40e: don't report link up for a VF who hasn't enabled
+      queues"
+    - net/mlx5: Fix function calculation for page trees
+    - net/mlx5: Fix leak upon failure of rule creation
+    - net/mlx5e: Update max_opened_tc also when channels are closed
+    - net/mlx5e: Release skb in case of failure in tc update skb
+    - net: lapb: Copy the skb before sending a packet
+    - [arm64,armhf] net: mvpp2: TCAM entry enable should be written after SRAM
+      data
+    - [armhf] dts: sun7i: a20: bananapro: Fix ethernet phy-mode
+    - nvmet-tcp: fix out-of-bounds access when receiving multiple h2cdata PDUs
+    - memblock: do not start bottom-up allocations with kernel_end
+    - [x86] thunderbolt: Fix possible NULL pointer dereference in
+      tb_acpi_add_link()
+    - ovl: fix dentry leak in ovl_get_redirect
+    - ovl: avoid deadlock on directory ioctl
+    - ovl: implement volatile-specific fsync error behaviour
+    - mac80211: fix station rate table updates on assoc
+    - gpiolib: free device name on error path to fix kmemleak
+    - fgraph: Initialize tracing_graph_pause at task creation
+    - tracing/kprobe: Fix to support kretprobe events on unloaded modules
+    - kretprobe: Avoid re-registration of the same kretprobe earlier
+    - tracing: Use pause-on-trace with the latency tracers
+    - tracepoint: Fix race between tracing and removing tracepoint
+    - [arm64,x86] libnvdimm/namespace: Fix visibility of namespace resource
+      attribute
+    - [arm64,x86] libnvdimm/dimm: Avoid race between probe and
+      available_slots_show()
+    - genirq: Prevent [devm_]irq_alloc_desc from returning irq 0
+    - genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set
+    - scripts: use pkg-config to locate libcrypto
+    - xhci: fix bounce buffer usage for non-sg list case
+    - cifs: report error instead of invalid when revalidating a dentry fails
+    - iommu: Check dev->iommu in dev_iommu_priv_get() before dereferencing it
+    - smb3: Fix out-of-bounds bug in SMB2_negotiate()
+    - smb3: fix crediting for compounding when only one request in flight
+    - mmc: core: Limit retries when analyse of SDIO tuples fails
+    - [x86] Fix unsynchronized access to sev members through
+      svm_register_enc_region
+    - drm/dp/mst: Export drm_dp_get_vc_payload_bw()
+    - [x86] drm/i915: Fix the MST PBN divider calculation
+    - [x86] drm/i915/gem: Drop lru bumping on display unpinning
+    - [x86] drm/i915/gt: Close race between enable_breadcrumbs and
+      cancel_breadcrumbs
+    - [x86] drm/i915/display: Prevent double YUV range correction on HDR
+      planes
+    - [x86] drm/i915: Extract intel_ddi_power_up_lanes()
+    - [x86] drm/i915: Power up combo PHY lanes for for HDMI as well
+    - drm/amd/display: Revert "Fix EDID parsing after resume from suspend"
+    - io_uring: don't modify identity's files uncess identity is cowed
+    - nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs
+    - [x86] KVM: SVM: Treat SVM as unsupported when running as an SEV guest
+    - [x86] KVM: x86/mmu: Fix TDP MMU zap collapsible SPTEs
+    - [x86] KVM: x86: Allow guests to see MSR_IA32_TSX_CTRL even if tsx=off
+    - [x86] KVM: x86: fix CPUID entries returned by KVM_GET_CPUID2 ioctl
+    - [x86] KVM: x86: Update emulator context mode if SYSENTER xfers to 64-bit
+      mode
+    - [x86] KVM: x86: Set so called 'reserved CR3 bits in LM mask' at vCPU
+      reset
+    - mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page
+    - mm: hugetlb: fix a race between freeing and dissolving the page
+    - mm: hugetlb: fix a race between isolating and freeing page
+    - mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active
+    - mm, compaction: move high_pfn to the for loop scope
+    - mm/vmalloc: separate put pages and flush VM flags
+    - mm: thp: fix MADV_REMOVE deadlock on shmem THP
+    - mm/filemap: add missing mem_cgroup_uncharge() to
+      __add_to_page_cache_locked()
+    - [x86] build: Disable CET instrumentation in the kernel
+    - [x86] debug: Fix DR6 handling
+    - [x86] debug: Prevent data breakpoints on __per_cpu_offset
+    - [x86] debug: Prevent data breakpoints on cpu_dr7
+    - [x86] apic: Add extra serialization for non-serializing MSRs
+    - Input: goodix - add support for Goodix GT9286 chip
+    - Input: xpad - sync supported devices with fork on GitHub
+    - md: Set prev_flush_start and flush_bio in an atomic way
+    - igc: Report speed and duplex as unknown when device is runtime suspended
+    - neighbour: Prevent a dead entry from updating gc_list
+    - net: ip_tunnel: fix mtu calculation
+    - udp: ipv4: manipulate network header of NATed UDP GRO fraglist
+    - [arm64,armhf] net: dsa: mv88e6xxx: override existent unicast portvec in
+      port_fdb_add
+    - net: sched: replaced invalid qdisc tree flush helper in qdisc_replace
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.16
+    - io_uring: simplify io_task_match()
+    - io_uring: add a {task,files} pair matching helper
+    - io_uring: don't iterate io_uring_cancel_files()
+    - io_uring: pass files into kill timeouts/poll
+    - io_uring: always batch cancel in *cancel_files()
+    - io_uring: fix files cancellation
+    - io_uring: account io_uring internal files as REQ_F_INFLIGHT
+    - io_uring: if we see flush on exit, cancel related tasks
+    - io_uring: fix __io_uring_files_cancel() with TASK_UNINTERRUPTIBLE
+    - io_uring: replace inflight_wait with tctx->wait
+    - io_uring: fix cancellation taking mutex while TASK_UNINTERRUPTIBLE
+    - io_uring: fix flush cqring overflow list while TASK_INTERRUPTIBLE
+    - io_uring: fix list corruption for splice file_get
+    - io_uring: fix sqo ownership false positive warning
+    - io_uring: reinforce cancel on flush during exit
+    - io_uring: drop mm/files between task_work_submit
+    - gpiolib: cdev: clear debounce period if line set to output
+    - [powerpc*] 64/signal: Fix regression in __kernel_sigtramp_rt64()
+      semantics
+    - af_key: relax availability checks for skb size calculation
+    - regulator: core: avoid regulator_resolve_supply() race condition
+    - drm/nouveau/nvif: fix method count when pushing an array
+    - mac80211: 160MHz with extended NSS BW in CSA
+    - [x86] ASoC: Intel: Skylake: Zero snd_ctl_elem_value
+    - pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process()
+    - pNFS/NFSv4: Improve rejection of out-of-order layouts
+    - ALSA: hda: intel-dsp-config: add PCI id for TGL-H
+    - [x86] ASoC: Intel: sof_sdw: set proper flags for Dell TGL-H SKU 0A5E
+    - iwlwifi: mvm: skip power command when unbinding vif during CSA
+    - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap
+    - iwlwifi: pcie: fix context info memory leak
+    - iwlwifi: mvm: invalidate IDs of internal stations at mvm start
+    - iwlwifi: pcie: add rules to match Qu with Hr2
+    - iwlwifi: mvm: guard against device removal in reprobe
+    - iwlwifi: queue: bail out on invalid freeing
+    - SUNRPC: Move simple_get_bytes and simple_get_netobj into private header
+    - SUNRPC: Handle 0 length opaque XDR object data properly
+    - blk-cgroup: Use cond_resched() when destroy blkgs
+    - regulator: Fix lockdep warning resolving supplies
+    - bpf: Fix verifier jmp32 pruning decision logic
+    - bpf: Fix 32 bit src register truncation on div/mod
+    - bpf: Fix verifier jsgt branch analysis on max bound
+    - [x86] drm/i915: Fix ICL MG PHY vswing handling
+    - [x86] drm/i915: Skip vswing programming for TBT
+    - nilfs2: make splice write available again
+    - Revert "mm: memcontrol: avoid workload stalls when lowering memory.high"
+    - squashfs: avoid out of bounds writes in decompressors
+    - squashfs: add more sanity checks in id lookup
+    - squashfs: add more sanity checks in inode lookup
+    - squashfs: add more sanity checks in xattr id lookup
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.17
+    - objtool: Fix seg fault with Clang non-section symbols
+    - Revert "dts: phy: add GPIO number and active state used for phy reset"
+    - tracing: Do not count ftrace events in top level enable output
+    - tracing: Check length before giving out the filter buffer
+    - [x86] drm/i915: Fix overlay frontbuffer tracking
+    - arm/xen: Don't probe xenbus as part of an early initcall
+    - cgroup: fix psi monitor for root cgroup
+    - [x86] drm/i915/tgl+: Make sure TypeC FIA is powered up when initializing
+      it
+    - drm/dp_mst: Don't report ports connected if nothing is attached to them
+    - dmaengine: move channel device_node deletion to driver
+    - [armhf] soc: ti: omap-prm: Fix boot time errors for rst_map_012 bits 0
+      and 1
+    - [arm64] dts: qcom: sdm845: Reserve LPASS clocks in gcc
+    - [x86] platform/x86: hp-wmi: Disable tablet-mode reporting by default
+    - [arm64] dts: rockchip: Disable display for NanoPi R2S
+    - ovl: perform vfs_getxattr() with mounter creds
+    - cap: fix conversions on getxattr
+    - ovl: skip getxattr of security labels
+    - scsi: lpfc: Fix EEH encountering oops with NVMe traffic
+    - [x86] split_lock: Enable the split lock feature on another Alder Lake
+      CPU
+    - nvme-pci: ignore the subsysem NQN on Phison E16
+    - [riscv64] virt_addr_valid must check the address belongs to linear
+      mapping
+    - bfq-iosched: Revert "bfq: Fix computation of shallow depth"
+    - kallsyms: fix nonconverging kallsyms table with lld
+    - [armel,armhf] ensure the signal page contains defined contents
+    - [armel,armhf] kexec: fix oops after TLB are invalidated
+    - Revert "lib: Restrict cpumask_local_spread to houskeeping CPUs"
+    - [amd64] x86/efi: Remove EFI PGD build time checks
+    - [x86] KVM: x86: cleanup CR3 reserved bits checks
+    - cgroup-v1: add disabled controller check in cgroup1_parse_param()
+    - mt76: dma: fix a possible memory leak in mt76_add_fragment()
+    - [arm*] drm/vc4: hvs: Fix buffer overflow with the dlist handling
+    - bpf: Unbreak BPF_PROG_TYPE_KPROBE when kprobe is called via do_int3
+    - bpf: Check for integer overflow when using roundup_pow_of_two()
+    - netfilter: xt_recent: Fix attempt to update deleted entry
+    - netfilter: nftables: fix possible UAF over chains from packet path in
+      netns
+    - netfilter: flowtable: fix tcp and udp header checksum update
+    - xen/netback: avoid race in xenvif_rx_ring_slots_available()
+    - [x86] hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in
+      netvsc_receive()
+    - [arm64] net: enetc: initialize the RFS and RSS memories
+    - net: stmmac: set TxQ mode back to DCB after disabling CBS
+    - netfilter: conntrack: skip identical origin tuple in same zone only
+    - scsi: scsi_debug: Fix a memory leak
+    - [x86] build: Disable CET instrumentation in the kernel for 32-bit too
+    - [arm64] net: dsa: felix: implement port flushing on
+      .phylink_mac_link_down
+    - [arm64] net: hns3: add a check for queue_id in hclge_reset_vf_queue()
+    - [arm64] net: hns3: add a check for tqp_index in
+      hclge_get_ring_chain_from_mbx()
+    - [arm64] net: hns3: add a check for index in hclge_get_rss_key()
+    - firmware_loader: align .builtin_fw to 8
+    - [arm64,armhf] drm/sun4i: tcon: set sync polarity for tcon1 channel
+    - [arm64,armhf] drm/sun4i: dw-hdmi: always set clock rate
+    - [arm64,armhf] drm/sun4i: Fix H6 HDMI PHY configuration
+    - [arm64,armhf] drm/sun4i: dw-hdmi: Fix max. frequency for H6
+    - [arm64,armhf] clk: sunxi-ng: mp: fix parent rate change flag check
+    - [armhf] i2c: stm32f7: fix configuration of the digital filter
+    - scripts: set proper OpenSSL include dir also for sign-file
+    - [x86] pci: Create PCI/MSI irqdomain after x86_init.pci.arch_init()
+    - arm64: mte: Allow PTRACE_PEEKMTETAGS access to the zero page
+    - rxrpc: Fix clearance of Tx/Rx ring when releasing a call
+    - udp: fix skb_copy_and_csum_datagram with odd segment sizes
+    - [arm64,armhf] net: dsa: call teardown method on probe failure
+    - [x86] cpufreq: ACPI: Extend frequency tables to cover boost frequencies
+    - [x86] cpufreq: ACPI: Update arch scale-invariance max perf ratio if CPPC
+      is not there
+    - net: gro: do not keep too many GRO packets in napi->rx_list
+    - net: fix iteration for sctp transport seq_files
+    - net/vmw_vsock: fix NULL pointer dereference
+    - net/vmw_vsock: improve locking in vsock_connect_timeout()
+    - net: watchdog: hold device global xmit lock during tx disable
+    - switchdev: mrp: Remove SWITCHDEV_ATTR_ID_MRP_PORT_STAT
+    - vsock/virtio: update credit only if socket is not closed
+    - vsock: fix locking in vsock_shutdown()
+    - net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
+    - ovl: expand warning in ovl_d_real()
+    - kcov, usb: only collect coverage from __usb_hcd_giveback_urb in softirq
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.18
+    - IB/isert: add module param to set sg_tablesize for IO cmd
+    - net: qrtr: Fix port ID for control messages
+    - net/sched: fix miss init the mru in qdisc_skb_cb
+    - net: openvswitch: fix TTL decrement exception action execution
+    - net: bridge: Fix a warning when del bridge sysfs
+    - net: fix proc_fs init handling in af_packet and tls
+    - [amd64] Xen/x86: don't bail early from clear_foreign_p2m_mapping()
+      (CVE-2021-26932)
+    - [amd64] Xen/x86: also check kernel mapping in set_foreign_p2m_mapping()
+      (CVE-2021-26932)
+    - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages()
+      (CVE-2021-26932)
+    - Xen/gntdev: correct error checking in gntdev_map_grant_pages()
+      (CVE-2021-26932)
+    - [armhf] xen/arm: don't ignore return errors from set_phys_to_machine
+      (CVE-2021-26932)
+    - xen-blkback: don't "handle" error by BUG() (CVE-2021-26931)
+    - xen-netback: don't "handle" error by BUG() (CVE-2021-26931)
+    - xen-scsiback: don't "handle" error by BUG() (CVE-2021-26931)
+    - xen-blkback: fix error handling in xen_blkbk_map() (CVE-2021-26930)
+    - tty: protect tty_write from odd low-level tty disciplines
+    - Bluetooth: btusb: Always fallback to alt 1 for WBS
+    - btrfs: fix crash after non-aligned direct IO write with O_DSYNC
+    - media: pwc: Use correct device for DMA
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.19
+    - bpf: Fix truncation handling for mod32 dst reg wrt zero
+    - HID: make arrays usage and value to be the same
+    - RDMA: Lift ibdev_to_node from rds to common code
+    - nvme-rdma: Use ibdev_to_node instead of dereferencing ->dma_device
+    - USB: quirks: sort quirk entries
+    - usb: quirks: add quirk to start video capture on ELMO L-12F document
+      camera reliable
+    - ceph: downgrade warning from mdsmap decode to debug
+    - Bluetooth: btusb: Some Qualcomm Bluetooth adapters stop working
+      (Closes: #981005)
+    - [x86] hwmon: (dell-smm) Add XPS 15 L502X to fan control blacklist
+    - [x86] KVM: Zap the oldest MMU pages, not the newest
+    - mm: unexport follow_pte_pmd
+    - mm: simplify follow_pte{,pmd}
+    - KVM: do not assume PTE is writable after follow_pfn
+    - mm: provide a saner PTE walking API for modules
+    - KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()
+    - NET: usb: qmi_wwan: Adding support for Cinterion MV31
+    - cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath.
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.10.14-rt28
+  * Ignore __udp_gso_segment to avoid ABI changes
+  * Ignore xhci_init_driver to avoid ABI changes
+  * [rt] Update to 5.10.16-rt30
+  * [rt] Refresh "tracing: Merge irqflags + preempt counter." for context
+    changes
+  * [rt] Update to 5.10.17-rt32
+  * [rt] Refresh "um: synchronize kmsg_dumper" for context changes
+  * [rt] Refresh "printk: move console printing to kthreads" for context
+    changes
+  * Bump ABI to 4
+  * soundwire: intel: fix possible crash when no device is detected
+    (Closes: #981003)
+  * drm/nouveau: bail out of nouveau_channel_new if channel init fails
+    (CVE-2020-25639)
+  * [x86] drm/i915/gt: One more flush for Baytrail clear residuals
+  * [x86] drm/i915/gt: Flush before changing register state
+  * [x86] drm/i915/gt: Correct surface base address for renderclear
+  * certs: Rotate to use the "Debian Secure Boot Signer 2021 - linux"
+    certificate
+
+  [ Vincent Blut ]
+  * [x86] Enable PWM_CRC (Closes: #982808)
+  * net/can: Enable CAN_J1939 as module
+  * misc/eeprom: Enable EEPROM_EE1004 as module (Closes: #983495)
+  * [arm64] Enable DRM_DW_HDMI_CEC as module (Closes: #983759)
+
+  [ Luca Boccassi ]
+  * bpf: enable CONFIG_BPF_LSM on all architectures. Not active by default,
+    by explicitly setting CONFIG_LSM to include all other LSMs but not bpf.
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 02 Mar 2021 17:49:25 +0100
+
+linux (5.10.13-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13
+    - iwlwifi: provide gso_type to GSO packets
+    - nbd: freeze the queue while we're adding connections (CVE-2021-3348)
+    - tty: avoid using vfs_iocb_iter_write() for redirected console writes
+    - ACPI: sysfs: Prefer "compatible" modalias
+    - ACPI: thermal: Do not call acpi_thermal_check() directly
+    - kernel: kexec: remove the lock operation of system_transition_mutex
+    - ALSA: hda/realtek: Enable headset of ASUS B1400CEPE with ALC256
+    - ALSA: hda/via: Apply the workaround generically for Clevo machines
+    - [arm64,armhf] media: cedrus: Fix H264 decoding
+    - media: rc: fix timeout handling after switch to microsecond durations
+    - [x86] media: rc: ite-cir: fix min_timeout calculation
+    - media: rc: ensure that uevent can be read directly after rc device
+      register
+    - [armhf] dts: tbs2910: rename MMC node aliases
+    - wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
+    - [amd64] ASoC: AMD Renoir - refine DMI entries for some Lenovo products
+    - drm/nouveau/kms/gk104-gp1xx: Fix > 64x64 cursors
+    - [x86] drm/i915: Always flush the active worker before returning from the
+      wait
+    - [x86] drm/i915/gt: Always try to reserve GGTT address 0x0
+    - drivers/nouveau/kms/nv50-: Reject format modifiers for cursor planes
+    - bcache: only check feature sets when sb->version >=
+      BCACHE_SB_VERSION_CDEV_WITH_FEATURES
+    - net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem
+      family
+    - [s390x] uv: Fix sysfs max number of VCPUs reporting
+    - PM: hibernate: flush swap writer after marking
+    - [x86] efi/apple-properties: Reinstate support for boolean properties
+    - btrfs: fix lockdep warning due to seqcount_mutex on 32bit arch
+    - btrfs: fix possible free space tree corruption with online conversion
+    - [x86] KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in
+      intel_arch_events[]
+    - [x86] KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in
+      intel_pmu_refresh()
+    - [arm64] KVM: Filter out v8.1+ events on v8.0 HW
+    - [x86] KVM: nSVM: cancel KVM_REQ_GET_NESTED_STATE_PAGES on nested vmexit
+    - [x86] KVM: x86: allow KVM_REQ_GET_NESTED_STATE_PAGES outside guest mode
+      for VMX
+    - [x86] KVM: nVMX: Sync unsync'd vmcs02 state to vmcs12 on migration
+    - [x86] KVM: get smi pending status correctly
+    - KVM: Forbid the use of tagged userspace addresses for memslots
+    - io_uring: fix wqe->lock/completion_lock deadlock
+    - leds: trigger: fix potential deadlock with libata
+    - mt7601u: fix kernel crash unplugging the device
+    - mt7601u: fix rx buffer refcounting
+    - iwlwifi: Fix IWL_SUBDEVICE_NO_160 macro to use the correct bit.
+    - [x86] drm/i915/gt: Clear CACHE_MODE prior to clearing residuals
+    - [x86] drm/i915/pmu: Don't grab wakeref when enabling events
+    - [arm*] drm/vc4: Correct lbm size and calculation
+    - [arm*] drm/vc4: Correct POS1_SCL for hvs5
+    - drm/nouveau/dispnv50: Restore pushing of all data.
+    - [x86] drm/i915: Check for all subplatform bits
+    - uapi: fix big endian definition of ipv6_rpl_sr_hdr
+    - KVM: Documentation: Fix spec for KVM_CAP_ENABLE_CAP_VM
+    - [arm64] tee: optee: replace might_sleep with cond_resched
+    - xen-blkfront: allow discard-* nodes to be optional
+    - blk-mq: test QUEUE_FLAG_HCTX_ACTIVE for sbitmap_shared in hctx_may_queue
+    - [armhf] imx: build suspend-imx6.S with arm instruction set
+    - netfilter: nft_dynset: add timeout extension to template
+    - Revert "RDMA/mlx5: Fix devlink deadlock on net namespace deletion"
+    - Revert "block: simplify set_init_blocksize" to regain lost performance
+    - xfrm: Fix oops in xfrm_replay_advance_bmp
+    - xfrm: fix disable_xfrm sysctl when used on xfrm interfaces
+    - xfrm: Fix wraparound in xfrm_policy_addr_delta()
+    - RDMA/cxgb4: Fix the reported max_recv_sge value
+    - [arm64] ASoC: qcom: Fix incorrect volatile registers
+    - [arm64] ASoC: qcom: Fix broken support to MI2S TERTIARY and QUATERNARY
+    - [x86] ASoC: Intel: Skylake: skl-topology: Fix OOPs ib skl_tplg_complete
+    - [powerpc*] 64s: prevent recursive replay_soft_interrupts causing
+      superfluous interrupt
+    - pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process()
+    - pNFS/NFSv4: Update the layout barrier when we schedule a layoutreturn
+    - ASoC: SOF: Intel: soundwire: fix select/depend unmet dependencies
+    - ASoC: qcom: lpass: Fix out-of-bounds DAI ID lookup
+    - iwlwifi: pcie: avoid potential PNVM leaks
+    - iwlwifi: pnvm: don't skip everything when not reloading
+    - iwlwifi: pnvm: don't try to load after failures
+    - iwlwifi: pcie: set LTR on more devices
+    - iwlwifi: pcie: use jiffies for memory read spin time limit
+    - iwlwifi: pcie: reschedule in long-running memory reads
+    - mac80211: pause TX while changing interface type
+    - ice: fix FDir IPv6 flexbyte
+    - ice: Implement flow for IPv6 next header (extension header)
+    - ice: update dev_addr in ice_set_mac_address even if HW filter exists
+    - ice: Don't allow more channels than LAN MSI-X available
+    - ice: Fix MSI-X vector fallback logic
+    - i40e: acquire VSI pointer only after VF is initialized
+    - igc: fix link speed advertising
+    - net/mlx5: Fix memory leak on flow table creation error flow
+    - net/mlx5e: E-switch, Fix rate calculation for overflow
+    - net/mlx5e: free page before return
+    - net/mlx5e: Reduce tc unsupported key print level
+    - net/mlx5: Maintain separate page trees for ECPF and PF functions
+    - net/mlx5e: Disable hw-tc-offload when MLX5_CLS_ACT config is disabled
+    - net/mlx5e: Fix CT rule + encap slow path offload and deletion
+    - net/mlx5e: Correctly handle changing the number of queues when the
+      interface is down
+    - net/mlx5e: Revert parameters on errors when changing trust state without
+      reset
+    - net/mlx5e: Revert parameters on errors when changing MTU and LRO state
+      without reset
+    - can: dev: prevent potential information leak in can_fill_info()
+    - [arm64] ACPI/IORT: Do not blindly trust DMA masks from firmware
+    - of/device: Update dma_range_map only when dev has valid dma-ranges
+    - [amd64] iommu/amd: Use IVHD EFR for early initialization of IOMMU
+      features
+    - [amd64] iommu/vt-d: Correctly check addr alignment in
+      qi_flush_dev_iotlb_pasid()
+    - nvme-multipath: Early exit if no path is available
+    - rxrpc: Fix memory leak in rxrpc_lookup_local
+    - NFC: fix resource leak when target index is invalid
+    - NFC: fix possible resource leak
+    - [x86] ASoC: topology: Properly unregister DAI on removal
+    - [x86] ASoC: topology: Fix memory corruption in
+      soc_tplg_denum_create_values()
+    - scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit
+    - team: protect features update by RCU to avoid deadlock
+    - tcp: make TCP_USER_TIMEOUT accurate for zero window probes
+    - tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN
+    - vsock: fix the race conditions in multi-transport support
+      (CVE-2021-26708)
+
+  [ Salvatore Bonaccorso ]
+  * arch/s390: uv_info: Ignore ABI changes
+
+  [ Vincent Blut ]
+  * [arm64] Enable CRYPTO_NHPOLY1305_NEON. (closes: #980214)
+  * [armhf] Enable KERNEL_MODE_NEON.
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 06 Feb 2021 09:23:52 +0100
+
+linux (5.10.12-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.10
+    - [x86] hyperv: Initialize clockevents after LAPIC is initialized
+    - bpf: Fix signed_{sub,add32}_overflows type handling
+    - nfsd4: readdirplus shouldn't return parent of export (CVE-2021-3178)
+    - bpf: Don't leak memory in bpf getsockopt when optlen == 0
+    - bpf: Support PTR_TO_MEM{,_OR_NULL} register spilling
+    - bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback
+    - net: fix use-after-free when UDP GRO with shared fraglist
+    - udp: Prevent reuseport_select_sock from reading uninitialized socks
+    - netxen_nic: fix MSI/MSI-x interrupts
+    - net: ipv6: Validate GSO SKB before finish IPv6 processing
+    - tipc: fix NULL deref in tipc_link_xmit()
+    - [arm64,armhf] net: mvpp2: Remove Pause and Asym_Pause support
+    - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request
+    - esp: avoid unneeded kmap_atomic call
+    - net: dcb: Validate netlink message in DCB handler
+    - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands
+    - rxrpc: Call state should be read with READ_ONCE() under some
+      circumstances
+    - i40e: fix potential NULL pointer dereferencing
+    - [arm64,armhf] net: stmmac: Fixed mtu channged by cache aligned
+    - net: sit: unregister_netdevice on newlink's error path
+    - [arm64,armhf] net: stmmac: fix taprio schedule configuration
+    - [arm64,armhf] net: stmmac: fix taprio configuration when base_time is in
+      the past
+    - net: avoid 32 x truesize under-estimation for tiny skbs
+    - net: phy: smsc: fix clk error handling
+    - [arm64,armhf] net: dsa: clear devlink port type before unregistering
+      slave netdevs
+    - rxrpc: Fix handling of an unsupported token type in rxrpc_read()
+    - [arm64,armhf] net: stmmac: use __napi_schedule() for PREEMPT_RT
+    - [armhf] drm/panel: otm8009a: allow using non-continuous dsi clock
+    - mac80211: do not drop tx nulldata packets on encrypted links
+    - mac80211: check if atf has been disabled in __ieee80211_schedule_txq
+    - [arm64,armhf] net: dsa: unbind all switches from tree when DSA master
+      unbinds
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.11
+    - scsi: target: tcmu: Fix use-after-free of se_cmd->priv
+    - [armhf] mtd: rawnand: gpmi: fix dst bit offset when extracting raw
+      payload
+    - mtd: rawnand: nandsim: Fix the logic when selecting Hamming soft ECC
+      engine
+    - [arm64,armhf] i2c: tegra: Wait for config load atomically while in ISR
+    - [x86] platform/x86: i2c-multi-instantiate: Don't create platform device
+      for INT3515 ACPI nodes
+    - [x86] platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634
+    - ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T
+    - ALSA: hda/via: Add minimum mute flag
+    - crypto: xor - Fix divide error in do_xor_speed()
+    - dm crypt: fix copy and paste bug in crypt_alloc_req_aead
+    - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error
+    - btrfs: don't get an EINTR during drop_snapshot for reloc
+    - btrfs: do not double free backref nodes on error
+    - btrfs: fix lockdep splat in btrfs_recover_relocation
+    - btrfs: don't clear ret in btrfs_start_dirty_block_groups
+    - btrfs: send: fix invalid clone operations when cloning from the same
+      file and root
+    - fs: fix lazytime expiration handling in __writeback_single_inode()
+    - mmc: core: don't initialize block size from ext_csd if not present
+    - [arm64] mmc: sdhci-xenon: fix 1.8v regulator stabilization
+    - dm: avoid filesystem lookup in dm_get_dev_t()
+    - dm integrity: fix a crash if "recalculate" used without "internal_hash"
+    - dm integrity: conditionally disable "recalculate" feature
+    - drm/atomic: put state on error path
+    - drm/syncobj: Fix use-after-free
+    - drm/amdgpu: remove gpu info firmware of green sardine
+    - [x86] drm/i915/gt: Prevent use of engine->wa_ctx after error
+    - [x86] drm/i915: Check for rq->hwsp validity after acquiring RCU lock
+    - ASoC: rt711: mutex between calibration and power state changes
+    - SUNRPC: Handle TCP socket sends with kernel_sendpage() again
+    - HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad
+      device
+    - dm integrity: select CRYPTO_SKCIPHER
+    - [x86] hyperv: Fix kexec panic/hang issues
+    - scsi: ufs: Relax the condition of UFSHCI_QUIRK_SKIP_MANUAL_WB_FLUSH_CTRL
+    - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
+    - scsi: qedi: Correct max length of CHAP secret
+    - scsi: scsi_debug: Fix memleak in scsi_debug_init()
+    - scsi: sd: Suppress spurious errors when WRITE SAME is being disabled
+    - [riscv64] Fix kernel time_init()
+    - [riscv64] Fix sifive serial driver
+    - [riscv64] Enable interrupts during syscalls with M-Mode
+    - HID: logitech-dj: add the G602 receiver
+    - HID: Ignore battery for Elan touchscreen on ASUS UX550
+    - [arm64,armhf] ALSA: hda/tegra: fix tegra-hda on tegra30 soc
+    - [riscv64] cacheinfo: Fix using smp_processor_id() in preemptible
+    - [arm64] make atomic helpers __always_inline
+    - xen: Fix event channel callback via INTX/GSI
+    - [x86] xen: Add xen_no_vector_callback option to test PCI INTX delivery
+    - [x86] xen: Fix xen_hvm_smp_init() when vector callback not available
+    - [riscv64] dts: phy: fix missing mdio device and probe failure of
+      vsc8541-01 device
+    - [riscv64] dts: phy: add GPIO number and active state used for phy reset
+    - drm/amdgpu/psp: fix psp gfx ctrl cmds
+    - HID: logitech-hidpp: Add product ID for MX Ergo in Bluetooth mode
+    - drm/nouveau/bios: fix issue shadowing expansion ROMs
+    - drm/nouveau/privring: ack interrupts the same way as RM
+    - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields
+    - drm/nouveau/mmu: fix vram heap sizing
+    - drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0
+    - io_uring: flush timeouts that should already have expired
+    - [riscv64] Set current memblock limit
+    - [riscv64] Fix maximum allowed phsyical memory for RV32
+    - nfsd: Fixes for nfsd4_encode_read_plus_data()
+    - nfsd: Don't set eof on a truncated READ_PLUS
+    - gpiolib: cdev: fix frame size warning in gpio_ioctl()
+    - [armhf] pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting
+    - RDMA/ucma: Do not miss ctx destruction steps in some cases
+    - btrfs: print the actual offset in btrfs_root_name
+    - scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression
+    - scsi: ufs: Fix tm request when non-fatal error happens
+    - bpf: Prevent double bpf_prog_put call from bpf_tracing_prog_attach
+    - [powerpc*] Use the common INIT_DATA_SECTION macro in vmlinux.lds.S
+    - [powerpc*] Fix alignment bug within the init sections
+    - [arm64] entry: remove redundant IRQ flag tracing
+    - bpf: Reject too big ctx_size_in for raw_tp test run
+    - RDMA/umem: Avoid undefined behavior of rounddown_pow_of_two()
+    - RDMA/cma: Fix error flow in default_roce_mode_store
+    - printk: ringbuffer: fix line counting
+    - printk: fix kmsg_dump_get_buffer length calulations
+    - iov_iter: fix the uaccess area in copy_compat_iovec_from_user
+    - [mips*] i2c: octeon: check correct size of maximum RECV_LEN packet
+    - [armel,armhf] drm/vc4: Unify PCM card's driver_name
+    - [x86] platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11
+      from allow-list
+    - [x86] platform/x86: hp-wmi: Don't log a warning on
+      HPWMI_RET_UNKNOWN_COMMAND errors
+    - ALSA: hda: Balance runtime/system PM if direct-complete is disabled
+    - xsk: Clear pool even for inactive queues
+    - can: dev: can_restart: fix use after free bug
+    - can: vxcan: vxcan_xmit: fix use after free bug
+    - can: peak_usb: fix use after free bugs
+    - iio: common: st_sensors: fix possible infinite loop in
+      st_sensors_irq_thread
+    - iio: ad5504: Fix setting power-down state
+    - drivers: iio: temperature: Add delay after the addressed reset command
+      in mlx90632.c
+    - [powerpc*] 64s: fix scv entry fallback flush vs interrupt
+    - cifs: do not fail __smb_send_rqst if non-fatal signals are pending
+    - [mips*] irqchip/mips-cpu: Set IPI domain parent chip
+    - [x86] fpu: Add kernel_fpu_begin_mask() to selectively initialize state
+    - [x86] topology: Make __max_die_per_package available unconditionally
+    - [x86] mmx: Use KFPU_387 for MMX string operations
+    - [x86] setup: don't remove E820_TYPE_RAM for pfn 0
+    - proc_sysctl: fix oops caused by incorrect command parameters
+    - mm: memcg/slab: optimize objcg stock draining
+    - mm: memcg: fix memcg file_dirty numa stat
+    - mm: fix numa stats for thp migration
+    - io_uring: iopoll requests should also wake task ->in_idle state
+    - io_uring: fix SQPOLL IORING_OP_CLOSE cancelation state
+    - io_uring: fix short read retries for non-reg files
+    - [x86] intel_th: pci: Add Alder Lake-P support
+    - [arm64] serial: mvebu-uart: fix tx lost characters at power off
+    - ehci: fix EHCI host controller initialization sequence
+    - [armhf] usb: gadget: aspeed: fix stop dma register setting.
+    - USB: gadget: dummy-hcd: Fix errors in port-reset handling
+    - usb: udc: core: Use lock when write to soft_connect
+    - xhci: make sure TRB is fully written before giving it to the controller
+    - [arm64,armhf] xhci: tegra: Delay for disabling LFPS detector
+    - drivers core: Free dma_range_map when driver probe failed
+    - driver core: Fix device link device name collision
+    - driver core: Extend device_is_dependent()
+    - [x86] drm/i915: s/intel_dp_sink_dpms/intel_dp_set_power/
+    - [x86] drm/i915: Only enable DFP 4:4:4->4:2:0 conversion when outputting
+      YCbCr 4:4:4
+    - [x86] entry: Fix noinstr fail
+    - [x86] cpu/amd: Set __max_die_per_package on AMD
+    - cls_flower: call nla_ok() before nla_next()
+    - netfilter: rpfilter: mask ecn bits before fib lookup
+    - [x86] drm/i915/hdcp: Update CP property in update_pipe
+    - locking/lockdep: Cure noinstr fail
+    - [x86] ASoC: SOF: Intel: fix page fault at probe if i915 init fails
+    - [arm64,armhf] net: dsa: mv88e6xxx: also read STU state in
+      mv88e6250_g1_vtu_getnext
+    - nvme-pci: refactor nvme_unmap_data
+    - nvme-pci: fix error unwind in nvme_map_data
+    - cachefiles: Drop superfluous readpages aops NULL check
+    - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too
+    - tcp: fix TCP socket rehash stats mis-accounting
+    - net_sched: gen_estimator: support large ewma log
+    - udp: mask TOS bits in udp_v4_early_demux()
+    - ipv6: create multicast route with RTPROT_KERNEL
+    - net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
+    - net_sched: reject silly cell_log in qdisc_get_rtab()
+    - ipv6: set multicast flag on the multicast route
+    - net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled
+    - [armhf] net: dsa: b53: fix an off by one in checking "vlan->vid"
+    - tcp: do not mess with cloned skbs in tcp_add_backlog()
+    - tcp: fix TCP_USER_TIMEOUT with zero window
+    - net: core: devlink: use right genl user_ptr when handling port param
+      get/set
+    - [arm64] pinctrl: qcom: Allow SoCs to specify a GPIO function that's not
+      0
+    - [arm64] pinctrl: qcom: No need to read-modify-write the interrupt status
+    - [arm64] pinctrl: qcom: Properly clear "intr_ack_high" interrupts when
+      unmasking
+    - [arm64] pinctrl: qcom: Don't clear pending interrupts when enabling
+    - tty: implement write_iter
+    - tty: fix up hung_up_tty_write() conversion
+    - tcp: Fix potential use-after-free due to double kfree()
+    - [x86] ASoC: SOF: Intel: hda: Avoid checking jack on system suspend
+    - [x86] drm/i915/hdcp: Get conn while content_type changed
+    - bpf: Local storage helpers should check nullness of owner ptr passed
+    - kernfs: implement ->read_iter
+    - kernfs: implement ->write_iter
+    - kernfs: wire up ->splice_read and ->splice_write
+    - fs/pipe: allow sendfile() to pipe again
+    - mm: fix initialization of struct page for holes in memory layout
+    - Revert "mm: fix initialization of struct page for holes in memory
+      layout"
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.12
+    - [arm*] gpio: mvebu: fix pwm .get_state period calculation
+    - Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
+    - HID: wacom: Correct NULL dereference on AES pen proximity
+    - HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input devices
+    - media: Revert "media: videobuf2: Fix length check for single plane
+      dmabuf queueing"
+    - media: v4l2-subdev.h: BIT() is not available in userspace
+    - RDMA/vmw_pvrdma: Fix network_hdr_type reported in WC
+    - iwlwifi: dbg: Don't touch the tlv data
+    - kernel/io_uring: cancel io_uring before task works
+    - io_uring: inline io_uring_attempt_task_drop()
+    - io_uring: add warn_once for io_uring_flush()
+    - io_uring: stop SQPOLL submit on creator's death
+    - io_uring: fix null-deref in io_disable_sqo_submit
+    - io_uring: do sqo disable on install_fd error
+    - io_uring: fix false positive sqo warning on flush
+    - io_uring: fix uring_flush in exit_files() warning
+    - io_uring: fix skipping disabling sqo on exec
+    - io_uring: dont kill fasync under completion_lock
+    - io_uring: fix sleeping under spin in __io_clean_op
+    - objtool: Don't fail on missing symbol table
+    - mm/page_alloc: add a missing mm_page_alloc_zone_locked() tracepoint
+    - mm: fix a race on nr_swap_pages
+    - tools: Factor HOSTCC, HOSTLD, HOSTAR definitions
+    - printk: fix buffer overflow potential for print_text()
+    - printk: fix string termination for record_print_text()
+
+  [ Salvatore Bonaccorso ]
+  * Add set of PI futex fixes (CVE-2021-3347)
+    - futex: Ensure the correct return value from futex_lock_pi()
+    - futex: Replace pointless printk in fixup_owner()
+    - futex: Provide and use pi_state_update_owner()
+    - rtmutex: Remove unused argument from rt_mutex_proxy_unlock()
+    - futex: Use pi_state_update_owner() in put_pi_state()
+    - futex: Simplify fixup_pi_state_owner()
+    - futex: Handle faults correctly for PI futexes
+  * Bump ABI to 3
+  * xen: Fix XenStore initialisation for XS_LOCAL
+  * [rt] Refresh "printk: refactor kmsg_dump_get_buffer()"
+  * [rt] Refresh "locking/rtmutex: Handle the various new futex race
+    conditions"
+  * [rt] Refresh "locking/rtmutex: add sleeping lock implementation"
+  * [rt] Refresh "crypto: limit more FPU-enabled sections"
+  * Unset CRYPTO_USER_API_ENABLE_OBSOLETE
+
+  [ Ricardo Ribalda ]
+  * Enable USB_NET_AQC111 as module (Closes: #968760)
+
+  [ Vincent Blut ]
+  * [arm64] Enable DRM_VC4 again. (Closes: #968181, #968188)
+  * [arm64] Enable DRM_VC4_HDMI_CEC. (Closes: #977438)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 30 Jan 2021 21:38:57 +0100
+
+linux (5.10.9-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.6
+    - [arm64] rtc: pcf2127: move watchdog initialisation to a separate
+      function
+    - [arm64] rtc: pcf2127: only use watchdog when explicitly available
+    - dt-bindings: rtc: add reset-source property
+    - kdev_t: always inline major/minor helper functions
+    - ALSA: hda/realtek - Modify Dell platform name
+    - ALSA: hda/hdmi: Fix incorrect mutex unlock in silent_stream_disable()
+    - [x86] drm/i915/tgl: Fix Combo PHY DPLL fractional divider for 38.4MHz
+      ref clock
+    - RDMA/core: remove use of dma_virt_ops
+    - RDMA/siw,rxe: Make emulated devices virtual in the device tree
+    - fuse: fix bad inode
+    - perf: Break deadlock involving exec_update_mutex
+    - rwsem: Implement down_read_killable_nested
+    - rwsem: Implement down_read_interruptible
+    - exec: Transform exec_update_mutex into a rw_semaphore
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.7
+    - i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs
+    - iavf: fix double-release of rtnl_lock
+    - net/sched: sch_taprio: ensure to reset/destroy all child qdiscs
+    - [arm64,armhf] net: mvpp2: Add TCAM entry to drop flow control pause
+      frames
+    - [arm64,armhf] net: mvpp2: prs: fix PPPoE with ipv6 packet parse
+    - atm: idt77252: call pci_disable_device() on error path
+    - [arm64,armhf] net: mvpp2: Fix GoP port 3 Networking Complex Control
+      configurations
+    - [arm64,armhf] net: stmmac: dwmac-meson8b: ignore the second clock input
+    - [arm64,armhf] net: ethernet: mvneta: Fix error handling in mvneta_probe
+    - qede: fix offload for IPIP tunnel packets
+    - virtio_net: Fix recursive call to cpus_read_lock()
+    - [armhf] net/ncsi: Use real net-device for response handler
+    - net-sysfs: take the rtnl lock when storing xps_cpus
+    - net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc
+    - net-sysfs: take the rtnl lock when storing xps_rxqs
+    - net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc
+    - [armhf] net: ethernet: ti: cpts: fix ethtool output when no ptp_clock
+      registered
+    - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS
+    - e1000e: Only run S0ix flows if shutdown succeeded
+    - e1000e: bump up timeout to wait when ME un-configures ULP mode
+    - Revert "e1000e: disable s0ix entry and exit flows for ME systems"
+    - e1000e: Export S0ix flags to ethtool
+    - bnxt_en: Check TQM rings for maximum supported value.
+    - [arm64,armhf] net: mvpp2: fix pkt coalescing int-threshold configuration
+    - bnxt_en: Fix AER recovery.
+    - ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst()
+    - net: sched: prevent invalid Scell_log shift count
+    - [arm64] net: hns: fix return value check in __lb_other_process()
+    - erspan: fix version 1 check in gre_parse_header()
+    - net: hdlc_ppp: Fix issues when mod_timer is called while timer is
+      running
+    - vhost_net: fix ubuf refcount incorrectly when sendmsg fails
+    - r8169: work around power-saving bug on some chip versions
+    - CDC-NCM: remove "connected" log message
+    - net: usb: qmi_wwan: add Quectel EM160R-GL
+    - block: add debugfs stanza for QUEUE_FLAG_NOWAIT
+    - workqueue: Kick a worker based on the actual activation of delayed works
+    - scsi: ufs: Fix wrong print message in dev_err()
+    - scsi: ufs-pci: Fix restore from S4 for Intel controllers
+    - scsi: ufs-pci: Ensure UFS device is in PowerDown mode for
+      suspend-to-disk ->poweroff()
+    - scsi: ufs-pci: Fix recovery from hibernate exit errors for Intel
+      controllers
+    - scsi: ufs-pci: Enable UFSHCD_CAP_RPM_AUTOSUSPEND for Intel controllers
+    - scsi: block: Introduce BLK_MQ_REQ_PM
+    - scsi: ide: Do not set the RQF_PREEMPT flag for sense requests
+    - scsi: scsi_transport_spi: Set RQF_PM for domain validation commands
+    - scsi: core: Only process PM requests if rpm_status != RPM_ACTIVE
+    - lib/genalloc: fix the overflow when size is too big
+    - scsi: ufs: Clear UAC for FFU and RPMB LUNs
+    - Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close
+    - scsi: block: Remove RQF_PREEMPT and BLK_MQ_REQ_PREEMPT
+    - scsi: block: Do not accept any requests while suspended
+    - crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
+    - [powerpc*] Handle .text.{hot,unlikely}.* in linker script
+    - [x86] Staging: comedi: Return -EFAULT if copy_to_user() fails
+    - usb: gadget: enable super speed plus
+    - USB: cdc-acm: blacklist another IR Droid device
+    - USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
+    - [arm64,armhf] usb: dwc3: meson-g12a: disable clk on error handling path
+      in probe
+    - [arm64,armhf] usb: dwc3: gadget: Restart DWC3 gadget when enabling
+      pullup
+    - [arm64,armhf] usb: dwc3: gadget: Clear wait flag on dequeue
+    - [arm64] usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
+      completion
+    - [arm64] usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based
+      one
+    - [arm64] usb: dwc3: ulpi: Fix USB2.0 HS/FS/LS PHY suspend regression
+    - [arm64,armhf] usb: chipidea: ci_hdrc_imx: add missing put_device() call
+      in usbmisc_get_init_data()
+    - USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk
+      set
+    - usb: usbip: vhci_hcd: protect shift size
+    - usb: uas: Add PNY USB Portable SSD to unusual_uas
+    - USB: serial: iuu_phoenix: fix DMA from stack
+    - USB: serial: option: add LongSung M5710 module support
+    - USB: serial: option: add Quectel EM160R-GL
+    - USB: yurex: fix control-URB timeout handling
+    - USB: usblp: fix DMA to stack
+    - ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
+    - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
+    - usb: gadget: f_uac2: reset wMaxPacketSize
+    - usb: gadget: function: printer: Fix a memory leak for interface
+      descriptor
+    - usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
+    - usb: gadget: Fix spinlock lockup on usb_function_deactivate
+    - usb: gadget: configfs: Preserve function ordering after bind failure
+    - usb: gadget: configfs: Fix use-after-free issue with udc_name
+    - USB: serial: keyspan_pda: remove unused variable
+    - mm: make wait_on_page_writeback() wait for multiple pending writebacks
+    - [x86] mm: Fix leak of pmd ptlock
+    - [x86] KVM: mmu: Use -1 to flag an undefined spte in get_mmio_spte()
+    - [x86] KVM: mmu: Get root level from walkers when retrieving MMIO SPTE
+    - kvm: check tlbs_dirty directly
+    - [x86] KVM: mmu: Ensure TDP MMU roots are freed after yield
+    - [x86] resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC
+      MSR
+    - [x86] resctrl: Don't move a task to the same resource group
+    - blk-iocost: fix NULL iocg deref from racing against initialization
+    - ALSA: hda/via: Fix runtime PM for Clevo W35xSS
+    - ALSA: hda/conexant: add a new hda codec CX11970
+    - ALSA: hda/realtek - Fix speaker volume control on Lenovo C940
+    - ALSA: hda/realtek: Add mute LED quirk for more HP laptops
+    - ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7
+    - ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256.
+    - [amd64] iommu/vt-d: Move intel_iommu info from struct intel_svm to
+      struct intel_svm_dev
+    - btrfs: qgroup: don't try to wait flushing if we're already holding a
+      transaction
+    - btrfs: send: fix wrong file path when there is an inode with a pending
+      rmdir
+    - Revert "device property: Keep secondary firmware node secondary by type"
+    - dmabuf: fix use-after-free of dmabuf's file->f_inode
+    - [x86] drm/i915: clear the shadow batch
+    - [x86] drm/i915: clear the gpu reloc batch
+    - bcache: check unsupported feature sets for bcache register
+    - bcache: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE for large
+      bucket
+    - net/mlx5e: Fix SWP offsets when vlan inserted by driver
+    - netfilter: x_tables: Update remaining dereference to RCU
+    - netfilter: ipset: fix shift-out-of-bounds in htable_bits()
+    - netfilter: xt_RATEEST: reject non-null terminated string from userspace
+    - netfilter: nft_dynset: report EOPNOTSUPP on missing set feature
+    - [x86] mtrr: Correct the range check before performing MTRR type lookups
+    - xsk: Fix memory leak for failed bind
+    - rtlwifi: rise completion at the last step of firmware callback
+    - scsi: target: Fix XCOPY NAA identifier lookup (CVE-2020-28374)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.8
+    - [powerpc] 32s: Fix RTAS machine check with VMAP stack
+    - io_uring: synchronise IOPOLL on task_submit fail
+    - io_uring: limit {io|sq}poll submit locking scope
+    - io_uring: patch up IOPOLL overflow_flush sync
+    - [arm64] RDMA/hns: Avoid filling sl in high 3 bits of vlan_id
+    - [arm64,armhf] iommu/arm-smmu-qcom: Initialize SCTLR of the bypass
+      context
+    - [arm64,armhf] drm/panfrost: Don't corrupt the queue mutex on open/close
+    - io_uring: Fix return value from alloc_fixed_file_ref_node
+    - scsi: ufs: Fix -Wsometimes-uninitialized warning
+    - btrfs: skip unnecessary searches for xattrs when logging an inode
+    - btrfs: fix deadlock when cloning inline extent and low on free metadata
+      space
+    - btrfs: shrink delalloc pages instead of full inodes
+    - [arm64] net: hns3: fix incorrect handling of sctp6 rss tuple
+    - [arm64] net: hns3: fix the number of queues actually used by ARQ
+    - [arm64] net: hns3: fix a phy loopback fail issue
+    - [arm64,armhf] net: stmmac: dwmac-sun8i: Fix probe error handling
+    - [arm64,armhf] net: stmmac: dwmac-sun8i: Balance internal PHY resource
+      references
+    - [arm64,armhf] net: stmmac: dwmac-sun8i: Balance internal PHY power
+    - [arm64,armhf] net: stmmac: dwmac-sun8i: Balance syscon
+      (de)initialization
+    - net: vlan: avoid leaks on register_vlan_dev() failures
+    - net: ipv6: fib: flush exceptions when purging route
+    - net: fix pmtu check in nopmtudisc mode
+    - net: ip: always refragment ip defragmented packets
+    - nexthop: Fix off-by-one error in error path
+    - nexthop: Unlink nexthop group entry in error path
+    - nexthop: Bounce NHA_GATEWAY in FDB nexthop groups
+    - [s390x] qeth: fix deadlock during recovery
+    - [s390x] qeth: fix locking for discipline setup / removal
+    - [s390x] qeth: fix L2 header access in qeth_l3_osa_features_check()
+    - net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address
+    - net/mlx5e: ethtool, Fix restriction of autoneg with 56G
+    - net/mlx5e: In skb build skip setting mark in switchdev mode
+    - net/mlx5: Check if lag is supported before creating one
+    - scsi: lpfc: Fix variable 'vport' set but not used in
+      lpfc_sli4_abts_err_handler()
+    - HID: wacom: Fix memory leakage caused by kfifo_alloc
+    - fanotify: Fix sys_fanotify_mark() on native x86-32
+    - [armhf] OMAP2+: omap_device: fix idling of devices during probe
+    - [x86] cpufreq: powernow-k8: pass policy rather than use
+      cpufreq_cpu_get()
+    - [armhf] spi: stm32: FIFO threshold level - fix align packet size
+    - i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
+      terminated
+    - bcache: set bcache device into read-only mode for
+      BCH_FEATURE_INCOMPAT_OBSO_LARGE_BUCKET
+    - [amd64] iommu/vt-d: Fix misuse of ALIGN in qi_flush_piotlb()
+    - [amd64] iommu/intel: Fix memleak in intel_irq_remapping_alloc
+    - nvme-tcp: Fix possible race of io_work and direct send
+    - net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups
+    - net/mlx5e: Fix two double free cases
+    - regmap: debugfs: Fix a memory leak when calling regmap_attach_dev
+    - [arm64,armhf] net: mvpp2: disable force link UP during port init
+      procedure
+    - [x86] drm/i915/dp: Track pm_qos per connector
+    - [arm64,armhf] net: mvneta: fix error message when MTU too large for XDP
+    - [arm64] KVM: Don't access PMCR_EL0 when no PMU is available
+    - xsk: Fix race in SKB mode transmit with shared cq
+    - xsk: Rollback reservation at NETDEV_TX_BUSY
+    - can: isotp: isotp_getname(): fix kernel information leak
+    - block: fix use-after-free in disk_part_iter_next
+    - net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of
+      trimmed packet
+    - regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init()
+    - [arm64,armhf] drm/panfrost: Remove unused variables in
+      panfrost_job_close()
+    - tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.9
+    - btrfs: reloc: fix wrong file extent type check to avoid false ENOENT
+    - btrfs: prevent NULL pointer dereference in extent_io_tree_panic
+    - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP
+      machines
+    - ALSA: doc: Fix reference to mixart.rst
+    - [amd64] ASoC: AMD Renoir - add DMI entry for Lenovo ThinkPad X395
+    - ASoC: dapm: remove widget from dirty list on free
+    - [x86] hyperv: check cpu mask after interrupt has been disabled
+    - drm/amdgpu: add green_sardine device id (v2)
+    - drm/amdgpu: fix DRM_INFO flood if display core is not supported (bug
+      210921)
+    - drm/amdgpu: add new device id for Renior
+    - [x86] drm/i915: Allow the sysadmin to override security mitigations
+    - [x86] drm/i915/gt: Limit VFE threads based on GT
+    - [x86] drm/i915/backlight: fix CPU mode backlight takeover on LPT
+    - [armhf] drm/bridge: sii902x: Refactor init code into separate function
+    - dt-bindings: display: sii902x: Add supply bindings
+    - [armhf] drm/bridge: sii902x: Enable I/O and core VCC supplies if present
+    - tracing/kprobes: Do the notrace functions check without kprobes on
+      ftrace
+    - tools/bootconfig: Add tracing_on support to helper scripts
+    - ext4: use IS_ERR instead of IS_ERR_OR_NULL and set inode null when
+      IS_ERR
+    - ext4: fix wrong list_splice in ext4_fc_cleanup
+    - ext4: fix bug for rename with RENAME_WHITEOUT
+    - cifs: check pointer before freeing
+    - cifs: fix interrupted close commands
+    - [riscv64] Drop a duplicated PAGE_KERNEL_EXEC
+    - [riscv64] return -ENOSYS for syscall -1
+    - [riscv64] Fixup CONFIG_GENERIC_TIME_VSYSCALL
+    - [mips*] fix Section mismatch in reference
+    - [mips*] lib: uncached: fix non-standard usage of variable 'sp'
+    - [mips*] boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB
+    - [mips*] Fix malformed NT_FILE and NT_SIGINFO in 32bit coredumps
+    - [mips*] relocatable: fix possible boot hangup with KASLR enabled
+    - RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd()
+    - ACPI: scan: Harden acpi_device_add() against device ID overflows
+    - xen/privcmd: allow fetching resource sizes
+    - mm/vmalloc.c: fix potential memory leak
+    - mm/hugetlb: fix potential missing huge page size info
+    - mm/process_vm_access.c: include compat.h
+    - dm raid: fix discard limits for raid1
+    - dm snapshot: flush merged data before committing metadata
+    - dm integrity: fix flush with external metadata device
+    - dm integrity: fix the maximum number of arguments
+    - dm crypt: use GFP_ATOMIC when allocating crypto requests from softirq
+    - dm crypt: do not wait for backlogged crypto request completion in
+      softirq
+    - dm crypt: do not call bio_endio() from the dm-crypt tasklet
+    - dm crypt: defer decryption to a tasklet if interrupts disabled
+    - r8152: Add Lenovo Powered USB-C Travel Hub
+    - btrfs: tree-checker: check if chunk item end overflows
+    - ext4: don't leak old mountpoint samples
+    - io_uring: don't take files/mm for a dead task
+    - io_uring: drop mm and files after task_work_run
+    - ath11k: fix crash caused by NULL rx_channel
+    - netfilter: ipset: fixes possible oops in mtype_resize
+    - ath11k: qmi: try to allocate a big block of DMA memory first
+    - btrfs: fix async discard stall
+    - btrfs: merge critical sections of discard lock in workfn
+    - btrfs: fix transaction leak and crash after RO remount caused by qgroup
+      rescan
+    - ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram
+    - [arm64,armhf] hwmon: (pwm-fan) Ensure that calculation doesn't discard
+      big period values
+    - spi: fix the divide by 0 error when calculating xfer waiting time
+    - io_uring: drop file refs after task cancel
+    - bfq: Fix computation of shallow depth
+    - misdn: dsp: select CONFIG_BITREVERSE
+    - net: ethernet: fs_enet: Add missing MODULE_LICENSE
+    - nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN
+    - nvme: avoid possible double fetch in handling CQE
+    - nvmet-rdma: Fix list_del corruption on queue establishment failure
+    - drm/amdgpu: fix a GPU hang issue when remove device
+    - drm/amdgpu: fix potential memory leak during navi12 deinitialization
+    - [amd64] iommu/vt-d: Fix lockdep splat in sva bind()/unbind()
+    - ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI
+    - [arm64] drm/msm: Call msm_init_vram before binding the gpu
+    - poll: fix performance regression due to out-of-line __put_user()
+    - rcu-tasks: Move RCU-tasks initialization to before early_initcall()
+    - bpf: Simplify task_file_seq_get_next()
+    - bpf: Save correct stopping point in file seq iteration
+    - nvme-fc: avoid calling _nvme_fc_abort_outstanding_ios from interrupt
+      context
+    - [amd64] iommu/vt-d: Update domain geometry in iommu_ops.at(de)tach_dev
+    - net/mlx5: Fix passing zero to 'PTR_ERR'
+    - net/mlx5: E-Switch, fix changing vf VLANID
+    - blk-mq-debugfs: Add decode for BLK_MQ_F_TAG_HCTX_SHARED
+    - mm: fix clear_refs_write locking
+    - mm: don't play games with pinned pages in clear_page_refs
+    - mm: don't put pinned pages into the swap cache
+    - perf intel-pt: Fix 'CPU too large' error
+    - dump_common_audit_data(): fix racy accesses to ->d_name
+    - [x86] ASoC: Intel: fix error code cnl_set_dsp_D0()
+    - nvmet-rdma: Fix NULL deref when setting pi_enable and traddr INADDR_ANY
+    - nvme: don't intialize hwmon for discovery controllers
+    - nvme-tcp: fix possible data corruption with bio merges
+    - nvme-tcp: Fix warning with CONFIG_DEBUG_PREEMPT
+    - NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock
+    - pNFS: We want return-on-close to complete when evicting the inode
+    - pNFS: Mark layout for return if return-on-close was not sent
+    - pNFS: Stricter ordering of layoutget and layoutreturn
+    - NFS: Adjust fs_context error logging
+    - NFS/pNFS: Don't call pnfs_free_bucket_lseg() before removing the request
+    - NFS/pNFS: Don't leak DS commits in pnfs_generic_retry_commit()
+    - NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter
+    - NFS: nfs_delegation_find_inode_server must first reference the
+      superblock
+    - NFS: nfs_igrab_and_active must first reference the superblock
+    - scsi: ufs: Fix possible power drain during system suspend
+    - ext4: fix superblock checksum failure when setting password salt
+    - RDMA/restrack: Don't treat as an error allocation ID wrapping
+    - [amd64] RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp
+    - bnxt_en: Improve stats context resource accounting with RDMA driver
+      loaded.
+    - RDMA/mlx5: Fix wrong free of blue flame register on error
+    - IB/mlx5: Fix error unwinding when set_has_smi_cap fails
+    - umount(2): move the flag validity checks first
+    - [x86] drm/i915/dsi: Use unconditional msleep for the panel_on_delay when
+      there is no reset-deassert MIPI-sequence
+    - [x86] drm/i915/icl: Fix initing the DSI DSC power refcount during HW
+      readout
+    - [x86] drm/i915/gt: Restore clear-residual mitigations for Ivybridge,
+      Baytrail
+    - mm, slub: consider rest of partial list if acquire_slab() fails
+    - [riscv64] Trace irq on only interrupt is enabled
+    - [amd64] iommu/vt-d: Fix unaligned addresses for
+      intel_flush_svm_range_dev()
+    - net: sunrpc: interpret the return value of kstrtou32 correctly
+    - dm: eliminate potential source of excessive kernel log noise
+    - ALSA: fireface: Fix integer overflow in transmit_midi_msg()
+    - ALSA: firewire-tascam: Fix integer overflow in midi_port_work()
+    - netfilter: conntrack: fix reading nf_conntrack_buckets
+    - netfilter: nf_nat: Fix memleak in nf_nat_init
+
+  [ Aurelien Jarno ]
+  * Ignore ABI change for dfltcc_* symbols.
+  * [riscv64] PCI: Enable PCI_HOST_GENERIC.
+
+  [ Salvatore Bonaccorso ]
+  * Bump ABI to 2
+  * [rt] Update to 5.10.8-rt24
+
+  [ Bastian Blank ]
+  * [arm64] Enable support for Marvell EBU SoC.
+  * Enable remaining NET_ACT_*.
+  * Enable ACPI_HMAT, EFI_SOFT_RESERVE.
+  * Enable remaining THERMAL_GOV_*, ENERGY_MODEL.
+  * Set SCTP_DEFAULT_COOKIE_HMAC_SHA1.
+  * [x86] Enable SERIAL_8250_LPSS. (closes: #973985)
+  * Enable CRYPTO_DEV_VIRTIO.
+  * Enable DRM_AMD_DC_*.
+  * [arm] Enable CRYPTO_NHPOLY1305_NEON. (closes: #980214)
+  * [arm64] Enable MFD_AXP20X_I2C. (closes: #980114)
+  * [amd64] Enable SENSORS_AMD_ENERGY. (closes: #970699)
+  * [cloud] Enable SUSPEND. (closes: #964845)
+  * [armhf] Enable GPIO_PCA953X_IRQ. (closes: #972221)
+  * [arm] Enable DRM_VC4, DRM_VC4_HDMI_CEC. (closes: #956951)
+  * [x86] Enable STMMAC_ETH, DWMAC_INTEL. (closes: #980180)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 20 Jan 2021 17:40:43 +0100
+
+linux (5.10.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.5
+    - net/sched: sch_taprio: reset child qdiscs before freeing them
+    - ethtool: fix error paths in ethnl_set_channels()
+    - ethtool: fix string set id check
+    - md/raid10: initialize r10_bio->read_slot before use.
+    - io_uring: close a small race gap for files cancel
+    - jffs2: Allow setting rp_size to zero during remounting
+    - jffs2: Fix NULL pointer dereference in rp_size fs option parsing
+    - opp: fix memory leak in _allocate_opp_table
+    - opp: Call the missing clk_put() on error
+    - scsi: block: Fix a race in the runtime power management code
+    - mm/hugetlb: fix deadlock in hugetlb_cow error path
+    - mm: memmap defer init doesn't work as expected
+    - [s390x] lib/zlib: fix inflating zlib streams on s390
+    - io_uring: don't assume mm is constant across submits
+    - io_uring: use bottom half safe lock for fixed file data
+    - io_uring: add a helper for setting a ref node
+    - io_uring: fix io_sqe_files_unregister() hangs
+    - uapi: move constants from <linux/kernel.h> to <linux/const.h>
+    - tools headers UAPI: Sync linux/const.h with the kernel headers
+    - cgroup: Fix memory leak when parsing multiple source parameters
+    - [s390x] zlib: move EXPORT_SYMBOL() and MODULE_LICENSE() out of
+      dfltcc_syms.c
+    - Bluetooth: hci_h5: close serdev device and free hu in h5_close
+    - fbcon: Disable accelerated scrolling
+    - reiserfs: add check for an invalid ih_entry_count
+    - [x86] misc: vmw_vmci: fix kernel info-leak by initializing dbells in
+      vmci_ctx_get_chkpt_doorbells()
+    - media: gp8psk: initialize stats at power control logic
+    - f2fs: fix shift-out-of-bounds in sanity_check_raw_super()
+    - ALSA: seq: Use bool for snd_seq_queue internal flags
+    - ALSA: rawmidi: Access runtime->avail always in spinlock
+    - bfs: don't use WARNING: string when it's just info.
+    - ext4: check for invalid block size early when mounting a file system
+    - fcntl: Fix potential deadlock in send_sig{io, urg}()
+    - io_uring: check kthread stopped flag when sq thread is unparked
+    - [arm64,armhf] rtc: sun6i: Fix memleak in sun6i_rtc_clk_init
+    - module: set MODULE_STATE_GOING state when a module fails to load
+    - quota: Don't overflow quota file offsets
+    - [arm64,armhf] rtc: pl031: fix resource leak in pl031_probe
+    - i3c master: fix missing destroy_workqueue() on error in
+      i3c_master_register
+    - NFSv4: Fix a pNFS layout related use-after-free race when freeing the
+      inode
+    - f2fs: avoid race condition for shrinker count
+    - f2fs: fix race of pending_pages in decompression
+    - module: delay kobject uevent until after module init call
+    - [powerpc*] 64: irq replay remove decrementer overflow check
+    - fs/namespace.c: WARN if mnt_count has become negative
+    - ceph: fix inode refcount leak when ceph_fill_inode on non-I_NEW inode
+      fails
+    - tick/sched: Remove bogus boot "safety" check
+    - [s390x] always clear kernel stack backchain before calling functions
+    - io_uring: remove racy overflow list fast checks
+    - ALSA: pcm: Clear the full allocated memory at hw_params
+    - dm verity: skip verity work if I/O error when system is shutting down
+    - ext4: avoid s_mb_prefetch to be zero in individual scenarios
+    - device-dax: Fix range release
+
+  [ Luca Boccassi ]
+  * [amd64,arm64] Generate BTF debug info: (partially closes: #973870)
+    - Enable DEBUG_INFO_BTF.
+    - Build-Depend on dwarves >= 1.16~.
+
+  [ Aurelien Jarno ]
+  * usbip: depend on usb.ids instead of usbutils.
+  * [mips*] Fix build with binutils configured with
+    --enable-mips-fix-loongson3-llsc=yes.
+
+  [ Salvatore Bonaccorso ]
+  * Bluetooth: Fix attempting to set RPA timeout when unsupported
+    (Closes: #972968)
+  * net: cdc_ncm: correct overhead in delayed_ndp_size (Closes: #970736)
+  * mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start
+    (CVE-2020-36158)
+  * [rt] Update to 5.10.4-rt22
+  * X.509: Fix crash caused by NULL pointer (Closes: #979496)
+  * Revert "drm/amd/display: Fix memory leaks in S3 resume"
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 09 Jan 2021 21:25:11 +0100
+
+linux (5.10.4-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.3
+    - net: ipconfig: Avoid spurious blank lines in boot log
+    - [x86] split-lock: Avoid returning with interrupts enabled
+    - exfat: Avoid allocating upcase table using kcalloc()
+    - [arm64] soc/tegra: fuse: Fix index bug in get_process_id
+    - USB: serial: option: add interface-number sanity check to flag handling
+    - USB: gadget: f_acm: add support for SuperSpeed Plus
+    - USB: gadget: f_midi: setup SuperSpeed Plus descriptors
+    - usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
+    - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
+    - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING
+      flag to imx6ul
+    - [armhf] dts: exynos: fix roles of USB 3.0 ports on Odroid XU
+    - [armhf] dts: exynos: fix USB 3.0 pins supply being turned off on Odroid
+      XU
+    - f2fs: fix to seek incorrect data offset in inline data file
+    - f2fs: init dirty_secmap incorrectly
+    - scsi: megaraid_sas: Check user-provided offsets
+    - [arm64,x86] HID: i2c-hid: add Vero K147 to descriptor override
+    - serial_core: Check for port state when tty is in error state
+    - fscrypt: remove kernel-internal constants from UAPI header
+    - fscrypt: add fscrypt_is_nokey_name()
+    - ubifs: prevent creating duplicate encrypted filenames
+    - ext4: prevent creating duplicate encrypted filenames
+    - f2fs: prevent creating duplicate encrypted filenames
+    - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
+    - quota: Sanity-check quota file headers on load
+    - fs: quota: fix array-index-out-of-bounds bug by passing correct argument
+      to vfs_cleanup_quota_inode()
+    - media: msi2500: assign SPI bus number dynamically
+    - crypto: af_alg - avoid undefined behavior accessing salg_name
+    - nl80211: validate key indexes for cfg80211_registered_device
+    - md: fix a warning caused by a race between concurrent md_ioctl()s
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.4
+    - [x86] hwmon: (k10temp) Remove support for displaying voltage and current
+      on Zen CPUs
+    - [x86] drm/gma500: fix double free of gma_connector
+    - [arm64] rtc: pcf2127: fix pcf2127_nvmem_read/write() returns
+    - selinux: fix error initialization in inode_doinit_with_dentry()
+    - [armhf] dts: aspeed: s2600wf: Fix VGA memory region location
+    - RDMA/core: Fix error return in _ib_modify_qp()
+    - RDMA/rxe: Compute PSN windows correctly
+    - [x86] /mm/ident_map: Check for errors from ident_pud_init()
+    - [armel,armhf] p2v: fix handling of LPAE translation in BE mode
+    - [x86] apic: Fix x2apic enablement without interrupt remapping
+    - sched/deadline: Fix sched_dl_global_validate()
+    - sched: Reenable interrupts in do_sched_yield()
+    - [arm64] crypto: inside-secure - Fix sizeof() mismatch
+    - [arm64] ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified
+      mode
+    - drm/msm: Add missing stub definition
+    - [armhf] dts: aspeed: tiogapass: Remove vuart
+    - [powerpc*] 64: Set up a kernel stack for secondaries before
+      cpu_restore()
+    - f2fs: call f2fs_get_meta_page_retry for nat page
+    - RDMA/mlx5: Fix corruption of reg_pages in mlx5_ib_rereg_user_mr()
+    - [arm64] drm/msm/dp: DisplayPort PHY compliance tests fixup
+    - [arm64] drm/msm/dsi_pll_7nm: restore VCO rate during restore_state
+    - [arm64] drm/msm/dsi_pll_10nm: restore VCO rate during restore_state
+    - [arm64] drm/msm/dpu: fix clock scaling on non-sc7180 board
+    - spi: spi-mem: fix reference leak in spi_mem_access_start
+    - scsi: aacraid: Improve compat_ioctl handlers
+    - ASoC: pcm: DRAIN support reactivation
+    - [armhf] drm/bridge: tpd12s015: Fix irq registering in tpd12s015_probe
+    - [arm64] crypto: arm64/poly1305-neon - reorder PAC authentication with SP
+      update
+    - [arm64] crypto: caam - fix printing on xts fallback allocation error
+      path
+    - selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling
+    - nl80211/cfg80211: fix potential infinite loop
+    - [armhf] spi: stm32: fix reference leak in stm32_spi_resume
+    - [x86] mce: Correct the detection of invalid notifier priorities
+    - drm/edid: Fix uninitialized variable in drm_cvt_modes()
+    - ath11k: Initialize complete alpha2 for regulatory change
+    - ath11k: Fix number of rules in filtered ETSI regdomain
+    - ath11k: fix wmi init configuration
+    - brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free}
+    - [arm64,armhf] drm/panel: simple: Add flags to boe_nv133fhm_n61
+    - Bluetooth: Fix null pointer dereference in hci_event_packet()
+    - Bluetooth: Fix: LL PRivacy BLE device fails to connect
+    - Bluetooth: hci_h5: fix memory leak in h5_close
+    - [armhf] spi: stm32-qspi: fix reference leak in stm32 qspi operations
+    - [armhf] spi: spi-ti-qspi: fix reference leak in ti_qspi_setup
+    - [arm64] spi: tegra20-slink: fix reference leak in slink ops of tegra20
+    - [arm64,armhf] spi: tegra20-sflash: fix reference leak in
+      tegra_sflash_resume
+    - [arm64,armhf] spi: tegra114: fix reference leak in tegra spi ops
+    - [armhf] spi: imx: fix reference leak in two imx operations
+    - [arm64] ASoC: qcom: common: Fix refcounting in qcom_snd_parse_of()
+    - ath11k: Handle errors if peer creation fails
+    - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure
+    - [arm64] drm/msm/a6xx: Clear shadow on suspend
+    - [arm64] drm/msm/a5xx: Clear shadow on suspend
+    - [arm64] drm/msm/dp: return correct connection status after suspend
+    - [arm64] drm/msm/dp: skip checking LINK_STATUS_UPDATED bit
+    - [arm64] drm/msm/dp: do not notify audio subsystem if sink doesn't
+      support audio
+    - virtiofs fix leak in setup
+    - RDMa/mthca: Work around -Wenum-conversion warning
+    - [armhf] soc: ti: omap-prm: Do not check rstst bit on deassert if already
+      deasserted
+    - [x86] crypto: qat - fix status check in qat_hal_put_rel_rd_xfer()
+    - drm/udl: Fix missing error code in udl_handle_damage()
+    - [x86] media: tm6000: Fix sizeof() mismatches
+    - media: v4l2-fwnode: Return -EINVAL for invalid bus-type
+    - media: v4l2-fwnode: v4l2_fwnode_endpoint_parse caller must init vep
+      argument
+    - [arm64,armhf] media: cedrus: fix reference leak in
+      cedrus_start_streaming
+    - [arm64] media: venus: core: change clk enable and disable order in
+      resume and suspend
+    - [arm64] media: venus: core: vote for video-mem path
+    - [arm64] media: venus: core: vote with average bandwidth and peak
+      bandwidth as zero
+    - RDMA/cma: Add missing error handling of listen_id
+    - scsi: core: Fix VPD LUN ID designator priorities
+    - [arm64] media: venus: put dummy vote on video-mem path after last
+      session release
+    - media: solo6x10: fix missing snd_card_free in error handling case
+    - [arm64,armhf] mmc: sdhci: tegra: fix wrong unit with busy_timeout
+    - [armhf] drm/omap: dmm_tiler: fix return error code in omap_dmm_probe()
+    - [arm64] drm/meson: Free RDMA resources after tearing down DRM
+    - [arm64] drm/meson: Unbind all connectors on module removal
+    - [arm64] drm/meson: dw-hdmi: Register a callback to disable the regulator
+    - [arm64] drm/meson: dw-hdmi: Ensure that clocks are enabled before
+      touching the TOP registers
+    - [amd64] iommu/vt-d: include conditionally on CONFIG_INTEL_IOMMU_SVM
+    - Input: ads7846 - fix race that causes missing releases
+    - Input: ads7846 - fix integer overflow on Rt calculation
+    - Input: ads7846 - fix unaligned access on 7845
+    - bus: mhi: core: Remove double locking from mhi_driver_remove()
+    - bus: mhi: core: Fix null pointer access when parsing MHI configuration
+    - [powerpc*] Avoid broken GCC __attribute__((optimize))
+    - [powerpc*] feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32
+    - [armhf] dts: tacoma: Fix node vs reg mismatch for flash memory
+    - Revert "powerpc/pseries/hotplug-cpu: Remove double free in error path"
+    - [powerpc*] powernv/sriov: fix unsigned int win compared to less than
+      zero
+    - [x86] EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId
+    - scsi: ufs: Avoid to call REQ_CLKS_OFF to CLKS_OFF
+    - scsi: ufs: Fix clkgating on/off
+    - rcu: Allow rcu_irq_enter_check_tick() from NMI
+    - rcu,ftrace: Fix ftrace recursion
+    - rcu/tree: Defer kvfree_rcu() allocation to a clean context
+    - spi: fix resource leak for drivers without .remove callback
+    - [arm64] drm/meson: dw-hdmi: Disable clocks on driver teardown
+    - [arm64] drm/meson: dw-hdmi: Enable the iahb clock early enough
+    - PCI: Disable MSI for Pericom PCIe-USB adapter
+    - [arm64] PCI: brcmstb: Initialize "tmp" before use
+    - [arm64] dts: qcom: sm8250: correct compatible for sm8250-mtp
+    - [armhf] Input: omap4-keypad - fix runtime PM error handling
+    - ath11k: Fix the rx_filter flag setting for peer rssi stats
+    - RDMA/cxgb4: Validate the number of CQEs
+    - [arm64] pinctrl: sunxi: fix irq bank map for the Allwinner A100 pin
+      controller
+    - memstick: fix a double-free bug in memstick_check
+    - brcmfmac: fix error return code in brcmf_cfg80211_connect()
+    - orinoco: Move context allocation after processing the skb
+    - rsi: fix error return code in rsi_reset_card()
+    - [arm64] dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
+    - [armel] leds: netxbig: add missing put_device() call in
+      netxbig_leds_get_of_pdata()
+    - RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind
+    - media: siano: fix memory leak of debugfs members in smsdvb_hotplug
+    - [x86] platform/x86: mlx-platform: Remove PSU EEPROM from default
+      platform configuration
+    - [x86] platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x
+      platform configuration
+    - [arm64] RDMA/hns: Only record vlan info for HIP08
+    - [arm64] RDMA/hns: Fix missing fields in address vector
+    - [arm64] RDMA/hns: Avoid setting loopback indicator when smac is same as
+      dmac
+    - RDMA/core: Track device memory MRs
+    - [armhf] HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
+    - [arm64] dts: armada-3720-turris-mox: update ethernet-phy handle name
+    - [arm64] dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc
+    - [x86] power: supply: max17042_battery: Fix current_{avg,now} hiding with
+      no current sense
+    - [x86] power: supply: bq24190_charger: fix reference leak
+    - genirq/irqdomain: Don't try to free an interrupt that has no mapping
+    - [arm64] dts: freescale: sl28: combine SPI MTD partitions
+    - [arm64,armhf] phy: tegra: xusb: Fix usb_phy device driver field
+    - [arm64] dts: qcom: c630: Polish i2c-hid devices
+    - [arm64] dts: qcom: c630: Fix pinctrl pins properties
+    - PCI: Bounds-check command-line resource alignment requests
+    - PCI: Fix overflow in command-line resource alignment requests
+    - [arm64] dts: meson: fix spi-max-frequency on Khadas VIM2
+    - [arm64] soc: amlogic: canvas: add missing put_device() call in
+      meson_canvas_get()
+    - [arm64] scsi: hisi_sas: Fix up probe error handling for v3 hw
+    - scsi: pm80xx: Do not sleep in atomic context
+    - [arm64] spi: spi-fsl-dspi: Use max_native_cs instead of num_chipselect
+      to set SPI_MCR
+    - [arm64] RDMA/hns: Fix 0-length sge calculation error
+    - [arm64] RDMA/hns: Bugfix for calculation of extended sge
+    - soundwire: master: use pm_runtime_set_active() on add
+    - [x86] platform/x86: dell-smbios-base: Fix error return code in
+      dell_smbios_init
+    - [x86] ASoC: Intel: Boards: tgl_max98373: update TDM slot_width
+    - ath11k: Don't cast ath11k_skb_cb to ieee80211_tx_info.control
+    - ath11k: Reset ath11k_skb_cb before setting new flags
+    - ath11k: Fix an error handling path
+    - ath10k: Fix the parsing error in service available event
+    - ath10k: Fix an error handling path
+    - ath10k: Release some resources in an error handling path
+    - SUNRPC: rpc_wake_up() should wake up tasks in the correct order
+    - NFSv4.2: condition READDIR's mask for security label based on LSM state
+    - SUNRPC: xprt_load_transport() needs to support the netid "rdma6"
+    - NFSv4: Fix the alignment of page data in the getdeviceinfo reply
+    - net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs'
+    - lockd: don't use interval-based rebinding over TCP
+    - NFS: switch nfsiod to be an UNBOUND workqueue.
+    - vfio-pci: Use io_remap_pfn_range() for PCI IO memory
+    - f2fs: fix double free of unicode map
+    - media: tvp5150: Fix wrong return value of tvp5150_parse_dt()
+    - media: saa7146: fix array overflow in vidioc_s_audio()
+    - [powerpc*] perf: Fix crash with is_sier_available when pmu is not set
+    - [powerpc*] 64: Fix an EMIT_BUG_ENTRY in head_64.S
+    - [powerpc*] xmon: Fix build failure for 8xx
+    - [powerpc*] perf: Fix to update radix_scope_qual in power10
+    - [powerpc*] perf: Update the PMU group constraints for l2l3 events in
+      power10
+    - [powerpc*] perf: Fix the PMU group constraints for threshold events in
+      power10
+    - [armel,armhf] clocksource/drivers/orion: Add missing
+      clk_disable_unprepare() on error path
+    - [arm64] mte: fix prctl(PR_GET_TAGGED_ADDR_CTRL) if TCF0=NONE
+    - bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
+    - [arm64,armhf] soc: rockchip: io-domain: Fix error return code in
+      rockchip_iodomain_probe()
+    - memstick: r592: Fix error return in r592_probe()
+    - [mips64el] Don't round up kernel sections size for memblock_add()
+    - mt76: dma: fix possible deadlock running mt76_dma_cleanup
+    - net/mlx5: Properly convey driver version to firmware
+    - mt76: fix memory leak if device probing fails
+    - dm ioctl: fix error return code in target_message
+    - [arm64] drm/msm: a5xx: Make preemption reset case reentrant
+    - [arm64,armhf] clocksource/drivers/arm_arch_timer: Use stable count
+      reader in erratum sne
+    - [arm64,armhf] clocksource/drivers/arm_arch_timer: Correct fault
+      programming of CNTKCTL_EL1.EVNTI
+    - [m68k] macintosh/adb-iop: Always wait for reply message from IOP
+    - [m68k] macintosh/adb-iop: Send correct poll command
+    - Bluetooth: btusb: Add the missed release_firmware() in
+      btusb_mtk_setup_firmware()
+    - Bluetooth: btmtksdio: Add the missed release_firmware() in
+      mtk_setup_firmware()
+    - Bluetooth: sco: Fix crash when using BT_SNDMTU/BT_RCVMTU option
+    - Bluetooth: btusb: Fix detection of some fake CSR controllers with a
+      bcdDevice val of 0x0134
+    - [x86] platform/x86: intel-vbtn: Fix SW_TABLET_MODE always reporting 1 on
+      some HP x360 models
+    - adm8211: fix error return code in adm8211_probe()
+    - mtd: spi-nor: sst: fix BPn bits for the SST25VF064C
+    - mtd: spi-nor: ignore errors in spi_nor_unlock_all()
+    - mtd: spi-nor: atmel: remove global protection flag
+    - mtd: spi-nor: atmel: fix unlock_all() for AT25FS010/040
+    - [arm64] dts: meson: fix PHY deassert timing requirements
+    - [armhf] dts: meson: fix PHY deassert timing requirements
+    - [arm64] dts: meson: g12a: x96-max: fix PHY deassert timing requirements
+    - [arm64] clk: fsl-sai: fix memory leak
+    - scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe
+    - scsi: pm80xx: Fix error return in pm8001_pci_probe()
+    - scsi: iscsi: Fix inappropriate use of put_device()
+    - seq_buf: Avoid type mismatch for seq_buf_init
+    - [x86] scsi: fnic: Fix error return code in fnic_probe()
+    - [x86] platform/x86: mlx-platform: Fix item counter assignment for
+      MSN2700, MSN24xx systems
+    - [x86] platform/x86: mlx-platform: Fix item counter assignment for
+      MSN2700/ComEx system
+    - [armel,armhf] 9030/1: entry: omit FP emulation for UND exceptions taken
+      in kernel mode
+    - [powerpc*] pseries/hibernation: drop pseries_suspend_begin() from
+      suspend ops
+    - [powerpc*] pseries/hibernation: remove redundant cacheinfo update
+    - [powerpc*] powermac: Fix low_sleep_handler with CONFIG_VMAP_STACK
+    - [x86] ASoC: amd: change clk_get() to devm_clk_get() and add missed
+      checks
+    - [x86] ASoC: max98390: Fix error codes in max98390_dsm_init()
+    - [powerpc*] mm: sanity_check_fault() should work for all, not only BOOK3S
+    - [armhf] usb: ehci-omap: Fix PM disable depth umbalance in
+      ehci_hcd_omap_probe
+    - speakup: fix uninitialized flush_lock
+    - nfsd: Fix message level for normal termination
+    - NFSD: Fix 5 seconds delay when doing inter server copy
+    - nfs_common: need lock during iterate through the list
+    - [x86] kprobes: Restore BTF if the single-stepping is cancelled
+    - scsi: qla2xxx: Fix FW initialization error on big endian machines
+    - scsi: qla2xxx: Fix N2N and NVMe connect retry failure
+    - [arm64,armhf] platform/chrome: cros_ec_spi: Don't overwrite spi::mode
+    - [arm64] bus: fsl-mc: add back accidentally dropped error check
+    - [arm64] bus: fsl-mc: fix error return code in fsl_mc_object_allocate()
+    - [armhf] fsi: Aspeed: Add mutex to protect HW access
+    - [s390x] cio: fix use-after-free in ccw_device_destroy_console
+    - iwlwifi: dbg-tlv: fix old length in is_trig_data_contained()
+    - iwlwifi: mvm: hook up missing RX handlers
+    - erofs: avoid using generic_block_bmap
+    - [powerpc*] sstep: Emulate prefixed instructions only when
+      CPU_FTR_ARCH_31 is set
+    - [powerpc*] sstep: Cover new VSX instructions under CONFIG_VSX
+    - ALSA: hda/hdmi: fix silent stream for first playback to DP
+    - RDMA/core: Do not indicate device ready when device enablement fails
+    - RDMA/uverbs: Fix incorrect variable type
+    - [arm64,armhf] clk: tegra: Fix duplicated SE clock entry
+    - [armhf] mtd: rawnand: gpmi: fix reference count leak in gpmi ops
+    - [armhf] mtd: rawnand: gpmi: Fix the random DMA timeout issue
+    - samples/bpf: Fix possible hang in xdpsock with multiple threads
+    - fs: Handle I_DONTCACHE in iput_final() instead of generic_drop_inode()
+    - mac80211: don't set set TDLS STA bandwidth wider than possible
+    - mac80211: fix a mistake check for rx_stats update
+    - [arm64] irqchip/alpine-msi: Fix freeing of interrupts on allocation
+      error path
+    - [arm64] RDMA/hns: Limit the length of data copied between kernel and
+      userspace
+    - [arm64] RDMA/hns: Normalization the judgment of some features
+    - [arm64] RDMA/hns: Do shift on traffic class when using RoCEv2
+    - gpiolib: irq hooks: fix recursion in gpiochip_irq_unmask
+    - ath11k: Fix incorrect tlvs in scan start command
+    - watchdog: Fix potential dereferencing of null pointer
+    - sunrpc: fix xs_read_xdr_buf for partial pages receive
+    - RDMA/mlx5: Fix MR cache memory leak
+    - RDMA/cma: Don't overwrite sgid_attr after device is released
+    - [powerpc*] perf: Fix Threshold Event Counter Multiplier width for P10
+    - [powerpc*] ps3: use dma_mapping_error()
+    - mm/gup: reorganize internal_get_user_pages_fast()
+    - mm/gup: prevent gup_fast from racing with COW during fork
+    - mm/gup: combine put_compound_head() and unpin_user_page()
+    - mm: memcg/slab: fix return of child memcg objcg for root memcg
+    - mm: memcg/slab: fix use after free in obj_cgroup_charge
+    - mm/rmap: always do TTU_IGNORE_ACCESS
+    - [sparc64] fix handling of page table constructor failure
+    - mm/vmalloc: Fix unlock order in s_stop()
+    - mm/vmalloc.c: fix kasan shadow poisoning size
+    - mm,memory_failure: always pin the page in madvise_inject_error
+    - hugetlb: fix an error code in hugetlb_reserve_pages()
+    - mm: don't wake kswapd prematurely when watermark boosting is disabled
+    - proc: fix lookup in /proc/net subdirectories after setns(2)
+    - lan743x: fix rx_napi_poll/interrupt ping-pong
+    - ice, xsk: clear the status bits for the next_to_use descriptor
+    - i40e, xsk: clear the status bits for the next_to_use descriptor
+    - [arm64] dpaa2-eth: fix the size of the mapped SGT buffer
+    - [arm64] net: bcmgenet: Fix a resource leak in an error handling path in
+      the probe functin
+    - [armhf] net: allwinner: Fix some resources leak in the error handling
+      path of the probe and in the remove function
+    - NFS/pNFS: Fix a typo in ff_layout_resend_pnfs_read()
+    - devlink: use _BITUL() macro instead of BIT() in the UAPI header
+    - libnvdimm/label: Return -ENXIO for no slot in __blk_label_update
+    - [powerpc*] 32s: Fix cleanup_cpu_mmu_context() compile bug
+    - [arm64] watchdog: qcom: Avoid context switch in restart handler
+    - [armhf] clk: ti: Fix memleak in ti_fapll_synth_setup
+    - [armhf] pwm: imx27: Fix overflow for bigger periods
+    - [arm64,armhf] pwm: sun4i: Remove erroneous else branch
+    - io_uring: cancel only requests of current task
+    - perf record: Fix memory leak when using '--user-regs=?' to list
+      registers
+    - qlcnic: Fix error code in probe
+    - nfp: move indirect block cleanup to flower app stop callback
+    - virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed()
+    - virtio_net: Fix error code in probe()
+    - virtio_ring: Fix two use after free bugs
+    - vhost scsi: fix error return code in vhost_scsi_set_endpoint()
+    - epoll: check for events when removing a timed out thread from the wait
+      queue
+    - [arm*] clk: bcm: dvp: Add MODULE_DEVICE_TABLE()
+    - [armhf] clk: s2mps11: Fix a resource leak in error handling paths in the
+      probe function
+    - [arm64,armhf] clk: sunxi-ng: Make sure divider tables have sentinel
+    - [powerpc*] smp: Add __init to init_big_cores()
+    - [armel,armhf] 9044/1: vfp: use undef hook for VFP support detection
+    - [armel,armhf] 9036/1: uncompress: Fix dbgadtb size parameter name
+    - perf probe: Fix memory leak when synthesizing SDT probes
+    - io_uring: fix racy IOPOLL flush overflow
+    - io_uring: cancel reqs shouldn't kill overflow list
+    - proc mountinfo: make splice available again
+    - io_uring: fix io_cqring_events()'s noflush
+    - io_uring: fix racy IOPOLL completions
+    - io_uring: always let io_iopoll_complete() complete polled io
+    - vfio/pci: Move dummy_resources_list init in vfio_pci_probe()
+    - media: gspca: Fix memory leak in probe
+    - io_uring: fix io_wqe->work_list corruption
+    - io_uring: fix 0-iov read buffer select
+    - io_uring: hold uring_lock while completing failed polled io in
+      io_wq_submit_work()
+    - io_uring: fix ignoring xa_store errors
+    - io_uring: fix double io_uring free
+    - io_uring: make ctx cancel on exit targeted to actual ctx
+    - [armhf] media: sunxi-cir: ensure IR is handled when it is continuous
+    - media: netup_unidvb: Don't leak SPI master in probe error path
+    - [x86] Input: cyapa_gen6 - fix out-of-bounds stack access
+    - ALSA: hda/ca0132 - Change Input Source enum strings.
+    - [amd64,arm64] ACPI: NFIT: Fix input validation of bus-family
+    - PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup()
+    - Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources
+      walks"
+    - ACPI: PNP: compare the string length in the matching_id()
+    - ALSA: hda: Fix regressions on clear and reconfig sysfs
+    - ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg.
+    - ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop
+    - ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256
+    - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255
+    - ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button
+    - ALSA: pcm: oss: Fix a few more UBSAN fixes
+    - ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G
+    - ALSA: hda/realtek: Add quirk for MSI-GP73
+    - ALSA: hda/realtek: Apply jack fixup for Quanta NL3
+    - ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658
+    - ALSA: hda/realtek - Supported Dell fixed type headset
+    - ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO
+      devices
+    - ALSA: usb-audio: Disable sample read check if firmware doesn't give back
+    - ALSA: usb-audio: Add alias entry for ASUS PRIME TRX40 PRO-S
+    - ALSA: core: memalloc: add page alignment for iram
+    - [s390x] smp: perform initial CPU reset also for SMT siblings
+    - [s390x] idle: add missing mt_cycles calculation
+    - [s390x] idle: fix accounting with machine checks
+    - [s390x] dasd: fix hanging device offline processing
+    - [s390x] dasd: prevent inconsistent LCU device data
+    - [s390x] dasd: fix list corruption of pavgroup group list
+    - [s390x] dasd: fix list corruption of lcu list
+    - binder: add flag to clear buffer on txn complete
+    - [x86] ASoC: cx2072x: Fix doubly definitions of Playback and Capture
+      streams
+    - [amd64] ASoC: AMD Renoir - add DMI table to avoid the ACP mic probe
+      (broken BIOS)
+    - [amd64] ASoC: AMD Raven/Renoir - fix the PCI probe (PCI revision)
+    - [x86] staging: comedi: mf6x4: Fix AI end-of-conversion detection
+    - z3fold: simplify freeing slots
+    - z3fold: stricter locking and more careful reclaim
+    - [x86] perf/x86/intel: Add event constraint for
+      CYCLE_ACTIVITY.STALLS_MEM_ANY
+    - [x86] perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake
+    - [x86] perf/x86/intel/lbr: Fix the return type of get_lbr_cycles()
+    - [powerpc*] perf: Exclude kernel samples while counting events in user
+      space.
+    - [x86] cpufreq: intel_pstate: Use most recent guaranteed performance
+      values
+    - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
+    - [x86] EDAC/amd64: Fix PCI component registration
+    - cpuset: fix race between hotplug work and later CPU offline
+    - dyndbg: fix use before null check
+    - USB: serial: mos7720: fix parallel-port state restore
+    - USB: serial: digi_acceleport: fix write-wakeup deadlocks
+    - USB: serial: keyspan_pda: fix dropped unthrottle interrupts
+    - USB: serial: keyspan_pda: fix write deadlock
+    - USB: serial: keyspan_pda: fix stalled writes
+    - USB: serial: keyspan_pda: fix write-wakeup use-after-free
+    - USB: serial: keyspan_pda: fix tx-unthrottle use-after-free
+    - USB: serial: keyspan_pda: fix write unthrottling
+    - btrfs: do not shorten unpin len for caching block groups
+    - btrfs: update last_byte_to_unpin in switch_commit_roots
+    - btrfs: fix race when defragmenting leads to unnecessary IO
+    - ext4: fix an IS_ERR() vs NULL check
+    - ext4: fix a memory leak of ext4_free_data
+    - ext4: fix deadlock with fs freezing and EA inodes
+    - ext4: don't remount read-only with errors=continue on reboot
+    - [riscv64] Fix usage of memblock_enforce_memory_limit
+    - [arm64] KVM: Introduce handling of AArch32 TTBCR2 traps
+    - [x86] KVM: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits
+    - [x86] KVM: SVM: Remove the call to sev_platform_status() during setup
+    - [arm64,armhf] iommu/arm-smmu: Allow implementation specific write_s2cr
+    - [arm64,armhf] iommu/arm-smmu-qcom: Read back stream mappings
+    - [arm64,armhf] iommu/arm-smmu-qcom: Implement S2CR quirk
+    - [armhf] dts: pandaboard: fix pinmux for gpio user button of Pandaboard
+      ES
+    - xprtrdma: Fix XDRBUF_SPARSE_PAGES support
+    - [powerpc*] 32: Fix vmap stack - Properly set r1 before activating MMU on
+      syscall too
+    - [powerpc*] Fix incorrect stw{, ux, u, x} instructions in __set_pte_at
+    - [powerpc*] rtas: Fix typo of ibm,open-errinjct in RTAS filter
+    - [powerpc*] bitops: Fix possible undefined behaviour with fls() and
+      fls64()
+    - [powerpc*] feature: Add CPU_FTR_NOEXECUTE to G2_LE
+    - [powerpc*] xmon: Change printk() to pr_cont()
+    - [powerpc*] 8xx: Fix early debug when SMC1 is relocated
+    - [powerpc*] mm: Fix verification of MMU_FTR_TYPE_44x
+    - [powerpc*] powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU
+    - [powerpc*] powernv/memtrace: Don't leak kernel memory to user space
+    - [powerpc*] powernv/memtrace: Fix crashing the kernel when enabling
+      concurrently
+    - ovl: make ioctl() safe
+    - ceph: fix race in concurrent __ceph_remove_cap invocations
+    - SMB3: avoid confusing warning message on mount to Azure
+    - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot
+      rsp
+    - SMB3.1.1: do not log warning message if server doesn't populate salt
+    - ubifs: wbuf: Don't leak kernel memory to flash
+    - jffs2: Fix GC exit abnormally
+    - jffs2: Fix ignoring mounting options problem during remounting
+    - fsnotify: generalize handle_inode_event()
+    - inotify: convert to handle_inode_event() interface
+    - fsnotify: fix events reported to watching parent and child
+    - jfs: Fix array index bounds check in dbAdjTree (CVE-2020-27815)
+    - [arm64,armhf] drm/panfrost: Fix job timeout handling
+    - [arm64,armhf] drm/panfrost: Move the GPU reset bits outside the timeout
+      handler
+    - [x86] platform/x86: mlx-platform: remove an unused variable
+    - drm/dp_aux_dev: check aux_dev before use in
+      drm_dp_aux_dev_get_by_minor()
+    - [x86] drm/i915: Fix mismatch between misplaced vma check and vma insert
+    - iio: ad_sigma_delta: Don't put SPI transfer buffer on the stack
+    - [arm64,armhf] spi: pxa2xx: Fix use-after-free on unbind
+    - [armhf] spi: gpio: Don't leak SPI master in probe error path
+    - [armel] mtd: parser: cmdline: Fix parsing of part-names with colons
+    - mtd: core: Fix refcounting for unpartitioned MTDs
+    - scsi: qla2xxx: Fix crash during driver load on big endian machines
+    - scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc()
+    - scsi: lpfc: Fix scheduling call while in softirq context in
+      lpfc_unreg_rpi
+    - scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free()
+    - openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT
+    - iio: buffer: Fix demux update
+    - iio: imu: st_lsm6dsx: fix edge-trigger interrupts
+    - iio:light:rpr0521: Fix timestamp alignment and prevent data leak.
+    - iio:light:st_uvis25: Fix timestamp alignment and prevent data leak.
+    - iio:magnetometer:mag3110: Fix alignment and data leak issues.
+    - iio:pressure:mpl3115: Force alignment of buffer
+    - iio:imu:bmi160: Fix too large a buffer.
+    - iio:imu:bmi160: Fix alignment and data leak issues
+    - md/cluster: block reshape with remote resync job
+    - md/cluster: fix deadlock when node is doing resync job
+    - [arm64,armhf] pinctrl: sunxi: Always call chained_irq_{enter, exit} in
+      sunxi_pinctrl_irq_handler
+    - [arm64] clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9
+    - [arm64,armhf] clk: tegra: Do not return 0 on failure
+    - device-dax/core: Fix memory leak when rmmod dax.ko
+    - dma-buf/dma-resv: Respect num_fences when initializing the shared fence
+      list.
+    - driver: core: Fix list corruption after device_del()
+    - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace
+      labels
+    - [x86] platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha
+      12
+    - tracing: Disable ftrace selftests when any tracer is running
+    - mt76: add back the SUPPORTS_REORDERING_BUFFER flag
+    - PCI: Fix pci_slot_release() NULL pointer dereference
+    - [arm64,armhf] regulator: axp20x: Fix DLDO2 voltage control register mask
+      for AXP22x
+    - [arm*] thermal/drivers/cpufreq_cooling: Update cpufreq_state only if
+      state has changed
+    - null_blk: Fix zone size initialization
+    - null_blk: Fail zone append to conventional zones
+    - drm/edid: fix objtool warning in drm_cvt_modes()
+    - [x86] CPU/AMD: Save AMD NodeId as cpu_die_id
+
+  [ Uwe Kleine-König ]
+  * [armhf] Enable VIDEO_CODA and VIDEO_IMX_PXP for i.MX6 platforms
+
+  [ Vincent Blut ]
+  * [x86] Enable SND_SOC_INTEL_USER_FRIENDLY_LONG_NAMES. (Closes: #976791)
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Drop "z3fold: simplify freeing slots"
+  * [rt] Drop "z3fold: stricter locking and more careful reclaim"
+  * [rt] Refresh "sched: Move mmdrop to RCU on RT"
+  * Set ABI to 1
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 31 Dec 2020 07:26:43 +0100
+
+linux (5.10.2-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.2
+    - ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info()
+    - USB: legotower: fix logical error in recent commit
+    - USB: add RESET_RESUME quirk for Snapscan 1212
+    - ALSA: usb-audio: Fix potential out-of-bounds shift
+    - ALSA: usb-audio: Fix control 'access overflow' errors from chmap
+    - xhci: Give USB2 ports time to enter U3 in bus suspend
+    - usb: xhci: Set quirk for XHCI_SG_TRB_CACHE_SIZE_QUIRK
+    - xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP
+    - xhci-pci: Allow host runtime PM as default for Intel Maple Ridge xHCI
+    - USB: UAS: introduce a quirk to set no_write_same
+    - ALSA: pcm: oss: Fix potential out-of-bounds shift
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.10.1-rt20
+  * Revert "Generate BTF debug info" (fixes FTBFS on 32bit architectures)
+    (Reopen: #973870) (Cf. #977715)
+  * Enable USB_DUMMY_HCD as module (Closes: #868771)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 22 Dec 2020 22:22:59 +0100
+
+linux (5.10.1-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.10
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.1
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.10-rt17
+
+  [ Ben Hutchings ]
+  * userns: Enable unprivileged user namespaces by default (Closes: #898446)
+    (sysctl: kernel.unprivileged_userns_clone)
+
+  [ Bastian Blank ]
+  * Enable all Industrial I/O accelerometers. (closes: #975572)
+  * Enable all Industrial I/O ADC.
+  * Enable all Industrial I/O DAC.
+  * Enable all Industrial I/O digital gyroscopes.
+  * Enable all Industrial I/O IMU.
+  * Enable all Industrial I/O light sensors.
+  * Enable all Industrial I/O magnetometers.
+  * Enable all Industrial I/O pressure sensors.
+  * Enable all Industrial I/O proximity sensors.
+  * Enable all Industrial I/O temperatur sensors.
+  * Enable BT_LEDS.
+  * Enable remaining LEDS_TRIGGER_*.
+  * Enable ZONEFS_FS.
+  * Gemerate BTF debug info: (closes: #973870)
+    - Enable DEBUG_INFO_BTF.
+    - Build-depend on dwarves.
+  * [amd64] Support high CPU counts:
+    - Set MAXSMP.
+    - Remove not longer modifiable NR_CPUS.
+  * [armel/marvell] Disable uncompressed size check.
+  * [x86] Enable INTEL_TXT. (closes: #960195)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 17 Dec 2020 10:06:31 +0100
+
+linux (5.10~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Vincent Blut ]
+  * net/sched: Enable NET_SCH_ETS and NET_SCH_FQ_PIE as modules.
+
+  [ Bastian Blank ]
+  * Enable SOUNDWIRE, SOUNDWIRE_INTEL, SOUNDWIRE_QCOM.
+  * Enable SND_SOC_RT700_SDW, SND_SOC_RT711_SDW, SND_SOC_RT715_SDW.
+    (closes: #976791)
+  * [x86] Enable SND_SOC_SOF_INTEL_SOUNDWIRE_LINK.
+  * [x86] Enable SND_SOC_SOF_COMETLAKE_LP_SUPPORT,
+    SND_SOC_SOF_ELKHARTLAKE_SUPPORT, SND_SOC_SOF_JASPERLAKE_SUPPORT.
+  * [cloud] Disable some further filesystems. (closes: #977005)
+  * [cloud] Disable NET_VENDOR_MICROCHIP.
+  * [cloud] Disable ICE, IGC.
+  * [amd64] Make GVE module.
+  * [x86] Enable X86_CPU_RESCTRL.
+  * [amd64/cloud] Disable INFINIBAND_USNIC.
+  * Enable PSTORE_BLK.
+  * Set SQUASHFS_FILE_DIRECT, SQUASHFS_DECOMP_MULTI_PERCPU.
+  * Disable EFI_VARS.
+  * [x86] Enable APPLE_PROPERTIES.
+  * Enable CRYPTO_ECRDSA, CRYPTO_CURVE25519, disable CRYPTO_SM2.
+  * Enable CRYPTO_CFB, CRYPTO_OFB, CRYPTO_KEYWRAP, CRYPTO_ADIANTUM.
+  * Enable CRYPTO_BLAKE2S, disable CRYPTO_SM3.
+  * Enable CRYPTO_AES_TI, disable CRYPTO_SM4.
+  * Enable CRYPTO_DRBG_HASH, CRYPTO_DRBG_CTR.
+  * Enable SND_SOC_MAX98373_SDW, SND_SOC_RT1308_SDW, SND_SOC_RT5682_SDW.
+  * Enable SND_SOC_INTEL_SOUNDWIRE_SOF_MACH.
+  * Enable ATH11K. (closes: #977004)
+  * [arm64] Enable most accelerated crypto modules. (closes: #976635)
+  * [s390x] Disable IIO.
+  * Enable BLK_CGROUP_IOCOST.
+  * Enable CGROUP_HUGETLB.
+
+  [ Ben Hutchings ]
+  * Fix missing module.lds for building out-of-tree modules (Closes: #975571)
+    - debian/rules.real: Install module.lds under arch directory
+    - kbuild: Look for module.lds under arch directory too
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 11 Dec 2020 11:16:29 +0100
+
+linux (5.10~rc6-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Romain Perier ]
+  * Enable F2FS compression support (Closes: #969139)
+
+  [ Uwe Kleine-König ]
+  * [arm64] Enable support for Kontron's sl28cpld Board Management Controller
+  * [arm64] Enable support for NXP's PCF85063 RTC (Closes: #972345)
+
+  [ Salvatore Bonaccorso ]
+  * udeb: Remove efivars from efi-modules.
+  * [rt] Update to 5.10-rc6-rt13
+
+  [ Aurelien Jarno ]
+  * [mips*] Increase RELOCATION_TABLE_SIZE to 0x180000.
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 03 Dec 2020 15:42:50 +0100
+
+linux (5.10~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Uwe Kleine-König ]
+  * enable support for ISO 15765-2:2016 CAN (CAN_ISOTP)
+
+  [ YunQiang Su ]
+  * [mips/loongson-3]: enable some new features for 3A 4000
+    - VIRTUALIZATION/KVM
+    - HOTPLUG_PCI
+    - RTC based on GOLDFISH
+    - ieee754 to relaxed mode
+
+  [ Madhu Adav M J ]
+  * nvme: Enable NVME_TCP and NVME_TARGET_TCP as modules (Closes: #961573)
+
+  [ Ben Hutchings ]
+  * Rewrite "MODSIGN: load blacklist from MOKx" for 5.10
+  * Revert "lockdown: Refer to Debian wiki until manual page exists";
+    the page was added in man-pages 5.09
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.10-rc4-rt8
+  * linux-cpupower: Add librt to turbostat linker flags
+
+  [ Nicolas Dandrimont ]
+  * udeb: add bonding driver to nic-modules
+
+ -- Ben Hutchings <benh@debian.org>  Thu, 19 Nov 2020 12:58:26 +0000
+
+linux (5.9.15-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.12
+    - io_uring: get an active ref_node from files_data
+    - io_uring: order refnode recycling
+    - [arm*] spi: bcm2835: Fix use-after-free on unbind
+    - ipv4: use IS_ENABLED instead of ifdef
+    - [amd64] IB/hfi1: Ensure correct mm is used at all times (CVE-2020-27835)
+    - RDMA/i40iw: Address an mmap handler exploit in i40iw
+    - btrfs: fix missing delalloc new bit for new delalloc ranges
+    - btrfs: tree-checker: add missing return after error in root_item
+    - btrfs: tree-checker: add missing returns after data_ref alignment checks
+    - btrfs: don't access possibly stale fs_info data for printing duplicate
+      device
+    - btrfs: fix lockdep splat when reading qgroup config on mount
+    - [arm64] rtc: pcf2127: fix a bug when not specify interrupts property
+    - [s390x] fix fpu restore in entry.S
+    - mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)
+    - smb3: Call cifs reconnect from demultiplex thread
+    - smb3: Avoid Mid pending list corruption
+    - smb3: Handle error case during offload read path
+    - cifs: fix a memleak with modefromsid
+    - [powerpc*] KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing
+      ESB page
+    - [arm64] KVM: vgic-v3: Drop the reporting of GICR_TYPER.Last for
+      userspace
+    - [x86] KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint
+    - [x86] KVM: x86: Fix split-irqchip vs interrupt injection window request
+    - [amd64] iommu/vt-d: Don't read VCCAP register unless it exists
+    - [arm64] firmware: xilinx: Use hash-table for api feature check
+    - drm/amdgpu: fix SI UVD firmware validate resume fail
+    - io_uring: fix ITER_BVEC check
+    - trace: fix potenial dangerous pointer
+    - [arm64] pgtable: Fix pte_accessible()
+    - [arm64] pgtable: Ensure dirty bit is preserved across pte_wrprotect()
+    - drm/amdgpu: fix a page fault
+    - drm/amdgpu: update golden setting for sienna_cichlid
+    - drm/amd/amdgpu: fix null pointer in runtime pm
+    - HID: uclogic: Add ID for Trust Flex Design Tablet
+    - HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off
+      keypresses
+    - HID: cypress: Support Varmilo Keyboards' media hotkeys
+    - HID: add support for Sega Saturn
+    - Input: i8042 - allow insmod to succeed on devices without an i8042
+      controller
+    - HID: hid-sensor-hub: Fix issue with devices with no report ID
+    - HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices
+    - [x86] xen: don't unbind uninitialized lock_kicker_irq
+    - HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo
+      Edge
+    - HID: Add Logitech Dinovo Edge battery quirk
+    - proc: don't allow async path resolution of /proc/self components
+    - nvme: free sq/cq dbbuf pointers when dbbuf set fails
+    - io_uring: handle -EOPNOTSUPP on path resolution
+    - [arm64,armhf] net: stmmac: dwmac_lib: enlarge dma reset timeout
+    - vhost: add helper to check if a vq has been setup
+    - vhost scsi: alloc cmds per vq instead of session
+    - vhost scsi: fix cmd completion race
+    - [arm64,armhf] dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
+    - scsi: libiscsi: Fix NOP race condition
+    - scsi: target: iscsi: Fix cmd abort fabric stop race
+    - lockdep: Put graph lock/unlock under lock_recursion protection
+    - [x86] perf/x86: fix sysfs type mismatches
+    - [x86] dumpstack: Do not try to access user space code of other tasks
+    - [arm64,armhf] net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset
+    - [armhf] bus: ti-sysc: Fix reset status check for modules with quirks
+    - [armhf] bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw
+    - [arm64,armhf] phy: tegra: xusb: Fix dangling pointer on probe failure
+    - iwlwifi: mvm: use the HOT_SPOT_CMD to cancel an AUX ROC
+    - iwlwifi: mvm: properly cancel a session protection for P2P
+    - iwlwifi: mvm: write queue_sync_state only for sync
+    - [s390x] KVM: pv: Mark mm as protected after the set secure parameters
+      and improve cleanup
+    - [s390x] KVM: remove diag318 reset code
+    - btrfs: qgroup: don't commit transaction when we already hold the handle
+    - arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
+    - [armhf] bus: ti-sysc: suppress err msg for timers used as
+      clockevent/source
+    - scsi: ufs: Fix race between shutdown and runtime resume flow
+    - bnxt_en: fix error return code in bnxt_init_one()
+    - bnxt_en: fix error return code in bnxt_init_board()
+    - [x86] video: hyperv_fb: Fix the cache type when mapping the VRAM
+    - bnxt_en: Release PCI regions when DMA mask setup fails during probe.
+    - cxgb4: fix the panic caused by non smac rewrite
+    - [s390x] qeth: make af_iucv TX notification call more robust
+    - [s390x] qeth: fix af_iucv notification race
+    - [s390x] qeth: fix tear down of async TX buffers
+    - bonding: wait for sysfs kobject destruction before freeing struct slave
+    - [powerpc*] 64s: Fix allnoconfig build since uaccess flush
+    - iommu: Check return of __iommu_attach_device()
+    - IB/mthca: fix return value of error branch in mthca_init_cq()
+    - i40e: Fix removing driver while bare-metal VFs pass traffic
+    - [arm64] firmware: xilinx: Fix SD DLL node reset issue
+    - [armhf] spi: imx: fix the unbalanced spi runtime pm management
+    - io_uring: fix shift-out-of-bounds when round up cq size
+    - [amd64,arm64] aquantia: Remove the build_skb path
+    - net: ena: handle bad request id in ena_netdev
+    - net: ena: set initial DMA width to avoid intel iommu issue
+    - net: ena: fix packet's addresses for rx_offset feature
+    - [arm64] optee: add writeback to valid memory type
+    - efi/efivars: Set generic ops before loading SSDT
+    - efivarfs: revert "fix memory leak in efivarfs_create()"
+      (Closes:  #977048)
+    - efi: EFI_EARLYCON should depend on EFI
+    - [riscv64] Add missing jump label initialization
+    - [riscv64] fix barrier() use in <vdso/processor.h>
+    - [arm64,armhf] net: stmmac: fix incorrect merge of patch upstream
+    - [arm64] enetc: Let the hardware auto-advance the taprio base-time of 0
+    - drm/nouveau: fix relocations applying logic and a double-free
+    - can: gs_usb: fix endianess problem with candleLight firmware
+    - [x86] platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup
+      time
+    - [x86] platform/x86: toshiba_acpi: Fix the wrong variable assignment
+    - [arm64] RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
+    - [arm64] RDMA/hns: Bugfix for memory window mtpt configuration
+    - perf record: Synthesize cgroup events only if needed
+    - perf stat: Use proper cpu for shadow stats
+    - perf probe: Fix to die_entrypc() returns error correctly
+    - [arm*] spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe
+    - USB: core: Change %pK for __user pointers to %px
+    - usb: gadget: f_midi: Fix memleak in f_midi_alloc
+    - USB: core: Fix regression in Hercules audio card
+    - USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO
+      built-in usb-audio card
+    - usb: gadget: Fix memleak in gadgetfs_fill_super
+    - [arm64] irqchip/exiu: Fix the index of fwspec for IRQ type
+    - [x86] mce: Do not overwrite no_way_out if mce_end() fails
+    - [x86] speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb
+    - drm/amdgpu: add rlc iram and dram firmware support
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.13
+    - devlink: Hold rtnl lock while reading netdev attributes
+    - devlink: Make sure devlink instance and port are in same net namespace
+    - ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init
+    - [s390x] net/af_iucv: set correct sk_protocol for child sockets
+    - net: openvswitch: fix TTL decrement action netlink message format
+    - rose: Fix Null pointer dereference in rose_send_frame()
+    - sock: set sk_err to ee_errno on dequeue from errq
+    - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control
+    - tun: honor IOCB_NOWAIT flag
+    - vsock/virtio: discard packets only when socket is really closed
+    - net/packet: fix packet receive on L3 devices without visible hard header
+    - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING
+      traversal
+    - ipv4: Fix tos mask in inet_rtm_getroute()
+    - dt-bindings: net: correct interrupt flags in examples
+    - tipc: fix incompatible mtu of transmission
+    - inet_ecn: Fix endianness of checksum update when setting ECT(1)
+    - geneve: pull IP header before ECN decapsulation
+    - net: ip6_gre: set dev->hard_header_len when using header_ops
+    - cxgb3: fix error return code in t3_sge_alloc_qset()
+    - [powerpc*] net: pasemi: fix error return code in pasemi_mac_open()
+    - vxlan: fix error return code in __vxlan_dev_create()
+    - [arm64,armhf] net: mvpp2: Fix error return code in mvpp2_open()
+    - net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl
+    - net: openvswitch: ensure LSE is pullable before reading it
+    - net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering
+    - net/mlx5: Fix wrong address reclaim when command interface is down
+    - net: mlx5e: fix fs_tcp.c build when IPV6 is not enabled
+    - ALSA: usb-audio: US16x08: fix value count for level meters
+    - Input: xpad - support Ardwiino Controllers
+    - Input: i8042 - add ByteSpeed touchpad to noloop table
+    - Input: atmel_mxt_ts - fix lost interrupts
+    - tracing: Fix alignment of static buffer
+    - tracing: Remove WARN_ON in start_thread()
+    - uapi: fix statx attribute value overlap for DAX & MOUNT_ROOT
+    - [x86] drm/i915/gt: Fixup tgl mocs for PTE tracking
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.14
+    - usb: gadget: f_fs: Use local copy of descriptors for userspace copy
+    - USB: serial: kl5kusb105: fix memleak on open
+    - USB: serial: ch341: add new Product ID for CH341A
+    - USB: serial: ch341: sort device-id entries
+    - USB: serial: option: add Fibocom NL668 variants
+    - USB: serial: option: add support for Thales Cinterion EXS82
+    - USB: serial: option: fix Quectel BG96 matching
+    - tty: Fix ->pgrp locking in tiocspgrp() (CVE-2020-29661)
+    - tty: Fix ->session locking (CVE-2020-29660)
+    - speakup: Reject setting the speakup line discipline outside of speakup
+      (CVE-2020-27830)
+    - ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14
+    - ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model
+    - ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294
+    - ALSA: hda/realtek - Add new codec supported for ALC897
+    - ALSA: hda/realtek - Fixed Dell AIO wrong sound tone
+    - ALSA: hda/generic: Add option to enforce preferred_dacs pairs
+    - ring-buffer: Update write stamp with the correct ts
+    - ring-buffer: Set the right timestamp in the slow path of
+      __rb_reserve_next()
+    - ring-buffer: Always check to put back before stamp when crossing pages
+    - ftrace: Fix updating FTRACE_FL_TRAMP
+    - ftrace: Fix DYNAMIC_FTRACE_WITH_DIRECT_CALLS dependency
+    - cifs: allow syscalls to be restarted in __smb_send_rqst()
+    - cifs: fix potential use-after-free in cifs_echo_request()
+    - cifs: refactor create_sd_buf() and and avoid corrupting the buffer
+    - cifs: add NULL check for ses->tcon_ipc
+    - gfs2: Upgrade shared glocks for atime updates
+    - gfs2: Fix deadlock between gfs2_{create_inode,inode_lookup} and
+      delete_work_func
+    - [s390x] pci: fix CPU address in MSI for directed IRQ
+    - [arm64,armhf] i2c: imx: Fix reset of I2SR_IAL flag
+    - [arm64,armhf] i2c: imx: Check for I2SR_IAL after every byte
+    - [arm64,armhf] i2c: imx: Don't generate STOP condition if arbitration has
+      been lost
+    - tracing: Fix userstacktrace option for instances
+    - [x86] thunderbolt: Fix use-after-free in remove_unplugged_switch()
+    - [armhf] drm/omap: sdi: fix bridge enable/disable
+    - drm/amdgpu/vcn3.0: stall DPG when WPTR/RPTR reset
+    - drm/amdgpu/vcn3.0: remove old DPG workaround
+    - [x86] drm/i915/gt: Retain default context state across shrinking
+    - [x86] drm/i915/gt: Limit frequency drop to RPe on parking
+    - [x86] drm/i915/gt: Program mocs:63 for cache eviction on gen9
+    - [powerpc*] KVM: PPC: Book3S HV: XIVE: Fix vCPU id sanity check
+    - scsi: mpt3sas: Fix ioctl timeout
+    - io_uring: fix recvmsg setup with compat buf-select
+    - dm writecache: advance the number of arguments when reporting max_age
+    - dm writecache: fix the maximum number of arguments
+    - [powerpc*] 64s/powernv: Fix memory corruption when saving SLB entries on
+      MCE
+    - genirq/irqdomain: Add an irq_create_mapping_affinity() function
+    - [powerpc*] pseries: Pass MSI affinity to irq_create_mapping()
+    - dm: fix bug with RCU locking in dm_blk_report_zones
+    - dm: fix double RCU unlock in dm_dax_zero_page_range() error path
+    - dm: remove invalid sparse __acquires and __releases annotations
+    - [x86] uprobes: Do not use prefixes.nbytes when looping over
+      prefixes.bytes
+    - coredump: fix core_pattern parse error
+    - mm: list_lru: set shrinker map bit when child nr_items is not zero
+    - mm/swapfile: do not sleep with a spin lock held
+    - hugetlb_cgroup: fix offline of hugetlb cgroup with reservations
+    - Revert "amd/amdgpu: Disable VCN DPG mode for Picasso"
+    - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs
+    - mm: memcg/slab: fix obj_cgroup_charge() return value handling
+    - lib/syscall: fix syscall registers retrieval on 32-bit platforms
+      (CVE-2020-28588)
+    - can: af_can: can_rx_unregister(): remove WARN() statement from list
+      operation sanity check
+    - gfs2: check for empty rgrp tree in gfs2_ri_update
+    - netfilter: ipset: prevent uninit-value in hash_ip6_add
+    - tipc: fix a deadlock when flushing scheduled work
+    - gfs2: Fix deadlock dumping resource group glocks
+    - gfs2: Don't freeze the file system during unmount
+    - rtw88: debug: Fix uninitialized memory in debugfs code
+    - [arm64] i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc()
+    - dm writecache: remove BUG() and fail gracefully instead
+    - Input: i8042 - fix error return code in i8042_setup_aux()
+    - netfilter: nf_tables: avoid false-postive lockdep splat
+    - netfilter: nftables_offload: set address type in control dissector
+    - netfilter: nftables_offload: build mask based from the matching bytes
+    - [x86] insn-eval: Use new for_each_insn_prefix() macro to loop over
+      prefixes bytes
+    - Revert "geneve: pull IP header before ECN decapsulation"
+    - bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds.
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.15
+    - mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING
+    - kprobes: Remove NMI context check
+    - kprobes: Tell lockdep about kprobe nesting
+    - [x86] ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 Detachable quirks
+    - net, xsk: Avoid taking multiple skbuff references
+    - bpftool: Fix error return value in build_btf_type_table
+    - [powerpc*] 64s: Fix hash ISA v3.0 TLBIEL instruction generation
+    - batman-adv: Consider fragmentation for needed_headroom
+    - batman-adv: Reserve needed_*room for fragments
+    - batman-adv: Don't always reallocate the fragmentation skb head
+    - ipvs: fix possible memory leak in ip_vs_control_net_init
+    - [armhf] drm/panel: sony-acx565akm: Fix race condition in probe
+    - can: sja1000: sja1000_err(): don't count arbitration lose as an error
+    - [armhf] can: sun4i_can: sun4i_can_err(): don't count arbitration lose as
+      an error
+    - [armhf] can: c_can: c_can_power_up(): fix error handling
+    - [x86] scsi: storvsc: Fix error return in storvsc_probe()
+    - iwlwifi: pcie: invert values of NO_160 device config entries
+    - [x86] perf/x86/intel: Fix a warning on x86_pmu_stop() with large PEBS
+    - [x390x] zlib: export S390 symbols for zlib modules
+    - mm/mmap.c: fix mmap return value when vma is merged after call_mmap()
+    - [arm64] dts: rockchip: Remove system-power-controller from pmic on
+      Odroid Go Advance
+    - iwlwifi: pcie: limit memory read spin time
+    - iwlwifi: sta: set max HE max A-MPDU according to HE capa
+    - iwlwifi: pcie: set LTR to avoid completion timeout
+    - iwlwifi: mvm: fix kernel panic in case of assert during CSA
+    - [powerpc*] Drop -me200 addition to build flags
+    - scsi: ufs: Fix unexpected values from ufshcd_read_desc_param()
+    - scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE
+    - [arm64,armhf] irqchip/gic-v3-its: Unconditionally save/restore the ITS
+      state on suspend
+    - [arm64] spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts
+    - [arm64,armhf] arm-smmu-qcom: Ensure the qcom_scm driver has finished
+      probing
+    - btrfs: do nofs allocations when adding and removing qgroup relations
+    - btrfs: fix lockdep splat when enabling and disabling qgroups
+    - [arm64] soc: fsl: dpio: Get the cpumask through cpumask_of(cpu)
+    - sched/idle: Fix arch_cpu_idle() vs tracing
+    - [x86] intel_idle: Fix intel_idle() vs tracing
+    - [x86] platform/x86: thinkpad_acpi: add P1 gen3 second fan support
+    - [x86] platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga
+      11e
+    - [x86] platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for
+      Thinkpad Yoga 11e 4th gen
+    - [x86] platform/x86: thinkpad_acpi: Whitelist P15 firmware for dual fan
+      control
+    - [x86] platform/x86: acer-wmi: add automatic keyboard background light
+      toggle key as KEY_LIGHTS_TOGGLE
+    - [x86] platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion
+      13 x360 PC
+    - [s390x] fix irq state tracing
+    - [x86] intel_idle: Build fix
+    - media: pulse8-cec: fix duplicate free at disconnect or probe error
+    - media: pulse8-cec: add support for FW v10 and up
+    - xen: add helpers for caching grant mapping pages
+    - xen: don't use page->lru for ZONE_DEVICE memory
+    - Input: cm109 - do not stomp on control URB
+    - Input: i8042 - add Acer laptops to the i8042 reset list
+    - pinctrl: amd: remove debounce filter setting in IRQ type setting
+    - [arm64] mmc: sdhci-of-arasan: Fix clock registration error for Keem Bay
+      SOC
+    - mmc: block: Fixup condition for CMD13 polling for RPMB requests
+    - [x86] drm/i915/gem: Propagate error from cancelled submit due to context
+      closure
+    - [x86] drm/i915/display/dp: Compute the correct slice count for VDSC on
+      DP
+    - [x86] drm/i915/gt: Declare gen9 has 64 mocs entries!
+    - [x86] drm/i915/gt: Ignore repeated attempts to suspend request flow
+      across reset
+    - [x86] drm/i915/gt: Cancel the preemption timeout on responding to it
+    - drm/amdgpu: fix sdma instance fw version and feature version init
+    - kbuild: avoid static_assert for genksyms
+    - proc: use untagged_addr() for pagemap_read addresses
+    - mm/hugetlb: clear compound_nr before freeing gigantic pages
+    - scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()"
+    - [x86] membarrier: Get rid of a dubious optimization
+    - [x86] apic/vector: Fix ordering in vector assignment
+    - [x86] kprobes: Fix optprobe to detect INT3 padding correctly
+
+  [ Salvatore Bonaccorso ]
+  * [x86] drm/i915: Update TGL and RKL DMC firmware versions (Closes: #974646)
+  * [rt] Refresh "mm/zsmalloc: copy with get_cpu_var() and locking"
+  * xen/xenbus: Allow watches discard events before queueing (CVE-2020-29568,
+    XSA-349)
+  * xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path()
+    (CVE-2020-29568, XSA-349)
+  * xen/xenbus/xen_bus_type: Support will_handle watch callback
+    (CVE-2020-29568, XSA-349)
+  * xen/xenbus: Count pending messages for each watch (CVE-2020-29568,
+    XSA-349)
+  * xenbus/xenbus_backend: Disallow pending watch messages (CVE-2020-29568,
+    XSA-349)
+  * xen-blkback: set ring->xenblkd to NULL after kthread_stop()
+    (CVE-2020-29569, XSA-350)
+  * Bump ABI to 5
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 17 Dec 2020 06:31:52 +0100
+
+linux (5.9.11-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.10
+    - [powerpc*] 64s: flush L1D on kernel entry (CVE-2020-4788)
+    - [powerpc*] 64s: flush L1D after user accesses (CVE-2020-4788)
+    - [powerpc*] Only include kup-radix.h for 64-bit Book3S
+    - Input: sunkbd - avoid use-after-free in teardown paths (CVE-2020-25669)
+    - mac80211: always wind down STA state
+    - can: proc: can_remove_proc(): silence remove_proc_entry warning
+    - [powerpc*] smp: Call rcu_cpu_starting() earlier
+    - [x86] perf/x86/intel/uncore: Fix Add BW copypasta
+    - [x86] KVM: clflushopt should be treated as a no-op by emulation
+    - [arm64,x86] ACPI: GED: fix -Wformat
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.11
+    - ah6: fix error return code in ah6_input()
+    - atm: nicstar: Unmap DMA on send error
+    - bnxt_en: read EEPROM A2h address using page 0
+    - devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill()
+    - [arm64] enetc: Workaround for MDIO register access issue
+    - Exempt multicast addresses from five-second neighbor lifetime
+    - inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill()
+    - ipv6: Fix error path to cancel the meseage
+    - lan743x: fix issue causing intermittent kernel log warnings
+    - lan743x: prevent entire kernel HANG on open, for some platforms
+    - net: b44: fix error return code in b44_init_one()
+    - net: bridge: add missing counters to ndo_get_stats64 callback
+    - [arm64,armhf] net: dsa: mv88e6xxx: Avoid VTU corruption on 6097
+    - [armhf] net: ethernet: ti: cpsw: fix cpts irq after suspend
+    - [armhf] net: ethernet: ti: cpsw: fix error return code in cpsw_probe()
+    - [armhf] net: ftgmac100: Fix crash when removing driver
+    - net: Have netpoll bring-up DSA management interface
+    - netlabel: fix our progress tracking in netlbl_unlabel_staticlist()
+    - netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist()
+    - net/mlx4_core: Fix init_hca fields offset
+    - [armhf] net/ncsi: Fix netlink registration
+    - net: phy: mscc: remove non-MACSec compatible phy
+    - net/smc: fix direct access to ib_gid_addr->ndev in
+      smc_ib_determine_gid()
+    - [arm64,armhf] net: stmmac: Use rtnl_lock/unlock on
+      netif_set_real_num_rx_queues() call
+    - page_frag: Recover from memory pressure
+    - qed: fix error return code in qed_iwarp_ll2_start()
+    - qed: fix ILT configuration of SRC block
+    - qlcnic: fix error return code in qlcnic_83xx_restart_hw()
+    - sctp: change to hold/put transport for proto_unreach_timer
+    - tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate
+    - vsock: forward all packets to the host when no H2G is registered
+    - net/mlx5e: Fix check if netdev is bond slave
+    - net/mlx5: Add handling of port type in rule deletion
+    - net/mlx5: Clear bw_share upon VF disable
+    - net/mlx5: Disable QoS when min_rates on all VFs are zero
+    - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter
+    - [armhf] net: fec: Fix reference count leak in fec series ops
+    - bnxt_en: Fix counter overflow logic.
+    - bnxt_en: Free port stats during firmware reset.
+    - [arm64,armhf] net: mvneta: fix possible memory leak in
+      mvneta_swbm_add_rx_fragment
+    - net: usb: qmi_wwan: Set DTR quirk for MR400
+    - [armhf] Revert "Revert "gpio: omap: Fix lost edge wake-up interrupts""
+    - tools, bpftool: Avoid array index warnings.
+    - [arm64,armhf] pinctrl: rockchip: enable gpio pclk for
+      rockchip_gpio_to_irq
+    - scsi: ufs: Fix unbalanced scsi_block_reqs_cnt caused by ufshcd_hold()
+    - scsi: ufs: Try to save power mode change and UIC cmd completion timeout
+    - [armhf] pinctrl: mcp23s08: Print error message when regmap init fails
+    - [x86] ACPI: button: Add DMI quirk for Medion Akoya E2228T
+    - [arm64] errata: Fix handling of 1418040 with late CPU onlining
+    - [arm64] psci: Avoid printing in cpu_psci_cpu_die()
+    - [arm64] smp: Tell RCU about CPUs that fail to come online
+    - vfs: remove lockdep bogosity in __sb_start_write
+    - gfs2: fix possible reference leak in gfs2_check_blk_type
+    - [arm64,armhf] hwmon: (pwm-fan) Fix RPM calculation
+    - gfs2: Fix case in which ail writes are done to jdata holes
+    - [arm64] Add MIDR value for KRYO2XX gold/silver CPU cores
+    - [arm64] kpti: Add KRYO2XX gold/silver CPU cores to kpti safelist
+    - [arm64] cpu_errata: Apply Erratum 845719 to KRYO2XX Silver
+    - [arm64,armhf] usb: dwc2: Avoid leaving the error_debugfs label unused
+    - [arm64] dts: allwinner: beelink-gs1: Enable both RGMII RX/TX delay
+    - [arm64] dts: allwinner: Pine H64: Enable both RGMII RX/TX delay
+    - [arm64] dts: allwinner: a64: OrangePi Win: Fix ethernet node
+    - [arm64] dts: allwinner: a64: Pine64 Plus: Fix ethernet node
+    - [arm64] dts: allwinner: h5: OrangePi PC2: Fix ethernet node
+    - [armhf] dts: sun8i: r40: bananapi-m2-ultra: Fix ethernet node
+    - [armhf] Revert "arm: sun8i: orangepi-pc-plus: Set EMAC activity LEDs to
+      active high"
+    - [armhf] dts: sun6i: a31-hummingbird: Enable RGMII RX/TX delay on
+      Ethernet PHY
+    - [armhf] dts: sun7i: cubietruck: Enable RGMII RX/TX delay on Ethernet PHY
+    - [armhf] dts: sun7i: bananapi-m1-plus: Enable RGMII RX/TX delay on
+      Ethernet PHY
+    - [armhf] dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on
+      Ethernet PHY
+    - [armhf] dts: sun9i: Enable both RGMII RX/TX delay on Ethernet PHY
+    - [arm64] dts: allwinner: h5: libretech-all-h5-cc: Enable RGMII RX/TX
+      delay on PHY
+    - [arm64] dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on
+      PHY
+    - [mips64el,mipsel] export has_transparent_hugepage() for modules
+    - [arm64] dts: allwinner: h5: OrangePi Prime: Fix ethernet node
+    - [armhf] dts: imx6q-prti6q: fix PHY address
+    - swiotlb: using SIZE_MAX needs limits.h included
+    - [armhf] dmaengine: ti: omap-dma: Block PM if SDMA is busy to fix audio
+    - rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled
+    - spi: fix client driver breakages when using GPIO descriptors
+    - Input: elan_i2c - fix firmware update on newer ICs
+    - rfkill: Fix use-after-free in rfkill_resume()
+    - perf lock: Correct field name "flags"
+    - perf lock: Don't free "lock_seq_stat" if read_count isn't zero
+    - SUNRPC: Fix oops in the rpc_xdr_buf event class
+    - [arm64,armhf] drm: bridge: dw-hdmi: Avoid resetting force in the detect
+      function
+    - tools, bpftool: Add missing close before bpftool net attach exit
+    - [amd64] IB/hfi1: Fix error return code in hfi1_init_dd()
+    - ip_tunnels: Set tunnel option flag when tunnel metadata is present
+    - can: af_can: prevent potential access of uninitialized member in
+      can_rcv()
+    - can: af_can: prevent potential access of uninitialized member in
+      canfd_rcv()
+    - can: dev: can_restart(): post buffer from the right context
+    - can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to
+      can_put_echo_skb()
+    - can: peak_usb: fix potential integer overflow on shift of a int
+    - [armhf] can: flexcan: fix failure handling of pm_runtime_get_sync()
+    - [arm64] ASoC: qcom: lpass-platform: Fix memory leak
+    - [arm64,armhf] drm/sun4i: dw-hdmi: fix error return code in
+      sun8i_dw_hdmi_bind()
+    - net/mlx5: E-Switch, Fail mlx5_esw_modify_vport_rate if qos disabled
+    - bpf, sockmap: Fix partial copy_page_to_iter so progress can still be
+      made
+    - bpf, sockmap: Ensure SO_RCVBUF memory is observed on ingress redirect
+    - can: kvaser_usb: kvaser_usb_hydra: Fix KCAN bittiming limits
+    - dmaengine: fix error codes in channel_register()
+    - [amd64] iommu/vt-d: Move intel_iommu_gfx_mapped to Intel IOMMU header
+    - [amd64] iommu/vt-d: Avoid panic if iommu init fails in tboot system
+    - [armhf] can: flexcan: flexcan_chip_start(): fix erroneous
+      flexcan_transceiver_enable() during bus-off recovery
+    - xfs: ensure inobt record walks always make forward progress
+    - xfs: return corresponding errcode if xfs_initialize_perag() fail
+    - [x86] ASOC: Intel: kbl_rt5663_rt5514_max98927: Do not try to disable
+      disabled clock
+    - [armhf] regulator: ti-abb: Fix array out of bound read access on the
+      first transition
+    - lib/strncpy_from_user.c: Mask out bytes after NUL terminator.
+    - xfs: revert "xfs: fix rmap key and record comparison functions"
+    - bpf, sockmap: Skb verdict SK_PASS to self already checked rmem limits
+    - bpf, sockmap: On receive programs try to fast track SK_PASS ingress
+    - bpf, sockmap: Use truesize with sk_rmem_schedule()
+    - bpf, sockmap: Avoid returning unneeded EAGAIN when redirecting to self
+    - [armhf] efi/arm: set HSCTLR Thumb2 bit correctly for HVC calls from HYP
+    - [amd64] efi/x86: Free efi_pgd with free_pages()
+    - sched/fair: Fix overutilized update in enqueue_task_fair()
+    - sched: Fix data-race in wakeup
+    - sched: Fix rq->nr_iowait ordering
+    - libfs: fix error cast of negative value in simple_attr_write()
+    - afs: Fix speculative status fetch going out of order wrt to
+      modifications
+    - HID: logitech-hidpp: Add PID for MX Anywhere 2
+    - HID: logitech-dj: Handle quad/bluetooth keyboards with a builtin
+      trackpad
+    - HID: logitech-dj: Fix Dinovo Mini when paired with a MX5x00 receiver
+    - speakup: Do not let the line discipline be used several times
+      (CVE-2020-28941)
+    - ALSA: firewire: Clean up a locking issue in copy_resp_to_buf()
+    - ALSA: usb-audio: Add delay quirk for all Logitech USB devices
+    - ALSA: ctl: fix error path at adding user-defined element set
+    - ALSA: mixart: Fix mutex deadlock
+    - ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button
+    - ALSA: hda/realtek - Add supported mute Led for HP
+    - ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220)
+    - ALSA: hda/realtek - HP Headset Mic can't detect after boot
+    - [armhf] tty: serial: imx: fix potential deadlock
+    - [armhf] tty: serial: imx: keep console clocks always on
+    - HID: logitech-dj: Fix an error in mse_bluetooth_descriptor
+    - [arm64,armhf,x86] efivarfs: fix memory leak in efivarfs_create()
+    - [arm64,x86] staging: rtl8723bs: Add 024c:0627 to the list of SDIO
+      device-ids
+    - xfs: fix forkoff miscalculation related to XFS_LITINO(mp)
+    - [arm64,x86] ACPI: fan: Initialize performance state sysfs attribute
+    - [x86] iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type
+      enum
+    - [x86] iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for
+      setting tablet-mode
+    - [arm64] iio: cros_ec: Use default frequencies when EC returns invalid
+      information
+    - spi: Introduce device-managed SPI controller allocation
+    - [arm64,armhf] spi: bcm2835aux: Fix use-after-free on unbind
+    - [armhf] regulator: pfuze100: limit pfuze-support-disable-sw to
+      pfuze{100,200}
+    - regulator: fix memory leak with repeated set_machine_constraints()
+    - regulator: avoid resolve_supply() infinite recursion
+    - regulator: workaround self-referent regulators
+    - gfs2: Fix regression in freeze_go_sync
+    - mac80211: minstrel: remove deferred sampling code
+    - mac80211: minstrel: fix tx status processing corner case
+    - mac80211: free sta in sta_info_insert_finish() on errors
+    - [s390x] fix system call exit path
+    - [s390x] cpum_sf.c: fix file permission for cpum_sfb_size
+    - [s390x] dasd: fix null pointer dereference for ERP requests
+    - [x86] Drivers: hv: vmbus: Allow cleanup of VMBUS_CONNECT_CPU if
+      disconnected
+    - [x86] drm/i915: Handle max_bpc==16
+    - [x86] drm/i915/tgl: Fix Media power gate sequence.
+    - io_uring: don't double complete failed reissue request
+    - mmc: sdhci-pci: Prefer SDR25 timing for High Speed mode for BYT-based
+      Intel controllers
+    - [arm64] mmc: sdhci-of-arasan: Allow configuring zero tap values
+    - [arm64] mmc: sdhci-of-arasan: Use Mask writes for Tap delays
+    - [arm64] mmc: sdhci-of-arasan: Issue DLL reset explicitly
+    - blk-cgroup: fix a hd_struct leak in blkcg_fill_root_iostats
+    - ptrace: Set PF_SUPERPRIV when checking capability
+    - seccomp: Set PF_SUPERPRIV when checking capability
+    - fanotify: fix logic of reporting name info with watched parent
+    - [x86] microcode/intel: Check patch signature before saving microcode for
+      early loading
+    - mm: never attempt async page lock if we've transferred data already
+    - mm: fix readahead_page_batch for retry entries
+    - mm: memcg/slab: fix root memcg vmstats
+    - mm/userfaultfd: do not access vma->vm_mm after calling
+      handle_userfault()
+
+  [ Ben Hutchings ]
+  * [arm64][rt] Disable KVM, which currently conflicts with PREEMPT_RT
+
+  [ Yves-Alexis Perez ]
+  * usbnet: ipheth: fix connectivity with iOS 14
+
+  [ Salvatore Bonaccorso ]
+  * Bump ABI to 4
+
+  [ Julien Cristau ]
+  * Disable NOUVEAU_LEGACY_CTX_SUPPORT, which was keeping DRM_LEGACY enabled
+    for no good reason (closes: #975038)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 27 Nov 2020 22:02:14 +0100
+
+linux (5.9.9-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7
+    - net: core: use list_del_init() instead of list_del() in
+      netdev_run_todo()
+    - tipc: fix use-after-free in tipc_bcast_get_mode
+    - [x86] drm/i915/gem: Avoid implicit vmap for highmem on x86-32
+    - [x86] drm/i915/gem: Prevent using pgprot_writecombine() if PAT is not
+      supported
+    - [x86] drm/i915/gem: Always test execution status on closing the context
+    - [x86] drm/i915/gt: Always send a pulse down the engine after disabling
+      heartbeat
+    - [x86] drm/i915: Break up error capture compression loops with
+      cond_resched()
+    - [x86] drm/i915: Cancel outstanding work after disabling heartbeats on an
+      engine
+    - [x86] drm/i915: Avoid mixing integer types during batch copies
+    - [x86] drm/i915: Fix TGL DKL PHY DP vswing handling
+    - [x86] drm/i915/gt: Initialize reserved and unspecified MOCS indices
+    - [x86] drm/i915/gt: Undo forced context restores after trivial
+      preemptions
+    - [x86] drm/i915/gt: Delay execlist processing for tgl
+    - [x86] drm/i915: Drop runtime-pm assert from vgpu io accessors
+    - [x86] drm/i915: Exclude low pages (128KiB) of stolen from use
+    - [x86] drm/i915: Mark ininitial fb obj as WT on eLLC machines to avoid
+      rcu lockup during fbdev init
+    - [x86] drm/i915: Use the active reference on the vma while capturing
+    - [x86] drm/i915: Reject 90/270 degree rotated initial fbs
+    - [x86] drm/i915: Restore ILK-M RPS support
+    - drm/nouveau/kms/nv50-: Program notifier offset before requesting disp
+      caps
+    - drm/nouveau/device: fix changing endianess code to work on older GPUs
+    - ptrace: fix task_join_group_stop() for the case when current is traced
+    - [arm64,riscv64] cadence: force nonlinear buffers to be cloned
+    - ip_tunnel: fix over-mtu packet send fail without TUNNEL_DONT_FRAGMENT
+      flags
+    - [armhf] net: ethernet: ti: cpsw: disable PTPv1 hw timestamping
+      advertisement
+    - net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition
+    - sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms
+    - [arm64,armhf,riscv64] sfp: Fix error handing in sfp_probe()
+    - ip6_tunnel: set inner ipproto before ip6_tnl_encap
+    - [armhf] net: fec: fix MDIO probing for some FEC hardware blocks
+    - net: openvswitch: silence suspicious RCU usage warning
+    - r8169: work around short packet hw bug on RTL8125
+    - drm/nouveau/kms/nv50-: Get rid of bogus nouveau_conn_mode_valid()
+    - drm/nouveau/kms/nv50-: Fix clock checking algorithm in
+      nv50_dp_mode_valid()
+    - Fonts: Replace discarded const qualifier
+    - ALSA: hda/realtek - Fixed HP headset Mic can't be detected
+    - ALSA: hda/realtek - Enable headphone for ASUS TM420
+    - ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
+    - ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices
+    - ALSA: usb-audio: Add implicit feedback quirk for Qu-16
+    - ALSA: usb-audio: Add implicit feedback quirk for MODX
+    - hugetlb_cgroup: fix reservation accounting
+    - mm: mempolicy: fix potential pte_unmap_unlock pte error
+    - kthread_worker: prevent queuing delayed work from timer_fn when it is
+      being canceled
+    - mm: always have io_remap_pfn_range() set pgprot_decrypted()
+    - gfs2: Wake up when sd_glock_disposal becomes zero
+    - gfs2: Don't call cancel_delayed_work_sync from within delete work
+      function
+    - ring-buffer: Fix recursion protection transitions between interrupt
+      context
+    - drm/amdgpu: update golden setting for sienna_cichlid
+    - drm/amdgpu: resolved ASD loading issue on sienna
+    - [amd64] iommu/vt-d: Fix kernel NULL pointer dereference in find_domain()
+    - mtd: spi-nor: Don't copy self-pointing struct around
+    - ftrace: Fix recursion check for NMI test
+    - ftrace: Handle tracing when switching between context
+    - regulator: defer probe when trying to get voltage from unresolved supply
+    - [arm*] spi: bcm2835: fix gpio cs level inversion
+    - tracing: Fix out of bounds write in get_trace_buf
+    - futex: Handle transient "ownerless" rtmutex state correctly
+    - [amd64] x86/lib: Change .weak to SYM_FUNC_START_WEAK for
+      arch/x86/lib/mem*_64.S
+    - [x86] kexec: Use up-to-dated screen_info copy to fill boot params
+    - [x86] hyperv_fb: Update screen_info after removing old framebuffer
+    - io_uring: don't miss setting IO_WQ_WORK_CONCURRENT
+    - of: Fix reserved-memory overlap detection
+    - [arm64,armhf] drm/sun4i: frontend: Rework a bit the phase data
+    - [arm64,armhf] drm/sun4i: frontend: Reuse the ch0 phase for RGB formats
+    - [arm64,armhf] drm/sun4i: frontend: Fix the scaler phase on A33
+    - blk-cgroup: Fix memleak on error path
+    - blk-cgroup: Pre-allocate tree node on blkg_conf_prep
+    - btrfs: drop the path before adding qgroup items when enabling qgroups
+    - btrfs: add a helper to read the tree_root commit root for backref lookup
+    - scsi: core: Don't start concurrent async scan on same host
+    - drm/amdgpu: disable DCN and VCN for navi10 blockchain SKU(v3)
+    - drm/amdgpu: add DID for navi10 blockchain SKU
+    - [powerpc*] scsi: ibmvscsi: Fix potential race after loss of transport
+    - vsock: use ns_capable_noaudit() on socket create
+    - nvme-rdma: handle unexpected nvme completion data length
+    - nvmet: fix a NULL pointer dereference when tracing the flush command
+    - [arm*] staging: mmal-vchiq: Fix memory leak for vchiq_instance
+    - [arm*] drm/vc4: drv: Add error handding for bind
+    - [amd64,arm64] ACPI: NFIT: Fix comparison to '-ENXIO'
+    - drm/nouveau/gem: fix "refcount_t: underflow; use-after-free"
+    - [arm64] smp: Move rcu_cpu_starting() earlier
+    - vt: Disable KD_FONT_OP_COPY
+    - tty: fix crash in release_tty if tty->port is not set
+    - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent
+    - entry: Fix the incorrect ordering of lockdep and RCU check
+    - [s390x] pci: fix hot-plug of PCI function missing bus
+    - [s390x] mm: make pmd/pud_deref() large page aware
+    - [s390x] pkey: fix paes selftest failure with paes and pkey static build
+    - USB: serial: cyberjack: fix write-URB completion race
+    - USB: serial: option: add Quectel EC200T module support
+    - USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231
+    - USB: serial: option: add Telit FN980 composition 0x1055
+    - [arm64,armhf] usb: dwc3: ep0: Fix delay status handling
+    - USB: Add NO_LPM quirk for Kingston flash drive
+    - io_uring: fix link lookup racing with link timeout
+    - mac80211: fix regression where EAPOL frames were sent in plaintext
+    - [arm64,armhf] drm/panfrost: Fix a deadlock between the shrinker and
+      madvise path
+    - PM: runtime: Drop runtime PM references to supplier on link removal
+    - PM: runtime: Drop pm_runtime_clean_up_links()
+    - PM: runtime: Resume the device earlier in __device_release_driver()
+    - [x86] drm/i915: Fix encoder lookup during PSR atomic check
+    - [x86] drm/i915/gt: Use the local HWSP offset during submission
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.8
+    - [x86] powercap: restrict energy meter to root access (CVE-2020-8694)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.9
+    - [x86] drm/i915: Hold onto an explicit ref to i915_vma_work.pinned
+    - [x86] drm/i915/gem: Flush coherency domains on first set-domain-ioctl
+    - mm: memcg: link page counters to root if use_hierarchy is false
+    - nbd: don't update block size after device is started
+    - [arm64] KVM: Force PTE mapping on fault resulting in a device mapping
+    - xfrm: interface: fix the priorities for ipip and ipv6 tunnels
+    - [x86] ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup function
+    - [x86] hv_balloon: disable warning when floor reached
+    - net: xfrm: fix a race condition during allocing spi
+    - [riscv64] irqchip/sifive-plic: Fix broken irq_set_affinity() callback
+    - mtd: spi-nor: Fix address width on flash chips > 16MB
+    - xfs: set xefi_discard when creating a deferred agfl free log intent item
+    - mac80211: don't require VHT elements for HE on 2.4 GHz
+    - netfilter: nftables: fix netlink report logic in flowtable and genid
+    - netfilter: use actual socket sk rather than skb sk when routing harder
+    - netfilter: nf_tables: missing validation from the abort path
+    - PCI: Always enable ACS even if no ACS Capability
+    - netfilter: ipset: Update byte and packet counters regardless of whether
+      they match
+    - [riscv64] irqchip/sifive-plic: Fix chip_data access within a hierarchy
+    - [powerpc*] eeh_cache: Fix a possible debugfs deadlock
+    - [arm*] drm/vc4: bo: Add a managed action to cleanup the cache
+    - IB/srpt: Fix memory leak in srpt_add_one
+    - mm: memcontrol: correct the NR_ANON_THPS counter of hierarchical memcg
+    - [arm64,armhf] drm/panfrost: rename error labels in device_init
+    - [arm64,armhf] drm/panfrost: move devfreq_init()/fini() in device
+    - [arm64,armhf] drm/panfrost: Fix module unload
+    - perf trace: Fix segfault when trying to trace events by cgroup
+    - perf tools: Add missing swap for ino_generation
+    - perf tools: Add missing swap for cgroup events
+    - [x86] ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link()
+    - [amd64] iommu/vt-d: Fix sid not set issue in intel_svm_bind_gpasid()
+    - [amd64] iommu/vt-d: Fix a bug for PDP check in prq_event_thread
+    - afs: Fix warning due to unadvanced marshalling pointer
+    - afs: Fix incorrect freeing of the ACL passed to the YFS ACL store op
+    - vfio/pci: Implement ioeventfd thread handler for contended memory lock
+    - can: rx-offload: don't call kfree_skb() from IRQ context
+    - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ
+      context
+    - can: dev: __can_get_echo_skb(): fix real payload length return value for
+      RTR frames
+    - can: can_create_echo_skb(): fix echo skb generation: always use
+      skb_clone()
+    - can: j1939: swap addr and pgn in the send example
+    - can: j1939: j1939_sk_bind(): return failure if netdev is down
+    - can: peak_usb: add range checking in decode operations
+    - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
+    - can: peak_canfd: pucan_handle_can_rx(): fix echo management when
+      loopback is on
+    - [armhf] can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
+      LS1021A
+    - [armhf] can: flexcan: flexcan_remove(): disable wakeup completely
+    - xfs: flush new eof page on truncate to avoid post-eof corruption
+    - xfs: fix missing CoW blocks writeback conversion retry
+    - xfs: fix scrub flagging rtinherit even if there is no rt device
+    - io_uring: ensure consistent view of original task ->mm from SQPOLL
+    - [arm64] spi: fsl-dspi: fix wrong pointer in suspend/resume
+    - [armel,armhf] PCI: mvebu: Fix duplicate resource requests
+    - ceph: check session state after bumping session->s_seq
+    - [x86] speculation: Allow IBPB to be conditionally enabled on CPUs with
+      always-on STIBP
+    - USB: apple-mfi-fastcharge: fix reference leak in
+      apple_mfi_fc_set_property
+    - [arm64,x86] tpm: efi: Don't create binary_bios_measurements file for an
+      empty log
+    - [arm64] KVM: ARM_SMCCC_ARCH_WORKAROUND_1 doesn't return
+      SMCCC_RET_NOT_REQUIRED
+    - ath9k_htc: Use appropriate rs_datalen type
+    - scsi: ufs: Fix missing brace warning for old compilers
+    - [arm64] usb: dwc3: pci: add support for the Intel Alder Lake-S
+    - opp: Reduce the size of critical section in _opp_table_kref_release()
+    - usb: raw-gadget: fix memory leak in gadget_setup
+    - ALSA: hda: Separate runtime and system suspend
+    - ALSA: hda: Reinstate runtime_allow() for all hda controllers
+    - [amd64] x86/boot/compressed/64: Introduce sev_status
+    - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free
+    - gfs2: Add missing truncate_inode_pages_final for sd_aspace
+    - gfs2: check for live vs. read-only file system in gfs2_fitrim
+    - scsi: hpsa: Fix memory leak in hpsa_init_one()
+    - drm/amdgpu: perform srbm soft reset always on SDMA resume
+    - mac80211: fix use of skb payload instead of header
+    - cfg80211: initialize wdev data earlier
+    - cfg80211: regulatory: Fix inconsistent format argument
+    - tracing: Fix the checking of stackidx in __ftrace_trace_stack
+    - Revert "nvme-pci: remove last_sq_tail"
+    - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach()
+    - scsi: mpt3sas: Fix timeouts observed while reenabling IRQ
+    - nvme: introduce nvme_sync_io_queues
+    - nvme-rdma: avoid race between time out and tear down
+    - nvme-rdma: avoid repeated request completion
+    - [amd64] iommu/amd: Increase interrupt remapping table limit to 512
+      entries
+    - [s390x] smp: move rcu_cpu_starting() earlier
+    - vfio/pci: Bypass IGD init in case of -ENODEV
+    - amd/amdgpu: Disable VCN DPG mode for Picasso
+    - iomap: clean up writeback state logic on writepage error
+    - [riscv64] Set text_offset correctly for M-Mode
+    - tpm_tis: Disable interrupts on ThinkPad T490s
+    - [arm*] spi: bcm2835: remove use of uninitialized gpio flags variable
+    - [x86] pinctrl: intel: Fix 2 kOhm bias which is 833 Ohm
+    - [x86] pinctrl: intel: Set default bias in case no particular value given
+    - [armhf] gpio: aspeed: fix ast2600 bank properties
+    - [armel,armhf] 9019/1: kprobes: Avoid fortify_panic() when copying
+      optprobe template
+    - bpf: Don't rely on GCC __attribute__((optimize)) to disable GCSE
+    - libbpf, hashmap: Fix undefined behavior in hash_bits
+    - [armhf] pinctrl: mcp23s08: Use full chunk of memory for regmap
+      configuration
+    - [armhf] pinctrl: aspeed: Fix GPI only function problem.
+    - net/mlx5e: Fix modify header actions memory leak
+    - net/mlx5e: Protect encap route dev from concurrent release
+    - net/mlx5e: Use spin_lock_bh for async_icosq_lock
+    - net/mlx5: Fix deletion of duplicate rules
+    - net/mlx5: E-switch, Avoid extack error log for disabled vport
+    - net/mlx5e: Fix VXLAN synchronization after function reload
+    - net/mlx5e: Fix incorrect access of RCU-protected xdp_prog
+    - SUNRPC: Fix general protection fault in trace_rpc_xdr_overflow()
+    - NFSD: Fix use-after-free warning when doing inter-server copy
+    - NFSD: fix missing refcount in nfsd4_copy by nfsd4_do_async_copy
+    - tools/bpftool: Fix attaching flow dissector
+    - bpf: Zero-fill re-used per-cpu map element
+    - r8169: fix potential skb double free in an error path
+    - r8169: disable hw csum for short packets on all chip versions
+    - [arm64] pinctrl: qcom: Move clearing pending IRQ to
+      .irq_request_resources callback
+    - nbd: fix a block_device refcount leak in nbd_release
+    - i40e: Fix MAC address setting for a VF via Host/VM
+    - igc: Fix returning wrong statistics (Closes: #970722)
+    - lan743x: correctly handle chips with internal PHY
+    - net: phy: realtek: support paged operations on RTL8201CP
+    - xfs: fix flags argument to rmap lookup when converting shared file rmaps
+    - xfs: set the unwritten bit in rmap lookup flags in
+      xchk_bmap_get_rmapextents
+    - xfs: fix rmap key and record comparison functions
+    - xfs: fix brainos in the refcount scrubber's rmap fragment processor
+    - lan743x: fix "BUG: invalid wait context" when setting rx mode
+    - xfs: fix a missing unlock on error in xfs_fs_map_blocks
+    - of/address: Fix of_node memory leak in of_dma_is_coherent
+    - ch_ktls: Update cheksum information
+    - ch_ktls: tcb update fails sometimes
+    - [i386] cosa: Add missing kfree in error path of cosa_write
+    - hwmon: (applesmc) Re-work SMC comms
+    - NFS: Fix listxattr receive buffer size
+    - vrf: Fix fast path output packet handling with async Netfilter rules
+    - lan743x: fix use of uninitialized variable
+    - [arm64] mm: Validate hotplug range before creating linear mapping
+    - kernel/watchdog: fix watchdog_allowed_mask not used warning
+    - mm: memcontrol: fix missing wakeup polling thread
+    - afs: Fix afs_write_end() when called with copied == 0 [ver #3]
+    - perf: Fix get_recursion_context()
+    - nvme: factor out a nvme_configure_metadata helper
+    - nvme: freeze the queue over ->lba_shift updates
+    - nvme: fix incorrect behavior when BLKROSET is called by the user
+    - perf: Simplify group_sched_in()
+    - perf: Fix event multiplexing for exclusive groups
+    - [arm64] firmware: xilinx: fix out-of-bounds access
+    - erofs: fix setting up pcluster for temporary pages
+    - erofs: derive atime instead of leaving it empty
+    - ext4: correctly report "not supported" for {usr,grp}jquota when
+      !CONFIG_QUOTA
+    - ext4: unlock xattr_sem properly in ext4_inline_data_truncate()
+    - btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch
+    - btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod
+    - btrfs: fix min reserved size calculation in merge_reloc_root
+    - btrfs: dev-replace: fail mount if we don't have replace item with target
+      device
+    - [arm64] KVM: Don't hide ID registers from userspace
+    - [x86] thunderbolt: Fix memory leak if ida_simple_get() fails in
+      enumerate_services()
+    - [x86] thunderbolt: Add the missed ida_simple_remove() in
+      ring_request_msix()
+    - block: add a return value to set_capacity_revalidate_and_notify
+    - loop: Fix occasional uevent drop
+    - uio: Fix use-after-free in uio_unregister_device()
+    - Revert "usb: musb: convert to devm_platform_ioremap_resource_byname"
+    - usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode
+    - [x86] usb: typec: ucsi: Report power supply changes
+    - virtio: virtio_console: fix DMA memory allocation for rproc serial
+    - futex: Don't enable IRQs unconditionally in put_pi_state()
+    - jbd2: fix up sparse warnings in checkpoint code
+    - bootconfig: Extend the magic check range to the preceding 3 bytes
+    - mm/compaction: count pages and stop correctly during page isolation
+    - mm/compaction: stop isolation if too many pages are isolated and we have
+      pages to migrate
+    - mm/slub: fix panic in slab_alloc_node()
+    - mm/vmscan: fix NR_ISOLATED_FILE corruption on 64-bit
+    - mm/gup: use unpin_user_pages() in __gup_longterm_locked()
+    - Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint"
+    - reboot: fix overflow parsing reboot cpu number
+    - hugetlbfs: fix anon huge page migration race
+    - ocfs2: initialize ip_next_orphan
+    - hwmon: (amd_energy) modify the visibility of the counters
+      (CVE-2020-12912)
+    - selinux: Fix error return code in sel_ib_pkey_sid_slow()
+    - io_uring: round-up cq size before comparing with rounded sq size
+    - [riscv64] gpio: sifive: Fix SiFive gpio probe
+    - gpio: pcie-idio-24: Fix irq mask when masking
+    - gpio: pcie-idio-24: Fix IRQ Enable Register value
+    - gpio: pcie-idio-24: Enable PEX8311 interrupts
+    - [arm64] mmc: sdhci-of-esdhc: Handle pulse width detection erratum for
+      more SoCs
+    - don't dump the threads that had been already exiting when zapped.
+    - [x86] drm/i915: Correctly set SFC capability for video engines
+    - [x86] drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[]
+    - NFSv4.2: fix failure to unregister shrinker
+    - pinctrl: amd: use higher precision for 512 RtcClk
+    - pinctrl: amd: fix incorrect way to disable debounce filter
+    - swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb"
+    - cpufreq: Introduce governor flags
+    - cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET
+    - cpufreq: Add strict_target to struct cpufreq_policy
+    - cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account
+    - ethtool: netlink: add missing netdev_features_change() call
+    - IPv6: Set SIT tunnel hard_header_len to zero
+    - [s390x] net/af_iucv: fix null pointer dereference on shutdown
+    - net: udp: fix IP header access and skb lookup on Fast/frag0 UDP GRO
+    - net: udp: fix UDP header access on Fast/frag0 UDP GRO
+    - net: Update window_clamp if SOCK_RCVBUF is set
+    - tipc: fix memory leak in tipc_topsrv_start()
+    - devlink: Avoid overwriting port attributes of registered port
+    - tunnels: Fix off-by-one in lower MTU bounds for ICMP/ICMPv6 replies
+    - [powerpc*] 603: Always fault when _PAGE_ACCESSED is not set
+    - null_blk: Fix scheduling in atomic with zoned mode
+    - Convert trailing spaces and periods in path components
+
+  [ Uwe Kleine-König ]
+  * [amd64] Enable SND_SOC_AMD_ACP3x, SND_SOC_AMD_RENOIR and
+    SND_SOC_AMD_RENOIR_MACH (Closes: #973252)
+  * [arm64] Add device tree for Kobol helios64 from rockchip next branch.
+
+  [ John L. Villalovos ]
+  * [arm64] NUMA: Kconfig: Increase NODES_SHIFT to 4
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Refresh "signals: Allow rt tasks to cache one sigqueue struct"
+  * [armhf] dts: sun8i: a83t: Enable both RGMII RX/TX delay on Ethernet PHY
+    (Closes: #973369)
+  * Bump ABI to 3
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 19 Nov 2020 08:19:18 +0100
+
+linux (5.9.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.2
+    - [powerpc*] ibmveth: Switch order of ibmveth_helper calls.
+    - [powerpc*] ibmveth: Identify ingress large send packets.
+    - cxgb4: handle 4-tuple PEDIT to NAT mode translation
+    - ipv4: Restore flowi4_oif update before call to xfrm_lookup_route
+    - mlx4: handle non-napi callers to napi_poll
+    - net: dsa: microchip: fix race condition
+    - net: fec: Fix phy_device lookup for phy_reset_after_clk_enable()
+    - net: fec: Fix PHY init after phy_reset_after_clk_enable()
+    - net: fix pos incrementment in ipv6_route_seq_next
+    - net: ipa: skip suspend/resume activities if not set up
+    - net: sched: Fix suspicious RCU usage while accessing tcf_tunnel_info
+    - net/smc: fix use-after-free of delayed events
+    - net/smc: fix valid DMBE buffer sizes
+    - tipc: fix NULL pointer dereference in tipc_named_rcv
+    - tipc: fix the skb_unshare() in tipc_buf_append()
+    - socket: fix option SO_TIMESTAMPING_NEW
+    - socket: don't clear SOCK_TSTAMP_NEW when SO_TIMESTAMPNS is disabled
+    - can: m_can_platform: don't call m_can_class_suspend in runtime suspend
+    - can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt
+    - net: j1939: j1939_session_fresh_new(): fix missing initialization of
+      skbcnt
+    - binder: fix UAF when releasing todo list (CVE-2020-0423)
+    - ALSA: bebob: potential info leak in hwdep_read()
+    - ALSA: hda: fix jack detection with Realtek codecs when in D3
+    - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close
+    - tipc: re-configure queue limit for broadcast link
+    - tipc: fix incorrect setting window for bcast link
+    - ibmvnic: save changed mac address to adapter->mac_addr
+    - icmp: randomize the global rate limiter
+    - net: ftgmac100: Fix Aspeed ast2600 TX hang issue
+    - net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
+    - net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling
+      ether_setup
+    - net: Properly typecast int values to set sk_max_pacing_rate
+    - net/sched: act_ct: Fix adding udp port mangle operation
+    - net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels
+    - netsec: ignore 'phy-mode' device property on ACPI systems
+    - nexthop: Fix performance regression in nexthop deletion
+    - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in
+      nfc_genl_fw_download()
+    - r8169: fix operation under forced interrupt threading
+    - tcp: fix to update snd_wl1 in bulk receiver fast path
+    - net: ethernet: mtk-star-emac: select REGMAP_MMIO
+    - net/sched: act_gate: Unlock ->tcfa_lock in tc_setup_flow_action()
+    - ixgbe: fix probing of multi-port devices with one MDIO
+    - net: openvswitch: fix to make sure flow_lookup() is not preempted
+    - sfc: move initialisation of efx->filter_sem to efx_init_struct()
+    - ALSA: hda - Don't register a cb func if it is registered already
+    - ALSA: hda - Fix the return value if cb func is already registered
+    - ALSA: usb-audio: Line6 Pod Go interface requires static clock rate quirk
+    - ALSA: hda/realtek - The front Mic on a HP machine doesn't work
+    - ALSA: hda/realtek - set mic to auto detect on a HP AIO machine
+    - ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7
+    - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
+    - cifs: remove bogus debug code
+    - cifs: Return the error from crypt_message when enc/dec key not found.
+    - SMB3: Resolve data corruption of TCP server info fields
+    - SMB3.1.1: Fix ids returned in POSIX query dir
+    - smb3: do not try to cache root directory if dir leases not supported
+    - smb3: fix stat when special device file and mounted with modefromsid
+    - [arm64] Make use of ARCH_WORKAROUND_1 even when KVM is not enabled
+    - [x86] KVM: nVMX: Morph notification vector IRQ on nested VM-Enter to
+      pending PI
+    - [x86] KVM: nVMX: Reset the segment cache when stuffing guest segs
+    - [x86] KVM: nVMX: Reload vmcs01 if getting vmcs12's pages fails
+    - [x86] KVM: x86/mmu: Commit zap of remaining invalid pages when
+      recovering lpages
+    - [x86] KVM: x86: Intercept LA57 to inject #GP fault when it's reserved
+    - [x86] KVM: SVM: Initialize prev_ga_tag before use
+    - crypto: caam - add xts check for block length equal to zero
+    - crypto: algif_aead - Do not set MAY_BACKLOG on the async path
+    - crypto: caam/qi - add fallback for XTS with more than 8B IV
+    - crypto: caam/qi - add support for more XTS key lengths
+    - crypto: caam/jr - add fallback for XTS with more than 8B IV
+    - crypto: caam/jr - add support for more XTS key lengths
+    - crypto: caam/qi2 - add fallback for XTS with more than 8B IV
+    - crypto: caam/qi2 - add support for more XTS key lengths
+    - RAS/CEC: Fix cec_init() prototype
+    - sched/fair: Fix wrong negative conversion in find_energy_efficient_cpu()
+    - microblaze: fix kbuild redundant file warning
+    - [x86] EDAC/i5100: Fix error handling order in i5100_init_one()
+    - [x86] perf/x86/intel/ds: Fix x86_pmu_stop warning for large PEBS
+    - [x86] x86/fpu: Allow multiple bits in clearcpuid= parameter
+    - irqchip/ti-sci-inta: Fix unsigned comparison to zero
+    - irqchip/ti-sci-intr: Fix unsigned comparison to zero
+    - [arm64] kprobe: add checks for ARMv8.3-PAuth combined instructions
+    - seqlock: Unbreak lockdep
+    - drivers/perf: xgene_pmu: Fix uninitialized resource struct
+    - drivers/perf: thunderx2_pmu: Fix memory resource error handling
+    - sched/fair: Fix wrong cpu selecting from isolated domain
+    - sched/fair: Use dst group while checking imbalance for NUMA balancer
+    - [arm64] perf: Add missing ISB in armv8pmu_enable_counter()
+    - [x86] perf/x86/intel/uncore: Update Ice Lake uncore units
+    - [x86] perf/x86/intel/uncore: Reduce the number of CBOX counters
+    - [x86] perf/x86/intel/uncore: Fix for iio mapping on Skylake Server
+    - [x86] perf/x86/intel/uncore: Fix the scale of the IMC free-running
+      events
+    - [x86] x86/nmi: Fix nmi_handle() duration miscalculation
+    - [amd64] x86/events/amd/iommu: Fix sizeof mismatch
+    - [arm64] pinctrl: qcom: Set IRQCHIP_SET_TYPE_MASKED and
+      IRQCHIP_MASK_ON_SUSPEND flags
+    - [arm64] pinctrl: qcom: Use return value from irq_set_wake() call
+    - [x86] perf/x86: Fix n_pair for cancelled txn
+    - lockdep: Fix usage_traceoverflow
+    - lockdep: Fix lockdep recursion
+    - lockdep: Revert "lockdep: Use raw_cpu_*() for per-cpu variables"
+    - perf/core: Fix race in the perf_mmap_close() function (CVE-2020-14351)
+    - crypto: algif_skcipher - EBUSY on aio should be an error
+    - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
+    - crypto: picoxcell - Fix potential race condition bug
+    - media: vivid: Fix global-out-of-bounds read in precalculate_color()
+    - crypto: ccree - fix runtime PM imbalance on error
+    - media: hantro: h264: Get the correct fallback reference buffer
+    - media: hantro: postproc: Fix motion vector space allocation
+    - media: ov5640: Correct Bit Div register in clock tree diagram
+    - media: i2c: fix error check on max9286_read call
+    - media: m5mols: Check function pointer in m5mols_sensor_power
+    - fscrypt: restrict IV_INO_LBLK_32 to ino_bits <= 32
+    - media: uvcvideo: Set media controller entity functions
+    - media: uvcvideo: Silence shift-out-of-bounds warning
+    - media: staging/intel-ipu3: css: Correctly reset some memory
+    - media: omap3isp: Fix memleak in isp_probe
+    - media: i2c: ov5640: Remain in power down for DVP mode unless streaming
+    - media: i2c: ov5640: Separate out mipi configuration from s_power
+    - media: i2c: ov5640: Enable data pins on poweron for DVP mode
+    - media: i2c: max9286: Allocate v4l2_async_subdev dynamically
+    - crypto: sa2ul - fix compiler warning produced by clang
+    - spi: fsi: Handle 9 to 15 byte transfers lengths
+    - spi: fsi: Fix use of the bneq+ sequencer instruction
+    - spi: fsi: Implement restricted size for certain controllers
+    - spi: dw-pci: free previously allocated IRQs if desc->setup() fails
+    - crypto: sa2ul - Select CRYPTO_AUTHENC
+    - crypto: omap-sham - fix digcnt register handling with export/import
+    - crypto: sa2ul - Fix pm_runtime_get_sync() error checking
+    - regmap: debugfs: Fix more error path regressions
+    - hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
+    - hwmon: (w83627ehf) Fix a resource leak in probe
+    - crypto: stm32/crc32 - Avoid lock if hardware is already used
+    - crypto: sun8i-ce - handle endianness of t_common_ctl
+    - media: mx2_emmaprp: Fix memleak in emmaprp_probe
+    - media: mtk-mdp: Fix Null pointer dereference when calling list_add
+    - media: tc358743: initialize variable
+    - media: tc358743: cleanup tc358743_cec_isr
+    - nvme: fix error handling in nvme_ns_report_zones
+    - media: rcar-vin: Fix a reference count leak.
+    - media: rockchip/rga: Fix a reference count leak.
+    - media: platform: fcp: Fix a reference count leak.
+    - media: camss: Fix a reference count leak.
+    - media: s5p-mfc: Fix a reference count leak
+    - media: stm32-dcmi: Fix a reference count leak
+    - media: ti-vpe: Fix a missing check and reference count leak
+    - regulator: resolve supply after creating regulator
+    - hwmon: (bt1-pvt) Test sensor power supply on probe
+    - hwmon: (bt1-pvt) Cache current update timeout
+    - hwmon: (bt1-pvt) Wait for the completion with timeout
+    - spi: imx: Fix freeing of DMA channels if spi_bitbang_start() fails
+    - btrfs: add owner and fs_info to alloc_state io_tree
+    - blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue
+    - ath10k: provide survey info as accumulated data
+    - Bluetooth: hci_uart: Cancel init work before unregistering
+    - [arm64,armhf] drm: panel: Fix bus format for OrtusTech COM43H4M85ULC
+      panel
+    - ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
+    - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
+    - ath10k: Fix the size used in a 'dma_free_coherent()' call in an error
+      handling path
+    - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
+    - [arm64] ASoC: qcom: lpass-platform: fix memory leak
+    - [arm64] ASoC: qcom: lpass-cpu: fix concurrency issue
+    - ath11k: Fix possible memleak in ath11k_qmi_init_service
+    - brcmfmac: check ndev pointer
+    - mwifiex: Do not use GFP_KERNEL in atomic context
+    - [arm64] drm/malidp: Use struct drm_gem_object_funcs.get_sg_table
+      internally
+    - staging: rtl8192u: Do not use GFP_KERNEL in atomic context
+    - drm/gma500: fix error check
+    - scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
+    - scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call
+    - scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg()
+    - scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba()
+    - scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
+    - libbpf: Fix unintentional success return code in bpf_object__load
+    - wilc1000: Fix memleak in wilc_sdio_probe
+    - wilc1000: Fix memleak in wilc_bus_probe
+    - rtw88: don't treat NULL pointer as an array
+    - backlight: sky81452-backlight: Fix refcount imbalance on error
+    - staging: wfx: fix frame reordering
+    - staging: emxx_udc: Fix passing of NULL to dma_alloc_coherent()
+    - [x86] VMCI: check return value of get_user_pages_fast() for errors
+    - mm/error_inject: Fix allow_error_inject function signatures.
+    - drm: panel: Fix bpc for OrtusTech COM43H4M85ULC panel
+    - Bluetooth: Clear suspend tasks on unregister
+    - scsi: ufs: Make ufshcd_print_trs() consider UFSHCD_QUIRK_PRDT_BYTE_GRAN
+    - binder: Remove bogus warning on failed same-process transaction
+    - drm/amdgpu: fix max_entries calculation v4
+    - soundwire: stream: fix NULL/IS_ERR confusion
+    - soundwire: intel: fix NULL/ERR_PTR confusion
+    - tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()
+    - pty: do tty_flip_buffer_push without port->lock in pty_write
+    - [x86] pwm: lpss: Fix off by one error in base_unit math in
+      pwm_lpss_prepare()
+    - [x86] pwm: lpss: Add range limit check for the base_unit register value
+    - sfc: don't double-down() filters in ef100_reset()
+    - ath11k: fix a double free and a memory leak
+    - video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value
+      error
+    - video: fbdev: sis: fix null ptr dereference
+    - video: fbdev: radeon: Fix memleak in radeonfb_pci_register
+    - HID: roccat: add bounds checking in kone_sysfs_write_settings()
+    - ath11k: fix uninitialized return in ath11k_spectral_process_data()
+    - drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check()
+    - [arm64,armhf] drm/panfrost: Ensure GPU quirks are always initialised
+    - iomap: Clear page error before beginning a write
+    - iomap: Mark read blocks uptodate in write_begin
+    - Bluetooth: Fix memory leak in read_adv_mon_features()
+    - Bluetooth: Re-order clearing suspend tasks
+    - [armhf] pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser
+    - [armhf] pinctrl: mcp23s08: Fix mcp23x17 precious range
+    - pinctrl: devicetree: Keep deferring even on timeout
+    - [s390x] bpf: Fix multiple tail calls
+    - net/mlx5: Fix uninitialized variable warning
+    - net/mlx5: Don't call timecounter cyc2time directly from 1PPS flow
+    - scsi: mpt3sas: Fix sync irqs
+    - [arm64,armhf] net: stmmac: Fix incorrect location to set
+      real_num_rx|tx_queues
+    - [arm64,armhf] net: stmmac: use netif_tx_start|stop_all_queues() function
+    - xfs: force the log after remapping a synchronous-writes file
+    - [arm64] cpufreq: armada-37xx: Add missing MODULE_DEVICE_TABLE
+    - ASoC: topology: disable size checks for bytes_ext controls if needed
+    - ASoC: tlv320adcx140: Fix digital gain range
+    - nvmem: core: fix missing of_node_put() in of_nvmem_device_get()
+    - dmaengine: ti: k3-udma-glue: fix channel enable functions
+    - Bluetooth: Fix auto-creation of hci_conn at Conn Complete event
+    - xhci: don't create endpoint debugfs entry before ring buffer is set.
+    - [arm64] drm/msm: Fix the a650 hw_apriv check
+    - net: dsa: rtl8366: Check validity of passed VLANs
+    - net: dsa: rtl8366: Refactor VLAN/PVID init
+    - net: dsa: rtl8366: Skip PVID setting if not requested
+    - net: wilc1000: clean up resource in error path of init mon interface
+    - ASoC: tlv320aic32x4: Fix bdiv clock rate derivation
+    - net: dsa: rtl8366rb: Support all 4096 VLANs
+    - ASoC: SOF: control: add size checks for ext_bytes control .put()
+    - ASoC: tas2770: Fix unbalanced calls to pm_runtime
+    - [armhf] spi: omap2-mcspi: Improve performance waiting for CHSTAT
+    - ath11k: Add checked value for ath11k_ahb_remove
+    - ath6kl: wmi: prevent a shift wrapping bug in
+      ath6kl_wmi_delete_pstream_cmd()
+    - drm: rcar-du: Put reference to VSP device
+    - phy: rockchip-dphy-rx0: Include linux/delay.h
+    - dmaengine: dmatest: Check list for emptiness before access its last
+      entry
+    - ASoC: cros_ec_codec: fix kconfig dependency warning for
+      SND_SOC_CROS_EC_CODEC
+    - misc: mic: scif: Fix error handling path
+    - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
+    - net/mlx5e: IPsec: Use kvfree() for memory allocated with kvzalloc()
+    - [arm*] usb: dwc2: Fix parameter type in function pointer prototype
+    - [arm64,armhf] usb: dwc3: core: Properly default unspecified speed
+    - [arm*] usb: dwc2: Add missing cleanups when usb_add_gadget_udc() fails
+    - rtw88: Fix probe error handling race with firmware loading
+    - rtw88: Fix potential probe error handling race with wow firmware loading
+    - quota: clear padding in v2r1_mem2diskdqb()
+    - [arm*] drm/vc4: crtc: Rework a bit the CRTC state code
+    - ASoC: fsl_sai: Instantiate snd_soc_dai_driver
+    - HID: hid-input: fix stylus battery reporting
+    - tty: hvc: fix link error with CONFIG_SERIAL_CORE_CONSOLE=n
+    - tty: serial: imx: fix link error with CONFIG_SERIAL_CORE_CONSOLE=n
+    - nvmem: core: fix possibly memleak when use
+      nvmem_cell_info_to_nvmem_cell()
+    - [x86] hv: clocksource: Add notrace attribute to read_hv_sched_clock_*()
+      functions
+    - nl80211: fix OBSS PD min and max offset validation
+    - iomap: Use kzalloc to allocate iomap_page
+    - ibmvnic: set up 200GBPS speed
+    - bpf: disallow attaching modify_return tracing functions to other BPF
+      programs
+    - qtnfmac: fix resource leaks on unsupported iftype error return path
+    - pinctrl: aspeed: Use the right pinconf mask
+    - [arm64] iommu/qcom: add missing put_device() call in
+      qcom_iommu_of_xlate()
+    - iio: adc: stm32-adc: fix runtime autosuspend delay when slow polling
+    - net: enic: Cure the enic api locking trainwreck
+    - pinctrl: tigerlake: Fix register offsets for TGL-H variant
+    - serial: 8250: Discard RTS/DTS setting from clock update method
+    - serial: 8250: Skip uninitialized TTY port baud rate update
+    - serial: 8250_dw: Fix clk-notifier/port suspend deadlock
+    - mfd: syscon: Don't free allocated name for regmap_config
+    - mfd: sm501: Fix leaks in probe()
+    - dm: fix missing imposition of queue_limits from dm_wq_work() thread
+    - pinctrl: single: fix pinctrl_spec.args_count bounds check
+    - pinctrl: single: fix debug output when #pinctrl-cells = 2
+    - staging: rtl8712: Fix enqueue_reorder_recvframe()
+    - ASoC: wm_adsp: Pass full name to snd_ctl_notify
+    - iwlwifi: mvm: split a print to avoid a WARNING in ROC
+    - iwlwifi: dbg: remove no filter condition
+    - iwlwifi: dbg: run init_cfg function once per driver load
+    - usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above.
+    - usb: gadget: u_serial: clear suspended flag when disconnecting
+    - usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
+    - bus: mhi: core: Fix the building of MHI module
+    - ocxl: fix kconfig dependency warning for OCXL
+    - nl80211: fix non-split wiphy information
+    - [arm*] usb: dwc2: Fix INTR OUT transfers in DDMA mode.
+    - scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
+    - scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs()
+    - dmaengine: ioat: Allocate correct size for descriptor chunk
+    - staging: qlge: fix build breakage with dumping enabled
+    - ipmi_si: Fix wrong return value in try_smi_init()
+    - tracing: Fix parse_synth_field() error handling
+    - staging: wfx: fix BA sessions for older firmwares
+    - [x86] platform/x86: mlx-platform: Remove PSU EEPROM configuration
+    - dm: fix request-based DM to not bounce through indirect dm_submit_bio
+    - mwifiex: fix double free
+    - [arm64,armhf] drm/panfrost: increase readl_relaxed_poll_timeout values
+    - drm/amdgpu: Fix invalid number of character '{' in amdgpu_acpi_init
+    - ipvs: clear skb->tstamp in forwarding path
+    - bpf, sockmap: Remove skb_orphan and let normal skb_kfree do cleanup
+    - netfilter: nf_log: missing vlan offload tag and proto
+    - mm/swapfile.c: fix potential memory leak in sys_swapon
+    - mm: memcg/slab: fix racy access to page->mem_cgroup in
+      mem_cgroup_from_obj()
+    - mm/memcg: fix device private memcg accounting
+    - mm/mmap.c: replace do_brk with do_brk_flags in comment of
+      insert_vm_struct()
+    - mm/page_alloc.c: fix freeing non-compound pages
+    - mm, oom_adj: don't loop through tasks in __set_oom_adj when not
+      necessary
+    - fs: fix NULL dereference due to data race in prepend_path()
+    - tracing: Handle synthetic event array field type checking correctly
+    - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo
+    - IB/mlx4: Fix starvation in paravirt mux/demux
+    - IB/mlx4: Adjust delayed work when a dup is observed
+    - [powerpc*] pseries: Fix missing of_node_put() in rng_init()
+    - [powerpc*] icp-hv: Fix missing of_node_put() in success path
+    - rcu/tree: Force quiescent state on callback overload
+    - rcutorture: Properly set rcu_fwds for OOM handling
+    - refperf: Avoid null pointer dereference when buf fails to allocate
+    - RDMA/ucma: Fix locking for ctx->events_reported
+    - RDMA/ucma: Add missing locking around rdma_leave_multicast()
+    - mtd: lpddr: fix excessive stack usage with clang
+    - RDMA/hns: Add a check for current state before modifying QP
+    - RDMA/umem: Fix signature of stub ib_umem_find_best_pgsz()
+    - [powerpc*] pseries: explicitly reschedule during drmem_lmb list
+      traversal
+    - [powerpc*] pseries/drmem: don't cache node id in drmem_lmb struct
+    - RDMA/mlx5: Fix potential race between destroy and CQE poll
+    - mtd: mtdoops: Don't write panic data twice
+    - perf tools: Make GTK2 support opt-in
+    - [armel,armhf] 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using
+      DT values
+    - xfs: fix finobt btree block recovery ordering
+    - m68knommu: include SDHC support only when hardware has it
+    - xfs: limit entries returned when counting fsmap records
+    - xfs: fix deadlock and streamline xfs_getfsmap performance
+    - nfs: add missing "posix" local_lock constant table definition
+    - xfs: fix high key handling in the rt allocator's query_range function
+    - RDMA/rtrs-srv: Incorporate ib_register_client into rtrs server init
+    - RDMA/core: Delete function indirection for alloc/free kernel CQ
+    - RDMA: Allow fail of destroy CQ
+    - RDMA: Change XRCD destroy return value
+    - RDMA: Restore ability to return error for destroy WQ
+    - RDMA/umem: Fix ib_umem_find_best_pgsz() for mappings that cross a page
+      boundary
+    - RDMA/umem: Prevent small pages from being returned by
+      ib_umem_find_best_pgsz()
+    - RDMA/qedr: Fix qp structure memory leak
+    - RDMA/qedr: Fix doorbell setting
+    - RDMA/qedr: Fix use of uninitialized field
+    - RDMA/qedr: Fix return code if accept is called on a destroyed qp
+    - RDMA/qedr: Fix inline size returned for iWARP
+    - [powerpc*] pseries/svm: Allocate SWIOTLB buffer anywhere in memory
+    - [powerpc*] watchpoint: Fix quadword instruction handling on p10
+      predecessors
+    - [powerpc*] watchpoint: Fix handling of vector instructions
+    - [powerpc*] watchpoint: Add hw_len wherever missing
+    - [powerpc*] book3s64/hash/4k: Support large linear mapping range with 4K
+    - [powerpc*] 64s/radix: Fix mm_cpumask trimming race vs kthread_use_mm
+    - [powerpc*] papr_scm: Fix warning triggered by perf_stats_show()
+    - RDMA/cma: Combine cma_ndev_work with cma_work
+    - RDMA/cma: Remove dead code for kernel rdmacm multicast
+    - RDMA/cma: Consolidate the destruction of a cma_multicast in one place
+    - RDMA/cma: Fix use after free race in roce multicast join
+    - perf intel-pt: Fix "context_switch event has no tid" error
+    - perf metricgroup: Fix uncore metric expressions
+    - RDMA/qedr: Fix resource leak in qedr_create_qp
+    - RDMA/hns: Set the unsupported wr opcode
+    - RDMA/mlx5: Use set_mkc_access_pd_addr_fields() in reg_create()
+    - RDMA/mlx5: Make mkeys always owned by the kernel's PD when not enabled
+    - RDMA/mlx5: Disable IB_DEVICE_MEM_MGT_EXTENSIONS if IB_WR_REG_MR can't
+      work
+    - i40iw: Add support to make destroy QP synchronous
+    - perf stat: Skip duration_time in setup_system_wide
+    - RDMA/hns: Add check for the validity of sl configuration
+    - RDMA/hns: Solve the overflow of the calc_pg_sz()
+    - RDMA/hns: Fix the wrong value of rnr_retry when querying qp
+    - RDMA/hns: Fix configuration of ack_req_freq in QPC
+    - RDMA/hns: Fix missing sq_sig_type when querying QP
+    - RDMA/mlx5: Fix type warning of sizeof in __mlx5_ib_alloc_counters()
+    - mtd: hyperbus: hbmc-am654: Fix direct mapping setup flash access
+    - overflow: Include header file with SIZE_MAX declaration
+    - mtd: parsers: bcm63xx: Do not make it modular
+    - RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces
+    - [powerpc*] 64: fix irq replay missing preempt
+    - [powerpc*] 64: fix irq replay pt_regs->softe value
+    - [powerpc*] perf: Exclude pmc5/6 from the irrelevant PMU group
+      constraints
+    - [powerpc*] perf/hv-gpci: Fix starting index value
+    - perf stat: Fix out of bounds CPU map access when handling armv8_pmu
+      events
+    - i3c: master: Fix error return in cdns_i3c_master_probe()
+    - [powerpc*] security: Fix link stack flush instruction
+    - [powerpc*] book3s64/radix: Make radix_mem_block_size 64bit
+    - [powerpc*] papr_scm: Add PAPR command family to pass-through command-set
+    - [powerpc*] cpufreq: powernv: Fix frame-size-overflow in
+      powernv_cpufreq_reboot_notifier
+    - IB/rdmavt: Fix sizeof mismatch
+    - RDMA/rxe: Fix skb lifetime in rxe_rcv_mcast_pkt()
+    - f2fs: reject CASEFOLD inode flag without casefold feature
+    - um: vector: Use GFP_ATOMIC under spin lock
+    - um: time-travel: Fix IRQ handling in time_travel_handle_message()
+    - thermal: core: Adding missing nlmsg_free() in
+      thermal_genl_sampling_temp()
+    - perf trace: Fix off by ones in memset() after realloc() in arches using
+      libaudit
+    - f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
+    - afs: Fix rapid cell addition/removal by not using RCU on cells tree
+    - afs: Fix cell refcounting by splitting the usage counter
+    - afs: Fix cell purging with aliases
+    - afs: Fix cell removal
+    - RDMA/rxe: Handle skb_clone() failure in rxe_recv.c
+    - mm/page_owner: change split_page_owner to take a count
+    - mm/huge_memory: fix split assumption of page size
+    - mm: fix a race during THP splitting
+    - lib/crc32.c: fix trivial typo in preprocessor condition
+    - ramfs: fix nommu mmap with gaps in the page cache
+    - rapidio: fix error handling path
+    - rapidio: fix the missed put_device() for rio_mport_add_riodev
+    - clk: meson: axg-audio: separate axg and g12a regmap tables
+    - rtc: ds1307: Clear OSF flag on DS1388 when setting time
+    - clk: meson: g12a: mark fclk_div2 as critical
+    - PCI: designware-ep: Fix the Header Type check
+    - PCI: aardvark: Fix compilation on s390
+    - PCI: aardvark: Check for errors from pci_bridge_emul_init() call
+    - PCI: iproc: Set affinity mask on MSI interrupts
+    - PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY
+    - vfio: add a singleton check for vfio_group_pin_pages
+    - [s390x] pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY
+    - vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn
+    - vfio: fix a missed vfio group put in vfio_pin_pages
+    - [x86,arm64] vfio/type1: fix dirty bitmap calculation in vfio_dma_rw
+    - nfsd: Cache R, RW, and W opens separately
+    - [x86] PCI: hv: Fix hibernation in case interrupts are not re-created
+    - module: statically initialize init section freeing data
+    - clk: at91: clk-main: update key before writing AT91_CKGR_MOR
+    - clk: bcm2835: add missing release if devm_clk_hw_register fails
+    - kbuild: deb-pkg: do not build linux-headers package if CONFIG_MODULES=n
+    - watchdog: Fix memleak in watchdog_cdev_register
+    - watchdog: Use put_device on error
+    - watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3
+    - clk: at91: sam9x60: support only two programmable clocks
+    - svcrdma: fix bounce buffers for unaligned offsets and multiple pages
+    - ext4: fix dead loop in ext4_mb_new_blocks
+    - ext4: discard preallocations before releasing group lock
+    - ext4: disallow modifying DAX inode flag if inline_data has been set
+    - ext4: limit entries returned when counting fsmap records
+    - vfio/pci: Clear token on bypass registration failure
+    - [x86,arm64] vfio iommu type1: Fix memory leak in
+      vfio_iommu_type1_pin_pages
+    - clk: qcom: gdsc: Keep RETAIN_FF bit set if gdsc is already on
+    - clk: imx8mq: Fix usdhc parents order
+    - SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()
+    - NFSv4.2: Fix NFS4ERR_STALE error when doing inter server copy
+    - platform/chrome: cros_ec_typec: Send enum values to
+      usb_role_switch_set_role()
+    - platform/chrome: cros_ec_lightbar: Reduce ligthbar get version command
+    - Input: elants_i2c - fix typo for an attribute to show calibration count
+    - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
+    - Input: stmfts - fix a & vs && typo
+    - Input: ep93xx_keypad - fix handling of platform_get_irq() error
+    - Input: omap4-keypad - fix handling of platform_get_irq() error
+    - Input: twl4030_keypad - fix handling of platform_get_irq() error
+    - Input: sun4i-ps2 - fix handling of platform_get_irq() error
+    - [x86] KVM: x86: emulating RDPID failure shall return #UD rather than #GP
+    - [x86] KVM: nSVM: CR3 MBZ bits are only 63:52
+    - scsi: bfa: Fix error return in bfad_pci_init()
+    - [arm64] mm: use single quantity to represent the PA to VA translation
+    - bpf: Enforce id generation for all may-be-null register type
+    - net: dsa: seville: the packet buffer is 2 megabits, not megabytes
+    - netfilter: conntrack: connection timeout after re-register
+    - netfilter: ebtables: Fixes dropping of small packets in bridge nat
+    - vdpa/mlx5: Make use of a specific 16 bit endianness API
+    - vdpa/mlx5: Fix failure to bring link up
+    - vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK
+    - netfilter: nf_fwd_netdev: clear timestamp in forwarding path
+    - [arm64] soc: xilinx: Fix error code in zynqmp_pm_probe()
+    - [arm64] arm64: dts: meson: vim3: correct led polarity
+    - [armhf] dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator
+    - [arm64] dts: allwinner: h5: remove Mali GPU PMU module
+    - [armhf] memory: omap-gpmc: Fix a couple off by ones
+    - [armhf] memory: omap-gpmc: Fix build error without CONFIG_OF
+    - [arm64] dts: qcom: msm8992: Fix UART interrupt property
+    - [arm64] dts: qcom: sdm845-db845c: Fix hdmi nodes
+    - [arm64] dts: qcom: sm8150: fix up primary USB nodes
+    - [arm64] dts: qcom: sc7180: Fix the LLCC base register size
+    - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
+    - firmware: arm_scmi: Fix NULL pointer dereference in mailbox_chan_free
+    - [arm64] dts: mt8173-elm: fix supported values for
+      regulator-allowed-modes of da9211
+    - [arm64] dts: qcom: sm8250: Rename UART2 node to UART12
+    - dmaengine: ti: k3-udma-glue: Fix parameters for rx ring pair request
+    - [arm64] dts: imx8mq: Add missing interrupts to GPC
+    - [arm64] dts: qcom: sc7180: Drop flags on mdss irqs
+    - [arm64] dts: sdm845: Fixup OPP table for all qup devices
+    - [arm64] dts: qcom: msm8916: Remove one more thermal trip point unit name
+    - [arm64] dts: qcom: pm8916: Remove invalid reg size from wcd_codec
+    - [arm64] dts: qcom: msm8916: Fix MDP/DSI interrupts
+    - [arm64] dts: mt8173: elm: Fix nor_flash node property
+    - [arm64] dts: ti: k3-j721e: Rename mux header and update macro names
+    - [arm64] dts: actions: limit address range for pinctrl node
+    - lightnvm: fix out-of-bounds write to array devices->info[]
+    - [powerpc*] powernv/dump: Fix race while processing OPAL dump
+    - [powerpc*] 64s: Remove TM from Power10 features
+    - [powerpc*] pseries: Avoid using addr_to_pfn in real mode
+    - nvmet: fix uninitialized work for zero kato
+    - nvmet: limit passthru MTDS by BIO_MAX_PAGES
+    - [x86] KVM: ioapic: break infinite recursion on lazy EOI (CVE-2020-27152)
+    - NTB: hw: amd: fix an issue about leak system resources
+    - sched/features: Fix !CONFIG_JUMP_LABEL case
+    - perf: correct SNOOPX field offset
+    - random32: make prandom_u32() output unpredictable
+    - i2c: core: Restore acpi_walk_dep_device_list() getting called after
+      registering the ACPI i2c devs
+    - md/bitmap: fix memory leak of temporary bitmap
+    - block: ratelimit handle_bad_sector() message
+    - [x86] dumpstack: Fix misleading instruction pointer error message
+    - crypto: ccp - fix error handling
+    - [x86] asm: Replace __force_order with a memory clobber
+    - [x86] mce: Add Skylake quirk for patrol scrub reported errors
+    - media: firewire: fix memory leak
+    - media: ati_remote: sanity check for both endpoints
+    - media: st-delta: Fix reference count leak in delta_run_work
+    - media: sti: Fix reference count leaks
+    - media: exynos4-is: Fix several reference count leaks due to
+      pm_runtime_get_sync
+    - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
+    - media: exynos4-is: Fix a reference count leak
+    - media: vsp1: Fix runtime PM imbalance on error
+    - media: platform: s3c-camif: Fix runtime PM imbalance on error
+    - media: platform: sti: hva: Fix runtime PM imbalance on error
+    - media: bdisp: Fix runtime PM imbalance on error
+    - media: media/pci: prevent memory leak in bttv_probe
+    - [x86] mce: Annotate mce_rd/wrmsrl() with noinstr
+    - crypto: hisilicon - fixed memory allocation error
+    - spi: fsi: Fix clock running too fast
+    - blk-mq: always allow reserved allocation in hctx_may_queue
+    - [x86] mce: Make mce_rdmsrl() panic on an inaccessible MSR
+    - media: uvcvideo: Ensure all probed info is returned to v4l2
+    - mmc: sdio: Check for CISTPL_VERS_1 buffer size
+    - media: saa7134: avoid a shift overflow
+    - media: atomisp: fix memleak in ia_css_stream_create
+    - media: venus: fixes for list corruption
+    - notifier: Fix broken error handling pattern
+    - fs: dlm: fix configfs memory leak
+    - media: venus: core: Fix error handling in probe
+    - media: venus: core: Fix runtime PM imbalance in venus_probe
+    - ntfs: add check for mft record size in superblock
+    - ip_gre: set dev->hard_header_len and dev->needed_headroom properly
+    - mac80211: handle lack of sband->bitrates in rates
+    - staging: wfx: fix handling of MMIC error
+    - libbpf: Close map fd if init map slots failed
+    - bpf: Use raw_spin_trylock() for pcpu_freelist_push/pop in NMI
+    - PM: hibernate: remove the bogus call to get_gendisk() in
+      software_resume()
+    - scsi: mvumi: Fix error return in mvumi_io_attach()
+    - scsi: target: core: Add CONTROL field for trace events
+    - [amd64] mic: vop: copy data to kernel space then write to io memory
+    - [amd64] misc: vop: add round_up(x,4) for vring_size to avoid kernel
+      panic
+    - [arm64,armhf] usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc
+    - usb: gadget: function: printer: fix use-after-free in __lock_acquire
+    - rtw88: pci: Power cycle device during shutdown
+    - udf: Limit sparing table size
+    - udf: Avoid accessing uninitialized data on failed inode read
+    - rtw88: increse the size of rx buffer size
+    - USB: cdc-acm: handle broken union descriptors
+    - [arm64,armhf] usb: dwc3: simple: add support for Hikey 970
+    - can: flexcan: flexcan_chip_stop(): add error handling and propagate
+      error value
+    - HID: multitouch: Lenovo X1 Tablet Gen3 trackpoint and buttons
+    - ath9k: hif_usb: fix race condition between usb_get_urb() and
+      usb_kill_anchored_urbs()
+    - [arm64,armhf] drm/panfrost: add Amlogic GPU integration quirks
+    - [arm64,armhf] drm/panfrost: add amlogic reset quirk callback
+    - [arm64,armhf] drm/panfrost: add support for vendor quirk
+    - bpf: Limit caller's stack depth 256 for subprogs with tailcalls
+    - dma-direct: Fix potential NULL pointer dereference
+    - misc: rtsx: Fix memory leak in rtsx_pci_probe
+    - reiserfs: only call unlock_new_inode() if I_NEW
+    - opp: Prevent memory leak in dev_pm_opp_attach_genpd()
+    - xfs: make sure the rt allocator doesn't run off the end
+    - usb: ohci: Default to per-port over-current protection
+    - drm: fix double free for gbo in drm_gem_vram_init and
+      drm_gem_vram_create
+    - Bluetooth: Only mark socket zapped after unlocking
+    - drm/msm/a6xx: fix a potential overflow issue
+    - drm/xlnx: Use devm_drm_dev_alloc
+    - iomap: fix WARN_ON_ONCE() from unprivileged users
+    - scsi: ibmvfc: Fix error return in ibmvfc_probe()
+    - scsi: qla2xxx: Warn if done() or free() are called on an already freed
+      srb
+    - soundwire: cadence: fix race condition between suspend and Slave device
+      alerts
+    - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
+    - rtl8xxxu: prevent potential memory leak
+    - Fix use after free in get_capset_info callback.
+    - HID: ite: Add USB id match for Acer One S1003 keyboard dock
+    - scsi: qedf: Return SUCCESS if stale rport is encountered
+    - scsi: qedi: Mark all connections for recovery on link down event
+    - scsi: qedi: Protect active command list to avoid list corruption
+    - scsi: qedi: Fix list_del corruption while removing active I/O
+    - fbmem: add margin check to fb_check_caps()
+    - tty: ipwireless: fix error handling
+    - Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb
+    - ipvs: Fix uninit-value in do_ip_vs_set_ctl()
+    - reiserfs: Fix memory leak in reiserfs_parse_options()
+    - [s390x] qeth: strictly order bridge address events
+    - mwifiex: don't call del_timer_sync() on uninitialized timer
+    - ALSA: hda/ca0132 - Add AE-7 microphone selection commands.
+    - ALSA: hda/ca0132 - Add new quirk ID for SoundBlaster AE-7.
+    - [x86] ASoC: SOF: Add topology filename override based on dmi data match
+    - [x86] ASoC: Intel: sof_rt5682: override quirk data for
+      tgl_max98373_rt5682
+    - scsi: smartpqi: Avoid crashing kernel for controller issues
+    - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
+    - usb: core: Solve race condition in anchor cleanup functions
+    - soundwire: intel: reinitialize IP+DSP in .prepare(), but only when
+      resuming
+    - scsi: ufs: ufs-qcom: Fix race conditions caused by
+      ufs_qcom_testbus_config()
+    - dmaengine: dw: Add DMA-channels mask cell support
+    - dmaengine: dw: Activate FIFO-mode for memory peripherals only
+    - drm/hisilicon: Code refactoring for hibmc_drv_de
+    - [arm64,armhf] drm/panfrost: perfcnt: fix ref count leak in
+      panfrost_perfcnt_enable_locked
+    - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
+    - [s390x] qeth: don't let HW override the configured port role
+    - tty: serial: lpuart: fix lpuart32_write usage
+    - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char
+    - usb: gadget: bcm63xx_udc: fix up the error of undeclared usb_debug_root
+    - usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
+    - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
+    - usb: cdns3: gadget: free interrupt after gadget has deleted
+    - eeprom: at25: set minimum read/write access stride to 1
+    - usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets.
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.3
+    - cpufreq: Improve code around unlisted freq check
+    - netfilter: nftables_offload: KASAN slab-out-of-bounds Read in
+      nft_flow_rule_create
+    - io_uring: allow timeout/poll/files killing to take task into account
+    - io_uring: move dropping of files into separate helper
+    - io_uring: stash ctx task reference for SQPOLL
+    - io_uring: unconditionally grab req->task
+    - io_uring: return cancelation status from poll/timeout/files handlers
+    - io_uring: enable task/files specific overflow flushing
+    - io_uring: don't rely on weak ->files references
+    - io_uring: reference ->nsproxy for file table commands
+    - io_wq: Make io_wqe::lock a raw_spinlock_t
+    - io-wq: fix use-after-free in io_wq_worker_running
+    - io_uring: no need to call xa_destroy() on empty xarray
+    - io_uring: Fix use of XArray in __io_uring_files_cancel
+    - io_uring: Fix XArray usage in io_uring_add_task_file
+    - io_uring: Convert advanced XArray uses to the normal API
+    - scripts/setlocalversion: make git describe output more reliable
+    - [arm64] efi/arm64: libstub: Deal gracefully with EFI_RNG_PROTOCOL
+      failure
+    - fs/kernel_read_file: Remove FIRMWARE_EFI_EMBEDDED enum
+    - [arm64] Run ARCH_WORKAROUND_1 enabling code on all CPUs
+    - [arm64] Run ARCH_WORKAROUND_2 enabling code on all CPUs
+    - [arm64] link with -z norelro regardless of CONFIG_RELOCATABLE
+    - [x86] PCI: Fix intel_mid_pci.c build error when ACPI is not enabled
+    - efivarfs: Replace invalid slashes with exclamation marks in dentries.
+    - bnxt_en: Check abort error state in bnxt_open_nic().
+    - bnxt_en: Fix regression in workqueue cleanup logic in bnxt_remove_one().
+    - bnxt_en: Invoke cancel_delayed_work_sync() for PFs also.
+    - bnxt_en: Re-write PCI BARs after PCI fatal error.
+    - bnxt_en: Send HWRM_FUNC_RESET fw command unconditionally.
+    - cxgb4: set up filter action after rewrites
+    - gtp: fix an use-before-init in gtp_newlink()
+    - ibmveth: Fix use of ibmveth in a bridge.
+    - ibmvnic: fix ibmvnic_set_mac
+    - mlxsw: core: Fix memory leak on module removal
+    - mlxsw: Only advertise link modes supported by both driver and device
+    - netem: fix zero division in tabledist
+    - net: hns3: Clear the CMDQ registers before unmapping BAR region
+    - net: ipa: command payloads already mapped
+    - net/sched: act_mpls: Add softdep on mpls_gso.ko
+    - r8169: fix issue with forced threading in combination with shared
+      interrupts
+    - ravb: Fix bit fields checking in ravb_hwtstamp_get()
+    - tcp: Prevent low rmem stalls with SO_RCVLOWAT.
+    - tipc: fix memory leak caused by tipc_buf_append()
+    - net/smc: fix invalid return code in smcd_new_buf_create()
+    - net/smc: fix suppressed return code
+    - net: protect tcf_block_unbind with block lock
+    - erofs: avoid duplicated permission check for "trusted." xattrs
+    - [x86] arch/x86/amd/ibs: Fix re-arming IBS Fetch
+    - [x86] traps: Fix #DE Oops message regression
+    - [x86] xen: disable Firmware First mode for correctable memory errors
+    - PCI: aardvark: Fix initialization with old Marvell's Arm Trusted
+      Firmware
+    - ata: ahci: mvebu: Make SATA PHY optional for Armada 3720
+    - fuse: fix page dereference after free
+    - bpf: Fix comment for helper bpf_current_task_under_cgroup()
+    - evm: Check size of security.evm before using it
+    - p54: avoid accessing the data mapped to streaming DMA
+    - cxl: Rework error message for incompatible slots
+    - RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel()
+    - mtd: lpddr: Fix bad logic in print_drs_error
+    - [x86] drm/i915/gem: Serialise debugfs i915_gem_objects with ctx->mutex
+    - serial: qcom_geni_serial: To correct QUP Version detection logic
+    - serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt
+    - PM: runtime: Fix timer_expires data type on 32-bit arches
+    - ata: sata_rcar: Fix DMA boundary mask
+    - mm: mark async iocb read as NOWAIT once some data has been copied
+    - xen/gntdev.c: Mark pages as dirty
+    - io_uring: don't reuse linked_timeout
+    - misc: rtsx: do not setting OC_POWER_DOWN reg in rtsx_pci_init_ocp()
+    - phy: marvell: comphy: Convert internal SMCC firmware return codes to
+      errno
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.4
+    - [x86,powerpc] Rename memcpy_mcsafe() to copy_mc_to_{user, kernel}()
+    - [x86] copy_mc: Introduce copy_mc_enhanced_fast_string()
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.5
+    - xen/events: avoid removing an event channel while handling it
+      (CVE-2020-27675)
+    - xen/events: add a proper barrier to 2-level uevent unmasking
+      (CVE-2020-27673)
+    - xen/events: fix race in evtchn_fifo_unmask() (CVE-2020-27673)
+    - xen/events: add a new "late EOI" evtchn framework (CVE-2020-27673)
+    - xen/blkback: use lateeoi irq binding (CVE-2020-27673)
+    - xen/netback: use lateeoi irq binding (CVE-2020-27673)
+    - xen/scsiback: use lateeoi irq binding (CVE-2020-27673)
+    - xen/pvcallsback: use lateeoi irq binding (CVE-2020-27673)
+    - xen/pciback: use lateeoi irq binding (CVE-2020-27673)
+    - xen/events: switch user event channels to lateeoi model (CVE-2020-27673)
+    - xen/events: use a common cpu hotplug hook for event channels
+      (CVE-2020-27673)
+    - xen/events: defer eoi in case of excessive number of events
+      (CVE-2020-27673)
+    - xen/events: block rogue events for some time (CVE-2020-27673)
+    - [arm64] tee: client UUID: Skip REE kernel login method as well
+    - [x86] unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10
+      compiled kernels
+    - [x86] alternative: Don't call text_poke() in lazy TLB mode
+    - RDMA/mlx5: Fix devlink deadlock on net namespace deletion
+    - afs: Fix a use after free in afs_xattr_get_acl()
+    - afs: Fix afs_launder_page to not clear PG_writeback
+    - RDMA/qedr: Fix memory leak in iWARP CM
+    - ata: sata_nv: Fix retrieving of active qcs
+    - [arm64] efi: increase EFI PE/COFF header padding to 64 KB
+    - afs: Fix to take ref on page when PG_private is set
+    - afs: Fix page leak on afs_write_begin() failure
+    - afs: Fix where page->private is set during write
+    - afs: Wrap page->private manipulations in inline functions
+    - afs: Alter dirty range encoding in page->private
+    - afs: Fix afs_invalidatepage to adjust the dirty region
+    - afs: Fix dirty-region encoding on ppc32 with 64K pages
+    - lockdep: Fix preemption WARN for spurious IRQ-enable
+    - [arm64,armhf] usb: host: ehci-tegra: Fix error handling in
+      tegra_ehci_probe()
+    - futex: Fix incorrect should_fail_futex() handling
+    - [powerpc*] vmemmap: Fix memory leak with vmemmap list allocation
+      failures.
+    - [powerpc*] powernv/smp: Fix spurious DBG() warning
+    - RDMA/core: Change how failing destroy is handled during uobj abort
+    - f2fs: allocate proper size memory for zstd decompress
+    - mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race
+    - [powerpc*] select ARCH_WANT_IRQS_OFF_ACTIVATE_MM
+    - [sparc64] remove mm_cpumask clearing to fix kthread_use_mm race
+    - f2fs: add trace exit in exception path
+    - f2fs: do sanity check on zoned block device path
+    - f2fs: fix uninit-value in f2fs_lookup
+    - f2fs: fix to check segment boundary during SIT page readahead
+    - [s390x] startup: avoid save_area_sync overflow
+    - f2fs: compress: fix to disallow enabling compress on non-empty file
+    - [s390x] ap/zcrypt: revisit ap and zcrypt error handling
+    - f2fs: handle errors of f2fs_get_meta_page_nofail
+    - afs: Don't assert on unpurgeable server records
+    - [powerpc*] 64s: handle ISA v3.1 local copy-paste context switches
+    - [armel,armhf] 8997/2: hw_breakpoint: Handle inexact watchpoint addresses
+    - NFS4: Fix oops when copy_file_range is attempted with NFS4.0 source
+    - xfs: Set xfs_buf type flag when growing summary/bitmap files
+    - xfs: Set xfs_buf's b_ops member when zeroing bitmap/summary files
+    - xfs: log new intent items created as part of finishing recovered intent
+      items
+    - power: supply: bq27xxx: report "not charging" on all types
+    - xfs: change the order in which child and parent defer ops are finished
+    - xfs: fix realtime bitmap/summary file truncation when growing rt volume
+    - io_uring: don't set COMP_LOCKED if won't put
+    - ath10k: fix retry packets update in station dump
+    - [x86] kaslr: Initialize mem_limit to the real maximum address
+    - drm/ast: Separate DRM driver from PCI code
+    - drm/amdgpu: restore ras flags when user resets eeprom(v2)
+    - ath10k: start recovery process when payload length exceeds max htc
+      length for sdio
+    - ath10k: fix VHT NSS calculation when STBC is enabled
+    - drm/scheduler: Scheduler priority fixes (v2)
+    - [x86] ASoC: SOF: fix a runtime pm issue in SOF when HDMI codec doesn't
+      work
+    - drm/bridge_connector: Set default status connected for eDP connectors
+    - media: videodev2.h: RGB BT2020 and HSV are always full range
+    - [x86] usb: typec: tcpm: During PR_SWAP, source caps should be sent only
+      after tSwapSourceStart
+    - mmc: via-sdmmc: Fix data race bug
+    - brcmfmac: increase F2 watermark for BCM4329
+    - [arm64] topology: Stop using MPIDR for topology information
+    - printk: reduce LOG_BUF_SHIFT range for H8300
+    - [ia64] kprobes: Use generic kretprobe trampoline handler
+    - bpf: Permit map_ptr arithmetic with opcode add and offset 0
+    - [arm64,armhf] drm: lima: fix common struct sg_table related issues
+    - [arm64,armhf] drm: panfrost: fix common struct sg_table related issues
+    - media: uvcvideo: Fix dereference of out-of-bound list iterator
+    - selinux: access policycaps with READ_ONCE/WRITE_ONCE
+    - samples/bpf: Fix possible deadlock in xdpsock
+    - [riscv64] Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
+    - cpufreq: sti-cpufreq: add stih418 support
+    - USB: adutux: fix debugging
+    - mac80211: add missing queue/hash initialization to 802.3 xmit
+    - usb: xhci: omit duplicate actions when suspending a runtime suspended
+      host.
+    - SUNRPC: Mitigate cond_resched() in xprt_transmit()
+    - [arm64] mm: return cpu_all_mask when node is NUMA_NO_NODE
+    - [armhf] can: flexcan: disable clocks during stop mode
+    - xfs: don't free rt blocks when we're doing a REMAP bunmapi call
+    - xfs: avoid LR buffer overrun due to crafted h_len
+    - ACPI: Add out of bounds and numa_off protections to pxm_to_node()
+    - brcmfmac: Fix warning message after dongle setup failed
+    - ath11k: Use GFP_ATOMIC instead of GFP_KERNEL in
+      ath11k_dp_htt_get_ppdu_desc
+    - ath11k: fix warning caused by lockdep_assert_held
+    - ath11k: change to disable softirqs for ath11k_regd_update to solve
+      deadlock
+    - drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values
+    - [arm64,armhf] usb: dwc3: core: do not queue work if dr_mode is not
+      USB_DR_MODE_OTG
+    - [arm64] bus/fsl_mc: Do not rely on caller to provide non NULL mc_io
+    - ACPI: HMAT: Fix handling of changes from ACPI 6.2 to ACPI 6.3
+    - block: Consider only dispatched requests for inflight statistic
+    - btrfs: fix replace of seed device
+    - md/bitmap: md_bitmap_get_counter returns wrong blocks
+    - f2fs: fix to set SBI_NEED_FSCK flag for inconsistent inode
+    - bnxt_en: Log unknown link speed appropriately.
+    - [arm64] rpmsg: glink: Use complete_all for open states
+    - PCI/ACPI: Add Ampere Altra SOC MCFG quirk
+    - [armhf] clk: ti: clockdomain: fix static checker warning
+    - nfsd: rename delegation related tracepoints to make them less confusing
+    - nfsd4: remove check_conflicting_opens warning
+    - net: 9p: initialize sun_server.sun_path to have addr's value only when
+      addr is valid
+    - ceph: encode inodes' parent/d_name in cap reconnect message
+    - jbd2: avoid transaction reuse after reformatting
+    - ext4: Detect already used quota file early
+    - [ppc64el] KVM: PPC: Book3S HV: Do not allocate HPT for a nested guest
+    - scsi: core: Clean up allocation and freeing of sgtables
+    - gfs2: call truncate_inode_pages_final for address space glocks
+    - gfs2: Fix NULL pointer dereference in gfs2_rgrp_dump
+    - gfs2: use-after-free in sysfs deregistration
+    - gfs2: add validation checks for size of superblock
+    - Handle STATUS_IO_TIMEOUT gracefully
+    - cifs: handle -EINTR in cifs_setattr
+    - [armhf] memory: emif: Remove bogus debugfs error handling
+    - nbd: make the config put is called before the notifying the waiter
+    - sgl_alloc_order: fix memory leak
+    - nvme-rdma: fix crash when connect rejected
+    - vmlinux.lds.h: Add PGO and AutoFDO input sections
+    - [mips64el,mipsel] irqchip/loongson-htvec: Fix initial interrupt clearing
+    - md: fix the checking of wrong work queue
+    - md/raid5: fix oops during stripe resizing
+    - mmc: sdhci: Add LTR support for some Intel BYT based controllers
+    - mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN
+    - mm: memcg/slab: uncharge during kmem_cache_free_bulk()
+    - seccomp: Make duplicate listener detection non-racy
+    - [x86] perf/x86/intel: Fix Ice Lake event constraint table
+    - [x86] perf/x86/amd: Fix sampling Large Increment per Cycle events
+    - [x86] perf/amd/uncore: Set all slices and threads to restore perf stat
+      -a behaviour
+    - [x86] perf/x86/amd/ibs: Don't include randomized bits in
+      get_ibs_op_count()
+    - [x86] perf/x86/amd/ibs: Fix raw sample data accumulation
+    - media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any effect
+    - fs: Don't invalidate page buffers in block_write_full_page()
+    - ACPI: configfs: Add missing config_item_put() to fix refcount leak
+    - NFS: fix nfs_path in case of a rename retry
+    - ACPI: button: fix handling lid state changes when input device closed
+    - ACPI: video: use ACPI backlight for HP 635 Notebook
+    - ACPI: debug: don't allow debugging when ACPI is disabled
+    - PCI/ACPI: Whitelist hotplug ports for D3 if power managed by ACPI
+    - ACPI: EC: PM: Flush EC work unconditionally after wakeup
+    - ACPI: EC: PM: Drop ec_no_wakeup check from acpi_ec_dispatch_gpe()
+    - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs
+    - io-wq: assign NUMA node locality if appropriate
+    - w1: mxc_w1: Fix timeout resolution problem leading to bus error
+    - fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum
+    - scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
+    - scsi: qla2xxx: Fix MPI reset needed message
+    - scsi: qla2xxx: Fix reset of MPI firmware
+    - scsi: qla2xxx: Fix crash on session cleanup with unload
+    - PM: runtime: Remove link state checks in rpm_get/put_supplier()
+    - btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode
+    - btrfs: improve device scanning messages
+    - btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations
+    - btrfs: sysfs: init devices outside of the chunk_mutex
+    - btrfs: tracepoints: output proper root owner for
+      trace_find_free_extent()
+    - btrfs: reschedule if necessary when logging directory items
+    - btrfs: send, orphanize first all conflicting inodes when processing
+      references
+    - btrfs: send, recompute reference path after orphanization of a directory
+    - btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send()
+    - btrfs: tree-checker: fix false alert caused by legacy btrfs root item
+    - btrfs: reschedule when cloning lots of extents
+    - btrfs: cleanup cow block on error
+    - btrfs: skip devices without magic signature when mounting
+    - btrfs: tree-checker: validate number of chunk stripes and parity
+    - btrfs: fix use-after-free on readahead extent after failure to create it
+    - btrfs: fix readahead hang and use-after-free after removing a device
+    - btrfs: drop the path before adding block group sysfs files
+    - usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC
+    - [arm64] usb: dwc3: pci: Allow Elkhart Lake to utilize DSM method for PM
+      functionality
+    - [arm64,armhf] usb: dwc3: ep0: Fix ZLP for OUT ep0 requests
+    - [arm64,armhf] usb: dwc3: gadget: Check MPS of the request length
+    - [arm64,armhf] usb: dwc3: gadget: Reclaim extra TRBs after request
+      completion
+    - [arm64,armhf] usb: dwc3: core: add phy cleanup for probe error handling
+    - [arm64,armhf] usb: dwc3: core: don't trigger runtime pm when remove
+      driver
+    - [arm64,armhf] usb: dwc3: gadget: Resume pending requests after
+      CLEAR_STALL
+    - [arm64,armhf] usb: dwc3: gadget: END_TRANSFER before CLEAR_STALL command
+    - usb: cdc-acm: fix cooldown mechanism
+    - [x86] usb: typec: tcpm: reset hard_reset_count for any disconnect
+    - usbcore: Check both id_table and match() when both available
+    - USB: apple-mfi-fastcharge: don't probe unhandled devices
+    - [x86] drm/i915: Force VT'd workarounds when running as a guest OS
+    - vt: keyboard, simplify vt_kdgkbsent
+    - vt: keyboard, extend func_buf_lock to readers (CVE-2020-25656)
+    - vt_ioctl: fix GIO_UNIMAP regression
+    - HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery
+    - [x86] mce: Allow for copy_mc_fragile symbol checksum to be generated
+    - [arm64] tty: serial: fsl_lpuart: LS1021A has a FIFO size of 16 words,
+      like LS1028A
+    - tracing: Fix race in trace_open and buffer resize call
+    - [powerpc*] Fix random segfault when freeing hugetlb range
+    - udf: Fix memory leak when mounting
+    - rcu-tasks: Fix grace-period/unlock race in RCU Tasks Trace
+    - rcu-tasks: Fix low-probability task_struct leak
+    - rcu-tasks: Enclose task-list scan in rcu_read_lock()
+    - [s390x] stp: add locking to sysfs functions
+    - [powerpc*] rtas: Restrict RTAS requests from userspace
+    - [powerpc*] Warn about use of smt_snooze_delay
+    - [powerpc*] memhotplug: Make lmb size 64bit
+    - [powerpc*] powernv/elog: Fix race while processing OPAL error log event.
+    - [powerpc*] powermac: Fix low_sleep_handler with KUAP and KUEP
+    - [powerpc*] mce: Avoid nmi_enter/exit in real mode on pseries hash
+    - [powerpc*] Fix undetected data corruption with P9N DD2.1 VSX CI load
+      emulation
+    - [powerpc*] 32: Fix vmap stack - Do not activate MMU before reading task
+      struct
+    - [powerpc*] 32: Fix vmap stack - Properly set r1 before activating MMU
+    - block: advance iov_iter on bio_add_hw_page failure
+    - io_uring: use type appropriate io_kiocb handler for double poll
+    - [armhf] remoteproc: Fixup coredump debugfs disable request
+    - gfs2: Make sure we don't miss any delayed withdraws
+    - gfs2: Only access gl_delete for iopen glocks
+    - NFSv4: Wait for stateid updates after CLOSE/OPEN_DOWNGRADE
+    - NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag
+    - NFSD: Add missing NFSv2 .pc_func methods
+    - ubifs: dent: Fix some potential memory leaks while iterating entries
+    - ubifs: xattr: Fix some potential memory leaks while iterating entries
+    - ubifs: journal: Make sure to not dirty twice for auth nodes
+    - ubifs: Fix a memleak after dumping authentication mount options
+    - ubifs: Don't parse authentication mount options in remount process
+    - ubifs: mount_ubifs: Release authentication resource in error handling
+      path
+    - perf vendor events amd: Add L2 Prefetch events for zen1
+    - perf python scripting: Fix printable strings in python3 scripts
+    - ubi: check kthread_should_stop() after the setting of task state
+    - [arm64,armhf] i2c: imx: Fix external abort on interrupt in exit paths
+    - drm/amdgpu: don't map BO in reserved region
+    - drm/amdgpu: vcn and jpeg ring synchronization
+    - drm/amdgpu: update golden setting for sienna_cichlid
+    - drm/amdgpu: correct the gpu reset handling for job != NULL case
+    - drm/amdgpu: add function to program pbb mode for sienna cichlid
+    - drm/amdgpu: increase the reserved VM size to 2MB
+    - ceph: promote to unsigned long long before shifting
+    - libceph: clear con->out_msg on Policy::stateful_server faults
+    - 9P: Cast to loff_t before multiplying
+    - net/sunrpc: Fix return value for sysctl sunrpc.transports
+    - [arm64] PCI: qcom: Make sure PCIe is reset before init for rev 2.1.0
+    - ring-buffer: Return 0 on success from ring_buffer_resize()
+    - [x86] intel_idle: Ignore _CST if control cannot be taken from the
+      platform
+    - [x86] intel_idle: Fix max_cstate for processor models without C-state
+      tables
+    - cpufreq: Avoid configuring old governors as default with intel_pstate
+    - cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag
+    - cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode
+    - [amd64] vringh: fix __vringh_iov() when riov and wiov are different
+    - ext4: fix leaking sysfs kobject after failed mount
+    - ext4: fix error handling code in add_new_gdb
+    - ext4: implement swap_activate aops using iomap
+    - ext4: fix invalid inode checksum
+    - ext4: clear buffer verified flag if read meta block from disk
+    - ext4: fix bdev write error check failed when mount fs with ro
+    - ext4: fix bs < ps issue reported with dioread_nolock mount opt
+    - ext4: do not use extent after put_bh
+    - drm/ttm: fix eviction valuable range check.
+    - [arm64] mmc: sdhci-of-esdhc: make sure delay chain locked for HS400
+    - [arm64] mmc: sdhci-of-esdhc: set timeout to max before tuning
+    - mmc: sdhci: Use Auto CMD Auto Select only when v4_mode is true
+    - [arm64,armhf] memory: tegra: Remove GPU from DRM IOMMU group
+    - futex: Adjust absolute futex timeouts with per time namespace offset
+    - drm/amd/psp: Fix sysfs: cannot create duplicate filename
+    - drm/amdgpu: correct the cu and rb info for sienna cichlid
+    - tty: make FONTX ioctl use the tty pointer they were actually passed
+      (CVE-2020-25668)
+    - cachefiles: Handle readpage error correctly
+    - [hppa] hil/parisc: Disable HIL driver when it gets stuck
+    - [arm64] Change .weak to SYM_FUNC_START_WEAK_PI for arch/arm64/lib/mem*.S
+    - [arm64] dts: marvell: espressobin: Add ethernet switch aliases
+    - null_blk: synchronization fix for zoned device
+    - device property: Keep secondary firmware node secondary by type
+    - device property: Don't clear secondary pointer for shared primary
+      firmware node
+    - [x86] KVM: Fix NULL dereference at kvm_msr_ignored_check()
+    - [arm64] KVM: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR
+    - stop_machine, rcu: Mark functions as notrace
+    - [x86] staging: comedi: cb_pcidas: Allow 2-channel commands for AO
+      subdevice
+    - [mips64el,mipsel] staging: octeon: repair "fixed-link" support
+    - [mips64el,mipsel] staging: octeon: Drop on uncorrectable alignment or
+      FCS error
+    - cpufreq: Introduce cpufreq_driver_test_flags()
+    - cpufreq: schedutil: Always call driver if CPUFREQ_NEED_UPDATE_LIMITS is
+      set
+    - time: Prevent undefined behaviour in timespec64_to_ns()
+    - time/sched_clock: Mark sched_clock_read_begin/retry() as notrace
+    - null_blk: Fix zone reset all tracing
+    - null_blk: Fix locking in zoned mode
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.6
+    - [x86] ASOC: SOF: Intel: hda-codec: move unused label to correct position
+
+  [ Sudip Mukherjee ]
+  * Remove libtraceevent. (See: #971976)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Add i2c_mv64xxx i2c-modules udeb.
+  * [arm64] Add drivers/pinctrl to kernel-image udeb.
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.9.1-rt20
+  * [rt] Drop "io_wq: Make io_wqe::lock a raw_spinlock_t"
+  * [rt] Refresh "kernel/sched: move stack + kprobe clean up to
+    __put_task_struct()" for context changes in 5.9.3
+  * Bump ABI to 2
+  * [x86] media/cec: Enable MEDIA_CEC_SUPPORT; Enable CEC_SECO as module
+    (Closes: #972973)
+  * [rt] Drop "printk: reduce LOG_BUF_SHIFT range for H8300"
+  * [rt] Drop "mm: fix exec activate_mm vs TLB shootdown and lazy tlb
+    switching race"
+  * [x86] pinctrl: Enable PINCTRL_TIGERLAKE (Closes: #973372)
+  * [x86] sound/soc: Enable SND_SOC_SOF_TIGERLAKE_SUPPORT (Closes: #973879)
+  * perf/core: Fix a memory leak in perf_event_parse_addr_filter()
+
+  [ Ben Hutchings ]
+  * [rt] Rebase seqlock patches on top of 5.9.6
+
+  [ John Paul Adrian Glaubitz ]
+  * [sh4] Update kernel configuration for sh7785lcr flavor
+    - Compile CONFIG_HID, CONFIG_USB_HID, CONFIG_INPUT_EVDEV and
+      CONFIG_R8169 as modules to reduce kernel image size
+    - Disable CONFIG_KEYBOARD_ATKBD, CONFIG_MOUSE_PS2*, CONFIG_SERIO*
+      and CONFIG_PARPORT_1284 as the SH-7785LCR board does not support
+      PC-style keyboards, serial and parallel ports and mice
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 08 Nov 2020 13:40:04 +0100
+
+linux (5.9.1-1) unstable; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.9
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.1
+    - Bluetooth: A2MP: Fix not initializing all members (CVE-2020-12352)
+    - Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
+      (CVE-2020-12351)
+    - Bluetooth: MGMT: Fix not checking if BT_HS is enabled
+    - media: usbtv: Fix refcounting mixup
+    - USB: serial: option: add Cellient MPL200 card
+    - USB: serial: option: Add Telit FT980-KS composition
+    - [x86] staging: comedi: check validity of wMaxPacketSize of usb endpoints
+      found
+    - USB: serial: pl2303: add device-id for HP GC device
+    - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters
+    - vt_ioctl: make VT_RESIZEX behave like VT_RESIZE
+    - reiserfs: Initialize inode keys properly
+    - reiserfs: Fix oops during mount
+    - Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers"
+    - [x86] crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA
+
+  [ Romain Perier ]
+  * [rt] Update to 5.9-rc8-rt12
+
+  [ Uwe Kleine-König ]
+  * [armhf,arm64] Enable CONFIG_VIDEO_SUNXI_CEDRUS (Closes: #972123)
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.9-rt16
+  * [x86]  ACPI / extlog: Check for RDMSR failure (Closes: #971058)
+  * Set ABI to 1
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 17 Oct 2020 15:14:43 +0200
+
+linux (5.9~rc8-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * linux-doc: Correct index filename in package description
+  * [amd64/cloud-amd64] Generalise the description of supported platforms
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.9-rc8-rt11
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 05 Oct 2020 23:17:12 +0200
+
+linux (5.9~rc6-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate:
+
+  [ Ben Hutchings ]
+  * linux-signed-*: Set Uploaders and Standards-Version to match linux
+  * [rt] Update to 5.9-rc5-rt7 and re-enable
+
+  [ Uwe Kleine-König ]
+  * [arm64,generic] Enable configs used on SMARC-sAL28 board and its carriers.
+    Patch by Michael Walle.
+
+  [ Gianfranco Costamagna ]
+  * Provide virtualbox-guest-modules now that the module is inside the kernel
+    itself.
+
+  [ Salvatore Bonaccorso ]
+  * Set ABI to trunk
+  * drivers/net/wireless: Enable RTW88_8821CE (Closes: #917941)
+
+ -- Ben Hutchings <benh@debian.org>  Mon, 21 Sep 2020 03:23:41 +0100
+
+linux (5.9~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * Un-export symbols no longer needed by the Android ashmem and binder drivers
+  * aufs: Disable support patchset until it is updated for Linux 5.9
+  * Makefile: Do not check for libelf when building OOT module
+  * udeb: Move any compression modules to kernel-image; drop compress-modules
+  * libtraceevent1: Update symbols list for functions added in 5.9
+  * drm/virtio: Revert "drm/virtio: Call the right shmem helpers"
+
+ -- Ben Hutchings <benh@debian.org>  Fri, 11 Sep 2020 04:20:59 +0100
+
+linux (5.8.14-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.11
+    - dt-bindings: spi: Fix spi-bcm-qspi compatible ordering
+    - net: handle the return value of pskb_carve_frag_list() correctly
+    - dt-bindings: PCI: intel,lgm-pcie: Fix matching on all snps,dw-pcie
+      instances
+    - [x86] hv_netvsc: Remove "unlikely" from netvsc_select_queue
+    - loop: Set correct device size when using LOOP_CONFIGURE
+    - firmware_loader: fix memory leak for paged buffer
+    - xprtrdma: Release in-flight MRs on disconnect
+    - NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation
+      recall
+    - [armhf] phy: omap-usb2-phy: disable PHY charger detect
+    - scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort
+    - scsi: libfc: Fix for double free()
+    - scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery
+    - scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional
+      events
+    - [arm64] regulator: pwm: Fix machine constraints application
+    - NFS: Zero-stateid SETATTR should first return delegation
+    - SUNRPC: stop printk reading past end of string
+    - cifs: fix DFS mount with cifsacl/modefromsid
+    - nvme-fc: cancel async events before freeing event struct
+    - nvme-rdma: cancel async events before freeing event struct
+    - block: only call sched requeue_request() for scheduled requests
+    - f2fs: fix indefinite loop scanning for free nid
+    - f2fs: Return EOF on unaligned end of file DIO read
+    - i2c: algo: pca: Reapply i2c bus settings after reset
+    - spi: Fix memory leak on splited transfers
+    - [mips*] KVM: Change the definition of kvm type
+    - [arm64,armhf] clk: rockchip: Fix initialization of mux_pll_src_4plls_p
+    - [x86] ASoC: Intel: skl_hda_dsp_generic: Fix NULLptr dereference in
+      autosuspend delay
+    - [arm64] ASoC: qcom: Set card->owner to avoid warnings
+    - ASoC: qcom: common: Fix refcount imbalance on error
+    - [powerpc*] book3s64/radix: Fix boot failure with large amount of guest
+      memory
+    - ASoC: soc-core: add snd_soc_find_dai_with_mutex()
+    - [x86] ASoC: Intel: haswell: Fix power transition refactor
+    - ASoC: core: Do not cleanup uninitialized dais on soc_pcm_open failure
+    - [x86] Drivers: hv: vmbus: hibernation: do not hang forever in
+      vmbus_bus_resume()
+    - scsi: libsas: Fix error path in sas_notify_lldd_dev_found()
+    - [arm64] Allow CPUs unffected by ARM erratum 1418040 to come in late
+    - [x86] Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
+    - [x86] drm/i915/gem: Reduce context termination list iteration guard to
+      RCU
+    - fbcon: Fix user font detection test at fbcon_resize().
+    - [arm64] bpf: Fix branch offset in JIT
+    - [amd64] iommu/amd: Fix potential @entry null deref
+    - [amd64] iommu/amd: Restore IRTE.RemapEn bit for
+      amd_iommu_activate_guest_mode
+    - [riscv64] Add sfence.vma after early page table changes
+    - locking/lockdep: Fix "USED" <- "IN-NMI" inversions
+    - efi: efibc: check for efivars write capability
+    - locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count
+    - [x86] unwind/fp: Fix FP unwinding in ret_from_fork
+    - [x86] drm/i915/gem: Delay tracking the GEM context until it is
+      registered
+    - [x86] drm/i915: Filter wake_flags passed to default_wake_function
+    - USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin
+      notebook
+    - USB: UAS: fix disconnect by unplugging a hub
+    - usblp: fix race between disconnect() and read()
+    - [x86] usb: typec: ucsi: acpi: Increase command completion timeout value
+    - [x86] usb: typec: ucsi: Prevent mode overrun
+    - [x86] i2c: i801: Fix resume bug
+    - Revert "ALSA: hda - Fix silent audio output and corrupted input on MSI
+      X570-A PRO"
+    - ALSA: hda: fixup headset for ASUS GX502 laptop
+    - ALSA: hda/realtek - The Mic on a RedmiBook doesn't work
+    - percpu: fix first chunk size calculation for populated bitmap
+    - Input: trackpoint - add new trackpoint variant IDs
+    - Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists
+    - [x86] thunderbolt: Retry DROM read once if parsing fails
+    - serial: 8250_pci: Add Realtek 816a and 816b
+    - serial: core: fix port-lock initialisation
+    - serial: core: fix console port-lock regression
+    - ksm: reinstate memcg charge on copied pages
+    - kprobes: fix kill kprobe which has been marked as gone
+    - mm/thp: fix __split_huge_pmd_locked() for migration PMD
+    - [s390x] add 3f program exception handler
+    - [s390x] pci: fix leak of DMA tables on hard unplug
+    - [s390x] zcrypt: fix kmalloc 256k failure
+    - ehci-hcd: Move include to keep CRC stable
+    - [arm64] paravirt: Initialize steal time when cpu is online
+    - [powerpc*] dma: Fix dma_map_ops::get_required_mask
+    - dm/dax: Fix table reference counts
+    - mm/memory_hotplug: drain per-cpu pages again during memory offline
+    - dm: Call proper helper to determine dax support
+    - dax: Fix compilation for CONFIG_DAX && !CONFIG_FS_DAX
+    - mm: memcg: fix memcg reclaim soft lockup
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.12
+    - act_ife: load meta modules before tcf_idr_check_alloc()
+    - bnxt_en: Avoid sending firmware messages when AER error is detected.
+    - bnxt_en: Fix NULL ptr dereference crash in bnxt_fw_reset_task()
+    - cxgb4: fix memory leak during module unload
+    - cxgb4: Fix offset when clearing filter byte counters
+    - geneve: add transport ports in route lookup for geneve (CVE-2020-25645)
+    - hdlc_ppp: add range checks in ppp_cp_parse_cr() (CVE-2020-25643)
+    - [arm64,x86] hinic: bump up the timeout of SET_FUNC_STATE cmd
+    - ip: fix tos reflection in ack and reset packets
+    - ipv4: Initialize flowi4_multipath_hash in data path
+    - ipv4: Update exception handling for multipath routes via same device
+    - ipv6: avoid lockdep issue in fib6_del()
+    - net: bridge: br_vlan_get_pvid_rcu() should dereference the VLAN group
+      under RCU
+    - net: DCB: Validate DCB_ATTR_DCB_BUFFER argument
+    - net: Fix bridge enslavement failure
+    - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC
+    - net/mlx5: Fix FTE cleanup
+    - net: phy: call phy_disable_interrupts() in phy_attach_direct() instead
+    - net: sched: initialize with 0 before setting erspan md->u
+    - net: sch_generic: aviod concurrent reset and enqueue op for lockless
+      qdisc
+    - net: sctp: Fix IPv6 ancestor_size calc in sctp_copy_descendant
+    - nfp: use correct define to return NONE fec
+    - tipc: Fix memory leak in tipc_group_create_member()
+    - tipc: fix shutdown() of connection oriented socket
+    - tipc: use skb_unshare() instead in tipc_buf_append()
+    - net/mlx5e: Enable adding peer miss rules only if merged eswitch is
+      supported
+    - bnxt_en: Use memcpy to copy VPD field info.
+    - bnxt_en: return proper error codes in bnxt_show_temp
+    - bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex.
+    - net: phy: Avoid NPD upon phy_detach() when driver is unbound
+    - net: phy: Do not warn in phy_stop() on PHY_DOWN
+    - net: add __must_check to skb_put_padto()
+    - [armhf] net: ethernet: ti: cpsw_new: fix suspend/resume
+    - wireguard: noise: take lock when removing handshake entry from table
+    - wireguard: peerlookup: take lock before checking hash in replace
+      operation
+    - net/mlx5e: Fix memory leak of tunnel info when rule under multipath not
+      ready
+    - [arm64,x86] hinic: fix rewaking txq after netif_tx_disable
+    - [x86] hv_netvsc: Fix hibernation for mlx5 VF driver
+    - [arm64,armhf] net: dsa: link interfaces with the DSA master to get rid
+      of lockdep warnings
+    - net: macb: fix for pause frame receive enable bit
+    - Revert "netns: don't disable BHs when locking "nsid_lock""
+    - net/mlx5e: Use RCU to protect rq->xdp_prog
+    - net/mlx5e: Use synchronize_rcu to sync with NAPI
+    - net/mlx5e: Fix endianness when calculating pedit mask first bit
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.13
+    - device_cgroup: Fix RCU list debugging warning
+    - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
+    - [riscv64] Take text_mutex in ftrace_init_nop()
+    - [armhf] i2c: aspeed: Mask IRQ status to relevant bits
+    - [s390x] init: add missing __init annotations
+    - lockdep: fix order in trace_hardirqs_off_caller()
+    - i2c: core: Call i2c_acpi_install_space_handler() before
+      i2c_acpi_register_devices()
+    - objtool: Fix noreturn detection for ignored functions
+    - mwifiex: Increase AES key storage size to 256 bits
+    - batman-adv: bla: fix type misuse for backbone_gw hash indexing
+    - libbpf: Fix build failure from uninitialized variable warning
+    - atm: eni: fix the missed pci_disable_device() for eni_init_one()
+    - batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
+    - netfilter: ctnetlink: add a range check for l3/l4 protonum
+      (CVE-2020-25211)
+    - netfilter: ctnetlink: fix mark based dump filtering regression
+    - netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
+    - netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid
+    - mac802154: tx: fix use-after-free
+    - bpf: Fix clobbering of r2 in bpf_gen_ld_abs
+    - tools/libbpf: Avoid counting local symbols in ABI check
+    - [arm*] drm/vc4/vc4_hdmi: fill ASoC card owner
+    - net: qed: Disable aRFS for NPAR and 100G
+    - net: qede: Disable aRFS for NPAR and 100G
+    - net: qed: RDMA personality shouldn't fail VF load
+    - igc: Fix wrong timestamp latency numbers
+    - igc: Fix not considering the TX delay for timestamps
+    - [x86] hv_netvsc: Switch the data path at the right time during
+      hibernation
+    - RDMA/core: Fix ordering of CQ pool destruction
+    - batman-adv: Add missing include for in_interrupt()
+    - xsk: Fix number of pinned pages/umem size discrepancy
+    - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
+    - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
+    - batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
+    - bpf: Fix a rcu warning for bpffs map pretty-print
+    - mac80211: do not disable HE if HT is missing on 2.4 GHz
+    - cfg80211: fix 6 GHz channel conversion
+    - mac80211: fix 80 MHz association to 160/80+80 AP on 6 GHz
+    - [x86] ALSA: asihpi: fix iounmap in error handler
+    - io_uring: fix openat/openat2 unified prep handling
+    - SUNRPC: Fix svc_flush_dcache()
+    - regmap: fix page selection for noinc reads
+    - regmap: fix page selection for noinc writes
+    - net/mlx5e: mlx5e_fec_in_caps() returns a boolean
+    - [mips64el,mipsel] Loongson-3: Fix fp register access if MSA enabled
+    - [armhf] PM / devfreq: tegra30: Disable clock on error in probe
+    - [arm64,armhf] regulator: axp20x: fix LDO2/4 description
+    - [x86] KVM: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
+    - [x86] KVM: SVM: Add a dedicated INVD intercept routine
+    - mm: validate pmd after splitting
+    - [x86] arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache
+      writeback
+    - [x86] irq: Make run_on_irqstack_cond() typesafe
+    - [x86] ioapic: Unbreak check_timer()
+    - scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported
+    - ALSA: usb-audio: Add delay quirk for H570e USB headsets
+    - ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
+    - ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation
+      P520
+    - lib/string.c: implement stpcpy
+    - tracing: fix double free
+    - [s390x] dasd: Fix zero write for FBA devices
+    - kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
+    - kprobes: tracing/kprobes: Fix to kill kprobes on initmem after boot
+    - btrfs: fix put of uninitialized kobject after seed device delete
+    - btrfs: fix overflow when copying corrupt csums for a message
+    - media: cec-adap.c: don't use flush_scheduled_work()
+    - dmabuf: fix NULL pointer dereference in dma_buf_release()
+    - mm, THP, swap: fix allocating cluster for swapfile by mistake
+    - mm/gup: fix gup_fast with dynamic page table folding
+    - mm: replace memmap_context by meminit_context
+    - mm: don't rely on system state to detect hot-plug operations
+    - [s390x] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
+    - io_uring: ensure open/openat2 name is cleaned on cancelation
+    - [arm64] KVM: Assume write fault on S1PTW permission fault on instruction
+      fetch
+    - dm: fix bio splitting and its bio completion order for regular IO
+    - [armhf] clocksource/drivers/timer-ti-dm: Do reset before enable
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.14
+    - io_uring: always delete double poll wait entry on match
+    - btrfs: fix filesystem corruption after a device replace
+    - mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS
+      models
+    - USB: gadget: f_ncm: Fix NDP16 datagram validation
+    - Revert "usbip: Implement a match function to fix usbip"
+    - usbcore/driver: Fix specific driver selection
+    - usbcore/driver: Fix incorrect downcast
+    - usbcore/driver: Accommodate usbip
+    - [x86] gpio: amd-fch: correct logic of GPIO_LINE_DIRECTION
+    - [armhf] clk: samsung: Keep top BPLL mux on Exynos542x enabled
+    - scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling
+      getpeername()
+    - [arm64,x86] i2c: i801: Exclude device from suspend direct complete
+      optimization
+    - Input: i8042 - add nopnp quirk for Acer Aspire 5 A515
+    - ftrace: Move RCU is watching check after recursion check
+    - tracing: Fix trace_find_next_entry() accounting of temp buffer size
+    - memstick: Skip allocating card when removing host
+    - drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config
+    - xen/events: don't use chip_data for legacy IRQs
+    - [x86] vboxsf: Fix the check for the old binary mount-arguments struct
+    - drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices
+    - Revert "wlcore: Adding suppoprt for IGTK key in wlcore driver"
+    - [arm64,armhf] drm/sun4i: mixer: Extend regmap max_register
+    - [x86] hv_netvsc: Cache the current data path to avoid duplicate call and
+      message
+    - net: dec: de2104x: Increase receive ring size for Tulip
+    - rndis_host: increase sleep time in the query-response loop
+    - nvme-pci: disable the write zeros command for Intel 600P/P3100
+    - nvme-core: get/put ctrl and transport module in nvme_dev_open/release()
+    - fuse: fix the ->direct_IO() treatment of iov_iter
+    - drivers/net/wan/hdlc: Set skb->protocol before transmitting
+    - mac80211: Fix radiotap header channel flag for 6GHz band
+    - mac80211: do not allow bigger VHT MPDUs than the hardware supports
+    - tracing: Make the space reserved for the pid wider
+    - tools/io_uring: fix compile breakage
+    - io_uring: mark statx/files_update/epoll_ctl as non-SQPOLL
+    - cpuidle: psci: Fix suspicious RCU usage
+    - nvme-pci: fix NULL req in completion handler
+    - nvme-fc: fail new connections to a deleted host or remote port
+    - scripts/kallsyms: skip ppc compiler stub *.long_branch.* /
+      *.plt_branch.*
+    - [armhf] pinctrl: mvebu: Fix i2c sda definition for 98DX3236
+    - nfs: Fix security label length not being reset
+    - NFSv4.2: fix client's attribute cache management for copy_file_range
+    - pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly on read
+    - [arm64,armhf] clk: tegra: Always program PLL_E when enabled
+    - [arm64,armhf] clk: tegra: Fix missing prototype for
+      tegra210_clk_register_emc()
+    - [armhf] clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
+    - scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG case
+    - [arm64,armhf] gpio: pca953x: Fix uninitialized pending variable
+    - Input: trackpoint - enable Synaptics trackpoints
+    - blk-mq: call commit_rqs while list empty but error happen
+    - scripts/dtc: only append to HOST_EXTRACFLAGS instead of overwriting
+    - autofs: use __kernel_write() for the autofs pipe writing
+    - [arm64,armhf] gpio: pca953x: Correctly initialize registers 6 and 7 for
+      PCA957x
+    - [amd64] iommu/amd: Fix the overwritten field in IVMD header
+    - pipe: remove pipe_wait() and fix wakeup race with splice
+    - random32: Restore __latent_entropy attribute on net_rand_state
+    - gpiolib: Fix line event handling in syscall compatible mode
+    - [x86] drm/i915/gvt: Fix port number for BDW on EDID region setup
+    - scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks
+    - scsi: sd: sd_zbc: Fix ZBC disk initialization
+    - epoll: do not insert into poll queues until all sanity checks are done
+    - epoll: replace ->visited/visited_list with generation count
+    - epoll: EPOLL_CTL_ADD: close the race in decision to take fast path
+    - ep_create_wakeup_source(): dentry name can change under you...
+
+  [ Vagrant Cascadian ]
+  * [armhf] Enable MFD_AXP20X_RSB as a built-in (Closes: #914813). Thanks
+    to Bernhard.
+
+  [ Salvatore Bonaccorso ]
+  * [x86] Enable INTEL_PMC_CORE as module (Closes: #971017)
+  * Bump ABI to 3
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 10 Oct 2020 21:40:31 +0200
+
+linux (5.8.10-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.8
+    - HID: quirks: Always poll three more Lenovo PixArt mice
+    - [arm64] drm/msm/dpu: Fix reservation failures in modeset
+    - [arm64] drm/msm/dpu: Fix scale params in plane validation
+    - [arm64] drm/msm/dpu: fix unitialized variable error
+    - [arm64] drm/msm: add shutdown support for display platform_driver
+    - [x86] hwmon: (applesmc) check status earlier.
+    - nvmet: Disable keep-alive timer when kato is cleared to 0h
+    - [arm64] drm/msm: enable vblank during atomic commits
+    - [arm64] drm/msm/a6xx: fix gmu start on newer firmware
+    - gfs2: add some much needed cleanup for log flushes that fail
+    - [x86] hv_utils: return error if host timesysnc update is stale
+    - [x86] hv_utils: drain the timesync packets on onchannelcallback
+    - ceph: don't allow setlease on cephfs
+    - [armhf] drm/omap: fix incorrect lock state
+    - cpuidle: Fixup IRQ state
+    - nbd: restore default timeout when setting it to zero
+    - [s390x] don't trace preemption in percpu macros
+    - xen/xenbus: Fix granting of vmalloc'd memory
+    - dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling
+    - batman-adv: Avoid uninitialized chaddr when handling DHCP
+    - batman-adv: Fix own OGM check in aggregated OGMs
+    - batman-adv: bla: use netif_rx_ni when not in interrupt context
+    - rxrpc: Keep the ACK serial in a var in rxrpc_input_ack()
+    - rxrpc: Fix loss of RTT samples due to interposed ACK
+    - rxrpc: Make rxrpc_kernel_get_srtt() indicate validity
+    - [mips*] mm: BMIPS5000 has inclusive physical caches
+    - [arm64,x86] mmc: sdhci-acpi: Fix HS400 tuning for AMDI0040
+    - perf sched timehist: Fix use of CPU list with summary option
+    - perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set
+    - netfilter: nf_tables: add NFTA_SET_USERDATA if not null
+    - netfilter: nf_tables: incorrect enum nft_list_attributes definition
+    - netfilter: nf_tables: fix destination register zeroing
+    - [arm64] net: hns: Fix memleak in hns_nic_dev_probe
+    - bpf: Fix a buffer out-of-bound access when filling raw_tp link_info
+    - [arm64,armhf] dmaengine: pl330: Fix burst length if burst size is
+      smaller than bus width
+    - gtp: add GTPA_LINK info to msg sent to userspace
+    - [armhf] net: ethernet: ti: cpsw: fix clean up of vlan mc entries for
+      host port
+    - [armhf] net: ethernet: ti: cpsw_new: fix clean up of vlan mc entries for
+      host port
+    - bnxt_en: Don't query FW when netif_running() is false.
+    - bnxt_en: Check for zero dir entries in NVRAM.
+    - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled.
+    - bnxt_en: Fix PCI AER error recovery flow
+    - bnxt_en: Fix possible crash in bnxt_fw_reset_task().
+    - bnxt_en: fix HWRM error when querying VF temperature
+    - xfs: finish dfops on every insert range shift iteration
+    - xfs: fix boundary test in xfs_attr_shortform_verify
+    - bnxt: don't enable NAPI until rings are ready
+    - [armhf] net: ethernet: ti: cpsw_new: fix error handling in
+      cpsw_ndo_vlan_rx_kill_vid()
+    - netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of
+      ENOBUFS
+    - nvmet-fc: Fix a missed _irqsave version of spin_lock in
+      'nvmet_fc_fod_op_done()'
+    - nvme: fix controller instance leak
+    - netfilter: conntrack: do not auto-delete clash entries on reply
+    - opp: Don't drop reference for an OPP table that was never parsed
+    - cxgb4: fix thermal zone device registration
+    - [mips*] perf: Fix wrong check condition of Loongson event IDs
+    - block: fix locking in bdev_del_partition
+    - perf top/report: Fix infinite loop in the TUI for grouped events
+    - perf cs-etm: Fix corrupt data after perf inject from
+    - perf intel-pt: Fix corrupt data after perf inject from
+    - perf tools: Correct SNOOPX field offset
+    - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
+    - fix regression in "epoll: Keep a reference on files added to the check
+      list"
+    - [arm64] net: bcmgenet: fix mask check in bcmgenet_validate_flow()
+    - nfp: flower: fix ABI mismatch between driver and firmware
+    - net: dp83867: Fix WoL SecureOn password
+    - [mips*] add missing MSACSR and upper MSA initialization
+    - xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt
+      files
+    - perf jevents: Fix suspicious code in fixregex()
+    - perf stat: Turn off summary for interval mode by default
+    - perf bench: The do_run_multi_threaded() function must use
+      IS_ERR(perf_session__new())
+    - tg3: Fix soft lockup when tg3_reset_task() fails.
+    - [amd64] x86, fakenuma: Fix invalid starting node ID
+    - [amd64] iommu/vt-d: Serialize IOMMU GCMD register modifications
+    - [armhf] thermal: ti-soc-thermal: Fix bogus thermal shutdowns for
+      omap4430
+    - [arm64] thermal: qcom-spmi-temp-alarm: Don't suppress negative temp
+    - [amd64] iommu/amd: Restore IRTE.RemapEn bit after programming IRTE
+    - [amd64] iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE
+    - [amd64] iommu/vt-d: Handle 36bit addressing for x86-32
+    - [x86] tracing/kprobes, x86/ptrace: Fix regs argument order for i386
+    - [x86] entry: Fix AC assertion
+    - [x86] debug: Allow a single level of #DB recursion
+    - ext2: don't update mtime on COW faults
+    - xfs: don't update mtime on COW faults
+    - btrfs: drop path before adding new uuid tree entry
+    - btrfs: fix potential deadlock in the search ioctl
+    - btrfs: allocate scrub workqueues outside of locks
+    - btrfs: set the correct lockdep class for new nodes
+    - btrfs: set the lockdep class for log tree extent buffers
+    - btrfs: block-group: fix free-space bitmap threshold
+    - btrfs: tree-checker: fix the error message for transid error
+    - Bluetooth: Return NOTIFY_DONE for hci_suspend_notifier (Closes: #964839)
+    - [x86] mm/32: Bring back vmalloc faulting on x86_32
+    - Revert "ALSA: hda: Add support for Loongson 7A1000 controller"
+    - ALSA: ca0106: fix error code handling
+    - ALSA: usb-audio: Add basic capture support for Pioneer DJ DJM-250MK2
+    - ALSA: usb-audio: Add implicit feedback quirk for UR22C
+    - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
+    - ALSA: hda/hdmi: always check pin power status in i915 pin fixup
+    - ALSA: firewire-digi00x: exclude Avid Adrenaline from detection
+    - ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A
+      PRO
+    - ALSA; firewire-tascam: exclude Tascam FE-8 from detection
+    - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A
+    - ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen
+    - mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based
+      controllers
+    - media: rc: do not access device via sysfs after rc_unregister_device()
+    - media: rc: uevent sysfs file races with rc_unregister_device()
+    - affs: fix basic permission bits to actually work
+    - block: allow for_each_bvec to support zero len bvec
+    - block: ensure bdi->io_pages is always initialized
+    - io_uring: set table->files[i] to NULL when io_sqe_file_register failed
+    - io_uring: fix removing the wrong file in __io_sqe_files_update()
+    - libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks
+    - [mips*] oprofile: Fix fallthrough placement
+    - blk-stat: make q->stats->lock irqsafe
+    - [x86] drm/i915: Fix sha_text population code
+    - dm writecache: handle DAX to partitions on persistent memory correctly
+    - dm mpath: fix racey management of PG initialization
+    - dm integrity: fix error reporting in bitmap mode after creation
+    - dm crypt: Initialize crypto wait structures
+    - dm cache metadata: Avoid returning cmd->bm wild pointer on error
+    - dm thin metadata: Avoid returning cmd->bm wild pointer on error
+    - dm thin metadata: Fix use-after-free in dm_bm_set_read_only
+    - mm: slub: fix conversion of freelist_corrupted()
+    - mm: track page table modifications in __apply_to_page_range()
+    - mm: madvise: fix vma user-after-free
+    - mm/rmap: fixup copying of soft dirty and uffd ptes
+    - io_uring: no read/write-retry on -EAGAIN error and O_NONBLOCK marked
+      file
+    - perf record: Correct the help info of option "--no-bpf-event"
+    - [arm64,armhf] sdhci: tegra: Add missing TMCLK for data timeout
+    - mm/migrate: fixup setting UFFD_WP flag
+    - mm/hugetlb: try preferred node first when alloc gigantic page from cma
+    - mm/hugetlb: fix a race between hugetlb sysctl handlers (CVE-2020-25285)
+    - mm/khugepaged.c: fix khugepaged's request size in collapse_file
+    - cfg80211: regulatory: reject invalid hints
+    - net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.9
+    - io_uring: fix cancel of deferred reqs with ->files
+    - io_uring: fix linked deferred ->files cancellation
+    - RDMA/cma: Simplify DEVICE_REMOVAL for internal_id
+    - RDMA/cma: Using the standard locking pattern when delivering the removal
+      event
+    - RDMA/cma: Remove unneeded locking for req paths
+    - RDMA/cma: Execute rdma_cm destruction from a handler properly
+    - ipv4: Silence suspicious RCU usage warning
+    - ipv6: Fix sysctl max for fib_multipath_hash_policy
+    - netlabel: fix problems with mapping removal
+    - net: usb: dm9601: Add USB ID of Keenetic Plus DSL
+    - sctp: not disable bh in the whole sctp_get_port_local()
+    - tipc: fix shutdown() of connectionless socket
+    - tipc: fix using smp_processor_id() in preemptible
+    - net: disable netpoll on fresh napis
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.10
+    - [armhf] OMAP2+: Fix an IS_ERR() vs NULL check in _get_pwrdm()
+    - regulator: push allocation in regulator_ena_gpio_request() out of lock
+    - regulator: remove superfluous lock in regulator_resolve_coupling()
+    - RDMA/rxe: Fix memleak in rxe_mem_init_user
+    - RDMA/rxe: Drop pointless checks in rxe_init_ports
+    - RDMA/rxe: Fix panic when calling kmem_cache_create()
+    - [arm64,armhf] drm/sun4i: add missing put_device() call in
+      sun8i_r40_tcon_tv_set_mux()
+    - [armhf] drm/sun4i: Fix dsi dcs long write function
+    - scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA
+    - drm/virtio: fix unblank
+    - RDMA/core: Fix unsafe linked list traversal after failing to allocate CQ
+    - RDMA/core: Fix reported speed and width
+    - scsi: megaraid_sas: Don't call disable_irq from process IRQ poll
+    - scsi: mpt3sas: Don't call disable_irq from IRQ poll handler
+    - padata: fix possible padata_works_lock deadlock
+    - [arm64,armhf] drm/sun4i: Fix DE2 YVU handling
+    - [arm64,armhf] drm/sun4i: backend: Support alpha property on lowest plane
+    - [arm64,armhf] drm/sun4i: backend: Disable alpha on the lowest plane on
+      the A20
+    - [arm64] KVM: Update page shift if stage 2 block mapping not supported
+    - [arm64,x86] mmc: sdhci-acpi: Clear amd_sdhci_host on reset
+    - [arm64] mmc: sdhci-msm: Add retries when all tuning phases are found
+      valid
+    - [armhf] spi: stm32: Rate-limit the 'Communication suspended' message
+    - btrfs: fix NULL pointer dereference after failure to create snapshot
+    - block: restore a specific error code in bdev_del_partition
+    - seccomp: don't leak memory when filter install races
+    - nvme-fabrics: allow to queue requests for live queues
+    - [armhf] spi: stm32: fix pm_runtime_get_sync() error checking
+    - block: Set same_page to false in __bio_try_merge_page if ret is false
+    - IB/isert: Fix unaligned immediate-data handling
+    - [x86] KVM: nVMX: Fix the update value of nested load
+      IA32_PERF_GLOBAL_CTRL control
+    - [x86] KVM: always allow writing '0' to MSR_KVM_ASYNC_PF_EN
+    - [arm64,x86] dmaengine: acpi: Put the CSRT table after using it
+    - netfilter: conntrack: allow sctp hearbeat after connection re-use
+    - netfilter: nft_set_rbtree: Detect partial overlap with start endpoint
+      match
+    - [x86] firestream: Fix memleak in fs_open
+    - scsi: qedf: Fix null ptr reference in qedf_stag_change_work
+    - [arm64,armhf] ALSA: hda: Fix 2 channel swapping for Tegra
+    - [arm64,armhf] ALSA: hda/tegra: Program WAKEEN register for Tegra
+    - [arm64] net: hns3: Fix for geneve tx checksum bug
+    - xfs: fix off-by-one in inode alloc block reservation calculation
+    - wireless: fix wrong 160/80+80 MHz setting
+    - mac80211: reduce packet loss event false positives
+    - cfg80211: Adjust 6 GHz frequency to channel conversion
+    - xfs: initialize the shortform attr header padding entry
+    - nvme-fabrics: don't check state NVME_CTRL_NEW for request acceptance
+    - nvme: have nvme_wait_freeze_timeout return if it timed out
+    - nvme-rdma: serialize controller teardown sequences
+    - nvme-rdma: fix timeout handler
+    - nvme-rdma: fix reset hang if controller died in the middle of a reset
+    - nvme-pci: cancel nvme device request before disabling
+    - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for all Saitek X52 devices
+    - HID: microsoft: Add rumble support for the 8bitdo SN30 Pro+ controller
+    - drivers/net/wan/hdlc_cisco: Add hard_header_len
+    - HID: elan: Fix memleak in elan_input_configured
+    - [x86] cpufreq: intel_pstate: Refuse to turn off with HWP enabled
+    - [x86] cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo
+      disabled
+    - [arm64] module: set trampoline section flags regardless of
+      CONFIG_DYNAMIC_FTRACE
+    - ALSA: hda: hdmi - add Rocketlake support
+    - ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
+    - ALSA: hda: use consistent HDAudio spelling in comments/docs
+    - drivers/net/wan/hdlc: Change the default of hard_header_len to 0
+    - [amd64] iommu/amd: Do not force direct mapping when SME is active
+    - [amd64] iommu/amd: Do not use IOMMUv2 functionality when SME is active
+    - gcov: Disable gcov build with GCC 10
+    - iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set
+    - [arm64] iio: cros_ec: Set Gyroscope default frequency to 25Hz
+    - [x86] iio:accel:bmc150-accel: Fix timestamp alignment and prevent data
+      leak.
+    - [x86] iio:magnetometer:ak8975 Fix alignment and data leak issues.
+    - [armhf] iio:accel:mma8452: Fix timestamp alignment and prevent data
+      leak.
+    - [x86] staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
+    - btrfs: require only sector size alignment for parent eb bytenr
+    - btrfs: fix lockdep splat in add_missing_dev
+    - btrfs: free data reloc tree on failed mount
+    - btrfs: fix wrong address when faulting in pages in the search ioctl
+    - [x86] thunderbolt: Disable ports that are not implemented
+    - kobject: Restore old behaviour of kobject_del(NULL)
+    - regulator: push allocation in regulator_init_coupling() outside of lock
+    - regulator: push allocations in create_regulator() outside of lock
+    - regulator: push allocation in set_consumer_device_supply() out of lock
+    - regulator: plug of_node leak in regulator_register()'s error path
+    - regulator: core: Fix slab-out-of-bounds in regulator_unlock_recursive()
+    - misc: eeprom: at24: register nvmem only after eeprom is ready to use
+    - scsi: target: iscsi: Fix data digest calculation
+    - scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask
+    - scsi: target: iscsi: Fix hang in iscsit_access_np() when getting
+      tpg->np_login_sem
+    - [arm64] drm/msm: Split the a5xx preemption record
+    - [arm64] drm/msm: Disable preemption on all 5xx targets
+    - [arm64] drm/msm: Disable the RPTR shadow
+    - mmc: sdio: Use mmc_pre_req() / mmc_post_req()
+    - [arm64] mmc: sdhci-of-esdhc: Don't walk device-tree on every interrupt
+    - nvme: Revert: Fix controller creation races with teardown flow
+    - rbd: require global CAP_SYS_ADMIN for mapping and unmapping
+      (CVE-2020-25284)
+    - RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars
+    - RDMA/mlx4: Read pkey table length instead of hardcoded value
+    - fbcon: remove soft scrollback code (CVE-2020-14390)
+    - fbcon: remove now unusued 'softback_lines' cursor() argument
+    - vgacon: remove software scrollback support
+    - [x86] KVM: VMX: Don't freeze guest when event delivery causes an
+      APIC-access exit
+    - [arm64] KVM: Do not try to map PUDs when they are folded into PMD
+    - [x86] kvm x86/mmu: use KVM_REQ_MMU_SYNC to sync when needed
+    - KVM: fix memory leak in kvm_io_bus_unregister_dev()
+    - [arm64,armhf] Revert "usb: dwc3: meson-g12a: fix shared reset control
+      use"
+    - debugfs: Fix module state check condition
+    - test_firmware: Test platform fw loading on non-EFI systems
+    - [x86] video: fbdev: fix OOB read in vga_8planes_imageblit()
+    - [arm64] phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init
+    - usb: core: fix slab-out-of-bounds Read in read_descriptors
+    - USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter
+    - USB: serial: option: support dynamic Quectel USB compositions
+    - USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules
+    - usb: Fix out of sync data toggle if a configured device is reconfigured
+    - [x86] usb: typec: ucsi: acpi: Check the _DEP dependencies
+    - [arm64] drm/msm/gpu: make ringbuffer readonly
+    - gcov: add support for GCC 10.1
+
+  [ Salvatore Bonaccorso ]
+  * [x86] drivers/input/keyboard: Enable KEYBOARD_APPLESPI as module
+    (Closes: #943337)
+  * drivers/net/wireless: Enable RTW88_8723DE
+  * Bump ABI to 2
+  * udeb: Make input-modules depend on crc-modules.
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable BATTERY_CW2015 as a module.
+  * [arm64] Apply patch from upstream to support battery status on
+    Pinebook Pro.
+
+  [ Ben Hutchings ]
+  * [hppa] Set Build-Profiles for linux-image-parisc{,64}-smp (Closes: #970011)
+  * Provide linux-{image,headers}-generic virtual packages on most
+    architectures (Closes: #960209)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 19 Sep 2020 14:17:19 +0200
+
+linux (5.8.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4
+    - ext4: fix potential negative array index in do_split() (CVE-2020-14314)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.5
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.6
+    - nfsd: fix oops on mixed NFSv4/NFSv3 client access
+    - [powerpc] 32s: Disable VMAP stack which CONFIG_ADB_PMU (Closes: #963689)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.7
+
+  [ Ben Hutchings ]
+  * [mips*] udeb: Drop hfs-modules (fixes FTBFS)
+  * [m68k,powerpc,ppc64] udeb: Make hfs-modules depend on cdrom-core-modules
+    (fixes FTBFS)
+  * tools/include/uapi: Fix <asm/errno.h> (probably fixes FTBFS on ia64)
+  * bpftool: Build with Debian recommended compiler options
+
+  [ Salvatore Bonaccorso ]
+  * iwlwifi: yoyo: don't print failure if debug firmware is missing
+    (Closes: #966218)
+  * debian/tests/python: pycodestyle: Increase max-line-length to 100.
+  * net/packet: fix overflow in tpacket_rcv (CVE-2020-14386)
+  * Set ABI to 1
+
+  [ Uwe Kleine-König ]
+  * [arm64] Enable a few options for Kobol's helios64
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 05 Sep 2020 16:52:44 +0200
+
+linux (5.8.3-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.8
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.1
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.2
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.3
+
+  [ Jeremy Stanley ]
+  * [x86] PMIC operation region support (Closes: #925965)
+    - Enable CONFIG_PMIC_OPREGION for general ACPI support of operation
+      regions with Power Management Integrated Circuits. Turn on specific
+      opregion support for:
+      + CONFIG_BYTCRC_PMIC_OPREGION (Bay Trail Crystal Cove PMIC)
+      + CONFIG_CHTCRC_PMIC_OPREGION (Cherry Trail Crystal Cove PMIC)
+      + CONFIG_XPOWER_PMIC_OPREGION (XPower AXP288 PMIC)
+      + CONFIG_BXT_WC_PMIC_OPREGION (BXT WhiskeyCove PMIC)
+      + CONFIG_CHT_WC_PMIC_OPREGION (CHT Whiskey Cove PMIC)
+      + CONFIG_CHT_DC_TI_PMIC_OPREGION (Dollar Cove TI PMIC)
+      Additionally enable CONFIG_MFD_INTEL_PMC_BXT as a module (multi-function
+      device driver for Intel Broxton Whiskey Cove PMIC), along with
+      CONFIG_INTEL_SOC_PMIC (Crystal Cove PMIC) as a dependency for it.
+  * [x86] Fix Cherry Trail power management regression (Closes: #949886)
+    - Switch CONFIG_I2C_DESIGNWARE_PLATFORM from being compiled as a module to
+      compiled into the kernel directly, since as of kernel version 5.1 this
+      state became a dependency for CONFIG_INTEL_SOC_PMIC_CHTWC which is
+      already enabled.
+    - Enable CONFIG_USB_ROLES_INTEL_XHCI and CONFIG_TYPEC_MUX_PI3USB30532 as
+      modules, which became dependencies for the already enabled
+      CONFIG_INTEL_CHT_INT33FE as of kernel version 4.17.
+
+  [ Romain Perier ]
+  * Rebased patches onto 5.8.
+
+  [ Uwe Kleine-König ]
+  * [armhf] Enable BCM2835 auxiliar mini UART support found on Raspberry Pi
+    (all models); patch by Marc Kleine-Budde. (Closes: #963619)
+  * [arm64] Enable IR_MESON and SPI_MESON_SPICC.
+
+  [ Helge Deller ]
+  * [hppa] Build linux-image-parisc-smp and linux-image-parisc64-smp
+    transition packages
+
+  [ Yves-Alexis Perez ]
+  * usb: Enable APPLE_MFI_FASTCHARGE as a module
+
+  [ Salvatore Bonaccorso ]
+  * Set ABI to trunk
+
+  [ Bastian Blank ]
+  * [x86] hyperv-daemons:
+    - Rename services to remove "hyperv-daemons." prefix
+    - Use debhelper for services.
+    - Make systemd service bind to device.
+    - Start kvp daemon way earlier in boot.
+    - Specify some service restrictions.
+  * udeb: Reverse order of cdrom-core and isofs/udf.
+  * Fix build of documentation.
+  * [amd64] Enable GVE. (closes: #964812)
+  * Compile with gcc-10 on all architectures.
+  * [cloud] Enable TARGET_CORE. (closes: #952108)
+  * [cloud] Disable DLM, GFS2_FS, OCFS2_FS.
+  * Move System.map into debug package and replace with pointer.
+
+  [ Ben Hutchings ]
+  * [x86] hyperv-daemons: Complete renaming of init scripts
+  * [x86] hyperv-daemons: Correct old names in Conflicts field of unit files
+  * [hppa] Use standard metadata for transitional packages
+  * bpftool: Fix version string in recursive builds
+  * Revert "linux-libc-dev: Re-add "Provides: linux-kernel-headers""
+    (Closes: #959462)
+  * mm: Enable INIT_ON_ALLOC_DEFAULT_ON. This can be reverted using the
+    kernel parameter: init_on_alloc=0
+  * libtraceevent1: Add new APIs to symbols file
+
+  [ Christian Barcenas ]
+  * bpftool: add packaging for tools/bpf/bpftool (Closes: #896165)
+    - Thank you to Noah Meyerhans for the first iteration of packaging.
+
+  [ Thomas W ]
+  * [x86] Enable CONFIG_XIAOMI_WMI
+
+  [ Matthew Gabeler-Lee ]
+  * [x86] Re-enable APU2 LED control (Closes: 949448)
+
+  [ Joel Stanley ]
+  * [armhf] Enable NET_NCSI
+
+  [ Walter Lozano ]
+  * [armhf] Enable NVMEM_IMX_OCOTP (Closes: #968253)
+
+  [ Philipp Kern ]
+  * [s390x] Add virtio_net to nic-modules.
+
+ -- Ben Hutchings <benh@debian.org>  Mon, 24 Aug 2020 01:23:22 +0100
+
+linux (5.7.17-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.11
+    - bpf: Set the number of exception entries properly for subprograms
+    - mac80211: allow rx of mesh eapol frames with default rx key
+    - scsi: scsi_transport_spi: Fix function pointer check
+    - scsi: mpt3sas: Fix unlock imbalance
+    - ALSA: hda/hdmi: fix failures at PCM open on Intel ICL and later
+    - net: sky2: initialize return of gm_phy_read
+    - drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout
+    - scsi: mpt3sas: Fix error returns in BRM_status_show
+    - scsi: dh: Add Fujitsu device to devinfo and dh lists
+    - dm: use bio_uninit instead of bio_disassociate_blkg
+    - fuse: fix weird page warning
+    - [x86] irqdomain/treewide: Keep firmware node unconditionally allocated
+    - SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct
+      IO compeletion")
+    - exfat: fix overflow issue in exfat_cluster_to_sector()
+    - exfat: fix wrong hint_stat initialization in exfat_find_dir_entry()
+    - exfat: fix wrong size update of stream entry by typo
+    - exfat: fix name_hash computation on big endian systems
+    - btrfs: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent
+      runaway balance
+    - uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to
+      fix GDB regression
+    - ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung
+      Notebook Pen S
+    - ALSA: info: Drop WARN_ON() from buffer NULL sanity check
+    - [x86] ASoC: rt5670: Correct RT5670_LDO_SEL_MASK
+    - [x86] ASoC: Intel: cht_bsw_rt5672: Change bus format to I2S 2 channel
+    - [s390x] cpum_cf,perf: change DFLT_CCERROR counter name
+    - btrfs: fix double free on ulist after backref resolution failure
+    - btrfs: fix mount failure caused by race with umount
+    - btrfs: fix page leaks after failure to lock page for delalloc
+    - mt76: mt76x02: fix handling MCU timeouts during hw restart
+    - efi/efivars: Expose RT service availability via efivars abstraction
+    - bnxt_en: Fix race when modifying pause settings.
+    - bnxt_en: Init ethtool link settings after reading updated PHY
+      configuration.
+    - bnxt_en: Fix completion ring sizing with TPA enabled.
+    - [x86] hippi: Fix a size used in a 'pci_free_consistent()' in an error
+      handling path
+    - netfilter: nf_tables: fix nat hook table deletion
+    - [arm64] dpaa2-eth: check fsl_mc_get_endpoint for IS_ERR_OR_NULL()
+    - vsock/virtio: annotate 'the_virtio_vsock' RCU pointer
+    - ax88172a: fix ax88172a_unbind() failures
+    - RDMA/mlx5: Use xa_lock_irq when access to SRQ table
+    - RDMA/core: Fix race in rdma_alloc_commit_uobject()
+    - RDMA/cm: Protect access to remote_sidr_table
+    - [armhf] net: fec: fix hardware time stamping by external devices
+    - [x86] ASoC: Intel: bytcht_es8316: Add missed put_device()
+    - ieee802154: fix one possible memleak in adf7242_probe
+    - [arm64,armhf] drm: sun4i: hdmi: Fix inverted HPD result
+    - [arm64,armhf] net: smc91x: Fix possible memory leak in smc_drv_probe()
+    - [arm64,armhf] net: dsa: mv88e6xxx: fix in-band AN link establishment
+    - [arm64] dts: clearfog-gt-8k: fix switch link configuration
+    - bonding: check error value of register_netdevice() immediately
+    - iwlwifi: Make some Killer Wireless-AC 1550 cards work again
+    - [arm64] net: bcmgenet: fix error returns in bcmgenet_probe()
+    - RDMA/mlx5: Prevent prefetch from racing with implicit destruction
+    - [arm64] net: hns3: fix for not calculating TX BD send size correctly
+    - [arm64] net: hns3: fix error handling for desc filling
+    - [arm64] net: hns3: fix return value error when query MAC link status
+      fail
+    - qed: suppress "don't support RoCE & iWARP" flooding on HW init
+    - qed: suppress false-positives interrupt error messages on HW init
+    - ipvs: fix the connection sync failed in some cases
+    - [arm64] iommu/qcom: Use domain rather than dev as tlb cookie
+    - Revert "PCI/PM: Assume ports without DLL Link Active train links in 100
+      ms"
+    - nfsd4: fix NULL dereference in nfsd/clients display code
+    - bonding: check return value of register_netdevice() in bond_newlink()
+    - geneve: fix an uninitialized value in geneve_changelink()
+    - serial: exar: Fix GPIO configuration for Sealevel cards based on
+      XR17V35X
+    - scripts/decode_stacktrace: strip basepath from all paths
+    - scripts/gdb: fix lx-symbols 'gdb.error' while loading modules
+    - [riscv64] Do not rely on initrd_start/end computed during early dt
+      parsing
+    - kbuild: fix single target builds for external modules
+    - [arm64,x86] HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor
+      override
+    - HID: alps: support devices with report id 2
+    - HID: steam: fixes race in handling device list.
+    - dmaengine: idxd: fix hw descriptor fields for delta record
+    - HID: apple: Disable Fn-key key-re-mapping on clone keyboards
+    - [arm64] dmaengine: tegra210-adma: Fix runtime PM imbalance on error
+    - [arm64,armhf] soc: amlogic: meson-gx-socinfo: Fix S905X3 and S905D3 ID's
+    - Input: add `SW_MACHINE_COVER`
+    - [armhf] dts: n900: remove mmc1 card detect gpio
+    - regmap: dev_get_regmap_match(): fix string comparison
+    - hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow
+    - [amd64] dmaengine: ioat setting ioat timeout as module parameter
+    - Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen
+    - Input: elan_i2c - only increment wakeup count on touch
+    - [arm64] usb: dwc3: pci: add support for the Intel Tiger Lake PCH -H
+      variant
+    - [arm64] usb: dwc3: pci: add support for the Intel Jasper Lake
+    - drm/amdgpu/gfx10: fix race condition for kiq
+    - drm/amdgpu: fix preemption unit test
+    - hwmon: (nct6775) Accept PECI Calibration as temperature source for
+      NCT6798D
+    - [x86] platform: asus-wmi: allow BAT1 battery name
+    - ALSA: hda/realtek - fixup for yet another Intel reference board
+    - drivers/perf: Fix kernel panic when rmmod PMU modules during perf
+      sampling
+    - [arm64] Use test_tsk_thread_flag() for checking TIF_SINGLESTEP
+    - asm-generic/mmiowb: Allow mmiowb_set_pending() when preemptible()
+    - drivers/perf: Prevent forced unbinding of PMU drivers
+    - [riscv64] Upgrade smp_mb__after_spinlock() to iorw,iorw
+    - [x86] boot: Don't add the EFI stub to targets
+    - [arm*] binder: Don't use mmput() from shrinker function.
+    - [arm64,armhf] usb: tegra: Fix allocation for the FPCI context
+    - usb: xhci: Fix ASM2142/ASM3142 DMA addressing
+    - Revert "cifs: Fix the target file was deleted when rename failed."
+      (Closes: #966917)
+    - iwlwifi: mvm: don't call iwl_mvm_free_inactive_queue() under RCU
+    - [arm64] tty: xilinx_uartps: Really fix id assignment
+    - [x86] staging: wlan-ng: properly check endpoint types
+    - [x86] staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG
+      shift
+    - [x86] staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support
+    - [x86] staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG
+      shift
+    - [x86] staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG
+      shift
+    - [arm64,armhf] serial: tegra: fix CREAD handling for PIO
+    - serial: 8250: fix null-ptr-deref in serial8250_start_tx()
+    - /dev/mem: Add missing memory barriers for devmem_inode
+    - fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
+    - vt: Reject zero-sized screen buffer size.
+    - mm/mmap.c: close race between munmap() and expand_upwards()/downwards()
+    - vfs/xattr: mm/shmem: kernfs: release simple xattr entry in a right way
+    - mm/memcg: fix refcount error while moving and swapping
+    - mm: memcg/slab: fix memory leak at non-root kmem_cache destroy
+    - mm/hugetlb: avoid hardcoding while checking if cma is enabled
+    - khugepaged: fix null-pointer dereference due to race
+    - io-mapping: indicate mapping failure
+    - [armhf] mmc: sdhci-of-aspeed: Fix clock divider calculation
+    - drm/amdgpu: Fix NULL dereference in dpm sysfs handlers
+    - [x86] vmlinux.lds: Page-align end of ..page_aligned sections
+    - [x86] ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on
+      the Lenovo Miix 2 10
+    - [x86] ASoC: topology: fix kernel oops on route addition error
+    - [x86] ASoC: topology: fix tlvs in error handling for widget_dmixer
+    - [x86] ASoC: Intel: bdw-rt5677: fix non BE conversion
+    - dm integrity: fix integrity recalculation that is improperly skipped
+    - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
+    - ath9k: Fix regression with Atheros 9271
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.12
+    - AX.25: Fix out-of-bounds read in ax25_connect()
+    - AX.25: Prevent out-of-bounds read in ax25_sendmsg()
+    - dev: Defer free of skbs in flush_backlog
+    - ip6_gre: fix null-ptr-deref in ip6gre_init_net()
+    - net-sysfs: add a newline when printing 'tx_timeout' by sysfs
+    - net: udp: Fix wrong clean up for IS_UDPLITE macro
+    - rtnetlink: Fix memory(net_device) leak when ->newlink fails
+    - rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA
+    - tcp: allow at most one TLP probe per flight
+    - AX.25: Prevent integer overflows in connect and sendmsg
+    - sctp: shrink stream outq only when new outcnt < old outcnt
+    - sctp: shrink stream outq when fails to do addstream reconf
+    - udp: Copy has_conns in reuseport_grow().
+    - udp: Improve load balancing for SO_REUSEPORT.
+    - tipc: allow to build NACK message in link timeout function
+    - io_uring: ensure double poll additions work with both request types
+    - regmap: debugfs: check count when read regmap file
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.13
+    - sunrpc: check that domain table is empty at module unload.
+    - PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge
+    - ALSA: usb-audio: Add implicit feedback quirk for SSL2
+    - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502)
+      series with ALC289
+    - ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus
+      G14(GA401) series with ALC289
+    - ALSA: hda/realtek: Fix add a "ultra_low_power" function for intel
+      reference board (alc256)
+    - ALSA: hda/realtek - Fixed HP right speaker no sound
+    - ALSA: hda: Workaround for spurious wakeups on some Intel platforms
+    - ALSA: hda/hdmi: Fix keep_power assignment for non-component devices
+    - RDMA/mlx5: Fix prefetch memory leak if get_prefetchable_mr fails
+    - [amd64] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE
+    - vhost/scsi: fix up req type endian-ness
+    - 9p/trans_fd: Fix concurrency del of req_list in
+      p9_fd_cancelled/p9_read_work
+    - revert: 1320a4052ea1 ("audit: trigger accompanying records when no rules
+      present") (Closes: #966822)
+    - [armel,armhf] 8986/1: hw_breakpoint: Don't invoke overflow handler on
+      uaccess watchpoints
+    - [armhf] 8987/1: VDSO: Fix incorrect clock_gettime64
+    - [armhf] dts: imx6sx-sabreauto: Fix the phy-mode on fec2
+    - virtio_balloon: fix up endian-ness for free cmd id
+    - Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers"
+    - drm/amd/display: Clear dm_state for fast updates (Closes: #963868)
+    - drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl()
+    - drm/dbi: Fix SPI Type 1 (9-bit) transfer
+    - drm: hold gem reference until object is no longer accessed
+    - drm: of: Fix double-free bug
+    - rds: Prevent kernel-infoleak in rds_notify_queue_get()
+    - xfrm: policy: match with both mark and mask on user interfaces
+    - [arm64] pinctrl: qcom: Handle broken/missing PDC dual edge IRQs on
+      sc7180
+    - espintcp: recv() should return 0 when the peer socket is closed
+    - xfrm: Fix crash when the hold queue is used.
+    - [arm64] net: hns3: fix desc filling bug when skb is expanded or lineared
+    - [arm64] net: hns3: fix a TX timeout issue
+    - [arm64] net: hns3: add reset check for VF updating port based VLAN
+    - [arm64] net: hns3: fix aRFS FD rules leftover after add a user FD rule
+    - [arm64] net: hns3: fix for VLAN config when reset failed
+    - net/mlx5: E-switch, Destroy TSAR when fail to enable the mode
+    - net/mlx5: E-switch, Destroy TSAR after reload interface
+    - net/mlx5e: Fix error path of device attach
+    - net/mlx5: Fix a bug of using ptp channel index as pin index
+    - net/mlx5: Verify Hardware supports requested ptp function on a given pin
+    - net/mlx5: Query PPS pin operational status before registering it
+    - net/mlx5e: Modify uplink state on interface up/down
+    - net/mlx5e: Fix kernel crash when setting vf VLANID on a VF dev
+    - net: lan78xx: add missing endpoint sanity check
+    - net: lan78xx: fix transfer-buffer memory leak
+    - rhashtable: Fix unprotected RCU dereference in __rht_ptr
+    - mlx4: disable device on shutdown
+    - nvme: add a Identify Namespace Identification Descriptor list quirk
+    - bpf: Fix map leak in HASH_OF_MAPS map
+    - espintcp: handle short messages instead of breaking the encap socket
+    - mac80211: mesh: Free ie data when leaving mesh
+    - mac80211: mesh: Free pending skb when destroying a mpath
+    - RDMA/core: Stop DIM before destroying CQ
+    - RDMA/core: Free DIM memory in error unwind
+    - [arm64] alternatives: move length validation inside the subsection
+    - [arm64] csum: Fix handling of bad packets
+    - Bluetooth: fix kernel oops in store_pending_adv_report
+    - net/mlx5e: E-Switch, Add misc bit when misc fields changed for mirroring
+    - net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq
+    - vxlan: fix memleak of fdb
+    - iwlwifi: fix crash in iwl_dbg_tlv_alloc_trigger
+    - qed: Disable "MFW indication via attention" SPAM every 5 minutes
+    - io_uring: always allow drain/link/hardlink/async sqe flags
+    - scsi: core: Run queue in case of I/O resource contention failure
+    - [amd64] x86/unwind/orc: Fix ORC for newly forked tasks
+    - [x86] stacktrace: Fix reliable check for empty user task stacks
+    - cxgb4: add missing release on skb in uld_send()
+    - xen-netfront: fix potential deadlock in xennet_remove()
+    - [riscv64] Set maximum number of mapped pages correctly
+    - [riscv64] Parse all memory blocks to remove unusable memory
+    - [arm64] KVM: Don't inherit exec permission across page-table levels
+    - [x86] KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is
+      hw disabled
+    - [x86] KVM: SVM: Fix disable pause loop exit/pause filtering capability
+      on SVM
+    - [x86] i8259: Use printk_deferred() to prevent deadlock
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.14
+    - random32: update the net random state on interrupt and activity
+      (CVE-2020-16166)
+    - [armel] percpu.h: fix build error
+    - [arm64] random: fix circular include dependency on arm64 after addition
+      of percpu.h
+    - random32: remove net_rand_state from the latent entropy gcc plugin
+    - random32: move the pseudo-random 32-bit definitions to prandom.h
+    - [arm64] Workaround circular dependency in pointer_auth.h
+    - random: random.h should include archrandom.h, not the other way around
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.15
+    - scsi: ufs: Fix and simplify setup_xfer_req variant operation
+    - USB: serial: qcserial: add EM7305 QDL product ID
+    - USB: iowarrior: fix up report size handling for some devices
+    - usb: xhci: define IDs for various ASMedia host controllers
+    - usb: xhci: Fix ASMedia ASM1142 DMA addressing
+    - Revert "ALSA: hda: call runtime_allow() for all hda controllers"
+    - ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops
+    - ALSA: hda/ca0132 - Add new quirk ID for Recon3D.
+    - ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value.
+    - ALSA: hda/ca0132 - Fix AE-5 microphone selection commands.
+    - ALSA: seq: oss: Serialize ioctls
+    - [arm*] staging: android: ashmem: Fix lockdep warning for write operation
+    - staging: rtl8712: handle firmware load failure
+    - Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode
+    - Bluetooth: Fix slab-out-of-bounds read in
+      hci_extended_inquiry_result_evt()
+    - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
+    - Bluetooth: Prevent out-of-bounds read in
+      hci_inquiry_result_with_rssi_evt()
+    - [arm*] binder: Prevent context manager from incrementing ref 0
+    - Smack: fix use-after-free in smk_write_relabel_self()
+    - vgacon: Fix for missing check in scrollback handling (CVE-2020-14331)
+    - mtd: properly check all write ioctls for permissions
+    - [arm64] gpio: max77620: Fix missing release of interrupt
+    - bpf: Fix NULL pointer dereference in __btf_resolve_helper_id()
+    - net/9p: validate fds in p9_fd_open
+    - drm/nouveau/kms/tu102: wait for core update to complete when assigning
+      windows
+    - drm/nouveau/fbcon: fix module unload when fbcon init has failed for some
+      reason
+    - drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure
+    - io_uring: fix lockup in io_fail_links()
+    - nvme-pci: prevent SK hynix PC400 from using Write Zeroes command
+    - [arm64] drm/bridge/adv7511: set the bridge type properly
+    - [armhf] i2c: slave: improve sanity check when registering
+    - [armhf] i2c: slave: add sanity check when unregistering
+    - usb: hso: check for return value in hso_serial_common_create()
+    - ALSA: hda: fix NULL pointer dereference during suspend
+    - firmware: Fix a reference count leak.
+    - cfg80211: check vendor command doit pointer before use
+    - igb: reinit_locked() should be called with rtnl_lock
+    - atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent
+    - tools lib traceevent: Fix memory leak in process_dynamic_array_len
+    - xattr: break delegations in {set,remove}xattr
+    - [arm64,armhf] PCI: tegra: Revert tegra124 raw_violation_fixup
+    - ipv4: Silence suspicious RCU usage warning
+    - ipv6: fix memory leaks on IPV6_ADDRFORM path
+    - ipv6: Fix nexthop refcnt leak when creating ipv6 route info
+    - rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
+    - vxlan: Ensure FDB dump is performed under RCU
+    - net: lan78xx: replace bogus endpoint lookup
+    - rhashtable: Restore RCU marking on rhash_lock_head
+    - devlink: ignore -EOPNOTSUPP errors on dumpit
+    - appletalk: Fix atalk_proc_init() return path
+    - [arm64] dpaa2-eth: Fix passing zero to 'PTR_ERR' warning
+    - [x86] hv_netvsc: do not use VF device if link is down
+    - net: bridge: clear bridge's private skb space on xmit
+    - net: gre: recompute gre csum for sctp over gre tunnels
+    - net: macb: Properly handle phylink on at91sam9x
+    - [arm64,armhf] net: mvpp2: fix memory leak in mvpp2_rx
+    - net/sched: act_ct: fix miss set mru for ovs after defrag in act_ct
+    - [arm64] net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task()
+    - openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()
+    - Revert "vxlan: fix tos value before xmit"
+    - tcp: apply a floor of 1 for RTT samples from TCP timestamps
+    - [arm64] kaslr: Use standard early random function
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.16
+    - tracepoint: Mark __tracepoint_string's __used
+    - io_uring: abstract out task work running
+    - HID: input: Fix devices that return multiple bytes in battery report
+    - [x86] mce/inject: Fix a wrong assignment of i_mce.status
+    - [x86] perf/x86/intel/uncore: Fix oops when counting IMC uncore events on
+      some TGL
+    - [x86] sched: Bail out of frequency invariance if turbo frequency is
+      unknown
+    - [x86] sched: Bail out of frequency invariance if turbo_freq/base_freq
+      gives 0
+    - sched/fair: Fix NOHZ next idle balance
+    - sched: correct SD_flags returned by tl->sd_flags()
+    - EDAC: Fix reference count leaks
+    - crc-t10dif: Fix potential crypto notify dead-lock
+    - blktrace: fix debugfs use after free (CVE-2019-19770)
+    - [armhf] exynos: MCPM: Restore big.LITTLE cpuidle support
+    - rcu/tree: Repeat the monitor if any free channel is busy
+    - sched/uclamp: Fix initialization of struct uclamp_rq
+    - [x86] crypto: qat - allow xts requests not multiple of block
+    - [x86] platform/x86: intel-hid: Fix return value check in
+      check_acpi_dev()
+    - [x86] platform/x86: intel-vbtn: Fix return value check in
+      check_acpi_dev()
+    - tpm: Require that all digests are present in TCG_PCR_EVENT2 structures
+    - recordmcount: only record relocation of type R_AARCH64_CALL26 on arm64.
+    - regulator: fix memory leak on error path of regulator_register()
+    - io_uring: fix sq array offset calculation
+    - [arm64] dts: meson: fix mmc0 tuning error on Khadas VIM3
+    - [arm64,armhf] spi: rockchip: Fix error in SPI slave pio read
+    - seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID
+    - md: raid0/linear: fix dereference before null check on pointer mddev
+    - [mips64el,mipsel] irqchip/loongson-liointc: Fix potential dead lock
+    - [arm64,armhf] irqchip/gic-v4.1: Use GFP_ATOMIC flag in
+      allocate_vpe_l1_table()
+    - nvme-tcp: fix controller reset hang during traffic
+    - nvme-rdma: fix controller reset hang during traffic
+    - nvme-multipath: fix logic for non-optimized paths
+    - nvme-multipath: do not fall back to __nvme_find_path() for non-optimized
+      paths
+    - block: don't do revalidate zones on invalid devices
+    - [armhf] drm/tilcdc: fix leak & null ref in panel_connector_get_modes
+    - [armhf] exynos: clear L310_AUX_CTRL_FULL_LINE_ZERO in default
+      l2c_aux_val
+    - Bluetooth: add a mutex lock to avoid UAF in do_enale_set
+    - loop: be paranoid on exit and prevent new additions / removals
+    - io_uring: fix req->work corruption
+    - fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls
+    - drm/amdgpu: avoid dereferencing a NULL pointer
+    - drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync
+    - video: fbdev: savage: fix memory leak on error handling path in probe
+    - video: fbdev: neofb: fix memory leak in neo_scan_monitor()
+    - [armhf] bus: ti-sysc: Add missing quirk flags for usb_host_hs
+    - md-cluster: fix wild pointer of unlock_all_bitmaps()
+    - drm/nouveau/kms/nv50-: Fix disabling dithering
+    - [arm64] dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT
+      binding
+    - [armhf] drm/etnaviv: fix ref count leak via pm_runtime_get_sync
+    - drm/nouveau: fix reference count leak in nouveau_debugfs_strap_peek
+    - drm/nouveau: fix multiple instances of reference count leaks
+    - btrfs: fix lockdep splat from btrfs_dump_space_info
+    - [arm64] drm: msm: a6xx: fix gpu failure after system resume
+    - [arm64] drm/msm: Fix a null pointer access in msm_gem_shrinker_count()
+    - drm/debugfs: fix plain echo to connector "force" attribute
+    - drm/radeon: disable AGP by default
+    - net: phy: mscc: restore the base page in vsc8514/8584_config_init
+    - mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls
+    - bpf: Fix fds_example SIGSEGV error
+    - Bluetooth: hci_qca: Bug fixes for SSR
+    - brcmfmac: keep SDIO watchdog running when console_interval is non-zero
+    - brcmfmac: To fix Bss Info flag definition Bug
+    - brcmfmac: set state of hanger slot to FREE when flushing PSQ
+    - [x86] platform/x86: asus-nb-wmi: add support for ASUS ROG Zephyrus G14
+      and G15
+    - iwlegacy: Check the return value of pcie_capability_read_*()
+    - [arm64,armhf] gpu: host1x: debug: Fix multiple channels emitting
+      messages simultaneously
+    - [x86] uaccess: Make __get_user_size() Clang compliant on 32-bit
+    - mmc: sdhci-pci-o2micro: Bug fix for O2 host controller Seabird1
+    - usb: gadget: net2280: fix memory leak on probe error handling paths
+    - dyndbg: fix a BUG_ON in ddebug_describe_flags
+    - bcache: fix super block seq numbers comparision in register_cache_set()
+    - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space
+      reservation
+    - btrfs: qgroup: free per-trans reserved space when a subvolume gets
+      dropped
+    - [arm64,x86] ACPICA: Do not increment operation_region reference counts
+      for field units
+    - io_uring: fix racy overflow count reporting
+    - io_uring: fix stalled deferred requests
+    - [arm64] crypto: caam - silence .setkey in case of bad key length
+    - [arm64] drm/msm: ratelimit crtc event overflow error
+    - drm/gem: Fix a leak in drm_gem_objects_lookup()
+    - drm/amdgpu: use the unlocked drm_gem_object_put
+    - [x86] agp/intel: Fix a memory leak on module initialisation failure
+    - btmrvl: Fix firmware filename for sd8977 chipset
+    - btmrvl: Fix firmware filename for sd8997 chipset
+    - Bluetooth: hci_qca: Fix an error pointer dereference
+    - Bluetooth: hci_qca: Only remove TX clock vote after TX is completed
+    - Bluetooth: Allow suspend even when preparation has failed
+    - ath10k: Acquire tx_lock in tx error paths
+    - Bluetooth: hci_qca: Bug fix during SSR timeout
+    - Bluetooth: hci_qca: Increase SoC idle timeout to 200ms
+    - iio: improve IIO_CONCENTRATION channel type description
+    - scsi: ufs: Fix imprecise load calculation in devfreq window
+    - [armhf] drm/etnaviv: Fix error path on failure to enable bus clk
+    - [arm64,armhf] drm/panfrost: Fix inbalance of devfreq record_busy/idle()
+    - [arm64] drm/arm: fix unintentional integer overflow on left shift
+    - Bluetooth: btusb: fix up firmware download sequence
+    - Bluetooth: btmtksdio: fix up firmware download sequence
+    - media: marvell-ccic: Add missed v4l2_async_notifier_cleanup()
+    - [armhf] media: omap3isp: Add missed v4l2_ctrl_handler_free() for
+      preview_init_entities()
+    - [arm64] dpaa2-eth: fix condition for number of buffer acquire retries
+    - drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
+    - [powerpc*] cxl: Fix kobject memleak
+    - tracing: Move pipe reference to trace array instead of current_tracer
+    - drm/amdgpu: ensure 0 is returned for success in jpeg_v2_5_wait_for_idle
+    - drm/radeon: fix array out-of-bounds read and write issues
+    - [arm*] staging: vchiq_arm: Add a matching unregister call
+    - iavf: fix error return code in iavf_init_get_resources()
+    - iavf: Fix updating statistics
+    - RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued()
+    - ipvs: allow connection reuse for unconfirmed conntrack
+    - media: firewire: Using uninitialized values in node_probe()
+    - media: tvp5150: Add missed media_entity_cleanup()
+    - xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork
+    - xfs: fix reflink quota reservation accounting error
+    - RDMA/rxe: Skip dgid check in loopback mode
+    - PCI: Fix pci_cfg_wait queue locking problem
+    - samples: bpf: Fix bpf programs with kprobe/sys_connect event
+    - [armhf] drm/stm: repair runtime power management
+    - kobject: Avoid premature parent object freeing in kobject_cleanup()
+    - leds: core: Flush scheduled work for system suspend
+    - [arm64,armhf] drm: panel: simple: Fix bpc for LG LB070WV8 panel
+    - [armhf] phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY
+    - [arm64] mmc: sdhci-of-arasan: Add missed checks for devm_clk_register()
+    - scsi: scsi_debug: Add check for sdebug_max_queue during module init
+    - mwifiex: Prevent memory corruption handling keys
+    - kernfs: do not call fsnotify() with name without a parent
+    - [powerpc*] pseries: remove cede offline state for CPUs
+    - [powerpc*] rtas: don't online CPUs for partition suspend
+    - [powerpc*] vdso: Fix vdso cpu truncation
+    - RDMA/qedr: SRQ's bug fixes
+    - RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send
+      queue
+    - [x86] staging: rtl8192u: fix a dubious looking mask before a shift
+    - PCI/ASPM: Add missing newline in sysfs 'policy'
+    - go7007: add sanity checking for endpoints
+    - [powerpc*] book3s64/pkeys: Use PVR check instead of cpu feature
+    - [armhf] drm/imx: fix use after free
+    - [armhf] gpu: ipu-v3: Restore RGB32, BGR32
+    - USB: serial: iuu_phoenix: fix led-activity helpers
+    - usb: core: fix quirks_param_set() writing to a const pointer
+    - [armhf] thermal: ti-soc-thermal: Fix reversed condition in
+      ti_thermal_expose_sensor()
+    - [powerpc*] perf: Fix missing is_sier_aviable() during build
+    - [armhf] phy: armada-38x: fix NETA lockup when repeatedly switching
+      speeds
+    - [x86] ASoC: hdac_hda: fix deadlock after PCM open error
+    - [mips64el,mipsel] OCTEON: add missing put_device() call in
+      dwc3_octeon_device_init()
+    - [x86] thermal: int340x: processor_thermal: fix: update Jasper Lake PCI
+      id
+    - [arm*] usb: dwc2: Fix error path in gadget registration
+    - usb: gadget: f_uac2: fix AC Interface Header Descriptor wTotalLength
+    - scsi: megaraid_sas: Clear affinity hint
+    - [powerpc] scsi: mesh: Fix panic after host or bus reset
+    - [arm64,armhf] net: dsa: mv88e6xxx: MV88E6097 does not support jumbo
+      configuration
+    - RDMA/core: Fix return error value in _ib_modify_qp() to negative
+    - Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth
+      controllers
+    - Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags
+    - Bluetooth: hci_serdev: Only unregister device if it was registered
+    - Bluetooth: Fix suspend notifier race
+    - Bluetooth: hci_qca: Stop collecting memdump again for command timeout
+      during SSR
+    - xfs: fix inode allocation block res calculation precedence
+    - xfs: clear XFS_DQ_FREEING if we can't lock the dquot buffer to flush
+    - RDMA/netlink: Remove CAP_NET_RAW check when dump a raw QP
+    - PCI: Release IVRS table in AMD ACS quirk
+    - [powerpc*] pseries/hotplug-cpu: Remove double free in error path
+    - ASoC: soc-core: Fix regression causing sysfs entries to disappear
+    - [s390x] qeth: tolerate pre-filled RX buffer
+    - [s390x] qeth: don't process empty bridge port events
+    - ice: Clear and free XLT entries on reset
+    - ice: Graceful error handling in HW table calloc failure
+    - netfilter: nft_meta: fix iifgroup matching
+    - rtw88: fix LDPC field for RA info
+    - rtw88: fix short GI capability based on current bandwidth
+    - rtw88: coex: only skip coex triggered by BT info
+    - [arm64,armhf] wl1251: fix always return 0 error
+    - net/mlx5: DR, Change push vlan action sequence
+    - net/mlx5: Delete extra dump stack that gives nothing
+    - ftrace: Fix ftrace_trace_task return value
+    - [amd64,arm64] net: ethernet: aquantia: Fix wrong return value
+    - liquidio: Fix wrong return value in cn23xx_get_pf_num()
+    - [powerpc] net: spider_net: Fix the size used in a 'dma_free_coherent()'
+      call
+    - gpio: don't use same lockdep class for all devm_gpiochip_add_data users
+    - [arm64] net: thunderx: initialize VF's mailbox mutex before first usage
+    - dlm: Fix kobject memleak
+    - ocfs2: fix unbalanced locking
+    - [arm64,armhf] pinctrl-single: fix pcs_parse_pinconf() return value
+    - svcrdma: Fix page leak in svc_rdma_recv_read_chunk()
+    - nfsd: avoid a NULL dereference in __cld_pipe_upcall()
+    - SUNRPC: Fix ("SUNRPC: Add "@len" parameter to gss_unwrap()")
+    - [amd64] x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
+    - [amd64] crypto: aesni - add compatibility with IAS
+    - af_packet: TPACKET_V3: fix fill status rwlock imbalance
+    - net: Fix potential memory leak in proto_register()
+    - net/nfc/rawsock.c: add CAP_NET_RAW check.
+    - net: phy: fix memory leak in device-create error path
+    - net: Set fput_needed iff FDPUT_FPUT is set
+    - tcp: correct read of TFO keys on big endian systems
+    - [x86] vmxnet3: use correct tcp hdr length when packet is encapsulated
+    - net: refactor bind_bucket fastreuse into helper
+    - net: initialize fastreuse on inet_inherit_port
+    - vsock: fix potential null pointer dereference in vsock_poll()
+    - net: phy: marvell10g: fix null pointer dereference
+    - USB: serial: cp210x: re-enable auto-RTS on open
+    - USB: serial: cp210x: enable usb generic throttle/unthrottle
+    - ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO
+    - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support
+    - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109
+    - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109
+    - ALSA: usb-audio: add quirk for Pioneer DDJ-RB
+    - [arm64,x86] tpm: Unify the mismatching TPM space buffer sizes
+    - [x86] crypto: qat - fix double free in qat_uclo_create_batch_init_list
+    - [x86] crypto: ccp - Fix use of merged scatterlists
+    - [arm64] crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not
+      specified
+    - tick/nohz: Narrow down noise while setting current task's tick
+      dependency
+    - bitfield.h: don't compile-time validate _val in FIELD_FIT
+    - fs/minix: check return value of sb_getblk()
+    - fs/minix: don't allow getting deleted inodes
+    - fs/minix: reject too-large maximum file size
+    - [x86] kvm: x86: replace kvm_spec_ctrl_test_value with runtime test on
+      the host
+    - 9p: Fix memory leak in v9fs_mount
+    - driver core: Fix probe_count imbalance in really_probe()
+    - media: media-request: Fix crash if memory allocation fails
+    - drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
+    - io_uring: set ctx sq/cq entry count earlier
+    - io_uring: use TWA_SIGNAL for task_work uncondtionally
+    - io_uring: fail poll arm on queue proc failure
+    - NFS: Don't move layouts to plh_return_segs list while in use
+    - NFS: Don't return layout segments that are in use
+    - cpufreq: Fix locking issues with governors
+    - [arm64] cpufreq: dt: fix oops on armada37xx
+    - include/asm-generic/vmlinux.lds.h: align ro_after_init
+    - [arm64] PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is
+      absent
+    - PM / devfreq: Fix indentaion of devfreq_summary debugfs node
+    - spi: spidev: Align buffers for DMA
+    - erofs: fix extended inode could cross boundary
+    - [arm64] firmware: qcom_scm: Fix legacy convention SCM accessors
+    - [x86] irqdomain/treewide: Free firmware node after domain removal
+    - xen/balloon: fix accounting in alloc_xenballooned_pages error path
+    - xen/balloon: make the balloon wait interruptible
+    - [x86] drm/xen-front: Fix misused IS_ERR_OR_NULL checks
+    - [s390x] dasd: fix inability to use DASD with DIAG driver
+    - [s390x] numa: set node distance to LOCAL_DISTANCE
+    - [s390x] gmap: improve THP splitting
+    - io_uring: sanitize double poll handling
+    - io_uring: Fix NULL pointer dereference in loop_rw_iter()
+    - task_work: only grab task signal lock when needed
+    - io_uring: add missing REQ_F_COMP_LOCKED for nested requests
+    - io_uring: enable lookup of links holding inflight files
+    - io_uring: hold 'ctx' reference around task_work queue + execute
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.17
+    - smb3: warn on confusing error scenario with sec=krb5
+    - genirq/affinity: Make affinity setting if activated opt-in
+    - genirq/PM: Always unlock IRQ descriptor in rearm_wake_irq()
+    - [arm64,x86] PCI: hotplug: ACPI: Fix context refcounting in
+      acpiphp_grab_context()
+    - PCI/ATS: Add pci_pri_supported() to check device or associated PF
+    - PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken
+    - PCI: Add device even if driver attach failed
+    - [arm64] PCI: qcom: Define some PARF params needed for ipq8064 SoC
+    - [arm64] PCI: qcom: Add support for tx term offset for rev 2.1.0
+    - btrfs: allow use of global block reserve for balance item deletion
+    - btrfs: free anon block device right after subvolume deletion
+    - btrfs: don't allocate anonymous block device for user invisible roots
+    - btrfs: ref-verify: fix memory leak in add_block_entry
+    - btrfs: only commit the delayed inode when doing a full fsync
+    - btrfs: stop incremening log_batch for the log root tree when syncing log
+    - btrfs: only commit delayed items at fsync if we are logging a directory
+    - btrfs: remove no longer needed use of log_writers for the log root tree
+    - btrfs: don't traverse into the seed devices in show_devname
+    - btrfs: pass checksum type via BTRFS_IOC_FS_INFO ioctl
+    - btrfs: open device without device_list_mutex
+    - btrfs: move the chunk_mutex in btrfs_read_chunk_tree
+    - btrfs: relocation: review the call sites which can be interrupted by
+      signal
+    - btrfs: add missing check for nocow and compression inode flags
+    - btrfs: avoid possible signal interruption of btrfs_drop_snapshot() on
+      relocation tree
+    - btrfs: return EROFS for BTRFS_FS_STATE_ERROR cases
+    - btrfs: sysfs: use NOFS for device creation
+    - btrfs: don't WARN if we abort a transaction with EROFS
+    - btrfs: fix race between page release and a fast fsync
+    - btrfs: don't show full path of bind mounts in subvol=
+    - btrfs: fix messages after changing compression level by remount
+    - btrfs: only search for left_info if there is no right_info in
+      try_merge_free_space
+    - btrfs: inode: fix NULL pointer dereference if inode doesn't need
+      compression
+    - btrfs: fix memory leaks after failure to lookup checksums during inode
+      logging
+    - btrfs: trim: fix underflow in trim length to prevent access beyond
+      device boundary
+    - btrfs: make sure SB_I_VERSION doesn't get unset by remount
+    - btrfs: fix return value mixup in btrfs_get_extent
+    - [arm64] perf: Correct the event index in sysfs
+    - cifs: Fix leak when handling lease break for cached root fid
+    - [powerpc*] Allow 4224 bytes of stack expansion for the signal frame
+    - [powerpc*] Fix circular dependency between percpu.h and mmu.h
+    - [arm64] media: venus: fix multiple encoder crash
+    - [arm64] net: ethernet: stmmac: Disable hardware multicast filter
+    - [arm64,armhf] net: stmmac: dwmac1000: provide multicast filter fallback
+    - [mips64el,mipsel] irqchip/loongson-liointc: Fix misuse of gc->mask_cache
+    - [arm64,armhf] irqchip/gic-v4.1: Ensure accessing the correct RD when
+      writing INVALLR
+    - pidfd: Add missing sock updates for pidfd_getfd()
+    - net/compat: Add missing sock updates for SCM_RIGHTS
+    - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5
+    - bcache: allocate meta data pages as compound pages
+    - bcache: fix overflow in offset_to_stripe()
+    - mac80211: fix misplaced while instead of if
+    - driver core: Avoid binding drivers to dead devices
+    - [mips*] CPU#0 is not hotpluggable
+    - ext2: fix missing percpu_counter_inc
+    - khugepaged: collapse_pte_mapped_thp() flush the right range
+    - mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible
+    - khugepaged: collapse_pte_mapped_thp() protect the pmd lock
+    - hugetlbfs: remove call to huge_pte_alloc without i_mmap_rwsem
+    - [amd64,arm64] mm/shuffle: don't move pages between zones and don't read
+      garbage memmaps
+    - ocfs2: change slot number type s16 to u16
+    - mm/page_counter.c: fix protection usage propagation
+    - cma: don't quit at first error when activating reserved areas
+    - mm/memory_hotplug: fix unpaired mem_hotplug_begin/done
+    - ftrace: Setup correct FTRACE_FL_REGS flags for module
+    - kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler
+    - tracing: Use trace_sched_process_free() instead of exit() for pid
+      tracing
+    - [x86] watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in
+      watchdog_info.options
+    - [x86] watchdog: f71808e_wdt: remove use of wrong watchdog_info option
+    - [x86] watchdog: f71808e_wdt: clear watchdog timeout occurred flag
+    - ceph: set sec_context xattr on symlink creation
+    - ceph: handle zero-length feature mask in session messages
+    - [powerpc*] pseries: Fix 64 bit logical memory block panic
+    - dm: don't call report zones for more than the user requested
+    - module: Correctly truncate sysfs sections output
+    - bootconfig: Fix to find the initargs correctly
+    - perf probe: Fix wrong variable warning when the probe point is not found
+    - perf probe: Fix memory leakage when the probe point is not found
+    - perf intel-pt: Fix FUP packet state
+    - perf intel-pt: Fix duplicate branch after CBR
+    - gfs2: Never call gfs2_block_zero_range with an open transaction
+    - [armhf] drm/imx: imx-ldb: Disable both channels for split mode in
+      enc->disable()
+    - crypto: algif_aead - Only wake up when ctx->more is zero
+    - RDMA/ipoib: Return void from ipoib_ib_dev_stop()
+    - RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah()
+    - rtc: cpcap: fix range
+    - IB/uverbs: Set IOVA on IB MR in uverbs layer
+    - sched/uclamp: Protect uclamp fast path code with static key
+    - USB: serial: ftdi_sio: make process-packet buffer unsigned
+    - USB: serial: ftdi_sio: clean up receive processing
+    - crypto: af_alg - Fix regression on empty requests
+    - devres: keep both device name and resource name in pretty name
+    - RDMA/counter: Only bind user QPs in auto mode
+    - RDMA/counter: Allow manually bind QPs with different pids to same
+      counter
+    - rtw88: pci: disable aspm for platform inter-op with module parameter
+    - [arm64,armhf] rtc: pl031: fix set_alarm by adding back call to
+      alarm_irq_enable
+    - [armhf] gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq
+      handlers
+    - [armhf] gpu: ipu-v3: image-convert: Wait for all EOFs before completing
+      a tile
+    - dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue()
+    - f2fs: compress: fix to avoid memory leak on cc->cpages
+    - [arm64] clk: qcom: clk-alpha-pll: remove unused/incorrect PLL_CAL_VAL
+    - iommu/vt-d: Enforce PASID devTLB field mask
+    - f2fs: compress: fix to update isize when overwriting compressed file
+    - nvme: fix deadlock in disconnect during scan_work and/or ana_work
+    - sched/uclamp: Fix a deadlock when enabling uclamp static key
+    - nfs: ensure correct writeback errors are returned on close()
+    - ubifs: Fix wrong orphan node deletion in ubifs_jnl_update|rename
+    - [arm*] clk: bcm2835: Do not use prediv with bcm2711's PLLs
+    - scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying
+      targetport
+    - nfs: nfs_file_write() should check for writeback errors
+    - watchdog: initialize device before misc_register
+    - md-cluster: Fix potential error pointer dereference in resize_bitmaps()
+    - [x86] tsr: Fix tsc frequency enumeration bug on Lightning Mountain SoC
+    - [x86] bugs/multihit: Fix mitigation reporting when VMX is not in use
+    - Input: sentelic - fix error return when fsp_reg_write fails
+    - [x86] drm/vmwgfx: Use correct vmw_legacy_display_unit pointer
+    - [x86] drm/vmwgfx: Fix two list_for_each loop exit tests
+    - [arm64] net: qcom/emac: add missed clk_disable_unprepare in error path
+      of emac_clks_phase1_init
+    - nfs: Fix getxattr kernel panic and memory overflow
+    - NFS: Fix flexfiles read failover
+    - fs/minix: set s_maxbytes correctly
+    - fs/minix: fix block limit check for V1 filesystems
+    - fs/minix: remove expected error message in block_to_path()
+    - fs/ufs: avoid potential u32 multiplication overflow
+    - crypto: algif_aead - fix uninitialized ctx->init
+    - perf bench mem: Always memset source before memcpy
+    - [x86] perf/x86/rapl: Fix missing psys sysfs attributes
+    - khugepaged: retract_page_tables() remember to test exit
+    - [arm64,armhf] ASoC: tegra: Use device managed resource APIs to get the
+      clock
+    - [arm64,armhf] ASoC: tegra: Add audio mclk parent configuration
+    - [arm64,armhf] ASoC: tegra: Enable audio mclk during
+      tegra_asoc_utils_init()
+    - [x86] drm/i915/gt: Force the GT reset on shutdown
+    - [arm64,armhf] drm/panfrost: Use kvfree() to free bo->sgts
+    - drm/dp_mst: Fix the DDC I2C device registration of an MST port
+    - drm/amdgpu: fix ordering of psp suspend
+    - [armhf] drm/omap: force runtime PM suspend on system suspend
+    - drm: Added orientation quirk for ASUS tablet model T103HAF
+    - drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi
+    - drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume
+
+  [ Salvatore Bonaccorso ]
+  * Bump ABI to 3
+
+  [ Ben Hutchings ]
+  * doc: Disable extension incompatible with Sphinx 3 (fixes FTBFS)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 23 Aug 2020 15:44:14 +0200
+
+linux (5.7.10-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.7
+    - block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed
+    - ethtool: Fix check in ethtool_rx_flow_rule_create
+    - geneve: allow changing DF behavior after creation
+    - [powerpc*] ibmveth: Fix max MTU limit
+    - mld: fix memory leak in ipv6_mc_destroy_dev()
+    - [arm64,armhf] mvpp2: ethtool rxtx stats fix
+    - net: bridge: enfore alignment for ethernet address
+    - net: core: reduce recursion limit value
+    - net: Do not clear the sock TX queue in sk_set_socket()
+    - net: ethtool: add missing string for NETIF_F_GSO_TUNNEL_REMCSUM
+    - net: fix memleak in register_netdevice()
+    - net: Fix the arp error in some cases
+    - net: increment xmit_recursion level in dev_direct_xmit()
+    - net: usb: ax88179_178a: fix packet alignment padding
+    - openvswitch: take into account de-fragmentation/gso_size in
+      execute_check_pkt_len
+    - rxrpc: Fix notification call on completion of discarded calls
+    - sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket
+    - tcp: don't ignore ECN CWR on pure ACK
+    - tcp: grow window for OOO packets only for SACK flows
+    - tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes
+    - ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
+    - net: phy: Check harder for errors in get_phy_id()
+    - ip_tunnel: fix use-after-free in ip_tunnel_lookup()
+    - bnxt_en: Store the running firmware version code.
+    - bnxt_en: Do not enable legacy TX push on older firmware.
+    - bnxt_en: Fix statistics counters issue during ifdown with older firmware.
+    - bnxt_en: Read VPD info only for PFs
+    - net: phylink: fix ethtool -A with attached PHYs
+    - net: phylink: ensure manual pause mode configuration takes effect
+    - sch_cake: don't try to reallocate or unshare skb unconditionally
+    - sch_cake: don't call diffserv parsing code when it is not needed
+    - sch_cake: fix a few style nits
+    - tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
+    - bpf: tcp: bpf_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
+    - [arm64,riscv64] net: macb: undo operations in case of failure
+    - r8169: fix firmware not resetting tp->ocp_base
+    - net: ethtool: add missing NETIF_F_GSO_FRAGLIST feature string
+    - [arm64,riscv64] net: macb: call pm_runtime_put_sync on failure path
+    - net: phy: mscc: avoid skcipher API for single block AES encryption
+    - of: of_mdio: Correct loop scanning logic
+    - wireguard: device: avoid circular netns references
+    - bareudp: Fixed multiproto mode configuration
+    - [armhf] net: dsa: bcm_sf2: Fix node reference count
+    - net: phy: smsc: fix printing too many logs
+    - genetlink: clean up family attributes allocations
+    - nvmet: cleanups the loop in nvmet_async_events_process
+    - nvmet: fail outstanding host posted AEN req
+    - ALSA: usb-audio: Fix potential use-after-free of streams
+    - [arm64,armhf] Revert "i2c: tegra: Fix suspending in active runtime PM
+      state"
+    - btrfs: fix a block group ref counter leak after failure to remove block
+      group
+    - binder: fix null deref of proc->context
+    - [x86] mei: me: disable mei interface on Mehlow server platforms
+    - [x86] mei: me: add tiger lake point device ids for H platforms.
+    - [armhf] Revert "usb: dwc3: exynos: Add support for Exynos5422 suspend
+      clk"
+    - [mips*/*-malta,sh4] USB: ohci-sm501: Add missed iounmap() in remove
+    - [arm64,armhf] usb: dwc2: Postponed gadget registration to the udc class
+      driver
+    - usb: add USB_QUIRK_DELAY_INIT for Logitech C922
+    - USB: ehci: reopen solution for Synopsys HC bug
+    - xhci: Poll for U0 after disabling USB2 LPM
+    - [armhf] usb: host: ehci-exynos: Fix error check in exynos_ehci_probe()
+    - ALSA: usb-audio: Add implicit feedback quirk for SSL2+.
+    - ALSA: usb-audio: add quirk for Denon DCD-1500RE
+    - ALSA: usb-audio: Set 48 kHz rate for Rodecaster
+    - ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S
+    - ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG)
+    - ALSA: usb-audio: Fix OOB access of mixer element list
+    - scsi: qla2xxx: Keep initiator ports after RSCN
+    - [s390x] scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP
+      action
+    - cifs: Fix cached_fid refcnt leak in open_shroot
+    - cifs/smb3: Fix data inconsistent when punch hole
+    - cifs/smb3: Fix data inconsistent when zero file range
+    - xhci: Fix incorrect EP_STATE_MASK
+    - xhci: Fix enumeration issue when setting max packet size for FS devices.
+    - xhci: Return if xHCI doesn't support LPM
+    - cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip
+    - loop: replace kill_bdev with invalidate_bdev
+    - IB/mad: Fix use after free when destroying MAD agent
+    - IB/hfi1: Fix module use count flaw due to leftover module put calls
+    - [armhf] bus: ti-sysc: Flush posted write on enable and disable
+    - [armhf] bus: ti-sysc: Use optional clocks on for enable and wait for
+      softreset bit
+    - [armhf] bus: ti-sysc: Ignore clockactivity unless specified as a quirk
+    - [armhf] bus: ti-sysc: Fix uninitialized framedonetv_irq
+    - [armhf] OMAP2+: Fix legacy mode dss_reset
+    - xfrm: Fix double ESP trailer insertion in IPsec crypto offload.
+    - [armhf] dts: Fix am33xx.dtsi USB ranges length
+    - [armhf] dts: Fix am33xx.dtsi ti,sysc-mask wrong softreset flag
+    - [x86] resctrl: Support CPUID enumeration of MBM counter width
+    - [x86] resctrl: Fix memory bandwidth counter width for AMD
+    - efi/tpm: Verify event log header before parsing
+    - ASoC: soc-pcm: fix checks for multi-cpu FE dailinks
+    - [arm64] ASoC: qcom: common: set correct directions for dailinks
+    - [armhf] regualtor: pfuze100: correct sw1a/sw2 on pfuze3000
+    - efi/libstub: Fix path separator regression
+    - RDMA/siw: Fix pointer-to-int-cast warning in siw_rx_pbl()
+    - [armhf] dts: am335x-pocketbeagle: Fix mmc0 Write Protect
+    - [armhf] dts: Fix duovero smsc interrupt for suspend
+    - dma-direct: re-encrypt memory if dma_direct_alloc_pages() fails
+    - dma-direct: check return value when encrypting or decrypting memory
+    - [x86] resctrl: Fix a NULL vs IS_ERR() static checker warning in
+      rdt_cdp_peer_get()
+    - [x86] efi/x86: Setup stack correctly for efi_pe_entry
+    - regmap: Fix memory leak from regmap_register_patch
+    - devmap: Use bpf_map_area_alloc() for allocating hash buckets
+    - bpf: Don't return EINVAL from {get,set}sockopt when optlen > PAGE_SIZE
+    - rxrpc: Fix handling of rwind from an ACK packet
+    - RDMA/rvt: Fix potential memory leak caused by rvt_alloc_rq
+    - RDMA/efa: Set maximum pkeys device attribute
+    - RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532
+    - RDMA/cma: Protect bind_list and listen_list while finding matching cm id
+    - RDMA/core: Check that type_attrs is not NULL prior access
+    - [arm64,armhf] ASoC: rockchip: Fix a reference count leak.
+    - [s390x] qeth: fix error handling for isolation mode cmds
+    - RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
+    - [x86] Revert "KVM: VMX: Micro-optimize vmexit time when not exposing PMU"
+    - [x86] iommu/vt-d: Set U/S bit in first level page table by default
+    - [x86] iommu/vt-d: Enable PCI ACS for platform opt in hint
+    - [x86] iommu/vt-d: Update scalable mode paging structure coherency
+    - dma-direct: add missing set_memory_decrypted() for coherent mapping
+    - net: qed: fix left elements count calculation
+    - net: qed: fix async event callbacks unregistering
+    - net: qede: stop adding events on an already destroyed workqueue
+    - net: qed: fix NVMe login fails over VFs
+    - net: qed: fix excessive QM ILT lines consumption
+    - net: qede: fix PTP initialization on recovery
+    - net: qede: fix use-after-free on recovery and AER handling
+    - net: qed: reset ILT block sizes before recomputing to fix crashes
+    - cxgb4: move handling L2T ARP failures to caller
+    - cxgb4: move PTP lock and unlock to caller in Tx path
+    - [armhf] imx5: add missing put_device() call in imx_suspend_alloc_ocram()
+    - scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset()
+    - usb: gadget: udc: Potential Oops in error handling code
+    - nvme: don't protect ns mutation with ns->head->lock
+    - qed: add missing error test for DBG_STATUS_NO_MATCHING_FRAMING_MODE
+    - netfilter: ipset: fix unaligned atomic access
+    - [arm64] net: bcmgenet: use hardware padding of runt frames
+    - io_uring: fix hanging iopoll in case of -EAGAIN
+    - [riscv64] clk: sifive: allocate sufficient memory for struct __prci_data
+    - [armhf] i2c: fsi: Fix the port number field in status register
+    - wireguard: receive: account for napi_gro_receive never returning GRO_DROP
+    - [arm64] socionext: account for napi_gro_receive never returning GRO_DROP
+    - wil6210: account for napi_gro_receive never returning GRO_DROP
+    - i2c: core: check returned size of emulated smbus block read
+    - afs: Fix storage of cell names
+    - sched/deadline: Initialize ->dl_boosted
+    - sched/core: Fix PI boosting between RT and DEADLINE tasks
+    - sched/cfs: change initial value of runnable_avg
+    - ata/libata: Fix usage of page address by page_address in
+      ata_scsi_mode_select_xlat function
+    - drm/amd/display: Use kfree() to free rgb_user in
+      calculate_user_regamma_ramp()
+    - [riscv64] atomic: Fix sign extension for RV64I
+    - bcache: check and adjust logical block size for backing devices
+    - net: alx: fix race condition in alx_remove
+    - [arm64] pinctrl: qcom: spmi-gpio: fix warning about irq chip reusage
+    - [arm64,armhf] pinctrl: tegra: Use noirq suspend/resume callbacks
+    - [s390x] seccomp: pass syscall arguments via seccomp_data
+    - [s390x] ptrace: return -ENOSYS when invalid syscall is supplied
+    - [s390x] ptrace: pass invalid syscall numbers to tracing
+    - [s390x] ptrace: fix setting syscall number
+    - [s390x] vdso: Use $(LD) instead of $(CC) to link vDSO
+    - [s390x] vdso: fix vDSO clock_getres()
+    - [arm64] sve: Fix build failure when ARM64_SVE=y and SYSCTL=n
+    - kbuild: improve cc-option to clean up all temporary files
+    - recordmcount: support >64k sections
+    - kprobes: Suppress the suspicious RCU warning on kprobes
+    - blktrace: break out of blktrace setup on concurrent calls
+    - nvdimm/region: always show the 'align' attribute
+    - block: update hctx map when use multiple maps
+    - [riscv64] Don't allow write+exec only page mapping request in mmap
+    - syscalls: Fix offset type of ksys_ftruncate()
+    - ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table
+    - [x86] ALSA: hda/realtek - Add quirk for MSI GE63 laptop
+    - [x86] ALSA: hda/realtek: Add mute LED and micmute LED support for HP
+      systems
+    - ACPI: sysfs: Fix pm_profile_attr type
+    - ACPI: configfs: Disallow loading ACPI tables when locked down
+      (CVE-2020-15780)
+    - erofs: fix partially uninitialized misuse in z_erofs_onlinepage_fixup
+    - [x86] KVM: X86: Fix MSR range of APIC registers in X2APIC mode
+    - [x86] kvm: lapic: fix broken vcpu hotplug
+    - [x86] KVM: nVMX: Plumb L2 GPA through to PML emulation
+    - [x86] KVM: VMX: Stop context switching MSR_IA32_UMWAIT_CONTROL
+    - [x86] cpu: Use pinning mask for CR4 bits needing to be 0
+    - [x86] cpu: Reinitialize IA32_FEAT_CTL MSR on BSP during wakeup
+    - [amd64] asm/64: Align start of __clear_user() loop to 16-bytes
+    - btrfs: fix bytes_may_use underflow when running balance and scrub in
+      parallel
+    - btrfs: fix data block group relocation failure due to concurrent scrub
+    - btrfs: check if a log root exists before locking the log_mutex on unlink
+    - btrfs: fix hang on snapshot creation after RWF_NOWAIT write
+    - btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof
+    - btrfs: fix RWF_NOWAIT write not failling when we need to cow
+    - mm, compaction: make capture control handling safe wrt interrupts
+    - mm, slab: fix sign conversion problem in memcg_uncharge_slab()
+    - mm/slab: use memzero_explicit() in kzfree()
+    - ocfs2: avoid inode removal while nfsd is accessing it
+    - ocfs2: load global_inode_alloc
+    - ocfs2: fix value of OCFS2_INVALID_SLOT
+    - ocfs2: fix panic on nfs server over ocfs2
+    - mm: memcontrol: handle div0 crash race condition in memory.low
+    - mm/memcontrol.c: add missed css_put()
+    - mm/memory_hotplug.c: fix false softlockup during pfn range removal
+    - [arm64] perf: Report the PC value in REGS_ABI_32 mode
+    - tracing/boottime: Fix kprobe multiple events
+    - tracing: Fix event trigger to accept redundant spaces
+    - ring-buffer: Zero out time extend if it is nested and not absolute
+    - drm/amd/display: Enable output_bpc property on all outputs
+    - drm/amd: fix potential memleak in err branch
+    - drm/radeon: fix fb_div check in ni_init_smc_spll_table()
+    - drm/fb-helper: Fix vt restore
+    - drm/amdgpu: add fw release for sdma v5_0
+    - drm/amdgpu/display: Unlock mutex on error
+    - drm/panel-simple: fix connector type for newhaven_nhd_43_480272ef_atxl
+    - drm/panel-simple: fix connector type for LogicPD Type28 Display
+    - [armhf] dts: imx6ul-kontron: Move watchdog from Kontron i.MX6UL/ULL board
+      to SoM
+    - [armhf] dts: imx6ul-kontron: Change WDOG_ANY signal from push-pull to
+      open-drain
+    - [x86,arm64] Staging: rtl8723bs: prevent buffer overflow in
+      update_sta_support_rate()
+    - sunrpc: fixed rollback in rpc_gssd_dummy_populate()
+    - SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
+    - pNFS/flexfiles: Fix list corruption if the mirror count changes
+    - NFSv4 fix CLOSE not waiting for direct IO compeletion
+    - [x86] EDAC/amd64: Read back the scrub rate PCI register on F15h
+    - xprtrdma: Fix handling of RDMA_ERROR replies
+    - dm writecache: correct uncommitted_block when discarding uncommitted entry
+    - dm writecache: add cond_resched to loop in persistent_memory_claim()
+    - Revert "tty: hvc: Fix data abort due to race in hvc_open"
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.8
+    - exfat: Set the unused characters of FileName field to the value 0000h
+    - exfat: add missing brelse() calls on error paths
+    - exfat: call sync_filesystem for read-only remount
+    - exfat: move setting VOL_DIRTY over exfat_remove_entries()
+    - exfat: flush dirty metadata in fsync
+    - btrfs: block-group: refactor how we delete one block group item
+    - btrfs: fix race between block group removal and block group creation
+    - mm: fix swap cache node allocation mask
+    - drm/amd/display: Fix incorrectly pruned modes with deep color
+    - drm/amd/display: Fix ineffective setting of max bpc property
+    - seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds
+    - tipc: add test for Nagle algorithm effectiveness
+    - tipc: fix kernel WARNING in tipc_msg_append()
+    - usbnet: smsc95xx: Fix use-after-free after removal
+    - tipc: Fix NULL pointer dereference in __tipc_sendstream()
+    - [x86] drm/i915/gt: Mark timeline->cacheline as destroyed after rcu grace
+      period
+    - drm/amdgpu: disable ras query and iject during gpu reset
+    - drm/amdgpu: fix non-pointer dereference for non-RAS supported
+    - drm/amdgpu: fix kernel page fault issue by ras recovery on sGPU
+    - sched/debug: Make sd->flags sysctl read-only
+    - soc: ti: omap-prm: use atomic iopoll instead of sleeping one
+    - [powerpc*] kvm/book3s: Add helper to walk partition scoped linux page
+      table.
+    - [powerpc*] book3s64/kvm: Fix secondary page table walk warning during
+      migration
+    - mm/slub.c: fix corrupted freechain in deactivate_slab()
+    - mm/slub: fix stack overruns with SLUB_STATS
+    - mm, dump_page(): do not crash with invalid mapping pointer
+    - io_uring: fix {SQ,IO}POLL with unsupported opcodes
+    - rxrpc: Fix race between incoming ACK parser and retransmitter
+    - usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect
+      (CVE-2020-15393)
+    - tools lib traceevent: Add append() function helper for appending strings
+    - tools lib traceevent: Handle __attribute__((user)) in field names
+    - [s390x] debug: avoid kernel warning on too large number of pages
+    - io_uring: fix io_sq_thread no schedule when busy
+    - nvme-multipath: set bdi capabilities once
+    - nvme: fix possible deadlock when I/O is blocked
+    - nvme-multipath: fix deadlock between ana_work and scan_work
+    - nvme-multipath: fix deadlock due to head->lock
+    - nvme-multipath: fix bogus request queue reference put
+    - io_uring: fix current->mm NULL dereference on exit
+    - tpm: Fix TIS locality timeout problems
+    - crypto: af_alg - fix use-after-free in af_alg_accept() due to
+      bh_lock_sock()
+    - task_work: teach task_work_add() to do signal_wake_up()
+    - io_uring: use signal based task_work running
+    - [arm64] drm/msm/dpu: fix error return code in dpu_encoder_init
+    - btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO
+    - rxrpc: Fix afs large storage transmission performance drop
+    - RDMA/counter: Query a counter before release
+    - xfs: fix use-after-free on CIL context on shutdown
+    - hsr: remove hsr interface if all slaves are removed
+    - hsr: avoid to create proc file after unregister
+    - cxgb4: use unaligned conversion for fetching timestamp
+    - cxgb4: parse TC-U32 key values and masks natively
+    - cxgb4: fix endian conversions for L4 ports in filters
+    - cxgb4: use correct type for all-mask IP address comparison
+    - cxgb4: fix SGE queue dump destination buffer context
+    - security: Fix hook iteration and default value for inode_copy_up_xattr
+    - [x86] hwmon: (acpi_power_meter) Fix potential memory leak in
+      acpi_power_meter_add()
+    - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
+    - nfsd4: fix nfsdfs reference count loop
+    - nfsd: fix nfsdfs inode reference count leak
+    - [arm64,armhf] drm: sun4i: hdmi: Remove extra HPD polling
+    - virtio-blk: free vblk-vqs in error path of virtblk_probe()
+    - SMB3: Honor 'posix' flag for multiuser mounts
+    - nvme: fix identify error status silent ignore
+    - nvme: fix a crash in nvme_mpath_add_disk
+    - [sh4] i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665
+    - [x86,arm64] i2c: designware: platdrv: Set class based on DMI
+    - io_uring: fix regression with always ignoring signals in io_cqring_wait()
+    - Revert "ALSA: usb-audio: Improve frames size computation"
+    - padata: upgrade smp_mb__after_atomic to smp_mb in padata_do_serial
+    - SMB3: Honor 'seal' flag for multiuser mounts
+    - SMB3: Honor persistent/resilient handle flags for multiuser mounts
+    - SMB3: Honor lease disabling for multiuser mounts
+    - SMB3: Honor 'handletimeout' flag for multiuser mounts
+    - cifs: Fix the target file was deleted when rename failed.
+    - [x86] Drivers: hv: Change flag to write log level in panic msg to false
+    - hwmon: (pmbus) Fix page vs. register when accessing fans
+    - [x86] ACPI: fan: Fix Tiger Lake ACPI device ID
+    - gfs2: fix trans slab error when withdraw occurs inside log_flush
+    - [x86] split_lock: Don't write MSR_TEST_CTRL on CPUs that aren't
+      whitelisted
+    - [mips*] Add missing EHB in mtc0 -> mfc0 sequence for DSPen
+    - [x86] drm/i915: Include asm sources for {ivb, hsw}_clear_kernel.c
+    - drm/amd/powerplay: Fix NULL dereference in lock_bus() on Vega20 w/o RAS
+    - drm/amd/display: Only revalidate bandwidth on medium and fast updates
+    - drm/amdgpu: use %u rather than %d for sclk/mclk
+    - drm/amdgpu/atomfirmware: fix vram_info fetching for renoir
+    - dma-buf: Move dma_buf_release() from fops to dentry_ops
+    - [arm64,armhf] irqchip/gic: Atomically update affinity
+    - mm/hugetlb.c: fix pages per hugetlb calculation
+    - [arm*] mm/cma.c: use exact_nid true to fix possible per-numa cma leak
+    - dm zoned: assign max_io_len correctly
+    - efi: Make it possible to disable efivar_ssdt entirely
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.9
+    - [s389x] KVM: s390: reduce number of IO pins to 1
+    - regmap: fix alignment issue
+    - [x86] perf/x86/rapl: Move RAPL support to common x86 code
+    - [x86] perf/x86/rapl: Fix RAPL config variable bug
+    - [armhf] dts: omap4-droid4: Fix spi configuration and increase rate
+    - drm/ttm: Fix dma_fence refcnt leak in ttm_bo_vm_fault_reserved
+    - drm/ttm: Fix dma_fence refcnt leak when adding move fence
+    - [arm64,armhf] gpu: host1x: Clean up debugfs in error handling path
+    - [arm64,armhf] drm/tegra: hub: Do not enable orphaned window group
+    - [arm64,armhf] gpu: host1x: Detach driver on unregister
+    - [x86] ASoC: SOF: Intel: add PCI ID for CometLake-S
+    - ASoC: hdac_hda: fix memleak with regmap not freed on remove
+    - [x86] ALSA: hda: Intel: add missing PCI IDs for ICL-H, TGL-H and EKL
+    - spi: spidev: fix a race between spidev_release and spidev_remove
+    - spi: spidev: fix a potential use-after-free in spidev_release()
+    - [arm64,armhf] net: ethernet: mvneta: Fix Serdes configuration for SoCs
+      without comphy
+    - [arm64,armhf] net: ethernet: mvneta: Add 2500BaseX support for SoCs
+      without comphy
+    - ixgbe: protect ring accesses with READ- and WRITE_ONCE
+    - i40e: protect ring accesses with READ- and WRITE_ONCE
+    - ice: protect ring accesses with WRITE_ONCE
+    - [powerpc*] kvm/book3s64: Fix kernel crash with nested kvm & DEBUG_VIRTUAL
+    - xprtrdma: Prevent dereferencing r_xprt->rx_ep after it is freed
+    - [x86] iommu/vt-d: Don't apply gfx quirks to untrusted devices
+    - [x86] drm: panel-orientation-quirks: Add quirk for Asus T101HA panel
+    - [x86] drm: panel-orientation-quirks: Use generic orientation-data for
+      Acer S1003
+    - [s390x] kasan: fix early pgm check handler execution
+    - cifs: update ctime and mtime during truncate
+    - [armhf] imx6: add missing put_device() call in imx6q_suspend_init()
+    - scsi: qla2xxx: Fix MPI failure AEN (8200) handling
+    - scsi: mptscsih: Fix read sense data size
+    - [arm64,armhf] usb: dwc3: pci: Fix reference count leak in
+      dwc3_pci_resume_work
+    - [arm64] kpti: Add KRYO{3, 4}XX silver CPU cores to kpti safelist
+    - block: release bip in a right way in error path
+    - nvme-rdma: assign completion vector correctly
+    - [x86] entry: Increase entry_stack size to a full page
+    - [arm64] Add KRYO{3,4}XX silver CPU cores to SSB safelist
+    - nfs: Fix memory leak of export_path
+    - sched/core: Check cpus_mask, not cpus_ptr in __set_cpus_allowed_ptr(), to
+      fix mask corruption
+    - mtd: set master partition panic write flag
+    - [arm64,armhf] gpio: pca953x: Synchronize interrupt handler properly
+    - [arm64,armhf] gpio: pca953x: Fix direction setting when configure an IRQ
+    - [arm64] KVM: arm64: vgic-v4: Plug race between non-residency and v4.1
+      doorbell
+    - mac80211: Fix dropping broadcast packets in 802.11 encap
+    - bpf: Do not allow btf_ctx_access with __int128 types
+    - nl80211: don't return err unconditionally in nl80211_start_ap()
+    - nl80211: fix memory leak when parsing NL80211_ATTR_HE_BSS_COLOR
+    - bpf, sockmap: RCU splat with redirect and strparser error or TLS
+    - bpf, sockmap: RCU dereferenced psock may be used outside RCU block
+    - netfilter: ipset: call ip_set_free() instead of kfree()
+    - [arm64,armhf] net: mvneta: fix use of state->speed
+    - net: cxgb4: fix return error value in t4_prep_fw
+    - btrfs: fix reclaim_size counter leak after stealing from global reserve
+    - [arm64] drm/meson: viu: fix setting the OSD burst length in
+      VIU_OSD1_FIFO_CTRL_STAT
+    - IB/sa: Resolv use-after-free in ib_nl_make_request()
+    - netfilter: conntrack: refetch conntrack after nf_conntrack_update()
+    - perf report TUI: Fix segmentation fault in perf_evsel__hists_browse()
+    - [x86] perf intel-pt: Fix recording PEBS-via-PT with registers
+    - [x86] perf intel-pt: Fix PEBS sample for XMM registers
+    - smsc95xx: check return value of smsc95xx_reset
+    - smsc95xx: avoid memory leak in smsc95xx_bind
+    - [arm64] net: hns3: check reset pending after FLR prepare
+    - [arm64] net: hns3: fix for mishandle of asserting VF reset fail
+    - [arm64] net: hns3: add a missing uninit debugfs when unload driver
+    - [arm64] net: hns3: fix use-after-free when doing self test
+    - ALSA: compress: fix partial_drain completion state
+    - net: qed: fix buffer overflow on ethtool -d
+    - [powerpc*] 64s/exception: Fix 0x1500 interrupt handler crash
+    - RDMA/siw: Fix reporting vendor_part_id
+    - net: atlantic: fix ip dst and ipv6 address filters
+    - nbd: Fix memory leak in nbd_add_socket
+    - cxgb4: fix all-mask IP address comparison
+    - IB/mlx5: Fix 50G per lane indication
+    - qed: Populate nvm-file attributes while reading nvm config partition.
+    - net/mlx5: Fix eeprom support for SFP module
+    - net/mlx5e: Fix VXLAN configuration restore after function reload
+    - net/mlx5e: Fix CPU mapping after function reload to avoid aRFS RX crash
+    - net/mlx5e: Fix 50G per lane indication
+    - net/mlx5e: CT: Fix memory leak in cleanup
+    - bnxt_en: fix NULL dereference in case SR-IOV configuration fails
+    - [arm64,riscv64] net: macb: fix wakeup test in runtime suspend/resume
+      routines
+    - [arm64,riscv64] net: macb: mark device wake capable when "magic-packet"
+      property present
+    - [arm64,riscv64] net: macb: fix macb_get/set_wol() when moving to phylink
+    - [arm64,riscv64] net: macb: fix macb_suspend() by removing call to
+      netif_carrier_off()
+    - [arm64,riscv64] net: macb: fix call to pm_runtime in the suspend/resume
+      functions
+    - IB/hfi1: Do not destroy hfi1_wq when the device is shut down
+    - IB/hfi1: Do not destroy link_wq when the device is shut down
+    - [i386,alpha,hppa] ALSA: opl3: fix infoleak in opl3
+    - ALSA: hda - let hs_mic be picked ahead of hp_mic
+    - ALSA: usb-audio: add quirk for MacroSilicon MS2109
+    - ALSA: usb-audio: Add implicit feedback quirk for RTX6001
+    - [x86] ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk
+      subdevice id
+    - ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC
+    - [x86] ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC
+    - [x86] ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with
+      ALC269VC
+    - [arm64] KVM: arm64: Fix definition of PAGE_HYP_DEVICE
+    - [arm64] KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART
+    - [arm64] KVM: arm64: Annotate hyp NMI-related functions as __always_inline
+    - [x86] KVM: x86: bit 8 of non-leaf PDPEs is not reserved
+    - [x86] KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit
+      mode
+    - [x86] KVM: x86: Mark CR4.TSD as being possibly owned by the guest
+    - [arm64] KVM: arm64: Fix kvm_reset_vcpu() return code being incorrect with
+      SVE
+    - io_uring: fix memleak in __io_sqe_files_update()
+    - io_uring: account user memory freed when exit has been queued
+    - io_uring: fix memleak in io_sqe_files_register()
+    - io_uring: fix missing msg_name assignment
+    - kallsyms: Refactor kallsyms_show_value() to take cred
+    - module: Refactor section attr into bin attribute
+    - module: Do not expose section addresses to non-CAP_SYSLOG
+    - kprobes: Do not expose probe addresses to non-CAP_SYSLOG
+    - bpf: Check correct cred for CAP_SYSLOG in bpf_dump_raw_ok()
+    - Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb"
+      (Closes: #964153, #964480)
+    - btrfs: fix fatal extent_buffer readahead vs releasepage race
+    - btrfs: reset tree root pointer after error in init_tree_roots
+    - btrfs: discard: add missing put when grabbing block group from unused list
+    - btrfs: fix double put of block group with nocow
+    - drm/radeon: fix double free
+    - [x86] drm/i915/gt: Pin the rings before marking active
+    - [x86] drm/i915: Skip stale object handle for debugfs per-file-stats
+    - drm/amdgpu: don't do soft recovery if gpu_recovery=0
+    - drm/amdgpu: add TMR destory function for psp
+    - drm/amdgpu: asd function needs to be unloaded in suspend phase
+    - [x86] drm/i915: Drop vm.ref for duplicate vma on construction
+    - [x86] drm/i915: Also drop vm.ref along error paths for vma construction
+    - cifs: fix reference leak for tlink
+    - smb3: fix access denied on change notify request to some servers
+    - smb3: fix unneeded error message on change notify
+    - dm: use noio when sending kobject event
+    - [arm64] mmc: meson-gx: limit segments to 1 when dram-access-quirk is
+      needed
+    - [x86] pinctrl: baytrail: Fix pin being driven low for a while on
+      gpiod_get(..., GPIOD_OUT_HIGH)
+    - [s390x] setup: init jump labels before command line parsing
+    - [s390x] mm: fix huge pte soft dirty copying
+    - [arm64] Introduce a way to disable the 32bit vdso
+    - [arm64] arch_timer: Allow an workaround descriptor to disable compat vdso
+    - [arm64] arch_timer: Disable the compat vdso for cores affected by
+      ARM64_WORKAROUND_1418040
+    - blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight()
+    - dm writecache: reject asynchronous pmem devices
+    - perf scripts python: export-to-postgresql.py: Fix struct.pack() int
+      argument
+    - perf scripts python: exported-sql-viewer.py: Fix zero id in call graph
+      'Find' result
+    - perf scripts python: exported-sql-viewer.py: Fix zero id in call tree
+      'Find' result
+    - perf scripts python: exported-sql-viewer.py: Fix unexpanded 'Find' result
+    - perf scripts python: exported-sql-viewer.py: Fix time chart call tree
+    - [s390x] Change s390_kernel_write() return type to match memcpy()
+    - [s390x] maccess: add no DAT mode to kernel_write
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.10
+    - bridge: mcast: Fix MLD2 Report IPv6 payload length check
+    - genetlink: remove genl_bind
+    - ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg
+    - ipv6: fib6_select_path can not use out path for nexthop objects
+    - ipv6: Fix use of anycast address with loopback
+    - l2tp: remove skb_dst_set() from l2tp_xmit_skb()
+    - llc: make sure applications use ARPHRD_ETHER
+    - net: Added pointer check for dst->ops->neigh_lookup in
+      dst_neigh_lookup_skb
+    - net_sched: fix a memory leak in atm_tc_init()
+    - net: usb: qmi_wwan: add support for Quectel EG95 LTE modem
+    - sched: consistently handle layer3 header accesses in the presence of
+      VLANs
+    - tcp: fix SO_RCVLOWAT possible hangs under high mem pressure
+    - tcp: make sure listeners don't initialize congestion-control state
+    - tcp: md5: add missing memory barriers in tcp_md5_do_add()/
+      tcp_md5_hash_key()
+    - tcp: md5: do not send silly options in SYNCOOKIES
+    - vlan: consolidate VLAN parsing code and limit max parsing depth
+    - tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers
+    - tcp: md5: allow changing MD5 keys in all socket states
+    - cgroup: fix cgroup_sk_alloc() for sk_clone_lock()
+    - cgroup: Fix sock_cgroup_data on big-endian.
+    - ip: Fix SO_MARK in RST, ACK and ICMP packets
+    - genetlink: get rid of family->attrbuf
+    - net: ipv4: Fix wrong type conversion from hint to rt in
+      ip_route_use_hint()
+    - ethtool: fix genlmsg_put() failure handling in ethnl_default_dumpit()
+    - [arm64] drm/msm: fix potential memleak in error branch
+    - [arm64] drm/msm/dpu: allow initialization of encoder locks during encoder
+      init
+    - [armhf] drm/exynos: Properly propagate return value in
+      drm_iommu_attach_device()
+    - [armhf] drm/exynos: fix ref count leak in mic_pre_enable
+    - [x86] fpu: Reset MXCSR to default in kernel_fpu_begin()
+    - [armhf] thermal/drivers: imx: Fix missing of_node_put() at probe time
+    - [x86] ACPI: DPTF: Add battery participant for TigerLake
+    - blk-mq-debugfs: update blk_queue_flag_name[] accordingly for new flags
+    - [m68k] mm: fix node memblock init
+    - cifs: prevent truncation from long to int in wait_for_free_credits
+    - [arm64] alternatives: use subsections for replacement sequences
+    - tpm_tis: extra chip->ops check on error path in tpm_tis_core_init
+    - xen/xenbus: avoid large structs and arrays on the stack
+    - xen/xenbus: let xenbus_map_ring_valloc() return errno values only
+    - gfs2: eliminate GIF_ORDERED in favor of list_empty
+    - gfs2: freeze should work on read-only mounts
+    - gfs2: read-only mounts should grab the sd_freeze_gl glock
+    - gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE
+    - gfs2: The freeze glock should never be frozen
+    - [arm64] Add MIDR value for KRYO4XX gold CPU cores
+    - [arm64] Add KRYO4XX gold CPU cores to erratum list 1463225 and 1418040
+    - [arm64] Add KRYO4XX silver CPU cores to erratum list 1530923 and 1024718
+    - [i386,mips*/boston] i2c: eg20t: Load module automatically if ID matches
+    - [arm64] alternatives: don't patch up internal branches
+    - iio: core: add missing IIO_MOD_H2/ETHANOL string identifiers
+    - [armhf] iio: mma8452: Add missed iio_device_unregister() call in
+      mma8452_probe()
+    - [arm64] Add missing sentinel to erratum_1463225
+    - xen/xenbus: Fix a double free in xenbus_map_ring_pv()
+    - [arm64,armhf] net: ethernet: mvneta: Do not error out in non serdes modes
+    - [arm64,armhf] net: ethernet: mvneta: Add back interface mode validation
+    - scsi: qla2xxx: make 1-bit bit-fields unsigned int
+    - io_uring: fix recvmsg memory leak with buffer selection
+    - [arm64,armhf] phy: rockchip: Fix return value of inno_dsidphy_probe()
+    - [arm64,armhf] phy: sun4i-usb: fix dereference of pointer phy0 before it
+      is null checked
+    - [arm64] dts: meson: add missing gxl rng clock
+    - [arm64] dts: meson-gxl-s805x: reduce initial Mali450 core frequency
+    - [armhf] bus: ti-sysc: Fix wakeirq sleeping function called from invalid
+      context
+    - [armhf] bus: ti-sysc: Fix sleeping function called from invalid context
+      for RTC quirk
+    - [armhf] bus: ti-sysc: Do not disable on suspend for no-idle
+    - [x86] dmaengine: dw: Initialize channel before each transfer
+    - [armhf] spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock
+      rate
+    - [x86] staging: comedi: verify array index is correct before using it
+    - serial: core: Initialise spin lock before use in uart_configure_port()
+    - [arm64,armhf] clk: mvebu: ARMADA_AP_CPU_CLK needs to select
+      ARMADA_AP_CP_HELPER
+    - [armhf] clk: AST2600: Add mux for EMMC clock
+    - xprtrdma: Fix double-free in rpcrdma_ep_create()
+    - xprtrdma: Fix recursion into rpcrdma_xprt_disconnect()
+    - xprtrdma: Fix return code from rpcrdma_xprt_connect()
+    - xprtrdma: Fix handling of connect errors
+    - NFS: Fix interrupted slots by sending a solo SEQUENCE operation
+    - fuse: don't ignore errors from fuse_writepages_fill()
+    - xprtrdma: fix incorrect header size calculations
+    - [armhf] dts: socfpga: Align L2 cache-controller nodename with dtschema
+    - keys: asymmetric: fix error return code in software_key_query()
+    - nvme: explicitly update mpath disk capacity on revalidation
+    - regmap: debugfs: Don't sleep while atomic for fast_io regmaps
+    - copy_xstate_to_kernel: Fix typo which caused GDB regression
+    - apparmor: ensure that dfa state tables have entries
+    - RDMA/rxe: Set default vendor ID
+    - PCI/PM: Call .bridge_d3() hook only if non-NULL
+    - perf stat: Zero all the 'ena' and 'run' array slot stats for interval
+      mode
+    - RDMA/mlx5: Verify that QP is created with RQ or SQ
+    - [arm64] clk: qcom: Add missing msm8998 ufs_unipro_core_clk_src
+    - mtd: spi-nor: winbond: Fix 4-byte opcode support for w25q256
+    - mtd: spi-nor: spansion: fix writes on S25FS512S
+    - [armhf] mtd: rawnand: marvell: Fix the condition on a return code
+    - [armhf] mtd: rawnand: marvell: Use nand_cleanup() when the device is not
+      yet registered
+    - [armhf] mtd: rawnand: marvell: Fix probe error path
+    - mtd: rawnand: timings: Fix default tR_max and tCCS_min timings
+    - [arm64] clk: qcom: gcc: Add GPU and NPU clocks for SM8150
+    - [arm64] clk: qcom: gcc: Add missing UFS clocks for SM8150
+    - [arm64] clk: qcom: gcc: Add support for a new frequency for SC7180
+    - HID: logitech-hidpp: avoid repeated "multiplier = " log messages
+    - HID: magicmouse: do not set up autorepeat
+    - HID: quirks: Always poll Obins Anne Pro 2 keyboard
+    - HID: quirks: Ignore Simply Automated UPB PIM
+    - ALSA: line6: Perform sanity check for each URB creation
+    - ALSA: line6: Sync the pending work cancel at disconnection
+    - ALSA: usb-audio: Fix race against the error recovery URB submission
+    - [x86] ALSA: hda/realtek - change to suitable link model for ASUS platform
+    - [x86] ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus
+      G14(G401) series with ALC289
+    - [x86] ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31
+      with ALC256
+    - [x86] ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534
+    - [x86] ALSA: hda/realtek - Enable Speaker for ASUS UX563
+    - [x86] thunderbolt: Fix path indices used in USB3 tunnel discovery
+    - [arm64,armhf] usb: dwc2: Fix shutdown callback in platform
+    - [arm64,armh] usb: chipidea: core: add wakeup support for extcon
+    - usb: gadget: function: fix missing spinlock in f_uac1_legacy
+    - USB: serial: iuu_phoenix: fix memory corruption
+    - USB: serial: cypress_m8: enable Simply Automated UPB PIM
+    - USB: serial: ch341: add new Product ID for CH340
+    - USB: serial: option: add GosunCn GM500 series
+    - USB: serial: option: add Quectel EG95 LTE modem
+    - [x86] virt: vbox: Fix VBGL_IOCTL_VMMDEV_REQUEST_BIG and _LOG req numbers
+      to match upstream
+    - [x86] virt: vbox: Fix guest capabilities mask check
+    - [arm64] Revert "tty: xilinx_uartps: Fix missing id assignment to the
+      console"
+    - virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc
+      serial
+    - [sh4] serial: sh-sci: Initialize spinlock for uart console
+    - Revert "serial: core: Refactor uart_unlock_and_check_sysrq()"
+    - serial: core: fix sysrq overhead regression
+    - ovl: fix regression with re-formatted lower squashfs
+    - ovl: inode reference leak in ovl_is_inuse true case.
+    - ovl: relax WARN_ON() when decoding lower directory file handle
+    - ovl: fix unneeded call to ovl_change_flags()
+    - fuse: ignore 'data' argument of mount(..., MS_REMOUNT)
+    - fuse: use ->reconfigure() instead of ->remount_fs()
+    - fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS
+    - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()"
+      (CVE-2020-10781)
+    - [x86] mei: bus: don't clean driver pointer
+    - [arm64] Revert "Input: elants_i2c - report resolution information for
+      touch major"
+    - [x86] Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list
+    - [x86] Input: elan_i2c - add more hardware ID for Lenovo laptops
+    - scsi: megaraid_sas: Remove undefined ENABLE_IRQ_POLL macro
+    - timer: Prevent base->clk from moving backward
+    - timer: Fix wheel index calculation on last level
+    - [riscv64] use 16KB kernel stack on 64-bit
+    - hwmon: (emc2103) fix unable to change fan pwm1_enable attribute
+    - hwmon: (drivetemp) Avoid SCT usage on Toshiba DT01ACA family drives
+    - [powerpc*] book3s64/pkeys: Fix pkey_access_permitted() for execute
+      disable pkey
+    - [powerpc*] pseries/svm: Fix incorrect check for shared_lppaca_size
+    - [x86] intel_th: pci: Add Jasper Lake CPU support
+    - [x86] intel_th: pci: Add Tiger Lake PCH-H support
+    - [x86] intel_th: pci: Add Emmitsburg PCH support
+    - [x86] intel_th: Fix a NULL dereference when hub driver is not loaded
+    - opp: Increase parsed_static_opps in _of_add_opp_table_v1()
+    - dmabuf: use spinlock to access dmabuf->name
+    - [x86] thermal: int3403_thermal: Downgrade error message
+    - [armhf] dts: imx6qdl-gw551x: fix audio SSI
+    - [arm64] ptrace: Override SPSR.SS when single-stepping is enabled
+    - [arm64] ptrace: Consistently use pseudo-singlestep exceptions
+    - [arm64] compat: Ensure upper 32 bits of x0 are zero on syscall return
+    - sched: Fix unreliable rseq cpu_id for new tasks
+    - sched/fair: handle case of task_h_load() returning 0
+    - [x86] ioperm: Fix io bitmap invalidation on Xen PV
+    - genirq/affinity: Handle affinity setting on inactive interrupts correctly
+    - [x86] drm/vmwgfx: fix update of display surface when resolution changes
+    - drm/amdgpu/powerplay: Modify SMC message name for setting power profile
+      mode
+    - drm/amdgpu/sdma5: fix wptr overwritten in ->get_wptr()
+    - drm/amd/display: handle failed allocation during stream construction
+    - drm/amd/display: OLED panel backlight adjust not work with external
+      display connected
+    - drm/amdgpu/display: create fake mst encoders ahead of time (v4)
+    - [x86] drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.
+    - [x86] drm/i915/gt: Ignore irq enabling on the virtual engines
+    - [x86] drm/i915/gt: Only swap to a random sibling once upon creation
+    - libceph: don't omit recovery_deletes in target_copy()
+    - rxrpc: Fix trace string
+    - [x86] iommu/vt-d: Make Intel SVM code 64-bit only
+    - mm/memory.c: properly pte_offset_map_lock/unlock in vm_insert_pages()
+    - [x86] drm/i915/gvt: Fix two CFL MMIO handling caused by regression.
+    - [arm64,armhf] gpio: pca953x: disable regmap locking for automatic address
+      incrementing
+    - bpf: sockmap: Check value of unused args to BPF_PROG_ATTACH
+    - bpf: sockmap: Require attach_bpf_fd when detaching a program
+    - [x86] drm/i915/perf: Use GTT when saving/restoring engine GPR
+
+  [ Aurelien Jarno ]
+  * Enable perf on riscv64.
+
+  [ Salvatore Bonaccorso ]
+  * drivers/net/ethernet/intel: Enable IGC as module (Closes: #965931)
+  * [x86] ioperm: Fix io bitmap invalidation on Xen PV (CVE-2020-15852,
+    XSA-329)
+  * certs: Rotate to use the Debian Secure Boot Signer 2020 certificate
+  * perf cs-etm: Move definition of 'traceid_list' global variable from header
+    file (Closes: #957491)
+  * usbip: tools: fix build error for multiple definition
+
+  [ Ben Hutchings ]
+  * libtraceevent: Fix build with binutils 2.35
+  * Bump ABI to 2
+
+  [ John Paul Adrian Glaubitz ]
+  * [sh4] Add patch to implement __get_user_u64()
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 26 Jul 2020 08:40:40 +0200
+
+linux (5.7.6-1) unstable; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.7
+    - [x86] syscalls: Revert "x86/syscalls: Make __X32_SYSCALL_BIT be unsigned
+      long" (Closes: #954294)
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.1
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.2
+    - vt: keyboard: avoid signed integer overflow in k_ascii (CVE-2020-13974)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3
+    - [x86] speculation: Prevent rogue cross-process SSBD shutdown
+      (CVE-2020-10766)
+    - [x86] speculation: Avoid force-disabling IBPB based on STIBP and
+      enhanced IBRS. (CVE-2020-10767)
+    - [x86] speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect
+      branches. (CVE-2020-10768)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.4
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.5
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.6
+
+  [ Ben Hutchings ]
+  * fs: Enable EXFAT_FS as module (Closes: #959781)
+  * Fix conversion of meta-package doc directories to symlinks
+    (Closes: #942861)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable DRM_ANALOGIX_ANX6345 as a module.
+  * [arm64] Add analogix-anx6345, pwm-sun4i, sun4i-drm and sun8i-mixer to
+    fb-modules udeb.
+
+  [ Helge Deller ]
+  * [hppa] Don't run dh_strip on vmlinuz (Closes: #961299)
+
+  [ YunQiang Su ]
+  * [mips/loongson-3] Enable SERIAL_OF_PLATFORM and OF (Closes: 961328)
+
+  [ Aurelien Jarno ]
+  * Enable CONFIG_NVME_HWMON (Closes: #961823)
+
+  [ Romain Perier ]
+  * [arm64] Enable PCIE_BRCMSTB
+  * [arm64] Enable BCM2711_THERMAL
+
+  [ Salvatore Bonaccorso ]
+  * nfsd: apply umask on fs without ACL support (Closes: #962254)
+  * [rt] Add new signing key for Tom Zanussi
+  * Set ABI to 1
+  * [arm64] Remove explicit setting of CONFIG_HNS
+  * debian/config: Clean up with the help of kconfigeditor2
+
+  [ Gianfranco Costamagna ]
+  * [x86] Enable VBOXSF_FS as a module (Closes: #961516)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 24 Jun 2020 20:56:57 +0200
+
+linux (5.7~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Romain Perier ]
+  * Enable support for fsverity
+
+  [ Ben Hutchings ]
+  * [rt] Disable until it is updated for 5.5 or later
+  * lockdown: Update Secure Boot support patches for 5.7
+  * [amd64] Update "x86: Make x32 syscall support conditional ..." for 5.7
+  * Update "tools/perf: pmu-events: Fix reproducibility" for 5.7
+
+ -- Ben Hutchings <benh@debian.org>  Sun, 10 May 2020 23:42:53 +0100
+
+linux (5.6.14-2) unstable; urgency=medium
+
+  [ Vagrant Cascadian ]
+  * [arm64] Add pwm-sun4i to fb-modules udeb.
+
+  [ Salvatore Bonaccorso ]
+  * kernel/relay.c: handle alloc_percpu returning NULL in relay_open
+    (CVE-2019-19462)
+  * fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
+    (CVE-2020-10732)
+  * mm: Fix mremap not considering huge pmd devmap (CVE-2020-10757)
+
+  [ Ben Hutchings ]
+  * [x86] Add support for mitigation of Special Register Buffer Data Sampling
+    (SRBDS) (CVE-2020-0543):
+    - x86/cpu: Add 'table' argument to cpu_matches()
+    - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS)
+      mitigation
+    - x86/speculation: Add SRBDS vulnerability and mitigation documentation
+    - x86/speculation: Add Ivy Bridge to affected list
+  * [x86] speculation: Do not match steppings, to avoid an ABI change
+
+ -- Ben Hutchings <benh@debian.org>  Tue, 09 Jun 2020 18:50:00 +0100
+
+linux (5.6.14-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8
+    - mm: check that mm is still valid in madvise()
+    - watchdog: reset last_hw_keepalive time at start
+    - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login
+    - xfs: correctly acount for reclaimable slabs
+    - scsi: lpfc: Fix crash after handling a pci error
+    - scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG
+    - scsi: libfc: If PRLI rejected, move rport to PLOGI state
+    - ceph: return ceph_mdsc_do_request() errors from __get_parent()
+    - ceph: don't skip updating wanted caps when cap is stale
+    - [armhf] pwm: imx27: Fix clock handling in pwm_imx27_apply()
+    - nvme-tcp: fix possible crash in write_zeroes processing
+    - scsi: iscsi: Report unbind session event when the target has been
+      removed
+    - [x86] ASoC: Intel: atom: Take the drv->lock mutex before calling
+      sst_send_slot_map()
+    - nvme: fix deadlock caused by ANA update wrong locking
+    - drm/amd/display: Update stream adjust in dc_stream_adjust_vmin_vmax
+    - dma-direct: fix data truncation in dma_direct_get_required_mask()
+    - kernel/gcov/fs.c: gcov_seq_next() should increase position index
+    - ipc/util.c: sysvipc_find_ipc() should increase position index
+    - block: fix busy device checking in blk_drop_partitions
+    - [s390x] cio: generate delayed uevent for vfio-ccw subchannels
+    - [s390x] cio: avoid duplicated 'ADD' uevents
+    - loop: Better discard support for block devices
+    - [powerpc*] Revert "powerpc/64: irq_work avoid interrupt when called with
+      hardware irqs enabled"
+    - [powerpc*] pseries: Fix MCE handling on pseries
+    - nvme: fix compat address handling in several ioctls
+    - pwm: renesas-tpu: Fix late Runtime PM enablement
+    - [armel, armhf, arm64] pwm: bcm2835: Dynamically allocate base
+    - scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics
+    - scsi: lpfc: Fix lockdep error - register non-static key
+    - perf/core: Disable page faults when getting phys address
+    - drm/amd/display: Calculate scaling ratios on every medium/full update
+    - ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN MPWIN895CL tablet
+    - ALSA: usb-audio: Add Pioneer DJ DJM-250MK2 quirk
+    - xhci: Ensure link state is U3 after setting USB_SS_PORT_LS_U3
+    - xhci: Wait until link state trainsits to U0 after setting
+      USB_SS_PORT_LS_U0
+    - xhci: Finetune host initiated USB3 rootport link suspend and resume
+    - block: fix busy device checking in blk_drop_partitions again
+    - cxgb4: fix adapter crash due to wrong MC size
+    - cxgb4: fix large delays in PTP synchronization
+    - ipv4: Update fib_select_default to handle nexthop objects
+    - ipv6: fix restrict IPV6_ADDRFORM operation
+    - macsec: avoid to set wrong mtu
+    - macvlan: fix null dereference in macvlan_device_event()
+    - mlxsw: Fix some IS_ERR() vs NULL bugs
+    - [arm64] net: bcmgenet: correct per TX/RX ring statistics
+    - net/mlx4_en: avoid indirect call in TX completion
+    - net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
+    - net: openvswitch: ovs_ct_exit to be done under ovs_lock
+    - [armhf, arm64] net: stmmac: dwmac-meson8b: Add missing boundary to RGMII
+      TX clock array
+    - net/x25: Fix x25_neigh refcnt leak when receiving frame
+    - sched: etf: do not assume all sockets are full blown
+    - tcp: cache line align MAX_TCP_HEADER
+    - team: fix hang in team_mode_get()
+    - tipc: Fix potential tipc_aead refcnt leak in tipc_crypto_rcv
+    - tipc: Fix potential tipc_node refcnt leak in tipc_rcv
+    - vrf: Fix IPv6 with qdisc and xfrm
+    - net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled
+    - net: dsa: b53: Fix valid setting for MDB entries
+    - net: dsa: b53: Fix ARL register definitions
+    - net: dsa: b53: Rework ARL bin logic
+    - net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL
+    - vxlan: use the correct nlattr array in NL_SET_ERR_MSG_ATTR
+    - geneve: use the correct nlattr array in NL_SET_ERR_MSG_ATTR
+    - xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
+    - vrf: Check skb for XFRM_TRANSFORMED flag
+    - net: ethernet: ixp4xx: Add error handling in ixp4xx_eth_probe()
+    - KEYS: Avoid false positive ENOMEM error on key read
+    - ALSA: hda: Remove ASUS ROG Zenith from the blacklist
+    - ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos
+    - ALSA: usb-audio: Add connector notifier delegation
+    - mac80211: populate debugfs only after cfg80211 init
+    - libbpf: Only check mode flags in get_xdp_id
+    - iio: core: remove extra semi-colon from devm_iio_device_register() macro
+    - iio: imu: st_lsm6dsx: flush hw FIFO before resetting the device
+    - iio: st_sensors: rely on odr mask to know if odr can be set
+    - iio: adc: stm32-adc: fix sleep in atomic context
+    - iio: adc: ti-ads8344: properly byte swap value
+    - USB: sisusbvga: Change port variable from signed to unsigned
+    - USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair
+      K70 RGB RAPIDFIRE
+    - USB: early: Handle AMD's spec-compliant identifiers, too
+    - USB: core: Fix free-while-in-use bug in the USB S-Glibrary
+      (CVE-2020-12464)
+    - USB: hub: Fix handling of connect changes during sleep
+    - USB: hub: Revert commit bd0e6c9614b9 ("usb: hub: try old enumeration
+      scheme first for high speed devices")
+    - tty: serial: owl: add "much needed" clk_prepare_enable()
+    - vmalloc: fix remap_vmalloc_range() bounds checks
+    - staging: gasket: Fix incongruency in handling of sysfs entries creation
+    - coredump: fix null pointer dereference on coredump
+    - mm/hugetlb: fix a addressing exception caused by huge_pte_offset
+    - mm/ksm: fix NULL pointer dereference when KSM zero page is enabled
+    - ALSA: usx2y: Fix potential NULL dereference
+    - ALSA: hda/realtek - Fix unexpected init_amp override
+    - ALSA: hda/realtek - Add new codec supported for ALC245
+    - ALSA: hda/hdmi: Add module option to disable audio component binding
+    - ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
+    - ALSA: usb-audio: Filter out unsupported sample rates on Focusrite
+      devices
+    - tpm/tpm_tis: Free IRQ if probing fails
+    - tpm: fix wrong return value in tpm_pcr_extend
+    - tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send()
+    - [s390x] KVM: Return last valid slot if approx index is out-of-bounds
+    - KVM: Check validity of resolved slot when searching memslots
+    - [x86] KVM: VMX: Enable machine check support for 32bit targets
+    - tty: hvc: fix buffer overflow during hvc_alloc().
+    - tty: rocket, avoid OOB access
+    - usb-storage: Add unusual_devs entry for JMicron JMS566
+    - signal: Avoid corrupting si_pid and si_uid in do_notify_parent
+    - drm/dp_mst: Zero assigned PBN when releasing VCPI slots
+    - audit: check the length of userspace generated audit records
+    - ASoC: dapm: fixup dapm kcontrol widget
+    - SUNRPC: Fix backchannel RPC soft lockups
+    - iwlwifi: pcie: actually release queue memory in TVQM
+    - iwlwifi: mvm: beacon statistics shouldn't go backwards
+    - iwlwifi: pcie: indicate correct RB size to device
+    - iwlwifi: mvm: limit maximum queue appropriately
+    - iwlwifi: mvm: Do not declare support for ACK Enabled Aggregation
+    - iwlwifi: mvm: fix inactive TID removal return value usage
+    - iwlwifi: fix WGDS check when WRDS is disabled
+    - cifs: fix uninitialised lease_key in open_shroot()
+    - [armhf] imx: provide v7_cpu_resume() only on ARM_CPU_SUSPEND=y
+    - [powerpc*] 8xx: Fix STRICT_KERNEL_RWX startup test failure
+    - [powerpc*] setup_64: Set cache-line-size based on cache-block-size
+    - [x86] staging: comedi: dt2815: fix writing hi byte of analog output
+    - [x86] staging: comedi: Fix comedi_device refcnt leak in comedi_open
+    - vt: don't hardcode the mem allocation upper bound
+    - vt: don't use kmalloc() for the unicode screen buffer
+    - [x86] staging: vt6656: Don't set RCR_MULTICAST or RCR_BROADCAST by
+      default.
+    - [x86] staging: vt6656: Fix calling conditions of vnt_set_bss_mode
+    - [x86] staging: vt6656: Fix drivers TBTT timing counter.
+    - [x86] staging: vt6656: Fix pairwise key entry save.
+    - [x86] staging: vt6656: Power save stop wake_up_count wrap around.
+    - [x86] mei: me: fix irq number stored in hw struct
+    - cdc-acm: close race betrween suspend() and acm_softint
+    - cdc-acm: introduce a cool down
+    - UAS: no use logging any details in case of ENODEV
+    - UAS: fix deadlock in error handling and PM flushing work
+    - fpga: dfl: pci: fix return value of cci_pci_sriov_configure
+    - [armhf, arm64] usb: dwc3: gadget: Fix request completion check
+    - usb: f_fs: Clear OS Extended descriptor counts to zero in
+      ffs_data_reset()
+    - [x86] usb: typec: tcpm: Ignore CC and vbus changes in PORT_RESET change
+    - [x86] usb: typec: altmode: Fix typec_altmode_get_partner sometimes
+      returning an invalid pointer
+    - xhci: Fix handling halted endpoint even if endpoint ring appears empty
+    - xhci: prevent bus suspend if a roothub port detected a over-current
+      condition
+    - xhci: Don't clear hub TT buffer on ep0 protocol stall
+    - serial: sh-sci: Make sure status register SCxSR is read in correct
+      sequence
+    - Revert "serial: uartps: Fix uartps_major handling"
+    - Revert "serial: uartps: Use the same dynamic major number for all ports"
+    - Revert "serial: uartps: Fix error path when alloc failed"
+    - Revert "serial: uartps: Do not allow use aliases >= MAX_UART_INSTANCES"
+    - Revert "serial: uartps: Change uart ID port allocation"
+    - Revert "serial: uartps: Move Port ID to device data structure"
+    - Revert "serial: uartps: Register own uart console and driver structures"
+    - [x86] drm/i915/gt: Update PMINTRMSK holding fw
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.9
+    - ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans()
+    - printk: queue wake_up_klogd irq_work only if per-CPU areas are ready
+    - [armhf] ASoC: stm32: sai: fix sai probe
+    - [armhf, arm64] usb: dwc3: gadget: Do link recovery for SS and SSP
+    - [armel, armhf] ARM: dts: bcm283x: Add cells encoding format to firmware
+      bus
+    - usb: gadget: udc: bdc: Remove unnecessary NULL checks in
+      bdc_req_complete
+    - usb: gadget: udc: atmel: Fix vbus disconnect handling
+    - afs: Make record checking use TASK_UNINTERRUPTIBLE when appropriate
+    - afs: Fix to actually set AFS_SERVER_FL_HAVE_EPOCH
+    - iio:ad7797: Use correct attribute_group
+    - iio: imu: st_lsm6dsx: fix read misalignment on untagged FIFO
+    - iio: imu: st_lsm6dsx: specify slave odr in slv_odr
+    - propagate_one(): mnt_set_mountpoint() needs mount_lock
+    - counter: 104-quad-8: Add lock guards - generic interface
+    - [s390x] ftrace: fix potential crashes when switching tracers
+    - ASoC: q6dsp6: q6afe-dai: add missing channels to MI2S DAIs
+    - iwlwifi: actually check allocated conf_tlv pointer
+    - ASoC: tas571x: disable regulators on failed probe
+    - [armhf, arm64] ASoC: meson: axg-card: fix codec-to-codec link setup
+    - ASoC: wm8960: Fix wrong clock after suspend & resume
+    - nfsd: memory corruption in nfsd4_lock()
+    - [armhf] dts: OMAP3: disable RNG on N950/N9
+    - bpf: Forbid XADD on spilled pointers for unprivileged users
+    - brcmfmac: add stub for monitor interface xmit
+    - i2c: altera: use proper variable to hold errno
+    - clk: asm9260: fix __clk_hw_register_fixed_rate_with_accuracy typo
+    - rtw88: avoid unused function warnings
+    - hwmon: (drivetemp) Return -ENODATA for invalid temperatures
+    - rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket
+    - netfilter: nf_tables: reintroduce the NFT_SET_CONCAT flag
+    - [x86] efi: Don't remap text<->rodata gap read-only for mixed mode
+    - net/cxgb4: Check the return from t4_query_params properly
+    - tipc: fix incorrect increasing of link window
+    - xfs: acquire superblock freeze protection on eofblocks scans
+    - svcrdma: Fix trace point use-after-free race
+    - svcrdma: Fix leak of svc_rdma_recv_ctxt objects
+    - [armhf, arm64] net/mlx5e: Don't trigger IRQ multiple times on XSK wakeup
+      to avoid WQ overruns
+    - [armhf, arm64] net/mlx5e: Get the latest values from counters in
+      switchdev mode
+    - PCI: Avoid ASMedia XHCI USB PME# from D0 defect
+    - PCI: Add Zhaoxin Vendor ID
+    - PCI: Add ACS quirk for Zhaoxin multi-function devices
+    - PCI: Add ACS quirk for Zhaoxin Root/Downstream Ports
+    - PCI: Move Apex Edge TPU class quirk to fix BAR assignment
+    - ARM: dts: bcm283x: Disable dsi0 node
+    - cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled
+    - [s390x] pci: do not set affinity for floating irqs
+    - remoteproc: mtk_scp: use dma_addr_t for DMA API
+    - net/mlx5: Fix failing fw tracer allocation on s390
+    - sched/core: Fix reset-on-fork from RT with uclamp
+    - perf/core: fix parent pid/tid in task exit events
+    - netfilter: nat: fix error handling upon registering inet hook
+    - PM: sleep: core: Switch back to async_schedule_dev()
+    - blk-iocost: Fix error on iocost_ioc_vrate_adj
+    - bpf: Fix handling of XADD on BTF memory
+    - [x86] bpf: Fix encoding for lower 8-bit registers in BPF_STX BPF_B
+    - [x86] bpf: x32: Fix incorrect encoding in BPF_LDX zero-extension
+    - [x86] bpf: x32: Fix clobbering of dst for BPF_JSET
+    - [x86] bpf, x32: Fix logic error in BPF_LDX zero-extension
+    - bpf: Propagate expected_attach_type when verifying freplace programs
+    - mm: shmem: disable interrupt when acquiring info->lock in
+      userfaultfd_copy path
+    - xfs: clear PF_MEMALLOC before exiting xfsaild thread
+    - libbpf: Initialize *nl_pid so gcc 10 is happy
+    - [armhf] net: fec: set GPR bit on suspend by DT configuration.
+    - [x86] hyperv: report value of misc_features
+    - signal: check sig before setting info in kill_pid_usb_asyncio
+    - afs: Fix length of dump of bad YFSFetchStatus record
+    - xfs: fix partially uninitialized structure in xfs_reflink_remap_extent
+    - ALSA: hda: Release resources at error in delayed probe
+    - ALSA: hda: Keep the controller initialization even if no codecs found
+    - ALSA: hda: Explicitly permit using autosuspend if runtime PM is
+      supported
+    - drm/amdgpu: fix wrong vram lost counter increment V2
+    - scsi: target: fix PR IN / READ FULL STATUS for FC
+    - scsi: target: tcmu: reset_ring should reset TCMU_DEV_BIT_BROKEN
+    - objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings
+    - objtool: Support Clang non-section symbols in ORC dump
+    - xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
+    - ALSA: hda: call runtime_allow() for all hda controllers
+    - net: stmmac: socfpga: Allow all RGMII modes
+    - mac80211: fix channel switch trigger from unknown mesh peer
+    - sched/isolation: Allow "isolcpus=" to skip unknown sub-parameters
+    - sched/vtime: Work around an unitialized variable warning
+    - [arm64] Delete the space separator in __emit_inst
+    - ext4: use matching invalidatepage in ext4_writepage
+    - ext4: increase wait time needed before reuse of deleted inode numbers
+    - ext4: convert BUG_ON's to WARN_ON's in mballoc.c
+    - irqchip/gic-v4.1: Add support for VPENDBASER's Dirty+Valid signaling
+    - blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget
+    - irqchip/meson-gpio: Fix HARDIRQ-safe -> HARDIRQ-unsafe lock order
+    - hwmon: (jc42) Fix name to have no illegal characters
+    - sfc: fix XDP-redirect in this driver
+    - taprio: do not use BIT() in TCA_TAPRIO_ATTR_FLAG_* definitions
+    - tipc: Add a missing case of TIPC_DIRECT_MSG type
+    - qed: Fix race condition between scheduling and destroying the slowpath
+      workqueue
+    - Crypto: chelsio - Fixes a hang issue during driver registration
+    - net: use indirect call wrappers for skb_copy_datagram_iter()
+    - qed: Fix use after free in qed_chain_free
+    - ext4: check for non-zero journal inum in ext4_calculate_overhead
+    - ASoC: soc-pcm: fix regression in soc_new_pcm()
+    - ASoC: soc-core: disable route checks for legacy devices
+    - [armhf] ASoC: stm32: spdifrx: fix regmap status check
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.10
+    - Revert "ASoC: meson: axg-card: fix codec-to-codec link setup"
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.11
+    - drm/scheduler: fix drm_sched_get_cleanup_job
+    - dma-buf: Fix SET_NAME ioctl uapi
+    - drm/amdgpu: invalidate L2 before SDMA IBs (v2)
+    - drm/edid: Fix off-by-one in DispID DTD pixel clock
+    - drm/amd/display: Fix green screen issue after suspend
+    - [x86] drm/i915/gem: Hold obj->vma.lock over for_each_ggtt_vma()
+    - [x86] drm/i915/gt: Check cacheline is valid before acquiring
+    - drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
+    - drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
+    - drm/qxl: qxl_release use after free
+    - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION
+    - btrfs: fix transaction leak in btrfs_recover_relocation
+    - btrfs: fix block group leak when removing fails
+    - btrfs: fix partial loss of prealloc extent past i_size after fsync
+    - btrfs: transaction: Avoid deadlock due to bad initialization timing of
+      fs_info::journal_info
+    - mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout
+      loop
+    - [arm64] mmc: sdhci-xenon: fix annoying 1.8V regulator warning
+    - mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers
+    - [arm64] mmc: sdhci-msm: Enable host capabilities pertains to R1b
+      response
+    - [armhf] mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY
+    - [armhf] mmc: meson-mx-sdio: remove the broken ->card_busy() op
+    - ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter
+    - ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID
+    - ALSA: hda/hdmi: fix without unlocked before return
+    - ALSA: line6: Fix POD HD500 audio playback
+    - ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
+    - [x86] i2c: amd-mp2-pci: Fix Oops in amd_mp2_pci_init() error handling
+    - [x86] hyperv: Suspend/resume the VP assist page for hibernation
+    - [x86] Drivers: hv: vmbus: Fix Suspend-to-Idle for Generation-2 VM
+    - dlmfs_file_write(): fix the bogosity in handling non-zero *ppos
+    - selinux: properly handle multiple messages in selinux_netlink_send()
+    - [amd64] IB/rdmavt: Always return ERR_PTR from rvt_create_mmap_info()
+    - PM: ACPI: Output correct message on target power state
+    - PM: hibernate: Freeze kernel threads in software_resume()
+    - dm writecache: fix data corruption when reloading the target
+    - dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath
+    - block: remove the bd_openers checks in blk_drop_partitions
+    - scsi: qla2xxx: set UNLOADING before waiting for session deletion
+    - scsi: qla2xxx: check UNLOADING before posting async work
+    - RDMA/mlx5: Set GRH fields in query QP on RoCE
+    - RDMA/uverbs: Fix a race with disassociate and exit_mmap()
+    - RDMA/mlx4: Initialize ib_spec on the stack
+    - RDMA/core: Prevent mixed use of FDs between shared ufiles
+    - RDMA/core: Fix overwriting of uobj in case of error
+    - RDMA/core: Fix race between destroy and release FD object
+    - RDMA/cm: Fix ordering of xa_alloc_cyclic() in ib_create_cm_id()
+    - RDMA/cm: Fix an error check in cm_alloc_id_priv()
+    - [arm64] dmaengine: hisilicon: Fix build error without PCI_MSI
+    - [x86,arm64] vfio: avoid possible overflow in vfio_iommu_type1_pin_pages
+    - [x86,arm64] vfio/type1: Fix VA->PA translation for PFNMAP VMAs in
+      vaddr_get_pfn()
+    - [arm64] iommu/qcom: Fix local_base status check
+    - dmaengine: fix channel index enumeration
+    - scsi: target/iblock: fix WRITE SAME zeroing
+    - iommu: Properly export iommu_group_get_for_dev()
+    - [amd64] iommu/vt-d: Use right Kconfig option name
+    - [amd64] iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled
+      system
+    - [armhf] i2c: aspeed: Avoid i2c interrupt status clear race condition.
+    - [i386] ALSA: opti9xx: shut up gcc-10 range warning
+    - Fix use after free in get_tree_bdev()
+    - nvme: prevent double free in nvme_alloc_ns() error handling
+    - nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
+    - [x86] drm/i915: Use proper fault mask in interrupt postinstall too
+    - [arm64] vdso: Add -fasynchronous-unwind-tables to cflags
+    - io_uring: statx must grab the file table for valid fd
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.12
+    - vhost: vsock: kick send_pkt worker once device is started
+    - [arm64,armhf] drm/bridge: analogix_dp: Split bind() into probe() and
+      real bind()
+    - [x86] ASoC: topology: Add missing memory checks
+    - [x86] ASoC: topology: Check return value of soc_tplg_create_tlv
+    - [x86] ASoC: topology: Check return value of soc_tplg_*_create
+    - [x86] ASoC: topology: Check soc_tplg_add_route return value
+    - [x86] ASoC: topology: Check return value of pcm_new_ver
+    - [x86] ASoC: topology: Check return value of soc_tplg_dai_config
+    - SUNRPC/cache: Fix unsafe traverse caused double-free in cache_purge
+    - scsi: sg: add sg_remove_request in sg_write (CVE-2020-12770)
+    - [armhf] ASoC: sgtl5000: Fix VAG power-on handling
+    - [x86] ASoC: topology: Fix endianness issue
+    - [arm64,armhf] usb: dwc3: gadget: Properly set maxpacket limit
+    - [x86] ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
+    - wimax/i2400m: Fix potential urb refcnt leak
+    - [armhf] net: stmmac: fix enabling socfpga's ptp_ref_clock
+    - [arm64,armhf] net: stmmac: Fix sub-second increment
+    - cifs: protect updating server->dstaddr with a spinlock
+    - cifs: do not share tcons with DFS
+    - tracing: Fix memory leaks in trace_events_hist.c
+    - ftrace: Fix memory leak caused by not freeing entry in
+      unregister_ftrace_direct()
+    - mac80211: sta_info: Add lockdep condition for RCU list usage
+    - [arm64] net: bcmgenet: suppress warnings on failed Rx SKB allocations
+    - sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
+    - drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event
+    - ALSA: hda: Match both PCI ID and SSID for driver blacklist
+    - [x86] kvm: fix a missing-prototypes "vmread_error"
+    - [x86] platform: GPD pocket fan: Fix error message when temp-limits are
+      out of range
+    - ACPI: PM: s2idle: Fix comment in acpi_s2idle_prepare_late()
+    - mac80211: add ieee80211_is_any_nullfunc()
+    - cgroup, netclassid: remove double cond_resched
+    - mm/mremap: Add comment explaining the untagging behaviour of mremap()
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.13
+    - [x86] thunderbolt: Check return value of tb_sw_read() in
+      usb4_switch_op()
+    - USB: serial: qcserial: Add DW5816e support
+    - drm/amdgpu: move kfd suspend after ip_suspend_phase1
+    - drm/amdgpu: drop redundant cg/pg ungate on runpm enter
+    - vt: fix unicode console freeing with a common interface
+    - [arm64] tty: xilinx_uartps: Fix missing id assignment to the console
+    - ext4: don't set dioread_nolock by default for blocksize < pagesize
+    - ext4: disable dioread_nolock whenever delayed allocation is disabled
+    - nvme: refactor nvme_identify_ns_descs error handling
+    - nvme: fix possible hang when ns scanning fails during error recovery
+    - tracing/kprobes: Fix a double initialization typo
+    - [arm64,riscv64] net: macb: Fix runtime PM refcounting
+    - cxgb4: fix EOTID leak when disabling TC-MQPRIO offload
+    - devlink: Fix reporter's recovery condition
+    - devlink: fix return value after hitting end in region read
+    - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
+    - ipv6: Use global sernum for dst validation with nexthop objects
+    - neigh: send protocol value in neighbor create notification
+    - net: bridge: vlan: Add a schedule point during VLAN processing
+    - [arm64,armhf] net: dsa: Do not leave DSA master with NULL netdev_ops
+    - [arm64,armhf] net: dsa: Do not make user port errors fatal
+    - [arm64,riscv64] net: macb: fix an issue about leak related system
+      resources
+    - net: macsec: preserve ingress frame ordering
+    - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
+    - net: phy: marvell10g: fix temperature sensor on 2110
+    - net_sched: sch_skbprio: add message validation to skbprio_change()
+    - net: stricter validation of untrusted gso packets
+    - net: usb: qmi_wwan: add support for DW5816e
+    - nfp: abm: fix a memory leak bug
+    - sch_choke: avoid potential panic in choke_reset()
+    - sch_sfq: validate silly quantum values
+    - tipc: fix partial topology connection closure
+    - tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040
+    - bnxt_en: Fix VF anti-spoof filter setup.
+    - bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF.
+    - bnxt_en: Improve AER slot reset.
+    - bnxt_en: Return error when allocating zero size context memory.
+    - bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features().
+    - net/mlx5: DR, On creation set CQ's arm_db member to right value
+    - net/mlx5: Fix forced completion access non initialized command entry
+    - net/mlx5: Fix command entry leak in Internal Error State
+    - net/mlx5e: Fix q counters on uplink representors
+    - [arm64,armhf] net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx()
+    - [arm64,armhf] net: mvpp2: cls: Prevent buffer overflow in
+      mvpp2_ethtool_cls_rule_del()
+    - wireguard: queueing: cleanup ptr_ring in error path of packet_queue_init
+    - wireguard: receive: use tunnel helpers for decapsulating ECN markings
+    - wireguard: socket: remove errant restriction on looping to self
+    - wireguard: send/receive: cond_resched() when processing worker
+      ringbuffers
+    - HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
+    - sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
+    - Revert "HID: wacom: generic: read the number of expected touches on a
+      per collection basis"
+    - HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
+    - HID: wacom: Report 2nd-gen Intuos Pro S center button status over BT
+    - USB: uas: add quirk for LaCie 2Big Quadra
+    - [arm64,armhf] usb: chipidea: msm: Ensure proper controller reset using
+      role switch API
+    - USB: serial: garmin_gps: add sanity checking for data length
+    - tracing/boottime: Fix kprobe event API usage
+    - tracing/kprobes: Reject new event if loc is NULL
+    - tracing: Wait for preempt irq delay thread to finish
+    - tracing: Add a vmalloc_sync_mappings() for safe measure
+    - crypto: arch/lib - limit simd usage to 4k chunks
+    - [s390x] KVM: Remove false WARN_ON_ONCE for the PQAP instruction
+    - [x86] KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB
+      path
+    - [arm64,armhf] KVM: vgic: Fix limit condition when writing to
+      GICD_I[CS]ACTIVER
+    - [arm64] KVM: Fix 32bit PC wrap-around
+    - [arm64] hugetlb: avoid potential NULL dereference
+    - driver core: platform: Initialize dma_parms for platform devices
+    - [arm*] amba: Initialize dma_parms for amba devices
+    - [x86] mei: me: disable mei interface on LBG servers.
+    - ipc/mqueue.c: change __do_notify() to bypass check_kill_permission()
+    - epoll: atomically remove wait entry on wake up
+    - eventpoll: fix missing wakeup for ovflist in ep_poll_callback
+    - mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
+    - mm: limit boost_watermark on small zones
+    - ceph: fix endianness bug when handling MDS session feature bits
+    - ceph: demote quotarealm lookup warning to a debug message
+    - coredump: fix crash when umh is disabled
+    - [riscv64] set max_pfn to the PFN of the last page
+    - batman-adv: fix batadv_nc_random_weight_tq
+    - batman-adv: Fix refcnt leak in batadv_show_throughput_override
+    - batman-adv: Fix refcnt leak in batadv_store_throughput_override
+    - batman-adv: Fix refcnt leak in batadv_v_ogm_process
+    - [x86] mm/cpa: Flush direct map alias during cpa
+    - [x86] entry/64: Fix unwind hints in register clearing code
+    - [x86] entry/64: Fix unwind hints in kernel exit path
+    - [x86] entry/64: Fix unwind hints in __switch_to_asm()
+    - [x86] entry/64: Fix unwind hints in rewind_stack_do_exit()
+    - [amd64] x86/unwind/orc: Don't skip the first frame for inactive tasks
+    - [amd64] x86/unwind/orc: Prevent unwinding before ORC initialization
+    - [amd64] x86/unwind/orc: Fix error path for bad ORC entry type
+    - [amd64] x86/unwind/orc: Fix premature unwind stoppage due to IRET frames
+    - [x86] KVM: Fixes posted interrupt check for IRQs delivery modes
+    - [x86] arch/x86/kvm/svm/sev.c: change flag passed to GUP fast in
+      sev_pin_memory()
+    - netfilter: nat: never update the UDP checksum when it's 0
+    - netfilter: nf_osf: avoid passing pointer to local var
+    - [x86] kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts
+    - scripts/decodecode: fix trapping instruction formatting
+    - mm, memcg: fix error return value of mem_cgroup_css_alloc()
+    - bdi: move bdi_dev_name out of line
+    - bdi: add a ->dev_name field to struct backing_dev_info
+    - io_uring: don't use 'fd' for openat/openat2/statx
+    - fsnotify: replace inode pointer with an object id
+    - fanotify: merge duplicate events on parent and child
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.14
+    - [x86] KVM: nVMX: Consolidate nested MTF checks to helper function
+    - [x86] kvm: nVMX: reflect MTF VM-exits if injected by L1
+    - xprtrdma: Clean up the post_send path
+    - xprtrdma: Fix trace point use-after-free race
+    - [x86] drm/i915/tgl: Add Wa_14010477008:tgl
+    - [x86] drm/i915/tgl: TBT AUX should use TC power well ops
+    - [x86] drm/i915/display: Load DP_TP_CTL/STATUS offset before use it
+    - shmem: fix possible deadlocks on shmlock_user_lock
+    - net: phy: microchip_t1: add lan87xx_phy_init to initialize the lan87xx
+      phy.
+    - [arm64,armhf] KVM: vgic: Synchronize the whole guest on
+      GIC{D,R}_I{S,C}ACTIVER read
+    - [arm64,armhf] KVM: vgic-v2: Only use the virtual state when userspace
+      accesses pending bits
+    - gpio: pca953x: Fix pca953x_gpio_set_config
+    - SUNRPC: Add "@len" parameter to gss_unwrap()
+    - SUNRPC: Fix GSS privacy computation of auth->au_ralign
+    - [x86] hv_netvsc: Fix netvsc_start_xmit's return type
+    - drop_monitor: work around gcc-10 stringop-overflow warning
+    - virtio-blk: handle block_device_operations callbacks after hot unplug
+    - net_sched: fix tcm_parent in tc filter dump
+    - [arm64,armhf] net: stmmac: gmac5+: fix potential integer overflow on 32
+      bit multiply
+    - [amd64] iommu/amd: Fix race in increase_address_space()/fetch_pte()
+    - [amd64] iommu/amd: Update Device Table in increase_address_space()
+    - mmc: sdhci-acpi: Add SDHCI_QUIRK2_BROKEN_64_BIT_DMA for AMDI0040
+    - [arm64] dpaa2-eth: properly handle buffer size restrictions
+    - mptcp: set correct vfs info for subflows
+    - net: fix a potential recursive NETDEV_FEAT_CHANGE
+    - netlabel: cope with NULL catmap (CVE-2020-10711)
+    - net: phy: fix aneg restart in phy_ethtool_set_eee
+    - [arm64] net: stmmac: fix num_por initialization
+    - pppoe: only process PADT targeted at local interfaces
+    - Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
+    - tcp: fix error recovery in tcp_zerocopy_receive()
+    - tcp: fix SO_RCVLOWAT hangs with fat skbs
+    - virtio_net: fix lockdep warning on 32 bit
+    - [arm64] dpaa2-eth: prevent array underflow in update_cls_rule()
+    - hinic: fix a bug of ndo_stop
+    - net: ipv4: really enforce backoff for redirects
+    - netprio_cgroup: Fix unlimited memory leak of v2 cgroups
+    - net: tcp: fix rx timestamp behavior for tcp_recvmsg
+    - nfp: abm: fix error return code in nfp_abm_vnic_alloc()
+    - r8169: re-establish support for RTL8401 chip version
+    - umh: fix memory leak on execve failure
+    - [arm64] net: broadcom: Select BROADCOM_PHY for BCMGENET
+    - [i386] dmaengine: pch_dma.c: Avoid data race between probe and irq
+      handler
+    - [x86] cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode
+      once
+    - ALSA: hda/hdmi: fix race in monitor detection during probe
+    - drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
+    - fibmap: Warn and return an error in case of block > INT_MAX
+    - io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
+    - io_uring: check non-sync defer_list carefully
+    - ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
+    - ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse
+    - gfs2: Another gfs2_walk_metadata fix
+    - mmc: sdhci-pci-gli: Fix no irq handler from suspend
+    - [amd64] IB/hfi1: Fix another case where pq is left on waitlist
+    - ACPI: EC: PM: Avoid premature returns from acpi_s2idle_wake()
+    - [x86] pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H
+    - [x86] pinctrl: baytrail: Enable pin configuration setting for GPIO chip
+    - [arm64] pinctrl: qcom: fix wrong write in update_dual_edge
+    - [x86] pinctrl: cherryview: Add missing spinlock usage in
+      chv_gpio_irq_handler
+    - [arm64,armhf] drm/tegra: Fix SMMU support on Tegra124 and Tegra210
+    - bpf: Fix error return code in map_lookup_and_delete_elem()
+    - ALSA: firewire-lib: fix 'function sizeof not defined' error of
+      tracepoints format
+    - cachefiles: Fix corruption of the return value in
+      cachefiles_read_or_alloc_pages()
+    - i40iw: Fix error handling in i40iw_manage_arp_cache()
+    - [x86] drm/i915/gt: Make timeslicing an explicit engine property
+    - [x86] drm/i915: Don't enable WaIncreaseLatencyIPCEnabled when IPC is
+      disabled
+    - bpf, sockmap: msg_pop_data can incorrecty set an sge length
+    - bpf, sockmap: bpf_tcp_ingress needs to subtract bytes from sg.size
+    - [x86] drm/i915/gem: Remove object_is_locked assertion from
+      unpin_from_display_plane
+    - mmc: sdhci-pci-gli: Fix can not access GL9750 after reboot from Windows
+      10
+    - mmc: core: Check request type before completing the request
+    - mmc: core: Fix recursive locking issue in CQE recovery path
+    - mmc: block: Fix request completion in the CQE timeout path
+    - gfs2: More gfs2_find_jhead fixes
+    - fork: prevent accidental access to clone3 features
+    - drm/amdgpu: force fbdev into vram
+    - NFS: Fix fscache super_cookie index_key from changing after umount
+    - NFS: Fix fscache super_cookie allocation
+    - NFSv4: Fix fscache cookie aux_data to ensure change_attr is included
+    - hwmon: (drivetemp) Fix SCT support if SCT data tables are not supported
+    - netfilter: conntrack: avoid gcc-10 zero-length-bounds warning
+    - [x86] drm/i915/gvt: Fix kernel oops for 3-level ppgtt guest
+    - [arm64] fix the flush_icache_range arguments in machine_kexec
+    - netfilter: conntrack: fix infinite loop on rmmod
+    - [x86] drm/i915: Mark concurrent submissions with a weak-dependency
+    - nfs: fix NULL deference in nfs4_get_valid_delegation
+    - SUNRPC: Signalled ASYNC tasks need to exit
+    - tracing: Wait for preempt irq delay thread to execute
+    - netfilter: flowtable: set NF_FLOW_TEARDOWN flag on entry expiration
+    - netfilter: nft_set_rbtree: Add missing expired checks
+    - RDMA/rxe: Always return ERR_PTR from rxe_create_mmap_info()
+    - IB/mlx4: Test return value of calls to ib_get_cached_pkey
+    - IB/core: Fix potential NULL pointer dereference in pkey cache
+    - RDMA/core: Fix double put of resource
+    - RDMA/iw_cxgb4: Fix incorrect function parameters
+    - [x86] ftrace: Have ftrace trampolines turn read-only at the end of
+      system boot up
+    - [x86] drm/i915: Handle idling during i915_gem_evict_something busy loops
+    - mm, memcg: fix inconsistent oom event behavior
+    - epoll: call final ep_events_available() check under the lock
+    - bpf: Fix bug in mmap() implementation for BPF array map
+    - NFSv3: fix rpc receive buffer size for MOUNT call
+    - pnp: Use list_for_each_entry() instead of open coding
+    - net/rds: Use ERR_PTR for rds_message_alloc_sgs()
+    - Stop the ad-hoc games with -Wno-maybe-initialized
+    - gcc-10: disable 'zero-length-bounds' warning for now
+    - gcc-10: disable 'array-bounds' warning for now
+    - gcc-10: disable 'stringop-overflow' warning for now
+    - gcc-10: disable 'restrict' warning for now
+    - gcc-10 warnings: fix low-hanging fruit
+    - gcc-10: mark more functions __init to avoid section mismatch warnings
+    - gcc-10: avoid shadowing standard library 'free()' in crypto
+    - bootconfig: Fix to remove bootconfig data from initrd while boot
+    - bootconfig: Fix to prevent warning message if no bootconfig option
+    - usb: usbfs: correct kernel->user page attribute mismatch
+    - USB: usbfs: fix mmap dma mismatch
+    - ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
+    - ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA
+    - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
+    - ALSA: usb-audio: Add control message quirk delay for Kingston HyperX
+      headset
+    - usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B
+    - [arm64,armhf,riscv64] usb: host: xhci-plat: keep runtime active when
+      removing host
+    - USB: gadget: fix illegal array access in binding with UDC
+      (CVE-2020-13143)
+    - usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg
+      list
+    - [x86] Make the "Reducing compressed framebufer size" message be
+      DRM_INFO_ONCE()
+    - [armhf] dts: imx6dl-yapp4: Fix Ursa board Ethernet connection
+    - drm/amd/amdgpu: add raven1 part to the gfxoff quirk list
+    - [x86] drm/i915/tgl+: Fix interrupt handling for DP AUX transactions
+    - [powerpc*] vdso32: Fallback on getres syscall when clock is unknown
+    - cifs: fix leaked reference on requeued write
+    - [x86] KVM: Fix pkru save/restore when guest CR4.PKE=0, move it to x86.c
+    - [x86] Fix early boot crash on gcc-10, third try
+    - [amd64] x86/unwind/orc: Fix error handling in __unwind_start()
+    - exec: Move would_dump into flush_old_exec
+    - [arm64,armhf] clk: rockchip: fix incorrect configuration of rk3228
+      aclk_gpu* clocks
+    - [arm64,armhf] dwc3: Remove check for HWO flag in
+      dwc3_gadget_ep_reclaim_trb_sg()
+    - fanotify: fix merging marks masks with FAN_ONDIR
+    - [arm64] dts: meson-g12b-ugoos-am6: fix usb vbus-supply
+    - Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
+    - [armhf] clk: ti: clkctrl: Fix Bad of_node_put within clkctrl_get_name
+    - clk: Unlink clock if failed to prepare or enable
+    - [arm64] dts: rockchip: Replace RK805 PMIC node name with "pmic" on
+      rk3328 boards
+    - dt-bindings: dma: fsl-edma: fix ls1028a-edma compatible
+    - SUNRPC: Revert 241b1f419f0e ("SUNRPC: Remove xdr_buf_trim()")
+    - bpf: Fix sk_psock refcnt leak when receiving message
+    - RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event
+    - RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj
+    - [x86] KVM: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
+    - bpf: Enforce returning 0 for fentry/fexit progs
+    - bpf: Restrict bpf_trace_printk()'s %s usage and add %pks, %pus specifier
+    - Makefile: disallow data races on gcc-10 as well
+
+  [ Ben Hutchings ]
+  * linux-libc-dev: Re-add "Provides: linux-kernel-headers" as several
+    source packages still have this in Build-Depends
+
+  [ Luca Boccassi ]
+  * [cloud] Enable INFINIBAND configs for HyperV/Azure (Closes: #958300)
+
+  [ Bastian Blank ]
+  * [cloud] Re-enable some FB drivers.
+
+  [ Romain Perier ]
+  * Enable support for fsverity
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.6.10-rt5 and re-enable
+  * Bump ABI to 2.
+  * xfs: add agf freeblocks verify in xfs_agf_verify (CVE-2020-12655)
+
+  [ Domenico Andreoli ]
+  * [arm64] udeb: Add armada_37xx_wdt to kernel-image (Closes: #961086)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 23 May 2020 16:29:21 +0200
+
+linux (5.6.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.5
+    - perf tools: Support Python 3.8+ in Makefile (Closes: #958165)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.6
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7
+
+  [ Ben Hutchings ]
+  * [armhf,arm64] lockdown: Update arm Secure Boot patch for 5.6
+    (fixes FTBFS)
+  * Use debhelper compatibility level 12:
+    - Build-Depend on debhelper-compat and remove debian/compat
+    - hyperv-daemons: Use dh_installsystemd instead of
+      dh_systemd_{enable,start}
+    - hyperv-daemons: Add "Pre-Depends: ${misc:Pre-Depends}"
+  * debian/README.source: Refer to upload checklist in kernel-team.git
+  * [armel] Disable NETLABEL, since SECURITY_SELINUX is also disabled
+  * Drop linux-headers-<ver>-all and linux-headers-<ver>-all-<arch> packages,
+    which are no longer needed
+  * linux-libc-dev: Drop "Provides: linux-kernel-headers" which is no longer
+    needed
+  * [s390x] mm: fix page table upgrade vs 2ndary address mode accesses
+    (CVE-2020-11884)
+  * Set ABI to 1
+
+  [ Romain Perier ]
+  *  Rebased patch firmware-remove-redundant-log-messages-from-drivers.patch
+     onto 5.6.7.
+
+  [ Philip Rinn ]
+  * [arm64] Enable CRYPTO_DEV_SUN8I_CE (closes: #958037)
+  * [arm64] Enable SUN8I_THERMAL
+
+  [ Roberto Bampi ]
+  * [arm64] Enable ARMADA_37XX_WATCHDOG as module
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable SENSORS_PWM_FAN as a module.
+
+  [ Paul Tagliamonte ]
+  * Enable CONFIG_NETLABEL (Closes: #958804)
+
+ -- Ben Hutchings <benh@debian.org>  Wed, 29 Apr 2020 04:46:47 +0100
+
+linux (5.6.4-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.6
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.1
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.3
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.4
+
+  [ Ben Hutchings ]
+  * Set ABI to trunk
+  * [mips*] Revert "staging: octeon-usb: delete the octeon usb host controller
+    driver"
+  * [mips*] Revert "staging: octeon: delete driver"
+  * [powerpc*] i2c: Enable I2C_PARPORT instead of I2C_PARPORT_LIGHT
+  * aufs: Update support patchset to aufs5.x-rcN 20200302; no functional
+    change
+  * linux-signed-*: Build-Depend on kernel-wedge 2.102 for consistency
+  * aufs: Update support patchset to aufs5.6 20200413; no functional change
+  * [rt] Update to 5.6.4-rt3 and re-enable
+
+  [ Aurelien Jarno ]
+  * Enable SENSORS_DRIVETEMP
+  * [riscv64] Enable SOC_VIRT
+  * [riscv64] Enable GPIOLIB, GPIO_SIFIVE, POWER_RESET, POWER_RESET_GPIO,
+    POWER_RESET_GPIO_RESTART, POWER_RESET_RESTART, CONFIG_PWM,
+    CONFIG_PWM_SIFIVE, CONFIG_SIFIVE_L2
+
+  [ Christian Barcenas ]
+  * linux-kbuild: Stop building conmakehash
+  * linux-cpupower: Add libcap to Build-Depends and turbostat linker flags
+  * [x86] Drop EFI cold boot mitigation patch in favor of upstream
+  * [amd64] Update "x86: Make x32 syscall support conditional ..." for 5.6
+
+  [ Romain Perier ]
+  * [x86] udeb: Add crc32_pclmul to crc-modules
+  * udeb: Add crc32_generic to crc-modules
+
+  [ Luca Boccassi ]
+  * lockdown: set default (with Secure Boot) to LOCKDOWN_INTEGRITY_MAX
+    (Closes: #956197)
+
+ -- Ben Hutchings <benh@debian.org>  Fri, 17 Apr 2020 01:26:42 +0100
+
+linux (5.5.17-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.14
+    - mmc: core: Allow host controllers to require R1B for CMD6
+    - mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for erase/trim/discard
+    - mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for eMMC sleep command
+    - [armhf] mmc: sdhci-omap: Fix busy detection by enabling
+      MMC_CAP_NEED_RSP_BUSY
+    - [armhf,arm64] mmc: sdhci-tegra: Fix busy detection by enabling
+      MMC_CAP_NEED_RSP_BUSY
+    - cxgb4: fix throughput drop during Tx backpressure
+    - cxgb4: fix Txq restart check during backpressure
+    - geneve: move debug check after netdev unregister
+    - hsr: fix general protection fault in hsr_addr_is_self()
+    - ipv4: fix a RCU-list lock in inet_dump_fib()
+    - macsec: restrict to ethernet devices
+    - net/bpfilter: fix dprintf usage for /dev/kmsg
+    - net: cbs: Fix software cbs to consider packet sending time
+    - [armhf,arm64] net: dsa: Fix duplicate frames flooded by learning
+    - net: ena: Add PCI shutdown handler to allow safe kexec
+    - [armhf] net: mvneta: Fix the case where the last poll did not process all
+      rx
+    - net/packet: tpacket_rcv: avoid a producer race condition
+    - net: phy: dp83867: w/a for fld detect threshold bootstrapping issue
+    - [armhf,arm64] net: phy: mdio-bcm-unimac: Fix clock handling
+    - net: qmi_wwan: add support for ASKEY WWHC050
+    - net/sched: act_ct: Fix leak of ct zone template on replace
+    - net_sched: cls_route: remove the right filter from hashtable
+    - net_sched: hold rtnl lock in tcindex_partial_destroy_work()
+    - net_sched: keep alloc_hash updated after hash allocation
+    - [armhf,arm64] net: stmmac: dwmac-rk: fix error path in rk_gmac_probe
+    - r8169: re-enable MSI on RTL8168c
+    - slcan: not call free_netdev before rtnl_unlock in slcan_open
+    - tcp: also NULL skb->dev when copy was needed
+    - tcp: ensure skb->dev is NULL before leaving TCP stack
+    - tcp: repair: fix TCP_QUEUE_SEQ implementation
+    - vxlan: check return value of gro_cells_init()
+    - [arm64] Revert "net: bcmgenet: use RGMII loopback for MAC reset"
+    - [arm64] net: bcmgenet: keep MAC in reset until PHY is up
+    - bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S.
+    - bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets()
+    - bnxt_en: Return error if bnxt_alloc_ctx_mem() fails.
+    - bnxt_en: Free context memory after disabling PCI in probe error path.
+    - bnxt_en: Reset rings if ring reservation fails during open()
+    - net: ena: fix incorrect setting of the number of msix vectors
+    - net: ena: fix request of incorrect number of IRQ vectors
+    - net: ena: avoid memory access violation by validating req_id properly
+    - net: ena: fix continuous keep-alive resets
+    - net: ip_gre: Separate ERSPAN newlink / changelink callbacks
+    - net: ip_gre: Accept IFLA_INFO_DATA-less configuration
+    - hsr: use rcu_read_lock() in hsr_get_node_{list/status}()
+    - hsr: add restart routine into hsr_get_node_list()
+    - hsr: set .netnsok flag
+    - net/mlx5: DR, Fix postsend actions write length
+    - net/mlx5e: Enhance ICOSQ WQE info fields
+    - net/mlx5e: Fix missing reset of SW metadata in Striding RQ reset
+    - net/mlx5e: Fix ICOSQ recovery flow with Striding RQ
+    - net/mlx5e: Do not recover from a non-fatal syndrome
+    - net/mlx5_core: Set IB capability mask1 to fix ib_srpt connection failure
+    - net/mlx5e: kTLS, Fix TCP seq off-by-1 issue in TX resync flow
+    - net/mlx5e: Fix endianness handling in pedit mask
+    - cgroup-v1: cgroup_pidlist_next should update position index
+    - nfs: add minor version to nfs_server_key for fscache
+    - drivers/of/of_mdio.c:fix of_mdiobus_register()
+    - cgroup1: don't call release_agent when it is ""
+    - veth: ignore peer tx_dropped when counting local rx_dropped
+    - drm/amd/display: update soc bb for nv14
+    - drm/amdgpu: correct ROM_INDEX/DATA offset for VEGA20
+    - [armhf] drm/exynos: Fix cleanup of IOMMU related objects
+    - [x86] iommu/vt-d: Silence RCU-list debugging warnings
+    - scsi: ipr: Fix softlockup when rescanning devices in petitboot
+    - mac80211: Do not send mesh HWMP PREQ if HWMP is disabled
+    - [x86] iommu/vt-d: Fix debugfs register reads
+    - [x86] iommu/vt-d: Populate debugfs if IOMMUs are detected
+    - Input: fix stale timestamp on key autorepeat events
+    - [x86] Input: synaptics - enable RMI on HP Envy 13-ad105ng
+    - Input: avoid BIT() macro usage in the serio.h UAPI header
+    - IB/rdmavt: Free kernel completion queue when done
+    - RDMA/core: Fix missing error check on dev_set_name()
+    - RDMA/odp: Fix leaking the tgid for implicit ODP
+    - gpiolib: Fix irq_disable() semantics
+    - RDMA/nl: Do not permit empty devices names during
+      RDMA_NLDEV_CMD_NEWLINK/SET
+    - RDMA/mad: Do not crash if the rdma device does not have a umad interface
+    - ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL
+    - ceph: fix memory leak in ceph_cleanup_snapid_map()
+    - [x86] KVM: SVM: Issue WBINVD after deactivating an SEV guest
+    - [armhf] dts: dra7: Add bus_dma_limit for L3 bus
+    - [armhf] dts: omap5: Add bus_dma_limit for L3 bus
+    - perf probe: Fix to delete multiple probe event
+    - perf probe: Do not depend on dwfl_module_addrsym()
+    - rtlwifi: rtl8188ee: Fix regression due to commit d1d1a96bdb44
+    - drm/prime: use dma length macro when mapping sg
+    - drm/amdgpu: fix scatter-gather mapping with user pages
+    - drm/radeon: fix scatter-gather mapping with user pages
+    - [armhf] soc: samsung: chipid: Fix return value on non-Exynos platforms
+    - scsi: sd: Fix optimal I/O size for devices that change reported values
+    - nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type
+    - mac80211: drop data frames without key on encrypted links
+    - mac80211: mark station unauthorized before key removal
+    - mm/swapfile.c: move inode_lock out of claim_swapfile
+    - drivers/base/memory.c: indicate all memory blocks as removable
+    - mm/sparse: fix kernel crash with pfn_section_valid check
+    - mm: fork: fix kernel_stack memcg stats for various stack implementations
+    - [x86] gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk
+    - gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option
+    - [x86] gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT +
+      AXP288 model
+    - bpf: Fix cgroup ref leak in cgroup_bpf_inherit on out-of-memory
+    - RDMA/core: Ensure security pkey modify is not lost
+    - afs: Fix handling of an abort from a service handler
+    - genirq: Fix reference leaks on irq affinity notifiers
+    - xfrm: handle NETDEV_UNREGISTER for xfrm device
+    - vti[6]: fix packet tx through bpf_redirect() in XinY cases
+    - RDMA/mlx5: Fix the number of hwcounters of a dynamic counter
+    - RDMA/mlx5: Fix access to wrong pointer while performing flush due to
+      error
+    - RDMA/mlx5: Block delay drop to unprivileged users
+    - xfrm: fix uctx len check in verify_sec_ctx_len
+    - xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
+    - xfrm: policy: Fix doulbe free in xfrm_policy_timer
+    - afs: Fix client call Rx-phase signal handling
+    - afs: Fix some tracing details
+    - afs: Fix unpinned address list during probing
+    - ieee80211: fix HE SPR size calculation
+    - mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX
+    - netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6}
+    - netfilter: flowtable: populate addr_type mask
+    - netfilter: nft_fwd_netdev: validate family and chain type
+    - netfilter: nft_fwd_netdev: allow to redirect to ifb via ingress
+    - [i386] bpf, x32: Fix bug with JMP32 JSET BPF_X checking upper bits
+    - bpf: Initialize storage pointers to NULL to prevent freeing garbage
+      pointer
+    - bpf/btf: Fix BTF verification of enum members in struct/union
+    - bpf, sockmap: Remove bucket->lock from sock_{hash|map}_free
+    - [armhf] dts: sun8i-a83t-tbs-a711: Fix USB OTG mode detection
+    - vti6: Fix memory leak of skb if input policy check fails
+    - r8169: fix PHY driver check on platforms w/o module softdeps
+    - [x86] clocksource/drivers/hyper-v: Untangle stimers and timesync from
+      clocksources
+    - bpf: Undo incorrect __reg_bound_offset32 handling
+    - USB: serial: option: add support for ASKEY WWHC050
+    - USB: serial: option: add BroadMobi BM806U
+    - USB: serial: option: add Wistron Neweb D19Q1
+    - USB: cdc-acm: restore capability check order
+    - USB: serial: io_edgeport: fix slab-out-of-bounds read in
+      edge_interrupt_callback
+    - [armhf,arm64] usb: musb: fix crash with highmen PIO and usbmon
+    - media: flexcop-usb: fix endpoint sanity check
+    - media: usbtv: fix control-message timeouts
+    - staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table
+    - [x86] staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb
+    - [x86] staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
+    - [x86] ahci: Add Intel Comet Lake H RAID PCI ID
+    - libfs: fix infoleak in simple_attr_read()
+    - media: ov519: add missing endpoint sanity checks (CVE-2020-11608)
+    - media: dib0700: fix rc endpoint lookup
+    - media: stv06xx: add missing descriptor sanity checks (CVE-2020-11609)
+    - media: xirlink_cit: add missing descriptor sanity checks
+      (CVE-2020-11668)
+    - media: v4l2-core: fix a use-after-free bug of sd->devnode
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.15
+    - bpf: update jmp32 test cases to fix range bound deduction
+    - mac80211: Check port authorization in the ieee80211_tx_dequeue() case
+    - mac80211: fix authentication with iwlwifi/mvm
+    - vt: selection, introduce vc_is_sel
+    - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines
+    - vt: switch vt_dont_switch to bool
+    - vt: vt_ioctl: remove unnecessary console allocation checks
+    - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
+    - vt: vt_ioctl: fix use-after-free in vt_in_use()
+    - [x86] platform: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table
+    - bpf: Explicitly memset the bpf_attr structure
+    - bpf: Explicitly memset some bpf info structures declared on the stack
+    - iwlwifi: don't send GEO_TX_POWER_LIMIT if no wgds table
+    - [x86] gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT +
+      AXP288 model
+    - [armhf] clk: imx: Align imx sc clock msg structs to 4
+    - [armhf] clk: imx: Align imx sc clock parent msg structs to 4
+    - libceph: fix alloc_msg_with_page_vector() memory leaks
+    - perf map: Fix off by one in strncpy() size argument
+    - [armel,armhf] dts: bcm283x: Fix vc4's firmware bus DMA limitations
+    - [armel] bcm2835-rpi-zero-w: Add missing pinctrl name
+    - [armhf] dts: imx6: phycore-som: fix arm and soc minimum voltage
+    - [armhf] dts: N900: fix onenand timings
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.16
+    - ipv4: fix a RCU-list lock in fib_triestat_seq_show
+    - net, ip_tunnel: fix interface lookup with no key
+    - sctp: fix possibly using a bad saddr with a given dst
+    - sctp: fix refcount bug in sctp_wfree
+    - [arm64,riscv64] net: macb: Fix handling of fixed-link node
+    - nvme-rdma: Avoid double freeing of async event data
+    - drm/amdgpu: add fbdev suspend/resume on gpu reset
+    - [x86] drm/amd/display: Add link_rate quirk for Apple 15" MBP 2017
+    - drm/bochs: downgrade pci_request_region failure from error to warning
+    - initramfs: restore default compression behavior
+    - drm/amdgpu: fix typo for vcn1 idle check
+    - tools/power turbostat: Fix gcc build warnings
+    - tools/power turbostat: Fix missing SYS_LPI counter on some Chromebooks
+    - tools/power turbostat: Fix 32-bit capabilities warning
+    - padata: fix uninitialized return value in padata_replace()
+    - brcmfmac: abort and release host after error
+    - XArray: Fix xa_find_next for large multi-index entries
+    - misc: rtsx: set correct pcr_ops for rts522A
+    - PCI: sysfs: Revert "rescan" file renames
+    - [x86] mei: me: add cedar fork device ids
+    - nvmem: check for NULL reg_read and reg_write before dereferencing
+    - [armhf] extcon: axp288: Add wakeup support
+    - Revert "dm: always call blk_queue_split() in dm_process_bio()"
+    - [x86] ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on
+      EVGA X99 Classified motherboard
+    - iwlwifi: consider HE capability when setting LDPC
+    - iwlwifi: yoyo: don't add TLV offset when reading FIFOs
+    - iwlwifi: dbg: don't abort if sending DBGC_SUSPEND_RESUME fails
+    - rxrpc: Fix sendmsg(MSG_WAITALL) handling
+    - IB/hfi1: Ensure pq is not left on waitlist
+    - sched: act: count in the size of action flags bitfield
+    - tcp: fix TFO SYNACK undo to avoid double-timestamp-undo
+    - [x86,ia64] watchdog: iTCO_wdt: Export vendorsupport
+    - [x86,ia64] watchdog: iTCO_wdt: Make ICH_RES_IO_SMI optional
+    - i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device
+    - net: genetlink: return the error code when attribute parsing fails.
+    - net: Fix Tx hash bound checking
+    - net/smc: fix cleanup for linkgroup setup failures
+    - padata: always acquire cpu_hotplug_lock before pinst->lock
+    - mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
+      (CVE-2020-11565)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.17
+    - cxgb4: fix MPS index overwrite when setting MAC address
+    - ipv6: don't auto-add link-local address to lag ports
+    - [armhf] net: dsa: bcm_sf2: Do not register slave MDIO bus with OF
+    - [armhf] net: dsa: bcm_sf2: Ensure correct sub-node is parsed
+    - net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before
+      accessing PHY registers
+    - net_sched: add a temporary refcnt for struct tcindex_data
+    - net_sched: fix a missing refcnt in tcindex_init()
+    - [armhf,arm64] net: stmmac: dwmac1000: fix out-of-bounds mac address reg
+      setting
+    - slcan: Don't transmit uninitialized stack data in padding
+    - tun: Don't put_page() for all negative return values from XDP program
+    - r8169: change back SG and TSO to be disabled by default
+    - cxgb4: free MQPRIO resources in shutdown path
+    - [s390x] prevent leaking kernel address in BEAR
+    - random: always use batched entropy for get_random_u{32,64}
+    - [armhf,arm64] usb: dwc3: gadget: Wrap around when skip TRBs
+    - slub: improve bit diffusion for freelist ptr obfuscation
+    - ubi: fastmap: Free unused fastmap anchor peb during detach
+    - RDMA/ucma: Put a lock around every call to the rdma_cm layer
+    - RDMA/cma: Teach lockdep about the order of rtnl and lock
+    - RDMA/siw: Fix passive connection establishment
+    - Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
+    - RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow
+    - blk-mq: Keep set->nr_hw_queues and set->map[].nr_queues in sync
+    - fbcon: fix null-ptr-deref in fbcon_switch
+    - driver core: Reevaluate dev->links.need_for_probe as suppliers are added
+    - [x86] iommu/vt-d: Allow devices with RMRRs to use identity domain
+    - ACPI: PM: Add acpi_[un]register_wakeup_handler()
+    - [x86] platform: intel_int0002_vgpio: Use acpi_register_wakeup_handler()
+    - IB/hfi1: Call kobject_put() when kobject_init_and_add() fails
+    - IB/hfi1: Fix memory leaks in sysfs registration and unregistration
+    - IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads
+    - [armhf] imx: Enable ARM_ERRATA_814220 for i.MX6UL and i.MX7D
+    - [armhf] imx: only select ARM_ERRATA_814220 for ARMv7-A
+    - ceph: remove the extra slashes in the server path
+    - ceph: canonicalize server path in place
+
+  [ Noah Meyerhans ]
+  * Fix autopkgtest failure due to pycodestyle violation
+  * [cloud] Re-enable kernel page merge functionality (Closes: #955366)
+  * [cloud] Apply a number of additional optimizations (Closes: #947759)
+    - Statically link nvme and ext4 drivers with the kernel
+    - [amd64] Re-enable SCHED_MC_PRIO
+    - Switch to LZ4 for compression
+    - Disable a number of additional drivers unlikely to be found in
+      cloud environments
+
+  [ Ben Hutchings ]
+  * drm: Disable DRM_LEGACY (DRI1)
+  * Bump ABI to 2
+  * WireGuard: Update for renaming of skb_reset_tc() to skb_reset_redirect()
+  * lib/fonts: Enable FONTS, FONT_8x8, FONT_8x16, FONT_TER16x32 for most
+    flavours (Closes: #956173)
+  * keys: Enable PERSISTENT_KEYRINGS
+  * mm: Enable DEFERRED_STRUCT_PAGE_INIT (Closes: #954025)
+  * [armel/marvell] mm: Enable COMPACTION (Closes: #949171)
+  * [x86} media/cec: Enable CEC_PLATFORM_DRIVERS; enable VIDEO_SECO_CEC as a
+    module (Closes: #951543)
+  * [x86] sound/soc/intel: Enable SND_SOC_INTEL_BYT_CHT_CX2072X_MACH as module
+    (Closes: #951482)
+
+  [ Sudip Mukherjee ]
+  * Remove libbpf. (See: #948041)
+
+  [ Jason A. Donenfeld ]
+  * Provide wireguard-modules as stop-gap for packages.
+
+  [ Christian Barcenas ]
+  * linux-cpupower: Add libcap to Build-Depends and turbostat linker flags
+
+  [ Joel Johnson ]
+  * [armhf] Build PHY_MVEBU_A38X_COMPHY module (Closes: #951409)
+
+  [ Josua Mayer ]
+  * [arm64] enable support for the Honeycomb arm64 workstation
+    (Closes: #948576)
+
+ -- Ben Hutchings <benh@debian.org>  Wed, 15 Apr 2020 03:37:48 +0100
+
+linux (5.5.13-2) unstable; urgency=medium
+
+  * bpf: Undo incorrect __reg_bound_offset32 handling (CVE-2020-8835)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 30 Mar 2020 23:06:57 +0200
+
+linux (5.5.13-1) unstable; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.5
+    (Closes: #953680)
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.1
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.2
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.3
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.4
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.5
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.6
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.8
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.9
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.10
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.11
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.12
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.13
+
+  [ Ben Hutchings ]
+  * aufs: Update support patchset to aufs5.x-rcN 20200120; no functional
+    change
+  * net: Enable NET_SWITCHDEV; disable on armel/marvell (Closes: #949863)
+  * [armhf] net/ethernet/ti: Enable TI_CPSW_SWITCHDEV as module; enable TI_CPTS
+  * wireless: Enable regulatory.db direct loading:
+    - Drop "wireless: Disable regulatory.db direct loading"
+    - linux-image: Add Breaks: relation with old wireless-regdb versions
+    - Regenerate my wireless-regdb certificate with expected attributes
+  * [x86] Drop "Add a SysRq option to lift kernel lockdown" (Closes: #947021)
+    - This patch allowed remotely disabling lockdown using usbip
+    - Lockdown can be disabled by running "mokutil --disable-validation",
+      rebooting, and confirming the change when prompted
+  * Set PYTHON=python3 for document build (fixes FTBFS)
+  * [x86,arm64] Move linux-headers metapackages to src:linux-signed-*.
+    This should ensure that src:linux and src:linux-signed-* transition to
+    testing together.
+  * debian/bin/gencontrol_signed.py: Generate valid versions in a linux binNMU
+  * udeb: Drop zlib-modules packages, as zlib_deflate is now always built-in
+    (fixes FTBFS on several architectures)
+  * [mips*/octeon] Fix and re-enable the Octeon Ethernet driver
+  * [mips*] Fix FTBFS:
+    - Increase RELOCATION_TABLE_SIZE to 0x160000
+    - Fix exception handler memcpy()
+  * debian/config: Delete redundant arch/flavour-specific "debug-info: true"
+  * linux-source: Suggest qtbase5-dev instead of the removed libqt4-dev
+    (Closes: #953386)
+  * Add WireGuard driver and required crypto changes from 5.6-rc7 and
+    cryptodev-2.6, thanks to Jason A. Donenfeld (Closes: #953569)
+  * drivers/net: Enable WIREGUARD as module
+  * debian/control: Use my debian.org email in Uploaders field
+  * debian/certs: Rename Romain Perier's certificate to match email address
+  * security/integrity/platform_certs: Rebase db-mok-keyring patch set for
+    5.5.9
+  * [x86] Enable X86_UMIP (previously configured as X86_INTEL_UMIP)
+  * Set ABI to 1
+  * [amd64] Enable Intel GVT-g (except cloud-amd64) (Closes: #954088):
+    - vfio: Enable VFIO_MDEV, VFIO_MDEV_DEVICE as modules
+    - i915: Enable DRM_I915_GVT; enable DRM_I915_GVT_KVMGT as module
+  * drivers/net/wireless: Enable MT76x0E as module (Closes: #953683)
+  * bcmgenet: Backport ACPI support, supporting Raspberry Pi 4
+    (Closes: #950578)
+
+  [ Aurelien Jarno ]
+  * [riscv64] Enable SECCOMP.
+
+  [ Romain Perier ]
+  * [arm64] Enable BCMGENET
+  * [arm64] Fix CONFIG_INFINIBAND_HNS_HIP06 and CONFIG_INFINIBAND_HNS_HIP08
+    from tristate to boolean
+  * debian/certs: Add my own certificate for wireless-regdb
+  * debian/patches/debian/wireless-add-debian-wireless-regdb-certificates.patch:
+    Add the hexdump of my certificate to this patch, so the kernel can
+    directly load the regulatory db and trust it if have I signed it.
+
+  [ Noah Meyerhans ]
+  * [arm64] Enable KVM_ARM_HOST and KVM_ARM_PMU
+  * [arm64] Enable CONFIG_ARM64_ERRATUM_1418040
+  * [arm64/cloud-arm64] Introduce cloud build flavour
+  * [cloud] random: Enable RANDOM_TRUST_BOOTLOADER
+
+  [ Mark Pearson ]
+  * [amd64] ASoC: Enable SND_SOC_SOF_COMETLAKE_LP_SUPPORT,
+    SND_SOC_SOF_COMETLAKE_H_SUPPORT
+
+  [ Christian Barcenas ]
+  * lockdown: honor LOCK_DOWN_IN_EFI_SECURE_BOOT=n (Closes: #945604)
+
+  [ Salvatore Bonaccorso ]
+  * libcpupower: Lower back soname version to 1 and add new
+    cpufreq_{get,put}_boost_frequencies methods
+
+  [ Joel Stanley ]
+  * [armhf] Enable ASPEED AST2600 SoC family. This includes all ASPEED symbols
+    for the AST2600 and FTGMAC100, the network device used by this SoC. The
+    SoC has 5 UARTs so CONFIG_SERIAL_8250_NR_UARTS is bumped to 5 from 4
+    in order to correctly register UART5, the boot console.
+
+  [ Petr Stastny ]
+  * [x86] i2c: Enable I2C_AMD_MP2 as module (Closes: #955004)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Add patch from next-20200325 to enable device-tree for
+    Pinebook Pro.
+
+ -- Ben Hutchings <benh@debian.org>  Mon, 30 Mar 2020 03:03:47 +0100
+
+linux (5.5~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Romain Perier ]
+  * [rt] Disable until it is updated for 5.5 or later
+  * [mips*] Remove obsolete patch
+    MIPS-Loongson-3-Add-Loongson-LS3A-RS780E-1-way-machi.patch
+  * Retrieve the new aufs5 patches from the upstream tree, with an update in
+    aufs5-standalone.patch (see its header).
+  * Refreshed patches:
+    - debian/dfsg/vs6624-disable.patch
+    - bugfix/all/firmware_class-log-every-success-and-failure.patch
+    - bugfix/all/
+      radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
+    - bugfix/all/disable-some-marvell-phys.patch
+    - features/all/
+      security-perf-allow-further-restriction-of-perf_event_open.patch
+    - features/x86/x86-make-x32-syscall-support-conditional.patch
+    - bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
+    - features/all/lockdown/
+      efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch
+
+  [ Ben Hutchings ]
+  * udeb: Add f2fs-modules package
+  * linux-kbuild: Stop building pnmtologo
+  * linux-kbuild: Add new file to Makefile for kconfig
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 06 Jan 2020 04:26:45 +0000
+
+linux (5.4.19-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.14
+    - [arm64,armhf] soc: amlogic: meson-ee-pwrc: propagate PD provider
+      registration errors
+    - [arm64,armhf] soc: amlogic: meson-ee-pwrc: propagate errors from
+      pm_genpd_init()
+    - [armhf] bus: ti-sysc: Fix iterating over clocks
+    - clk: Don't try to enable critical clocks if prepare failed
+    - [armhf] ASoC: stm32: sai: fix possible circular locking
+    - [armhf] ASoC: stm32: dfsdm: fix 16 bits record
+    - [armhf] OMAP2+: Fix ti_sysc_find_one_clockdomain to check for
+      to_clk_hw_omap
+    - [armhf] dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection
+    - [x86] ASoC: Intel: bytcht_es8316: Fix Irbis NB41 netbook quirk
+    - ALSA: dice: fix fallback from protocol extension into limited
+      functionality
+    - ALSA: seq: Fix racy access for queue timer in proc read
+    - ALSA: firewire-tascam: fix corruption due to spin lock without
+      restoration in SoftIRQ context
+    - ALSA: usb-audio: fix sync-ep altsetting sanity check
+    - [arm64] dts: allwinner: a64: olinuxino: Fix SDIO supply regulator
+    - [arm64] dts: allwinner: a64: olinuxino: Fix eMMC supply regulator
+    - [armhf] clk: sunxi-ng: r40: Allow setting parent rate for external clock
+      outputs
+    - block: fix an integer overflow in logical block size
+    - fuse: fix fuse_send_readpages() in the syncronous read case
+    - io_uring: only allow submit from owning task
+    - [armhf] dts: am571x-idk: Fix gpios property to have the correct gpio
+      number
+    - [armel] davinci: select CONFIG_RESET_CONTROLLER
+    - perf: Correctly handle failed perf_get_aux_event()
+    - iio: buffer: align the size of scan bytes to size of the largest element
+    - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
+    - USB: serial: option: Add support for Quectel RM500Q
+    - USB: serial: opticon: fix control-message timeouts
+    - USB: serial: option: add support for Quectel RM500Q in QDL mode
+    - USB: serial: suppress driver bind attributes
+    - USB: serial: ch341: handle unbound port at reset_resume
+    - USB: serial: io_edgeport: handle unbound ports on URB completion
+    - USB: serial: io_edgeport: add missing active-port sanity check
+    - USB: serial: keyspan: handle unbound ports
+    - USB: serial: quatech2: handle unbound ports
+    - [x86] staging: comedi: ni_routes: fix null dereference in
+      ni_find_route_source()
+    - [x86] staging: comedi: ni_routes: allow partial routing information
+    - [x86] scsi: fnic: fix invalid stack access
+    - scsi: mptfusion: Fix double fetch bug in ioctl
+    - ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
+    - [armhf] mtd: rawnand: gpmi: Fix suspend/resume problem
+    - [armhf] mtd: rawnand: gpmi: Restore nfc timing setup after
+      suspend/resume
+    - usb: core: hub: Improved device recognition on remote wakeup
+    - cpu/SMT: Fix x86 link error without CONFIG_SYSFS
+    - [x86] CPU/AMD: Ensure clearing of SME/SEV features is maintained
+    - locking/rwsem: Fix kernel crash when spinning on RWSEM_OWNER_UNKNOWN
+    - [x86] perf/x86/intel/uncore: Fix missing marker for
+      snr_uncore_imc_freerunning_events
+    - [amd64] x86/efistub: Disable paging at mixed mode entry
+    - [s390x] zcrypt: Fix CCA cipher key gen with clear key value function
+    - [x86] scsi: storvsc: Correctly set number of hardware queues for IDE
+      disk
+    - mtd: spi-nor: Fix selection of 4-byte addressing opcodes on Spansion
+    - [x86] efi/earlycon: Fix write-combine mapping on x86
+    - [s390x] setup: Fix secure ipl message
+    - [armhf] clk: samsung: exynos5420: Keep top G3D clocks enabled
+    - perf hists: Fix variable name's inconsistency in hists__for_each() macro
+    - locking/lockdep: Fix buffer overrun problem in stack_trace[]
+    - perf report: Fix incorrectly added dimensions as switch perf data file
+    - mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD
+      alignment
+    - mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD
+      alignment
+    - mm: memcg/slab: fix percpu slab vmstats flushing
+    - mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is
+      valid
+    - mm, debug_pagealloc: don't rely on static keys too early
+    - btrfs: rework arguments of btrfs_unlink_subvol
+    - btrfs: fix invalid removal of root ref
+    - btrfs: do not delete mismatched root refs
+    - btrfs: relocation: fix reloc_root lifespan and access
+    - btrfs: fix memory leak in qgroup accounting
+    - btrfs: check rw_devices, not num_devices for balance
+    - Btrfs: always copy scrub arguments back to user space
+    - mm/memory_hotplug: don't free usage map when removing a re-added early
+      section
+    - mm/page-writeback.c: avoid potential division by zero in
+      wb_min_max_ratio()
+    - mm: khugepaged: add trace status description for SCAN_PAGE_HAS_PRIVATE
+    - [armhf] dts: imx6sx-sdb: Remove incorrect power supply assignment
+    - [armhf] dts: imx6sl-evk: Remove incorrect power supply assignment
+    - [armhf] dts: imx6sll-evk: Remove incorrect power supply assignment
+    - [armhf] dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL
+    - [arm64,armhf] net: stmmac: 16KB buffer must be 16 byte aligned
+    - [arm64,armhf] net: stmmac: Enable 16KB buffer size
+    - [arm*] reset: Fix {of,devm}_reset_control_array_get kerneldoc return
+      types
+    - tipc: fix potential hanging after b/rcast changing
+    - tipc: fix retrans failure due to wrong destination
+    - block: Fix the type of 'sts' in bsg_queue_rq()
+    - bpf: Fix incorrect verifier simulation of ARSH under ALU32
+    - bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop
+    - bpf: Sockmap, ensure sock lock held during tear down
+    - bpf: Sockmap/tls, push write_space updates through ulp updates
+    - bpf: Sockmap, skmsg helper overestimates push, pull, and pop bounds
+    - bpf: Sockmap/tls, msg_push_data may leave end mark in place
+    - bpf: Sockmap/tls, tls_sw can create a plaintext buf > encrypt buf
+    - bpf: Sockmap/tls, skmsg can have wrapped skmsg that needs extra chaining
+    - bpf: Sockmap/tls, fix pop data with SK_DROP return code
+    - [arm64,armhf] i2c: tegra: Fix suspending in active runtime PM state
+    - [arm64,armhf] i2c: tegra: Properly disable runtime PM on driver's probe
+      error
+    - cfg80211: fix deadlocks in autodisconnect work
+    - cfg80211: fix memory leak in nl80211_probe_mesh_link
+    - cfg80211: fix memory leak in cfg80211_cqm_rssi_update
+    - cfg80211: fix page refcount issue in A-MSDU decap
+    - bpf/sockmap: Read psock ingress_msg before sk_receive_queue
+    - netfilter: fix a use-after-free in mtype_destroy()
+    - netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
+    - netfilter: nat: fix ICMP header corruption on ICMP errors
+    - netfilter: nft_tunnel: fix null-attribute check
+    - netfilter: nft_tunnel: ERSPAN_VERSION must not be null
+    - netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
+    - netfilter: nf_tables: store transaction list locally while requesting
+      module
+    - netfilter: nf_tables: fix flowtable list del corruption
+    - NFC: pn533: fix bulk-message timeout
+    - net: bpf: Don't leak time wait and request sockets
+    - bpftool: Fix printing incorrect pointer in btf_dump_ptr
+    - batman-adv: Fix DAT candidate selection on little endian systems
+    - macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
+    - [x86] hv_netvsc: Fix memory leak when removing rndis device
+    - net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key()
+    - [arm64] net: hns3: pad the short frame before sending to the hardware
+    - [arm64] net: hns: fix soft lockup when there is not enough memory
+    - net: phy: dp83867: Set FORCE_LINK_GOOD to default after reset
+    - net/sched: act_ife: initalize ife->metalist earlier
+    - net: usb: lan78xx: limit size of local TSO packets
+    - ptp: free ptp device pin descriptors properly
+    - r8152: add missing endpoint sanity check
+    - tcp: fix marked lost packets not being retransmitted
+    - bnxt_en: Fix NTUPLE firmware command failures.
+    - bnxt_en: Fix ipv6 RFS filter matching logic.
+    - bnxt_en: Do not treat DSN (Digital Serial Number) read failure as fatal.
+    - net: sched: act_ctinfo: fix memory leak
+    - [armhf] net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec
+    - i40e: prevent memory leak in i40e_setup_macvlans (CVE-2019-19043)
+    - drm/amdgpu: allow direct upload save restore list for raven2
+    - [arm64,armhf] net: stmmac: tc: Do not setup flower filtering if RSS is
+      enabled
+    - devlink: Wait longer before warning about unset port type
+    - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
+    - tcp: refine rule to allow EPOLLOUT generation under mem pressure
+    - [arm64] dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node
+    - cfg80211: check for set_wiphy_params
+    - tick/sched: Annotate lockless access to last_jiffies_update
+    - [armhf] dts: imx6ul-kontron-n6310-s: Disable the snvs-poweroff driver
+    - mtd: cfi_cmdset_0002: only check errors when ready in
+      cfi_check_err_status()
+    - mtd: cfi_cmdset_0002: fix delayed error detection on HyperFlash
+    - reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr
+    - scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
+    - [arm64] scsi: hisi_sas: Don't create debugfs dump folder twice
+    - [arm64] scsi: hisi_sas: Set the BIST init value before enabling BIST
+    - scsi: qla4xxx: fix double free bug
+    - scsi: bnx2i: fix potential use after free
+    - scsi: target: core: Fix a pr_debug() argument
+    - scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer
+      dereferences
+    - [arm64] scsi: hisi_sas: Return directly if init hardware failed
+    - scsi: scsi_transport_sas: Fix memory leak when removing devices
+    - scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI
+    - scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan
+    - scsi: core: scsi_trace: Use get_unaligned_be*()
+    - scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq
+    - scsi: lpfc: Fix hdwq sgl locks and irq handling
+    - scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq()
+    - rtw88: fix potential read outside array boundary
+    - perf probe: Fix wrong address verification
+    - perf script: Allow --time with --reltime
+    - perf script: Fix --reltime with --time
+    - scsi: lpfc: use hdwq assigned cpu for allocation
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.15
+    - [x86] drm/i915: Fix pid leak with banned clients
+    - libbpf: Fix compatibility for kernels without need_wakeup
+    - libbpf: Fix memory leak/double free issue
+    - libbpf: Fix potential overflow issue
+    - libbpf: Fix another potential overflow issue in bpf_prog_linfo
+    - libbpf: Make btf__resolve_size logic always check size error condition
+    - bpf: Force .BTF section start to zero when dumping from vmlinux
+    - [armhf] OMAP2+: Add missing put_device() call in omapdss_init_of()
+    - xfs: Sanity check flags of Q_XQUOTARM call
+    - [armhf] i2c: stm32f7: rework slave_id allocation
+    - [armhf] i2c: i2c-stm32f7: fix 10-bits check in slave free id search loop
+    - [x86] mfd: intel-lpss: Add default I2C device properties for Gemini Lake
+    - SUNRPC: Fix svcauth_gss_proxy_init()
+    - SUNRPC: Fix backchannel latency metrics
+    - [powerpc*] security: Fix debugfs data leak on 32-bit
+    - [powerpc*] pseries: Enable support for ibm,drc-info property
+    - tipc: reduce sensitive to retransmit failures
+    - tipc: update mon's self addr when node addr generated
+    - tipc: fix potential memory leak in __tipc_sendmsg()
+    - tipc: fix wrong socket reference counter after tipc_sk_timeout() returns
+    - tipc: fix wrong timeout input for tipc_wait_for_cond()
+    - [arm64,armhf] net/mlx5e: Fix free peer_flow when refcount is 0
+    - net: phy: broadcom: Fix RGMII delays configuration for BCM54210E
+    - [armhf] phy: ti: gmii-sel: fix mac tx internal delay for rgmii-rxid
+    - mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
+    - ice: fix stack leakage
+    - [s390x] pkey: fix memory leak within _copy_apqns_from_user()
+    - nfsd: depend on CRYPTO_MD5 for legacy client tracking
+    - [armhf] crypto: sun4i-ss - fix big endian issues
+    - perf map: No need to adjust the long name of modules
+    - [arm64,armhf] soc/tegra: pmc: Fix crashes for hierarchical interrupts
+    - watchdog: sprd: Fix the incorrect pointer getting from driver data
+    - ipmi: Fix memory leak in __ipmi_bmc_register (CVE-2019-19046)
+    - sched/core: Further clarify sched_class::set_next_task()
+    - gpiolib: No need to call gpiochip_remove_pin_ranges() twice
+    - rtw88: fix beaconing mode rsvd_page memory violation issue
+    - rtw88: fix error handling when setup efuse info
+    - [arm64,armhf] drm/panfrost: Add missing check for pfdev->regulator
+    - drm/amdgpu: remove excess function parameter description
+    - [armhf] hwrng: omap3-rom - Fix missing clock by probing with device tree
+    - [arm64,armhf] drm/rockchip: Round up _before_ giving to the clock
+      framework
+    - software node: Get reference to parent swnode in get_parent op
+    - [arm64] net: netsec: Correct dma sync for XDP_TX frames
+    - ACPI: platform: Unregister stale platform devices
+    - [arm64,armhf] pwm: sun4i: Fix incorrect calculation of duty_cycle/period
+    - libbpf: Don't use kernel-side u32 type in xsk.c
+    - scsi: ufs: delete redundant function ufshcd_def_desc_sizes()
+    - net: openvswitch: don't unlock mutex when changing the user_features
+      fails
+    - [x86] hv_netvsc: flag software created hash value
+    - rt2800: remove errornous duplicate condition
+    - net: neigh: use long type to store jiffies delta
+    - packet: fix data-race in fanout_flow_is_huge()
+    - [armhf] i2c: stm32f7: report dma error during probe
+    - [arm64] tee: optee: Fix dynamic shm pool allocations
+    - [arm64] tee: optee: fix device enumeration error handling
+    - workqueue: Add RCU annotation for pwq list walk
+    - SUNRPC: Fix another issue with MIC buffer space
+    - sched/cpufreq: Move the cfs_rq_util_change() call to
+      cpufreq_update_util()
+    - mt76: mt76u: rely on usb_interface instead of usb_dev
+    - dma-direct: don't check swiotlb=force in dma_direct_map_resource
+    - afs: Remove set but not used variables 'before', 'after'
+    - [armhf] dmaengine: ti: edma: fix missed failure handling
+    - drm/radeon: fix bad DMA from INTERRUPT_CNTL2
+    - xdp: Fix cleanup on map free for devmap_hash map type
+    - block: fix memleak of bio integrity data
+    - [s390x] qeth: fix dangling IO buffers after halt/clear
+    - net-sysfs: Call dev_hold always in netdev_queue_add_kobject
+    - [arm64,armhf] phy/rockchip: inno-hdmi: round clock rate down to closest
+      1000 Hz
+    - [arm64] optee: Fix multi page dynamic shm pool alloc
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.16
+    - can, slip: Protect tty->disc_data in write_wakeup and close with RCU
+    - firestream: fix memory leaks
+    - gtp: make sure only SOCK_DGRAM UDP sockets are accepted
+    - ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions
+    - net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM
+    - net: ip6_gre: fix moving ip6gre between namespaces
+    - net, ip6_tunnel: fix namespaces move
+    - net, ip_tunnel: fix namespaces move
+    - net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
+    - net_sched: fix datalen for ematch
+    - net_sched: use validated TCA_KIND attribute in tc_new_tfilter()
+    - net-sysfs: Fix reference count leak
+    - net: usb: lan78xx: Add .ndo_features_check
+    - Revert "udp: do rmem bulk free even if the rx sk queue is empty"
+    - tcp_bbr: improve arithmetic division in bbr_update_bw()
+    - tcp: do not leave dangling pointers in tp->highest_sack
+    - tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
+    - airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE
+    - airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE
+    - fou: Fix IPv6 netlink policy
+    - net: Fix packet reordering caused by GRO and listified RX cooperation
+    - [arm64,armhf] net/mlx5: Fix lowest FDB pool size
+    - [arm64,armhf] net/mlx5: Update the list of the PCI supported devices
+    - [arm64,armhf] net/mlx5: DR, Enable counter on non-fwd-dest objects
+    - [arm64,armhf] net/mlx5: E-Switch, Prevent ingress rate configuration of
+      uplink rep
+    - [arm64,armhf] net/mlx5: DR, use non preemptible call to get the current
+      cpu number
+    - ipv4: Detect rollover in specific fib table dump
+    - Revert "io_uring: only allow submit from owning task"
+    - afs: Fix characters allowed into cell names
+    - hwmon: (adt7475) Make volt2reg return same reg as reg2volt input
+    - hwmon: (core) Do not use device managed functions for memory allocations
+    - ceph: hold extra reference to r_parent over life of request
+    - PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken
+    - [arm64,armhf] drm/panfrost: Add the panfrost_gem_mapping concept
+    - [x86] drm/i915: Align engine->uabi_class/instance with i915_drm.h
+    - PM: hibernate: fix crashes with init_on_free=1
+    - tracing: trigger: Replace unneeded RCU-list traversals
+    - tracing/uprobe: Fix double perf_event linking on multiprobe uprobe
+    - tracing: Do not set trace clock if tracefs lockdown is in effect
+    - tracing: Fix histogram code when expression has same var as value
+    - [powerpc*] xive: Discard ESB load value when interrupt is invalid
+    - Revert "iwlwifi: mvm: fix scan config command size"
+    - iwlwifi: mvm: don't send the IWL_MVM_RXQ_NSSN_SYNC notif to Rx queues
+    - XArray: Fix infinite loop with entry at ULONG_MAX
+    - XArray: Fix xa_find_after with multi-index entries
+    - XArray: Fix xas_find returning too many entries
+    - [x86] pinctrl: sunrisepoint: Add missing Interrupt Status register
+      offset
+    - [amd64] iommu/vt-d: Call __dmar_remove_one_dev_info with valid pointer
+    - Input: keyspan-remote - fix control-message timeouts
+    - [x86] Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus
+      transfers"
+    - [arm64,armhf] mmc: tegra: fix SDR50 tuning override
+    - mmc: sdhci: fix minimum clock rate for v3 controller
+    - Input: sur40 - fix interface sanity checks
+    - Input: gtco - fix endpoint sanity check
+    - Input: aiptek - fix endpoint sanity check
+    - Input: pegasus_notetaker - fix endpoint sanity check
+    - Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register
+    - netfilter: nft_osf: add missing check for DREG attribute
+    - [amd64] iommu/amd: Fix IOMMU perf counter clobbering during init
+    - readdir: make user_access_begin() use the real access range
+    - leds: gpio: Fix uninitialized gpio label for fwnode based probe
+    - hwmon: (nct7802) Fix voltage limits to wrong registers
+    - hwmon: (nct7802) Fix non-working alarm on voltages
+    - scsi: RDMA/isert: Fix a recently introduced regression related to logout
+    - tracing: xen: Ordered comparison of function pointers
+    - iwlwifi: mvm: fix SKB leak on invalid queue
+    - iwlwifi: mvm: fix potential SKB leak on TXQ TX
+    - [x86] drm/i915/userptr: fix size calculation
+    - xfrm: support output_mark for offload ESP packets
+    - net, sk_msg: Don't check if sock is locked when tearing down psock
+    - do_last(): fetch directory ->i_mode and ->i_uid before it's too late
+      (CVE-2020-8428)
+    - readdir: be more conservative with directory entry names
+    - libertas: Fix two buffer overflows at parsing bss descriptor
+      (CVE-2019-14896 CVE-2019-14897)
+    - media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT
+    - netfilter: ipset: use bitmap infrastructure completely
+    - netfilter: nf_tables: add __nft_chain_type_get()
+    - netfilter: nf_tables: autoload modules from the abort path
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.17
+    - Bluetooth: btusb: fix non-atomic allocation in completion handler
+    - orinoco_usb: fix interface sanity check
+    - rsi_91x_usb: fix interface sanity check
+    - usb: dwc3: pci: add ID for the Intel Comet Lake -V variant
+    - [arm64,armhf] usb: host: xhci-tegra: set MODULE_FIRMWARE for tegra186
+    - USB: serial: ir-usb: add missing endpoint sanity check
+    - USB: serial: ir-usb: fix link-speed handling
+    - USB: serial: ir-usb: fix IrLAP framing
+    - [arm64,armhf] usb: dwc3: turn off VBUS when leaving host mode
+    - [x86] usb: typec: fusb302: fix "op-sink-microwatt" default that was in
+      mW
+    - [x86] staging: vt6656: correct packet types for CTS protect, mode.
+    - [x86] staging: vt6656: use NULLFUCTION stack on mac80211
+    - [x86] staging: vt6656: Fix false Tx excessive retries reporting.
+    - [arm64,armel] serial: 8250_bcm2835aux: Fix line mismatch on driver
+      unbind
+    - [armhf] serial: imx: fix a race condition in receive path
+    - debugfs: Return -EPERM when locked down
+    - component: do not dereference opaque pointer in debugfs
+    - [arm*] binder: fix log spam for existing debugfs file creation.
+    - [x86] mei: me: add comet point (lake) H device ids
+    - crypto: chelsio - fix writing tfm flags to wrong place
+    - CIFS: Fix task struct use-after-free on reconnect
+    - cifs: set correct max-buffer-size for smb2_ioctl_init()
+    - cifs: Fix memory allocation in __smb2_handle_cancelled_cmd()
+    - ath9k: fix storage endpoint lookup
+    - brcmfmac: fix interface sanity check
+    - rtl8xxxu: fix interface sanity check
+    - zd1211rw: fix storage endpoint lookup
+    - net_sched: ematch: reject invalid TCF_EM_SIMPLE
+    - net_sched: fix ops->bind_class() implementations
+    - net_sched: walk through all child classes in tc_bind_tclass()
+    - [arm64] net: socionext: fix possible user-after-free in
+      netsec_process_rx
+    - [arm64] net: socionext: fix xdp_result initialization in
+      netsec_process_rx
+    - udp: segment looped gso packets correctly
+    - net: include struct nhmsg size in nh nlmsg size
+    - rxrpc: Fix use-after-free in rxrpc_receive_data()
+    - HID: multitouch: Add LG MELF0410 I2C touchscreen support
+    - HID: Add quirk for Xin-Mo Dual Controller
+    - HID: ite: Add USB id match for Acer SW5-012 keyboard dock
+    - HID: asus: Ignore Asus vendor-page usage-code 0xff events
+    - HID: Add quirk for incorrect input length on Lenovo Y720
+    - HID: intel-ish-hid: ipc: add CMP device id
+    - HID: wacom: Recognize new MobileStudio Pro PID
+    - [x86] ASoC: SOF: fix fault at driver unload after failed probe
+    - [x86] ASoC: SOF: Intel: hda: hda-dai: fix oops on hda_link .hw_free
+    - drivers/hid/hid-multitouch.c: fix a possible null pointer access.
+    - phy: qcom-qmp: Increase PHY ready timeout
+    - [x86] ASoC: topology: Prevent use-after-free in
+      snd_soc_get_pcm_runtime()
+    - HID: intel-ish-hid: ipc: Add Tiger Lake PCI device ID
+    - [arm64] watchdog: max77620_wdt: fix potential build errors
+    - [armel,armhf] watchdog: orion: fix platform_get_irq() complaints
+    - drivers/net/b44: Change to non-atomic bit operations on pwol_mask
+    - [i386] net: wan: sdla: Fix cast from pointer to integer of different
+      size
+    - [arm64] gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP
+    - [arm64] iommu/dma: fix variable 'cookie' set but not used
+    - [arm64,armhf] stmmac: debugfs entry name is not be changed when udev
+      rename device name.
+    - atm: eni: fix uninitialized variable warning
+    - HID: steam: Fix input device disappearing
+    - [x86] ASoC: Intel: cht_bsw_rt5645: Add quirk for boards using
+      pmc_plt_clk_0
+    - drm/amdgpu/SRIOV: add navi12 pci id for SRIOV (v2)
+    - libbpf: Fix BTF-defined map's __type macro handling of arrays
+    - [x86] platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx
+    - PCI: Add DMA alias quirk for Intel VCA NTB
+    - media: dvbsky: add support for eyeTV Geniatech T2 lite
+    - [armhf] bus: ti-sysc: Handle mstandby quirk and use it for musb
+    - [armhf] bus: ti-sysc: Use swsup quirks also for am335x musb
+    - [amd64,armhf] spi: pxa2xx: Add support for Intel Comet Lake-H
+    - [amd64] iommu/amd: Support multiple PCI DMA aliases in device table
+    - [amd64] iommu/amd: Support multiple PCI DMA aliases in IRQ Remapping
+    - perf/imx_ddr: Add enhanced AXI ID filter support
+    - [x86] mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs
+    - mmc: sdhci-pci: Quirk for AMD SDHC Device 0x7906
+    - mmc: sdhci-pci: Add support for Intel JSL
+    - [armhf] bus: ti-sysc: Add module enable quirk for audio AESS
+    - usb-storage: Disable UAS on JMicron SATA enclosure
+    - ALSA: hda/realtek - Move some alc236 pintbls to fallback table
+    - Bluetooth: Allow combination of BDADDR_PROPERTY and INVALID_BDADDR
+      quirks
+    - Bluetooth: btbcm: Use the BDADDR_PROPERTY quirk
+    - [armhf] bus: ti-sysc: Fix missing force mstandby quirk handling
+    - rsi: fix use-after-free on failed probe and unbind
+    - rsi: fix use-after-free on probe errors
+    - rsi: fix memory leak on failed URB submission
+    - rsi: fix non-atomic allocation in completion handler
+    - crypto: af_alg - Use bh_lock_sock in sk_destruct
+    - [powerpc*] crypto: vmx - reject xts inputs that are too short
+    - crypto: pcrypt - Fix user-after-free on module unload
+    - [arm64] KVM: Write arch.mdcr_el2 changes since last vcpu_load on VHE
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.18
+    - vfs: fix do_last() regression
+    - cifs: fix soft mounts hanging in the reconnect code
+    - e1000e: Drop unnecessary __E1000_DOWN bit twiddling
+    - e1000e: Revert "e1000e: Make watchdog use delayed work"
+    - gfs2: Another gfs2_find_jhead fix
+    - perf c2c: Fix return type for histogram sorting comparision functions
+    - PM / devfreq: Add new name attribute for sysfs
+    - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
+    - reiserfs: Fix memory leak of journal device string
+    - media: digitv: don't continue if remote control state can't be read
+    - media: af9005: uninitialized variable printked
+    - media: vp7045: do not read uninitialized values if usb transfer fails
+    - media: gspca: zero usb_buf
+    - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
+    - tomoyo: Use atomic_t for statistics counter
+    - ttyprintk: fix a potential deadlock in interrupt context issue
+    - Bluetooth: Fix race condition in hci_release_sock()
+    - cgroup: Prevent double killing of css when enabling threaded cgroup
+    - [armhf] clk: sunxi-ng: v3s: Fix incorrect number of hw_clks.
+    - [arm64] dts: meson-sm1-sei610: add gpio bluetooth interrupt
+    - [armhf] dts: sun8i: a83t: Correct USB3503 GPIOs polarity
+    - [armhf] dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint
+      dt nodes
+    - rseq: Unregister rseq for clone CLONE_VM
+    - [arm64,armhf] clk: sunxi-ng: sun8i-r: Fix divider on APB0 clock
+    - [arm64] clk: sunxi-ng: h6-r: Fix AR100/R_APB2 parent order
+    - mac80211: mesh: restrict airtime metric to peered established plinks
+    - [armhf] clk: mmp2: Fix the order of timer mux parents
+    - ASoC: rt5640: Fix NULL dereference on module unload
+    - [s390x] zcrypt: move ap device reset from bus to driver code
+    - i40e: Fix virtchnl_queue_select bitmap validation
+    - ixgbevf: Remove limit of 10 entries for unicast filter list
+    - ixgbe: Fix calculation of queue with VFs and flow director on interface
+      flap
+    - igb: Fix SGMII SFP module discovery for 100FX/LX.
+    - iavf: remove current MAC address filter on VF reset
+    - [x86] platform/x86: GPD pocket fan: Allow somewhat lower/higher
+      temperature limits
+    - [x86] platform/x86: intel_pmc_core: update Comet Lake platform driver
+    - [x86] ASoC: SOF: Intel: fix HDA codec driver probe with multiple
+      controllers
+    - [x86] ASoC: hdac_hda: Fix error in driver removal after failed probe
+    - qmi_wwan: Add support for Quectel RM500Q
+    - [hppa/parisc] Use proper printk format for resource_size_t
+    - wireless: fix enabling channel 12 for custom regulatory domain
+    - cfg80211: Fix radar event during another phy CAC
+    - mac80211: Fix TKIP replay protection immediately after key setup
+    - [x86] perf/x86/intel/uncore: Add PCI ID of IMC for Xeon E3 V5 Family
+    - [x86] perf/x86/intel/uncore: Remove PCIe3 unit for SNR
+    - XArray: Fix xas_pause at ULONG_MAX
+    - iwlwifi: pcie: allocate smaller dev_cmd for TX headers
+    - iwlwifi: Don't ignore the cap field upon mcc update
+    - iwlwifi: dbg: force stop the debug monitor HW
+    - Input: evdev - convert kzalloc()/vzalloc() to kvzalloc()
+    - vti[6]: fix packet tx through bpf_redirect()
+    - xfrm interface: fix packet tx through bpf_redirect()
+    - xfrm: interface: do not confirm neighbor when do pmtu update
+    - [x86] scsi: fnic: do not queue commands during fwreset
+    - [armhf] 8955/1: virt: Relax arch timer version check during early boot
+    - r8152: get default setting of WOL before initializing
+    - r8152: disable U2P3 for RTL8153B
+    - r8152: Disable PLA MCU clock speed down
+    - r8152: disable test IO for RTL8153B
+    - r8152: avoid the MCU to clear the lanwake
+    - r8152: disable DelayPhyPwrChg
+    - qlcnic: Fix CPU soft lockup while collecting firmware dump
+    - seq_tab_next() should increase position index
+    - l2t_seq_next should increase position index
+    - netfilter: conntrack: sctp: use distinct states for new SCTP connections
+    - netfilter: nf_tables_offload: fix check the chain offload flag
+    - net: Fix skb->csum update in inet_proto_csum_replace16().
+    - btrfs: do not zero f_bavail if we have available space
+    - flow_dissector: Fix to use new variables for port ranges in bpf hook
+    - dm thin: fix use-after-free in metadata_pre_commit_callback
+    - perf report: Fix no libunwind compiled warning break s390 issue
+    - mm/migrate.c: also overwrite error when it is bigger than zero
+    - [x86] ASoC: topology: fix soc_tplg_fe_link_create() - link->dobj
+      initialization order
+    - Revert "rsi: fix potential null dereference in rsi_probe()"
+    - tracing/uprobe: Fix to make trace_uprobe_filter alignment safe
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.19
+    - bnxt_en: Move devlink_register before registering netdev
+    - gtp: use __GFP_NOWARN to avoid memalloc warning
+    - l2tp: Allow duplicate session creation with UDP
+    - net_sched: fix an OOB access in cls_tcindex
+    - [arm64,armhf] net: stmmac: Delete txtimer in suspend()
+    - bnxt_en: Fix TC queue mapping.
+    - rxrpc: Fix use-after-free in rxrpc_put_local()
+    - rxrpc: Fix insufficient receive notification generation
+    - rxrpc: Fix missing active use pinning of rxrpc_local object
+    - rxrpc: Fix NULL pointer deref due to call->conn being cleared on
+      disconnect
+    - tcp: clear tp->total_retrans in tcp_disconnect()
+    - tcp: clear tp->delivered in tcp_disconnect()
+    - tcp: clear tp->data_segs{in|out} in tcp_disconnect()
+    - tcp: clear tp->segs_{in|out} in tcp_disconnect()
+    - bnxt_en: Fix logic that disables Bus Master during firmware reset.
+    - media: uvcvideo: Avoid cyclic entity chains due to malformed USB
+      descriptors
+    - netfilter: ipset: fix suspicious RCU usage in find_set_and_id
+    - ipc/msg.c: consolidate all xxxctl_down() functions
+    - tracing/kprobes: Have uname use __get_str() in print_fmt
+    - tracing: Fix sched switch start/stop refcount racy updates
+    - rcu: Use *_ONCE() to protect lockless ->expmask accesses
+    - rcu: Avoid data-race in rcu_gp_fqs_check_wake()
+    - srcu: Apply *_ONCE() to ->srcu_last_gp_end
+    - rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special()
+    - nvmet: Fix error print message at nvmet_install_queue function
+    - nvmet: Fix controller use after free
+    - Bluetooth: btusb: fix memory leak on fw
+    - Bluetooth: btusb: Disable runtime suspend on Realtek devices
+    - brcmfmac: Fix memory leak in brcmf_usbdev_qinit
+    - [arm64,armhf] usb: dwc3: gadget: Check END_TRANSFER completion
+    - [arm64,armhf] usb: dwc3: gadget: Delay starting transfer
+    - usb: gadget: f_fs: set req->num_sgs as 0 for non-sg transfer
+    - usb: gadget: legacy: set max_speed to super-speed
+    - usb: gadget: f_ncm: Use atomic_t to track in-flight request
+    - usb: gadget: f_ecm: Use atomic_t to track in-flight request
+    - ALSA: usb-audio: Fix endianess in descriptor validation
+    - ALSA: usb-audio: Annotate endianess in Scarlett gen2 quirk
+    - ALSA: dummy: Fix PCM format loop in proc output
+    - memcg: fix a crash in wb_workfn when a device disappears
+    - mm/sparse.c: reset section's mem_map when fully deactivated
+    - mmc: sdhci-pci: Make function amd_sdhci_reset static
+    - utimes: Clamp the timestamps in notify_change()
+    - mm/memory_hotplug: fix remove_memory() lockdep splat
+    - mm: thp: don't need care deferred split queue in memcg charge move path
+    - mm: move_pages: report the number of non-attempted pages
+    - media/v4l2-core: set pages dirty upon releasing DMA buffers
+    - media: v4l2-core: compat: ignore native command codes
+    - media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
+    - irqdomain: Fix a memory leak in irq_domain_push_irq()
+    - [x86] cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
+    - ALSA: hda: Apply aligned MMIO access only conditionally
+    - ALSA: hda: Add Clevo W65_67SB the power_save blacklist
+    - ALSA: hda: Add JasperLake PCI ID and codec vid
+    - [arm64] acpi: fix DAIF manipulation with pNMI
+    - [arm64] KVM: Correct PSTATE on exception entry
+    - [arm64,armhf] KVM: Correct CPSR on exception entry
+    - [arm64,armhf] KVM: Correct AArch32 SPSR on exception entry
+    - [arm64] KVM: Only sign-extend MMIO up to register width
+    - [s390x] mm: fix dynamic pagetable upgrade for hugetlbfs
+    - [powerpc*] xmon: don't access ASDR in VMs
+    - [powerpc*] pseries: Advance pfn if section is not present in
+      lmb_is_removable()
+    - tracing: Fix now invalid var_ref_vals assumption in trace action
+    - [arm64,armhf] PCI: tegra: Fix return value check of
+      pm_runtime_get_sync()
+    - mmc: spi: Toggle SPI polarity, do not hardcode it
+    - [x86] ACPI: video: Do not export a non working backlight interface on
+      MSI MS-7721 boards
+    - ACPI / battery: Deal with design or full capacity being reported as -1
+    - ACPI / battery: Use design-cap for capacity calculations if full-cap is
+      not available
+    - ACPI / battery: Deal better with neither design nor full capacity not
+      being reported
+    - alarmtimer: Unregister wakeup source when module get fails
+    - fscrypt: don't print name of busy file when removing key
+    - ubifs: don't trigger assertion on invalid no-key filename
+    - ubifs: Fix wrong memory allocation
+    - ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
+    - ubifs: Fix deadlock in concurrent bulk-read and writepage
+    - [x86] ASoC: SOF: core: free trace on errors
+    - [x86] hv_balloon: Balloon up according to request page number
+    - mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
+    - nvmem: core: fix memory abort in cleanup path
+    - crypto: api - Check spawn->alg under lock in crypto_drop_spawn
+    - padata: Remove broken queue flushing
+    - fs: allow deduplication of eof block into the end of the destination
+      file
+    - erofs: fix out-of-bound read for shifted uncompressed block
+    - scsi: megaraid_sas: Do not initiate OCR if controller is not in ready
+      state
+    - scsi: qla2xxx: Fix mtcp dump collection failure
+    - cpupower: Revert library ABI changes from commit ae2917093fb60bdc1ed3e
+    - [arm64,armhf] power: supply: axp20x_ac_power: Fix reporting online
+      status
+    - ovl: fix wrong WARN_ON() in ovl_cache_update_ino()
+    - ovl: fix lseek overflow on 32bit
+    - f2fs: choose hardlimit when softlimit is larger than hardlimit in
+      f2fs_statfs_project()
+    - f2fs: fix miscounted block limit in f2fs_statfs_project()
+    - f2fs: code cleanup for f2fs_statfs_project()
+    - f2fs: fix dcache lookup of !casefolded directories
+    - f2fs: fix race conditions in ->d_compare() and ->d_hash()
+    - PM: core: Fix handling of devices deleted during system-wide resume
+    - cpufreq: Avoid creating excessively large stack frames
+    - [armel,armhf] dma-api: fix max_pfn off-by-one error in __dma_supported()
+    - dm zoned: support zone sizes smaller than 128MiB
+    - dm space map common: fix to ensure new block isn't already in use
+    - dm writecache: fix incorrect flush sequence when doing SSD mode commit
+    - dm crypt: fix GFP flags passed to skcipher_request_alloc()
+    - dm crypt: fix benbi IV constructor crash if used in authenticated mode
+    - dm thin metadata: use pool locking at end of dm_pool_metadata_close
+    - dm: fix potential for q->make_request_fn NULL pointer
+    - scsi: qla2xxx: Fix stuck login session using prli_pend_timer
+    - [x86] ASoC: SOF: Introduce state machine for FW boot
+    - [x86] ASoC: SOF: core: release resources on errors in probe_continue
+    - tracing: Annotate ftrace_graph_hash pointer with __rcu
+    - tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
+    - ftrace: Add comment to why rcu_dereference_sched() is open coded
+    - ftrace: Protect ftrace_graph_hash with ftrace_sync
+    - crypto: pcrypt - Avoid deadlock by using per-instance padata queues
+    - btrfs: fix improper setting of scanned for range cyclic write cache
+      pages
+    - btrfs: Handle another split brain scenario with metadata uuid feature
+    - [riscv64] bpf: Fix broken BPF tail calls
+    - bpf, devmap: Pass lockdep expression to RCU lists
+    - libbpf: Fix realloc usage in bpf_core_find_cands
+    - crypto: api - fix unexpectedly getting generic implementation
+    - [arm64] crypto: hisilicon - Use the offset fields in sqe to avoid need
+      to split scatterlists
+    - [x86] crypto: ccp - set max RSA modulus size for v3 platform devices as
+      well
+    - [arm64] crypto: arm64/ghash-neon - bump priority to 150
+    - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
+    - crypto: api - Fix race condition in crypto_spawn_alg
+    - [powerpc*] futex: Fix incorrect user access blocking
+    - scsi: qla2xxx: Fix unbound NVME response length
+    - NFS: Fix memory leaks and corruption in readdir
+    - NFS: Directory page cache pages need to be locked when read
+    - nfsd: fix filecache lookup
+    - jbd2_seq_info_next should increase position index
+    - ext4: fix deadlock allocating crypto bounce page from mempool
+    - ext4: fix race conditions in ->d_compare() and ->d_hash()
+    - Btrfs: fix missing hole after hole punching and fsync when using
+      NO_HOLES
+    - Btrfs: make deduplication with range including the last block work
+    - Btrfs: fix infinite loop during fsync after rename operations
+    - btrfs: set trans->drity in btrfs_commit_transaction
+    - btrfs: drop log root for dropped roots
+    - Btrfs: fix race between adding and putting tree mod seq elements and
+      nodes
+    - btrfs: flush write bio if we loop in extent_write_cache_pages
+    - btrfs: Correctly handle empty trees in find_first_clear_extent_bit
+    - [armhf] tegra: Enable PLLP bypass during Tegra124 LP1
+    - iwlwifi: don't throw error when trying to remove IGTK
+    - mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
+    - sunrpc: expiry_time should be seconds not timeval
+    - gfs2: fix gfs2_find_jhead that returns uninitialized jhead with seq 0
+    - gfs2: move setting current->backing_dev_info
+    - gfs2: fix O_SYNC write handling
+    - drm/rect: Avoid division by zero
+    - media: iguanair: fix endpoint sanity check
+    - media: rc: ensure lirc is initialized before registering input device
+    - xen/balloon: Support xend-based toolstack take two
+    - watchdog: fix UAF in reboot notifier handling in watchdog core code
+    - bcache: add readahead cache policy options via sysfs interface
+    - eventfd: track eventfd_signal() recursion depth
+    - aio: prevent potential eventfd recursion on poll
+    - [x86] KVM: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
+    - [x86] KVM: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
+    - [x86] KVM: Protect pmu_intel.c from Spectre-v1/L1TF attacks
+    - [x86] KVM: Protect DR-based index computations from Spectre-v1/L1TF
+      attacks
+    - [x86] KVM: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
+    - [x86] KVM: Protect kvm_hv_msr_[get|set]_crash_data() from
+      Spectre-v1/L1TF attacks
+    - [x86] KVM: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks
+    - [x86] KVM: Protect MSR-based index computations in pmu.h from
+      Spectre-v1/L1TF attacks
+    - [x86] KVM: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
+    - [x86] KVM: Protect MSR-based index computations from Spectre-v1/L1TF
+      attacks in x86.c
+    - [x86] KVM: Protect x86_decode_insn from Spectre-v1/L1TF attacks
+    - [x86] KVM: Protect MSR-based index computations in
+      fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks
+    - [x86] KVM: Fix potential put_fpu() w/o load_fpu() on MPX platform
+    - [powerpc*] KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails
+    - [powerpc*] KVM: PPC: Book3S PR: Free shared page if mmu initialization
+      fails
+    - [x86] kvm/svm: PKU not currently supported
+    - [x86] kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
+      (CVE-2019-3016)
+    - [x86] kvm: Introduce kvm_(un)map_gfn() (CVE-2019-3016)
+    - [x86] KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
+      (CVE-2019-3016)
+    - [x86] kvm: Cache gfn to pfn translation (CVE-2019-3016)
+    - [x86] KVM: Clean up host's steal time structure (CVE-2019-3016)
+    - [x86] KVM: VMX: Add non-canonical check on writes to RTIT address MSRs
+    - [x86] KVM: Don't let userspace set host-reserved cr4 bits
+    - [x86] KVM: Free wbinvd_dirty_mask if vCPU creation fails
+    - [x86] KVM: Handle TIF_NEED_FPU_LOAD in kvm_{load,put}_guest_fpu()
+    - [x86] KVM: Ensure guest's FPU state is loaded when accessing for
+      emulation
+    - [x86] KVM: Revert "KVM: X86: Fix fpu state crash in kvm guest"
+    - [s390x] KVM: do not clobber registers during guest reset/store status
+    - ocfs2: fix oops when writing cloned file
+    - mm/page_alloc.c: fix uninitialized memmaps on a partially populated last
+      section
+    - mm/mmu_gather: invalidate TLB correctly on batch allocation failure and
+      flush
+    - [arm64,armhf] clk: tegra: Mark fuse clock as critical
+    - virtio-balloon: initialize all vq callbacks
+    - virtio-pci: check name when counting MSI-X vectors
+    - fix up iter on short count in fuse_direct_io()
+    - broken ping to ipv6 linklocal addresses on debian buster
+    - percpu: Separate decrypted varaibles anytime encryption can be enabled
+    - scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return
+      type
+    - scsi: csiostor: Adjust indentation in csio_device_reset
+    - scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
+    - scsi: ufs: Recheck bkops level if bkops is disabled
+    - mtd: spi-nor: Split mt25qu512a (n25q512a) entry into two
+    - [arm64] phy: qualcomm: Adjust indentation in read_poll_timeout
+    - ext2: Adjust indentation in ext2_fill_super
+    - [arm64] drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
+    - [x86] NFC: pn544: Adjust indentation in pn544_hci_check_presence
+    - ppp: Adjust indentation into ppp_async_input
+    - [armhf] net: smc911x: Adjust indentation in smc911x_phy_configure
+    - net: tulip: Adjust indentation in {dmfe, uli526x}_init_module
+    - IB/mlx5: Fix outstanding_pi index for GSI qps
+    - IB/core: Fix ODP get user pages flow
+    - nfsd: fix delay timer on 32-bit architectures
+    - nfsd: fix jiffies/time_t mixup in LRU list
+    - nfsd: Return the correct number of bytes written to the file
+    - virtio-balloon: Fix memory leak when unloading while hinting is in
+      progress
+    - virtio_balloon: Fix memory leaks on errors in virtballoon_probe()
+    - ubifs: Fix memory leak from c->sup_node
+    - regulator: core: Add regulator_is_equal() helper
+    - [armhf] ASoC: sgtl5000: Fix VDDA and VDDIO comparison
+    - bonding/alb: properly access headers in bond_alb_xmit()
+    - devlink: report 0 after hitting end in region read
+    - [armhf] net: dsa: b53: Always use dev->vlan_enabled in
+      b53_configure_vlan()
+    - [armhf] net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
+    - [arm64,armhf] net: mvneta: move rx_dropped and rx_errors in per-cpu
+      stats
+    - net_sched: fix a resource leak in tcindex_set_parms()
+    - [arm64] net: stmmac: fix a possible endless loop
+    - [arm64,riscv64] net: macb: Remove unnecessary alignment check for TSO
+    - [arm64,riscv64] net: macb: Limit maximum GEM TX length in TSO
+    - ipv6/addrconf: fix potential NULL deref in inet6_set_link_af()
+    - qed: Fix timestamping issue for L2 unicast ptp packets.
+    - drop_monitor: Do not cancel uninitialized work item
+    - net/mlx5: Fix deadlock in fs_core
+    - net/mlx5: Deprecate usage of generic TLS HW capability bit
+    - [x86] ASoC: Intel: skl_hda_dsp_common: Fix global-out-of-bounds bug
+    - [x86] timer: Don't skip PIT setup when APIC is disabled or in legacy
+      mode
+    - btrfs: use bool argument in free_root_pointers()
+    - btrfs: free block groups after free'ing fs trees
+    - drm/dp_mst: Remove VCPI while disabling topology mgr
+    - [x86] KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
+    - [x86] KVM: x86: use CPUID to locate host page table reserved bits
+    - [x86] KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM
+    - [x86] KVM: x86: fix overlap between SPTE_MMIO_MASK and generation
+    - [x86] KVM: nVMX: vmread should not set rflags to specify success in case
+      of #PF
+    - KVM: Use vcpu-specific gva->hva translation when querying host page size
+    - KVM: Play nice with read-only memslots when querying host page size
+    - cifs: fail i/o on soft mounts if sessionsetup errors out
+    - [x86] apic/msi: Plug non-maskable MSI affinity race
+    - clocksource: Prevent double add_timer_on() for watchdog_timer
+    - perf/core: Fix mlock accounting in perf_mmap()
+    - rxrpc: Fix service call disconnection
+
+  [ Aurelien Jarno ]
+  * [mips*/malta] Enable POWER_RESET_PIIX4_POWEROFF.
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.4.13-rt6
+  * [rt] Update to 5.4.13-rt7
+  * [rt] Update to 5.4.17-rt8
+  * [rt] Update to 5.4.17-rt9
+  * Bump ABI to 4.
+  * Revert "cpupower: Revert library ABI changes from commit
+    ae2917093fb60bdc1ed3e"
+
+  [ Ben Hutchings ]
+  * linux-perf: Build with CORESIGHT=1 (thanks to Wookey) (Closes: #924673)
+
+  [ Steve McIntyre ]
+  * [arm64] Include the Hisilicon Hibmc drm driver in fb-modules
+    Closes: #944546)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 13 Feb 2020 06:14:49 +0100
+
+linux (5.4.13-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.9
+    - nvme_fc: add module to ops template to allow module references
+    - nvme-fc: fix double-free scenarios on hw queues
+    - drm/amdgpu: add check before enabling/disabling broadcast mode
+    - drm/amdgpu: add header line for power profile on Arcturus
+    - drm/amdgpu: add cache flush workaround to gfx8 emit_fence
+    - nvme/pci: Fix write and poll queue types
+    - nvme/pci: Fix read queue count
+    - [armhf] iio: st_accel: Fix unused variable warning
+    - PM / devfreq: Fix devfreq_notifier_call returning errno
+    - PM / devfreq: Set scaling_max_freq to max on OPP notifier error
+    - PM / devfreq: Don't fail devfreq_dev_release if not in list
+    - afs: Fix afs_find_server lookups for ipv4 peers
+    - afs: Fix SELinux setting security label on /afs
+    - RDMA/cma: add missed unregister_pernet_subsys in init failure
+    - rxe: correctly calculate iCRC for unaligned payloads
+    - scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func
+    - scsi: qla2xxx: Use explicit LOGO in target mode
+    - scsi: qla2xxx: Drop superfluous INIT_WORK of del_work
+    - scsi: qla2xxx: Don't call qlt_async_event twice
+    - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length
+    - scsi: qla2xxx: Configure local loop for N2N target
+    - scsi: qla2xxx: Send Notify ACK after N2N PLOGI
+    - scsi: qla2xxx: Don't defer relogin unconditonally
+    - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI
+    - scsi: iscsi: qla4xxx: fix double free in probe
+    - scsi: libsas: stop discovering if oob mode is disconnected
+      (CVE-2019-19965)
+    - scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func
+    - [x86] staging/wlan-ng: add CRC32 dependency in Kconfig
+    - drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit
+    - drm/nouveau: Fix drm-core using atomic code-paths on pre-nv50 hardware
+    - drm/nouveau/kms/nv50-: fix panel scaling
+    - usb: gadget: fix wrong endpoint desc
+    - net: make socket read/write_iter() honor IOCB_NOWAIT
+    - afs: Fix mountpoint parsing
+    - afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP
+    - raid5: need to set STRIPE_HANDLE for batch head
+    - md: raid1: check rdev before reference in raid1_sync_request func
+    - [s390x] cpum_sf: Adjust sampling interval to avoid hitting sample limits
+    - [s390x] cpum_sf: Avoid SBD overflow condition in irq handler
+    - RDMA/counter: Prevent auto-binding a QP which are not tracked with res
+    - IB/mlx4: Follow mirror sequence of device add during device removal
+    - IB/mlx5: Fix steering rule of drop and count
+    - xen-blkback: prevent premature module unload
+    - xen/balloon: fix ballooned page accounting without hotplug enabled
+    - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
+    - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker
+    - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC
+    - PCI: Add a helper to check Power Resource Requirements _PR3 existence
+    - ALSA: hda: Allow HDA to be runtime suspended when dGPU is not bound to a
+      driver
+    - PCI: Fix missing inline for pci_pr3_present()
+    - ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen
+    - tcp: fix data-race in tcp_recvmsg()
+    - shmem: pin the file in shmem_fault() if mmap_sem is dropped
+    - taskstats: fix data-race
+    - ALSA: hda - Downgrade error message for single-cmd fallback
+    - netfilter: nft_tproxy: Fix port selector on Big Endian
+    - block: add bio_truncate to fix guard_bio_eod
+    - mm: drop mmap_sem before calling balance_dirty_pages() in write fault
+    - ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code
+    - ALSA: usb-audio: fix set_format altsetting sanity check
+    - ALSA: usb-audio: set the interface format after resume on Dell WD19
+    - ALSA: hda - Apply sync-write workaround to old Intel platforms, too
+    - ALSA: hda/realtek - Add headset Mic no shutup for ALC283
+    - [arm64,armhf] drm/sun4i: hdmi: Remove duplicate cleanup calls
+    - [mips*] BPF: Disable MIPS32 eBPF JIT
+    - [mips*] BPF: eBPF JIT: check for MIPS ISA compliance in Kconfig
+    - [mips*] Avoid VDSO ABI breakage due to global register variable
+    - media: pulse8-cec: fix lost cec_transmit_attempt_done() call
+    - media: cec: CEC 2.0-only bcast messages were ignored
+    - media: cec: avoid decrementing transmit_queue_sz if it is 0
+    - media: cec: check 'transmit_in_progress', not 'transmitting'
+    - mm/memory_hotplug: shrink zones when offlining memory
+    - mm/zsmalloc.c: fix the migrated zspage statistics.
+    - memcg: account security cred as well to kmemcg
+    - mm: move_pages: return valid node id in status if the page is already on
+      the target node
+    - mm/oom: fix pgtables units mismatch in Killed process message
+    - ocfs2: fix the crash due to call ocfs2_get_dlm_debug once less
+    - [x86,arm64] pstore/ram: Write new dumps to start of recycled zones
+    - [x86,arm64] pstore/ram: Fix error-path memory leak in
+      persistent_ram_new() callers
+    - locks: print unsigned ino in /proc/locks
+    - seccomp: Check that seccomp_notif is zeroed out by the user
+    - Btrfs: fix infinite loop during nocow writeback due to race
+    - compat_ioctl: block: handle Persistent Reservations
+    - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE
+    - compat_ioctl: block: handle BLKGETZONESZ/BLKGETNRZONES
+    - bpf: Fix precision tracking for unbounded scalars
+    - ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys()
+    - libata: Fix retrieving of active qcs
+    - gpiolib: fix up emulated open drain outputs
+    - [riscv64] clocksource: riscv: add notrace to riscv_sched_clock
+    - [riscv64] ftrace: correct the condition logic in function graph tracer
+    - tracing: Fix lock inversion in trace_event_enable_tgid_record()
+    - tracing: Avoid memory leak in process_system_preds()
+    - tracing: Have the histogram compare functions convert to u64 first
+    - tracing: Fix endianness bug in histogram trigger
+    - io_uring: use current task creds instead of allocating a new one
+    - mm/gup: fix memory leak in __gup_benchmark_ioctl
+    - apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
+    - dmaengine: virt-dma: Fix access after free in vchan_complete()
+    - [i386] ALSA: cs4236: fix error return comparison of an unsigned integer
+    - ALSA: pcm: Yet another missing check of non-cached buffer type
+    - ALSA: firewire-motu: Correct a typo in the clock proc string
+    - scsi: lpfc: Fix rpi release when deleting vport
+    - exit: panic before exit_mm() on global init exit
+    - [arm64] Revert support for execute-only user mappings
+    - ftrace: Avoid potential division by zero in function profiler
+    - [arm64] drm/msm: include linux/sched/task.h
+    - PM / devfreq: Check NULL governor in available_governors_show
+    - sunrpc: fix crash when cache_head become valid before update
+    - nfsd4: fix up replay_matches_cache()
+    - [powerpc*] Chunk calls to flush_dcache_range in arch_*_memory
+    - [x86,arm64] HID: i2c-hid: Reset ALPS touchpads on resume
+    - net/sched: annotate lockless accesses to qdisc->empty
+    - kernel/module.c: wakeup processes in module_wq on module unload
+    - ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100
+    - perf callchain: Fix segfault in thread__resolve_callchain_sample()
+    - [amd64] iommu/vt-d: Remove incorrect PSI capability check
+    - cifs: Fix potential softlockups while refreshing DFS cache
+    - xfs: don't check for AG deadlock for realtime files in bunmapi
+    - [x86] platform/x86: pmc_atom: Add Siemens CONNECT X300 to
+      critclk_systems DMI table
+    - netfilter: nf_queue: enqueue skbs with NULL dst
+    - [arm64,armhf] regulator: axp20x: Fix axp20x_set_ramp_delay
+    - [arm64,armhf] regulator: axp20x: Fix AXP22x ELDO2 regulator enable
+      bitmask
+    - [powerpc*] mm: Mark get_slice_psize() & slice_addr_is_low() as notrace
+    - Bluetooth: btusb: fix PM leak in error case of setup
+    - Bluetooth: delete a stray unlock
+    - Bluetooth: Fix memory leak in hci_connect_le_scan
+    - [arm64] dts: meson-gxl-s905x-khadas-vim: fix uart_A bluetooth node
+    - [arm64] dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
+    - media: flexcop-usb: ensure -EIO is returned on error condition
+    - media: usb: fix memory leak in af9005_identify_state (CVE-2019-18809)
+    - [arm64] dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed
+      warning
+    - [arm64] tty: serial: msm_serial: Fix lockup for sysrq and oops
+    - cifs: Fix lookup of root ses in DFS referral cache
+    - fs: cifs: Fix atime update check vs mtime
+    - fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP
+    - ath9k_htc: Modify byte order for an error message
+    - ath9k_htc: Discard undersized packets
+    - [x86] drm/i915/execlists: Fix annotation for decoupling virtual request
+    - xfs: periodically yield scrub threads to the scheduler
+    - net: add annotations on hh->hh_len lockless accesses
+    - ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps
+    - btrfs: get rid of unique workqueue helper functions
+    - Btrfs: only associate the locked page with one async_chunk struct
+    - [s390x] smp: fix physical to logical CPU map for SMT
+    - mm/sparse.c: mark populate_section_memmap as __meminit
+    - xen/blkback: Avoid unmapping unmapped grant pages
+    - lib/ubsan: don't serialize UBSAN report
+    - [x86] perf/x86/intel/bts: Fix the use of page_private()
+    - net: annotate lockless accesses to sk->sk_pacing_shift
+    - mm/hugetlb: defer freeing of huge pages if in non-task context
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.10
+    - [powerpc*] pmem: Fix kernel crash due to wrong range value usage in
+      flush_dcache_range
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.11
+    - bpf: Fix passing modified ctx to ld/abs/ind instruction
+    - [x86] ASoC: rt5682: fix i2c arbitration lost issue
+    - spi: pxa2xx: Add support for Intel Jasper Lake
+    - regulator: fix use after free issue
+    - ASoC: max98090: fix possible race conditions
+    - gpio: Handle counting of Freescale chipselects
+    - netfilter: ctnetlink: netns exit must wait for callbacks
+    - [x86] intel: Disable HPET on Intel Ice Lake platforms
+    - netfilter: nf_tables_offload: Check for the NETDEV_UNREGISTER event
+    - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
+      (CVE-2019-14901)
+    - regulator: core: fix regulator_register() error paths to properly
+      release rdev
+    - [x86] efi: Update e820 with reserved EFI boot services data to fix kexec
+      breakage
+    - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Teclast X89
+    - efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs
+    - efi/gop: Return EFI_SUCCESS if a usable GOP was found
+    - efi/gop: Fix memory leak in __gop_query32/64()
+    - [x86,arm64] efi/earlycon: Remap entire framebuffer after page
+      initialization
+    - netfilter: uapi: Avoid undefined left-shift in xt_sctp.h
+    - netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in
+      named sets
+    - netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END
+    - netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()
+    - netfilter: nf_tables: skip module reference count bump on object updates
+    - netfilter: nf_tables_offload: return EOPNOTSUPP if rule specifies no
+      actions
+    - [arm64] spi: spi-cavium-thunderx: Add missing pci_release_regions()
+    - [arm*] reset: Do not register resource data for missing resets
+    - [x86] ASoC: topology: Check return value for snd_soc_add_dai_link()
+    - [x86] ASoC: topology: Check return value for soc_tplg_pcm_create()
+    - [x86] ASoC: SOF: loader: snd_sof_fw_parse_ext_data log warning on
+      unknown header
+    - [x86] ASoC: SOF: Intel: split cht and byt debug window sizes
+    - [armhf] dts: am335x-sancloud-bbe: fix phy mode
+    - [riscv64] bpf, riscv: Limit to 33 tail calls
+    - [mips64el,mipsel] bpf, mips: Limit to 33 tail calls
+    - perf header: Fix false warning when there are no duplicate cache entries
+    - [armhf] spi: spi-ti-qspi: Fix a bug when accessing non default CS
+    - [armhf] bus: ti-sysc: Fix missing reset delay handling
+    - clk: walk orphan list on clock provider registration
+    - mac80211: fix TID field in monitor mode transmit
+    - cfg80211: fix double-free after changing network namespace
+    - pinctrl: pinmux: fix a possible null pointer in
+      pinmux_can_be_used_for_gpio
+    - [powerpc*] Ensure that swiotlb buffer is allocated from low memory
+    - btrfs: Fix error messages in qgroup_rescan_init
+    - Btrfs: fix cloning range with a hole when using the NO_HOLES feature
+    - [powerpc*] vcpu: Assume dedicated processors as non-preempt
+    - [powerpc*] spinlocks: Include correct header for static key
+    - btrfs: handle error in btrfs_cache_block_group
+    - Btrfs: fix hole extent items with a zero size after range cloning
+    - [powerpc*] ocxl: Fix potential memory leak on context creation
+    - bpf: Clear skb->tstamp in bpf_redirect when necessary
+    - bnx2x: Do not handle requests from VFs after parity
+    - bnx2x: Fix logic to get total no. of PFs per engine
+    - cxgb4: Fix kernel panic while accessing sge_info
+    - net: usb: lan78xx: Fix error message format specifier
+    - [hppa/parisc] add missing __init annotation
+    - rfkill: Fix incorrect check to avoid NULL pointer dereference
+    - staging: axis-fifo: add unspecified HAS_IOMEM dependency
+    - [arm*] iommu/iova: Init the struct iova to fix the possible memleak
+    - [x86] perf/x86: Fix potential out-of-bounds access
+    - [x86] perf/x86/intel: Fix PT PMI handling
+    - sched/psi: Fix sampling error and rare div0 crashes with cgroups and
+      high uptime
+    - psi: Fix a division error in psi poll()
+    - [x86] usb: typec: fusb302: Fix an undefined reference to
+      'extcon_get_state'
+    - block: end bio with BLK_STS_AGAIN in case of non-mq devs and REQ_NOWAIT
+    - fs: avoid softlockups in s_inodes iterators
+    - fs: call fsnotify_sb_delete after evict_inodes
+    - [arm64] iommu/dma: Relax locking in iommu_dma_prepare_msi()
+    - io_uring: don't wait when under-submitting
+    - clk: Move clk_core_reparent_orphans() under CONFIG_OF
+    - [arm64,armhf] net: stmmac: Determine earlier the size of RX buffer
+    - [arm64,armhf] net: stmmac: Do not accept invalid MTU values
+    - [arm64,armhf] net: stmmac: xgmac: Clear previous RX buffer size
+    - [arm64,armhf] net: stmmac: RX buffer size must be 16 byte aligned
+    - [arm64,armhf] net: stmmac: Always arm TX Timer at end of transmission
+      start
+    - xsk: Add rcu_read_lock around the XSK wakeup
+    - net/mlx5e: Fix concurrency issues between config flow and XSK
+    - net/i40e: Fix concurrency issues between config flow and XSK
+    - net/ixgbe: Fix concurrency issues between config flow and XSK
+    - [arm64] cpu_errata: Add Hisilicon TSV110 to spectre-v2 safe list
+    - block: Fix a lockdep complaint triggered by request queue flushing
+    - [s390x] dasd/cio: Interpret ccw_device_get_mdc return value correctly
+    - [s390x] dasd: fix memleak in path handling error case
+    - block: fix memleak when __blk_rq_map_user_iov() is failed
+    - sbitmap: only queue kyber's wait callback if not already active
+    - [s390x] qeth: handle error due to unsupported transport mode
+    - [s390x] qeth: fix promiscuous mode after reset
+    - [s390x] qeth: don't return -ENOTSUPP to userspace
+    - llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and
+      _test_c)
+    - [x86] hv_netvsc: Fix unwanted rx_table reset
+    - gtp: fix bad unlock balance in gtp_encap_enable_socket
+    - macvlan: do not assume mac_header is set in macvlan_broadcast()
+    - [arm64,armhf] net: dsa: mv88e6xxx: Preserve priority when setting CPU
+      port.
+    - [armhf] net: freescale: fec: Fix ethtool -d runtime PM
+    - [arm64,armhf] net: stmmac: dwmac-sun8i: Allow all RGMII modes
+    - [arm64,armhf] net: stmmac: dwmac-sunxi: Allow all RGMII modes
+    - [arm64,armhf] net: stmmac: Fixed link does not need MDIO Bus
+    - net: usb: lan78xx: fix possible skb leak
+    - pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
+    - sch_cake: avoid possible divide by zero in cake_enqueue()
+    - sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
+    - tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
+    - vxlan: fix tos value before xmit
+    - net: sch_prio: When ungrafting, replace with FIFO
+    - vlan: fix memory leak in vlan_dev_set_egress_priority
+    - vlan: vlan_changelink() should propagate errors
+    - [arm64,riscv64] macb: Don't unregister clks unconditionally
+    - net/mlx5: Move devlink registration before interfaces load
+    - [arm64,armhf] net: dsa: mv88e6xxx: force cmode write on 6141/6341
+    - net/mlx5e: Always print health reporter message to dmesg
+    - net/mlx5: DR, No need for atomic refcount for internal SW steering
+      resources
+    - net/mlx5e: Fix hairpin RSS table size
+    - net/mlx5: DR, Init lists that are used in rule's member
+    - [arm64,armhf] usb: dwc3: gadget: Fix request complete check
+    - USB: core: fix check for duplicate endpoints
+    - USB: serial: option: add Telit ME910G1 0x110a composition
+    - usb: missing parentheses in USE_NEW_SCHEME
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.12
+    - chardev: Avoid potential use-after-free in 'chrdev_open()'
+    - i2c: fix bus recovery stop mode timing
+    - [x86] powercap: intel_rapl: add NULL pointer check to
+      rapl_mmio_cpu_online()
+    - [arm64,armhf] usb: chipidea: host: Disable port power only if previously
+      enabled
+    - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
+    - ALSA: hda/realtek - Add new codec supported for ALCS1200A
+    - ALSA: hda/realtek - Set EAPD control to default for ALC222
+    - ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th
+      gen
+    - tpm: Revert "tpm_tis: reserve chip for duration of tpm_tis_core_init"
+    - tpm: Revert "tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for
+      interrupts"
+    - tpm: Revert "tpm_tis_core: Turn on the TPM before probing IRQ's"
+    - tpm: Handle negative priv->response_len in tpm_common_read()
+    - [arm64,armhf] rtc: sun6i: Add support for RTC clocks on R40
+    - kernel/trace: Fix do not unregister tracepoints when register
+      sched_migrate_task fail
+    - tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
+    - tracing: Change offset type to s32 in preempt/irq tracepoints
+    - HID: Fix slab-out-of-bounds read in hid_field_extract
+    - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
+    - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
+    - HID: hid-input: clear unmapped usages
+    - Input: add safety guards to input_set_keycode()
+    - [x86] drm/i915: Add Wa_1408615072 and Wa_1407596294 to icl,ehl
+    - [arm64,armhf] drm/sun4i: tcon: Set RGB DCLK min. divider based on
+      hardware model
+    - drm/fb-helper: Round up bits_per_pixel if possible
+    - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
+    - [x86] drm/i915: Add Wa_1407352427:icl,ehl
+    - [x86] drm/i915/gt: Mark up virtual engine uabi_instance
+    - [amd64] IB/hfi1: Adjust flow PSN with the correct resync_psn
+    - can: kvaser_usb: fix interface sanity check
+    - can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
+    - gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
+    - gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
+    - pstore/ram: Regularize prz label allocation lifetime
+    - [x86] staging: vt6656: set usb_set_intfdata on driver fail.
+    - [x86] staging: vt6656: Fix non zero logical return of, usb_control_msg
+    - USB: serial: option: add ZLP support for 0x1bc7/0x9010
+    - [arm64,armhf] usb: musb: fix idling for suspend after disconnect
+      interrupt
+    - [arm64,armhf] usb: musb: Disable pullup at init
+    - [arm64,armhf] usb: musb: dma: Correct parameter passed to IRQ handler
+    - [x86] staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
+    - [x86] staging: vt6656: correct return of vnt_init_registers.
+    - [x86] staging: vt6656: limit reg output to block size
+    - staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
+    - serdev: Don't claim unsupported ACPI serial devices
+    - [amd64] iommu/vt-d: Fix adding non-PCI devices to Intel IOMMU
+    - tty: link tty and port before configuring it as console
+    - tty: always relink the port
+    - [arm64] Move __ARCH_WANT_SYS_CLONE3 definition to uapi headers
+    - [arm64] Implement copy_thread_tls
+    - [arm*] Implement copy_thread_tls
+    - [hppa/parisc] Implement copy_thread_tls
+    - [riscv64] Implement copy_thread_tls
+    - clone3: ensure copy_thread_tls is implemented
+    - um: Implement copy_thread_tls
+    - [x86] staging: vt6656: remove bool from vnt_radio_power_on ret
+    - mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
+      (CVE-2019-14895)
+    - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
+      (CVE-2019-19056)
+    - rpmsg: char: release allocated memory (CVE-2019-19053)
+    - scsi: bfa: release allocated memory in case of error (CVE-2019-19066)
+    - rtl8xxxu: prevent leaking urb (CVE-2019-19068)
+    - ath10k: fix memory leak (CVE-2019-19078)
+    - HID: hiddev: fix mess in hiddev_open()
+    - USB: Fix: Don't skip endpoint descriptors with maxpacket=0
+    - netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
+    - netfilter: conntrack: dccp, sctp: handle null timeout argument
+    - netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
+    - [x86] drm/i915/gen9: Clear residual context state on context switch
+      (CVE-2019-14615)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.13
+    - HID: hidraw, uhid: Always report EPOLLOUT
+    - [amd64] IB/hfi1: Don't cancel unused work item
+    - [armhf] mtd: rawnand: stm32_fmc2: avoid to lock the CPU bus
+    - [arm*] 2c: bcm2835: Store pointer to bus clock
+    - ASoC: soc-core: Set dpcm_playback / dpcm_capture
+    - [armhf] ASoC: stm32: spdifrx: fix inconsistent lock state
+    - [armhf] ASoC: stm32: spdifrx: fix race condition in irq handler
+    - [armhf] ASoC: stm32: spdifrx: fix input pin state management
+    - netfilter: nft_flow_offload: fix underflow in flowtable reference
+      counter
+    - [armhf] mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy
+    - [arm64] gpio: zynq: Fix for bug in zynq_gpio_restore_context API
+    - [arm64,armhf] pinctrl: meson: Fix wrong shift value when get
+      drive-strength
+    - [amd64] iommu/vt-d: Unlink device if failed to add to group
+    - iommu: Remove device link to group on failure
+    - bpf: cgroup: prevent out-of-order release of cgroup bpf
+    - fs: move guard_bio_eod() after bio_set_op_attrs
+    - scsi: mpt3sas: Fix double free in attach error handling
+    - gpio: Fix error message on out-of-range GPIO in lookup table
+    - [arm64,armhf] PM / devfreq: tegra: Add COMMON_CLK dependency
+    - [arm64,armhf] drm/tegra: Fix ordering of cleanup code
+    - [s390x] qeth: fix qdio teardown after early init error
+    - [s390x] qeth: fix false reporting of VNIC CHAR config failure
+    - [s390x] qeth: Fix vnicc_is_in_use if rx_bcast not set
+    - [s390x] qeth: vnicc Fix init to default
+    - [s390x] qeth: fix initialization on old HW
+    - scsi: smartpqi: Update attribute name to `driver_version`
+    - afs: Fix missing cell comparison in afs_test_super()
+    - [x86] syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0
+    - [x86] syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn
+    - [x86] syscalls/x86: Use the correct function type for sys_ni_syscall
+    - [x86] syscalls/x86: Fix function types in COND_SYSCALL
+    - btrfs: simplify inode locking for RWF_NOWAIT
+    - netfilter: nf_tables_offload: release flow_rule on error from commit
+      path
+    - netfilter: nft_meta: use 64-bit time arithmetic
+    - [arm64] RDMA/hns: Prevent undefined behavior in
+      hns_roce_set_user_sq_size()
+    - [arm64] RDMA/hns: remove a redundant le16_to_cpu
+    - [arm64] RDMA/hns: Modify return value of restrack functions
+    - RDMA/counter: Prevent QP counter manual binding in auto mode
+    - [arm64] RDMA/hns: Release qp resources when failed to destroy qp
+    - xprtrdma: Add unique trace points for posting Local Invalidate WRs
+    - xprtrdma: Connection becomes unstable after a reconnect
+    - xprtrdma: Fix MR list handling
+    - xprtrdma: Close window between waking RPC senders and posting Receives
+    - [arm64] RDMA/hns: Fix to support 64K page for srq
+    - [arm64] RDMA/hns: Bugfix for qpc/cqc timer configuration
+    - RDMA/mlx5: Return proper error value
+    - RDMA/srpt: Report the SCSI residual to the initiator
+    - uaccess: Add non-pagefault user-space write function
+    - bpf: Make use of probe_user_write in probe write helper
+    - bpf: skmsg, fix potential psock NULL pointer dereference
+    - libbpf: Fix Makefile' libbpf symbol mismatch diagnostic
+    - afs: Fix use-after-loss-of-ref
+    - afs: Fix afs_lookup() to not clobber the version on a new dentry
+    - keys: Fix request_key() cache
+    - scsi: enclosure: Fix stale device oops with hot replug
+    - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
+    - [x86] platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
+    - [x86] platform/x86: GPD pocket fan: Use default values when wrong
+      modparams are given
+    - Documentation/ABI: Fix documentation inconsistency for mlxreg-io sysfs
+      interfaces
+    - Documentation/ABI: Add missed attribute for mlxreg-io sysfs interfaces
+    - xprtrdma: Fix create_qp crash on device unload
+    - xprtrdma: Fix completion wait during device removal
+    - xprtrdma: Fix oops in Receive handler after device removal
+    - dm: add dm-clone to the documentation index
+    - scsi: ufs: Give an unique ID to each ufs-bsg
+    - [arm64] crypto: cavium/nitrox - fix firmware assignment to AE cores
+    - crypto: virtio - implement missing support for output IVs
+    - crypto: algif_skcipher - Use chunksize instead of blocksize
+    - [i386] crypto: geode-aes - convert to skcipher API and make thread-safe
+    - NFSv2: Fix a typo in encode_sattr()
+    - nfsd: Fix cld_net->cn_tfm initialization
+    - nfsd: v4 support requires CRYPTO_SHA256
+    - NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process()
+    - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for
+      layoutreturn
+    - mei: fix modalias documentation
+    - [armhf] clk: samsung: exynos5420: Preserve CPU clocks configuration
+      during suspend/resume
+    - clk: Fix memory leak in clk_unregister()
+    - [arm64,armhf] dmaengine: dw: platform: Mark 'hclk' clock optional
+    - [armhf] clk: imx: pll14xx: Fix quick switch of S/K parameter
+    - rsi: fix potential null dereference in rsi_probe()
+    - affs: fix a memory leak in affs_remount
+    - [armhf] pinctl: ti: iodelay: fix error checking on
+      pinctrl_count_index_with_args call
+    - [x86] pinctrl: lewisburg: Update pin list according to v1.1v6
+    - PCI: pciehp: Do not disable interrupt twice on suspend
+    - Revert "drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper."
+    - drm/amdgpu: cleanup creating BOs at fixed location
+    - drm/amdgpu/discovery: reserve discovery data at the top of VRAM
+    - scsi: sd: enable compat ioctls for sed-opal
+    - gfs2: add compat_ioctl support
+    - af_unix: add compat_ioctl support
+    - compat_ioctl: handle SIOCOUTQNSD
+    - [arm64] PCI: aardvark: Use LTSSM state to build link training flag
+    - [arm64] PCI: aardvark: Fix PCI_EXP_RTCTL register configuration
+    - [arm64,armhf] PCI: dwc: Fix find_next_bit() usage
+    - PCI: Fix missing bridge dma_ranges resource list cleanup
+    - PCI/PM: Clear PCIe PME Status even for legacy power management
+    - PCI/PTM: Remove spurious "d" from granularity message
+    - [powerpc*] powernv: Disable native PCIe port management
+    - [mips64el,mipsel] Loongson: Fix return value of loongson_hwmon_init
+    - [armhf] tty: serial: imx: use the sg count from dma_map_sg
+    - [i386] tty: serial: pch_uart: correct usage of dma_unmap_sg
+    - ARM: 8943/1: Fix topology setup in case of CPU hotplug for
+      CONFIG_SCHED_MC
+    - Revert "ubifs: Fix memory leak bug in alloc_ubifs_info() error path"
+    - ubifs: Fixed missed le64_to_cpu() in journal
+    - ubifs: do_kill_orphans: Fix a memory leak bug
+    - mtd: spi-nor: fix silent truncation in spi_nor_read()
+    - mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
+    - [arm64,armhf] spi: pxa2xx: Set controller->max_transfer_size in dma mode
+    - iwlwifi: mvm: consider ieee80211 station max amsdu value
+    - rtlwifi: Remove unnecessary NULL check in rtl_regd_init
+    - iwlwifi: mvm: fix support for single antenna diversity
+    - sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO
+    - f2fs: fix potential overflow
+    - NFSD fixing possible null pointer derefering in copy offload
+    - scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
+    - scsi: target/iblock: Fix protection error with blocks greater than 512B
+    - [riscv64] export flush_icache_all to modules
+    - [mips64el,mipsel] cacheinfo: report shared CPU map
+    - [mips64el,mipsel] Fix gettimeofday() in the vdso library
+    - tomoyo: Suppress RCU warning at list_for_each_entry_rcu().
+    - [arm64] drm/arm/mali: make malidp_mw_connector_helper_funcs static
+    - rxrpc: Unlock new call in rxrpc_new_incoming_call() rather than the
+      caller
+    - rxrpc: Don't take call->user_mutex in rxrpc_new_incoming_call()
+    - rxrpc: Fix missing security check on incoming calls
+    - [arm64] dmaengine: k3dma: Avoid null pointer traversal
+    - [s390x] qeth: lock the card while changing its hsuid
+    - [amd64] ioat: ioat_alloc_ring() failure handling.
+    - drm/amdgpu: enable gfxoff for raven1 refresh
+    - ocfs2: call journal flush to mark journal as empty after journal
+      recovery when mount
+
+  [ Salvatore Bonaccorso ]
+  * signing_templates/rules.real: Include modules.builtin.modinfo file in
+    image (Closes: #948427)
+  * [rt] Drop "lib/ubsan: Don't seralize UBSAN report"
+  * nvme: Ignore ABI changes
+  * Drop "ARM: dts: bcm283x: Fix critical trip point"
+  * Drop "tracing: Do not create directories if lockdown is in affect"
+  * Drop "libtraceevent: Fix lib installation with O="
+  * Drop "libtraceevent: Copy pkg-config file to output folder when using O="
+  * Refresh "libbpf: fix readelf output parsing on powerpc with recent
+    binutils"
+  * Refresh "x86: Make x32 syscall support conditional on a kernel parameter"
+  * Bump ABI to 3.
+
+  [ Ben Hutchings ]
+  * f2fs: Fix crypto softdep: it uses crc32, not crc32c
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 19 Jan 2020 10:22:58 +0100
+
+linux (5.4.8-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.7
+    - af_packet: set defaule value for tmo
+    - [amd64] fjes: fix missed check in fjes_acpi_add
+    - mod_devicetable: fix PHY module format
+    - net: dst: Force 4-byte alignment of dst_metrics
+    - [arm64] net: hisilicon: Fix a BUG trigered by wrong bytes_compl
+    - net: phy: ensure that phy IDs are correctly typed
+    - net: qlogic: Fix error paths in ql_alloc_large_buffers()
+    - net-sysfs: Call dev_hold always in rx_queue_add_kobject
+    - net: usb: lan78xx: Fix suspend/resume PHY register access error
+    - [arm64,armhf] nfp: flower: fix stats id allocation
+    - qede: Disable hardware gro when xdp prog is installed
+    - qede: Fix multicast mac configuration
+    - sctp: fix memleak on err handling of stream initialization
+    - sctp: fully initialize v4 addr in some functions
+    - neighbour: remove neigh_cleanup() method
+    - bonding: fix bond_neigh_init()
+    - net: ena: fix default tx interrupt moderation interval
+    - net: ena: fix issues in setting interrupt moderation params in ethtool
+    - [armhf] net: ethernet: ti: davinci_cpdma: fix warning "device driver
+      frees DMA memory with different size"
+    - [arm64,armhf] net: stmmac: platform: Fix MDIO init for platforms without
+      PHY
+    - [armhf] net: dsa: b53: Fix egress flooding settings
+    - btrfs: don't double lock the subvol_sem for rename exchange
+    - btrfs: do not call synchronize_srcu() in inode_tree_del
+    - Btrfs: make tree checker detect checksum items with overlapping ranges
+    - btrfs: return error pointer from alloc_test_extent_buffer
+    - Btrfs: fix missing data checksums after replaying a log tree
+    - btrfs: send: remove WARN_ON for readonly mount
+    - btrfs: abort transaction after failed inode updates in create_subvol
+    - btrfs: skip log replay on orphaned roots
+    - btrfs: do not leak reloc root if we fail to read the fs root
+    - btrfs: handle ENOENT in btrfs_uuid_tree_iterate
+    - Btrfs: fix removal logic of the tree mod log that leads to
+      use-after-free issues
+    - ALSA: pcm: Avoid possible info leaks from PCM stream buffers
+    - ALSA: hda/ca0132 - Keep power on during processing DSP response
+    - ALSA: hda/ca0132 - Avoid endless loop
+    - ALSA: hda/ca0132 - Fix work handling in delayed HP detection
+    - [arm*] drm/vc4/vc4_hdmi: fill in connector info
+    - drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper.
+    - drm: mst: Fix query_payload ack reply struct
+    - [arm64,armhf] drm/panel: Add missing drm_panel_init() in panel drivers
+    - [armhf] drm: exynos: exynos_hdmi: use cec_notifier_conn_(un)register
+    - drm: Use EOPNOTSUPP, not ENOTSUPP
+    - drm/amdgpu/sriov: add ring_stop before ring_create in psp v11 code
+    - drm/amdgpu: grab the id mgr lock while accessing passid_mapping
+    - drm/ttm: return -EBUSY on pipelining with no_gpu_wait (v2)
+    - ath10k: add cleanup in ath10k_sta_state()
+    - ath10k: Check if station exists before forwarding tx airtime report
+    - spi: Add call to spi_slave_abort() function when spidev driver is
+      released
+    - [arm64] drm/meson: vclk: use the correct G12A frac max value
+    - [x86] staging: rtl8192u: fix multiple memory leaks on error path
+    - staging: rtl8188eu: fix possible null dereference
+    - rtlwifi: prevent memory leak in rtl_usb_probe (CVE-2019-19063)
+    - libertas: fix a potential NULL pointer dereference
+    - ath10k: fix backtrace on coredump
+    - IB/iser: bound protection_sg size by data_sg size
+    - [armhf] spi: gpio: prevent memory leak in spi_gpio_probe
+    - media: max2175: Fix build error without CONFIG_REGMAP_I2C
+    - [arm64] media: venus: core: Fix msm8996 frequency table
+    - ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq
+    - pinctrl: devicetree: Avoid taking direct reference to device name string
+    - [armhf] drm/sun4i: dsi: Fix TCON DRQ set bits
+    - [arm64] media: venus: Fix occasionally failures to suspend
+    - rtw88: fix NSS of hw_cap
+    - [armhf] hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if
+      not idled
+    - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init()
+    - [arm64,armhf] drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the
+      internal I2C controller
+    - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
+      (CVE-2019-19057)
+    - drm/drm_vblank: Change EINVAL by the correct errno
+    - libbpf: Fix struct end padding in btf_dump
+    - libbpf: Fix passing uninitialized bytes to setsockopt
+    - net/smc: increase device refcount for added link group
+    - team: call RCU read lock when walking the port_list
+    - media: cx88: Fix some error handling path in 'cx8800_initdev()'
+    - [arm64] crypto: inside-secure - Fix a maybe-uninitialized warning
+    - [arm64] crypto: aegis128/simd - build 32-bit ARM for v8 architecture
+      explicitly
+    - [x86] ASoC: SOF: enable sync_write in hdac_bus
+    - [armhf] media: ti-vpe: vpe: Fix Motion Vector vpdma stride
+    - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid
+      pixel format
+    - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about frame
+      sequence number
+    - [armhf] media: ti-vpe: vpe: Make sure YUYV is set as default format
+    - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure causing a
+      kernel panic
+    - [armhf] media: ti-vpe: vpe: ensure buffers are cleaned up properly in
+      abort cases
+    - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid
+      sizeimage
+    - [x86] syscalls/x86: Use the correct function type in SYSCALL_DEFINE0
+    - [x86] mm: Use the correct function type for native_set_fixmap()
+    - ath10k: Correct error handling of dma_map_single()
+    - rtw88: coex: Set 4 slot mode for A2DP
+    - [arm64,armhf] drm/bridge: dw-hdmi: Restore audio when setting a mode
+    - perf vendor events arm64: Fix Hisi hip08 DDRC PMU eventname
+    - usb: usbfs: Suppress problematic bind and unbind uevents.
+    - Bluetooth: btusb: avoid unused function warning
+    - Bluetooth: missed cpu_to_le16 conversion in hci_init4_req
+    - Bluetooth: Workaround directed advertising bug in Broadcom controllers
+    - Bluetooth: hci_core: fix init for HCI_USER_CHANNEL
+    - bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack()
+    - [x86] mce: Lower throttling MCE messages' priority to warning
+    - [arm64] net: hns3: log and clear hardware error after reset complete
+    - [arm64] RDMA/hns: Fix wrong parameters when initial mtt of srq->idx_que
+    - [x86] drm/gma500: fix memory disclosures due to uninitialized bytes
+    - ASoC: soc-pcm: fixup dpcm_prune_paths() loop continue
+    - rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot
+    - ipmi: Don't allow device module unload when in use
+    - [x86] ioapic: Prevent inconsistent state when moving an interrupt
+    - media: cedrus: Fix undefined shift with a SHIFT_AND_MASK_BITS macro
+    - drm/nouveau: Don't grab runtime PM refs for HPD IRQs
+    - md: no longer compare spare disk superblock events in super_load
+    - md/bitmap: avoid race window between md_bitmap_resize and
+      bitmap_file_clear_bit
+    - drm: Don't free jobs in wait_event_interruptible()
+    - EDAC/amd64: Set grain per DIMM
+    - [arm64] psci: Reduce the waiting time for cpu_psci_cpu_kill()
+    - i40e: initialize ITRN registers with correct values
+    - i40e: Wrong 'Advertised FEC modes' after set FEC to AUTO
+    - net: phy: dp83867: enable robust auto-mdix
+    - [arm64,armhf] drm/tegra: sor: Use correct SOR index on Tegra210
+    - regulator: core: Release coupled_rdevs on regulator_init_coupling()
+      error
+    - ubsan, x86: Annotate and allow __ubsan_handle_shift_out_of_bounds() in
+      uaccess regions
+    - ACPI: button: Add DMI quirk for Medion Akoya E2215T
+    - RDMA/qedr: Fix memory leak in user qp and mr
+    - [arm64] RDMA/hns: Fix memory leak on 'context' on error return path
+    - RDMA/qedr: Fix srqs xarray initialization
+    - RDMA/core: Set DMA parameters correctly
+    - [arm64,armhf] gpu: host1x: Allocate gather copy for host1x
+    - [arm64,armhf] net: dsa: LAN9303: select REGMAP when LAN9303 enable
+    - [arm64] phy: qcom-usb-hs: Fix extcon double register after power cycle
+    - [s390x] time: ensure get_clock_monotonic() returns monotonic values
+    - [s390x] add error handling to perf_callchain_kernel
+    - [s390x] mm: add mm_pxd_folded() checks to pxd_free()
+    - [arm64] net: hns3: add struct netdev_queue debug info for TX timeout
+    - libata: Ensure ata_port probe has completed before detach
+    - loop: fix no-unmap write-zeroes request behavior
+    - [arm64,armhf] net/mlx5e: Verify that rule has at least one fwd/drop
+      action
+    - ALSA: bebob: expand sleep just after breaking connections for protocol
+      version 1
+    - libbpf: Fix error handling in bpf_map__reuse_fd()
+    - Bluetooth: Fix advertising duplicated flags
+    - ALSA: pcm: Fix missing check of the new non-cached buffer type
+    - [riscv64] spi: sifive: disable clk when probe fails and remove
+    - pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler()
+    - ixgbe: protect TX timestamping from API misuse
+    - media: rcar_drif: fix a memory disclosure (CVE-2019-18786)
+    - media: v4l2-core: fix touch support in v4l_g_fmt
+    - nvme: introduce "Command Aborted By host" status code
+    - nvmem: core: fix nvmem_cell_write inline function
+    - ASoC: SOF: topology: set trigger order for FE DAI link
+    - media: vivid: media_device_cleanup was called too early
+    - bnx2x: Fix PF-VF communication over multi-cos queues.
+    - ALSA: timer: Limit max amount of slave instances
+    - RDMA/core: Fix return code when modify_port isn't supported
+    - [arm64] drm: msm: a6xx: fix debug bus register configuration
+    - rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt()
+    - perf probe: Fix to find range-only function instance
+    - perf cs-etm: Fix definition of macro TO_CS_QUEUE_NR
+    - perf probe: Fix to list probe event with correct line number
+    - perf jevents: Fix resource leak in process_mapfile() and main()
+    - perf probe: Walk function lines in lexical blocks
+    - perf probe: Fix to probe an inline function which has no entry pc
+    - perf probe: Fix to show ranges of variables in functions without
+      entry_pc
+    - perf probe: Fix to show inlined function callsite without entry_pc
+    - perf probe: Fix to probe a function which has no entry pc
+    - perf tools: Fix cross compile for ARM64
+    - perf tools: Splice events onto evlist even on error
+    - ice: Check for null pointer dereference when setting rings
+    - perf parse: If pmu configuration fails free terms
+    - perf probe: Skip overlapped location on searching variables
+    - net: avoid potential false sharing in neighbor related code
+    - perf probe: Return a better scope DIE if there is no best scope
+    - perf probe: Fix to show calling lines of inlined functions
+    - perf probe: Skip end-of-sequence and non statement lines
+    - perf probe: Filter out instances except for inlined subroutine and
+      subprogram
+    - libbpf: Fix negative FD close() in xsk_setup_xdp_prog()
+    - [s390x] bpf: Use kvcalloc for addrs array
+    - cgroup: freezer: don't change task and cgroups status unnecessarily
+    - ath10k: fix get invalid tx rate for Mesh metric
+    - media: pvrusb2: Fix oops on tear-down when radio support is not present
+    - ice: delay less
+    - media: cedrus: Use helpers to access capture queue
+    - [arm64,armhf] spi: pxa2xx: Add missed security checks
+    - ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile
+    - iio: dac: ad5446: Add support for new AD5600 DAC
+    - [x86] ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format
+      constraint
+    - r8169: respect EEE user setting when restarting network
+    - [s390x] disassembler: don't hide instruction addresses
+    - [armhf] net: ethernet: ti: Add dependency for TI_DAVINCI_EMAC
+    - nvme: Discard workaround for non-conformant devices
+    - parport: load lowlevel driver if ports not found
+    - bcache: fix static checker warning in bcache_device_free()
+    - cpufreq: Register drivers only after CPU devices have been registered
+    - [x86] crash: Add a forward declaration of struct kimage
+    - tracing: use kvcalloc for tgid_map array allocation
+    - tracing/kprobe: Check whether the non-suffixed symbol is notrace
+    - bcache: fix deadlock in bcache_allocator
+    - iwlwifi: mvm: fix unaligned read of rx_pkt_status
+    - regulator: core: Let boot-on regulators be powered off
+    - [arm64] spi: tegra20-slink: add missed clk_unprepare
+    - tun: fix data-race in gro_normal_list()
+    - xhci-pci: Allow host runtime PM as default also for Intel Ice Lake xHCI
+    - crypto: virtio - deal with unsupported input sizes
+    - btrfs: don't prematurely free work in end_workqueue_fn()
+    - btrfs: don't prematurely free work in run_ordered_work()
+    - sched/uclamp: Fix overzealous type replacement
+    - perf/core: Fix the mlock accounting, again
+    - bnxt_en: Return proper error code for non-existent NVM variable
+    - net: phy: avoid matching all-ones clause 45 PHY IDs
+    - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Acer Switch 10 SW5-012
+      2-in-1
+    - [x86] insn: Add some Intel instructions to the opcode map
+    - brcmfmac: remove monitor interface when detaching
+    - perf session: Fix decompression of PERF_RECORD_COMPRESSED records
+    - perf probe: Fix to show function entry line as probe-able
+    - [s390x] crypto: Fix unsigned variable compared with zero
+    - [s390x] kasan: support memcpy_real with TRACE_IRQFLAGS
+    - bnxt_en: Improve RX buffer error handling.
+    - iwlwifi: check kasprintf() return value
+    - ASoC: soc-pcm: check symmetry before hw_params
+    - [armhf] net: ethernet: ti: ale: clean ale tbl on init and intf restart
+    - [s390x] cpumf: Adjust registration of s390 PMU device drivers
+    - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings
+    - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c
+    - mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED
+    - libtraceevent: Fix memory leakage in copy_filter_type
+    - ice: Only disable VF state when freeing each VF resources
+    - ice: Fix setting coalesce to handle DCB configuration
+    - net: phy: initialise phydev speed and duplex sanely
+    - tools, bpf: Fix build for 'make -s tools/bpf O=<dir>'
+    - bpf: Provide better register bounds after jmp32 instructions
+    - net: wireless: intel: iwlwifi: fix GRO_NORMAL packet stalling
+    - btrfs: don't prematurely free work in reada_start_machine_worker()
+    - btrfs: don't prematurely free work in scrub_missing_raid56_worker()
+    - Revert "mmc: sdhci: Fix incorrect switch to HS mode"
+    - tpm_tis: reserve chip for duration of tpm_tis_core_init
+    - tpm: fix invalid locking in NONBLOCKING mode
+    - iommu: fix KASAN use-after-free in iommu_insert_resv_region
+    - iommu: set group default domain before creating direct mappings
+    - iommu/vt-d: Fix dmar pte read access not set error
+    - iommu/vt-d: Set ISA bridge reserved region as relaxable
+    - iommu/vt-d: Allocate reserved region for ISA with correct permission
+    - [armhf] can: flexcan: fix possible deadlock and out-of-order reception
+      after wakeup
+    - [armhf] can: flexcan: poll MCR_LPM_ACK instead of GPR ACK for stop mode
+      acknowledgment
+    - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices
+      (CVE-2019-19947)
+    - usb: xhci: Fix build warning seen with CONFIG_PM=n
+    - ath10k: Revert "ath10k: add cleanup in ath10k_sta_state()"
+    - md: avoid invalid memory access for array sb->dev_roles
+    - [s390x] ftrace: fix endless recursion in function_graph tracer
+    - [armhf] can: flexcan: add low power enter/exit acknowledgment helper
+    - usbip: Fix receive error in vhci-hcd when using scatter-gather
+    - usbip: Fix error path of vhci_recv_ret_submit()
+    - cpufreq: Avoid leaving stale IRQ work items during CPU offline
+    - mm: vmscan: protect shrinker idr replace with CONFIG_MEMCG
+    - [x86] intel_th: pci: Add Comet Lake PCH-V support
+    - [x86] intel_th: pci: Add Elkhart Lake SOC support
+    - [x86] intel_th: Fix freeing IRQs
+    - [x86] intel_th: msu: Fix window switching without windows
+    - [x86] platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128
+      bytes
+    - [x86] staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
+    - [x86] pinctrl: baytrail: Really serialize all register accesses
+    - ext4: fix ext4_empty_dir() for directories with holes (CVE-2019-19037)
+    - ext4: check for directory entries too close to block end
+    - ext4: unlock on error in ext4_expand_extra_isize()
+    - ext4: validate the debug_want_extra_isize mount option at parse time
+    - [powerpc*] KVM: PPC: Book3S HV: Fix regression on big endian hosts
+    - [x86] kvm: x86: Host feature SSBD doesn't imply guest feature
+      SPEC_CTRL_SSBD
+    - [x86] kvm: x86: Host feature SSBD doesn't imply guest feature AMD_SSBD
+    - [arm64,armhf] KVM: arm/arm64: Properly handle faulting of device
+      mappings
+    - [arm64] KVM: arm64: Ensure 'params' is initialised when looking up sys
+      register
+    - [x86] intel: Disable HPET on Intel Coffee Lake H platforms
+    - [x86] MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure()
+    - [x86] MCE/AMD: Allow Reserved types to be overwritten in smca_banks[]
+    - [x86] mce: Fix possibly incorrect severity calculation on AMD
+    - [powerpc*] irq: fix stack overflow verification
+    - [powerpc*] ocxl: Fix concurrent AFU open and device removal
+    - [arm64] mmc: sdhci-msm: Correct the offset and value for DDR_CONFIG
+      register
+    - mmc: sdhci: Update the tuning failed messages to pr_debug level
+    - mmc: sdhci: Workaround broken command queuing on Intel GLK
+    - mmc: sdhci: Add a quirk for broken command queuing
+    - nbd: fix shutdown and recv work deadlock v2
+    - iwlwifi: pcie: move power gating workaround earlier in the flow
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.8
+    - Revert "MIPS: futex: Restore \n after sync instructions"
+    - Revert "MIPS: futex: Emit Loongson3 sync workarounds within asm"
+    - scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd()
+    - scsi: lpfc: Fix discovery failures when target device connectivity
+      bounces
+    - scsi: mpt3sas: Fix clear pending bit in ioctl status
+    - scsi: lpfc: Fix locking on mailbox command completion
+    - scsi: mpt3sas: Reject NVMe Encap cmnds to unsupported HBA
+    - [armhf] gpio: mxc: Only get the second IRQ when there is more than one
+      IRQ
+    - scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq
+    - Input: atmel_mxt_ts - disable IRQ across suspend
+    - f2fs: fix to update time in lazytime mode
+    - [x86] platform/x86: peaq-wmi: switch to using polled mode of input
+      devices
+    - [arm64,armhf] iommu: rockchip: Free domain on .domain_free
+    - [arm64,armhf] iommu/tegra-smmu: Fix page tables in > 4 GiB memory
+    - scsi: target: compare full CHAP_A Algorithm strings
+    - scsi: lpfc: Fix hardlockup in lpfc_abort_handler
+    - scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices
+    - scsi: csiostor: Don't enable IRQs too early
+    - [arm64] scsi: hisi_sas: Replace in_softirq() check in
+      hisi_sas_task_exec()
+    - [arm64] scsi: hisi_sas: Delete the debugfs folder of hisi_sas when the
+      probe fails
+    - [powerpc*] pseries: Mark accumulate_stolen_time() as notrace
+    - [powerpc*] pseries: Don't fail hash page table insert for bolted mapping
+    - dma-mapping: Add vmap checks to dma_map_single()
+    - dma-mapping: fix handling of dma-ranges for reserved memory (again)
+    - clocksource/drivers/timer-of: Use unique device name instead of timer
+    - [powerpc*] security/book3s64: Report L1TF status in sysfs
+    - [powerpc*] book3s64/hash: Add cond_resched to avoid soft lockup warning
+    - ext4: update direct I/O read lock pattern for IOCB_NOWAIT
+    - ext4: iomap that extends beyond EOF should be marked dirty
+    - jbd2: Fix statistics for the number of logged blocks
+    - scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and
+      WRITE(6)
+    - scsi: lpfc: Fix unexpected error messages during RSCN handling
+    - scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow
+    - f2fs: fix to update dir's i_pino during cross_rename
+    - [arm64] clk: qcom: smd: Add missing pnoc clock
+    - [arm64] clk: qcom: Allow constant ratio freq tables for rcg
+    - clk: clk-gpio: propagate rate change to parent
+    - dma-direct: check for overflows on 32 bit DMA addresses
+    - fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned
+      long
+    - [arm64] iommu/arm-smmu-v3: Don't display an error when IRQ lines are
+      missing
+    - [armhf] i2c: stm32f7: fix & reorder remove & probe error handling
+    - iomap: fix return value of iomap_dio_bio_actor on 32bit systems
+    - scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer
+      dereferences
+    - [m68k] scsi: zorro_esp: Limit DMA transfers to 65536 bytes (except on
+      Fastlane)
+    - [powerpc*] PCI: rpaphp: Fix up pointer to first drc-info entry
+    - scsi: ufs: fix potential bug which ends in system hang
+    - [powerpc*] PCI: rpaphp: Don't rely on firmware feature to imply drc-info
+      support
+    - [powerpc*] PCI: rpaphp: Annotate and correctly byte swap DRC properties
+    - [powerpc*] PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name
+      when using drc-info
+    - [powerpc*] security: Fix wrong message when RFI Flush is disable
+    - [powerpc*] eeh: differentiate duplicate detection message
+    - [powerpc*] book3s/mm: Update Oops message to print the correct
+      translation in use
+    - bcache: at least try to shrink 1 node in bch_mca_scan()
+    - HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse
+    - HID: logitech-hidpp: Silence intermittent get_battery_capacity errors
+    - HID: i2c-hid: fix no irq after reset on raydium 3118
+    - [armhf] 8937/1: spectre-v2: remove Brahma-B53 from hardening
+    - libnvdimm/btt: fix variable 'rc' set but not used
+    - HID: Improve Windows Precision Touchpad detection.
+    - HID: rmi: Check that the RMI_STARTED bit is set before unregistering the
+      RMI transport device
+    - watchdog: prevent deferral of watchdogd wakeup on RT
+    - watchdog: Fix the race between the release of watchdog_core_data and
+      cdev
+    - scsi: pm80xx: Fix for SATA device discovery
+    - scsi: ufs: Fix error handing during hibern8 enter
+    - scsi: scsi_debug: num_tgts must be >= 0
+    - scsi: target: core: Release SPC-2 reservations when closing a session
+    - scsi: ufs: Fix up auto hibern8 enablement
+    - scsi: iscsi: Don't send data to unbound connection
+    - scsi: target: iscsi: Wait for all commands to finish before freeing a
+      session
+    - f2fs: Fix deadlock in f2fs_gc() context during atomic files handling
+    - [x86] Drivers: hv: vmbus: Fix crash handler reset of Hyper-V synic
+    - apparmor: fix unsigned len comparison with less than zero
+    - drm/amdgpu: Call find_vma under mmap_sem
+    - cifs: Fix use-after-free bug in cifs_reconnect()
+    - io_uring: io_allocate_scq_urings() should return a sane state
+    - cdrom: respect device capabilities during opening action
+    - cifs: move cifsFileInfo_put logic into a work-queue
+    - perf diff: Use llabs() with 64-bit values
+    - perf script: Fix brstackinsn for AUXTRACE
+    - perf regs: Make perf_reg_name() return "unknown" instead of NULL
+    - [s390x] zcrypt: handle new reply code FILTERED_BY_HYPERVISOR
+    - [s390x] unwind: filter out unreliable bogus %r14
+    - [s390x] cpum_sf: Check for SDBT and SDB consistency
+    - ocfs2: fix passing zero to 'PTR_ERR' warning
+    - [s390x] disable preemption when switching to nodat stack with
+      CALL_ON_STACK
+    - mm/hugetlbfs: fix error handling when setting up mounts
+    - kernel: sysctl: make drop_caches write-only
+    - userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK
+    - sctp: fix err handling of stream initialization
+    - md: make sure desc_nr less than MD_SB_DISKS
+    - Revert "iwlwifi: assign directly to iwl_trans->cfg in QuZ detection"
+    - netfilter: ebtables: compat: reject all padding in matches/watchers
+    - 6pack,mkiss: fix possible deadlock
+    - [powerpc*] Fix __clear_user() with KUAP enabled
+    - net/smc: add fallback check to connect()
+    - netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
+    - inetpeer: fix data-race in inet_putpeer / inet_putpeer
+    - net: add a READ_ONCE() in skb_peek_tail()
+    - net: icmp: fix data-race in cmp_global_allow()
+    - hrtimer: Annotate lockless access to timer->state
+    - tomoyo: Don't use nifty names on sockets.
+    - uaccess: disallow > INT_MAX copy sizes
+    - drm: limit to INT_MAX in create_blob ioctl
+    - xfs: fix mount failure crash on invalid iclog memory access
+    - cxgb4/cxgb4vf: fix flow control display for auto negotiation
+    - [armhf] net: dsa: bcm_sf2: Fix IP fragment location and behavior
+    - net/mlxfw: Fix out-of-memory error in mfa2 flash burning
+    - net: phy: aquantia: add suspend / resume ops for AQR105
+    - net/sched: act_mirred: Pull mac prior redir to non mac_header_xmit
+      device
+    - net/sched: add delete_empty() to filters and use it in cls_flower
+    - net_sched: sch_fq: properly set sk->sk_pacing_status
+    - [arm64,armhf] net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on
+      Meson8b/8m2 SoCs
+    - ptp: fix the race between the release of ptp_clock and cdev
+    - tcp: Fix highest_sack and highest_sack_seq
+    - udp: fix integer overflow while computing available space in sk_rcvbuf
+    - bnxt_en: Fix MSIX request logic for RDMA driver.
+    - bnxt_en: Free context memory in the open path if firmware has been
+      reset.
+    - bnxt_en: Return error if FW returns more data than dump length
+    - bnxt_en: Fix bp->fw_health allocation and free logic.
+    - bnxt_en: Remove unnecessary NULL checks for fw_health
+    - bnxt_en: Fix the logic that creates the health reporters.
+    - bnxt_en: Add missing devlink health reporters for VFs.
+    - net: add bool confirm_neigh parameter for dst_ops.update_pmtu
+    - ip6_gre: do not confirm neighbor when do pmtu update
+    - gtp: do not confirm neighbor when do pmtu update
+    - net/dst: add new function skb_dst_update_pmtu_no_confirm
+    - tunnel: do not confirm neighbor when do pmtu update
+    - vti: do not confirm neighbor when do pmtu update
+    - sit: do not confirm neighbor when do pmtu update
+    - net/dst: do not confirm neighbor for vxlan and geneve pmtu update
+    - [arm64,armhf] net: marvell: mvpp2: phylink requires the link interrupt
+    - gtp: fix wrong condition in gtp_genl_dump_pdp()
+    - gtp: avoid zero size hashtable
+    - bonding: fix active-backup transition after link failure
+    - tcp: do not send empty skb from tcp_write_xmit()
+    - tcp/dccp: fix possible race __inet_lookup_established()
+    - [x86] hv_netvsc: Fix tx_table init in rndis_set_subchannel()
+    - gtp: fix an use-after-free in ipv4_pdp_find()
+    - gtp: do not allow adding duplicate tid and ms_addr pdp context
+    - bnxt: apply computed clamp value for coalece parameter
+    - ipv6/addrconf: only check invalid header values when
+      NETLINK_F_STRICT_CHK is set
+    - [arm64,armhf] net: phylink: fix interface passed to mac_link_up
+    - net: ena: fix napi handler misbehavior when the napi budget is zero
+    - vhost/vsock: accept only packets with the right dst_cid
+    - mm/hugetlbfs: fix for_each_hstate() loop in init_hugetlbfs_fs()
+
+  [ Salvatore Bonaccorso ]
+  * debian/lib/python/debian_linux/abi.py: Add one missing string replacement.
+  * debian/lib/python/debian_linux/abi.py: strip whitespace characters in
+    line.
+  * [rt] Refresh lib-ubsan-Don-t-seralize-UBSAN-report.patch for context
+    changes in 5.4.7
+  * [rt] Drop x86-ioapic-Prevent-inconsistent-state-when-moving-an.patch
+  * Enable EROFS filesystem support as module.
+    Enable EROFS_FS as module, enable EROFS_FS_XATTR, EROFS_FS_POSIX_ACL,
+    EROFS_FS_SECURITY, EROFS_FS_ZIP and EROFS_FS_CLUSTER_PAGE_LIMIT.
+    Thanks to Gao Xiang <gaoxiang25@huawei.com> (Closes: #946569)
+  * Enable additional netfilter modules.
+    Enable NFT_BRIDGE_META, NF_CONNTRACK_BRIDGE, IP6_NF_MATCH_SRH, NFT_XFRM
+    and NFT_SYNPROXY as modules.
+    Thanks to Arturo Borrero Gonzalez (Closes: #948031)
+  * [rt] Drop watchdog-prevent-deferral-of-watchdogd-wakeup-on-RT.patch
+  * [rt] Refresh Use-CONFIG_PREEMPTION.patch (Context changes in 5.4.8)
+  * Bump ABI to 2
+
+  [ YunQiang Su ]
+  * [mips*/octeon] Fix ftbfs on mips* due to octeon image-file:
+        move "image-file: linux" to octeon_build from octeon_image.
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 05 Jan 2020 15:40:37 +0100
+
+linux (5.4.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.3
+    - rsi: release skb if rsi_prepare_beacon fails (CVE-2019-19071)
+    - lp: fix sparc64 LPSETTIMEOUT ioctl
+    - time: Zero the upper 32-bits in __kernel_timespec on 32-bit
+    - usb: gadget: u_serial: add missing port entry locking
+    - [arm64] tty: serial: msm_serial: Fix flow control
+    - [arm64,armel,armhf] serial: pl011: Fix DMA ->flush_buffer()
+    - serial: serial_core: Perform NULL checks for break_ctl ops
+    - [armhf] serial: stm32: fix clearing interrupt error flags
+    - serial: 8250_dw: Avoid double error messaging when IRQ absent
+    - mwifiex: Re-work support for SDIO HW reset
+    - io_uring: fix dead-hung for non-iter fixed rw
+    - io_uring: transform send/recvmsg() -ERESTARTSYS to -EINTR
+    - fuse: fix leak of fuse_io_priv
+    - fuse: verify nlink
+    - fuse: verify write return
+    - fuse: verify attributes
+    - io_uring: fix missing kmap() declaration on powerpc
+    - io_uring: ensure req->submit is copied when req is deferred
+    - SUNRPC: Avoid RPC delays when exiting suspend
+    - ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC
+    - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
+    - ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236
+    - ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G
+    - ALSA: pcm: oss: Avoid potential buffer overflows
+    - ALSA: hda - Add mute led support for HP ProBook 645 G4
+    - ALSA: hda: Modify stream stripe mask only when needed
+    - Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus
+    - Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash
+    - [x86] Input: synaptics-rmi4 - don't increment rmiaddr for SMBus
+      transfers
+    - Input: goodix - add upside-down quirk for Teclast X89 tablet
+    - media: rc: mark input device as pointing stick
+    - [i386] x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all()
+    - [x86] PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
+    - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks
+    - CIFS: Fix SMB2 oplock break processing
+    - tty: vt: keyboard: reject invalid keycodes
+    - can: slcan: Fix use-after-free Read in slcan_open
+    - nfsd: Ensure CLONE persists data and metadata changes to the target file
+    - nfsd: restore NFSv3 ACL support
+    - kernfs: fix ino wrap-around detection
+    - jbd2: Fix possible overflow in jbd2_log_space_left()
+    - [arm64] drm/msm: fix memleak on release
+    - drm: damage_helper: Fix race checking plane->state->fb
+    - [i386] drm/i810: Prevent underflow in ioctl
+    - [arm64] Validate tagged addresses in access_ok() called from kernel
+      threads
+    - [powerpc*] KVM: PPC: Book3S HV: XIVE: Free previous EQ page when setting
+      up a new one
+    - [powerpc*] KVM: PPC: Book3S HV: XIVE: Fix potential page leak on error
+      path
+    - [powerpc*] KVM: PPC: Book3S HV: XIVE: Set kvm->arch.xive when VPs are
+      allocated
+    - [x86] KVM: nVMX: Always write vmcs02.GUEST_CR3 during nested VM-Enter
+    - [arm64,armhf] KVM: vgic: Don't rely on the wrong pending table
+    - [x86] KVM: do not modify masked bits of shared MSRs
+    - [x86] KVM: fix presentation of TSX feature in ARCH_CAPABILITIES
+    - [x86] KVM: Remove a spurious export of a static function
+    - [x86] KVM: Grab KVM's srcu lock when setting nested state
+    - crypto: af_alg - cast ki_complete ternary op to int
+    - [i386] crypto: geode-aes - switch to skcipher for cbc(aes) fallback
+    - [x86] crypto: ccp - fix uninitialized list head
+    - crypto: ecdh - fix big endian bug in ECC library
+    - crypto: user - fix memory leak in crypto_report (CVE-2019-19062)
+    - [armhf] spi: stm32-qspi: Fix kernel oops when unbinding driver
+    - spi: Fix SPI_CS_HIGH setting when using native and GPIO CS
+    - spi: Fix NULL pointer when setting SPI_CS_HIGH for GPIO CS
+    - can: ucan: fix non-atomic allocation in completion handler
+    - [amd64] RDMA/qib: Validate ->show()/store() callbacks before calling
+      them
+    - rfkill: allocate static minor
+    - bdev: Factor out bdev revalidation into a common helper
+    - bdev: Refresh bdev size for disks without partitioning
+    - iomap: Fix pipe page leakage during splicing
+    - thermal: Fix deadlock in thermal thermal_zone_device_check
+    - vcs: prevent write access to vcsu devices
+    - Revert "serial/8250: Add support for NI-Serial PXI/PXIe+485 devices"
+    - binder: Fix race between mmap() and binder_alloc_print_pages()
+    - binder: Prevent repeated use of ->mmap() via NULL mapping
+    - binder: Handle start==NULL in binder_update_page_range()
+    - [x86] KVM: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
+      (CVE-2019-19332)
+    - ALSA: hda - Fix pending unsol events at shutdown
+    - md/raid0: Fix an error message in raid0_make_request()
+    - drm/mcde: Fix an error handling path in 'mcde_probe()'
+    - perf script: Fix invalid LBR/binary mismatch error
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.4
+    - usb: gadget: configfs: Fix missing spin_lock_init()
+    - [x86] usb: gadget: pch_udc: fix use after free
+    - nvme: Namepace identification descriptor list is optional
+    - Revert "nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T"
+    - scsi: lpfc: Fix bad ndlp ptr in xri aborted handling
+    - [s390x] scsi: zfcp: trace channel log even for FCP command responses
+    - scsi: qla2xxx: Do command completion on abort timeout
+    - scsi: qla2xxx: Fix driver unload hang
+    - scsi: qla2xxx: Fix double scsi_done for abort path
+    - scsi: qla2xxx: Fix memory leak when sending I/O fails
+    - compat_ioctl: add compat_ptr_ioctl()
+    - ceph: fix compat_ioctl for ceph_dir_operations
+    - [arm64] media: venus: remove invalid compat_ioctl32 handler
+    - USB: uas: honor flag to avoid CAPACITY16
+    - USB: uas: heed CAPACITY_HEURISTICS
+    - USB: documentation: flags on usb-storage versus UAS
+    - usb: Allow USB device to be warm reset in suspended state
+    - [arm64,armhf] usb: host: xhci-tegra: Correct phy enable sequence
+    - binder: fix incorrect calculation for num_valid
+    - staging: rtl8188eu: fix interface sanity check
+    - staging: rtl8712: fix interface sanity check
+    - [arm*] staging: vchiq: call unregister_chrdev_region() when driver
+      registration fails
+    - staging: gigaset: fix general protection fault on probe
+    - staging: gigaset: fix illegal free on probe errors
+    - staging: gigaset: add endpoint-type sanity check
+    - usb: xhci: only set D3hot for pci device
+    - xhci: Fix memory leak in xhci_add_in_port()
+    - xhci: fix USB3 device initiated resume race with roothub autosuspend
+    - xhci: Increase STS_HALT timeout in xhci_suspend()
+    - xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default
+      behaviour.
+    - xhci: make sure interrupts are restored to correct state
+    - [x86] iio: imu: inv_mpu6050: fix temperature reporting using bad unit
+    - USB: atm: ueagle-atm: add missing endpoint check
+    - USB: idmouse: fix interface sanity checks
+    - USB: serial: io_edgeport: fix epic endpoint lookup
+    - usb: roles: fix a potential use after free
+    - USB: adutux: fix interface sanity check
+    - usb: core: urb: fix URB structure initialization function
+    - usb: mon: Fix a deadlock in usbmon between mmap and read
+    - [arm64,amd64,i386] tpm: add check after commands attribs tab allocation
+    - [arm64,amd64,i386] tpm: Switch to platform_get_irq_optional()
+    - brcmfmac: disable PCIe interrupts before bus reset
+    - mtd: rawnand: Change calculating of position page containing BBM
+    - virtio-balloon: fix managed page counts when migrating pages between
+      zones
+    - usb: dwc3: pci: add ID for the Intel Comet Lake -H variant
+    - [arm64,armhf] usb: dwc3: gadget: Fix logical condition
+    - [arm64,armhf] usb: dwc3: gadget: Clear started flag for non-IOC
+    - [arm64,armhf] usb: dwc3: ep0: Clear started flag on completion
+    - [x86] usb: typec: fix use after free in typec_register_port()
+    - iwlwifi: pcie: fix support for transmitting SKBs with fraglist
+    - btrfs: check page->mapping when loading free space cache
+    - btrfs: use btrfs_block_group_cache_done in update_block_group
+    - btrfs: use refcount_inc_not_zero in kill_all_nodes
+    - Btrfs: fix metadata space leak on fixup worker failure to set range as
+      delalloc
+    - Btrfs: fix negative subv_writers counter and data space leak after
+      buffered write
+    - btrfs: Avoid getting stuck during cyclic writebacks
+    - btrfs: Remove btrfs_bio::flags member
+    - Btrfs: send, skip backreference walking for extents with many references
+    - btrfs: record all roots for rename exchange on a subvol
+    - rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address
+    - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of
+      buffer
+    - rtlwifi: rtl8192de: Fix missing enable interrupt flag
+    - ovl: fix lookup failure on multi lower squashfs
+    - ovl: fix corner case of non-unique st_dev;st_ino
+    - ovl: relax WARN_ON() on rename to self
+    - [arm*] hwrng: omap - Fix RNG wait loop timeout
+    - dm writecache: handle REQ_FUA
+    - dm zoned: reduce overhead of backing device checks
+    - workqueue: Fix spurious sanity check failures in destroy_workqueue()
+    - workqueue: Fix pwq ref leak in rescuer_thread()
+    - ASoC: rt5645: Fixed buddy jack support.
+    - ASoC: rt5645: Fixed typo for buddy jack support.
+    - ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report
+    - md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
+    - blk-mq: avoid sysfs buffer overflow with too many CPU cores
+    - cgroup: pids: use atomic64_t for pids->limit
+    - wil6210: check len before memcpy() calls
+    - ar5523: check NULL before memcpy() in ar5523_cmd()
+    - [s390x] mm: properly clear _PAGE_NOEXEC bit when it is not supported
+    - cpuidle: Do not unset the driver if it is there already
+    - cpuidle: use first valid target residency as poll time
+    - [arm64,armhf] drm/panfrost: Open/close the perfcnt BO
+    - [powerpc*] perf: Disable trace_imc pmu
+    - [x86] intel_th: Fix a double put_device() in error path
+    - [x86] intel_th: pci: Add Ice Lake CPU support
+    - [x86] intel_th: pci: Add Tiger Lake CPU support
+    - PM / devfreq: Lock devfreq in trans_stat_show
+    - [powerpc*] cpufreq: powernv: fix stack bloat and hard limit on number of
+      CPUs
+    - ALSA: fireface: fix return value in error path of isochronous resources
+      reservation
+    - ALSA: oxfw: fix return value in error path of isochronous resources
+      reservation
+    - ALSA: hda/realtek - Line-out jack doesn't work on a Dell AIO
+    - ACPI / utils: Move acpi_dev_get_first_match_dev() under CONFIG_ACPI
+    - ACPI: LPSS: Add LNXVIDEO -> BYT I2C7 to lpss_device_links
+    - ACPI: LPSS: Add LNXVIDEO -> BYT I2C1 to lpss_device_links
+    - ACPI: LPSS: Add dmi quirk for skipping _DEP check for some device-links
+    - ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug
+      bridge
+    - ACPI: OSL: only free map once in osl.c
+    - ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data()
+    - ACPI: EC: Rework flushing of pending work
+    - ACPI: PM: Avoid attaching ACPI PM domain to certain devices
+    - [arm64] pinctrl: armada-37xx: Fix irq mask access in
+      armada_37xx_irq_set_type()
+    - [armhf] pinctrl: samsung: Add of_node_put() before return in error path
+    - [armhf] pinctrl: samsung: Fix device node refcount leaks in Exynos
+      wakeup controller init
+    - [armhf] pinctrl: samsung: Fix device node refcount leaks in init code
+    - [armhf] mmc: host: omap_hsmmc: add code for special init of wl1251 to
+      get rid of pandora_wl1251_init_card
+    - RDMA/core: Fix ib_dma_max_seg_size()
+    - ppdev: fix PPGETTIME/PPSETTIME ioctls
+    - [powerpc*] Allow 64bit VDSO __kernel_sync_dicache to work across ranges
+      >4GB
+    - [powerpc*] xive: Prevent page fault issues in the machine crash handler
+    - [powerpc*] Allow flush_icache_range to work across ranges >4GB
+    - [powerpc*] xive: Skip ioremap() of ESB pages for LSI interrupts
+    - video/hdmi: Fix AVI bar unpack
+    - quota: Check that quota is not dirty before release
+    - ext2: check err when partial != NULL
+    - seccomp: avoid overflow in implicit constant conversion
+    - quota: fix livelock in dquot_writeback_dquots
+    - ext4: Fix credit estimate for final inode freeing
+    - reiserfs: fix extended attributes on the root directory
+    - scsi: qla2xxx: Fix SRB leak on switch command timeout
+    - scsi: qla2xxx: Fix a dma_pool_free() call
+    - Revert "scsi: qla2xxx: Fix memory leak when sending I/O fails"
+    - [armhf] omap: pdata-quirks: revert pandora specific gpiod additions
+    - [armhf] omap: pdata-quirks: remove openpandora quirks for mmc3 and
+      wl1251
+    - [powerpc*] Avoid clang warnings around setjmp and longjmp
+    - [powerpc*] Fix vDSO clock_getres()
+    - mm, memfd: fix COW issue on MAP_PRIVATE and F_SEAL_FUTURE_WRITE mappings
+    - mm: memcg/slab: wait for !root kmem_cache refcnt killing on root
+      kmem_cache destruction
+    - ext4: work around deleting a file with i_nlink == 0 safely
+    - [arm64] firmware: qcom: scm: Ensure 'a0' status code is treated as
+      signed
+    - [s390x] smp,vdso: fix ASCE handling
+    - [s390x] kaslr: store KASLR offset for early dumps
+    - mm/shmem.c: cast the type of unmap_start to u64
+    - [powerpc*] Define arch_is_kernel_initmem_freed() for lockdep
+    - rtc: disable uie before setting time and enable after
+    - splice: only read in as much information as there is pipe buffer space
+    - ext4: fix a bug in ext4_wait_for_tail_page_commit
+    - ext4: fix leak of quota reservations
+    - blk-mq: make sure that line break can be printed
+    - workqueue: Fix missing kfree(rescuer) in destroy_workqueue()
+    - r8169: fix rtl_hw_jumbo_disable for RTL8168evl
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.5
+    - inet: protect against too small mtu values.
+    - mqprio: Fix out-of-bounds access in mqprio_dump
+    - net: bridge: deny dev_set_mac_address() when unregistering
+    - net: dsa: fix flow dissection on Tx path
+    - [armhf] net: ethernet: ti: cpsw: fix extra rx interrupt
+    - net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues
+    - net_sched: validate TCA_KIND attribute in tc_chain_tmplt_add()
+    - [arm64] net: thunderx: start phy before starting autonegotiation
+    - openvswitch: support asymmetric conntrack
+    - tcp: md5: fix potential overestimation of TCP option space
+    - tipc: fix ordering of tipc module init and exit routine
+    - net/mlx5e: Query global pause state before setting prio2buffer
+    - net: ipv6: add net argument to ip6_dst_lookup_flow
+    - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
+    - tcp: fix rejected syncookies due to stale timestamps
+    - tcp: tighten acceptance of ACKs not matching a child socket
+    - tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE()
+    - net: core: rename indirect block ingress cb function
+    - net: sched: allow indirect blocks to bind to clsact in TC
+    - cls_flower: Fix the behavior using port ranges with hw-offload
+    - gre: refetch erspan header from skb->data after pskb_may_pull()
+    - Fixed updating of ethertype in function skb_mpls_pop
+    - net: Fixed updating of ethertype in skb_mpls_push()
+    - net/mlx5e: Fix TXQ indices to be sequential
+    - net/mlx5e: Fix SFF 8472 eeprom length
+    - net/mlx5e: Fix freeing flow with kfree() and not kvfree()
+    - net/mlx5e: Fix translation of link mode into speed
+    - net/mlx5e: ethtool, Fix analysis of speed setting
+    - page_pool: do not release pool until inflight == 0.
+    - xdp: obtain the mem_id mutex before trying to remove an entry.
+    - r8169: add missing RX enabling for WoL on RTL8125
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.6
+    - USB: Fix incorrect DMA allocations for local memory pool drivers
+    - mmc: block: Make card_busy_detect() a bit more generic
+    - mmc: block: Add CMD13 polling for MMC IOCTLS with R1B response
+    - mmc: core: Drop check for mmc_card_is_removable() in mmc_rescan()
+    - mmc: core: Re-work HW reset for SDIO cards
+    - PCI/PM: Always return devices to D0 when thawing
+    - PCI: pciehp: Avoid returning prematurely from sysfs requests
+    - PCI: Fix Intel ACS quirk UPDCR register address
+    - PCI/MSI: Fix incorrect MSI-X masking on resume
+    - PCI: Do not use bus number zero from EA capability
+    - PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3
+    - PM / QoS: Redefine FREQ_QOS_MAX_DEFAULT_VALUE to S32_MAX
+    - block: fix "check bi_size overflow before merge"
+    - gfs2: Multi-block allocations in gfs2_page_mkwrite
+    - gfs2: fix glock reference problem in gfs2_trans_remove_revoke
+    - [arm64] rpmsg: glink: Fix reuse intents memory leak issue
+    - [arm64] rpmsg: glink: Fix use after free in open_ack TIMEOUT case
+    - [arm64] rpmsg: glink: Put an extra reference during cleanup
+    - [arm64] rpmsg: glink: Fix rpmsg_register_device err handling
+    - [arm64] rpmsg: glink: Don't send pending rx_done during remove
+    - [arm64] rpmsg: glink: Free pending deferred work on remove
+    - cifs: smbd: Return -EAGAIN when transport is reconnecting
+    - cifs: smbd: Only queue work for error recovery on memory registration
+    - cifs: smbd: Add messages on RDMA session destroy and reconnection
+    - cifs: smbd: Return -EINVAL when the number of iovs exceeds
+      SMBDIRECT_MAX_SGE
+    - cifs: smbd: Return -ECONNABORTED when trasnport is not in connected
+      state
+    - cifs: Don't display RDMA transport on reconnect
+    - CIFS: Respect O_SYNC and O_DIRECT flags during reconnect
+    - CIFS: Close open handle after interrupted close
+    - CIFS: Do not miss cancelled OPEN responses
+    - CIFS: Fix NULL pointer dereference in mid callback
+    - cifs: Fix retrieval of DFS referrals in cifs_mount()
+    - [armhf] ARM: tegra: Fix FLOW_CTLR_HALT register clobbering by
+      tegra_resume()
+    - vfio/pci: call irq_bypass_unregister_producer() before freeing irq
+    - dma-buf: Fix memory leak in sync_file_merge()
+    - [arm64,armhf] drm/panfrost: Fix a race in panfrost_ioctl_madvise()
+    - [arm64,armhf] drm/panfrost: Fix a BO leak in panfrost_ioctl_mmap_bo()
+    - [arm64,armhf] drm/panfrost: Fix a race in panfrost_gem_free_object()
+    - [x86] drm/mgag200: Extract device type from flags
+    - [x86] drm/mgag200: Store flags from PCI driver data in device structure
+    - [x86] drm/mgag200: Add workaround for HW that does not support
+      'startadd'
+    - [x86] drm/mgag200: Flag all G200 SE A machines as broken wrt <startadd>
+    - [arm64] drm: meson: venc: cvbs: fix CVBS mode matching
+    - dm mpath: remove harmful bio-based optimization
+    - dm btree: increase rebalance threshold in __rebalance2()
+    - dm clone metadata: Track exact changes per transaction
+    - dm clone metadata: Use a two phase commit
+    - dm clone: Flush destination device before committing metadata
+    - dm thin metadata: Add support for a pre-commit callback
+    - dm thin: Flush data device before committing metadata
+    - scsi: ufs: Disable autohibern8 feature in Cadence UFS
+    - scsi: iscsi: Fix a potential deadlock in the timeout handler
+    - scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd
+    - scsi: qla2xxx: Initialize free_work before flushing it
+    - scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX
+    - scsi: qla2xxx: Change discovery state before PLOGI
+    - scsi: qla2xxx: Correctly retrieve and interpret active flash region
+    - scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB
+      Cmd
+    - drm/nouveau/kms/nv50-: Call outp_atomic_check_view() before handling PBN
+    - drm/nouveau/kms/nv50-: Store the bpc we're using in nv50_head_atom
+    - drm/nouveau/kms/nv50-: Limit MST BPC to 8
+    - [x86] drm/i915/fbc: Disable fbc by default on all glk+
+    - drm/radeon: fix r1xx/r2xx register checker for POT textures
+    - drm/dp_mst: Correct the bug in drm_dp_update_payload_part1()
+    - drm/amdgpu: initialize vm_inv_eng0_sem for gfxhub and mmhub
+    - drm/amdgpu: invalidate mmhub semaphore workaround in gmc9/gmc10
+    - drm/amdgpu/gfx10: explicitly wait for cp idle after halt/unhalt
+    - drm/amdgpu/gfx10: re-init clear state buffer after gpu reset
+    - drm/amdgpu: avoid using invalidate semaphore for picasso
+    - drm/amdgpu: add invalidate semaphore limit for SRIOV and picasso in gmc9
+    - ALSA: hda: Fix regression by strip mask fix
+
+  [ Joe Richey ]
+  * [amd64/cloud-amd64] tpm: Enable TPM drivers for Cloud (Closes: #946237)
+
+  [ Ben Hutchings ]
+  * [armel/rpi,armhf,arm64] Enable DEBUG_WX
+  * linux-cpupower: Fix grammar error in package description
+  * debian/control: Make library package descriptions more consistent
+  * Set ABI to 1
+  * tracing: Do not create directories if lockdown is in affect
+
+  [ Aurelien Jarno ]
+  * [armhf,arm64] Fix critical trip point on RPI 3.
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 5.4.3-rt1 and re-enable
+  * [rt] Enable PREEMPT_RT (instead of PREEMPT_RT_FULL) which is part of 5.4
+  * [rt] Update to 5.4.5-rt3
+
+  [ YunQiang Su ]
+  * [mipsel,mips64el/loongson-3] Enable AMDGPU.
+  * [mips*] switch to vmlinuz from vmlinux except octeon.
+  * [mips*] enable CONFIG_MIPS_O32_FP64_SUPPORT.
+  * [mips*] enable CONFIG_CPU_HAS_MSA except octeon.
+
+  [ Vagrant Cascadian ]
+  * [arm64] drivers/gpu/drm/sun4i: Enable DRM_SUN8I_MIXER as a module.
+    (Closes: #946510). Thanks to Andrei POPESCU.
+
+  [ Sudip Mukherjee ]
+  * Add libtraceevent packages (Closes: #944138)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 27 Dec 2019 22:17:44 +0000
+
+linux (5.4.2-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.1
+    - Bluetooth: Fix invalid-free in bcsp_close()
+    - ath9k_hw: fix uninitialized variable data
+    - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
+      (CVE-2019-15099)
+    - ath10k: Fix HOST capability QMI incompatibility
+    - ath10k: restore QCA9880-AR1A (v1) detection
+    - Revert "Bluetooth: hci_ll: set operational frequency earlier"
+    - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
+    - md/raid10: prevent access of uninitialized resync_pages offset
+    - [x86] insn: Fix awk regexp warnings
+    - [x86] speculation: Fix incorrect MDS/TAA mitigation status
+    - [x86] speculation: Fix redundant MDS mitigation message
+    - nbd: prevent memory leak
+    - [i386] x86/stackframe/32: Repair 32-bit Xen PV
+    - [i386] x86/xen/32: Make xen_iret_crit_fixup() independent of frame
+      layout
+    - [i386] x86/xen/32: Simplify ring check in xen_iret_crit_fixup()
+    - [i386] x86/doublefault/32: Fix stack canaries in the double fault
+      handler
+    - [i386] x86/pti/32: Size initial_page_table correctly
+    - [i386] x86/cpu_entry_area: Add guard page for entry stack on 32bit
+    - [i386] x86/entry/32: Fix IRET exception
+    - [i386] x86/entry/32: Use %ss segment where required
+    - [i386] x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL
+    - [i386] x86/entry/32: Unwind the ESPFIX stack earlier on exception entry
+    - [i386] x86/entry/32: Fix NMI vs ESPFIX
+    - [i386] x86/pti/32: Calculate the various PTI cpu_entry_area sizes
+      correctly, make the CPU_ENTRY_AREA_PAGES assert precise
+    - [i386] x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3
+    - futex: Prevent robust futex exit race
+    - ALSA: usb-audio: Fix NULL dereference at parsing BADD
+    - ALSA: usb-audio: Fix Scarlett 6i6 Gen 2 port data
+    - media: vivid: Set vid_cap_streaming and vid_out_streaming to true
+    - media: vivid: Fix wrong locking that causes race conditions on streaming
+      stop (CVE-2019-18683)
+    - media: usbvision: Fix invalid accesses after device disconnect
+    - media: usbvision: Fix races among open, close, and disconnect
+    - cpufreq: Add NULL checks to show() and store() methods of cpufreq
+    - futex: Move futex exit handling into futex code
+    - futex: Replace PF_EXITPIDONE with a state
+    - exit/exec: Seperate mm_release()
+    - futex: Split futex_mm_release() for exit/exec
+    - futex: Set task::futex_state to DEAD right after handling futex exit
+    - futex: Mark the begin of futex exit explicitly
+    - futex: Sanitize exit state handling
+    - futex: Provide state handling for exec() as well
+    - futex: Add mutex around futex exit
+    - futex: Provide distinct return value when owner is exiting
+    - futex: Prevent exit livelock
+    - media: uvcvideo: Fix error path in control parsing failure
+    - media: b2c2-flexcop-usb: add sanity checking (CVE-2019-15291)
+    - media: cxusb: detect cxusb_ctrl_msg error in query
+    - media: imon: invalid dereference in imon_touch_event
+    - media: mceusb: fix out of bounds read in MCE receiver buffer
+    - ALSA: hda - Disable audio component for legacy Nvidia HDMI codecs
+    - usbip: tools: fix fd leakage in the function of read_attr_usbip_status
+    - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
+    - usb-serial: cp201x: support Mark-10 digital force gauge
+    - USB: chaoskey: fix error case of a timeout
+    - appledisplay: fix error handling in the scheduled work
+    - USB: serial: mos7840: add USB ID to support Moxa UPort 2210
+    - USB: serial: mos7720: fix remote wakeup
+    - USB: serial: mos7840: fix remote wakeup
+    - USB: serial: option: add support for DW5821e with eSIM support
+    - USB: serial: option: add support for Foxconn T77W968 LTE modules
+    - [x86] staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
+    - [powerpc*] powerpc/book3s64: Fix link stack flush on context switch
+      (CVE-2019-18660)
+    - [powerpc*] KVM: PPC: Book3S HV: Flush link stack on guest exit to host
+      kernel
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.2
+    - io_uring: async workers should inherit the user creds
+    - net: separate out the msghdr copy from ___sys_{send,recv}msg()
+    - net: disallow ancillary data for __sys_{send,recv}msg_file()
+    - [arm64] crypto: inside-secure - Fix stability issue with Macchiatobin
+    - driver core: platform: use the correct callback type for bus_find_device
+    - [arm64,armel,armhf] usb: dwc2: use a longer core rest timeout in
+      dwc2_core_reset()
+    - [x86] staging: rtl8192e: fix potential use after free
+    - staging: rtl8723bs: Drop ACPI device ids
+    - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
+    - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
+    - [x86] mei: bus: prefix device names on bus with the bus name
+    - [x86] mei: me: add comet point V device id
+    - [x86] thunderbolt: Power cycle the router if NVM authentication fails
+    - [x86] fpu: Don't cache access to fpu_fpregs_owner_ctx
+    - macvlan: schedule bc_work even if error
+    - mdio_bus: don't use managed reset-controller
+    - net: macb: add missed tasklet_kill
+    - net: psample: fix skb_over_panic
+    - net: sched: fix `tc -s class show` no bstats on class with nolock
+      subqueues
+    - openvswitch: fix flow command message size
+    - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook
+    - slip: Fix use-after-free Read in slip_open
+    - sctp: cache netns in sctp_ep_common
+    - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
+    - openvswitch: remove another BUG_ON()
+    - net: skmsg: fix TLS 1.3 crash with full sk_msg
+    - tipc: fix link name length check
+    - r8169: fix jumbo configuration for RTL8168evl
+    - r8169: fix resume on cable plug-in
+    - ext4: add more paranoia checking in ext4_expand_extra_isize handling
+    - Revert "jffs2: Fix possible null-pointer dereferences in
+      jffs2_add_frag_to_fragtree()"
+    - HID: core: check whether Usage Page item is after Usage ID items
+    - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
+    - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input
+      size
+
+  [ Ben Hutchings ]
+  * [armel] udeb: Replace m25p80 with spi-nor in mtd-modules (fixes FTBFS)
+  * [ia64] udeb: Remove SGI SN2 modules (fixes FTBFS)
+  * iio: Enable TI_ADS1015 as module, replacing SENSORS_ADS1015
+  * [armhf] regulator: Really enable REGULATOR_STM32_PWR
+  * [armhf] drm/panel: Enable DRM_PANEL_{SONY_ACX565AKM,TPO_TD028TTEC1,
+    TPO_TD043MTEA1} as modules, replacing the corresponding omapdrm options
+  * [armhf,arm64] platform/chrome: Change chromeos drivers back to modules
+  * Build-Depend on kernel-wedge 2.102; remove workaround in debian/rules.real
+  * debian/bin: Add script to update taint list for bug reporting script
+  * linux-image: bug: Update taint list and use upstream descriptions
+  * btrfs,fanotify: Use TAINT_AUX instead of TAINT_USER for unsupported
+    features
+
+  [ Romain Perier ]
+  * Enable VIRTIO_FS and VIRTIO_PMEM (Closes: #945853)
+
+  [ Aurelien Jarno]
+  * [ppc64el] Fix building libbpf with recent binutils versions (fixes FTBFS).
+
+  [ Luca Boccassi ]
+  * verity: enable DM_VERITY_VERIFY_ROOTHASH_SIG
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 05 Dec 2019 08:37:56 +0100
+
+linux (5.4-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.4
+
+  [ Ben Hutchings ]
+  * lockdown: Rebase on upstream Lockdown LSM:
+    - Refresh "efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode"
+    - Update "efi: Lock down the kernel if booted in secure boot mode"
+    - Update "Add a SysRq option to lift kernel lockdown"
+    - Update "mtd: Disable slram and phram when locked down"
+    - Update "arm64: add kernel config option to lock down when in Secure Boot
+      mode"
+    - Refresh "lockdown: Refer to Debian wiki until manual page exists"
+    - Drop all other lockdown patches
+    - Enable SECURITY_LOCKDOWN_LSM, LOCK_DOWN_KERNEL_FORCE_NONE,
+      LOCK_DOWN_IN_EFI_SECURE_BOOT
+  * [armel/marvell] lockdown: Disable Lockdown as it now selects MODULE_SIG
+  * [amd64] Update "x86: Make x32 syscall support conditional …" for 5.4
+  * debian/lib/python/debian_linux/abi.py: Add support for symbol namespaces
+  * debian/bin/genpatch-rt: Fix series generation from git
+
+  [ Romain Perier ]
+  * Rebased the following patches onto 5.4.x:
+    - debian/version.patch
+    - debian/ia64-hardcode-arch-script-output.patch
+    - bugfix/all/
+      radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
+    - features/all/aufs5/aufs5-mmap.patch
+    - features/all/aufs5/aufs5-standalone.patch
+    - features/x86/
+      intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch
+    - bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
+    - debian/revert-objtool-fix-config_stack_validation-y-warning.patch
+    - features/all/db-mok-keyring/
+      0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module
+      .patch
+    - bugfix/all/tools-perf-man-date.patch
+    - bugfix/all/usbip-fix-misuse-of-strncpy.patch
+    - bugfix/all/partially-revert-usb-kconfig-using-select-for-usb_co.patch
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] Enable CONFIG_PATA_BUDDHA as module
+
+  [ Aurelien Jarno ]
+  * [armhf] Add support for STM32MP1 SoC: enable ARCH_STM32,
+    CRYPTO_DEV_STM32_CRC, CRYPTO_DEV_STM32_CRYP, CRYPTO_DEV_STM32_HASH,
+    DRM_PANEL_ORISETECH_OTM8009A, DRM_SII902X, DRM_STM, DRM_STM_DSI,
+    HW_RANDOM_STM32, I2C_STM32F7, INPUT_STPMIC1_ONKEY, MFD_STM32_LPTIMER,
+    MFD_STPMIC1, MTD_NAND_STM32_FMC2, PHY_STM32_USBPHYC, PWM_STM32_LP,
+    REGULATOR_STM32_BOOSTER, REGULATOR_STM32_PWR, REGULATOR_STM32_VREFBUF,
+    REGULATOR_STPMIC1, REMOTEPROC, RTC_DRV_STM32, SERIAL_STM32,
+    SERIAL_STM32_CONSOLE, SND_AUDIO_GRAPH_CARD, SND_SOC_CS42L51_I2C,
+    SND_SOC_STM32_DFSDM, SND_SOC_STM32_I2S, SND_SOC_STM32_SAI,
+    SND_SOC_STM32_SPDIFRX, SPI_STM32, SPI_STM32_QSPI, STM32_DMA,
+    STM32_DMAMUX, STM32_MDMA, STM32_RPROC, STPMIC1_WATCHDOG,
+    TOUCHSCREEN_EDT_FT5X06.
+  * [arm64] Re-enable BT_HCIUART_{BCM,LL} (arm64 version of #906048).
+  * [arm64,armhf] Enable CLK_RASPBERRYPI and RASPBERRYPI_CPUFREQ.
+
+  [ Salvatore Bonaccorso ]
+  * md: Enable MD_CLUSTER as module (Closes: #927026)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 26 Nov 2019 01:33:11 +0000
+
+linux (5.3.15-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.10
+    - regulator: of: fix suspend-min/max-voltage parsing
+    - ASoC: topology: Fix a signedness bug in soc_tplg_dapm_widget_create()
+    - [arm64] dts: allwinner: a64: pine64-plus: Add PHY regulator delay
+    - [arm64] dts: allwinner: a64: Drop PMU node
+    - [arm64] dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay
+    - [arm64] dts: Fix gpio to pinmux mapping
+    - [x86] pinctrl: intel: Allocate IRQ chip dynamic
+    - [amd64] ASoC: SOF: loader: fix kernel oops on firmware boot failure
+    - [amd64] ASoC: SOF: topology: fix parse fail issue for byte/bool tuple
+      types
+    - [amd64] ASoC: SOF: Intel: hda: fix warnings during FW load
+    - [amd64] ASoC: SOF: Intel: initialise and verify FW crash dump data.
+    - [amd64] ASoC: SOF: Intel: hda: Disable DMI L1 entry during capture
+    - [amd64] ASoC: rt5682: add NULL handler to set_jack function
+    - [amd64] ASoC: intel: sof_rt5682: add remove function to disable jack
+    - [x86] ASoC: intel: bytcr_rt5651: add null check to support_button_press
+    - [armhf] regulator: pfuze100-regulator: Variable "val" in
+      pfuze100_regulator_probe() could be uninitialized
+    - [armhf,arm64] ASoc: rockchip: i2s: Fix RPM imbalance
+    - [arm64] dts: rockchip: fix Rockpro64 RK808 interrupt line
+    - [armhf] dts: logicpd-torpedo-som: Remove twl_keypad
+    - [arm64] dts: rockchip: fix RockPro64 vdd-log regulator settings
+    - [arm64] dts: rockchip: fix RockPro64 sdhci settings
+    - [arm64] dts: zii-ultra: fix ARM regulator states
+    - [armhf] dts: am3874-iceboard: Fix 'i2c-mux-idle-disconnect' usage
+    - [armhf] dts: Use level interrupt for omap4 & 5 wlcore
+    - [armel,armhf] mm: fix alignment handler faults under memory pressure
+    - scsi: qla2xxx: fix a potential NULL pointer dereference
+    - scsi: scsi_dh_alua: handle RTPG sense code correctly during state
+      transitions
+    - [armel,armhf] 8908/1: add __always_inline to functions called from
+      __get_user_check()
+    - [arm64] dts: rockchip: fix RockPro64 sdmmc settings
+    - [arm64] dts: rockchip: Fix usb-c on Hugsun X99 TV Box
+    - [armhf] dts: imx6q-logicpd: Re-Enable SNVS power key
+    - perf tools: Fix resource leak of closedir() on the error paths
+    - perf c2c: Fix memory leak in build_cl_output()
+    - perf kmem: Fix memory leak in compact_gfp_flags()
+    - drm/amdgpu: fix potential VM faults
+    - drm/amdgpu: fix error handling in amdgpu_bo_list_create
+    - scsi: target: core: Do not overwrite CDB byte 1
+    - scsi: hpsa: add missing hunks in reset-patch
+    - [x86] ASoC: Intel: sof-rt5682: add a check for devm_clk_get
+    - [x86] ASoC: SOF: control: return true when kcontrol values change
+    - tracing: Fix "gfp_t" format for synthetic events
+    - [arm64] dts: bcm2837-rpi-cm3: Avoid leds-gpio probing issue
+    - [x86] ALSA: hda: Add Tigerlake/Jasperlake PCI ID
+    - [armhf,arm64] irqchip/gic-v3-its: Use the exact ITSList for VMOVP
+    - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs
+    - [riscv64] irqchip/sifive-plic: Skip contexts except supervisor in
+      plic_init()
+    - nbd: protect cmd->status with cmd->lock
+    - nbd: handle racing with error'ed out commands
+    - cxgb4: fix panic when attaching to ULD fail
+    - cxgb4: request the TX CIDX updates to status page
+    - dccp: do not leak jiffies on the wire
+    - erspan: fix the tun_info options_len check for erspan
+    - inet: stop leaking jiffies on the wire
+    - net: annotate accesses to sk->sk_incoming_cpu
+    - net: annotate lockless accesses to sk->sk_napi_id
+    - [armhf] net: dsa: bcm_sf2: Fix IMP setup for port different than 8
+    - net: fix sk_page_frag() recursion from memory reclaim
+    - [arm64] net: hisilicon: Fix ping latency when deal with high throughput
+    - net/mlx4_core: Dynamically set guaranteed amount of counters per VF
+    - netns: fix GFP flags in rtnl_net_notifyid()
+    - net: rtnetlink: fix a typo fbd -> fdb
+    - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq()
+    - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol()
+    - udp: fix data-race in udp_set_dev_scratch()
+    - vxlan: check tun_info options_len properly
+    - net: add skb_queue_empty_lockless()
+    - udp: use skb_queue_empty_lockless()
+    - net: use skb_queue_empty_lockless() in poll() handlers
+    - net: use skb_queue_empty_lockless() in busy poll contexts
+    - net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
+    - ipv4: fix route update on metric change.
+    - net/smc: fix closing of fallback SMC sockets
+    - net/smc: keep vlan_id for SMC-R in smc_listen_work()
+    - keys: Fix memory leak in copy_net_ns
+    - net: phylink: Fix phylink_dbg() macro
+    - rxrpc: Fix handling of last subpacket of jumbo packet
+    - net/mlx5e: Determine source port properly for vlan push action
+    - net/mlx5e: Remove incorrect match criteria assignment line
+    - net/mlx5e: Initialize on stack link modes bitmap
+    - net/mlx5: Fix flow counter list auto bits struct
+    - net/smc: fix refcounting for non-blocking connect()
+    - net/mlx5: Fix rtable reference leak
+    - r8169: fix wrong PHY ID issue with RTL8168dp
+    - net/mlx5e: Fix ethtool self test: link speed
+    - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget
+    - ipv4: fix IPSKB_FRAG_PMTU handling with fragmentation
+    - [armhf] net: dsa: b53: Do not clear existing mirrored port mask
+    - net: dsa: fix switch tree list
+    - net: ensure correct skb->tstamp in various fragmenters
+    - [arm64] net: hns3: fix mis-counting IRQ vector numbers issue
+    - net: netem: fix error path for corrupted GSO frames
+    - net: reorder 'struct net' fields to avoid false sharing
+    - net: usb: lan78xx: Connect PHY before registering MAC
+    - [x86] r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2
+    - net: netem: correct the parent's backlog when corrupted packet was
+      dropped
+    - net/flow_dissector: switch to siphash
+    - CIFS: Fix retry mid list corruption on reconnects
+    - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending
+      driver fails
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11
+    - bonding: fix state transition issue in link monitoring
+    - CDC-NCM: handle incomplete transfer of MTU
+    - ipv4: Fix table id reference in fib_sync_down_addr
+    - [mips*/octeon] net: ethernet: octeon_mgmt: Account for second possible
+      VLAN header
+    - net: fix data-race in neigh_event_send()
+    - net: usb: qmi_wwan: add support for DW5821e with eSIM support
+    - nfc: netlink: fix double device reference drop
+    - qede: fix NULL pointer deref in __qede_remove()
+    - ipv6: fixes rt6_probe() and fib6_nh->last_probe init
+    - [arm64] net: hns: Fix the stray netpoll locks causing deadlock in NAPI
+      path
+    - net: prevent load/store tearing on sk->sk_stamp
+    - net: sched: prevent duplicate flower rules from tcf_proto destroy race
+    - net/smc: fix ethernet interface refcounting
+    - vsock/virtio: fix sock refcnt holding during the shutdown
+    - r8169: fix page read in r8168g_mdio_read
+    - ALSA: timer: Fix incorrectly assigned timer instance
+    - ALSA: bebob: fix to detect configured source of sampling clock for
+      Focusrite Saffire Pro i/o series
+    - ALSA: hda/ca0132 - Fix possible workqueue stall
+    - mm: memcontrol: fix NULL-ptr deref in percpu stats flush
+    - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
+    - mm, meminit: recalculate pcpu batch and high limits after init completes
+    - mm: thp: handle page cache THP correctly in PageTransCompoundMap
+    - mm, vmstat: hide /proc/pagetypeinfo from normal users
+    - dump_stack: avoid the livelock of the dump_lock
+    - mm: slab: make page_cgroup_ino() to recognize non-compound slab pages
+      properly
+    - btrfs: Consider system chunk array size for new SYSTEM chunks
+    - btrfs: tree-checker: Fix wrong check on max devid
+    - btrfs: save i_size to avoid double evaluation of i_size_read in
+      compress_file_range
+    - [x86] pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
+    - perf tools: Fix time sorting
+    - perf map: Use zalloc for map_groups
+    - drm/radeon: fix si_enable_smc_cac() failed issue
+    - HID: wacom: generic: Treat serial number and related fields as unsigned
+    - mm/khugepaged: fix might_sleep() warn with CONFIG_HIGHPTE=y
+    - blkcg: make blkcg_print_stat() print stats only for online blkgs
+    - [arm64] Do not mask out PTE_RDONLY in pte_same()
+    - ceph: fix use-after-free in __ceph_remove_cap()
+    - ceph: fix RCU case handling in ceph_d_revalidate()
+    - ceph: add missing check in d_revalidate snapdir handling
+    - ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open
+    - ceph: don't allow copy_file_range when stripe_count != 1
+    - [x86] iio: imu: inv_mpu6050: fix no data on MPU6050
+    - [armhf] sunxi: Fix CPU powerdown on A83T
+    - [armhf] dts: imx6-logicpd: Re-enable SNVS power key
+    - cpufreq: intel_pstate: Fix invalid EPB setting
+    - clone3: validate stack arguments
+    - netfilter: nf_tables: Align nft_expr private data to 64-bit
+    - netfilter: ipset: Fix an error code in ip_set_sockfn_get()
+    - [x86] intel_th: gth: Fix the window switching sequence
+    - [x86] intel_th: pci: Add Comet Lake PCH support
+    - [x86] intel_th: pci: Add Jasper Lake PCH support
+    - [amd64] dumpstack: Don't evaluate exception stacks before setup
+    - [i386] apic: Avoid bogus LDR warnings
+    - SMB3: Fix persistent handles reconnect
+    - can: usb_8dev: fix use-after-free on disconnect
+    - [armhf] can: flexcan: disable completely the ECC mechanism
+    - [armhf] can: c_can: c_can_poll(): only read status register after status
+      IRQ
+    - can: peak_usb: fix a potential out-of-sync while decoding packets
+    - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid
+      skb mem leak
+    - can: gs_usb: gs_can_open(): prevent memory leak (CVE-2019-19052)
+    - can: dev: add missing of_node_put() after calling of_get_child_by_name()
+    - can: mcba_usb: fix use-after-free on disconnect (CVE-2019-19529)
+    - can: peak_usb: fix slab info leak (CVE-2019-19534)
+    - configfs: fix a deadlock in configfs_symlink()
+    - ALSA: usb-audio: More validations of descriptor units
+    - ALSA: usb-audio: Simplify parse_audio_unit()
+    - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects
+    - ALSA: usb-audio: Remove superfluous bLength checks
+    - ALSA: usb-audio: Clean up check_input_term()
+    - ALSA: usb-audio: Fix possible NULL dereference at
+      create_yamaha_midi_quirk()
+    - ALSA: usb-audio: remove some dead code
+    - ALSA: usb-audio: Fix copy&paste error in the validator
+    - usbip: Implement SG support to vhci-hcd and stub driver
+    - HID: google: add magnemite/masterball USB ids
+    - bpf: lwtunnel: Fix reroute supplying invalid dst
+    - [x86] HID: intel-ish-hid: fix wrong error handling in
+      ishtp_cl_alloc_tx_ring()
+    - [powerpc] fix allow/prevent_user_access() when crossing segment
+      boundaries.
+    - RDMA/mlx5: Clear old rate limit when closing QP
+    - iw_cxgb4: fix ECN check on the passive accept
+    - RDMA/siw: free siw_base_qp in kref release routine
+    - RDMA/qedr: Fix reported firmware version
+    - IB/core: Use rdma_read_gid_l2_fields to compare GID L2 fields
+    - net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow
+    - net/mlx5e: TX, Fix consumer index of error cqe dump
+    - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq
+      (CVE-2019-19045)
+    - net/mlx5: fix memory leak in mlx5_fw_fatal_reporter_dump (CVE-2019-19047)
+    - scsi: qla2xxx: fixup incorrect usage of host_byte
+    - scsi: lpfc: Check queue pointer before use
+    - scsi: ufs-bsg: Wake the device before sending raw upiu commands
+    - RDMA/uverbs: Prevent potential underflow
+    - bpf: Fix use after free in subprog's jited symbol removal
+    - [armhf,arm64] net: stmmac: Fix the problem of tso_xmit
+    - net: openvswitch: free vport unless register_netdevice() succeeds
+    - scsi: lpfc: Honor module parameter lpfc_use_adisc
+    - scsi: qla2xxx: Initialized mailbox to prevent driver load failure
+    - bpf: Fix use after free in bpf_get_prog_name
+    - iwlwifi: pcie: fix PCI ID 0x2720 configs that should be soc
+    - iwlwifi: pcie: fix all 9460 entries for qnj
+    - iwlwifi: pcie: 0x2720 is qu and 0x30DC is not
+    - netfilter: nf_flow_table: set timeout before insertion into hashes
+    - xsk: Fix registration of Rx-only sockets
+    - net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag
+    - ipvs: don't ignore errors in case refcounting ip_vs module fails
+    - ipvs: move old_secure_tcp into struct netns_ipvs
+    - netfilter: nft_payload: fix missing check for matching length in offloads
+    - RDMA/nldev: Skip counter if port doesn't match
+    - bonding: fix unexpected IFF_BONDING bit unset
+    - bonding: use dynamic lockdep key instead of subclass
+    - macsec: fix refcnt leak in module exit routine
+    - virt_wifi: fix refcnt leak in module exit routine
+    - scsi: sd: define variable dif as unsigned int instead of bool
+    - usb: gadget: composite: Fix possible double free memory bug
+    - usb: gadget: configfs: fix concurrent issue between composite APIs
+    - [armhf,arm64] usb: dwc3: remove the call trace of USBx_GFLADJ
+    - [x86] perf/amd/ibs: Fix reading of the IBS OpData register and thus
+      precise RIP validity
+    - [x86] perf/amd/ibs: Handle erratum #420 only on the affected CPU family
+      (10h)
+    - [x86] perf/uncore: Fix event group support
+    - USB: Skip endpoints with 0 maxpacket length
+    - USB: ldusb: use unsigned size format specifiers
+    - usbip: tools: Fix read_usb_vudc_device() error path handling
+    - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
+    - [arm64] RDMA/hns: Prevent memory leaks of eq->buf_list
+    - scsi: qla2xxx: stop timer in shutdown path
+    - sched/topology: Don't try to build empty sched domains
+    - sched/topology: Allow sched_asym_cpucapacity to be disabled
+    - nvme-multipath: fix possible io hang after ctrl reconnect
+    - [amd64] fjes: Handle workqueue allocation failure
+    - [arm64] net: hisilicon: Fix "Trying to free already-free IRQ"
+    - wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
+      (CVE-2019-19051)
+    - [x86] iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire
+      A315-41
+    - mt76: dma: fix buffer unmap with non-linear skbs
+    - drm/amdgpu/sdma5: do not execute 0-sized IBs (v2)
+    - drm/sched: Set error to s_fence if HW job submission failed.
+    - drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
+    - drm/amd/display: do not synchronize "drr" displays
+    - drm/amd/display: add 50us buffer as WA for pstate switch in active
+    - drm/amd/display: Passive DP->HDMI dongle detection fix
+    - drm/amd/display: dc.c:use kzalloc without test
+    - SUNRPC: The TCP back channel mustn't disappear while requests are
+      outstanding
+    - SUNRPC: The RDMA back channel mustn't disappear while requests are
+      outstanding
+    - SUNRPC: Destroy the back channel when we destroy the host transport
+    - [x86] hv_netvsc: Fix error handling in netvsc_attach()
+    - efi/tpm: Return -EINVAL when determining tpm final events log size fails
+    - efi: libstub/arm: Account for firmware reserved memory at the base of RAM
+    - [x86] efi: Never relocate kernel below lowest acceptable address
+    - [arm64] cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo
+    - usb: dwc3: gadget: fix race when disabling ep with cancelled xfers
+    - [arm64] apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core
+    - [arm64] Brahma-B53 is SSB and spectre v2 safe
+    - [arm64] apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core
+    - NFSv4: Don't allow a cached open with a revoked delegation
+    - igb: Fix constant media auto sense switching when no cable is connected
+    - e1000: fix memory leaks
+    - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write()
+    - [x86] pinctrl: cherryview: Fix irq_valid_mask calculation
+    - timekeeping/vsyscall: Update VDSO data unconditionally
+    - mm/filemap.c: don't initiate writeback if mapping has no dirty pages
+    - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg
+      is dead
+    - [x86] ASoC: SOF: Intel: hda-stream: fix the CONFIG_ prefix missing
+    - usbip: Fix free of unallocated memory in vhci tx
+    - bonding: fix using uninitialized mode_lock
+    - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.12
+    - scsi: core: Handle drivers which set sg_tablesize to zero
+    - ax88172a: fix information leak on short answers
+    - devlink: disallow reload operation during device cleanup
+    - ipmr: Fix skb headroom in ipmr_get_route().
+    - net/smc: fix fastopen for non-blocking connect()
+    - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules
+    - slip: Fix memory leak in slip_open error path
+    - tcp: remove redundant new line from tcp_event_sk_skb
+    - devlink: Add method for time-stamp on reporter's dump
+    - net/smc: fix refcount non-blocking connect() -part 2
+    - ALSA: usb-audio: Fix missing error check at mixer resolution test
+    - ALSA: usb-audio: not submit urb for stopped endpoint
+    - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk()
+    - ALSA: usb-audio: Fix incorrect size check for processing/extension units
+    - Btrfs: fix log context list corruption after rename exchange operation
+    - cgroup: freezer: call cgroup_enter_frozen() with preemption disabled in
+      ptrace_stop()
+    - Input: ff-memless - kill timer in destroy() (CVE-2019-19524)
+    - Input: synaptics-rmi4 - fix video buffer size
+    - Input: synaptics-rmi4 - disable the relative position IRQ in the F12
+      driver
+    - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12)
+    - Input: synaptics-rmi4 - clear IRQ enables for F54
+    - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing
+    - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
+    - IB/hfi1: Ensure r_tid_ack is valid before building TID RDMA ACK packet
+    - IB/hfi1: Calculate flow weight based on QP MTU for TID RDMA
+    - IB/hfi1: TID RDMA WRITE should not return IB_WC_RNR_RETRY_EXC_ERR
+    - IB/hfi1: Ensure full Gen3 speed in a Gen4 system
+    - IB/hfi1: Use a common pad buffer for 9B and 16B packets
+    - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present
+    - [x86] quirks: Disable HPET on Intel Coffe Lake platforms
+    - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable
+    - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either
+    - io_uring: ensure registered buffer import returns the IO length
+    - [x86] drm/i915: update rawclk also on resume
+    - [x86] Revert "drm/i915/ehl: Update MOCS table for EHL"
+    - ntp/y2038: Remove incorrect time_t truncation
+    - [x86] iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros
+    - mm: mempolicy: fix the wrong return value and potential pages leak of
+      mbind
+    - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm()
+    - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup()
+    - mm: slub: really fix slab walking for init_on_free
+    - mm/memory_hotplug: fix try_offline_node()
+    - mm/page_io.c: do not free shared swap slots
+    - mmc: sdhci-of-at91: fix quirk2 overwrite
+    - slcan: Fix memory leak in error path
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.13
+    - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size()
+    - block, bfq: deschedule empty bfq_queues not referred by any process
+    - mm/memory_hotplug: don't access uninitialized memmaps in
+      shrink_pgdat_span()
+    - mm/memory_hotplug: fix updating the node span
+    - [arm64] uaccess: Ensure PAN is re-enabled after unhandled uaccess fault
+    - fbdev: Ditch fb_edid_add_monspecs
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.14
+    - net/mlx4_en: fix mlx4 ethtool -N insertion
+    - net/mlx4_en: Fix wrong limitation for number of TX rings
+    - net: rtnetlink: prevent underflows in do_setvfinfo()
+    - net/sched: act_pedit: fix WARN() in the traffic path
+    - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key
+    - sfc: Only cancel the PPS workqueue if it exists
+    - net/mlxfw: Verify FSM error code translation doesn't exceed array size
+    - net/mlx5e: Fix set vf link state error flow
+    - net/mlx5: Fix auto group size calculation
+    - ipv6/route: return if there is no fib_nh_gw_family
+    - taprio: don't reject same mqprio settings
+    - net/ipv4: fix sysctl max for fib_multipath_hash_policy
+    - net/mlx5e: Fix error flow cleanup in mlx5e_tc_tun_create_header_ipv4/6
+    - net/mlx5e: Do not use non-EXT link modes in EXT mode
+    - net/mlx5: Update the list of the PCI supported devices
+    - vhost/vsock: split packets to send using multiple buffers
+    - [arm64] gpio: max77620: Fixup debounce delays
+    - fork: fix pidfd_poll()'s return type
+    - nbd:fix memory leak in nbd_get_socket()
+    - virtio_console: allocate inbufs in add_port() only if it is needed
+    - virtio_ring: fix return code on DMA mapping fails
+    - virtio_balloon: fix shrinker count
+    - Revert "fs: ocfs2: fix possible null-pointer dereferences in
+      ocfs2_xa_prepare_entry()"
+    - mm/memory_hotplug: don't access uninitialized memmaps in
+      shrink_zone_span()
+    - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
+    - drm/amdgpu: disable gfxoff when using register read interface
+    - drm/amdgpu: disable gfxoff on original raven
+    - drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs
+    - [x86] drm/i915: Don't oops in dumb_create ioctl if we have no crtcs
+    - [x86] drm/i915/pmu: "Frequency" is reported as accumulated cycles
+    - [x86] drm/i915/userptr: Try to acquire the page lock around
+      set_page_dirty()
+    - Bluetooth: Fix invalid-free in bcsp_close()
+    - ath10k: restore QCA9880-AR1A (v1) detection
+    - ath10k: Fix HOST capability QMI incompatibility
+    - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
+      (CVE-2019-15099)
+    - ath9k_hw: fix uninitialized variable data
+    - Revert "Bluetooth: hci_ll: set operational frequency earlier"
+    - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
+    - md/raid10: prevent access of uninitialized resync_pages offset
+    - mdio_bus: Fix init if CONFIG_RESET_CONTROLLER=n
+    - [armel,armhf] 8904/1: skip nomap memblocks while finding the lowmem/
+      highmem boundary
+    - [x86] insn: Fix awk regexp warnings
+    - [x86] speculation: Fix incorrect MDS/TAA mitigation status
+    - [x86] speculation: Fix redundant MDS mitigation message
+    - nbd: prevent memory leak
+    - [i386] stackframe: Repair 32-bit Xen PV
+    - [i386] xen: Make xen_iret_crit_fixup() independent of frame layout
+    - [i386] xen: Simplify ring check in xen_iret_crit_fixup()
+    - [i386] doublefault: Fix stack canaries in the double fault handler
+    - [i386] pti: Size initial_page_table correctly
+    - [i386] cpu_entry_area: Add guard page for entry stack on 32bit
+    - [i386] entry: Fix IRET exception
+    - [i386] entry: Use %ss segment where required
+    - [i386] entry: Move FIXUP_FRAME after pushing %fs in SAVE_ALL
+    - [i386] entry: Unwind the ESPFIX stack earlier on exception entry
+    - [i386] entry: Fix NMI vs ESPFIX
+    - [i386] pti: Calculate the various PTI cpu_entry_area sizes correctly,
+      make the CPU_ENTRY_AREA_PAGES assert precise
+    - [i386] entry: Fix FIXUP_ESPFIX_STACK with user CR3
+    - futex: Prevent robust futex exit race
+    - ALSA: usb-audio: Fix NULL dereference at parsing BADD
+    - nfc: port100: handle command failure cleanly
+    - media: vivid: Set vid_cap_streaming and vid_out_streaming to true
+    - media: vivid: Fix wrong locking that causes race conditions on streaming
+      stop (CVE-2019-18683)
+    - media: usbvision: Fix invalid accesses after device disconnect
+    - media: usbvision: Fix races among open, close, and disconnect
+    - cpufreq: Add NULL checks to show() and store() methods of cpufreq
+    - media: uvcvideo: Fix error path in control parsing failure
+    - media: b2c2-flexcop-usb: add sanity checking (CVE-2019-15291)
+    - media: cxusb: detect cxusb_ctrl_msg error in query
+    - media: imon: invalid dereference in imon_touch_event
+    - media: mceusb: fix out of bounds read in MCE receiver buffer
+    - mm/slub.c: init_on_free=1 should wipe freelist ptr for bulk allocations
+    - usbip: tools: fix fd leakage in the function of read_attr_usbip_status
+    - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
+    - usb-serial: cp201x: support Mark-10 digital force gauge
+    - USB: chaoskey: fix error case of a timeout
+    - appledisplay: fix error handling in the scheduled work
+    - USB: serial: mos7840: add USB ID to support Moxa UPort 2210
+    - USB: serial: mos7720: fix remote wakeup
+    - USB: serial: mos7840: fix remote wakeup
+    - USB: serial: option: add support for DW5821e with eSIM support
+    - USB: serial: option: add support for Foxconn T77W968 LTE modules
+    - [x86] staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
+    - [powerpc*] 64s: support nospectre_v2 cmdline option
+    - [powerpc*] book3s64: Fix link stack flush on context switch
+      (CVE-2019-18660)
+    - [powerpc*] KVM: Book3S HV: Flush link stack on guest exit to host kernel
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.15
+    - io_uring: async workers should inherit the user creds
+    - net: separate out the msghdr copy from ___sys_{send,recv}msg()
+    - net: disallow ancillary data for __sys_{send,recv}msg_file()
+    - XArray: Fix xas_next() with a single entry at 0
+    - [arm64] clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate
+    - [x86] thunderbolt: Read DP IN adapter first two dwords in one go
+    - [x86] thunderbolt: Fix lockdep circular locking depedency warning
+    - [x86] ASoC: compress: fix unsigned integer overflow check
+    - [arm64,armel,armhf] reset: Fix memory leak in reset_control_array_put()
+    - [armhf] clk: samsung: exynos542x: Move G3D subsystem clocks to its
+      sub-CMU
+    - [armel,armhf] ASoC: kirkwood: fix external clock probe defer
+    - [armel,armhf] ASoC: kirkwood: fix device remove ordering
+    - [armhf] clk: samsung: exynos5420: Preserve PLL configuration during
+      suspend/resume
+    - [x86] pinctrl: cherryview: Allocate IRQ chip dynamic
+    - [armhf] soc: imx: gpc: fix initialiser format
+    - ASoC: SOF: ipc: Fix memory leak in sof_set_get_large_ctrl_data
+      (CVE-2019-18811)
+    - [armhf] ASoC: ti: sdma-pcm: Add back the flags parameter for non
+      standard dma names
+    - [armhf] ASoC: rockchip: rockchip_max98090: Enable SHDN to fix headset
+      detection
+    - [arm64,armhf] clk: sunxi: Fix operator precedence in
+      sunxi_divs_clk_setup
+    - [armhf] clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18
+    - [armhf] dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend
+    - bpf: Allow narrow loads of bpf_sysctl fields with offset > 0
+    - bpf: Change size to u64 for bpf_map_{area_alloc, charge_init}()
+    - [powerpc*] bpf: Fix tail call implementation
+    - idr: Fix idr_get_next_ul race with idr_remove
+    - idr: Fix integer overflow in idr_for_each_entry
+    - idr: Fix idr_alloc_u32 on 32-bit systems
+    - [amd64] ASoC: hdac_hda: fix race in device removal
+    - [armhf] clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call
+    - [armhf] clk: ti: clkctrl: Fix failed to enable error with double udelay
+      timeout
+    - [armhf] net: fec: add missed clk_disable_unprepare in remove
+    - netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICT
+    - bridge: ebtables: don't crash when using dnat target in output chains
+    - netfilter: nf_tables: bogus EOPNOTSUPP on basechain update
+    - netfilter: nf_tables_offload: skip EBUSY on chain update
+    - stacktrace: Don't skip first entry on noncurrent tasks
+    - can: peak_usb: report bus recovery as well
+    - [armhf] can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset
+      on open
+    - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid
+      skb mem leak
+    - can: rx-offload: can_rx_offload_offload_one(): do not increase the
+      skb_queue beyond skb_queue_len_max
+    - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors
+      on queue overflow or OOM
+    - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to
+      propagate error value in case of errors
+    - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on
+      error
+    - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error
+    - [armhf] can: flexcan: increase error counters if skb enqueueing via
+      can_rx_offload_queue_sorted() fails
+    - [x86] tsc: Respect tsc command line paraemeter for clocksource_tsc_early
+    - nvme-rdma: fix a segmentation fault during module unload
+    - nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths
+    - [arm64] watchdog: meson: Fix the wrong value of left time
+    - ALSA: hda: hdmi - add Tigerlake support
+    - [amd64] ASoC: SOF: topology: Fix bytes control size checks
+    - drm/amdgpu: dont schedule jobs while in reset
+    - [arm64,armhf] net/mlx5e: Fix eswitch debug print of max fdb flow
+    - net/mlx5e: Use correct enum to determine uplink port
+    - drm/amdgpu: register gpu instance before fan boost feature enablment
+    - drm/amdgpu: add warning for GRBM 1-cycle delay issue in gfx9
+    - [arm64,armhf] net: stmmac: gmac4: bitrev32 returns u32
+    - [arm64,armhf] net: stmmac: xgmac: bitrev32 returns u32
+    - [arm64,armhf] net: stmmac: xgmac: Fix TSA selection
+    - [arm64,armhf] net: stmmac: xgmac: Disable Flow Control when 1 or more
+      queues are in AV
+    - ceph: return -EINVAL if given fsc mount option on kernel w/o support
+    - mac80211: fix ieee80211_txq_setup_flows() failure path
+    - mac80211: fix station inactive_time shortly after boot
+    - block: drbd: remove a stray unlock in __drbd_send_protocol()
+    - ice: fix potential infinite loop because loop counter being too small
+    - iavf: initialize ITRN registers with correct values
+    - [arm64,armel,armhf] usb: dwc2: use a longer core rest timeout in
+      dwc2_core_reset()
+    - [x86] staging: rtl8192e: fix potential use after free
+    - staging: rtl8723bs: Drop ACPI device ids
+    - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
+    - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
+    - [x86] mei: bus: prefix device names on bus with the bus name
+    - [x86] mei: me: add comet point V device id
+    - [x86] thunderbolt: Power cycle the router if NVM authentication fails
+    - xfrm: Fix memleak on xfrm state destroy
+    - [x86] fpu: Don't cache access to fpu_fpregs_owner_ctx (CVE-2019-19602)
+    - macvlan: schedule bc_work even if error
+    - mdio_bus: don't use managed reset-controller
+    - net: macb: add missed tasklet_kill
+    - net: psample: fix skb_over_panic
+    - net: sched: fix `tc -s class show` no bstats on class with nolock
+      subqueues
+    - openvswitch: fix flow command message size
+    - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook
+    - slip: Fix use-after-free Read in slip_open
+    - sctp: cache netns in sctp_ep_common
+    - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
+    - openvswitch: remove another BUG_ON()
+    - net/tls: take into account that bpf_exec_tx_verdict() may free the
+      record
+    - net: skmsg: fix TLS 1.3 crash with full sk_msg
+    - tipc: fix link name length check
+    - ext4: add more paranoia checking in ext4_expand_extra_isize handling
+    - HID: core: check whether Usage Page item is after Usage ID items
+    - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
+    - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input
+      size
+    - [armhf] net: fec: fix clock count mis-match
+
+  [ Ben Hutchings ]
+  * [amd64] sound/soc/sof: Disable SND_SOC_SOF_ACPI,
+    SND_SOC_SOF_{BAYTRAIL,BROADWELL}_SUPPORT (Closes: #945914)
+  * [amd64] sound/soc/intel/boarss: Disable Broxton drivers again
+  * [i386] sound/soc: Enable same SOF drivers as on amd64
+  * Bump ABI to 3
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 07 Dec 2019 13:24:06 +0100
+
+linux (5.3.9-3) unstable; urgency=medium
+
+  * [arm64,armhf,powerpc*,s390x] KVM: Add more exports to ABI ignore list
+    (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 19 Nov 2019 01:43:33 +0000
+
+linux (5.3.9-2) unstable; urgency=medium
+
+  * [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135):
+    - x86/msr: Add the IA32_TSX_CTRL MSR
+    - x86/cpu: Add a helper function x86_read_arch_cap_msr()
+    - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
+    - x86/speculation/taa: Add mitigation for TSX Async Abort
+    - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
+    - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
+    - x86/tsx: Add "auto" option to the tsx= cmdline parameter
+    - x86/speculation/taa: Add documentation for TSX Async Abort
+    - x86/tsx: Add config options to set tsx=on|off|auto
+    - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
+    TSX is now disabled by default; see
+    Documentation/admin-guide/hw-vuln/tsx_async_abort.rst
+  * [x86] KVM: Add mitigation for Machine Check Error on Page Size Change
+    (aka iTLB multi-hit, CVE-2018-12207):
+    - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
+    - x86/bugs: Add ITLB_MULTIHIT bug infrastructure
+    - x86/cpu: Add Tremont to the cpu vulnerability whitelist
+    - cpu/speculation: Uninline and export CPU mitigations helpers
+    - kvm: mmu: ITLB_MULTIHIT mitigation
+    - kvm: Add helper function for creating VM worker threads
+    - kvm: x86: mmu: Recovery of shattered NX large pages
+    - Documentation: Add ITLB_MULTIHIT documentation
+  * [x86] i915: Mitigate local privilege escalation on gen9 (CVE-2019-0155):
+    - drm/i915: Rename gen7 cmdparser tables
+    - drm/i915: Disable Secure Batches for gen6+
+    - drm/i915: Remove Master tables from cmdparser
+    - drm/i915: Add support for mandatory cmdparsing
+    - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
+    - drm/i915: Allow parsing of unsized batches
+    - drm/i915: Add gen9 BCS cmdparsing
+    - drm/i915/cmdparser: Use explicit goto for error paths
+    - drm/i915/cmdparser: Add support for backward jumps
+    - drm/i915/cmdparser: Ignore Length operands during command matching
+    - drm/i915/cmdparser: Fix jump whitelist clearing
+  * [x86] i915: Mitigate local denial-of-service on gen8/gen9 (CVE-2019-0154):
+    - drm/i915: Lower RM timeout to avoid DSI hard hangs
+    - drm/i915/gen8+: Add RC6 CTX corruption WA
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 12 Nov 2019 15:44:08 +0000
+
+linux (5.3.9-1) unstable; urgency=medium
+
+  * New version hopefully closes: #942881
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8
+    - drm: Free the writeback_job when it with an empty fb
+    - drm: Clear the fence pointer when writeback job signaled
+    - [armhf] clk: ti: dra7: Fix mcasp8 clock bits
+    - [armhf] dts: Fix wrong clocks for dra7 mcasp
+    - nvme-pci: Fix a race in controller removal
+    - scsi: ufs: skip shutdown if hba is not powered
+    - scsi: megaraid: disable device when probe failed after enabled device
+    - scsi: qla2xxx: Silence fwdump template message
+    - scsi: qla2xxx: Fix unbound sleep in fcport delete path.
+    - scsi: qla2xxx: Fix stale mem access on driver unload
+    - scsi: qla2xxx: Fix N2N link reset
+    - scsi: qla2xxx: Fix N2N link up fail
+    - [armhf] dts: Fix gpio0 flags for am335x-icev2
+    - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43
+    - [armhf] OMAP2+: Add missing LCDC midlemode for am335x
+    - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage()
+    - nvme-tcp: fix wrong stop condition in io_work
+    - nvme-pci: Save PCI state before putting drive into deepest state
+    - nvme: fix an error code in nvme_init_subsystem()
+    - nvme-rdma: Fix max_hw_sectors calculation
+    - nvme: Added QUIRKs for ADATA XPG SX8200 Pro 512GB
+    - nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T
+    - nvme-rdma: fix possible use-after-free in connect timeout
+    - blk-mq: honor IO scheduler for multiqueue devices
+    - xen/efi: Set nonblocking callbacks
+    - loop: change queue block size to match when using DIO
+    - nl80211: fix null pointer dereference
+    - mac80211: fix txq null pointer dereference
+    - netfilter: nft_connlimit: disable bh on garbage collection
+    - [armhf,arm64] net: stmmac: xgmac: Not all Unicast addresses may be
+      available
+    - [armhf,arm64] net: stmmac: dwmac4: Always update the MAC Hash Filter
+    - [armhf,arm64] net: stmmac: Correctly take timestamp for PTPv2
+    - [armhf,arm64] net: stmmac: Do not stop PHY if WoL is enabled
+    - drm/amdgpu: fix multiple memory leaks in acp_hw_init
+    - drm/amd/display: memory leak
+    - [mips*el/loongson-*] Fix the link time qualifier of 'serial_exit()'
+    - [arm64] net: hisilicon: Fix usage of uninitialized variable in function
+      mdio_sc_cfg_reg_write()
+    - [armhf,arm64] net: stmmac: Avoid deadlock on suspend/resume
+    - [s390x] mm: fix -Wunused-but-set-variable warnings
+    - r8152: Set macpassthru in reset_resume callback
+    - net: phy: allow for reset line to be tied to a sleepy GPIO controller
+    - net: phy: fix write to mii-ctrl1000 register
+    - vfs: Convert filldir[64]() from __put_user() to unsafe_put_user()
+    - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings
+      (regression in 4.17)
+    - vfs: Make filldir[64]() verify the directory entry filename is valid
+    - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over
+      to it
+    - vfs: filldir[64]: remove WARN_ON_ONCE() for bad directory entries
+    - net_sched: fix backward compatibility for TCA_KIND (regression in 5.3.4)
+    - net_sched: fix backward compatibility for TCA_ACT_KIND (regression in
+      5.3.4)
+    - libata/ahci: Fix PCS quirk application (regression in 5.3.4)
+    - md/raid0: fix warning message for parameter default_layout
+    - Revert "drm/radeon: Fix EEH during kexec" (regression in 5.3.5)
+    - ocfs2: fix panic due to ocfs2_wq is null
+    - nvme-pci: Set the prp2 correctly when using more than 4k page
+    - ipv4: fix race condition between route lookup and invalidation
+    - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
+    - net: avoid potential infinite loop in tc_ctl_action()
+    - [hppa,m68k] net: i82596: fix dma_alloc_attr for sni_82596
+    - net: ipv6: fix listify ip6_rcv_finish in case of forwarding
+    - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume
+      flow
+    - rxrpc: Fix possible NULL pointer access in ICMP handling
+    - sched: etf: Fix ordering of packets with same txtime
+    - sctp: change sctp_prot .no_autobind with true
+    - net: aquantia: temperature retrieval fix
+    - net: aquantia: when cleaning hw cache it should be toggled
+    - net: aquantia: do not pass lro session with invalid tcp checksum
+    - net: aquantia: correctly handle macvlan and multicast coexistence
+    - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs
+    - net: phy: micrel: Update KSZ87xx PHY name
+    - net: avoid errors when trying to pop MLPS header on non-MPLS packets
+    - net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions
+    - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit
+    - net: ethernet: broadcom: have drivers select DIMLIB as needed
+    - net: phy: Fix "link partner" information disappear issue
+    - rxrpc: use rcu protection while reading sk->sk_user_data
+    - io_uring: fix bad inflight accounting for SETUP_IOPOLL|SETUP_SQTHREAD
+    - io_uring: Fix corrupted user_data
+    - USB: legousbtower: fix memleak on disconnect
+    - ALSA: hda/realtek - Add support for ALC711
+    - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
+    - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers
+    - ALSA: hda - Force runtime PM on Nvidia HDMI codecs
+    - USB: serial: ti_usb_3410_5052: fix port-close races
+    - USB: ldusb: fix memleak on disconnect
+    - USB: usblp: fix use-after-free on disconnect
+    - USB: ldusb: fix read info leaks
+    - binder: Don't modify VMA bounds in ->mmap handler
+    - [mips*] tlbex: Fix build_restore_pagemask KScratch restore
+    - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS
+    - [s390x] scsi: zfcp: fix reaction on bit error threshold notification
+    - scsi: sd: Ignore a failure to sync cache due to lack of authorization
+    - scsi: core: save/restore command resid for error handling
+    - scsi: core: try to get module before removing device
+    - scsi: ch: Make it possible to open a ch device multiple times again
+    - Revert "Input: elantech - enable SMBus on new (2018+) systems"
+      (regression in 5.3)
+    - Input: synaptics-rmi4 - avoid processing unknown IRQs
+    - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit()
+    - ACPI: NFIT: Fix unlock on error in scrub_show()
+    - iwlwifi: pcie: change qu with jf devices to use qu configuration
+    - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133)
+    - mac80211: Reject malformed SSID elements
+    - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
+    - drm/ttm: Restore ttm prefaulting
+    - [armhf,arm64] drm/panfrost: Handle resetting on timeout better
+    - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1
+    - drm/amdgpu/sdma5: fix mask value of POLL_REGMEM packet for pipe sync
+    - [x86] drm/i915/userptr: Never allow userptr into the mappable GGTT
+    - [x86] drm/i915: Favor last VBT child device with conflicting AUX ch/DDC
+      pin
+    - drm/amdgpu/vce: fix allocation size in enc ring test
+    - drm/amdgpu/vcn: fix allocation size in enc ring test
+    - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2)
+    - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2)
+    - drm/amdgpu: user pages array memory leak fix
+    - drivers/base/memory.c: don't access uninitialized memmaps in
+      soft_offline_page_store()
+    - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c
+    - io_uring: Fix broken links with offloading
+    - io_uring: Fix race for sqes with userspace
+    - io_uring: used cached copies of sq->dropped and cq->overflow
+    - [armhf] mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C
+    - mm/memory-failure.c: don't access uninitialized memmaps in
+      memory_failure()
+    - mm/slub: fix a deadlock in show_slab_objects()
+    - mm/page_owner: don't access uninitialized memmaps when reading
+      /proc/pagetypeinfo
+    - mm/memunmap: don't access uninitialized memmap in memunmap_pages()
+    - mm: memcg/slab: fix panic in __free_slab() caused by premature memcg
+      pointer release
+    - mm, compaction: fix wrong pfn handling in __reset_isolation_pfn()
+    - mm: memcg: get number of pages on the LRU list in memcgroup base on
+      lru_zone_size
+    - mm: memblock: do not enforce current limit for memblock_phys* family
+    - hugetlbfs: don't access uninitialized memmaps in
+      pfn_range_valid_gigantic()
+    - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if
+      mmaped more than once
+    - zram: fix race between backing_dev_show and backing_dev_store
+    - [s390x] zcrypt: fix memleak at release
+    - [s390x] kaslr: add support for R_390_GLOB_DAT relocation type
+    - lib/vdso: Make clock_getres() POSIX compliant again
+    - [hppa] Fix vmap memory leak in ioremap()/iounmap()
+    - [arm64] KVM: Trap VM ops when ARM64_WORKAROUND_CAVIUM_TX2_219_TVM is set
+    - [arm64] Avoid Cavium TX2 erratum 219 when switching TTBR
+    - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT
+    - [arm64] Allow CAVIUM_TX2_ERRATUM_219 to be selected
+    - CIFS: avoid using MID 0xFFFF
+    - cifs: Fix missed free operations
+    - CIFS: Fix use after free of file info structures
+    - perf/aux: Fix AUX output stopping
+    - tracing: Fix race in perf_trace_buf initialization
+    - fs/dax: Fix pmd vs pte conflict detection
+    - dm cache: fix bugs when a GFP_NOWAIT allocation fails
+    - [riscv64] irqchip/sifive-plic: Switch to fasteoi flow
+    - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area
+    - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu
+    - [x86] hyperv: Make vapic support x2apic mode
+    - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions
+    - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up
+    - [arm64] pinctrl: armada-37xx: swap polarity on LED group
+    - btrfs: block-group: Fix a memory leak due to missing
+      btrfs_put_block_group()
+    - Btrfs: add missing extents release on file extent cluster relocation
+      error
+    - btrfs: don't needlessly create extent-refs kernel thread
+    - Btrfs: fix qgroup double free after failure to reserve metadata for
+      delalloc
+    - Btrfs: check for the full sync flag while holding the inode lock during
+      fsync
+    - btrfs: tracepoints: Fix wrong parameter order for qgroup events
+    - btrfs: tracepoints: Fix bad entry members of qgroup events
+    - [ppc64*] KVM: Book3S HV: XIVE: Ensure VP isn't already in use
+    - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
+    - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
+    - ceph: just skip unrecognized info in ceph_reply_info_extra
+    - xen/netback: fix error path of xenvif_connect_data()
+    - PCI: PM: Fix pci_power_up()
+    - opp: of: drop incorrect lockdep_assert_held()
+    - of: reserved_mem: add missing of_node_put() for proper ref-counting
+    - blk-rq-qos: fix first node deletion of rq_qos_del()
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9
+    - io_uring: fix up O_NONBLOCK handling for sockets
+    - dm snapshot: introduce account_start_copy() and account_end_copy()
+    - dm snapshot: rework COW throttling to fix deadlock
+    - Btrfs: fix inode cache block reserve leak on failure to allocate data
+      space
+    - btrfs: qgroup: Always free PREALLOC META reserve in
+      btrfs_delalloc_release_extents()
+    - iio: fix center temperature of bmc150-accel-core
+    - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
+    - perf tests: Avoid raising SEGV using an obvious NULL dereference
+    - perf map: Fix overlapped map handling
+    - perf script brstackinsn: Fix recovery from LBR/binary mismatch
+    - perf jevents: Fix period for Intel fixed counters
+    - perf tools: Propagate get_cpuid() error
+    - perf annotate: Propagate perf_env__arch() error
+    - perf annotate: Fix the signedness of failure returns
+    - perf annotate: Propagate the symbol__annotate() error return
+    - perf annotate: Fix arch specific ->init() failure errors
+    - perf annotate: Return appropriate error code for allocation failures
+    - perf annotate: Don't return -1 for error when doing BPF disassembly
+    - staging: rtl8188eu: fix null dereference when kzalloc fails
+    - RDMA/hfi1: Prevent memory leak in sdma_init
+    - RDMA/iw_cxgb4: fix SRQ access from dump_qp()
+    - RDMA/iwcm: Fix a lock inversion issue
+    - [x86] HID: hyperv: Use in-place iterator API in the channel callback
+    - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
+    - [arm64] cpufeature: Effectively expose FRINT capability to userspace
+    - [arm64] Fix incorrect irqflag restore for priority masking for compat
+    - [arm64] ftrace: Ensure synchronisation in PLT setup for Neoverse-N1
+      #1542419
+    - [riscv64] serial/sifive: select SERIAL_EARLYCON
+    - RDMA/core: Fix an error handling path in 'res_get_common_doit()'
+    - RDMA/cm: Fix memory leak in cm_add/remove_one
+    - RDMA/nldev: Reshuffle the code to avoid need to rebind QP in error path
+    - RDMA/mlx5: Do not allow rereg of a ODP MR
+    - RDMA/mlx5: Order num_pending_prefetch properly with synchronize_srcu
+    - RDMA/mlx5: Add missing synchronize_srcu() for MW cases
+    - [arm64] gpio: max77620: Use correct unit for debounce times
+    - fs: cifs: mute -Wunused-const-variable message
+    - [arm64] vdso32: Fix broken compat vDSO build warnings
+    - [arm64] vdso32: Detect binutils support for dmb ishld
+    - serial: mctrl_gpio: Check for NULL pointer
+    - [armhf] serial: 8250_omap: Fix gpio check for auto RTS/CTS
+    - [arm64] vdso32: Don't use KBUILD_CPPFLAGS unconditionally
+    - efi/cper: Fix endianness of PCIe class code
+    - [x86] efi: Do not clean dummy variable in kexec path
+    - [mips*] include: Mark __cmpxchg as __always_inline
+    - [riscv64] avoid kernel hangs when trapped in BUG()
+    - [riscv64] avoid sending a SIGTRAP to a user thread trapped in WARN()
+    - [riscv64] Correct the handling of unexpected ebreak in do_trap_break()
+    - [x86] xen: Return from panic notifier
+    - ocfs2: clear zero in unaligned direct IO
+    - fs: ocfs2: fix possible null-pointer dereferences in
+      ocfs2_xa_prepare_entry()
+    - fs: ocfs2: fix a possible null-pointer dereference in
+      ocfs2_write_end_nolock()
+    - fs: ocfs2: fix a possible null-pointer dereference in
+      ocfs2_info_scan_inode_alloc()
+    - btrfs: silence maybe-uninitialized warning in clone_range
+    - [arm64] armv8_deprecated: Checking return value for memory allocation
+    - [x86] cpu: Add Comet Lake to the Intel CPU models header
+    - sched/fair: Scale bandwidth quota and period without losing quota/period
+      ratio precision
+    - sched/vtime: Fix guest/system mis-accounting on task switch
+    - perf/core: Rework memory accounting in perf_mmap()
+    - perf/core: Fix corner case in perf_rotate_context()
+    - [x86] perf/amd: Change/fix NMI latency mitigation to use a timestamp
+    - drm/amdgpu: fix memory leak
+    - [mips*] include: Mark __xchg as __always_inline
+    - [mips*] fw: sni: Fix out of bounds init of o32 stack
+    - [s390x] cio: fix virtio-ccw DMA without PV
+    - [x86] virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr
+    - nbd: fix possible sysfs duplicate warning
+    - NFSv4: Fix leak of clp->cl_acceptor string
+    - SUNRPC: fix race to sk_err after xs_error_report
+    - [s390x] uaccess: avoid (false positive) compiler warnings
+    - tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
+    - perf annotate: Fix multiple memory and file descriptor leaks
+    - perf/aux: Fix tracking of auxiliary trace buffer allocation
+    - USB: legousbtower: fix a signedness bug in tower_probe()
+    - nbd: verify socket is supported during setup
+    - [arm64] dts: qcom: Add Lenovo Miix 630
+    - [arm64] dts: qcom: Add HP Envy x2
+    - [arm64] dts: qcom: Add Asus NovaGo TP370QL
+    - rtw88: Fix misuse of GENMASK macro
+    - [s390x] pci: fix MSI message data
+    - thunderbolt: Correct path indices for PCIe tunnel
+    - thunderbolt: Use 32-bit writes when writing ring producer/consumer
+    - fuse: flush dirty data/metadata before non-truncate setattr
+    - fuse: truncate pending writes on O_TRUNC
+    - ALSA: bebob: Fix prototype of helper function to return negative value
+    - ALSA: timer: Fix mutex deadlock at releasing card
+    - ALSA: hda/realtek - Fix 2 front mics of codec 0x623
+    - ALSA: hda/realtek - Add support for ALC623
+    - ath10k: fix latency issue for QCA988x
+    - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather
+      segments") (regression in 5.2)
+    - nl80211: fix validation of mesh path nexthop
+    - USB: gadget: Reject endpoints with 0 maxpacket value
+    - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
+      virt_boundary_mask to avoid SG overflows") (regression in 5.2)
+    - USB: ldusb: fix ring-buffer locking
+    - USB: ldusb: fix control-message timeout
+    - usb: xhci: fix Immediate Data Transfer endianness
+    - USB: serial: whiteheat: fix potential slab corruption
+    - USB: serial: whiteheat: fix line-speed endianness
+    - xhci: Fix use-after-free regression in xhci clear hub TT implementation
+    - scsi: qla2xxx: Fix partial flash write of MBI
+    - scsi: target: cxgbit: Fix cxgbit_fw4_ack()
+    - [x86] HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
+    - HID: Fix assumption that devices have inputs
+    - HID: fix error message in hid_open_report()
+    - HID: logitech-hidpp: split g920_get_config()
+    - HID: logitech-hidpp: rework device validation
+    - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
+    - [s390x] unwind: fix mixing regs and sp
+    - [s390x] cmm: fix information leak in cmm_timeout_handler()
+    - [s390x] idle: fix cpu idle time calculation
+    - IB/hfi1: Avoid excessive retry for TID RDMA READ request
+    - [arm64] Ensure VM_WRITE|VM_SHARED ptes are clean by default
+    - [arm64] cpufeature: Enable Qualcomm Falkor/Kryo errata 1003
+    - virtio_ring: fix stalls for packed rings
+    - rtlwifi: rtl_pci: Fix problem of too small skb->len
+    - rtlwifi: Fix potential overflow on P2P code
+    - [x86] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
+      active
+    - [arm64] dmaengine: qcom: bam_dma: Fix resource leak
+    - [arm64] dmaengine: tegra210-adma: fix transfer failure
+    - [armhf] dmaengine: imx-sdma: fix size check for sdma script_number
+    - [armhf] dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle
+    - drm/amdgpu/gmc10: properly set BANK_SELECT and FRAGMENT_SIZE
+    - [x86] drm/i915: Fix PCH reference clock for FDI on HSW/BDW
+    - drm/amdgpu/gfx10: update gfx golden settings
+    - drm/amdgpu/powerplay/vega10: allow undervolting in p7
+    - drm/amdgpu: Fix SDMA hang when performing VKexample test
+    - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid()
+    - io_uring: ensure we clear io_kiocb->result before each issue
+    - [x86] iommu/vt-d: Fix panic after kexec -p for kdump
+    - batman-adv: Avoid free/alloc race when handling OGM buffer
+    - llc: fix sk_buff leak in llc_sap_state_process()
+    - llc: fix sk_buff leak in llc_conn_service()
+    - rxrpc: Fix call ref leak
+    - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
+    - rxrpc: Fix trace-after-put looking at the put peer record
+    - NFC: pn533: fix use-after-free and memleaks
+    - bonding: fix potential NULL deref in bond_update_slave_arr
+    - netfilter: conntrack: avoid possible false sharing
+    - net: usb: sr9800: fix uninitialized local variable
+    - sch_netem: fix rcu splat in netem_enqueue()
+    - net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
+    - iwlwifi: exclude GEO SAR support for 3168
+    - sched/fair: Fix low cpu usage with high throttling by removing expiration
+      of cpu-local slices
+    - ALSA: usb-audio: DSD auto-detection for Playback Designs
+    - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel
+    - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface
+    - RDMA/mlx5: Use irq xarray locking for mkey_table
+    - sched/fair: Fix -Wunused-but-set-variable warnings
+    - [powerpc*] powernv: Fix CPU idle to be called with IRQs disabled
+    - Revert "ALSA: hda: Flush interrupts on disabling" (regression in 5.3.4)
+
+  [ Ben Hutchings ]
+  * debian/bin/gencontrol_signed.py: Fix code style error
+  * debian/bin/gencontrol.py: Skip linux-perf lintian-overrides if we won't
+    build it
+  * debian/bin/gencontrol{,_signed}.py: Use vars parameter instead of self.vars
+  * debian/bin/gencontrol{,_signed}.py: Use %(name)s to format template vars
+  * debian/.gitignore, debian/rules: Generalise patterns for generated files
+  * gencontrol: Generalise substitution of debhelper config template
+  * Add maint scripts to meta-packages to convert doc directories to symlinks
+    (Closes: #942861)
+  * debian/lib/python/debian_linux/utils.py: Use 'with' to manage file handles
+  * debian/lib/python/debian_linux/utils.py: Store file mode for templates
+  * Copy template file permissions to output files
+  * debian/templates/headers.postinst.in: Set executable for consistency
+  * debian/README.source: Document code signing and how to test it
+  * debian/tests/control: Mark python test as superficial
+  * [arm64] linux-headers: Disable check for a 32-bit compiler
+    (Closes: #943953):
+    - arm64: Kconfig: Make CONFIG_COMPAT_VDSO a proper Kconfig option
+    - debian/bin/gencontrol.py: Optionally define $(CROSS_COMPILE_COMPAT) make
+      variable
+    - Enable COMPAT_VDSO and set $(CROSS_COMPILE_COMPAT) instead of setting
+      CROSS_COMPILE_COMPAT_VDSO
+  * crypto: Enable PKCS8_PRIVATE_KEY_PARSER as module (Closes: #924705)
+  * Bump ABI to 2
+  * [arm64] atmel_mxt_ts: Disable TOUCHSCREEN_ATMEL_MXT_T37 to avoid V4L
+    dependency
+  * random: try to actively add entropy rather than passively wait for it
+
+  [ Bastian Blank ]
+  * [amd64/cloud-amd64] Re-enable RTC drivers. (closes: #931341)
+
+  [ Thomas W ]
+  * [x86] Enable missing modules and setting:
+    CONFIG_HUAWEI_WMI
+    CONFIG_I2C_MULTI_INSTANTIATE
+    CONFIG_INTEL_TURBO_MAX_3
+
+  [ Alper Nebi Yasak ]
+  * [arm64] udeb: Add i2c-rk3x to i2c-modules
+  * [arm64,armhf] udeb: Add rockchip-io-domain to kernel-image
+  * udeb: Add atmel_mxt_ts to input-modules
+
+  [ Noah Meyerhans ]
+  * drivers/net/ethernet/amazon: Backport driver fixes from v5.4-rc5
+
+  [ Niv Sardi ]
+  * KEYS: Make use of platform keyring for module signature verify
+    (closes: #935945)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 09 Nov 2019 15:42:49 +0000
+
+linux (5.3.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.3
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4
+    - mISDN: enforce CAP_NET_RAW for raw sockets (CVE-2019-17055)
+    - appletalk: enforce CAP_NET_RAW for raw sockets (CVE-2019-17054)
+    - ax25: enforce CAP_NET_RAW for raw sockets (CVE-2019-17052)
+    - ieee802154: enforce CAP_NET_RAW for raw sockets (CVE-2019-17053)
+    - nfc: enforce CAP_NET_RAW for raw sockets (CVE-2019-17056)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.6
+    - nl80211: validate beacon head (CVE-2019-16746)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.7
+
+  [ Aurelien Jarno ]
+  * [riscv64] Enable SOC_SIFIVE. Do not select CLK_SIFIVE,
+    CLK_SIFIVE_FU540_PRCI, SIFIVE_PLIC, SERIAL_SIFIVE and
+    SERIAL_SIFIVE_CONSOLE as they are selected by SOC_SIFIVE.
+  * [riscv64] Install DTBS using dtbs_install target.
+  * [riscv64] Enable SPI_SIFIVE.
+  * [riscv64] Enable SERIAL_EARLYCON_RISCV_SBI.
+  * [riscv64] Enable MMC, MMC_SPI.
+  * [riscv64] udeb: Add mmc-core-modules and mmc-modules.
+  * [riscv64] Fix memblock reservation for device tree blob.
+  * [riscv64] Clear load reservations while restoring hart contexts.
+
+  [ Ben Hutchings ]
+  * [mips*] Revert "Only define MAX_PHYSMEM_BITS on Loongson-3"
+  * KEYS: Re-enable SECONDARY_TRUSTED_KEYRING, dropped in 5.2.6-1 by
+    mis-merge (Closes: #935945)
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] Enable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
+  * [hppa] Enable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
+  * [sh4] Enable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
+
+  [ Salvatore Bonaccorso ]
+  * RDMA/cxgb4: Do not dma memory off of the stack (CVE-2019-17075)
+  * ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
+    (CVE-2019-15098)
+
+  [ Romain Perier ]
+  * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530)
+
+  [ Héctor Orón Martínez ]
+  * [x86] Enable ASoC: SOF sound driver (Closes: #940726)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 20 Oct 2019 00:56:32 +0200
+
+linux (5.3.2-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.3
+    - [armhf] select the dma-noncoherent symbols for all swiotlb builds
+      (fixes FTBFS)
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.1
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.2
+
+  [ Ben Hutchings ]
+  * [hppa,sparc64] udeb: Delete osst from scsi-modules (fixes FTBFS)
+  * Compile with gcc-9 on all architectures
+  * Set KCFLAGS make variable instead of CFLAGS_{KERNEL,MODULE}
+  * linux-image-dbg: Delete ./ from source file names in debug info
+  * debian/rules: Make maintainerclean delete (almost) everything clean does
+  * debian/rules: Make maintainerclean delete everything gencontrol.py creates
+  * debian/.gitignore: Synchronise some patterns with clean target
+  * Add the metapackages previously built by src:linux-latest:
+    - Add template and NEWS files from linux-latest
+    - Rename added templates to be consistent with existing templates
+    - Fix some inconsistencies in metapackage templates
+    - Define pkg.linux.nometa build profile to exclude the metapackages
+    - Build the metapackages by default (Closes: #583849, #941042)
+    - Make linux-perf an arch-dependent package
+    - Require metapackage dependencies to be the same version, and link doc
+      dirs
+
+  [ Uwe Kleine-König ]
+  * [arm64] enable I2C_QCOM_GENI for Lenovo C630
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 02 Oct 2019 05:31:27 +0100
+
+linux (5.3~rc5-1~exp2) experimental; urgency=medium
+
+  * tools/perf: pmu-events: Fix reproducibility
+  * Fix FTBFS:
+    - Update "kbuild: Make the toolchain variables easily overwritable" for 5.3
+    - udeb: Make nic-wireless-modules depend on crypto-modules
+  * debian/control: Remove build profile qual for rsync, needed for
+    headers_install
+  * debian/changelog: Move older entries to changelog.old
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 25 Aug 2019 16:28:41 +0100
+
+linux (5.3~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update support patchset to aufs5.x-rcN 20190805
+  * [rt] Disable until it is updated for 5.3 or later
+  * [powerpcspe] Remove all support for powerpcspe, which is dead upstream
+  * linux-headers: Change per-flavour Makefile to match upstream out-of-tree
+    builds
+  * debian/bin/genorig.py: Import debian.deb822 instead of deprecated deb822
+  * [arm64] Use armhf cross-compiler for building compat vDSO
+  * Documentation: Fix broken link to CIPSO draft
+
+  [ Lubomir Rintel ]
+  * udeb: input-modules: Add OLPC AP-SP keyboard
+  * [armhf] Add camera, EC and battery drivers for OLPC XO-1.75 laptop.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 24 Aug 2019 19:07:56 +0100
+
+linux (5.2.17-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10
+    - KEYS: trusted: allow module init if TPM is inactive or deactivated
+    - seq_file: fix problem when seeking mid-record
+    - mm/hmm: fix bad subpage pointer in try_to_unmap_one
+    - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and
+      MPOL_MF_STRICT were specified
+    - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
+    - mm/z3fold.c: fix z3fold_destroy_pool() ordering
+    - mm/z3fold.c: fix z3fold_destroy_pool() race condition
+    - mm/memcontrol.c: fix use after free in mem_cgroup_iter()
+    - mm/usercopy: use memory range to be accessed for wraparound check
+    - mm, vmscan: do not special-case slab reclaim when watermarks are boosted
+    - [armhf,arm64] cpufreq: schedutil: Don't skip freq update when limits
+      change
+    - drm/amdgpu: fix gfx9 soft recovery
+    - drm/nouveau: Only recalculate PBN/VCPI on mode/connector changes
+    - [arm64] ftrace: Ensure module ftrace trampoline is coherent with I-side
+    - [x86] ALSA: hda/realtek - Add quirk for HP Envy x360
+    - ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
+      (CVE-2019-15118)
+    - ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit
+      (CVE-2019-15117)
+    - [x86] ALSA: hda - Apply workaround for another AMD chip 1022:1487
+    - ALSA: hda - Fix a memory leak bug
+    - ALSA: hda - Add a generic reboot_notify
+    - ALSA: hda - Let all conexant codec enter D3 when rebooting
+    - HID: holtek: test for sanity of intfdata
+    - HID: hiddev: avoid opening a disconnected device
+    - HID: hiddev: do cleanup in failure of opening a device
+    - Input: kbtab - sanity check for endpoint type
+    - Input: iforce - add sanity checks
+    - net: usb: pegasus: fix improper read if get_registers() fail
+    - bpf: fix access to skb_shared_info->gso_segs
+    - netfilter: ebtables: also count base chain policies
+    - [riscv64] Correct the initialized flow of FP register
+    - [riscv64] Make __fstate_clean() work correctly.
+    - [armhf] Revert "i2c: imx: improve the error handling in
+      i2c_imx_dma_request()"
+    - blk-mq: move cancel of requeue_work to the front of blk_exit_queue
+    - io_uring: fix manual setup of iov_iter for fixed buffers
+    - [arm64] RDMA/hns: Fix sg offset non-zero issue
+    - IB/mlx5: Replace kfree with kvfree
+    - dma-mapping: check pfn validity in dma_common_{mmap,get_sgtable}
+    - [x87] platform: intel_pmc_core: Add ICL-NNPI support to PMC Core
+    - mm/hmm: always return EBUSY for invalid ranges in
+      hmm_range_{fault,snapshot}
+    - [armhf,arm64] irqchip/gic-v3-its: Free unused vpt_page when alloc vpe
+      table fail
+    - [armhf] irqchip/irq-imx-gpcv2: Forward irq type to parent
+    - f2fs: fix to read source block before invalidating it
+    - tools perf beauty: Fix usbdevfs_ioctl table generator to handle _IOC()
+    - perf header: Fix divide by zero error if f_header.attr_size==0
+    - perf header: Fix use of unitialized value warning
+    - RDMA/qedr: Fix the hca_type and hca_rev returned in device attributes
+    - ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
+    - libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
+    - Btrfs: fix deadlock between fiemap and transaction commits
+    - scsi: hpsa: correct scsi command status issue after reset
+    - scsi: qla2xxx: Fix possible fcport null-pointer dereferences
+    - drm/amdkfd: Fix byte align on VegaM
+    - drm/amd/powerplay: fix null pointer dereference around dpm state relates
+    - drm/amdgpu: fix error handling in amdgpu_cs_process_fence_dep
+    - drm/amdgpu: fix a potential information leaking bug
+    - ata: libahci: do not complain in case of deferred probe
+    - [riscv64] Fix perf record without libelf support
+    - [arm64] Lower priority mask for GIC_PRIO_IRQON
+    - [arm64] unwind: Prohibit probing on return_address()
+    - IB/core: Add mitigation for Spectre V1 (CVE-2017-5753)
+    - IB/mlx5: Fix MR registration flow to use UMR properly
+    - RDMA/restrack: Track driver QP types in resource tracker
+    - IB/mad: Fix use-after-free in ib mad completion handling
+    - RDMA/mlx5: Release locks during notifier unregister
+    - [arm64] drm: msm: Fix add_gpu_components
+    - [arm64] RDMA/hns: Fix error return code in hns_roce_v1_rsv_lp_qp()
+    - [armhf] drm/exynos: fix missing decrement of retry counter
+    - [arm64] kprobes: Recover pstate.D in single-step exception handler
+    - [arm64] Make debug exception handlers visible from RCU
+    - Revert "kmemleak: allow to coexist with fault injection"
+    - ocfs2: remove set but not used variable 'last_hash'
+    - page flags: prioritize kasan bits over last-cpuid
+    - asm-generic: fix -Wtype-limits compiler warnings
+    - tpm: tpm_ibm_vtpm: Fix unallocated banks
+    - [arm64] KVM: regmap: Fix unexpected switch fall-through
+    - [x86] staging: comedi: dt3000: Fix signed integer overflow 'divider *
+      base'
+    - [x86] staging: comedi: dt3000: Fix rounding up of timer divisor
+    - USB: core: Fix races in character device registration and deregistraion
+    - usb: cdc-acm: make sure a refcount is taken early enough
+    - USB: CDC: fix sanity checks in CDC union parser
+    - USB: serial: option: add D-Link DWM-222 device ID
+    - USB: serial: option: Add support for ZTE MF871A
+    - USB: serial: option: add the BroadMobi BM818 card
+    - USB: serial: option: Add Motorola modem UARTs
+    - usb: setup authorized_default attributes using usb_bus_notify
+    - netfilter: conntrack: Use consistent ct id hash calculation
+    - iwlwifi: Add support for SAR South Korea limitation
+    - Input: psmouse - fix build error of multiple definition
+    - bnx2x: Fix VF's VLAN reconfiguration in reload.
+    - bonding: Add vlan tx offload to hw_enc_features
+    - [armhf,arm64] net: dsa: Check existence of .port_mdb_add callback before
+      calling it
+    - net/mlx4_en: fix a memory leak bug
+    - net/packet: fix race in tpacket_snd()
+    - net: sched: sch_taprio: fix memleak in error path for sched list parse
+    - sctp: fix memleak in sctp_send_reset_streams
+    - sctp: fix the transport error_count check
+    - team: Add vlan tx offload to hw_enc_features
+    - tipc: initialise addr_trail_end when setting node addresses
+    - xen/netback: Reset nr_frags before freeing skb
+    - net/mlx5e: Only support tx/rx pause setting for port owner
+    - bnxt_en: Fix VNIC clearing logic for 57500 chips.
+    - bnxt_en: Improve RX doorbell sequence.
+    - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
+    - bnxt_en: Suppress HWRM errors for HWRM_NVM_GET_VARIABLE command
+    - bnxt_en: Use correct src_fid to determine direction of the flow
+    - bnxt_en: Fix to include flow direction in L2 key
+    - net sched: update skbedit action for batched events operations
+    - netdevsim: Restore per-network namespace accounting for fib entries
+    - net/mlx5e: ethtool, Avoid setting speed to 56GBASE when autoneg off
+    - net/mlx5e: Fix false negative indication on tx reporter CQE recovery
+    - net/mlx5e: Remove redundant check in CQE recovery flow of tx reporter
+    - net/mlx5e: Use flow keys dissector to parse packets for ARFS
+    - net/tls: prevent skb_orphan() from leaking TLS plain text with offload
+    - net: phy: consider AN_RESTART status when reading link status
+    - netlink: Fix nlmsg_parse as a wrapper for strict message parsing
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.11
+    - ASoC: simple_card_utils.h: care NULL dai at asoc_simple_debug_dai()
+    - ASoC: simple-card: fix an use-after-free in simple_dai_link_of_dpcm()
+    - ASoC: simple-card: fix an use-after-free in simple_for_each_link()
+    - ASoC: audio-graph-card: fix use-after-free in graph_dai_link_of_dpcm()
+    - ASoC: audio-graph-card: fix an use-after-free in graph_get_dai_id()
+    - ASoC: audio-graph-card: add missing const at graph_get_dai_id()
+    - regulator: axp20x: fix DCDCA and DCDCD for AXP806
+    - regulator: axp20x: fix DCDC5 and DCDC6 for AXP803
+    - [armhf] ASoC: samsung: odroid: fix an use-after-free issue for codec
+    - [armhf] ASoC: samsung: odroid: fix a double-free issue for cpu_dai
+    - [x86] ASoC: Intel: bytcht_es8316: Add quirk for Irbis NB41 netbook
+    - HID: logitech-hidpp: add USB PID for a few more supported mice
+    - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT
+    - [mips*] kernel: only use i8253 clocksource with periodic clockevent
+    - [mips*] fix cacheinfo
+    - libbpf: sanitize VAR to conservative 1-byte INT
+    - netfilter: ebtables: fix a memory leak bug in compat
+    - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks
+    - [amd64] spi: pxa2xx: Balance runtime PM enable/disable on error
+    - bpf: sockmap, sock_map_delete needs to use xchg
+    - bpf: sockmap, synchronize_rcu before free'ing map
+    - bpf: sockmap, only create entry if ulp is not already enabled
+    - ASoC: dapm: fix a memory leak bug
+    - bonding: Force slave speed check after link state recovery for 802.3ad
+    - [armhf,arm64] net: mvpp2: Don't check for 3 consecutive Idle frames for
+      10G links
+    - libbpf: fix using uninitialized ioctl results
+    - can: dev: call netif_carrier_off() in register_candev()
+    - can: gw: Fix error path of cgw_module_init
+    - libbpf: silence GCC8 warning about string truncation
+    - {nl,mac}80211: fix interface combinations on crypto controlled devices
+    - [armhf] ASoC: ti: davinci-mcasp: Fix clk PDIR handling for i2s master
+      mode
+    - [armhf,arm64] ASoC: rockchip: Fix mono capture
+    - [armhf] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint
+    - net: usb: qmi_wwan: Add the BroadMobi BM818 card
+    - qed: RDMA - Fix the hw_ver returned in device attributes
+    - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in
+      start_isoc_chain()
+    - mac80211_hwsim: Fix possible null-pointer dereferences in
+      hwsim_dump_radio_nl()
+    - [armhf,arm64] net: stmmac: manage errors returned by of_get_mac_address()
+    - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac
+      sets too
+    - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and
+      hash:ip,mac sets
+    - netfilter: ipset: Fix rename concurrency with listing
+    - rxrpc: Fix potential deadlock
+    - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet
+    - nvmem: Use the same permissions for eeprom as for nvmem
+    - iwlwifi: mvm: avoid races in rate init and rate perform
+    - iwlwifi: dbg_ini: move iwl_dbg_tlv_load_bin out of debug override ifdef
+    - iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
+    - iwlwifi: fix locking in delayed GTK setting
+    - iwlwifi: mvm: send LQ command always ASYNC
+    - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the
+      stack
+    - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in
+      phy_led_trigger_change_speed()
+    - perf bench numa: Fix cpu0 binding
+    - [arm64] spi: pxa2xx: Add support for Intel Tiger Lake
+    - can: sja1000: force the string buffer NULL-terminated
+    - can: peak_usb: force the string buffer NULL-terminated
+    - [x86] ASoC: amd: acp3x: use dma_ops of parent device for acp3x dma driver
+    - net/ethernet/qlogic/qed: force the string buffer NULL-terminated
+    - NFSv4: Fix a credential refcount leak in nfs41_check_delegation_stateid
+    - NFSv4: When recovering state fails with EAGAIN, retry the same recovery
+    - NFSv4.1: Fix open stateid recovery
+    - NFSv4.1: Only reap expired delegations
+    - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
+    - NFS: Fix regression whereby fscache errors are appearing on 'nofsc'
+      mounts
+    - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52
+    - HID: input: fix a4tech horizontal wheel custom usage
+    - [armhf,arm64] drm/rockchip: Suspend DP late
+    - SMB3: Fix potential memory leak when processing compound chain
+    - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL
+    - sched/deadline: Fix double accounting of rq/running bw in push & pull
+    - sched/psi: Reduce psimon FIFO priority
+    - sched/psi: Do not require setsched permission from the trigger creator
+    - [s390x] protvirt: avoid memory sharing for diag 308 set/store
+    - [s390x] mm: fix dump_pagetables top level page table walking
+    - [s390x] put _stext and _etext into .text section
+    - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'
+    - [armhf,arm64] net: stmmac: Fix issues when number of Queues >= 4
+    - [armhf,arm64] net: stmmac: tc: Do not return a fragment entry
+    - drm/amdgpu: pin the csb buffer on hw init for gfx v8
+    - [arm64] net: hisilicon: make hip04_tx_reclaim non-reentrant
+    - [arm64] net: hisilicon: fix hip04-xmit never return TX_BUSY
+    - [arm64] net: hisilicon: Fix dma_map_single failed on arm64
+    - NFSv4: Ensure state recovery handles ETIMEDOUT correctly
+    - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests
+    - libata: add SG safety checks in SFF pio transfers
+    - [x86] lib/cpu: Address missing prototypes warning
+    - [x86] drm/vmwgfx: fix memory leak when too many retries have occurred
+    - block: aoe: Fix kernel crash due to atomic sleep when exiting
+    - block, bfq: handle NULL return value by bfq_init_rq()
+    - perf ftrace: Fix failure to set cpumask when only one cpu is present
+    - perf cpumap: Fix writing to illegal memory in handling cpumap mask
+    - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event
+    - [riscv64] dt-bindings: fix the schema compatible string for the HiFive
+      Unleashed board
+    - [arm64] KVM: Don't write junk to sysregs on reset
+    - [armhf] KVM: Don't write junk to CP15 registers on reset
+    - iwlwifi: mvm: disable TX-AMSDU on older NICs (Closes: #939853)
+    - HID: wacom: correct misreported EKR ring values
+    - HID: wacom: Correct distance scale for 2nd-gen Intuos devices
+    - [x86] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a
+      memslot" (regression in 5.1)
+    - Revert "dm bufio: fix deadlock with loop device" (regression in 5.2.3)
+    - [armhf] clk: socfpga: stratix10: fix rate caclulationg for cnt_clks
+    - ceph: clear page dirty before invalidate page
+    - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply
+    - libceph: fix PG split vs OSD (re)connect race
+    - drm/amdgpu/gfx9: update pg_flags after determining if gfx off is possible
+    - drm/nouveau: Don't retry infinitely when receiving no data on i2c over
+      AUX
+    - scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm()
+    - gpiolib: never report open-drain/source lines as 'input' to user-space
+    - [x86] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE
+    - userfaultfd_release: always remove uffd flags and clear
+      vm_userfaultfd_ctx
+    - [i386] retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386
+    - [x86] apic: Handle missing global clockevent gracefully
+    - [x86] CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h
+    - [x86] boot: Save fields explicitly, zero out everything else
+    - [x86] boot: Fix boot regression caused by bootparam sanitizing
+    - IB/hfi1: Unsafe PSN checking for TID RDMA READ Resp packet
+    - IB/hfi1: Add additional checks when handling TID RDMA READ RESP packet
+    - IB/hfi1: Add additional checks when handling TID RDMA WRITE DATA packet
+    - IB/hfi1: Drop stale TID RDMA packets that cause TIDErr
+    - psi: get poll_work to run when calling poll syscall next time
+    - dm kcopyd: always complete failed jobs
+    - dm btree: fix order of block initialization in btree_split_beneath
+    - dm integrity: fix a crash due to BUG_ON in __journal_read_write()
+    - dm raid: add missing cleanup in raid_ctr()
+    - dm space map metadata: fix missing store of apply_bops() return value
+    - dm table: fix invalid memory accesses with too high sector number
+    - dm zoned: improve error handling in reclaim
+    - dm zoned: improve error handling in i/o map code
+    - dm zoned: properly handle backing device failure
+    - genirq: Properly pair kobject_del() with kobject_add()
+    - mm/z3fold.c: fix race between migration and destruction
+    - mm, page_alloc: move_freepages should not examine struct page of reserved
+      memory
+    - mm: memcontrol: flush percpu vmstats before releasing memcg
+    - mm: memcontrol: flush percpu vmevents before releasing memcg
+    - mm, page_owner: handle THP splits correctly
+    - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely
+    - mm/zsmalloc.c: fix race condition in zs_destroy_pool
+    - IB/hfi1: Drop stale TID RDMA packets
+    - dm zoned: fix potential NULL dereference in dmz_do_reclaim()
+    - io_uring: fix potential hang with polled IO
+    - io_uring: don't enter poll loop if we have CQEs pending
+    - io_uring: add need_resched() check in inner poll loop
+    - [powerpc*] Allow flush_(inval_)dcache_range to work across ranges >4GB
+    - rxrpc: Fix local endpoint refcounting
+    - rxrpc: Fix read-after-free in rxrpc_queue_local()
+    - rxrpc: Fix local endpoint replacement
+    - rxrpc: Fix local refcounting
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.12
+    - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns
+    - afs: Fix the CB.ProbeUuid service handler to reply correctly
+    - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u()
+    - fs: afs: Fix a possible null-pointer dereference in afs_put_read()
+    - afs: Fix off-by-one in afs_rename() expected data version calculation
+    - afs: Only update d_fsdata if different in afs_d_revalidate()
+    - afs: Fix missing dentry data version updating
+    - nvmet: Fix use-after-free bug when a port is removed
+    - nvmet-loop: Flush nvme_delete_wq when removing the port
+    - nvmet-file: fix nvmet_file_flush() always returning an error
+    - nvme-core: Fix extra device_put() call on error path
+    - nvme: fix a possible deadlock when passthru commands sent to a multipath
+      device
+    - nvme-rdma: fix possible use-after-free in connect error flow
+    - nvme: fix controller removal race with scan work
+    - nvme-pci: Fix async probe remove race
+    - btrfs: trim: Check the range passed into to prevent overflow
+    - IB/mlx5: Fix implicit MR release flow
+    - [armhf] omap-dma/omap_vout_vrfb: fix off-by-one fi value
+    - iommu/dma: Handle SG length overflow better
+    - dma-direct: don't truncate dma_required_mask to bus addressing
+      capabilities
+    - usb: gadget: composite: Clear "suspended" on reset/disconnect
+    - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt
+    - xen/blkback: fix memory leaks
+    - [arm64] cpufeature: Don't treat granule sizes as strict
+    - [riscv64] fix flush_tlb_range() end address for flush_tlb_page()
+    - drm/scheduler: use job count instead of peek
+    - drm/ast: Fixed reboot test may cause system hanged
+    - [x86] tools: hv: fix KVP and VSS daemons exit code
+    - locking/rwsem: Add missing ACQUIRE to read_slowpath exit when queue is
+      empty
+    - lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop
+    - [arm*] watchdog: bcm2835_wdt: Fix module autoload
+    - mt76: usb: fix rx A-MSDU support
+    - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set
+    - ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets
+      (regression in 5.1)
+    - [armhf] net: cpsw: fix NULL pointer exception in the probe error path
+    - net: fix __ip_mc_inc_group usage
+    - net/smc: make sure EPOLLOUT is raised
+    - tcp: make sure EPOLLOUT wont be missed
+    - ipv4: mpls: fix mpls_xmit for iptunnel
+    - openvswitch: Fix conntrack cache with timeout
+    - ipv4/icmp: fix rt dst dev null pointer dereference
+    - xfrm/xfrm_policy: fix dst dev null pointer dereference in collect_md mode
+    - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n
+    - ALSA: usb-audio: Check mixer unit bitmap yet more strictly
+    - ALSA: hda/ca0132 - Add new SBZ quirk
+    - ALSA: line6: Fix memory leak at line6_init_pcm() error path
+    - ALSA: hda - Fixes inverted Conexant GPIO mic mute led
+    - ALSA: seq: Fix potential concurrent access to the deleted pool
+    - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate()
+    - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604
+    - [x86] kvm: skip populating logical dest map if apic is not sw enabled
+    - [x86] KVM: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when
+      kvm_intel.nested is disabled
+    - [x86] KVM: Don't update RIP or do single-step on faulting emulation
+    - [x86] uprobes: Fix detection of 32-bit user mode
+    - [x86] mm/cpa: Prevent large page split when ftrace flips RW on kernel text
+    - [x86] apic: Do not initialize LDR and DFR for bigsmp
+    - [x86] apic: Include the LDR when clearing out APIC registers
+    - HID: logitech-hidpp: remove support for the G700 over USB
+    - ftrace: Fix NULL pointer dereference in t_probe_next()
+    - ftrace: Check for successful allocation of hash
+    - ftrace: Check for empty hash and comment the race with registering probes
+    - usbtmc: more sanity checking for packet size
+    - usb-storage: Add new JMS567 revision to unusual_devs
+    - USB: cdc-wdm: fix race between write and disconnect due to flag abuse
+    - usb: hcd: use managed device resources
+    - [armhf,arm64] usb: chipidea: udc: don't do hardware access if gadget has
+      stopped
+    - usb: host: ohci: fix a race condition between shutdown and irq
+    - USB: storage: ums-realtek: Whitelist auto-delink support
+    - [x86] tools/power turbostat: Fix caller parameter of get_tdp_amd()
+    - [powerpc*] KVM: Book3S: Fix incorrect guest-to-user-translation error
+      handling
+    - [armhf,arm64] KVM: vgic: Fix potential deadlock when ap_list is long
+    - [armhf,arm64] KVM: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI
+    - [x86] mei: me: add Tiger Lake point LP device ID
+    - [armhf,arm64] Revert "mmc: sdhci-tegra: drop ->get_ro() implementation"
+      (regression in 5.1)
+    - mmc: core: Fix init of SD cards reporting an invalid VDD range
+    - [x86] intel_th: pci: Add support for another Lewisburg PCH
+    - [x86] intel_th: pci: Add Tiger Lake support
+    - [x86] typec: tcpm: fix a typo in the comparison of pdo_max_voltage
+    - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend()
+    - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0
+    - Revert "NFSv4/flexfiles: Abort I/O early if the layout segment was
+      invalidated" (regression in 5.1)
+    - lib: logic_pio: Fix RCU usage
+    - lib: logic_pio: Avoid possible overlap for unregistering regions
+    - lib: logic_pio: Add logic_pio_unregister_range()
+    - drm/amdgpu: Add APTX quirk for Dell Latitude 5495
+    - drm/amdgpu: fix GFXOFF on Picasso and Raven2
+    - [x86] drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest
+    - [x86] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe()
+    - i2c: piix4: Fix port selection for AMD Family 16h Model 30h
+    - [arm64] bus: hisi_lpc: Unregister logical PIO range to avoid potential
+      use-after-free
+    - [arm64] bus: hisi_lpc: Add .remove method to avoid driver unbind crash
+    - [x86] VMCI: Release resource if the work is already queued
+    - [x86] crypto: ccp - Ignore unconfigured CCP device on suspend/resume
+    - SUNRPC: Don't handle errors if the bind/connect succeeded
+    - mt76: mt76x0u: do not reset radio on resume
+    - mm, memcg: partially revert "mm/memcontrol.c: keep local VM counters in
+      sync with the hierarchical ones" (regression in 5.2.7)
+    - mm: memcontrol: fix percpu vmstats and vmevents flush
+    - mac80211: fix possible sta leak
+    - cfg80211: Fix Extended Key ID key install checks
+    - mac80211: Don't memset RXCB prior to PAE intercept
+    - mac80211: Correctly set noencrypt for PAE frames
+    - iwlwifi: add new cards for 22000 and fix struct name
+    - iwlwifi: add new cards for 22000 and change wrong structs
+    - iwlwifi: add new cards for 9000 and 20000 series
+    - iwlwifi: change 0x02F0 fw from qu to quz
+    - iwlwifi: pcie: add support for qu c-step devices
+    - iwlwifi: pcie: don't switch FW to qnj when ax201 is detected
+    - iwlwifi: pcie: handle switching killer Qu B0 NICs to C0
+    - [x86] drm/i915: Do not create a new max_bpc prop for MST connectors
+    - [x86] drm/i915/dp: Fix DSC enable code to use cpu_transcoder instead of
+      encoder->type
+    - [x86] ptrace: fix up botched merge of spectrev1 fix
+    - bpf: fix use after free in prog symbol exposure
+    - hsr: implement dellink to clean up resources
+    - hsr: fix a NULL pointer deref in hsr_dev_xmit()
+    - hsr: switch ->dellink() to ->ndo_uninit()
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.13
+    - Revert "Input: elantech - enable SMBus on new (2018+) systems"
+      (regression in 5.2.9)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.14
+    - mld: fix memory leak in mld_del_delrec()
+    - net: fix skb use after free in netpoll
+    - net: sched: act_sample: fix psample group handling on overwrite
+    - net_sched: fix a NULL pointer deref in ipt action
+    - [arm64, armhf] net: stmmac: dwmac-rk: Don't fail if phy regulator is
+      absent
+    - tcp: inherit timestamp on mtu probe
+    - tcp: remove empty skb from write queue in error cases
+    - Revert "r8152: napi hangup fix after disconnect"
+    - r8152: remove calling netif_napi_del
+    - net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
+    - Add genphy_c45_config_aneg() function to phy-c45.c
+    - net/sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue
+    - net/sched: pfifo_fast: fix wrong dereference when qdisc is reset
+    - net/rds: Fix info leak in rds6_inc_info_copy() (CVE-2019-16714)
+    - batman-adv: Fix netlink dumping of all mcast_flags buckets
+    - libbpf: fix erroneous multi-closing of BTF FD
+    - libbpf: set BTF FD for prog only when there is supported .BTF.ext data
+    - netfilter: nf_flow_table: fix offload for flows that are subject to xfrm
+    - net/mlx5e: Fix error flow of CQE recovery on tx reporter
+    - [armhf] clk: samsung: Change signature of exynos5_subcmus_init() function
+    - [armhf] clk: samsung: exynos5800: Move MAU subsystem clocks to MAU sub-CMU
+    - [armhf] clk: samsung: exynos542x: Move MSCL subsystem clocks to its
+      sub-CMU
+    - netfilter: nf_tables: use-after-free in failing rule with bound set
+    - netfilter: nf_flow_table: conntrack picks up expired flows
+    - netfilter: nf_flow_table: teardown flow timeout race
+    - tools: bpftool: fix error message (prog -> object)
+    - ixgbe: fix possible deadlock in ixgbe_service_task()
+    - [x86] hv_netvsc: Fix a warning of suspicious RCU usage
+    - net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx
+    - Bluetooth: btqca: Add a short delay before downloading the NVM
+    - Bluetooth: hci_qca: Send VS pre shutdown command.
+    - [s390x] qeth: serialize cmd reply with concurrent timeout
+    - ibmveth: Convert multicast list size for little-endian system
+    - gpio: Fix build error of function redefinition
+    - netfilter: nft_flow_offload: skip tcp rst and fin packets
+    - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure
+    - scsi: target: tcmu: avoid use-after-free after command timeout
+    - cxgb4: fix a memory leak bug
+    - liquidio: add cleanup in octeon_setup_iq()
+    - net: myri10ge: fix memory leaks
+    - clk: Fix falling back to legacy parent string matching
+    - clk: Fix potential NULL dereference in clk_fetch_parent_index()
+    - lan78xx: Fix memory leaks
+    - vfs: fix page locking deadlocks when deduping files
+    - cx82310_eth: fix a memory leak bug
+    - net: kalmia: fix memory leaks
+    - net: cavium: fix driver name
+    - wimax/i2400m: fix a memory leak bug
+    - sched/core: Schedule new worker even if PI-blocked
+    - kprobes: Fix potential deadlock in kprobe_optimizer()
+    - [x86] HID: intel-ish-hid: ipc: add EHL device id
+    - HID: cp2112: prevent sleeping function called from invalid context
+    - [x86] boot/compressed/64: Fix boot on machines with broken E820 table
+    - scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ
+    - [x86] Input: hyperv-keyboard: Use in-place iterator API in the channel
+      callback
+    - Tools: hv: kvp: eliminate 'may be used uninitialized' warning
+    - nvme-multipath: fix possible I/O hang when paths are updated
+    - nvme: Fix cntlid validation when not using NVMEoF
+    - RDMA/cma: fix null-ptr-deref Read in cma_cleanup
+    - IB/mlx4: Fix memory leaks
+    - [x86] infiniband: hfi1: fix a memory leak bug
+    - [x86] infiniband: hfi1: fix memory leaks
+    - drm/amdgpu: prevent memory leaks in AMDGPU_CS ioctl
+    - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr()
+    - ceph: fix buffer free while holding i_ceph_lock in
+      __ceph_build_xattrs_blob()
+    - ceph: fix buffer free while holding i_ceph_lock in fill_inode()
+    - [arm64, armhf] KVM: Only skip MMIO insn once
+    - afs: Fix leak in afs_lookup_cell_rcu()
+    - afs: Fix possible oops in afs_lookup trace event
+    - afs: use correct afs_call_type in yfs_fs_store_opaque_acl2
+    - RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message
+    - gpio: Fix irqchip initialization order
+    - [arm64, armhf] KVM: VGIC: Properly initialise private IRQ affinity
+    - [x86] boot/compressed/64: Fix missing initialization in
+      find_trampoline_placement()
+    - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer
+    - [x86] Revert "x86/apic: Include the LDR when clearing out APIC registers"
+    - [x86] boot: Preserve boot_params.secure_boot from sanitizing
+    - Revert "mmc: core: do not retry CMD6 in __mmc_switch()"
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.15
+    - gpio: pca953x: correct type of reg_direction
+    - gpio: pca953x: use pca953x_read_regs instead of regmap_bulk_read
+    - ALSA: hda - Fix potential endless loop at applying quirks
+    - ALSA: hda/realtek - Fix overridden device-specific initialization
+    - ALSA: hda/realtek - Add quirk for HP Pavilion 15
+    - ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL
+    - ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre
+    - sched/fair: Don't assign runtime for throttled cfs_rq
+    - [x86] drm/vmwgfx: Fix double free in vmw_recv_msg()
+    - drm/nouveau/sec2/gp102: add missing MODULE_FIRMWAREs
+    - [powerpc*] 64e: Drop stale call to smp_processor_id() which hangs SMP
+      startup
+    - [powerpc*] tm: Fix restoring FP/VMX facility incorrectly on interrupts
+      (CVE-2019-15031)
+    - batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
+    - batman-adv: Only read OGM tvlv_len after buffer len check
+    - bcache: only clear BTREE_NODE_dirty bit when it is set
+    - bcache: add comments for mutex_lock(&b->write_lock)
+    - bcache: fix race in btree_flush_write()
+    - IB/rdmavt: Add new completion inline
+    - IB/{rdmavt, qib, hfi1}: Convert to new completion API
+    - IB/hfi1: Unreserve a flushed OPFN request
+    - [x86] drm/i915: Disable SAMPLER_STATE prefetching on all Gen11 steppings.
+    - [x86] drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV
+    - mmc: sdhci-sprd: Fix the incorrect soft reset operation when runtime
+      resuming
+    - usb: chipidea: imx: add imx7ulp support
+    - usb: chipidea: imx: fix EPROBE_DEFER support during driver probe
+    - [s390x] virtio: fix race on airq_areas[]
+    - [x86] drm/i915: Support flags in whitlist WAs
+    - [x86] drm/i915: Support whitelist workarounds on all engines
+    - [x86] drm/i915: whitelist PS_(DEPTH|INVOCATION)_COUNT
+    - [x86] drm/i915: Add whitelist workarounds for ICL
+    - [x86] drm/i915/icl: whitelist PS_(DEPTH|INVOCATION)_COUNT
+    - Btrfs: fix unwritten extent buffers and hangs on future writeback
+      attempts (Closes: #940105)
+    - vhost: make sure log_num < in_num (CVE-2019-14835)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.16
+    - bridge/mdb: remove wrong use of NLM_F_MULTI
+    - cdc_ether: fix rndis support for Mediatek based smartphones
+    - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()'
+    - isdn/capi: check message length in capi_write()
+    - ixgbe: Fix secpath usage for IPsec TX offload.
+    - ixgbevf: Fix secpath usage for IPsec Tx offload
+    - net: Fix null de-reference of device refcount
+    - net: gso: Fix skb_segment splat when splitting gso_size mangled skb
+      having linear-headed frag_list
+    - net: phylink: Fix flow control resolution
+    - net: sched: fix reordering issues
+    - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
+    - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()'
+    - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike
+    - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR
+    - tipc: add NULL pointer check before calling kfree_rcu
+    - tun: fix use-after-free when register netdev failed
+    - net-ipv6: fix excessive RTF_ADDRCONF flag on ::1/128 local route (and
+      others)
+    - ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR()
+    - net: fixed_phy: Add forward declaration for struct gpio_desc;
+    - sctp: fix the missing put_user when dumping transport thresholds
+    - net: sock_map, fix missing ulp check in sock hash case
+    - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and
+      blacklist
+    - gpio: mockup: add missing single_release()
+    - gpio: fix line flag validation in linehandle_create
+    - gpio: fix line flag validation in lineevent_create
+    - Btrfs: fix assertion failure during fsync and use of stale transaction
+    - cgroup: freezer: fix frozen state inheritance
+    - Revert "mmc: bcm2835: Terminate timeout work synchronously"
+    - Revert "mmc: sdhci: Remove unneeded quirk2 flag of O2 SD host controller"
+    - mmc: tmio: Fixup runtime PM management during probe
+    - mmc: tmio: Fixup runtime PM management during remove
+    - drm/lima: fix lima_gem_wait() return value
+    - [x86] drm/i915: Limit MST to <= 8bpc once again
+    - [x86] drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+
+    - ipc: fix semtimedop for generic 32-bit architectures
+    - ipc: fix sparc64 ipc() wrapper
+    - ixgbe: fix double clean of Tx descriptors with xdp
+    - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us
+    - Revert "rt2800: enable TX_PIN_CFG_LNA_PE_ bits per band"
+    - mt76: mt76x0e: disable 5GHz band for MT7630E
+    - genirq: Prevent NULL pointer dereference in resend_irqs()
+    - regulator: twl: voltage lists for vdd1/2 on twl4030
+    - [s390x] KVM: kvm_s390_vm_start_migration: check dirty_bitmap before using
+      it as target for memset()
+    - [s390x] KVM: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl
+    - [x86] KVM: work around leak of uninitialized stack contents
+    - [x86] KVM: mmu: Reintroduce fast invalidate/zap for flushing memslot
+    - [x86] KVM: nVMX: handle page fault in vmread
+    - [x86] purgatory: Change compiler flags from -mcmodel=kernel to
+      -mcmodel=large to fix kexec relocation errors
+    - powerpc: Add barrier_nospec to raw_copy_in_user()
+    - kernel/module: Fix mem leak in module_add_modinfo_attrs
+    - x86/boot: Use efi_setup_data for searching RSDP on kexec-ed kernels
+    - x86/ima: check EFI SetupMode too
+    - drm/meson: Add support for XBGR8888 & ABGR8888 formats
+    - clk: Fix debugfs clk_possible_parents for clks without parent string names
+    - clk: Simplify debugfs printing and add a newline
+    - mt76: Fix a signedness bug in mt7615_add_interface()
+    - mt76: mt7615: Use after free in mt7615_mcu_set_bcn()
+    - clk: rockchip: Don't yell about bad mmc phases when getting
+    - mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue
+    - PCI: Always allow probing with driver_override
+    - ubifs: Correctly use tnc_next() in search_dh_cookie()
+    - driver core: Fix use-after-free and double free on glue directory
+    - crypto: talitos - check AES key size
+    - crypto: talitos - fix CTR alg blocksize
+    - crypto: talitos - check data blocksize in ablkcipher.
+    - crypto: talitos - fix ECB algs ivsize
+    - crypto: talitos - Do not modify req->cryptlen on decryption.
+    - crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking.
+    - firmware: ti_sci: Always request response from firmware
+    - drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC
+    - drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto
+    - mm/z3fold.c: remove z3fold_migration trylock
+    - mm/z3fold.c: fix lock/unlock imbalance in z3fold_page_isolate
+    - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"
+    - modules: fix BUG when load module with rodata=n
+    - modules: fix compile error if don't have strict module rwx
+    - modules: always page-align module section allocations
+    - [x86] kvm: nVMX: Remove unnecessary sync_roots from handle_invept
+    - [x86] KVM: SVM: Fix detection of AMD Errata 1096
+    - [x86] platform: pmc_atom: Add CB4063 Beckhoff Automation board to
+      critclk_systems DMI table
+    - [x86] platform: pcengines-apuv2: use KEY_RESTART for front button
+    - rsi: fix a double free bug in rsi_91x_deinit() (CVE-2019-15504)
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.17
+    - USB: usbcore: Fix slab-out-of-bounds bug during device reset
+    - media: tm6000: double free if usb disconnect while streaming
+    - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
+    - net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit()
+    - netfilter: nf_flow_table: set default timeout after successful insertion
+    - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report
+    - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID
+    - SUNRPC: Handle connection breakages correctly in call_status()
+    - nfs: disable client side deduplication
+    - [powerpc*] mm/radix: Use the right page size for vmemmap mapping
+    - net: hns: fix LED configuration for marvell phy
+    - net: aquantia: fix limit of vlan filters
+    - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
+    - net/sched: fix race between deactivation and dequeue for NOLOCK qdisc
+    - net_sched: let qdisc_put() accept NULL pointer
+    - udp: correct reuseport selection with connected sockets
+    - xen-netfront: do not assume sk_buff_head list is empty in error handling
+    - net: dsa: Fix load order between DSA drivers and taggers
+    - KVM: coalesced_mmio: add bounds checking (CVE-2019-14821)
+    - firmware: google: check if size is valid when decoding VPD data
+    - serial: sprd: correct the wrong sequence of arguments
+    - tty/serial: atmel: reschedule TX after RX was started
+    - mwifiex: Fix three heap overflow at parsing element in
+      cfg80211_ap_settings (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816)
+    - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
+    - ieee802154: hwsim: Fix error handle path in hwsim_init_module
+    - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails
+    - [armhf] dts: am57xx: Disable voltage switching for SD card
+    - [armhf] OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss
+    - bus: ti-sysc: Fix handling of forced idle
+    - bus: ti-sysc: Fix using configured sysc mask value
+    - [armhf] dts: Fix flags for gpio7
+    - [armhf] dts: Fix incorrect dcan register mapping for am3, am4 and dra7
+    - [arm64] dts: meson-g12a: add missing dwc2 phy-names
+    - [s390x] bpf: fix lcgr instruction encoding
+    - [armhf] OMAP2+: Fix omap4 errata warning on other SoCs
+    - [armhf] dts: am335x: Fix UARTs length
+    - [armhf] dts: dra74x: Fix iodelay configuration for mmc3
+    - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe()
+    - [armhf] dts: Fix incomplete dts data for am3 and am4 mmc
+    - [s390x] bpf: use 32-bit index for tail calls
+    - fpga: altera-ps-spi: Fix getting of optional confd gpio
+    - netfilter: ebtables: Fix argument order to ADD_COUNTER
+    - netfilter: nft_flow_offload: missing netlink attribute policy
+    - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
+    - NFSv4: Fix return values for nfs4_file_open()
+    - NFSv4: Fix return value in nfs_finish_open()
+    - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
+    - NFS: On fatal writeback errors, we need to call
+      nfs_inode_remove_request()
+    - xdp: unpin xdp umem pages in error path
+    - selftests/bpf: fix test_cgroup_storage on s390
+    - selftests/bpf: add config fragment BPF_JIT
+    - qed: Add cleanup in qed_slowpath_start()
+    - drm/omap: Fix port lookup for SDI output
+    - drm/virtio: use virtio_max_dma_size
+    - [armel,armhf] 8874/1: mm: only adjust sections of valid mm structures
+    - batman-adv: Only read OGM2 tvlv_len after buffer len check
+    - flow_dissector: Fix potential use-after-free on BPF_PROG_DETACH
+    - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0
+    - r8152: Set memory to all 0xFFs on failed reg reads
+    - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines
+    - pNFS/flexfiles: Don't time out requests on hard mounts
+    - NFS: Fix spurious EIO read errors
+    - NFS: Fix writepage(s) error handling to not report errors twice
+    - drm/amdgpu: fix dma_fence_wait without reference
+    - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
+    - netfilter: nf_conntrack_ftp: Fix debug output
+    - NFSv2: Fix eof handling
+    - NFSv2: Fix write regression
+    - NFS: remove set but not used variable 'mapping'
+    - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the
+      first symbol
+    - netfilter: conntrack: make sysctls per-namespace again
+    - drm/amd/powerplay: correct Vega20 dpm level related settings
+    - cifs: set domainName when a domain-key is used in multiuser
+    - cifs: Use kzfree() to zero out the password
+    - libceph: don't call crypto_free_sync_skcipher() on a NULL tfm
+    - usb: host: xhci-tegra: Set DMA mask correctly
+    - RISC-V: Fix FIXMAP area corruption on RV32 systems
+    - [armel,armhf] 8901/1: add a criteria for pfn_valid of arm
+    - ibmvnic: Do not process reset during or after device removal
+    - sky2: Disable MSI on yet another ASUS boards (P6Xxxx)
+    - i2c: designware: Synchronize IRQs when unregistering slave client
+    - perf/x86/intel: Restrict period on Nehalem
+    - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops
+    - i2c: iproc: Stop advertising support of SMBUS quick cmd
+    - i2c: mediatek: disable zero-length transfers for mt8183
+    - amd-xgbe: Fix error path in xgbe_mod_init()
+    - netfilter: nf_flow_table: clear skb tstamp before xmit
+    - [x86] tools/power x86_energy_perf_policy: Fix argument parsing
+    - [x86] tools/power turbostat: fix leak of file descriptor on error return
+      path
+    - [x86] tools/power turbostat: fix file descriptor leaks
+    - [x86] tools/power turbostat: fix buffer overrun
+    - [x86] tools/power turbostat: Fix Haswell Core systems
+    - [x86] tools/power turbostat: Add Ice Lake NNPI support
+    - [x86] tools/power turbostat: Fix CPU%C1 display value
+    - net: aquantia: fix removal of vlan 0
+    - net: aquantia: reapply vlan filters on up
+    - net: aquantia: linkstate irq should be oneshot
+    - net: aquantia: fix out of memory condition on rx side
+    - net: dsa: microchip: add KSZ8563 compatibility string
+    - enetc: Add missing call to 'pci_free_irq_vectors()' in probe and remove
+      functions
+    - net: seeq: Fix the function used to release some memory in an error
+      handling path
+    - dmaengine: ti: dma-crossbar: Fix a memory leak bug
+    - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()
+    - [x86] uaccess: Don't leak the AC flags into __get_user() argument
+      evaluation
+    - [x86] hyper-v: Fix overflow bug in fill_gva_list()
+    - [x86] iommu/vt-d: Remove global page flush support
+    - dmaengine: sprd: Fix the DMA link-list configuration
+    - dmaengine: rcar-dmac: Fix DMACHCLR handling if iommu is mapped
+    - keys: Fix missing null pointer check in request_key_auth_describe()
+    - [x86] iommu/amd: Flush old domains in kdump kernel
+    - [x86] iommu/amd: Fix race in increase_address_space()
+    - [arm64] Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
+    - ovl: fix regression caused by overlapping layers detection
+    - floppy: fix usercopy direction
+    - media: technisat-usb2: break out of loop at end of buffer
+      (CVE-2019-15505)
+    - vfs: Fix refcounting of filenames in fs_parser
+
+  [ Salvatore Bonaccorso ]
+  * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
+    (CVE-2019-15538)
+
+  [ Romain Perier ]
+  * [rt] Update to 5.2.14-rt7
+
+  [ Ben Hutchings ]
+  * Bump ABI to 3
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 26 Sep 2019 14:19:06 +0200
+
+linux (5.2.9-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * Partially revert "net: socket: implement 64-bit timestamps"
+    (fixes build/test regressions for glibc, qemu, suricata)
+  * [x86] intel-iommu: Exclude integrated GPUs by default (Closes: #935270):
+    - intel-iommu: Add option to exclude integrated GPU only
+    - intel-iommu: Add Kconfig option to exclude iGPU by default
+    - Enable INTEL_IOMMU_DEFAULT_ON_INTGPU_OFF instead of
+      INTEL_IOMMU_DEFAULT_ON
+
+  [ Thomas W ]
+  * [x86] Add various laptop modules. (Closes: #932086)
+    CONFIG_ACER_WIRELESS
+    CONFIG_LG_LAPTOP
+    CONFIG_SURFACE3_WMI
+    CONFIG_INTEL_WMI_THUNDERBOLT
+    CONFIG_PEAQ_WMI
+    CONFIG_TOSHIBA_WMI
+    CONFIG_SURFACE_3_BUTTON
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 21 Aug 2019 13:48:11 +0100
+
+linux (5.2.9-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.8
+    - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
+    - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
+    - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
+    - ALSA: usb-audio: Sanity checks for each pipe and EP types
+    - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
+    - HID: wacom: fix bit shift for Cintiq Companion 2
+    - HID: Add quirk for HP X1200 PIXART OEM mouse
+    - atm: iphase: Fix Spectre v1 vulnerability (CVE-2017-5753)
+    - bnx2x: Disable multi-cos feature.
+    - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case (Closes: #908712)
+    - ife: error out when nla attributes are empty
+    - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6
+    - ip6_tunnel: fix possible use-after-free on xmit
+    - ipip: validate header length in ipip_tunnel_xmit
+    - [armhf,arm64] mvpp2: fix panic on module removal
+    - [armhf,arm64] mvpp2: refactor MTU change code
+    - net: bridge: delete local fdb on device init failure
+    - net: bridge: mcast: don't delete permanent entries when fast leave is
+      enabled
+    - net: bridge: move default pvid init/deinit to NETDEV_REGISTER/UNREGISTER
+    - net: fix ifindex collision during namespace removal
+    - net/mlx5e: always initialize frag->last_in_page
+    - net/mlx5: Use reversed order when unregister devices
+    - net: phy: fixed_phy: print gpio error only if gpio node is present
+    - net: phy: mscc: initialize stats array
+    - net: sched: Fix a possible null-pointer dereference in dequeue_func()
+    - net sched: update vlan action for batched events operations
+    - net: sched: use temporary variable for actions indexes
+    - net/smc: do not schedule tx_work in SMC_CLOSED state
+    - [armhf,arm64] net: stmmac: Use netif_tx_napi_add() for TX polling
+      function
+    - tipc: compat: allow tipc commands without arguments
+    - tipc: fix unitilized skb list crash
+    - tun: mark small packets as owned by the tap sock
+    - net/mlx5: Fix modify_cq_in alignment
+    - net/mlx5e: Prevent encap flow counter update async to user query
+    - r8169: don't use MSI before RTL8168d
+    - net: fix bpf_xdp_adjust_head regression for generic-XDP
+    - [x86] hv_sock: Fix hang when a connection is closed
+    - net: phy: fix race in genphy_update_link
+    - net/smc: avoid fallback in case of non-blocking connect
+    - rocker: fix memory leaks of fib_work on two error return paths
+    - net/mlx5: Add missing RDMA_RX capabilities
+    - net/mlx5e: Fix matching of speed to PRM link modes
+    - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
+    - [x86] drm/i915/vbt: Fix VBT parsing for the PSR section
+    - Revert "mac80211: set NETIF_F_LLTX when using intermediate tx queues"
+    - [armhf,arm64] spi: bcm2835: Fix 3-wire mode if DMA is enabled
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.9
+    - Revert "PCI: Add missing link delays required by the PCIe spec"
+    - [arm64] iio: cros_ec_accel_legacy: Fix incorrect channel setting
+    - [x86] iio: imu: mpu6050: add missing available scan masks
+    - [x86] crypto: ccp - Fix oops by properly managing allocated structures
+    - [x86] crypto: ccp - Add support for valid authsize values less than 16
+    - [x86] crypto: ccp - Ignore tag length when decrypting GCM ciphertext
+    - driver core: platform: return -ENXIO for missing GpioInt
+    - usb: usbfs: fix double-free of usb memory upon submiturb error
+    - Revert "USB: rio500: simplify locking"
+    - usb: iowarrior: fix deadlock on disconnect
+    - sound: fix a memory leak bug
+    - [arm64,mips/octeon] mmc: cavium: Set the correct dma max segment size for
+      mmc_host
+    - [arm64,mips/octeon] mmc: cavium: Add the missing dma unmap when the dma
+      has finished.
+    - loop: set PF_MEMALLOC_NOIO for the worker thread
+    - bdev: Fixup error handling in blkdev_get() (Closes: #934378)
+    - Input: usbtouchscreen - initialize PM mutex before using it
+    - Input: elantech - enable SMBus on new (2018+) systems
+    - [x86] Input: synaptics - enable RMI mode for HP Spectre X360
+    - [x86] mm: Check for pfn instead of page in vmalloc_sync_one()
+    - [x86] mm: Sync also unmappings in vmalloc_sync_all()
+    - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy()
+    - [s390x] perf annotate: Fix s390 gap between kernel end and module start
+    - perf db-export: Fix thread__exec_comm()
+    - [s390x] perf record: Fix module size on s390
+    - [x86] purgatory: Do not use __builtin_memcpy and __builtin_memset
+    - [x86] purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
+    - genirq/affinity: Create affinity mask for single vector
+    - gfs2: gfs2_walk_metadata fix
+    - usb: yurex: Fix use-after-free in yurex_delete
+    - usb: typec: ucsi: ccg: Fix uninitilized symbol error
+    - usb: typec: tcpm: free log buf memory when remove debug file
+    - usb: typec: tcpm: remove tcpm dir if no children
+    - usb: typec: tcpm: Add NULL check before dereferencing config
+    - usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests
+    - [armhf] can: flexcan: fix stop mode acknowledgment
+    - [armhf] can: flexcan: fix an use-after-free in flexcan_setup_stop_mode()
+    - can: peak_usb: fix potential double kfree_skb()
+    - [powerpc*] fix off by one in max_zone_pfn initialization for ZONE_DMA
+    - netfilter: nfnetlink: avoid deadlock due to synchronous request_module
+    - netfilter: Fix rpfilter dropping vrf packets by mistake
+    - netfilter: nf_tables: fix module autoload for redir
+    - netfilter: conntrack: always store window size un-scaled
+    - netfilter: nft_hash: fix symhash with modulus one
+    - rq-qos: don't reset has_sleepers on spurious wakeups
+    - rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule
+    - rq-qos: use a mb for got_token
+    - netfilter: nf_tables: Support auto-loading for inet nat
+    - drm/amd/display: No audio endpoint for Dell MST display
+    - drm/amd/display: Clock does not lower in Updateplanes
+    - drm/amd/display: Wait for backlight programming completion in set
+      backlight level
+    - drm/amd/display: fix DMCU hang when going into Modern Standby
+    - drm/amd/display: use encoder's engine id to find matched free audio
+      device
+    - drm/amd/display: put back front end initialization sequence
+    - drm/amd/display: allocate 4 ddc engines for RV2
+    - drm/amd/display: Fix dc_create failure handling and 666 color depths
+    - drm/amd/display: Only enable audio if speaker allocation exists
+    - drm/amd/display: Increase size of audios array
+    - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN
+    - mac80211: fix possible memory leak in ieee80211_assign_beacon
+    - mac80211: don't warn about CW params when not using them
+    - allocate_flower_entry: should check for null deref
+    - hwmon: (nct6775) Fix register address and added missed tolerance for
+      nct6106
+    - [armhf] dts: imx6ul: fix clock frequency property name of I2C buses
+    - [powerpc*] papr_scm: Force a scm-unbind if initial scm-bind fails
+    - [arm64] Force SSBS on context switch
+    - [arm64] entry: SP Alignment Fault doesn't write to FAR_EL1
+    - [x86] iommu/vt-d: Check if domain->pgd was allocated
+    - [arm64] drm/msm/dpu: Correct dpu encoder spinlock initialization
+    - [ppc64] cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
+    - [s390x] qdio: add sanity checks to the fast-requeue path
+    - ALSA: compress: Fix regression on compressed capture streams
+    - ALSA: compress: Prevent bypasses of set_params
+    - ALSA: compress: Don't allow paritial drain operations on capture streams
+    - ALSA: compress: Be more restrictive about when a drain is allowed
+    - perf script: Fix off by one in brstackinsn IPC computation
+    - perf tools: Fix proper buffer size for feature processing
+    - perf stat: Fix segfault for event group in repeat mode
+    - perf session: Fix loading of compressed data split across adjacent
+      records
+    - perf probe: Avoid calling freeing routine multiple times for same pointer
+    - drbd: dynamically allocate shash descriptor
+    - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
+    - nvme: ignore subnqn for ADATA SX6000LNP
+    - nvme: fix memory leak caused by incorrect subsystem free
+    - scsi: megaraid_sas: fix panic on loading firmware crashdump
+    - scsi: ibmvfc: fix WARN_ON during event pool release
+    - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
+    - test_firmware: fix a memory leak bug
+    - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
+    - [x86] perf/intel: Fix SLOTS PEBS event constraint
+    - [x86] perf/intel: Fix invalid Bit 13 for Icelake MSR_OFFCORE_RSP_x
+      register
+    - [x86] perf: Apply more accurate check on hypervisor platform
+    - perf/core: Fix creating kernel counters for PMUs that override event->cpu
+    - [s390x] dma: provide proper ARCH_ZONE_DMA_BITS value
+    - HID: sony: Fix race condition between rumble and device remove.
+    - ALSA: usb-audio: fix a memory leak bug
+    - [x86] KVM/nSVM: properly map nested VMCB
+    - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
+    - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
+    - hwmon: (nct7802) Fix wrong detection of in4 presence
+    - hwmon: (lm75) Fixup tmp75b clr_mask
+    - [x86] drm/i915: Fix wrong escape clock divisor init for GLK
+    - ALSA: firewire: fix a memory leak bug
+    - ALSA: hiface: fix multiple memory leak bugs
+    - ALSA: hda - Don't override global PCM hw info flag
+    - [x86] ALSA: hda - Workaround for crackled sound on AMD controller
+      (1022:1457)
+    - mac80211: don't WARN on short WMM parameters from AP
+    - dax: dax_layout_busy_page() should not unmap cow pages
+    - SMB3: Fix deadlock in validate negotiate hits reconnect
+    - smb3: send CAP_DFS capability during session setup
+    - NFSv4: Fix delegation state recovery
+    - NFSv4: Check the return value of update_open_stateid()
+    - NFSv4: Fix an Oops in nfs4_do_setattr
+    - [x86] KVM: Fix leak vCPU's VMCS value into other pCPU
+    - [armhf,arm64] KVM: Sync ICH_VMCR_EL2 back when about to block
+    - mwifiex: fix 802.11n/WPA detection
+    - iwlwifi: don't unmap as page memory that was mapped as single
+    - iwlwifi: mvm: fix an out-of-bound access
+    - iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment
+    - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
+    - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
+
+  [ Salvatore Bonaccorso ]
+  * Enable Realtek 802.11ac wireless chips support (Closes: #933963)
+
+  [ Ben Hutchings ]
+  * [armel] fb-modules: Remove xgifb, which was removed upstream (fixes FTBFS)
+  * tracefs: Fix potential null dereference in default_file_open()
+    (Closes: #934304)
+  * [arm64] hwrandom: Re-enable HW_RANDOM_OMAP as module (Closes: #931707)
+  * ptp: Change CAVIUM_PTP from built-in to modular (Closes: #934848)
+  * bug script: Check whether /e/n/interfaces exists (Closes: #934824)
+  * bug script: Include network configuration from /e/n/interfaces.d
+  * bug script: Check for unreadable /e/n/interfaces files
+  * [x86] iommu: Enable INTEL_IOMMU_DEFAULT_ON (Closes: #934309)
+  * HID: Enable HID_BIGBEN_FF, HID_MACALLY, HID_GFRM, HID_GT683R,
+    HID_VIEWSONIC, HID_MALTRON, HID_U2FZERO as modules (Closes: #934091)
+  * usbip: network: Fix unaligned member access (Closes: #925766)
+  * libbpf: Fix cross-build
+  * [rt] Update to 5.2.9-rt3:
+    - i2c: exynos5: Remove IRQF_ONESHOT
+    - i2c: hix5hd2: Remove IRQF_ONESHOT
+    - sched/deadline: Ensure inactive_timer runs in hardirq context
+    - thermal/x86_pkg_temp: make pkg_temp_lock a raw spinlock
+    - dma-buf: Use seqlock_t instread disabling preemption
+    - KVM: arm/arm64: Let the timer expire in hardirq context on RT
+    - x86: preempt: Check preemption level before looking at lazy-preempt
+    - arm64: preempt: Fixup lazy preempt
+    - arm64: preempt: Check preemption level before looking at lazy-preempt
+
+  [ Alper Nebi Yasak ]
+  * [arm64] udeb: Add pl330 to kernel-image
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 18 Aug 2019 22:54:21 +0100
+
+linux (5.2.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.7
+    - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200
+    - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again
+    - [arm64] clk: meson: mpll: properly handle spread spectrum
+    - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend
+    - ftrace: Enable trampoline when rec count returns back to one
+    - [arm64] dts: qcom: qcs404-evb: fix l3 min voltage
+    - [arm64] dts: marvell: mcbin: enlarge PCI memory window
+    - [armhf,arm64] dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag
+      is unset
+    - [arm64] dts: rockchip: fix isp iommu clocks and power domain
+    - kernel/module.c: Only return -EEXIST for modules that have finished
+      loading
+    - PCI: OF: Initialize dev->fwnode appropriately
+    - [armhf,arm64] firmware/psci: psci_checker: Park kthreads before stopping
+      them
+    - [arm64] qcom: qcs404: Add reset-cells to GCC node
+    - swiotlb: fix phys_addr_t overflow warning
+    - [arm64] clk: tegra210: fix PLLU and PLLU_OUT1
+    - fs/adfs: super: fix use-after-free bug
+    - [arm64] dts: rockchip: Fix USB3 Type-C on rk3399-sapphire
+    - btrfs: tree-checker: Check if the file extent end overflows
+    - btrfs: fix minimum number of chunk errors for DUP
+    - btrfs: Flush before reflinking any extent to prevent NOCOW write falling
+      back to COW without data reservation
+    - [arm64] remoteproc: copy parent dma_pfn_offset for vdev
+    - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
+    - cifs: Fix a race condition with cifs_echo_request
+    - ceph: fix improper use of smp_mb__before_atomic()
+    - ceph: fix dir_lease_is_valid()
+    - ceph: return -ERANGE if virtual xattr value didn't fit in buffer
+    - virtio-mmio: add error check for platform_get_irq
+    - drm/amd/display: Expose audio inst from DC to DM
+    - cifs: fix crash in cifs_dfs_do_automount
+    - perf version: Fix segfault due to missing OPT_END()
+    - [x86] kvm: avoid constant-conversion warning
+    - ACPI: fix false-positive -Wuninitialized warning
+    - [x86] KVM: nVMX: Ignore segment base for VMX memory operand when segment
+      not FS or GS
+    - bpf: fix BTF verifier size resolution logic
+    - be2net: Signal that the device cannot transmit during reconfiguration
+    - mm/z3fold: don't try to use buddy slots after free
+    - mm/memcontrol.c: keep local VM counters in sync with the hierarchical ones
+    - mm/z3fold.c: reinitialize zhdr structs after migration
+    - [x86] apic: Silence -Wtype-limits compiler warnings
+    - [arm*] mm/cma.c: fail if fixed declaration can't be honored
+    - mm/ioremap: check virtual address alignment while creating huge mappings
+    - coda: add error handling for fget
+    - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
+      headers
+    - ipc/mqueue.c: only perform resource calculation if user valid
+    - device-dax: fix memory and resource leak if hotplug fails
+    - mm/hotplug: make remove_memory() interface usable
+    - stacktrace: Force USER_DS for stack_trace_save_user()
+    - [x86] crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL
+    - xen/pv: Fix a boot up hang revealed by int3 self test
+    - [x86] kvm: Don't call kvm_spurious_fault() from .fixup
+    - [x86] paravirt: Fix callee-saved function ELF sizes
+    - [x86] boot: Remove multiple copy of static function sanitize_boot_params()
+    - bpf: Disable GCC -fgcse optimization for ___bpf_prog_run()
+    - drm/nouveau: fix memory leak in nouveau_conn_reset()
+    - drm/nouveau/dmem: missing mutex_lock in error path
+    - kconfig: Clear "written" flag to avoid data loss
+    - tpm: Fix null pointer dereference on chip register error path
+    - Btrfs: fix incremental send failure after deduplication
+    - Btrfs: fix race leading to fs corruption after transaction abort
+    - dax: Fix missed wakeup in put_unlocked_entry()
+    - fgraph: Remove redundant ftrace_graph_notrace_addr() test
+    - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC
+    - [armhf] mmc: meson-mx-sdio: Fix misuse of GENMASK macro
+    - mmc: mmc_spi: Enable stable writes
+    - gpiolib: Preserve desc->flags when setting state
+    - gpio: don't WARN() on NULL descs if gpiolib is disabled
+    - gpiolib: fix incorrect IRQ requesting of an active-low lineevent
+    - IB/hfi1: Fix Spectre v1 vulnerability
+    - drm/nouveau: Only release VCPI slots on mode changes
+    - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly
+    - eeprom: at24: make spd world-readable again
+    - [arm*] i2c: iproc: Fix i2c master read more than 63 bytes
+    - selinux: fix memory leak in policydb_init()
+    - [x86] ALSA: hda: Fix 1-minute detection delay when i915 module is not
+      available (see #931507)
+    - mm: vmscan: check if mem cgroup is disabled or not before calling memcg
+      slab shrinker
+    - mm: migrate: fix reference check race between __find_get_block() and
+      migration
+    - mm: compaction: avoid 100% CPU usage during compaction when a task is
+      killed
+    - mm/migrate.c: initialize pud_entry in migrate_vma()
+    - loop: Fix mount(2) failure due to race with LOOP_SET_FD
+    - [s390x] dasd: fix endless loop after read unit address configuration
+    - cgroup: kselftest: relax fs_spec checks
+    - [hppa] Add archclean Makefile target
+    - [hppa] Strip debug info from kernel before creating compressed vmlinuz
+    - [hppa] Fix build of compressed kernel even with debug enabled
+    - drivers/perf: arm_pmu: Fix failure path in PM notifier
+    - [arm64] compat: Allow single-byte watchpoints on all addresses
+    - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
+    - io_uring: fix KASAN use after free in io_sq_wq_submit_work
+    - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
+    - nbd: replace kill_bdev() with __invalidate_device() again
+    - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
+    - xen/gntdev.c: Replace vm_map_pages() with vm_map_pages_zero()
+    - RDMA/devices: Do not deadlock during client removal
+    - IB/mlx5: Fix unreg_umr to ignore the mkey state
+    - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
+    - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
+    - IB/mlx5: Fix clean_mr() to work in the expected order
+    - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
+    - IB/hfi1: Check for error on call to alloc_rsm_map_table
+    - IB/hfi1: Drop all TID RDMA READ RESP packets after r_next_psn
+    - IB/hfi1: Field not zero-ed when allocating TID flow memory
+    - [x86] drm/i915/perf: fix ICL perf register offsets
+    - [x86] drm/i915/gvt: fix incorrect cache entry for guest page mapping
+    - [x86] cpufeatures: Carve out CQM features retrieval
+    - [x86] cpufeatures: Combine word 11 and 12 into a new scattered features
+      word
+    - [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations
+    - [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125)
+    - [amd64] entry: Use JMP instead of JMPQ
+    - [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS
+    - Documentation: Add swapgs description to the Spectre v1 documentation
+
+  [ Ben Hutchings ]
+  * [armhf] udeb: Remove davinci_cpdma from nic-modules (fixes FTBFS)
+  * Bump ABI to 2
+  * [armel/marvell] Increase maximum image size (fixes FTBFS):
+    - This removes support for QNAP TS-109, TS-119, TS-209, TS-219, TS-409,
+      and HP Media Vault mv2120
+    - This may be reverted if we can disable or modularise some features
+
+  [ Julien Cristau ]
+  * Fix libcpupower-dev's Depends field to account for SONAME bump.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 07 Aug 2019 14:50:10 +0100
+
+linux (5.2.6-1) unstable; urgency=medium
+
+  * New upstream release:
+    https://kernelnewbies.org/Linux_5.1
+    https://kernelnewbies.org/Linux_5.2
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.1
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.2
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.4
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.5
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.6
+
+  [ Bastian Germann ]
+  * [armhf] Enable C_CAN as a module. (Closes: #929968)
+
+  [ Ben Hutchings ]
+  * Drop "x86/boot: Add ACPI RSDP address to setup_header", which should
+    not have been applied to 4.20 or later
+  * Drop redundant part of "Install perf scripts non-executable"
+  * Drop "kbuild: Use -nostdinc in compile tests", which is no longer needed
+  * debian/rules.d/scripts/kconfig: Update for upstream file renaming
+  * debian/rules.d/scripts/mod: Add uuid_t and UUID_STRING_LEN definitions
+  * liblockdep: Disable until it can be built again
+  * libcpupower: Bump soversion since 2 exported functions have been removed
+  * libbpf: Stop overriding upstream soname; rename shlib package to libbpf0
+  * vfs: Enable FS_ENCRYPTION as built-in; disable on armel/marvell
+  * net: Enable NET_DEVLINK as built-in; disable on armel/marvell
+  * aufs: Update support patchset to aufs5.2 20190805
+  * lockdown: Update for 5.2:
+    - Update "acpi: Ignore acpi_rsdp kernel param when the kernel ..."
+    - Add "tracefs: Restrict tracefs when the kernel is locked down"
+    - Add "efi: Restrict efivar_ssdt_load when the kernel is locked down"
+    - Drop "MODSIGN: Import certificates from UEFI Secure Boot"
+  * [rt] Rebase onto 5.2.6, and re-enable
+  * [armhf,arm64] gpu: Enable DRM_LIMA, DRM_PANFROST as modules
+  * sched: Enable PSI (Closes: #931247)
+  * [armhf,arm64] power: Enable ENERGY_MODEL
+  * [armhf,arm64] cpufreq: Enable CPU_FREQ_DEFAULT_GOV_SCHEDUTIL (instead of
+    CPU_FREQ_DEFAULT_GOV_PERFORMANCE)
+  * hamradio: Disable auto-loading as mitigation against local exploits
+  * hamradio: Enable most options in top-level config:
+    - [arm64,ia64,mips*,riscv64,s390x,sh4,sparc64] Enable AX25, NETROM, ROSE,
+      and all possible drivers (Closes: #920651)
+    - [alpha,amd64,armel] ax25: Enable AX25_DAMA_SLAVE
+    - [armhf] Enable BPQETHER, BAYCOM_SER_FDX, BAYCOM_SER_HDX, BAYCOM_PAR,
+      BAYCOM_EPP, YAM as modules
+  * [armel/rpi,armhf] media: Enable VIDEO_BCM2835 as module
+  * usb/typec: Enable TYPEC_DP_ALTMODE, TYPEC_NVIDIA_ALTMODE as modules
+    (Closes: #931752)
+  * [amd64/cloud-amd64] hwrandom: Enable HW_RANDOM_VIRTIO (Closes: #914511)
+  * [ppc64*] crypto: Enable CRYPTO_DEV_NX, and CRYPTO_DEV_NX_ENCRYPT,
+    CRYPTO_DEV_NX_COMPRESS, CRYPTO_DEV_NX_COMPRESS_PSERIES,
+    CRYPTO_DEV_NX_COMPRESS_POWERNV as modules (Closes: #931374)
+  * [ppc64*] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable modules to support audio on pinebook: SND_SUN4I_I2S,
+    SND_SUN8I_CODEC, SND_SUN50I_CODEC_ANALOG, SND_SIMPLE_CARD,
+    SND_SOC_SIMPLE_AMPLIFIER. (Closes: #921019)
+
+  [ Romain Perier ]
+  * Refreshed patches:
+    - debian/revert-objtool-fix-config_stack_validation-y-warning.patch
+    - debian/dfsg/video-remove-nvidiafb-and-rivafb.patch
+    - debian/gitignore.patch
+    - debian/mips-disable-werror.patch
+    - bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
+    - bugfix/arm/arm-mm-export-__sync_icache_dcache-for-xen-privcmd.patch
+    - bugfix/powerpc/powerpc-lib-makefile-don-t-pull-in-quad.o-for-32-bit.patch
+    - bugfix/all/
+      radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
+    - bugfix/all/disable-some-marvell-phys.patch
+    - debian/overlayfs-permit-mounts-in-userns.patch
+    - bugfix/all/tools-perf-remove-shebangs.patch
+    - debian/ntfs-mark-it-as-broken.patch
+    - features/all/db-mok-keyring/
+      0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module.patch
+    - features/all/db-mok-keyring/
+      0004-MODSIGN-Import-certificates-from-UEFI-Secure-Boot.patch
+    - debian/android-enable-building-ashmem-and-binder-as-modules.patch
+    - features/all/aufs5/aufs5-mmap.patch
+    - features/all/aufs5/aufs5-standalone.patch
+    - features/all/lockdown/
+      0029-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mo.patch
+  * Enable coreboot memconsole (Closes: #872069)
+  * [rt] Update to 5.2-rt1
+
+  [ Karsten Merker ]
+  * [riscv64] Change the kernel image format from ELF to flat Image.
+    (Closes: #928451)
+  * [riscv64] Update config and image format (Closes: #933603):
+    - Enable SiFive UART and UART console support
+    - Enable clock drivers for the SiFive FU540
+    - Backport kernel image header support from kernel 5.3
+
+  [ Uwe Kleine-König ]
+  * [armhf] Add support for all i.MX6 variants.
+  * enable XFRM_STATISTICS (Closes: #929938)
+  * [arm64] Add support for Raspberry Pi 3 camera host interface (Closes:
+    #933228)
+  * Enable CRYPTO_ZSTD for ZRAM with ZSTD compression (Closes: #932722)
+
+  [ Lubomir Rintel ]
+  * [armhf] Enable config items for OLPC XO-1.75 (Closes: #927791)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 05 Aug 2019 02:27:14 +0100
+
+linux (5.0.2-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.2
+
+  [ Vagrant Cascadian ]
+  * [arm64,armhf] Enable PHY_ROCKCHIP_INNO_HDMI as modules.
+
+  [ Ben Hutchings ]
+  * [amd64] kexec: Enable KEXEC_SIG, replacing KEXEC_VERIFY_SIG
+  * [armel] MTD: Enable MTD_PHYSMAP as module and set MTD_PHYSMAP_OF=y
+    - udeb: Include physmap instead of physmap_of in mtd-modules (fixes FTBFS)
+  * [armhf] sound/soc/ti: Enable SND_SOC_DAVINCI_MCASP, SND_SOC_NOKIA_RX51,
+    SND_SOC_OMAP3_PANDORA, SND_SOC_OMAP3_TWL4030, SND_SOC_OMAP_ABE_TWL6040
+    as modules; replacing SND_DAVINCI_SOC_MCASP, SND_OMAP_SOC_RX51,
+    SND_OMAP_SOC_OMAP3_PANDORA, SND_OMAP_SOC_OMAP_TWL4030,
+    SND_OMAP_SOC_OMAP_ABE_TWL6040 respectively
+  * udeb: Add thermal_sys to kernel-image (fixes FTBFS on mips*, ppc64*,
+    riscv64)
+  * [powerpc*] mm: Only define MAX_PHYSMEM_BITS in SPARSEMEM configurations
+    (fixes FTBFS on powerpc, powerpcspe)
+  * debian/source/lintian-overrides: Override license-problem-gfdl-invariants
+    in more files
+  * debian/rules: Remove debian/*.substvars in clean target
+  * debian/source/lintian-overrides: Override
+    orig-tarball-missing-upstream-signature
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 18 Mar 2019 04:01:01 +0000
+
+linux (5.0.1-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_5.0
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.1
+
+  [ YunQiang Su ]
+  * [mipsel, mips64el] Enable DRM_AST and FB_SM750 for loongson-3
+    install ast and sm750fb to loongson-3's fb-modules
+  * [mips r6] Disable JUMP_LABEL for now: it will cause Reserved Instruction.
+    Enable SERIAL_OF_PLATFORM, if not, userland shows nothing.
+    Enable CPU_HAS_MSA, HIGHMEM, CRYPTO_CRC32_MIPS, and NR_CPUS to 16.
+    Support some boston drivers: IMG_ASCII_LCD, I2C_EG20T, PCH_PHUB, MMC,
+      PCIE_XILINX, RTC_DRV_M41T80, SPI_TOPCLIFF_PCH.
+
+  [ Hideki Yamane ]
+  * [x86] Enable Touchpad support on Gemini Lake (Closes: #917388)
+
+  [ Helge Deller ]
+  * [hppa] Build only 32- and 64-bit SMP-kernel: Alternative
+    live-patching code will patch kernel for UP at boot if necessary.
+
+  [ Romain Perier ]
+  * Refreshed debian/export-symbols-needed-by-android-drivers.patch to export
+    __close_fd_get_file() and task_work_add(), both required by binder.
+  * Refreshed debian/revert-objtool-fix-config_stack_validation-y-warning.patch,
+    so this can be applied against 4.20.4
+  * Refreshed patch for lockdown
+    0028-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-b.patch, so this
+    can be applied against >= 4.20.13
+
+  [ Marcin Juszkiewicz ]
+  * udeb: Add virtio-gpu into d-i to get graphical output in VM instances.
+
+  [ Ben Hutchings ]
+  * SCSI: Enable SCSI_MYRB, SCSI_MYRS as modules, replacing BLK_DEV_DAC960
+  * [arm64] remoteproc: Enable QCOM_Q6V5_MSS, renamed version of
+    QCOM_Q6V5_PIL
+  * [x86] drivers/gpu/drm/amd: Re-enable HSA_AMD (Closes: #920454)
+  * genpatch-aufs: Update to use aufs5-standalone
+  * aufs: Update support patchset to aufs5.0 20190311
+  * lockdown: Update patchset to 2019-02-18 version
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 12 Mar 2019 23:15:21 +0000
+
+linux (4.20-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.20
+
+  [ Ben Hutchings ]
+  * aufs: Update support patchset to aufs4.x-rcN 20181217
+  * [rt] Disable until it is updated for 4.20 or later
+  * [x86] udeb: Move rfkill to new rfkill-modules package to avoid duplication
+  * debian/source/lintian-overrides: Update overrides for GFDL notices
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 24 Dec 2018 04:26:47 +0000
+
+linux (4.19.37-6) unstable; urgency=high
+
+  [ John Paul Adrian Glaubitz ]
+  * [sh4]: Check for kprobe trap number before trying to handle a kprobe trap
+
+  [ Salvatore Bonaccorso ]
+  * tcp: refine memory limit test in tcp_fragment() (Closes: #930904)
+  * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272)
+
+  [ Steve McIntyre ]
+  * [arm64] Improve support for the Huawei TaiShan server platform
+    (Closes: #930554):
+    - Enable the HNS/ROCE Infiniband driver
+    - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS
+      and HNS/ROCE Infiniband
+    - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list
+
+  [ Cyril Brulebois ]
+  * [arm] Backport DTB support for Rasperry Pi Compute Module 3.
+  * [arm64] Backport DTB support for Rasperry Pi Compute Module 3.
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 19 Jul 2019 00:23:17 +0200
+
diff --git a/debian/changelog.old b/debian/changelog.old
new file mode 100644
index 000000000000..7957b8ef1afb
--- /dev/null
+++ b/debian/changelog.old
@@ -0,0 +1,39860 @@
+linux (4.19.37-5) unstable; urgency=medium
+
+  [ Romain Perier ]
+  * [sparc64] Fix device naming inconsistency between sunhv_console and
+    sunhv_reg (Closes: #926539)
+
+  [ Ben Hutchings ]
+  * tcp: Avoid ABI change for DoS fixes (Closes: #930743)
+  * Add ABI reference for 4.19.0-5
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 19 Jun 2019 23:16:58 +0100
+
+linux (4.19.37-4) unstable; urgency=high
+
+  [ Ben Hutchings ]
+  * libbpf: Fix various build bugs:
+    - Drop unnecessary changes from "libbpf: add SONAME to shared object"
+    - libbpf: Use only 2 components in soversion, matching package name
+      (Closes: #929187)
+    - libbpf: Build out-of-tree
+  * README.source: Document the various makefiles and use of out-of-tree builds
+  * [x86] lockdown,sysrq: Enable ALLOW_LOCKDOWN_LIFT_BY_SYSRQ (Closes: #929583)
+  * mwifiex: Fix possible buffer overflows at parsing bss descriptor
+    (CVE-2019-3846)
+  * mwifiex: Abort at too short BSS descriptor element
+  * mwifiex: Don't abort on small, spec-compliant vendor IEs
+  * mm/mincore.c: make mincore() more conservative (CVE-2019-5489)
+  * mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
+    (CVE-2019-10126)
+  * tcp: limit payload size of sacked skbs (CVE-2019-11477)
+  * tcp: tcp_fragment() should apply sane memory limits (CVE-2019-11478)
+  * tcp: add tcp_min_snd_mss sysctl (CVE-2019-11479)
+  * tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
+
+  [ Romain Perier ]
+  * [rt] Update to 4.19.37-rt20:
+    - powerpc/pseries/iommu: Use a locallock instead local_irq_save()
+    - powerpc: reshuffle TIF bits
+    - tty/sysrq: Convert show_lock to raw_spinlock_t
+    - drm/i915: Don't disable interrupts independently of the lock
+    - sched/completion: Fix a lockup in wait_for_completion()
+
+  [ Salvatore Bonaccorso ]
+  * brcmfmac: assure SSID length from firmware is limited (CVE-2019-9500)
+  * brcmfmac: add subtype check for event handling in data path
+    (CVE-2019-9503)
+  * ext4: zero out the unused memory region in the extent tree block
+    (CVE-2019-11833)
+  * Bluetooth: hidp: fix buffer overflow (CVE-2019-11884)
+
+  [ Aurelien Jarno ]
+  * [mips] Correctly bounds check virt_addr_valid (Closes: #929366)
+
+  [ John Paul Adrian Glaubitz ]
+  * [sparc64] udeb: Disable suffix for kernel-image
+
+  [ Alper Nebi Yasak ]
+  * udeb: input-modules: Include all keyboard driver modules
+  * [arm64] udeb: kernel-image: Include cros_ec_spi and SPI drivers
+  * [arm64] udeb: kernel-image: Include phy-rockchip-pcie
+  * [arm64] udeb: usb-modules: Include phy-rockchip-typec, extcon-usbc-cros-ec
+  * [arm64] udeb: mmc-modules: Include phy-rockchip-emmc
+  * [arm64] udeb: fb-modules: Include rockchipdrm, panel-simple, pwm_bl and
+    pwm-cros-ec
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 17 Jun 2019 20:00:22 +0100
+
+linux (4.19.37-3) unstable; urgency=medium
+
+  * [powerpc*] 64s: Include cpu header (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 15 May 2019 23:07:16 +0100
+
+linux (4.19.37-2) unstable; urgency=high
+
+  * debian/bin: Fix Python static checker regressions (Closes: #928618)
+  * Clean up speculation mitigations:
+    - Documentation/l1tf: Fix small spelling typo
+    - x86/cpu: Sanitize FAM6_ATOM naming
+    - kvm: x86: Report STIBP on GET_SUPPORTED_CPUID
+    - x86/msr-index: Cleanup bit defines
+    - x86/speculation: Consolidate CPU whitelists
+    - Documentation: Move L1TF to separate directory
+    - cpu/speculation: Add 'mitigations=' cmdline option
+    - x86/speculation: Support 'mitigations=' cmdline option
+    - powerpc/speculation: Support 'mitigations=' cmdline option
+    - s390/speculation: Support 'mitigations=' cmdline option
+    - x86/speculation/mds: Add 'mitigations=' support for MDS
+  * [x86] Mitigate Microarchitectural Data Sampling (MDS) vulnerabilities
+    (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091):
+    - x86/speculation/mds: Add basic bug infrastructure for MDS
+    - x86/speculation/mds: Add BUG_MSBDS_ONLY
+    - x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests
+    - x86/speculation/mds: Add mds_clear_cpu_buffers()
+    - x86/speculation/mds: Clear CPU buffers on exit to user
+    - x86/kvm/vmx: Add MDS protection when L1D Flush is not active
+    - x86/speculation/mds: Conditionally clear CPU buffers on idle entry
+    - x86/speculation/mds: Add mitigation control for MDS
+    - x86/speculation/mds: Add sysfs reporting for MDS
+    - x86/speculation/mds: Add mitigation mode VMWERV
+    - Documentation: Add MDS vulnerability documentation
+    - x86/speculation/mds: Add mds=full,nosmt cmdline option
+    - x86/speculation: Move arch_smt_update() call to after mitigation decisions
+    - x86/speculation/mds: Add SMT warning message
+    - x86/speculation/mds: Fix comment
+    - x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off
+    - x86/mds: Add MDSUM variant to the MDS documentation
+    - Documentation: Correct the possible MDS sysfs values
+    - x86/speculation/mds: Fix documentation typo
+  * [x86] linux-cpupower: Update CPPFLAGS for change in <asm/msr-index.h>
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 14 May 2019 17:34:37 +0100
+
+linux (4.19.37-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.29
+    - media: uvcvideo: Fix 'type' check leading to overflow
+    - vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel
+    - perf script: Fix crash with printing mixed trace point and other events
+    - perf core: Fix perf_proc_update_handler() bug
+    - perf tools: Handle TOPOLOGY headers with no CPU
+    - perf script: Fix crash when processing recorded stat data
+    - IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM
+    - [amd64] iommu/amd: Call free_iova_fast with pfn in map_sg
+    - [amd64] iommu/amd: Unmap all mapped pages in error path of map_sg
+    - [riscv64] fixup max_low_pfn with PFN_DOWN.
+    - ipvs: Fix signed integer overflow when setsockopt timeout
+    - [amd64] iommu/amd: Fix IOMMU page flush when detach device from a domain
+    - [armhf] clk: ti: Fix error handling in ti_clk_parse_divider_data()
+    - [arm64] clk: qcom: gcc: Use active only source for CPUSS clocks
+    - [riscv64] Adjust mmap base address at a third of task size
+    - IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start
+    - iomap: get/put the page in iomap_page_create/release()
+    - iomap: fix a use after free in iomap_dio_rw
+    - [arm64] net: hns: Fix for missing of_node_put() after of_parse_phandle()
+    - [arm64] net: hns: Restart autoneg need return failed when autoneg off
+    - [arm64] net: hns: Fix wrong read accesses via Clause 45 MDIO protocol
+    - [armhf,arm64] net: stmmac: dwmac-rk: fix error handling in
+      rk_gmac_powerup()
+    - netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are
+      present
+    - nfs: Fix NULL pointer dereference of dev_name
+    - qed: Fix bug in tx promiscuous mode settings
+    - qed: Fix LACP pdu drops for VFs
+    - qed: Fix VF probe failure while FLR
+    - qed: Fix system crash in ll2 xmit
+    - qed: Fix stack out of bounds bug
+    - scsi: libfc: free skb when receiving invalid flogi resp
+    - scsi: scsi_debug: fix write_same with virtual_gb problem
+    - scsi: bnx2fc: Fix error handling in probe()
+    - scsi: 53c700: pass correct "dev" to dma_alloc_attrs()
+    - net: macb: Apply RXUBR workaround only to versions with errata
+    - [amd64] boot/compressed/64: Set EFER.LME=1 in 32-bit trampoline before
+      returning to long mode
+    - cifs: fix computation for MAX_SMB2_HDR_SIZE
+    - [x86] microcode/amd: Don't falsely trick the late loading mechanism
+    - [arm64] kprobe: Always blacklist the KVM world-switch code
+    - apparmor: Fix aa_label_build() error handling for failed merges
+    - [x86] kexec: Don't setup EFI info if EFI runtime is not enabled
+    - proc: fix /proc/net/* after setns(2)
+    - mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone
+    - mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone
+    - fs/drop_caches.c: avoid softlockups in drop_pagecache_sb()
+    - autofs: drop dentry reference only when it is never used
+    - autofs: fix error return in autofs_fill_super()
+    - mm, memory_hotplug: fix off-by-one in is_pageblock_removable
+    - [armhf] OMAP: dts: N950/N9: fix onenand timings
+    - [armhf] dts: omap4-droid4: Fix typo in cpcap IRQ flags
+    - [armhf] dts: sun8i: h3: Add ethernet0 alias to Beelink X2
+    - [arm64] dts: meson: Fix IRQ trigger type for macirq
+    - [arm64] dts: meson8b: odroidc1: mark the SD card detection GPIO
+      active-low
+    - [arm64] dts: meson8m2: mxiii-plus: mark the SD card detection GPIO
+      active-low
+    - [arm64] dts: imx6sx: correct backward compatible of gpt
+    - [armhf] pinctrl: mcp23s08: spi: Fix regmap allocation for mcp23s18
+    - wlcore: sdio: Fixup power on/off sequence
+    - bpf: sock recvbuff must be limited by rmem_max in bpf_setsockopt()
+    - [arm64] dts: add msm8996 compatible to gicv3
+    - batman-adv: release station info tidstats
+    - [armhf,arm64] irqchip/gic-v4: Fix occasional VLPI drop
+    - [armhf,arm64] irqchip/gic-v3-its: Gracefully fail on LPI exhaustion
+    - drm/amdgpu: Add missing power attribute to APU check
+    - drm/radeon: check if device is root before getting pci speed caps
+    - drm/amdgpu: Transfer fences to dmabuf importer
+    - [armhf,arm64] net: stmmac: Fallback to Platform Data clock in Watchdog
+      conversion
+    - [armhf,arm64] net: stmmac: Disable EEE mode earlier in XMIT callback
+    - [armhf,arm64] irqchip/gic-v3-its: Fix ITT_entry_size accessor
+    - relay: check return of create_buf_file() properly
+    - bpf: fix potential deadlock in bpf_prog_register
+    - bpf: Fix syscall's stackmap lookup potential deadlock
+    - [armhf,arm64] drm/sun4i: tcon: Prepare and enable TCON channel 0 clock at
+      init
+    - vsock/virtio: fix kernel panic after device hot-unplug
+    - vsock/virtio: reset connected sockets on device removal
+    - netfilter: nf_nat: skip nat clash resolution for same-origin entries
+    - [s390x] qeth: release cmd buffer in error paths
+    - [s390x] qeth: fix use-after-free in error path
+    - [s390x] qeth: cancel close_dev work before removing a card
+    - perf symbols: Filter out hidden symbols from labels
+    - perf trace: Support multiple "vfs_getname" probes
+    - [mips*] Remove function size check in get_frame_info()
+    - Revert "scsi: libfc: Add WARN_ON() when deleting rports"
+    - [armhf] i2c: omap: Use noirq system sleep pm ops to idle device for
+      suspend
+    - drm/amdgpu: use spin_lock_irqsave to protect vm_manager.pasid_idr
+    - nvme: lock NS list changes while handling command effects
+    - nvme-pci: fix rapid add remove sequence
+    - fs: ratelimit __find_get_block_slow() failure message.
+    - qed: Fix EQ full firmware assert.
+    - qed: Consider TX tcs while deriving the max num_queues for PF.
+    - qede: Fix system crash on configuring channels.
+    - blk-iolatency: fix IO hang due to negative inflight counter
+    - nvme-pci: add missing unlock for reset error
+    - Input: wacom_serial4 - add support for Wacom ArtPad II tablet
+    - Input: elan_i2c - add id for touchpad found in Lenovo s21e-20
+    - [x86] iscsi_ibft: Fix missing break in switch statement
+    - scsi: aacraid: Fix missing break in switch statement
+    - [x86] PCI: Fixup RTIT_BAR of Intel Denverton Trace Hub
+    - [arm64] dts: zcu100-revC: Give wifi some time after power-on
+    - [arm64] dts: hikey: Give wifi some time after power-on
+    - [arm64] dts: hikey: Revert "Enable HS200 mode on eMMC"
+    - [armhf] dts: exynos: Fix pinctrl definition for eMMC RTSN line on Odroid
+      X2/U3
+    - [armhf] dts: exynos: Add minimal clkout parameters to Exynos3250 PMU
+    - [armhf] dts: exynos: Fix max voltage for buck8 regulator on Odroid
+      XU3/XU4
+    - drm: disable uncached DMA optimization for ARM and arm64
+      (Closes: #923723)
+    - netfilter: xt_TEE: fix wrong interface selection
+    - netfilter: xt_TEE: add missing code to get interface index in checkentry.
+    - gfs2: Fix missed wakeups in find_insert_glock
+    - cifs: allow calling SMB2_xxx_free(NULL) (Closes: #919290)
+    - ath9k: Avoid OF no-EEPROM quirks without qca,no-eeprom
+    - driver core: Postpone DMA tear-down until after devres release
+    - [x86] perf/intel: Make cpuc allocations consistent
+    - [x86] perf/intel: Generalize dynamic constraint creation
+    - [x86] Add TSX Force Abort CPUID/MSR
+    - [x86] perf/intel: Implement support for TSX Force Abort
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.30
+    - connector: fix unsafe usage of ->real_parent
+    - gro_cells: make sure device is up in gro_cells_receive()
+    - ipv4/route: fail early when inet dev is missing
+    - l2tp: fix infoleak in l2tp_ip6_recvmsg()
+    - lan743x: Fix RX Kernel Panic
+    - lan743x: Fix TX Stall Issue
+    - net: sit: fix UBSAN Undefined behaviour in check_6rd
+    - net/x25: fix use-after-free in x25_device_event()
+    - net/x25: reset state in x25_connect()
+    - pptp: dst_release sk_dst_cache in pptp_sock_destruct
+    - route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
+    - rxrpc: Fix client call queueing, waiting for channel
+    - sctp: remove sched init from sctp_stream_init
+    - tcp: do not report TCP_CM_INQ of 0 for closed connections
+    - tcp: Don't access TCP_SKB_CB before initializing it
+    - tcp: handle inet_csk_reqsk_queue_add() failures
+    - vxlan: Fix GRO cells race condition between receive and link delete
+    - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
+    - net/mlx4_core: Fix reset flow when in command polling mode
+    - net/mlx4_core: Fix locking in SRIOV mode when switching between events
+      and polling
+    - net/mlx4_core: Fix qp mtt size calculation
+    - net/x25: fix a race in x25_bind()
+    - mdio_bus: Fix use-after-free on device_register fails
+    - net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255
+    - ipv6: route: purge exception on removal
+    - team: use operstate consistently for linkup
+    - ipvlan: disallow userns cap_net_admin to change global mode/flags
+    - ipv6: route: enforce RCU protection in rt6_update_exception_stamp_rt()
+    - ipv6: route: enforce RCU protection in ip6_route_check_nh_onlink()
+    - bonding: fix PACKET_ORIGDEV regression
+    - net/smc: fix smc_poll in SMC_INIT state
+    - af_unix: missing barriers in some of unix_sock ->addr and ->path accesses
+    - net: sched: flower: insert new filter to idr after setting its mask
+    - f2fs: wait on atomic writes to count F2FS_CP_WB_DATA
+    - ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against
+      Liquid Saffire 56
+    - ALSA: firewire-motu: fix construction of PCM frame for capture direction
+    - [x86] ALSA: hda: Extend i915 component bind timeout
+    - [x86] ALSA: hda - add more quirks for HP Z2 G4 and HP Z240
+    - ALSA: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294
+    - ALSA: hda/realtek - Reduce click noise on Dell Precision 5820 headphone
+    - ALSA: hda/realtek: Enable headset MIC of Acer TravelMate X514-51T with
+      ALC255
+    - [x86] perf/intel: Fix memory corruption
+    - [x86] perf/intel: Make dev_attr_allow_tsx_force_abort static
+    - md: It's wrong to add len to sector_nr in raid10 reshape twice
+    - drm: Block fb changes for async plane updates
+    - i40e: report correct statistics when XDP is enabled
+    - vhost/vsock: fix vhost vsock cid hashing inconsistent
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.31
+    - media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused()
+    - 9p: use inode->i_lock to protect i_size_write() under 32-bit
+    - 9p/net: fix memory leak in p9_client_create
+    - [armhf] iio: adc: exynos-adc: Fix NULL pointer exception on unbind
+    - [x86] mei: hbm: clean the feature flags on link reset
+    - [x86] mei: bus: move hw module get/put to probe/release
+    - crypto: cfb - add missing 'chunksize' property
+    - crypto: cfb - remove bogus memcpy() with src == dest
+    - crypto: ahash - fix another early termination in hash walk
+    - [armhf] drm/imx: ignore plane updates on disabled crtcs
+    - [armhf] drm/imx: imx-ldb: add missing of_node_puts
+    - [x86] ASoC: rt5682: Correct the setting while select ASRC clk for AD/DA
+      filter
+    - [armhf] clocksource: timer-ti-dm: Fix pwm dmtimer usage of fck
+      reparenting
+    - [armhf,arm64] KVM: vgic: Make vgic_dist->lpi_list_lock a raw_spinlock
+    - [arm64] dts: rockchip: fix graph_port warning on rk3399 bob kevin and
+      excavator
+    - [s390x] dasd: fix using offset into zero size array error
+    - Input: pwm-vibra - prevent unbalanced regulator
+    - Input: pwm-vibra - stop regulator after disabling pwm, not before
+    - [armhf] dts: Configure clock parent for pwm vibra
+    - [armhf] OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be
+      uninitialized
+    - ASoC: dapm: fix out-of-bounds accesses to DAPM lookup tables
+    - [armhf,arm64] KVM: Reset the VCPU without preemption and vcpu state
+      loaded
+    - [armhf,arm64] KVM: Allow a VCPU to fully reset itself
+    - [armhf,arm64] KVM: Don't panic on failure to properly reset system
+      registers
+    - [armhf,arm64] KVM: vgic: Always initialize the group of private IRQs
+    - [arm64] KVM: Forbid kprobing of the VHE world-switch code
+    - [armhf] OMAP2+: fix lack of timer interrupts on CPU1 after hotplug
+    - mac80211: call drv_ibss_join() on restart
+    - mac80211: Fix Tx aggregation session tear down with ITXQs
+    - netfilter: compat: initialize all fields in xt_init
+    - blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue
+    - ipvs: fix dependency on nf_defrag_ipv6
+    - floppy: check_events callback should not return a negative number
+    - xprtrdma: Make sure Send CQ is allocated on an existing compvec
+    - NFS: Don't use page_file_mapping after removing the page
+    - mm/gup: fix gup_pmd_range() for dax
+    - Revert "mm: use early_pfn_to_nid in page_ext_init"
+    - scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd
+    - [armhf] net: dsa: bcm_sf2: potential array overflow in
+      bcm_sf2_sw_suspend()
+    - [x86] CPU: Add Icelake model number
+    - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs
+    - [arm64] net: hns: Fix object reference leaks in hns_dsaf_roce_reset()
+    - [arm*] i2c: bcm2835: Clear current buffer pointers and counts after a
+      transfer
+    - [armhf] clk: sunxi-ng: v3s: Fix TCON reset de-assert bit
+    - kallsyms: Handle too long symbols in kallsyms.c
+    - [armhf] clk: sunxi: A31: Fix wrong AHB gate number
+    - esp: Skip TX bytes accounting when sending from a request socket
+    - [armhf] 8824/1: fix a migrating irq bug when hotplug cpu
+    - bpf: only adjust gso_size on bytestream protocols
+    - bpf: fix lockdep false positive in stackmap
+    - af_key: unconditionally clone on broadcast
+    - [armhf] 8835/1: dma-mapping: Clear DMA ops on teardown
+    - assoc_array: Fix shortcut creation
+    - keys: Fix dependency loop between construction record and auth key
+    - scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task
+    - [armhf] net: dsa: bcm_sf2: Do not assume DSA master supports WoL
+    - [arm64] pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
+    - qmi_wwan: apply SET_DTR quirk to Sierra WP7607
+    - net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()
+    - xfrm: Fix inbound traffic via XFRM interfaces across network namespaces
+    - ASoC: topology: free created components in tplg load error
+    - qed: Fix iWARP buffer size provided for syn packet processing.
+    - qed: Fix iWARP syn packet mac address validation.
+    - [armhf] dts: armada-xp: fix Armada XP boards NAND description
+    - [arm64] Relax GIC version check during early boot
+    - [armhf] tegra: Restore DT ABI on Tegra124 Chromebooks
+    - [armhf,arm64] net: marvell: mvneta: fix DMA debug warning
+    - mm: handle lru_add_drain_all for UP properly
+    - tmpfs: fix link accounting when a tmpfile is linked in
+    - ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN
+    - phonet: fix building with clang
+    - mac80211_hwsim: propagate genlmsg_reply return code
+    - bpf, lpm: fix lookup bug in map_delete_elem
+    - [arm64] net: thunderx: make CFG_DONE message to run through generic
+      send-ack sequence
+    - [arm64] net: thunderx: add nicvf_send_msg_to_pf result check for
+      set_rx_mode_task
+    - nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K
+    - nfp: bpf: fix ALU32 high bits clearance bug
+    - bnxt_en: Fix typo in firmware message timeout logic.
+    - bnxt_en: Wait longer for the firmware message response to complete.
+    - net: set static variable an initial value in atl2_probe()
+    - tmpfs: fix uninitialized return value in shmem_link
+    - stm class: Prevent division by zero
+    - nfit: acpi_nfit_ctl(): Check out_obj->type in the right place
+    - acpi/nfit: Fix bus command validation
+    - nfit/ars: Attempt a short-ARS whenever the ARS state is idle at boot
+    - nfit/ars: Attempt short-ARS even in the no_init_ars case
+    - [amd64] libnvdimm/label: Clear 'updating' flag after label-set update
+    - [amd64] libnvdimm, pfn: Fix over-trim in trim_pfn_device()
+    - [amd64] libnvdimm/pmem: Honor force_raw for legacy pmem regions
+    - [amd64] libnvdimm: Fix altmap reservation size calculation
+    - cgroupfs: fix cgroup_do_mount() handling of failure exits
+    - crypto: aead - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
+    - crypto: aegis - fix handling chunked inputs
+    - [arm64] crypto: aes-neonbs - fix returning final keystream block
+    - crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
+    - crypto: morus - fix handling chunked inputs
+    - crypto: pcbc - remove bogus memcpy()s with src == dest
+    - crypto: skcipher - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
+    - crypto: testmgr - skip crc32c context test for ahash algorithms
+    - [x86] crypto: aegis - fix handling chunked inputs and MAY_SLEEP
+    - [x86] crypto: aesni-gcm - fix crash on empty plaintext
+    - [x86] crypto: morus - fix handling chunked inputs and MAY_SLEEP
+    - [arm64] crypto: aes-ccm - fix logical bug in AAD MAC handling
+    - [arm64] crypto: aes-ccm - fix bugs in non-NEON fallback routine
+    - CIFS: Do not reset lease state to NONE on lease break
+    - CIFS: Do not skip SMB2 message IDs on send failures
+    - CIFS: Fix read after write for files with read caching
+    - tracing: Use strncpy instead of memcpy for string keys in hist triggers
+    - tracing: Do not free iter->trace in fail path of tracing_open_pipe()
+    - tracing/perf: Use strndup_user() instead of buggy open-coded version
+    - xen: fix dom0 boot on huge systems
+    - ACPI / device_sysfs: Avoid OF modalias creation for removed device
+    - [armhf] mmc: sdhci-esdhc-imx: fix HS400 timing issue
+    - mmc:fix a bug when max_discard is 0
+    - netfilter: ipt_CLUSTERIP: fix warning unused variable cn
+    - [armhf] spi: ti-qspi: Fix mmap read when more than one CS in use
+    - [amd64] spi: pxa2xx: Setup maximum supported DMA transfer length
+    - [armhf] regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
+    - [arm64] regulator: max77620: Initialize values for DT properties
+    - [armhf] regulator: s2mpa01: Fix step values for some LDOs
+    - [armhf] clocksource/drivers/exynos_mct: Move one-shot check from tick
+      clear to ISR
+    - [armhf] clocksource/drivers/exynos_mct: Clear timer interrupt when
+      shutdown
+    - [arm64] clocksource/drivers/arch_timer: Workaround for Allwinner A64
+      timer instability (Closes: #928457)
+    - [s390x] setup: fix early warning messages
+    - [s390x] virtio: handle find on invalid queue gracefully
+    - scsi: virtio_scsi: don't send sc payload with tmfs
+    - scsi: aacraid: Fix performance issue on logical drives
+    - scsi: sd: Optimal I/O size should be a multiple of physical block size
+    - scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
+    - scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by
+      firmware
+    - fs/devpts: always delete dcache dentry-s in dput()
+    - splice: don't merge into linked buffers
+    - ovl: During copy up, first copy up data and then xattrs
+    - ovl: Do not lose security.capability xattr over metadata file copy-up
+    - Btrfs: setup a nofs context for memory allocation at btrfs_create_tree()
+    - Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
+    - btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
+    - Btrfs: fix corruption reading shared and compressed extents after hole
+      punching
+    - libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer
+    - [armhf,arm64] irqchip/gic-v3-its: Avoid parsing _indirect_ twice for
+      Device table
+    - [x86] kprobes: Prohibit probing on optprobe template code
+    - [armhf,arm64] cpufreq: tegra124: add missing of_node_put()
+    - ext4: fix check of inode in swap_inode_boot_loader
+    - ext4: cleanup pagecache before swap i_data
+    - ext4: update quota information while swapping boot loader inode
+    - ext4: add mask of ext4 flags to swap
+    - ext4: fix crash during online resizing
+    - PCI/ASPM: Use LTR if already enabled by platform
+    - PCI/DPC: Fix print AER status in DPC event handling
+    - [armhf,arm64] PCI: dwc: skip MSI init if MSIs have been explicitly
+      disabled
+    - IB/hfi1: Close race condition on user context disable and close
+    - [armhf] clk: clk-twl6040: Fix imprecise external abort for pdmclk
+    - [armhf] clk: samsung: exynos5: Fix possible NULL pointer exception on
+      platform_device_alloc() failure
+    - [armhf] clk: samsung: exynos5: Fix kfree() of const memory on setting
+      driver_override
+    - [armhf,arm64] usb: chipidea: tegra: Fix missed ci_hdrc_remove_device()
+    - [x86] usb: typec: tps6598x: handle block writes separately with plain-I2C
+      adapters
+    - mm: hwpoison: fix thp split handing in soft_offline_in_use_page()
+    - mm/vmalloc: fix size check for remap_vmalloc_range_partial()
+    - mm/memory.c: do_fault: avoid usage of stale vm_area_struct
+    - kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
+    - device property: Fix the length used in PROPERTY_ENTRY_STRING()
+    - [x86] intel_th: Don't reference unassigned outputs
+    - parport_pc: fix find_superio io compare code, should use equal test.
+    - [armhf,arm64] i2c: tegra: fix maximum transfer size
+    - [armhf,arm64] gpio: pca953x: Fix dereference of irq data in shutdown
+    - [armhf] can: flexcan: FLEXCAN_IFLAG_MB: add () around macro argument
+    - [x86] drm/i915: Relax mmap VMA check
+    - bpf: only test gso type on gso packets
+    - [arm64] serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
+    - serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart
+    - serial: 8250_pci: Fix number of ports for ACCES serial cards
+    - serial: 8250_pci: Have ACCES cards that use the four port Pericom
+      PI7C9X7954 chip use the pci_pericom_setup()
+    - jbd2: clear dirty flag when revoking a buffer from an older transaction
+    - jbd2: fix compile warning when using JBUFFER_TRACE
+    - selinux: add the missing walk_size + len check in
+      selinux_sctp_bind_connect
+    - security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
+    - [powerpc*] powerpc/32: Clear on-stack exception marker upon exception
+      return
+    - [powerpc*] powernv: Make opal log only readable by root
+    - [powerpc*] powernv: Don't reprogram SLW image on every KVM guest
+      entry/exit
+    - [powerpc*] Fix 32-bit KVM-PR lockup and host crash with MacOS guest
+    - [powerpc*] ptrace: Simplify vr_get/set() to avoid GCC warning
+    - [powerpc*] hugetlb: Don't do runtime allocation of 16G pages in LPAR
+      configuration
+    - [powerpc*] traps: fix recoverability of machine check handling on
+      book3s/32
+    - [powerpc*] traps: Fix the message printed when stack overflows
+    - [arm64] Fix HCR.TGE status for NMI contexts
+    - [arm64] debug: Ensure debug handlers check triggering exception level
+    - [arm64] KVM: Fix architecturally invalid reset value for FPEXC32_EL2
+    - ipmi_si: fix use-after-free of resource->name
+    - dm: fix to_sector() for 32bit
+    - dm integrity: limit the rate of error messages
+    - mfd: sm501: Fix potential NULL pointer dereference
+    - NFS: Fix I/O request leakages
+    - NFS: Fix an I/O request leakage in nfs_do_recoalesce
+    - NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
+    - nfsd: fix performance-limiting session calculation
+    - nfsd: fix memory corruption caused by readdir
+    - nfsd: fix wrong check in write_v4_end_grace()
+    - NFSv4.1: Reinitialise sequence results before retransmitting a request
+    - svcrpc: fix UDP on servers with lots of threads
+    - PM / wakeup: Rework wakeup source timer cancellation
+    - bcache: never writeback a discard operation
+    - vt: perform safe console erase in the right order
+    - [x86] unwind/orc: Fix ORC unwind table alignment
+    - [x86] perf intel-pt: Fix CYC timestamp calculation after OVF
+    - perf tools: Fix split_kallsyms_for_kcore() for trampoline symbols
+    - perf auxtrace: Define auxtrace record alignment
+    - [x86] perf intel-pt: Fix overlap calculation for padding
+    - [x86] perf/intel/uncore: Fix client IMC events return huge result
+    - [x86] perf intel-pt: Fix divide by zero when TSC is not available
+    - md: Fix failed allocation of md_register_thread
+    - [x86] tpm/tpm_crb: Avoid unaligned reads in crb_recv()
+    - tpm: Unify the send callback behaviour
+    - rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
+    - media: lgdt330x: fix lock status reporting
+    - media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
+    - drm/fb-helper: generic: Fix drm_fbdev_client_restore()
+    - drm/radeon/evergreen_cs: fix missing break in switch statement
+    - drm/amd/powerplay: correct power reading on fiji
+    - drm/amd/display: don't call dm_pp_ function from an fpu block
+    - KVM: Call kvm_arch_memslots_updated() before updating memslots
+    - [x86] KVM: mmu: Detect MMIO generation wrap in any address space
+    - [x86] KVM: mmu: Do not cache MMIO accesses while memslots are in flux
+    - [x86] KVM: nVMX: Sign extend displacements of VMX instr's mem operands
+    - [x86] KVM: nVMX: Apply addr size mask to effective address for VMX
+      instructions
+    - [x86] KVM: nVMX: Ignore limit checks on VMX instructions using flat
+      segments
+    - bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata
+    - [s390x] setup: fix boot crash for machine without EDAT-1
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.32
+    - [x86] ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist
+    - ALSA: firewire-motu: use 'version' field of unit directory to identify
+      model
+    - [x86] drm/vmwgfx: Don't double-free the mode stored in par->set_mode
+    - [x86] drm/vmwgfx: Return 0 when gmrid::get_node runs out of ID's
+    - [amd64] iommu/amd: fix sg->dma_address for sg->offset bigger than
+      PAGE_SIZE
+    - libceph: wait for latest osdmap in ceph_monc_blacklist_add()
+    - udf: Fix crash on IO error during truncate
+    - [mips64*/loongson-3] lemote-2f: Add IRQF_NO_SUSPEND to "cascade"
+      irqaction.
+    - [mips*] Ensure ELF appended dtb is relocated
+    - [mips*r6] Fix kernel crash for R6 in jump label branch function
+    - [powerpc*] vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038
+    - [powerpc*] scsi: ibmvscsi: Protect ibmvscsi_head from concurrent
+      modificaiton
+    - [powerpc*] scsi: ibmvscsi: Fix empty event pool access during host
+      removal
+    - futex: Ensure that futex address is aligned in handle_futex_death()
+    - cifs: allow guest mounts to work for smb3.11
+    - perf probe: Fix getting the kernel map
+    - [x86] objtool: Move objtool_file struct off the stack
+    - [armhf,arm64] irqchip/gic-v3-its: Fix comparison logic in lpi_range_cmp
+    - SMB3: Fix SMB3.1.1 guest mounts to Samba
+    - [x86] ALSA: Fix runtime PM for hdmi-lpe-audio
+    - ALSA: hda/ca0132 - make pci_iounmap() call conditional
+    - ALSA: ac97: Fix of-node refcount unbalance
+    - ext4: fix NULL pointer dereference while journal is aborted
+    - ext4: fix data corruption caused by unaligned direct AIO
+    - ext4: brelse all indirect buffer in ext4_ind_remove_space()
+    - media: v4l2-ctrls.c/uvc: zero v4l2_event
+    - Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
+    - Bluetooth: Fix decrementing reference count twice in releasing socket
+    - Bluetooth: hci_ldisc: Initialize hci_dev before open()
+    - Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in
+      hci_uart_set_proto()
+    - drm: Reorder set_property_atomic to avoid returning with an active ww_ctx
+    - RDMA/cma: Rollback source IP address if failing to acquire device
+    - f2fs: fix to avoid deadlock of atomic file operations
+    - netfilter: ebtables: remove BUGPRINT messages
+    - loop: access lo_backing_file only when the loop device is Lo_bound
+    - [x86] unwind: Handle NULL pointer calls better in frame unwinder
+    - [x86] unwind: Add hardcoded ORC entry for NULL
+    - ALSA: hda - Record the current power state before suspend/resume calls
+    - ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
+    - power: supply: charger-manager: Fix incorrect return value
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.33
+    - Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt
+      (CVE-2019-3460)
+    - Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer
+      (CVE-2019-3459)
+    - ipmi_si: Fix crash when using hard-coded device
+    - dccp: do not use ipv6 header for ipv4 flow
+    - genetlink: Fix a memory leak on error path
+    - ipv6: make ip6_create_rt_rcu return ip6_null_entry instead of NULL
+    - mac8390: Fix mmio access size probe
+    - mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
+    - net: aquantia: fix rx checksum offload for UDP/TCP over IPv6
+    - net: datagram: fix unbounded loop in __skb_try_recv_datagram()
+    - net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
+    - [arm64] net: phy: meson-gxl: fix interrupt support
+    - net: rose: fix a possible stack overflow
+    - [armhf,arm64] net: stmmac: fix memory corruption with large MTUs
+    - net-sysfs: call dev_hold if kobject_init_and_add success
+    - packets: Always register packet sk in the same order
+    - rhashtable: Still do rehash when we get EEXIST
+    - sctp: get sctphdr by offset in sctp_compute_cksum
+    - sctp: use memdup_user instead of vmemdup_user
+    - tcp: do not use ipv6 header for ipv4 flow
+    - tipc: allow service ranges to be connect()'ed on RDM/DGRAM
+    - tipc: change to check tipc_own_id to return in tipc_net_stop
+    - tipc: fix cancellation of topology subscriptions
+    - tun: properly test for IFF_UP
+    - vrf: prevent adding upper devices
+    - vxlan: Don't call gro_cells_destroy() before device is unregistered
+    - ila: Fix rhashtable walker list corruption
+    - net: sched: fix cleanup NULL pointer exception in act_mirr
+    - [arm64] thunderx: enable page recycling for non-XDP case
+    - [arm64] thunderx: eliminate extra calls to put_page() for pages held for
+      recycling
+    - tun: add a missing rcu_read_unlock() in error path
+    - [powerpcspe] fsl: Add infrastructure to fixup branch predictor flush
+    - [powerpcspe] fsl: Add macro to flush the branch predictor
+    - [powerpcspe] fsl: Emulate SPRN_BUCSR register
+    - [powerpcspe] fsl: Add nospectre_v2 command line argument
+    - [powerpcspe] fsl: Flush the branch predictor at each kernel entry (32 bit)
+    - [powerpcspe] fsl: Enable runtime patching if nospectre_v2 boot arg is used
+    - [powerpcspe] fsl: Update Spectre v2 reporting
+    - [powerpcspe] fsl: Fixed warning: orphan section `__btb_flush_fixup'
+    - [powerpc*] security: Fix spectre_v2 reporting
+    - Btrfs: fix incorrect file size after shrinking truncate and fsync
+    - btrfs: remove WARN_ON in log_dir_items
+    - btrfs: don't report readahead errors and don't update statistics
+    - btrfs: raid56: properly unmap parity page in finish_parity_scrub()
+    - btrfs: Avoid possible qgroup_rsv_size overflow in
+      btrfs_calculate_inode_block_rsv_size
+    - Btrfs: fix assertion failure on fsync with NO_HOLES enabled
+    - [armhf] imx6q: cpuidle: fix bug that CPU might not wake up at expected
+      time
+    - [powerpc*] bpf: Fix generation of load/store DW instructions
+    - [s390x] vfio: ccw: only free cp on final interrupt
+    - NFS: fix mount/umount race in nlmclnt.
+    - NFSv4.1 don't free interrupted slot on open
+    - ALSA: rawmidi: Fix potential Spectre v1 vulnerability
+    - ALSA: seq: oss: Fix Spectre v1 vulnerability
+    - ALSA: pcm: Fix possible OOB access in PCM oss plugins
+    - ALSA: pcm: Don't suspend stream in unrecoverable PCM state
+    - [x86] ALSA: hda/realtek - Add support headset mode for DELL WYSE AIO
+    - [x86] ALSA: hda/realtek - Add support headset mode for New DELL WYSE NB
+    - [x86] ALSA: hda/realtek: Enable headset MIC of Acer AIO with ALC286
+    - [x86] ALSA: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with
+      ALC286
+    - [x86] ALSA: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432
+      headset mic
+    - [x86] ALSA: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with
+      ALC256
+    - [x86] ALSA: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256
+    - [x86] ALSA: hda/realtek: Enable headset MIC of ASUS X430UN and X512DK
+      with ALC256
+    - [x86] ALSA: hda/realtek - Fix speakers on Acer Predator Helios 500 Ryzen
+      laptops
+    - kbuild: modversions: Fix relative CRC byte order interpretation
+    - fs/open.c: allow opening only regular files during execve()
+    - ocfs2: fix inode bh swapping mixup in ocfs2_reflink_inodes_lock
+    - scsi: sd: Fix a race between closing an sd device and sd I/O
+    - scsi: sd: Quiesce warning if device does not report optimal I/O size
+    - [s390x] scsi: zfcp: fix rport unblock if deleted SCSI devices on
+      Scsi_Host
+    - [s390x] scsi: zfcp: fix scsi_eh host reset with port_forced ERP for
+      non-NPIV FCP devices
+    - [armhf,arm64] drm/rockchip: vop: reset scale mode when win is disabled
+    - [x86] staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest
+    - staging: speakup_soft: Fix alternate speech with other synths
+    - staging: vt6655: Remove vif check from vnt_interrupt
+    - staging: vt6655: Fix interrupt race condition on device start up.
+    - [arm64] serial: mvebu-uart: Fix to avoid a potential NULL pointer
+      dereference
+    - [sh4] serial: sh-sci: Fix setting SCSCR_TIE while transferring data
+    - USB: serial: cp210x: add new device id
+    - USB: serial: ftdi_sio: add additional NovaTech products
+    - USB: serial: mos7720: fix mos_parport refcount imbalance on error path
+    - USB: serial: option: set driver_info for SIM5218 and compatibles
+    - USB: serial: option: add support for Quectel EM12
+    - USB: serial: option: add Olicard 600
+    - fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
+    - drm/vgem: fix use-after-free when drm_gem_handle_create() fails
+    - [x86] drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check
+    - gpio: exar: add a check for the return value of ida_simple_get fails
+    - [armhf,arm64] phy: sun4i-usb: Support set_mode to USB_HOST for non-OTG
+      PHYs
+    - USB: gadget: f_hid: fix deadlock in f_hidg_write()
+    - usb: common: Consider only available nodes for dr_mode
+    - xhci: Fix port resume done detection for SS ports with LPM enabled
+    - usb: xhci: dbc: Don't free all memory with spinlock held
+    - xhci: Don't let USB3 ports stuck in polling state prevent suspend
+    - usb: cdc-acm: fix race during wakeup blocking TX traffic
+    - mm: add support for kmem caches in DMA32 zone
+    - [armhf,arm64] iommu/io-pgtable-arm-v7s: request DMA32 memory, and improve
+      debugging
+    - mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified
+    - mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate
+    - perf pmu: Fix parser error for uncore event alias
+    - [x86] perf intel-pt: Fix TSC slip
+    - [x86] objtool: Query pkg-config for libelf location
+    - [powerpc*] pseries/energy: Use OF accessor functions to read
+      ibm,drc-indexes
+    - [powerpc*] powerpc/64: Fix memcmp reading past the end of src/dest
+    - watchdog: Respect watchdog cpumask on CPU hotplug
+    - cpu/hotplug: Prevent crash when CPU bringup fails on CONFIG_HOTPLUG_CPU=n
+    - KVM: Reject device ioctls from processes other than the VM's creator
+    - [x86] KVM: update %rip after emulating IO
+    - [x86] KVM: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
+    - bpf: do not restore dst_reg when cur_state is freed
+    - [x86] platform: intel_cht_int33fe: Register all connections at once
+    - [x86] platform: intel_cht_int33fe: Add connection for the DP alt mode
+    - [x86] platform: intel_cht_int33fe: Add connections for the USB Type-C port
+    - usb: typec: class: Don't use port parent for getting mux handles
+    - [x86] platform: intel_cht_int33fe: Remove the old connections for the
+      muxes
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.34
+    - [arm64] debug: Don't propagate UNKNOWN FAR into si_code for debug signals
+    - ext4: cleanup bh release code in ext4_ind_remove_space()
+    - CIFS: fix POSIX lock leak and invalid ptr deref
+    - f2fs: fix to adapt small inline xattr space in __find_inline_xattr()
+    - f2fs: fix to avoid deadlock in f2fs_read_inline_dir()
+    - tracing: kdb: Fix ftdump to not sleep
+    - net/mlx5: Avoid panic when setting vport rate
+    - net/mlx5: Avoid panic when setting vport mac, getting vport config
+    - [armhf] gpio: gpio-omap: fix level interrupt idling
+    - sysctl: handle overflow for file-max
+    - [armhf,arm64] net: stmmac: Avoid sometimes uninitialized Clang warnings
+    - enic: fix build warning without CONFIG_CPUMASK_OFFSTACK
+    - [arm64] scsi: hisi_sas: Set PHY linkrate when disconnected
+    - [arm64] scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO
+    - iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver
+    - [x86] hyperv: Fix kernel panic when kexec on HyperV
+    - perf c2c: Fix c2c report for empty numa node
+    - mm/sparse: fix a bad comparison
+    - mm/cma.c: cma_declare_contiguous: correct err handling
+    - mm/page_ext.c: fix an imbalance with kmemleak
+    - mm, swap: bounds check swap_info array accesses to avoid NULL derefs
+    - mm,oom: don't kill global init via memory.oom.group
+    - memcg: killed threads should not invoke memcg OOM killer
+    - mm, mempolicy: fix uninit memory access
+    - mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512!
+    - mm/slab.c: kmemleak no scan alien caches
+    - ocfs2: fix a panic problem caused by o2cb_ctl
+    - f2fs: do not use mutex lock in atomic context
+    - fs/file.c: initialize init_files.resize_wait
+    - page_poison: play nicely with KASAN
+    - cifs: use correct format characters
+    - dm thin: add sanity checks to thin-pool and external snapshot creation
+    - f2fs: fix to check inline_xattr_size boundary correctly
+    - cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED
+    - cifs: Fix NULL pointer dereference of devname
+    - netfilter: nf_tables: check the result of dereferencing base_chain->stats
+    - netfilter: conntrack: tcp: only close if RST matches exact sequence
+    - jbd2: fix invalid descriptor block checksum
+    - fs: fix guard_bio_eod to check for real EOD errors
+    - tools lib traceevent: Fix buffer overflow in arg_eval
+    - PCI/PME: Fix hotplug/sysfs remove deadlock in pcie_pme_remove()
+    - wil6210: check null pointer in _wil_cfg80211_merge_extra_ies
+    - mt76: fix a leaked reference by adding a missing of_node_put
+    - [armhf,arm64] usb: chipidea: Grab the (legacy) USB PHY by phandle first
+    - [powerpc*] powernv/ioda: Fix locked_vm counting for memory used by IOMMU
+      tables
+    - scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c
+    - [powerpc*] xmon: Fix opcode being uninitialized in print_insn_powerpc
+    - [armhf,arm64] coresight: etm4x: Add support to enable ETMv4.2
+    - [armhf] 8840/1: use a raw_spinlock_t in unwind
+    - [armhf,arm64] iommu/io-pgtable-arm-v7s: Only kmemleak_ignore L2 tables
+    - [powerpc*] hugetlb: Handle mmap_min_addr correctly in get_unmapped_area
+      callback
+    - btrfs: qgroup: Make qgroup async transaction commit more aggressive
+    - [armhf] mmc: omap: fix the maximum timeout setting
+    - [armhf.arm64] net: dsa: mv88e6xxx: Add lockdep classes to fix false
+      positive splat
+    - e1000e: Fix -Wformat-truncation warnings
+    - [x86] platform: ideapad-laptop: Fix no_hw_rfkill_list for Lenovo RESCUER
+      R720-15IKBN
+    - loop: set GENHD_FL_NO_PART_SCAN after blkdev_reread_part()
+    - IB/mlx4: Increase the timeout for CM cache
+    - clk: fractional-divider: check parent rate only if flag is set
+    - perf annotate: Fix getting source line failure
+    - [arm64] ASoC: qcom: Fix of-node refcount unbalance in qcom_snd_parse_of()
+    - cpufreq: acpi-cpufreq: Report if CPU doesn't support boost technologies
+    - efi: cper: Fix possible out-of-bounds access
+    - [s390x] ism: ignore some errors during deregistration
+    - scsi: megaraid_sas: return error when create DMA pool failed
+    - scsi: fcoe: make use of fip_mode enum complete
+    - drm/amd/display: Clear stream->mode_changed after commit
+    - [s390x] perf test: Fix failure of 'evsel-tp-sched' test on s390
+    - mwifiex: don't advertise IBSS features without FW support
+    - perf report: Don't shadow inlined symbol with different addr range
+    - [armhf] SoC: imx-sgtl5000: add missing put_device()
+    - mt76: usb: do not run mt76u_queues_deinit twice
+    - xen/gntdev: Do not destroy context while dma-bufs are in use
+    - vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1
+    - [x86] HID: intel-ish-hid: avoid binding wrong ishtp_cl_device
+    - cgroup, rstat: Don't flush subtree root unless necessary
+    - jbd2: fix race when writing superblock
+    - [s390x] perf report: Add s390 diagnosic sampling descriptor size
+    - iwlwifi: pcie: fix emergency path
+    - ACPI / video: Refactor and fix dmi_is_desktop()
+    - kprobes: Prohibit probing on bsearch()
+    - kprobes: Prohibit probing on RCU debug routine
+    - netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in
+      __nf_conntrack_confirm
+    - [armhf] 8833/1: Ensure that NEON code always compiles with Clang
+    - ALSA: PCM: check if ops are defined before suspending PCM
+    - ath10k: fix shadow register implementation for WCN3990
+    - usb: f_fs: Avoid crash due to out-of-scope stack ptr access
+    - sched/topology: Fix percpu data types in struct sd_data & struct s_data
+    - bcache: fix input overflow to cache set sysfs file io_error_halflife
+    - bcache: fix input overflow to sequential_cutoff
+    - bcache: fix potential div-zero error of writeback_rate_i_term_inverse
+    - bcache: improve sysfs_strtoul_clamp()
+    - genirq: Avoid summation loops for /proc/stat
+    - [armhf,arm64] net: marvell: mvpp2: fix stuck in-band SGMII negotiation
+    - iw_cxgb4: fix srqidx leak during connection abort
+    - net: phy: consider latched link-down status in polling mode
+    - fbdev: fbmem: fix memory access if logo is bigger than the screen
+    - cdrom: Fix race condition in cdrom_sysctl_register
+    - drm: rcar-du: add missing of_node_put
+    - drm/amd/display: Don't re-program planes for DPMS changes
+    - drm/amd/display: Disconnect mpcc when changing tg
+    - perf/aux: Make perf_event accessible to setup_aux()
+    - e1000e: fix cyclic resets at link up with active tx
+    - e1000e: Exclude device from suspend direct complete optimization
+    - [x86] platform: intel_pmc_core: Fix PCH IP sts reading
+    - i2c: of: Try to find an I2C adapter matching the parent
+    - iwlwifi: mvm: fix RFH config command with >=10 CPUs
+    - sched/debug: Initialize sd_sysctl_cpus if !CONFIG_CPUMASK_OFFSTACK
+    - efi/memattr: Don't bail on zero VA if it equals the region's PA
+    - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/
+      task_rq_lock()
+    - drm/vkms: Bugfix extra vblank frame
+    - [armhf] dts: lpc32xx: Remove leading 0x and 0s from bindings notation
+    - [armhf,arm64] efi: Allow SetVirtualAddressMap() to be omitted
+    - [arm64] soc: qcom: gsbi: Fix error handling in gsbi_probe()
+    - mt7601u: bump supported EEPROM version
+    - [armhf] 8830/1: NOMMU: Toggle only bits in EXC_RETURN we are really care
+      of
+    - [armhf] avoid Cortex-A9 livelock on tight dmb loops
+    - block, bfq: fix in-service-queue check for queue merging
+    - [powerpc*] 64s: Clear on-stack exception marker upon exception return
+    - cgroup/pids: turn cgroup_subsys->free() into cgroup_subsys->release() to
+      fix the accounting
+    - [armhf,arm64] backlight: pwm_bl: Use gpiod_get_value_cansleep() to get
+      initial state
+    - tty: increase the default flip buffer limit to 2*640K
+    - [powerpc*] pseries: Perform full re-add of CPU for topology update
+      post-migration
+    - drm/amd/display: Enable vblank interrupt during CRC capture
+    - ALSA: dice: add support for Solid State Logic Duende Classic/Mini
+    - [armhf,arm64] usb: dwc3: gadget: Fix OTG events when gadget driver isn't
+      loaded
+    - [x86] platform: intel-hid: Missing power button release on some Dell
+      models
+    - perf script python: Use PyBytes for attr in trace-event-python
+    - perf script python: Add trace_context extension module to sys.modules
+    - hwrng: virtio - Avoid repeated init of completion
+    - [armhf,arm64] soc/tegra: fuse: Fix illegal free of IO base address
+    - [x86] HID: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR
+      busy_clear bit
+    - f2fs: UBSAN: set boolean value iostat_enable correctly
+    - hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable
+    - [armhf] dmaengine: imx-dma: fix warning comparison of distinct pointer
+      types
+    - [arm64] dmaengine: qcom_hidma: assign channel cookie correctly
+    - [arm64] dmaengine: qcom_hidma: initialize tx flags in hidma_prep_dma_*
+    - netfilter: physdev: relax br_netfilter dependency
+    - [armhf] regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
+    - [arm64] pinctrl: meson: meson8b: add the eth_rxd2 and eth_rxd3 pins
+    - drm: Auto-set allow_fb_modifiers when given modifiers at plane init
+    - drm/nouveau: Stop using drm_crtc_force_disable
+    - selinux: do not override context on context mounts
+    - brcmfmac: Use firmware_request_nowarn for the clm_blob
+    - [armhf,arm64] wlcore: Fix memory leak in case wl12xx_fetch_firmware
+      failure
+    - drm/fb-helper: fix leaks in error path of drm_fb_helper_fbdev_setup
+    - [arm64] clk: rockchip: fix frac settings of GPLL clock for rk3328
+    - [armhf,arm64] dmaengine: tegra: avoid overflow of byte tracking
+    - [x86] Input: soc_button_array - fix mapping of the 5th GPIO in a PNP0C40
+      device
+    - drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
+    - ACPI / video: Extend chassis-type detection with a "Lunch Box" check
+    - bcache: fix potential div-zero error of writeback_rate_p_term_inverse
+    - [x86] kprobes: Blacklist non-attachable interrupt functions
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.35
+    - [x86] kvm: nVMX: NMI-window and interrupt-window exiting should wake L2
+      from HLT
+    - [powerpc*] tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
+    - [x86] hv_netvsc: Fix unwanted wakeup after tx_disable
+    - ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
+    - ipv6: Fix dangling pointer when ipv6 fragment
+    - ipv6: sit: reset ip header pointer in ipip6_rcv
+    - net: ethtool: not call vzalloc for zero sized memory request
+    - net-gro: Fix GRO flush when receiving a GSO packet.
+    - net/mlx5: Decrease default mr cache size
+    - netns: provide pure entropy for net_hash_mix()
+    - net: rds: force to destroy connection if t_sock is NULL in
+      rds_tcp_kill_sock().
+    - net/sched: act_sample: fix divide by zero in the traffic path
+    - net/sched: fix ->get helper of the matchall cls
+    - openvswitch: fix flow actions reallocation
+    - qmi_wwan: add Olicard 600
+    - r8169: disable ASPM again
+    - sctp: initialize _pad of sockaddr_in before copying to user memory
+    - tcp: Ensure DCTCP reacts to losses
+    - tcp: fix a potential NULL pointer dereference in tcp_sk_exit
+    - vrf: check accept_source_route on the original netdevice
+    - net/mlx5e: Fix error handling when refreshing TIRs
+    - net/mlx5e: Add a lock on tir list
+    - nfp: validate the return code from dev_queue_xmit()
+    - nfp: disable netpoll on representors
+    - bnxt_en: Improve RX consumer index validity check.
+    - bnxt_en: Reset device on RX buffer errors.
+    - net: ip_gre: fix possible use-after-free in erspan_rcv
+    - net: ip6_gre: fix possible use-after-free in ip6erspan_rcv
+    - net: core: netif_receive_skb_list: unlist skb before passing to pt->func
+    - r8169: disable default rx interrupt coalescing on RTL8168
+      (Closes: #925496)
+    - net: mlx5: Add a missing check on idr_find, free buf
+    - net/mlx5e: Update xoff formula
+    - net/mlx5e: Update xon formula
+    - kbuild: deb-pkg: fix bindeb-pkg breakage when O= is used
+    - netfilter: nfnetlink_cttimeout: pass default timeout policy to
+      obj_to_nlattr
+    - netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, too
+    - [arm64] kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region
+    - [x86] tty: mark Siemens R3964 line discipline as BROKEN (CVE-2019-11486)
+    - tty: ldisc: add sysctl to prevent autoloading of ldiscs
+    - ACPICA: Clear status of GPEs before enabling them
+    - ACPICA: Namespace: remove address node from global list after method
+      termination
+    - ALSA: seq: Fix OOB-reads from strlcpy
+    - [x86] ALSA: hda/realtek: Enable headset MIC of Acer TravelMate B114-21
+      with ALC233
+    - [x86] ALSA: hda/realtek - Add quirk for Tuxedo XC 1509
+    - [x86] ALSA: hda - Add two more machines to the power_save_blacklist
+    - mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd()
+    - [arm64] dts: rockchip: fix rk3328 sdmmc0 write errors
+    - [hppa] Detect QEMU earlier in boot process
+    - [hppa] regs_return_value() should return gpr28
+    - [hppa] also set iaoq_b in instruction_pointer_set()
+    - alarmtimer: Return correct remaining time
+    - drm/udl: add a release method and delay modeset teardown
+    - [x86] kvm: svm: fix potential get_num_contig_pages overflow
+    - include/linux/bitrev.h: fix constant bitrev
+    - mm: writeback: use exact memcg dirty counts
+    - [x86] ASoC: intel: Fix crash at suspend/resume after failed codec
+      registration
+    - Btrfs: do not allow trimming when a fs is mounted with the nologreplay
+      option
+    - btrfs: prop: fix zstd compression parameter validation
+    - btrfs: prop: fix vanished compression property after failed set
+    - [riscv64] Fix syscall_get_arguments() and syscall_set_arguments()
+    - block: do not leak memory in bio_copy_user_iov()
+    - block: fix the return errno for direct IO
+    - genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
+    - genirq: Initialize request_mutex if CONFIG_SPARSE_IRQ=n
+    - virtio: Honour 'may_reduce_num' in vring_create_virtqueue
+    - [armhf] dts: rockchip: fix rk3288 cpu opp node reference
+    - [armhf] dts: am335x-evmsk: Correct the regulators for the audio codec
+    - [armhf] dts: am335x-evm: Correct the regulators for the audio codec
+    - [arm64] futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
+    - [arm64] dts: rockchip: fix rk3328 rgmii high tx error rate
+    - [arm64] backtrace: Don't bother trying to unwind the userspace stack
+    - xen: Prevent buffer overflow in privcmd ioctl
+    - sched/fair: Do not re-read ->h_load_next during hierarchical load
+      calculation
+    - [x86] asm: Use stricter assembly constraints in bitops
+    - [x86] perf/amd: Resolve race condition when disabling PMC
+    - [x86] perf/amd: Resolve NMI latency issues for active PMCs
+    - [x86] perf/amd: Remove need to check "running" bit in NMI handler
+    - PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
+    - PCI: pciehp: Ignore Link State Changes after powering off a slot
+    - dm integrity: change memcmp to strncmp in dm_integrity_ctr
+    - dm: revert 8f50e358153d ("dm: limit the max bio size as BIO_MAX_PAGES *
+      PAGE_SIZE")
+    - dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors
+    - dm integrity: fix deadlock with overlapping I/O
+    - [arm64] dts: rockchip: fix vcc_host1_5v pin assign on rk3328-rock64
+    - [arm64] dts: rockchip: Fix vcc_host1_5v GPIO polarity on rk3328-rock64
+    - ACPICA: AML interpreter: add region addresses in global list during
+      initialization
+    - [x86] KVM: nVMX: close leak of L0's x2APIC MSRs (CVE-2019-3887)
+    - [x86] KVM: nVMX: fix x2APIC VTPR read intercept
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.36
+    - inotify: Fix fsnotify_mark refcount leak in
+      inotify_update_existing_watch() (CVE-2019-9857)
+    - perf/core: Restore mmap record type correctly
+    - ext4: avoid panic during forced reboot
+    - ext4: add missing brelse() in add_new_gdb_meta_bg()
+    - ext4: report real fs size after failed resize
+    - ALSA: echoaudio: add a check for ioremap_nocache
+    - [i386,alpha] ALSA: sb8: add a check for request_region
+    - drm/udl: use drm_gem_object_put_unlocked.
+    - IB/mlx4: Fix race condition between catas error reset and aliasguid flows
+    - i40iw: Avoid panic when handling the inetdev event
+    - [i386,alpha] ALSA: opl3: fix mismatch between snd_opl3_drum_switch
+      definition and declaration
+    - [x86] thermal/intel_powerclamp: fix __percpu declaration of worker_data
+    - [arm*] thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs
+    - [x86] thermal/int340x_thermal: Add additional UUIDs
+    - [x86] thermal/int340x_thermal: fix mode setting
+    - [x86] thermal/intel_powerclamp: fix truncated kthread name
+    - scsi: iscsi: flush running unbind operations when removing a session
+    - sched/cpufreq: Fix 32-bit math overflow
+    - sched/core: Fix buffer overflow in cgroup2 property cpu.max
+    - [x86] mm: Don't leak kernel addresses
+    - [x86] tools/power turbostat: return the exit status of a command
+    - perf list: Don't forget to drop the reference to the allocated thread_map
+    - perf config: Fix an error in the config template documentation
+    - perf config: Fix a memory leak in collect_config()
+    - perf build-id: Fix memory leak in print_sdt_events()
+    - perf top: Fix error handling in cmd_top()
+    - perf hist: Add missing map__put() in error case
+    - perf evsel: Free evsel->counts in perf_evsel__exit()
+    - ACPI / utils: Drop reference in test for device presence
+    - PM / Domains: Avoid a potential deadlock
+    - [armhf] drm/exynos/mixer: fix MIXER shadow registry synchronisation code
+    - [arm64] irqchip/mbigen: Don't clear eventid when freeing an MSI
+    - [x86] hpet: Prevent potential NULL pointer dereference
+    - [x86] hyperv: Prevent potential NULL pointer dereference
+    - [i386] cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
+    - drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure
+    - [x86] iommu/vt-d: Check capability before disabling protected memory
+    - [x86] hw_breakpoints: Make default case in hw_breakpoint_arch_parse()
+      return an error
+    - fix incorrect error code mapping for OBJECTID_NOT_FOUND
+    - [x86] gart: Exclude GART aperture from kcore
+    - ext4: prohibit fstrim in norecovery mode
+    - drm/cirrus: Use drm_framebuffer_put to avoid kernel oops in clean-up
+    - rsi: improve kernel thread handling to fix kernel panic
+    - f2fs: fix to avoid NULL pointer dereference on se->discard_map
+    - 9p: do not trust pdu content for stat item size
+    - 9p locks: add mount option for lock retry interval
+    - ASoC: Fix UBSAN warning at snd_soc_get/put_volsw_sx()
+    - f2fs: fix to do sanity check with current segment number
+    - netfilter: xt_cgroup: shrink size of v2 path
+    - [arm64] serial: uartps: console_setup() can't be placed to init section
+    - [powerpc*] pseries: Remove prrn_work workqueue
+    - media: au0828: cannot kfree dev before usb disconnect
+    - Bluetooth: Fix debugfs NULL pointer dereference
+    - HID: i2c-hid: override HID descriptors for certain devices
+    - pinctrl: core: make sure strcmp() doesn't get a null parameter
+    - usbip: fix vhci_hcd controller counting
+    - [x86] ACPI / SBS: Fix GPE storm on recent MacBookPro's
+    - HID: usbhid: Add quirk for Redragon/Dragonrise Seymur 2
+    - [x86] KVM: nVMX: restore host state in nested_vmx_vmexit for VMFail
+    - netfilter: nf_flow_table: remove flowtable hook flush routine in netns
+      exit routine
+    - f2fs: cleanup dirty pages if recover failed
+    - [armhf,arm64] net: stmmac: Set OWN bit for jumbo frames
+    - cifs: fallback to older infolevels on findfirst queryinfo retry
+    - kernel: hung_task.c: disable on suspend
+    - drm/ttm: Fix bo_global and mem_global kfree error
+    - [x86] ALSA: hda: fix front speakers on Huawei MBXP
+    - ACPI: EC / PM: Disable non-wakeup GPEs for suspend-to-idle
+    - net/rds: fix warn in rds_message_alloc_sgs
+    - xfrm: destroy xfrm_state synchronously on net exit path
+    - net: ip6_gre: fix possible NULL pointer dereference in
+      ip6erspan_set_version
+    - [x86] iommu/dmar: Fix buffer overflow during PCI bus notification
+    - scsi: core: Avoid that system resume triggers a kernel warning
+    - [armhf,arm64] soc/tegra: pmc: Drop locking from
+      tegra_powergate_is_powered()
+    - Revert "ACPI / EC: Remove old CLEAR_ON_RESUME quirk"
+    - [arm64] coresight: cpu-debug: Support for CA73 CPUs
+    - [x86] PCI: Blacklist power management of Gigabyte X299 DESIGNARE EX PCIe
+      ports
+    - drm/nouveau/volt/gf117: fix speedo readout register
+    - [armel,armhf] 8839/1: kprobe: make patch_lock a raw_spinlock_t
+    - [x86] drm/amdkfd: use init_mqd function to allocate object for hid_mqd
+      (CI)
+    - appletalk: Fix use-after-free in atalk_proc_exit
+    - lib/div64.c: off by one in shift
+    - rxrpc: Fix client call connect/disconnect race
+    - f2fs: fix to dirty inode for i_mode recovery
+    - include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
+    - bpf: fix use after free in bpf_evict_inode
+    - IB/hfi1: Failed to drain send queue when QP is put into error state
+    - mm: hide incomplete nr_indirectly_reclaimable in /proc/zoneinfo
+    - mm: hide incomplete nr_indirectly_reclaimable in sysfs
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.37
+    - bonding: fix event handling for stacked bonds
+    - failover: allow name change on IFF_UP slave interfaces
+    - net: atm: Fix potential Spectre v1 vulnerabilities (CVE-2017-5715)
+    - net: bridge: fix per-port af_packet sockets
+    - net: bridge: multicast: use rcu to access port list from
+      br_multicast_start_querier
+    - net: Fix missing meta data in skb with vlan packet
+    - net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
+    - tcp: tcp_grow_window() needs to respect tcp_space()
+    - team: set slave to promisc if team is already in promisc mode
+    - tipc: missing entries in name table of publications
+    - vhost: reject zero size iova range
+    - ipv4: recompile ip options in ipv4_link_failure
+    - ipv4: ensure rcu_read_lock() in ipv4_link_failure()
+    - [arm64] net: thunderx: raise XDP MTU to 1508
+    - [arm64] net: thunderx: don't allow jumbo frames with XDP
+    - net/mlx5: FPGA, tls, hold rcu read lock a bit longer
+    - net/mlx5: FPGA, tls, idr remove on flow delete
+    - route: Avoid crash from dereferencing NULL rt->from
+    - sch_cake: Use tc_skb_protocol() helper for getting packet protocol
+    - sch_cake: Make sure we can write the IP header before changing DSCP bits
+    - nfp: flower: replace CFI with vlan present
+    - nfp: flower: remove vlan CFI bit from push vlan action
+    - sch_cake: Simplify logic in cake_select_tin()
+    - net: IP defrag: encapsulate rbtree defrag code into callable functions
+    - net: IP6 defrag: use rbtrees for IPv6 defrag
+    - net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
+    - CIFS: keep FileInfo handle live during oplock break
+    - cifs: Fix use-after-free in SMB2_write
+    - cifs: Fix use-after-free in SMB2_read
+    - cifs: fix handle leak in smb2_query_symlink()
+    - [x86] KVM: Don't clear EFER during SMM transitions for 32-bit vCPU
+    - [x86] KVM: svm: make sure NMI is injected after nmi_singlestep
+    - [x86] iio/gyro/bmg160: Use millidegrees for temperature scale
+    - iio: Fix scan mask selection
+    - iio: core: fix a possible circular locking dependency
+    - [x86] iio: accel: kxcjk-1013: restore the range after resume.
+    - [x86] staging: comedi: vmk80xx: Fix use of uninitialized semaphore
+    - [x86] staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
+    - [x86] staging: comedi: ni_usb6501: Fix use of uninitialized mutex
+    - [x86] staging: comedi: ni_usb6501: Fix possible double-free of
+      ->usb_rx_buf
+    - [x86] ALSA: hda/realtek - add two more pin configuration sets to quirk
+      table
+    - ALSA: core: Fix card races between register and disconnect
+    - [x86] Input: elan_i2c - add hardware ID for multiple Lenovo laptops
+    - vt: fix cursor when clearing the screen
+    - scsi: core: set result when the command cannot be dispatched
+    - Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO"
+    - [x86] Revert "svm: Fix AVIC incomplete IPI emulation"
+    - coredump: fix race condition between mmget_not_zero()/get_task_mm() and
+      core dumping (CVE-2019-11599)
+    - ipmi: fix sleep-in-atomic in free_user at cleanup SRCU
+      user->release_barrier
+    - [x86] crypto: poly1305 - fix overflow during partial reduction
+    - drm/ttm: fix out-of-bounds read in ttm_put_pages() v2
+    - [arm64] futex: Restore oldval initialization to work around buggy
+      compilers
+    - [x86] kprobes: Verify stack frame on kretprobe
+    - kprobes: Mark ftrace mcount handler functions nokprobe
+    - kprobes: Fix error check when reusing optimized probes
+    - rt2x00: do not increment sequence number while re-transmitting
+    - mac80211: do not call driver wake_tx_queue op during reconfig
+    - drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming
+    - [x86] perf/amd: Add event map for AMD Family 17h
+    - [x86] cpu/bugs: Use __initconst for 'const' init data
+    - [x86] perf: Fix incorrect PEBS_REGS
+    - [x86] speculation: Prevent deadlock on ssb_state::lock
+    - timers/sched_clock: Prevent generic sched_clock wrap caused by
+      tick_freeze()
+    - nfit/ars: Remove ars_start_flags
+    - nfit/ars: Introduce scrub_flags
+    - nfit/ars: Allow root to busy-poll the ARS state machine
+    - nfit/ars: Avoid stale ARS results
+    - mmc: sdhci: Fix data command CRC error handling
+    - mmc: sdhci: Handle auto-command errors
+    - modpost: file2alias: go back to simple devtable lookup
+    - modpost: file2alias: check prototype of handler
+    - [x86] tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
+    - tpm: Fix the type of the return value in calc_tpm2_event_size()
+    - sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
+    - device_cgroup: fix RCU imbalance in error case
+    - ALSA: info: Fix racy addition/deletion of nodes
+    - [armhf] ASoC: rockchip: add missing INTERLEAVED PCM attribute
+    - i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array
+    - kernel/sysctl.c: fix out-of-bounds access when setting file-max
+
+  [ Ben Hutchings ]
+  * debian/bin/abiupdate.py: Automatically select the correct archive to fetch
+    from
+  * debian/bin/abiupdate.py: Change default URLs to use https: scheme
+  * [powerpc*] vdso: Make vdso32 installation conditional in vdso_install
+    (Closes: #785065)
+  * Bump ABI to 5
+  * [rt] Add new signing subkey for Steven Rostedt
+  * [rt] Update to 4.19.31-rt18 (no functional change)
+  * [armhf,arm64] Revert "net: stmmac: Send TSO packets always from Queue 0"
+  * [riscv64] linux-image-dbg: Include vdso debug symbols
+  * [ia64] linux-image: Recommend grub-efi-ia64 instead of (removed) elilo
+  * [armel/marvell] Disable HW_RANDOM as no HWRNG drivers are usable here
+  * udeb: Add all HWRNG drivers to kernel-image (see #923675)
+  * lockdown: Refer to Debian wiki until manual page exists
+  * [sparc64] linux-image: Recommend grub-ieee1275 instead of (removed) silo
+  * [sparc64] linux-image: Install uncompressed kernel image
+  * [powerpc,ppc64,ppc64el] linux-image: Recommend grub-ieee1275
+  * [i386] Add grub-efi-ia32 as an alternate recommended bootloader
+  * linux-source: Recommend bison and flex, always needed to build the kernel
+  * [armel/marvell,sh4] linux-image: Recommend apparmor, like all other configs
+  * udeb: Drop unused ntfs-modules packages
+  * ntfs: Disable NTFS_FS due to lack of upstream security support
+    (CVE-2018-12929, CVE-2018-12930, CVE-2018-12931)
+  * [x86] platform: Enable INTEL_ATOMISP2_PM as module
+  * drivers/firmware/google: Adjust configuration for 4.19
+  * MODSIGN: Make shash allocation failure fatal
+  * aio: Apply fixes from 4.19.38:
+    - aio: clear IOCB_HIPRI
+    - aio: use assigned completion handler
+    - aio: separate out ring reservation from req allocation
+    - aio: don't zero entire aio_kiocb aio_get_req()
+    - aio: use iocb_put() instead of open coding it
+    - aio: split out iocb copy from io_submit_one()
+    - aio: abstract out io_event filler helper
+    - aio: initialize kiocb private in case any filesystems expect it.
+    - aio: simplify - and fix - fget/fput for io_submit() (CVE-2019-10125)
+    - pin iocb through aio.
+    - aio: fold lookup_kiocb() into its sole caller
+    - aio: keep io_event in aio_kiocb
+    - aio: store event at final iocb_put()
+    - Fix aio_poll() races
+  * tracing: Fix buffer_ref pipe ops
+  * mm,fs: Prevent page refcount overflow (CVE-2019-11487):
+    - mm: make page ref count overflow check tighter and more explicit
+    - mm: add 'try_get_page()' helper function
+    - mm: prevent get_user_pages() from overflowing page refcount
+    - fs: prevent page refcount overflow in pipe_buf_get
+
+  [ YunQiang Su ]
+  * [mips*r6] Re-enable CONFIG_JUMP_LABEL, which has been fixed in upstream.
+
+  [ Stefan Fritsch ]
+  * [armhf] Enable SND_SOC_SPDIF for Cubietruck (Closes: #884562)
+
+  [ Luca Boccassi ]
+  * libbpf-dev: generate pkg-config file for libbpf by backporting
+    libbpf-generate-pkg-config.patch from bpf-next.
+  * Import patches to enable loading keys from UEFI db and MOK from
+    http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git to
+    allow kernel modules built by users (eg: by dkms) to be verified, and
+    to load dbx and MOKX for the equivalent blacklisting functionality.
+
+  [ Bastian Blank ]
+  * Don't longer recommend irqbalance. (closes: #926967)
+
+  [ Salvatore Bonaccorso ]
+  * xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
+    (CVE-2015-8553)
+  * [x86] Disable R3964 due to lack of security support
+  * [amd64,arm64] vfio/type1: Limit DMA mappings per container (CVE-2019-3882)
+
+  [ Aurelien Jarno ]
+  * [mips] Fix indirect syscall tracing & seccomp filtering for big endian
+    MIPS64 kernels with 32-bit userland.
+
+  [ Romain Perier ]
+  * [rt] Update to 4.19.37-rt19
+  * Enable coreboot memconsole (Closes: #872069)
+
+  [ Uwe Kleine-König ]
+  * [armhf] Disable MVNETA_BM_ENABLE again as it break networking on
+    DB-MV784MP-GP. Thanks to Steve McIntyre for providing access such a
+    machine for testing. (Closes: #927825)
+
+  [ Alper Nebi Yasak ]
+  * [arm64] Enable configs for Samsung Chromebook Plus (v1) and other
+    rk3399-gru based devices:
+    - Enable PL330_DMA, CROS_EC_SPI, SPI_ROCKCHIP as modules.
+    - Enable EXTCON_USBC_CROS_EC, PHY_ROCKCHIP_TYPEC, PHY_ROCKCHIP_USB as
+    modules.
+    - Enable KEYBOARD_CROS_EC as module.
+    - Enable PWM_CROS_EC, PHY_ROCKCHIP_DP as modules and enable ROCKCHIP_CDN_DP
+    - Enable SND_SOC_ROCKCHIP, SND_SOC_ROCKCHIP_I2S, SND_SOC_ROCKCHIP_SPDIF,
+    SND_SOC_ROCKCHIP_RT5645, SND_SOC_RK3399_GRU_SOUND as modules.
+    - Enable INPUT_TOUCHSCREEN, enable TOUCHSCREEN_ATMEL_MXT as module, and
+    enable TOUCHSCREEN_ATMEL_MXT_T37.
+    - Enable TOUCHSCREEN_ELAN, MOUSE_ELAN_I2C as modules.
+    - Enable I2C_HID as module.
+    - Enable MWIFIEX, MWIFIEX_PCIE as modules.
+    - Enable TCG_TPM, TCG_TIS_I2C_INFINEON as modules.
+    - Enable PM_DEVFREQ_EVENT, enable DEVFREQ_EVENT_ROCKCHIP_DFI and
+    ARM_RK3399_DMC_DEVFREQ as modules.
+    - Enable REGULATOR_VCTRL as module.
+    - Enable MFD_CROS_EC_CHARDEV, IIO_CROS_EC_ACCEL_LEGACY,
+    IIO_CROS_EC_SENSORS_CORE, IIO_CROS_EC_SENSORS, IIO_CROS_EC_LIGHT_PROX,
+    IIO_CROS_EC_BARO, RTC_DRV_CROS_EC as modules.
+    - Enable BATTERY_SBS, CHARGER_CROS_USBPD as modules.
+
+  [ Vagrant Cascadian ]
+  * debian/bin/gencontrol_signed.py: Sort list of modules before adding to
+    .json file, fixing reproducibility issues.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 05 May 2019 19:32:32 +0100
+
+linux (4.19.28-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [x86,alpha,m68k] binfmt: Disable BINFMT_AOUT, IA32_AOUT, OSF4_COMPAT
+  * [x86] Drop fix for #865303, which no longer affects Debian's OpenJDK
+  * udeb: Make serial_cs optional in serial-modules
+  * [ppc64el] Disable PCMCIA (fixes FTBFS)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable DRM_SUN4I and DRM_SUN8I_DW_HDMI as modules.
+  * [arm64] Enable I2C_GPIO as a module.
+  * [arm64] Enable MESON_EFUSE as a module.
+
+  [ Yves-Alexis Perez ]
+  * certs: include both root CA and direct signing certificate.
+    closes: #924545
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 15 Mar 2019 02:16:04 +0000
+
+linux (4.19.28-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.21
+    - devres: Align data[] to ARCH_KMALLOC_MINALIGN
+    - drm/bufs: Fix Spectre v1 vulnerability
+    - drm/vgem: Fix vgem_init to get drm device available.
+    - [arm*] pinctrl: bcm2835: Use raw spinlock for RT compatibility
+    - [x86] ASoC: Intel: mrfld: fix uninitialized variable access
+    - gpiolib: Fix possible use after free on label
+    - [armhf] drm/sun4i: Initialize registers in tcon-top driver
+    - genirq/affinity: Spread IRQs to all available NUMA nodes
+    - [armhf] gpu: ipu-v3: image-convert: Prevent race between run and
+      unprepare
+    - wil6210: fix reset flow for Talyn-mb
+    - wil6210: fix memory leak in wil_find_tx_bcast_2
+    - ath10k: assign 'n_cipher_suites' for WCN3990
+    - ath9k: dynack: use authentication messages for 'late' ack
+    - scsi: lpfc: Correct LCB RJT handling
+    - scsi: mpt3sas: Call sas_remove_host before removing the target devices
+    - scsi: lpfc: Fix LOGO/PLOGI handling when triggerd by ABTS Timeout event
+    - [armhf] 8808/1: kexec:offline panic_smp_self_stop CPU
+    - [mips] clk: boston: fix possible memory leak in clk_boston_setup()
+    - dlm: Don't swamp the CPU with callbacks queued during recovery
+    - [x86] PCI: Fix Broadcom CNB20LE unintended sign extension (redux)
+    - [powerpc] pseries: add of_node_put() in dlpar_detach_node()
+    - [arm*] drm/vc4: ->x_scaling[1] should never be set to VC4_SCALING_NONE
+    - ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl
+    - [mips] Boston: Disable EG20T prefetch
+    - iwlwifi: fw: do not set sgi bits for HE connection
+    - fpga: altera-cvp: Fix registration for CvP incapable devices
+    - [x86] fpga: altera-cvp: fix 'bad IO access' on x86_64
+    - [x86] vbox: fix link error with 'gcc -Og'
+    - platform/chrome: don't report EC_MKBP_EVENT_SENSOR_FIFO as wakeup
+    - i40e: prevent overlapping tx_timeout recover
+    - scsi: hisi_sas: change the time of SAS SSP connection
+    - usbnet: smsc95xx: fix rx packet alignment
+    - [armhf,arm64] drm/rockchip: fix for mailbox read size
+    - [arm*] OMAP2+: hwmod: Fix some section annotations
+    - drm/amd/display: fix gamma not being applied correctly
+    - drm/amd/display: calculate stream->phy_pix_clk before clock mapping
+    - bpf: libbpf: retry map creation without the name
+    - net/mlx5: EQ, Use the right place to store/read IRQ affinity hint
+    - modpost: validate symbol names also in find_elf_symbol
+    - perf tools: Add Hygon Dhyana support
+    - [armhf] soc/tegra: Don't leak device tree node reference
+    - media: rc: ensure close() is called on rc_unregister_device
+    - media: video-i2c: avoid accessing released memory area when removing
+      driver
+    - [armhf] media: mtk-vcodec: Release device nodes in
+      mtk_vcodec_init_enc_pm()
+    - ptp: Fix pass zero to ERR_PTR() in ptp_clock_register
+    - dmaengine: xilinx_dma: Remove __aligned attribute on zynqmp_dma_desc_ll
+    - [powerpc] 32: Add .data..Lubsan_data*/.data..Lubsan_type* sections
+      explicitly
+    - media: adv*/tc358743/ths8200: fill in min width/height/pixelclock
+    - ACPI: SPCR: Consider baud rate 0 as preconfigured state
+    - f2fs: move dir data flush to write checkpoint process
+    - f2fs: fix race between write_checkpoint and write_begin
+    - f2fs: fix wrong return value of f2fs_acl_create
+    - [arm64] io: Ensure calls to delay routines are ordered against prior
+      readX()
+    - net: aquantia: return 'err' if set MPI_DEINIT state fails
+    - [sparc*] sunvdc: Do not spin in an infinite loop when vio_ldc_send()
+      returns EAGAIN
+    - nfsd4: fix crash on writing v4_end_grace before nfsd startup
+    - drm: Clear state->acquire_ctx before leaving
+      drm_atomic_helper_commit_duplicated_state()
+    - [arm64] io: Ensure value passed to __iormb() is held in a 64-bit register
+    - Thermal: do not clear passive state during system sleep
+    - thermal: Fix locking in cooling device sysfs update cur_state
+    - firmware/efi: Add NULL pointer checks in efivars API functions
+    - [s390] zcrypt: improve special ap message cmd handling
+    - [arm64] ftrace: don't adjust the LR value
+    - [x86] fpu: Add might_fault() to user_insn()
+    - usb: dwc3: Correct the logic for checking TRB full in
+      __dwc3_prepare_one_trb()
+    - usb: dwc2: Disable power down feature on Samsung SoCs
+    - usb: hub: delay hub autosuspend if USB3 port is still link training
+    - timekeeping: Use proper seqcount initializer
+    - usb: mtu3: fix the issue about SetFeature(U1/U2_Enable)
+    - [armhf] clk: sunxi-ng: a33: Set CLK_SET_RATE_PARENT for all audio module
+      clocks
+    - media: imx274: select REGMAP_I2C
+    - drm/amdgpu/powerplay: fix clock stretcher limits on polaris (v2)
+    - tipc: fix node keep alive interval calculation
+    - driver core: Move async_synchronize_full call
+    - kobject: return error code if writing /sys/.../uevent fails
+    - IB/hfi1: Unreserve a reserved request when it is completed
+    - usb: dwc3: trace: add missing break statement to make compiler happy
+    - [mips] gpio: mt7621: report failure of devm_kasprintf()
+    - [mips] gpio: mt7621: pass mediatek_gpio_bank_probe() failure up the stack
+    - [x86] iommu/amd: Fix amd_iommu=force_isolation
+    - [armhf] dts: Fix OMAP4430 SDP Ethernet startup
+    - [mips] bpf: fix encoding bug for mm_srlv32_op
+    - media: coda: fix H.264 deblocking filter controls
+    - [armel] dts: Fix up the D-Link DIR-685 MTD partition info
+    - watchdog: renesas_wdt: don't set divider while watchdog is running
+    - [armhf] dts: imx51-zii-rdu1: Do not specify "power-gpio" for hpa1
+    - usb: dwc3: gadget: Disable CSP for stream OUT ep
+    - [arm64] iommu/arm-smmu-v3: Avoid memory corruption from Hisilicon MSI
+      payloads
+    - [arm64] iommu/arm-smmu: Add support for qcom,smmu-v2 variant
+    - [arm64] iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
+    - [armhf] clk: imx6sl: ensure MMDC CH0 handshake is bypassed
+    - OPP: Use opp_table->regulators to verify no regulator case
+    - [arm64] tee: optee: avoid possible double list_del()
+    - [arm64] drm/msm/dsi: fix dsi clock names in DSI 10nm PLL driver
+    - [arm64] drm/msm: dpu: Only check flush register against pending flushes
+    - lightnvm: pblk: fix resubmission of overwritten write err lbas
+    - lightnvm: pblk: add lock protection to list operations
+    - i2c-axxia: check for error conditions first
+    - [armhf] phy: sun4i-usb: add support for missing USB PHY index
+    - udf: Fix BUG on corrupted inode
+    - selftests/bpf: use __bpf_constant_htons in test_prog.c
+    - [armel] pxa: avoid section mismatch warning
+    - [armhf] ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M
+    - [powerpc] KVM: Book3S: Only report KVM_CAP_SPAPR_TCE_VFIO on powernv
+      machines
+    - [arm*] mmc: bcm2835: Recover from MMC_SEND_EXT_CSD
+    - [arm*] mmc: bcm2835: reset host on timeout
+    - memstick: Prevent memstick host from getting runtime suspended during
+      card detection
+    - [arm64] mmc: sdhci-xenon: Fix timeout checks
+    - btrfs: harden agaist duplicate fsid on scanned devices
+    - serial: sh-sci: Fix locking in sci_submit_rx()
+    - serial: sh-sci: Resume PIO in sci_rx_interrupt() on DMA failure
+    - tty: serial: samsung: Properly set flags in autoCTS mode
+    - perf test: Fix perf_event_attr test failure
+    - perf dso: Fix unchecked usage of strncpy()
+    - perf header: Fix unchecked usage of strncpy()
+    - btrfs: use tagged writepage to mitigate livelock of snapshot
+    - perf probe: Fix unchecked usage of strncpy()
+    - i2c: sh_mobile: Add support for r8a774c0 (RZ/G2E)
+    - bnxt_en: Disable MSIX before re-reserving NQs/CMPL rings.
+    - [x86] tools/power/x86/intel_pstate_tracer: Fix non root execution for
+      post processing a trace file
+    - livepatch: check kzalloc return values
+    - [arm64] KVM: Skip MMIO insn after emulation
+    - usb: musb: dsps: fix otg state machine
+    - usb: musb: dsps: fix runtime pm for peripheral mode
+    - perf header: Fix up argument to ctime()
+    - perf tools: Cast off_t to s64 to avoid warning on bionic libc
+    - percpu: convert spin_lock_irq to spin_lock_irqsave.
+    - [arm64] net: hns3: fix incomplete uninitialization of IRQ in the
+      hns3_nic_uninit_vector_data()
+    - drm/amd/display: Add retry to read ddc_clock pin
+    - Bluetooth: hci_bcm: Handle deferred probing for the clock supply
+    - drm/amd/display: fix YCbCr420 blank color
+    - [powerpc] uaccess: fix warning/error with access_ok()
+    - mac80211: fix radiotap vendor presence bitmap handling
+    - xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi
+    - scsi: smartpqi: correct host serial num for ssa
+    - scsi: smartpqi: correct volume status
+    - scsi: smartpqi: increase fw status register read timeout
+    - cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan()
+    - [arm64] net: hns3: add max vector number check for pf
+    - [powerpc] perf: Fix thresholding counter data for unknown type
+    - iwlwifi: mvm: fix setting HE ppe FW config
+    - [powerpc] powernv/ioda: Allocate indirect TCE levels of cached userspace
+      addresses on demand
+    - mlx5: update timecounter at least twice per counter overflow
+    - drbd: narrow rcu_read_lock in drbd_sync_handshake
+    - drbd: disconnect, if the wrong UUIDs are attached on a connected peer
+    - drbd: skip spurious timeout (ping-timeo) when failing promote
+    - drbd: Avoid Clang warning about pointless switch statment
+    - drm/amd/display: validate extended dongle caps
+    - md: fix raid10 hang issue caused by barrier
+    - fbdev: fbmem: behave better with small rotated displays and many CPUs
+    - i40e: define proper net_device::neigh_priv_len
+    - ice: Do not enable NAPI on q_vectors that have no rings
+    - igb: Fix an issue that PME is not enabled during runtime suspend
+    - ACPI/APEI: Clear GHES block_status before panic()
+    - fbdev: fbcon: Fix unregister crash when more than one framebuffer
+    - [powerpc] mm: Fix reporting of kernel execute faults on the 8xx
+    - [x86] KVM: svm: report MSR_IA32_MCG_EXT_CTL as unsupported
+    - [powerpc] fadump: Do not allow hot-remove memory from fadump reserved
+      area.
+    - kvm: Change offset in kvm_write_guest_offset_cached to unsigned
+    - NFS: nfs_compare_mount_options always compare auth flavors.
+    - perf build: Don't unconditionally link the libbfd feature test to
+      -liberty and -lz
+    - hwmon: (lm80) fix a missing check of the status of SMBus read
+    - hwmon: (lm80) fix a missing check of bus read in lm80 probe
+    - seq_buf: Make seq_buf_puts() null-terminate the buffer
+    - cifs: check ntwrk_buf_start for NULL before dereferencing it
+    - f2fs: fix use-after-free issue when accessing sbi->stat_info
+    - niu: fix missing checks of niu_pci_eeprom_read
+    - f2fs: fix sbi->extent_list corruption issue
+    - cgroup: fix parsing empty mount option string
+    - perf python: Do not force closing original perf descriptor in
+      evlist.get_pollfd()
+    - scripts/decode_stacktrace: only strip base path when a prefix of the path
+    - arch/sh/boards/mach-kfr2r09/setup.c: fix struct mtd_oob_ops build warning
+    - ocfs2: don't clear bh uptodate for block read
+    - ocfs2: improve ocfs2 Makefile
+    - mm/page_alloc.c: don't call kasan_free_pages() at deferred mem init
+    - zram: fix lockdep warning of free block handling
+    - isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in
+      HFCPCI_l1hw()
+    - [m68k] block/swim3: Fix -EBUSY error when re-opening device after unmount
+    - [arm*] thermal: bcm2835: enable hwmon explicitly
+    - [armhf] PCI: imx: Enable MSI from downstream components
+    - thermal: generic-adc: Fix adc to temp interpolation
+    - [arm64] sve: ptrace: Fix SVE_PT_REGS_OFFSET definition
+    - kernel/hung_task.c: break RCU locks based on jiffies
+    - proc/sysctl: fix return error for proc_doulongvec_minmax()
+    - kernel/hung_task.c: force console verbose before panic
+    - fs/epoll: drop ovflist branch prediction
+    - exec: load_script: don't blindly truncate shebang string
+    - xfs: Fix xqmstats offsets in /proc/fs/xfs/xqmstat
+    - xfs: cancel COW blocks before swapext
+    - xfs: Fix error code in 'xfs_ioc_getbmap()'
+    - xfs: fix overflow in xfs_attr3_leaf_verify
+    - xfs: fix shared extent data corruption due to missing cow reservation
+    - xfs: fix transient reference count error in
+      xfs_buf_resubmit_failed_buffers
+    - xfs: delalloc -> unwritten COW fork allocation can go wrong
+    - fs/xfs: fix f_ffree value for statfs when project quota is set
+    - xfs: fix PAGE_MASK usage in xfs_free_file_space
+    - xfs: fix inverted return from xfs_btree_sblock_verify_crc
+    - thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set
+    - dccp: fool proof ccid_hc_[rt]x_parse_options()
+    - enic: fix checksum validation for IPv6
+    - lib/test_rhashtable: Make test_insert_dup() allocate its hash table
+      dynamically
+    - net: dsa: Fix lockdep false positive splat
+    - net: dsa: Fix NULL checking in dsa_slave_set_eee()
+    - [armhf,arm64] net: dsa: mv88e6xxx: Fix counting of ATU violations
+    - net: dsa: slave: Don't propagate flag changes on down slave interfaces
+    - net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames
+    - rds: fix refcount bug in rds_sock_addref
+    - Revert "net: phy: marvell: avoid pause mode on SGMII-to-Copper for
+      88e151x"
+    - rxrpc: bad unlock balance in rxrpc_recvmsg
+    - sctp: check and update stream->out_curr when allocating stream_out
+    - sctp: walk the list of asoc safely (CVE-2019-8956)
+    - skge: potential memory corruption in skge_get_regs()
+    - virtio_net: Account for tx bytes and packets on sending xdp_frames
+    - net/mlx5e: FPGA, fix Innova IPsec TX offload data path performance
+    - xfs: eof trim writeback mapping as soon as it is cached
+    - ALSA: compress: Fix stop handling on compressed capture streams
+    - ALSA: usb-audio: Add support for new T+A USB DAC
+    - ALSA: hda - Serialize codec registrations
+    - ALSA: hda/realtek - Fix lose hp_pins for disable auto mute
+    - ALSA: hda/realtek - Use a common helper for hp pin reference
+    - ALSA: hda/realtek - Headset microphone support for System76 darp5
+    - fuse: call pipe_buf_release() under pipe lock
+    - fuse: decrement NR_WRITEBACK_TEMP on the right page
+    - fuse: handle zero sized retrieve correctly
+    - [arm*] dmaengine: bcm2835: Fix interrupt race on RT
+    - [arm*] dmaengine: bcm2835: Fix abort of transactions
+    - [armhf] dmaengine: imx-dma: fix wrong callback invoke
+    - futex: Handle early deadlock return correctly
+    - [arm64] irqchip/gic-v3-its: Plug allocation race for devices sharing a
+      DevID
+    - [armhf] usb: phy: am335x: fix race condition in _probe
+    - usb: dwc3: gadget: Handle 0 xfer length for OUT EP
+    - usb: gadget: udc: net2272: Fix bitwise and boolean operations
+    - usb: gadget: musb: fix short isoc packets with inventra dma
+    - staging: speakup: fix tty-operation NULL derefs
+    - scsi: cxlflash: Prevent deadlock when adapter probe fails
+    - scsi: aic94xx: fix module loading
+    - cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM
+    - [x86] perf/x86/intel/uncore: Add Node ID mask
+    - [x86] MCE: Initialize mce.bank in the case of a fatal error in
+      mce_no_way_out()
+    - perf/core: Don't WARN() for impossible ring-buffer sizes
+    - perf tests evsel-tp-sched: Fix bitwise operator
+    - serial: fix race between flush_to_ldisc and tty_open
+    - serial: 8250_pci: Make PCI class test non fatal
+    - serial: sh-sci: Do not free irqs that have already been freed
+    - cacheinfo: Keep the old value if of_property_read_u32 fails
+    - IB/hfi1: Add limit test for RC/UC send via loopback
+    - [x86] perf/x86/intel: Delay memory deallocation until x86_pmu_dead_cpu()
+    - ath9k: dynack: make ewma estimation faster
+    - ath9k: dynack: check da->enabled first in sampling routines
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.22
+    - mtd: Make sure mtd->erasesize is valid even if the partition is of size 0
+    - mtd: rawnand: gpmi: fix MX28 bus master lockup problem
+    - libata: Add NOLPM quirk for SAMSUNG MZ7TE512HMHP-000L1 SSD
+    - [armhf, arm64] iio: adc: axp288: Fix TS-pin handling
+    - signal: Always notice exiting tasks
+    - signal: Better detection of synchronous signals
+    - [armhf, arm64] misc: vexpress: Off by one in vexpress_syscfg_exec()
+    - [x86] mei: me: add ice lake point device id.
+    - debugfs: fix debugfs_rename parameter checking
+    - [arm64] pinctrl: sunxi: Correct number of IRQ banks on H6 main pin
+      controller
+    - [x86] pinctrl: cherryview: fix Strago DMI workaround
+    - tracing: uprobes: Fix typo in pr_fmt string
+    - [mips*] cm: reprime error cause
+    - [mips*] OCTEON: don't set octeon_dma_bar_type if PCI is disabled
+    - [mips*] VDSO: Use same -m%-float cflag as the kernel proper
+    - [mips*] loongson64: remove unreachable(), fix loongson_poweroff().
+    - [mips*] VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds
+    - [arm64] firmware: arm_scmi: provide the mandatory device release callback
+    - [powerpc*] radix: Fix kernel crash with mremap()
+    - [amd64] mic: vop: Fix use-after-free on remove
+    - mac80211: ensure that mgmt tx skbs have tailroom for encryption
+    - drm/modes: Prevent division by zero htotal
+    - drm/amd/powerplay: Fix missing break in switch
+    - [x86] drm/i915: always return something on DDI clock selection
+    - [x86] drm/vmwgfx: Fix setting of dma masks
+    - [x86] drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
+    - SUNRPC: Always drop the XPRT_LOCK on XPRT_CLOSE_WAIT
+    - xfrm: Make set-mark default behavior backward compatible
+    - Revert "ext4: use ext4_write_inode() when fsyncing w/o a journal"
+    - libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
+    - xfrm: refine validation of template and selector families
+    - batman-adv: Avoid WARN on net_device without parent in netns
+    - batman-adv: Force mac header to start of data on xmit
+    - svcrdma: Reduce max_send_sges
+    - svcrdma: Remove max_sge check at connect time
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.23
+    - Revert "exec: load_script: don't blindly truncate shebang string"
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.24
+    - dt-bindings: eeprom: at24: add "atmel,24c2048" compatible string
+    - eeprom: at24: add support for 24c2048
+    - blk-mq: fix a hung issue when fsync (Closes: #913119, #913138)
+    - [armel, armhf] 8789/1: signal: copy registers using __copy_to_user()
+    - [armel, armhf] 8790/1: signal: always use __copy_to_user to save iwmmxt
+      context
+    - [armel, armhf] 8791/1: vfp: use __copy_to_user() when saving VFP state
+    - [armel, armhf] 8792/1: oabi-compat: copy oabi events using
+      __copy_to_user()
+    - [armel, armhf] 8793/1: signal: replace __put_user_error with __put_user
+    - [armel, armhf] 8794/1: uaccess: Prevent speculative use of the current
+      addr_limit
+    - [armel, armhf] 8795/1: spectre-v1.1: use put_user() for __put_user()
+    - [armel, armhf] 8796/1: spectre-v1,v1.1: provide helpers for address
+      sanitization
+    - [armel, armhf] 8797/1: spectre-v1.1: harden __copy_to_user
+    - [armel, armhf] 8810/1: vfp: Fix wrong assignement to ufp_exc
+    - [armel, armhfl armhf] make lookup_processor_type() non-__init
+    - [armel, armhf] split out processor lookup
+    - [armel, armhf] clean up per-processor check_bugs method call
+    - [armel, armhf] add PROC_VTABLE and PROC_TABLE macros
+    - [armel, armhf] spectre-v2: per-CPU vtables to work around big.Little
+      systems
+    - [armel, armhf] ensure that processor vtables is not lost after boot
+    - [armel, armhf] fix the cockup in the previous patch
+    - drm/amdgpu/sriov:Correct pfvf exchange logic
+    - [i386] ACPI: NUMA: Use correct type for printing addresses on i386-PAE
+    - perf report: Fix wrong iteration count in --branch-history
+    - perf test shell: Use a fallback to get the pathname in vfs_getname
+    - [riscv64] riscv: fix trace_sys_exit hook
+    - cpufreq: check if policy is inactive early in __cpufreq_get()
+    - nvme-pci: use the same attributes when freeing host_mem_desc_bufs.
+    - nvme-pci: fix out of bounds access in nvme_cqe_pending
+    - nvme-multipath: zero out ANA log buffer
+    - nvme: pad fake subsys NQN vid and ssvid with zeros
+    - drm/amdgpu: set WRITE_BURST_LENGTH to 64B to workaround SDMA1 hang
+    - [armel] dts: kirkwood: Fix polarity of GPIO fan lines
+    - [armel, armhf] gpio: pl061: handle failed allocations
+    - drm/nouveau: Don't disable polling in fallback mode
+    - drm/nouveau/falcon: avoid touching registers if engine is off
+    - cifs: Limit memory used by lock request calls to a page
+    - [x86] kvm: sev: Fail KVM_SEV_INIT if already initialized
+    - CIFS: Do not assume one credit for async responses
+    - [arm*] gpio: mxc: move gpio noirq suspend/resume to syscore phase
+    - [x86] Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire
+      F5-573G"
+    - [x86] Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK
+    - [armhf] OMAP5+: Fix inverted nirq pin interrupts with irq_set_type
+    - perf/core: Fix impossible ring-buffer sizes warning
+    - [x86] perf: Add check_period PMU callback
+    - [x86] ALSA: hda - Add quirk for HP EliteBook 840 G5
+    - ALSA: usb-audio: Fix implicit fb endpoint setup by quirk
+    - ASoC: hdmi-codec: fix oops on re-probe
+    - [alpha] tools uapi: fix Alpha support
+    - [riscv64] Add pte bit to distinguish swap from invalid
+    - [x86] kvm/nVMX: read from MSR_IA32_VMX_PROCBASED_CTLS2 only when it is
+      available
+    - [x86] kvm: vmx: Fix entry number check for add_atomic_switch_msr()
+    - [arm*] mmc: sunxi: Filter out unsupported modes declared in the device
+      tree
+    - mmc: block: handle complete_work on separate workqueue
+    - [x86] Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780
+    - Revert "nfsd4: return default lease period"
+    - Revert "mm: don't reclaim inodes with many attached pages"
+    - Revert "mm: slowly shrink slabs with a relatively small number of
+      objects"
+    - [alpha] fix page fault handling for r16-r18 targets
+    - [alpha] Fix Eiger NR_IRQS to 128
+    - [s390*] zcrypt: fix specification exception on z196 during ap probe
+    - tracing/uprobes: Fix output for multiple string arguments
+    - [x86] platform/UV: Use efi_runtime_lock to serialise BIOS calls
+    - scsi: sd: fix entropy gathering for most rotational disks
+    - signal: Restore the stop PTRACE_EVENT_EXIT
+    - md/raid1: don't clear bitmap bits on interrupted recovery.
+    - [x86] a.out: Clear the dump structure initially
+    - dm crypt: don't overallocate the integrity tag space
+    - dm thin: fix bug where bio that overwrites thin block ignores FUA
+    - drm: Use array_size() when creating lease
+    - [x86] drm/i915: Block fbdev HPD processing during suspend
+    - [x86] drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set
+    - mm: proc: smaps_rollup: fix pss_locked calculation
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.25
+    - af_packet: fix raw sockets over 6in4 tunnel
+    - [arm64, armhf] dsa: mv88e6xxx: Ensure all pending interrupts are handled
+      prior to exit
+    - net: crypto set sk to NULL when af_alg_release. (CVE-2019-8912)
+    - net: Fix for_each_netdev_feature on Big endian
+    - net: fix IPv6 prefix route residue
+    - net: ip6_gre: initialize erspan_ver just for erspan tunnels
+    - net: ipv4: use a dedicated counter for icmp_v4 redirect packets
+    - net: phy: xgmiitorgmii: Support generic PHY status read
+    - net: stmmac: Fix a race in EEE enable callback
+    - net: stmmac: handle endianness in dwmac4_get_timestamp
+    - sky2: Increase D3 delay again
+    - vhost: correctly check the return value of translate_desc() in log_used()
+    - vsock: cope with memory allocation failure at socket creation time
+    - vxlan: test dev->flags & IFF_UP before calling netif_rx()
+    - net: Add header for usage of fls64()
+    - tcp: clear icsk_backoff in tcp_write_queue_purge()
+    - tcp: tcp_v4_err() should be more careful
+    - net: Do not allocate page fragments that are not skb aligned
+    - hwmon: (lm80) Fix missing unlock on error in set_fan_div()
+    - scsi: target/core: Use kmem_cache_free() instead of kfree()
+    - PCI: Fix __initdata issue with "pci=disable_acs_redir" parameter
+    - sunrpc: fix 4 more call sites that were using stack memory with a
+      scatterlist
+    - netfilter: nf_nat_snmp_basic: add missing length checks in ASN.1 cbs
+      (CVE-2019-9162)
+    - net/x25: do not hold the cpu too long in x25_new_lci()
+    - ax25: fix possible use-after-free
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.26
+    - [armel armhf] 8834/1: Fix: kprobes: optimized kprobes illegal instruction
+    - tracing: Fix number of entries in trace header
+    - [mips*] eBPF: Always return sign extended 32b values
+    - mac80211: Restore vif beacon interval if start ap fails
+    - mac80211: Use linked list instead of rhashtable walk for mesh tables
+    - mac80211: Free mpath object when rhashtable insertion fails
+    - libceph: handle an empty authorize reply
+    - ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
+    - numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
+    - proc, oom: do not report alien mms when setting oom_score_adj
+    - [x86] ALSA: hda/realtek - Headset microphone and internal speaker
+      support for System76 oryp5
+    - [x86] ALSA: hda/realtek: Disable PC beep in passthrough on alc285
+    - KEYS: allow reaching the keys quotas exactly
+    - [armhf,arm64] backlight: pwm_bl: Fix devicetree parsing with auto-
+      generated brightness tables
+    - [armhf] mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering
+      mfd cells
+    - [armhf] mfd: twl-core: Fix section annotations on {,un}protect_pm_master
+    - [arm64] mfd: qcom_rpm: write fw_version to CTRL_REG
+    - mfd: axp20x: Add AC power supply cell for AXP813
+    - mfd: axp20x: Re-align MFD cell entries
+    - mfd: axp20x: Add supported cells for AXP803
+    - mfd: cros_ec_dev: Add missing mfd_remove_devices() call in remove
+      probe()
+    - [armhf] mfd: mc13xxx: Fix a missing check of a register-read failure
+    - qed: Fix qed_chain_set_prod() for PBL chains with non power of 2 page
+      count
+    - qed: Fix qed_ll2_post_rx_buffer_notify_fw() by adding a write memory
+      barrier
+    - [arm64] net: hns: Fix use after free identified by SLUB debug
+    - bpf: Fix [::] -> [::1] rewrite in sys_sendmsg
+    - selftests/bpf: Test [::] -> [::1] rewrite in sys_sendmsg in
+      test_sock_addr
+    - net/mlx4: Get rid of page operation after dma_alloc_coherent
+    - xprtrdma: Double free in rpcrdma_sendctxs_create()
+    - selftests: forwarding: Add a test for VLAN deletion
+    - netfilter: nf_tables: fix leaking object reference count
+    - scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
+    - scsi: isci: initialize shost fully before calling scsi_add_host()
+    - include/linux/compiler*.h: fix OPTIMIZER_HIDE_VAR
+    - netfilter: nft_flow_offload: Fix reverse route lookup
+    - bpf: correctly set initial window on active Fast Open sender
+    - bpf: fix panic in stack_map_get_build_id() on i386 and arm32
+    - netfilter: nft_flow_offload: fix interaction with vrf slave device
+    - RDMA/mthca: Clear QP objects during their allocation
+    - [powerpcspe] 8xx: fix setting of pagetable for Abatron BDI debug tool.
+    - acpi/nfit: Fix race accessing memdev in nfit_get_smbios_id()
+    - net: stmmac: Fix PCI module removal leak
+    - net: stmmac: dwxgmac2: Only clear interrupts that are active
+    - net: stmmac: Check if CBS is supported before configuring
+    - net: stmmac: Fix the logic of checking if RX Watchdog must be enabled
+    - net: stmmac: Prevent RX starvation in stmmac_napi_poll()
+    - scsi: tcmu: avoid cmd/qfull timers updated whenever a new cmd comes
+    - scsi: ufs: Fix system suspend status
+    - scsi: qedi: Add ep_state for login completion on un-reachable targets
+    - scsi: ufs: Fix geometry descriptor size
+    - scsi: cxgb4i: add wait_for_completion()
+    - netfilter: nft_flow_offload: fix checking method of conntrack helper
+    - always clear the X2APIC_ENABLE bit for PV guest
+    - [armhf, arm64] drm/meson: add missing of_node_put
+    - drm/amdkfd: Don't assign dGPUs to APU topology devices
+    - drm/amd/display: fix PME notification not working in RV desktop
+    - vhost: return EINVAL if iovecs size does not match the message size
+    - [armhf, arm64] drm/sun4i: backend: add missing of_node_puts
+    - bpf: don't assume build-id length is always 20 bytes
+    - bpf: zero out build_id for BPF_STACK_BUILD_ID_IP
+    - atm: he: fix sign-extension overflow on large shift
+    - hwmon: (tmp421) Correct the misspelling of the tmp442 compatible
+      attribute in OF device ID table
+    - [armhf] leds: lp5523: fix a missing check of return value of lp55xx_read
+    - bpf: bpf_setsockopt: reset sock dst on SO_MARK changes
+    - net: bridge: Mark FDB entries that were added by user as such
+    - net/mlx5e: Fix wrong (zero) TX drop counter indication for representor
+    - isdn: avm: Fix string plus integer warning from Clang
+    - batman-adv: fix uninit-value in batadv_interface_tx()
+    - inet_diag: fix reporting cgroup classid and fallback to priority
+    - ipv6: propagate genlmsg_reply return code
+    - net: ena: fix race between link up and device initalization
+    - net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
+    - net/mlx5e: Don't overwrite pedit action when multiple pedit used
+    - net/packet: fix 4gb buffer limit due to overflow check
+    - net: sfp: do not probe SFP module before we're attached
+    - sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment
+    - sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
+    - team: avoid complex list operations in team_nl_cmd_options_set()
+    - Revert "socket: fix struct ifreq size in compat ioctl"
+    - Revert "kill dev_ifsioc()"
+    - net: socket: fix SIOCGIFNAME in compat
+    - net: socket: make bond ioctls go through compat_ifreq_ioctl()
+    - geneve: should not call rt6_lookup() when ipv6 was disabled
+    - sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
+    - net_sched: fix a race condition in tcindex_destroy() (Closes: #921542)
+    - net_sched: fix a memory leak in cls_tcindex
+    - net_sched: fix two more memory leaks in cls_tcindex
+    - net/mlx5e: XDP, fix redirect resources availability check
+    - RDMA/srp: Rework SCSI device reset handling
+    - KEYS: user: Align the payload buffer
+    - KEYS: always initialize keyring_index_key::desc_len
+    - drm/amdgpu: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
+    - gpu: drm: radeon: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
+    - [x86] drm/i915/fbdev: Actually configure untiled displays
+    - drm/amd/display: Fix MST reboot/poweroff sequence
+    - mac80211: allocate tailroom for forwarded mesh packets
+    - [x86] kvm: Return LA57 feature based on hardware capability
+    - net: validate untrusted gso packets without csum offload
+    - net: avoid false positives in untrusted gso validation
+    - Revert "bridge: do not add port to router list when receives query with
+      source 0.0.0.0"
+    - netfilter: nf_tables: fix flush after rule deletion in the same batch
+    - netfilter: nft_compat: use-after-free when deleting targets
+    - netfilter: ipv6: Don't preserve original oif for loopback address
+    - netfilter: nfnetlink_osf: add missing fmatch check
+    - netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in
+      clusterip_config_entry_put()
+    - udlfb: handle unplug properly
+    - [armhf arm64] pinctrl: max77620: Use define directive for
+      max77620_pinconf_param values
+    - net: phylink: avoid resolving link state too early
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.27
+    - irq/matrix: Split out the CPU selection code into a helper
+    - irq/matrix: Spread managed interrupts on allocation
+    - genirq/matrix: Improve target CPU selection for managed interrupts
+      (Closes: #922182)
+    - mac80211: Change default tx_sk_pacing_shift to 7
+    - scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached
+    - [arm64] drm/msm: Unblock writer if reader closes file
+    - [x86] ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
+    - [armhf] clk: tegra: dfll: Fix a potential Oop in remove()
+    - [x86] thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
+    - [arm64, armhf] usb: dwc3: gadget: synchronize_irq dwc irq in suspend
+    - [arm64, armhf] usb: dwc3: gadget: Fix the uninitialized link_state when
+      udc starts
+    - genirq: Make sure the initial affinity is not empty
+    - [arm64, armel, x86, armhf] ASoC: dapm: change snprintf to scnprintf for
+      possible overflow
+    - [x86] drivers: thermal: int340x_thermal: Fix sysfs race condition
+    - mac80211: fix miscounting of ttl-dropped frames
+    - sched/wait: Fix rcuwait_wake_up() ordering
+    - sched/wake_q: Fix wakeup ordering for wake_q
+    - futex: Fix (possible) missed wakeup
+    - drm/amd/powerplay: OD setting fix on Vega10
+    - [armhf] drm/sun4i: hdmi: Fix usage of TMDS clock
+    - direct-io: allow direct writes to empty inodes
+    - writeback: synchronize sync(2) against cgroup writeback membership
+      switches
+    - scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport
+    - scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport
+    - scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
+    - [x86] hv_netvsc: Fix ethtool change hash key error
+    - [x86] hv_netvsc: Refactor assignments of struct netvsc_device_info
+    - [x86] hv_netvsc: Fix hash key value reset after other ops
+    - nvme-rdma: fix timeout handler
+    - nvme-multipath: drop optimization for static ANA group IDs
+    - [arm64] drm/msm: Fix A6XX support for opp-level
+    - net: usb: asix: ax88772_bind return error when hw_reset fail
+    - net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP
+    - [powerpc*] ibmveth: Do not process frames after calling napi_reschedule
+    - mac80211: don't initiate TDLS connection if station is not associated to
+      AP
+    - mac80211: Add attribute aligned(2) to struct 'action'
+    - cfg80211: extend range deviation for DMG
+    - [x86] svm: Fix AVIC incomplete IPI emulation
+    - [x86] KVM: nSVM: clear events pending from svm_complete_interrupts() when
+      exiting to L1
+    - [arm64, armhf] mmc: spi: Fix card detection during probe
+    - mmc: core: Fix NULL ptr crash from mmc_should_fail_request
+    - [armhf] mmc: sdhci-esdhc-imx: correct the fix of ERR004536
+    - mm: enforce min addr even if capable() in expand_downwards()
+      (CVE-2019-9213)
+    - hugetlbfs: fix races and page leaks during migration
+    - [mips*] fix truncation in __cmpxchg_small for short values
+    - [x86] uaccess: Don't leak the AC flag into __put_user() value evaluation
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.28
+    - cpufreq: Use struct kobj_attribute instead of struct global_attr
+    - staging: erofs: fix mis-acted TAIL merging behavior
+    - USB: serial: option: add Telit ME910 ECM composition
+    - USB: serial: cp210x: add ID for Ingenico 3070
+    - USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485
+    - [x86] staging: comedi: ni_660x: fix missing break in switch statement
+    - [x86, arm64, armhf] staging: android: ashmem: Don't call fallocate() with
+      ashmem_mutex held.
+    - [x86, arm64, armhf] staging: android: ashmem: Avoid range_alloc()
+      allocation with ashmem_mutex held.
+    - ip6mr: Do not call __IP6_INC_STATS() from preemptible context
+    - [arm64, armhf] net: dsa: mv88e6xxx: handle unknown duplex modes gracefully
+      in mv88e6xxx_port_set_duplex
+    - [arm64, armhf] net: dsa: mv88e6xxx: fix number of internal PHYs for
+      88E6x90 family
+    - net: sched: put back q.qlen into a single location
+    - net-sysfs: Fix mem leak in netdev_register_kobject
+    - qmi_wwan: Add support for Quectel EG12/EM12
+    - sctp: call iov_iter_revert() after sending ABORT
+    - sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79
+    - team: Free BPF filter when unregistering netdev
+    - tipc: fix RDM/DGRAM connect() regression
+    - bnxt_en: Drop oversize TX packets to prevent errors.
+    - geneve: correctly handle ipv6.disable module parameter
+    - [x86] hv_netvsc: Fix IP header checksum for coalesced packets
+    - ipv4: Add ICMPv6 support when parse route ipproto
+    - lan743x: Fix TX Stall Issue
+    - [arm64, armhf] net: dsa: mv88e6xxx: Fix statistics on mv88e6161
+    - [arm64, armhf] net: dsa: mv88e6xxx: Fix u64 statistics
+    - net: netem: fix skb length BUG_ON in __skb_to_sgvec
+    - net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
+    - net: phy: Micrel KSZ8061: link failure after cable connect
+    - [arm64, armhf] net: phy: phylink: fix uninitialized variable in
+      phylink_get_mac_state
+    - net: sit: fix memory leak in sit_init_net()
+    - net: socket: set sock->sk to NULL after calling proto_ops::release()
+    - tipc: fix race condition causing hung sendto
+    - tun: fix blocking read
+    - [x86, arm64, armhf] xen-netback: don't populate the hash cache on XenBus
+      disconnect
+    - [x86, arm64, armhf] xen-netback: fix occasional leak of grant ref mappings
+      under memory pressure
+    - tun: remove unnecessary memory barrier
+    - net: Add __icmp_send helper.
+    - ipv4: Return error for RTA_VIA attribute
+    - ipv6: Return error for RTA_VIA attribute
+    - mpls: Return error for RTA_GATEWAY attribute
+    - ipv4: Pass original device to ip_rcv_finish_core
+    - [arm64, armhf] net: dsa: mv88e6xxx: power serdes on/off for 10G interfaces
+      on 6390X
+    - [arm64, armhf] net: dsa: mv88e6xxx: prevent interrupt storm caused by
+      mv88e6390x_port_set_cmode
+    - net/sched: act_ipt: fix refcount leak when replace fails
+    - net/sched: act_skbedit: fix refcount leak when replace fails
+    - net: sched: act_tunnel_key: fix NULL pointer dereference during init
+    - [x86] CPU/AMD: Set the CPB bit unconditionally on F17h
+    - [x86] boot/compressed/64: Do not read legacy ROM on EFI system
+    - tracing: Fix event filters and triggers to handle negative numbers
+    - usb: xhci: Fix for Enabling USB ROLE SWITCH QUIRK on
+      INTEL_SUNRISEPOINT_LP_XHCI
+    - [x86, powerpc*] applicom: Fix potential Spectre v1 vulnerabilities
+    - [mips*] irq: Allocate accurate order pages for irq stack
+    - aio: Fix locking in aio_poll()
+    - xtensa: fix get_wchan
+    - gnss: sirf: fix premature wakeup interrupt enable
+    - USB: serial: cp210x: fix GPIO in autosuspend
+    - Bluetooth: btrtl: Restore old logic to assume firmware is already loaded
+    - Bluetooth: Fix locking in bt_accept_enqueue() for BH context
+    - exec: Fix mem leak in kernel_read_file (CVE-2019-8980)
+    - scsi: core: reset host byte in DID_NEXUS_FAILURE case
+    - bpf: fix sanitation rewrite in case of non-pointers
+
+  [ Ben Hutchings ]
+  * [sparc64] udeb: Use standard module list in nic-modules; add i2c-modules
+    and nic-shared-modules to avoid duplication
+  * mt76: Use the correct hweight8() function (fixes FTBFS on ia64)
+  * [armel] udeb: Add mmc-core-modules
+  * udeb: Make nic-wireless-modules depend on mmc-core-modules, not
+    mmc-modules; move crc7 to crc-modules to avoid duplication
+  * [powerpc*] udeb: Add i2c-modules, mmc-core-modules, nic-wireless-modules
+  * [arm64,armhf] udeb: Add mmc-core-modules to Provides of kernel-image
+  * udeb: Add fb-modules and include drm and drm_kms_helper on most
+    architectures
+  * udeb: Move basic PV modules from {hyperv,virtio}-modules to kernel-image
+  * udeb: Move drivers from {hyperv,virtio}-modules to
+    {fb,input,nic,scsi}-modules
+  * debian/bin/gencontrol.py: Add rules to build debian/build/config.*
+  * certs: Replace test signing certificate with production signing certificate
+  * debian/bin/gencontrol_signed.py: Put all files.json fields under "packages"
+  * Bump ABI to 4
+
+  [ Wookey ]
+  * linux-perf: Enable coresight trace (libopencsd) support in perf
+    (Closes: #895131)
+
+  [ Vagrant Cascadian ]
+  * [armhf] Add patch from upstream fixing stability issues when cpufreq
+    is enabled on Orange Pi Plus.
+  * [armhf] Enable REGULATOR_SY8106A as module.
+  * [arm64] Add patch working around A64 timer issues.
+
+  [ dann frazier ]
+  * arm64: lockdown: Move init_lockdown() call after uefi_init()
+
+  [ Salvatore Bonaccorso ]
+  * Btrfs: fix corruption reading shared and compressed extents after hole
+    punching (Closes: #922306)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Add patch from v4.20 to enable device-tree for Pine64-LTS.
+
+  [ Romain Perier ]
+  * [rt] Update to 4.19.25-rt16:
+    - Add zram_slot_trylock() to "drivers/block/zram: Replace bit spinlocks
+      with rtmutex for -rt"
+    - Refresh "futex: workaround migrate_disable/enable in different context"
+    - softirq: Avoid "local_softirq_pending" messages if ksoftirqd is blocked
+    - softirq: Avoid "local_softirq_pending" messages if task is in cpu_chill()
+    - hrtimer: Don't lose state in cpu_chill()
+    - hrtimer: cpu_chill(): save task state in ->saved_state()
+    - [x86] lazy-preempt: properly check against preempt-mask
+    - [i386] lazy-preempt: use proper return label on 32bit-x86
+  * [armel/rpi] Add flavour for Raspberry Pi and Raspberry Pi Zero
+  * [armel, armhf] Enable CRASH_DUMP
+  * Enable STRICT_MODULE_RWX
+
+  [ Marcin Juszkiewicz ]
+  * [arm64] udeb: Use generic ata-modules
+  * [arm64] udeb: Remove redundant lines from nic-modules
+
+  [ YunQiang Su ]
+  * [mips r6] Disable JUMP_LABEL for now: it will cause Reserved Instruction.
+    Enable SERIAL_OF_PLATFORM, if not, userland shows nothing.
+    Enable CPU_HAS_MSA, HIGHMEM, CRYPTO_CRC32_MIPS, and NR_CPUS to 16.
+    Support some boston drivers: IMG_ASCII_LCD, I2C_EG20T, PCH_PHUB, MMC,
+      PCIE_XILINX, RTC_DRV_M41T80, SPI_TOPCLIFF_PCH.
+  * [mipsel/mips64el] Backport MIPS: Loongson: Introduce and use
+    loongson_llsc_mb()
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 12 Mar 2019 05:06:28 +0000
+
+linux (4.19.20-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.17
+    - tty/ldsem: Wake up readers after timed out down_write()
+    - tty: Hold tty_ldisc_lock() during tty_reopen()
+    - tty: Simplify tty->count math in tty_reopen()
+    - tty: Don't hold ldisc lock in tty_reopen() if ldisc present
+    - can: gw: ensure DLC boundaries after CAN frame modification
+      (CVE-2019-3701)
+    - netfilter: nf_conncount: don't skip eviction when age is negative
+    - netfilter: nf_conncount: split gc in two phases
+    - netfilter: nf_conncount: restart search when nodes have been erased
+      (Closes: #921616)
+    - netfilter: nf_conncount: merge lookup and add functions
+    - netfilter: nf_conncount: move all list iterations under spinlock
+    - netfilter: nf_conncount: speculative garbage collection on empty lists
+    - netfilter: nf_conncount: fix argument order to find_next_bit
+    - [arm64] mmc: sdhci-msm: Disable CDR function on TX
+    - Revert "scsi: target: iscsi: cxgbit: fix csk leak"
+    - scsi: target: iscsi: cxgbit: fix csk leak
+    - scsi: target: iscsi: cxgbit: fix csk leak
+    - [arm64] kvm: consistently handle host HCR_EL2 flags
+    - [arm64] Don't trap host pointer auth use to EL2
+    - ipv6: fix kernel-infoleak in ipv6_local_error()
+    - net: bridge: fix a bug on using a neighbour cache entry without checking
+      its state
+    - packet: Do not leak dev refcounts on error exit
+    - tcp: change txhash on SYN-data timeout
+    - tun: publish tfile after it's fully initialized
+    - r8169: don't try to read counters if chip is in a PCI power-save state
+    - bonding: update nest level on unlink
+    - ip: on queued skb use skb_header_pointer instead of pskb_may_pull
+    - r8169: load Realtek PHY driver module before r8169
+    - crypto: authencesn - Avoid twice completion call in decrypt path
+    - crypto: authenc - fix parsing key with misaligned rta_len
+    - [x86] xen: Fix x86 sched_clock() interface for xen
+    - Revert "btrfs: balance dirty metadata pages in btrfs_finish_ordered_io"
+    - btrfs: wait on ordered extents on abort cleanup
+    - Yama: Check for pid death before checking ancestry
+    - scsi: core: Synchronize request queue PM status only on successful resume
+    - [x86] scsi: sd: Fix cache_type_store()
+    - [mips*] fix n32 compat_ipc_parse_version
+    - [mips*] BCM47XX: Setup struct device for the SoC
+    - [mips*] lantiq: Fix IPI interrupt handling
+    - of: properties: add missing of_node_put
+    - RDMA/nldev: Don't expose unsafe global rkey to regular user
+    - [arm64] kaslr: ensure randomized quantities are clean to the PoC
+    - [arm64] dts: marvell: armada-ap806: reserve PSCI area
+    - [mips*] Disable MSI also when pcie-octeon.pcie_disable on
+    - fix int_sqrt64() for very large numbers
+    - media: vivid: fix error handling of kthread_run
+    - media: vivid: set min width/height to a value > 0
+    - bpf: in __bpf_redirect_no_mac pull mac only if present
+    - ipv6: make icmp6_send() robust against null skb->dev
+    - LSM: Check for NULL cred-security on free
+    - netfilter: ebtables: account ebt_table_info to kmemcg
+    - block: use rcu_work instead of call_rcu to avoid sleep in softirq
+    - selinux: fix GPF on invalid policy
+    - blockdev: Fix livelocks on loop device
+    - sctp: allocate sctp_sockaddr_entry with kzalloc
+    - tipc: fix uninit-value in in tipc_conn_rcv_sub
+    - tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
+    - tipc: fix uninit-value in tipc_nl_compat_bearer_enable
+    - tipc: fix uninit-value in tipc_nl_compat_link_set
+    - tipc: fix uninit-value in tipc_nl_compat_name_table_dump
+    - tipc: fix uninit-value in tipc_nl_compat_doit
+    - block/loop: Don't grab "struct file" for vfs_getattr() operation.
+    - block/loop: Use global lock for ioctl() operation.
+    - loop: Fold __loop_release into loop_release
+    - loop: Get rid of loop_index_mutex
+    - loop: Push lo_ctl_mutex down into individual ioctls
+    - loop: Split setting of lo_state from loop_clr_fd
+    - loop: Push loop_ctl_mutex down into loop_clr_fd()
+    - loop: Push loop_ctl_mutex down to loop_get_status()
+    - loop: Push loop_ctl_mutex down to loop_set_status()
+    - loop: Push loop_ctl_mutex down to loop_set_fd()
+    - loop: Push loop_ctl_mutex down to loop_change_fd()
+    - loop: Move special partition reread handling in loop_clr_fd()
+    - loop: Move loop_reread_partitions() out of loop_ctl_mutex
+    - loop: Fix deadlock when calling blkdev_reread_part()
+    - loop: Avoid circular locking dependency between loop_ctl_mutex and
+      bd_mutex
+    - loop: Get rid of 'nested' acquisition of loop_ctl_mutex
+    - loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()
+    - loop: drop caches if offset or block_size are changed
+    - drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
+    - nbd: Use set_blocksize() to set device blocksize
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.18
+    - ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped
+      address
+    - [armhf, arm64 net: dsa: mv88x6xxx: mv88e6390 errata
+    - net, skbuff: do not prefer skb allocation fails early
+    - qmi_wwan: add MTU default to qmap network interface
+    - r8169: Add support for new Realtek Ethernet
+    - ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
+    - net: clear skb->tstamp in bridge forwarding path
+    - netfilter: ipset: Allow matching on destination MAC address for mac and
+      ipmac sets
+    - [arm64] gpio: pl061: Move irq_chip definition inside struct pl061
+    - drm/amd/display: Guard against null stream_state in set_crc_source
+    - [x86] drm/amdkfd: fix interrupt spin lock
+    - ixgbe: allow IPsec Tx offload in VEPA mode
+    - [x86] platform: asus-wmi: Tell the EC the OS will handle the display
+      off hotkey
+    - e1000e: allow non-monotonic SYSTIM readings
+    - [x86] usb: typec: tcpm: Do not disconnect link for self powered devices
+    - of: overlay: add missing of_node_put() after add new node to changeset
+    - writeback: don't decrement wb->refcnt if !wb->bdi
+    - serial: set suppress_bind_attrs flag only if builtin
+    - bpf: Allow narrow loads with offset > 0
+    - ALSA: oxfw: add support for APOGEE duet FireWire
+    - [x86] mce: Fix -Wmissing-prototypes warnings
+    - [mips] SiByte: Enable swiotlb for SWARM, LittleSur and BigSur
+    - [arm64] perf: set suppress_bind_attrs flag to true
+    - drm/atomic-helper: Complete fake_commit->flip_done potentially earlier
+    - [arm64] clk: meson: meson8b: fix incorrect divider mapping in
+      cpu_scale_table
+    - samples: bpf: fix: error handling regarding kprobe_events
+    - usb: gadget: udc: renesas_usb3: add a safety connection way for
+      forced_b_device
+    - fpga: altera-cvp: fix probing for multiple FPGAs on the bus
+    - selinux: always allow mounting submounts
+    - ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined
+    - scsi: qedi: Check for session online before getting iSCSI TLV data.
+    - drm/amdgpu: Reorder uvd ring init before uvd resume
+    - rxe: IB_WR_REG_MR does not capture MR's iova field
+    - efi/libstub: Disable some warnings for x86{,_64}
+    - jffs2: Fix use of uninitialized delayed_work, lockdep breakage
+    - clk: imx: make mux parent strings const
+    - pstore/ram: Do not treat empty buffers as valid
+    - media: uvcvideo: Refactor teardown of uvc on USB disconnect
+    - powerpc/xmon: Fix invocation inside lock region
+    - powerpc/pseries/cpuidle: Fix preempt warning
+    - media: firewire: Fix app_info parameter type in avc_ca{,_app}_info
+    - ASoC: use dma_ops of parent device for acp_audio_dma
+    - media: venus: core: Set dma maximum segment size
+    - staging: erofs: fix use-after-free of on-stack `z_erofs_vle_unzip_io'
+    - net: call sk_dst_reset when set SO_DONTROUTE
+    - scsi: target: use consistent left-aligned ASCII INQUIRY data
+    - scsi: target/core: Make sure that target_wait_for_sess_cmds() waits long
+      enough
+    - [arm64] kasan: Increase stack size for KASAN_EXTRA
+    - clk: imx6q: reset exclusive gates on init
+    - [arm64] Fix minor issues with the dcache_by_line_op macro
+    - bpf: relax verifier restriction on BPF_MOV | BPF_ALU
+    - mmc: atmel-mci: do not assume idle after atmci_request_end
+    - btrfs: volumes: Make sure there is no overlap of dev extents at mount
+      time
+    - btrfs: alloc_chunk: fix more DUP stripe size handling
+    - btrfs: fix use-after-free due to race between replace start and cancel
+    - btrfs: improve error handling of btrfs_add_link
+    - tty/serial: do not free trasnmit buffer page under port lock
+    - perf intel-pt: Fix error with config term "pt=0"
+    - perf tests ARM: Disable breakpoint tests 32-bit
+    - perf svghelper: Fix unchecked usage of strncpy()
+    - perf parse-events: Fix unchecked usage of strncpy()
+    - perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX
+    - netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set
+    - netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine
+    - netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine
+    - [x86] topology: Use total_cpus for max logical packages calculation
+    - dm crypt: use u64 instead of sector_t to store iv_offset
+    - dm kcopyd: Fix bug causing workqueue stalls
+    - perf stat: Avoid segfaults caused by negated options
+    - tools lib subcmd: Don't add the kernel sources to the include path
+    - dm snapshot: Fix excessive memory usage and workqueue stalls
+    - perf cs-etm: Correct packets swapping in cs_etm__flush()
+    - perf tools: Add missing sigqueue() prototype for systems lacking it
+    - perf tools: Add missing open_memstream() prototype for systems lacking it
+    - quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls.
+    - clocksource/drivers/integrator-ap: Add missing of_node_put()
+    - dm: Check for device sector overflow if CONFIG_LBDAF is not set
+    - Bluetooth: btusb: Add support for Intel bluetooth device 8087:0029
+    - ALSA: bebob: fix model-id of unit for Apogee Ensemble
+    - sysfs: Disable lockdep for driver bind/unbind files
+    - IB/usnic: Fix potential deadlock
+    - scsi: mpt3sas: fix memory ordering on 64bit writes
+    - scsi: smartpqi: correct lun reset issues
+    - ath10k: fix peer stats null pointer dereference
+    - scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown()
+    - scsi: megaraid: fix out-of-bound array accesses
+    - iomap: don't search past page end in iomap_is_partially_uptodate
+    - ocfs2: fix panic due to unrecovered local alloc
+    - mm/page-writeback.c: don't break integrity writeback on ->writepage()
+      error
+    - mm/swap: use nr_node_ids for avail_lists in swap_info_struct
+    - userfaultfd: clear flag if remap event not enabled
+    - mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps
+    - iwlwifi: mvm: Send LQ command as async when necessary
+    - Bluetooth: Fix unnecessary error message for HCI request completion
+    - ipmi: fix use-after-free of user->release_barrier.rda
+    - ipmi: msghandler: Fix potential Spectre v1 vulnerabilities
+    - ipmi: Prevent use-after-free in deliver_response
+    - ipmi:ssif: Fix handling of multi-part return messages
+    - ipmi: Don't initialize anything in the core until something uses it
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.19
+    - amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs
+    - net: bridge: Fix ethernet header pointer before check skb forwardable
+    - net: Fix usage of pskb_trim_rcsum
+    - net: phy: marvell: Errata for mv88e6390 internal PHYs
+    - net: phy: mdio_bus: add missing device_del() in mdiobus_register() error
+      handling
+    - net/sched: act_tunnel_key: fix memory leak in case of action replace
+    - net_sched: refetch skb protocol for each filter
+    - openvswitch: Avoid OOB read when parsing flow nlattrs
+    - vhost: log dirty page correctly
+    - net: ipv4: Fix memory leak in network namespace dismantle
+    - net/sched: cls_flower: allocate mask dynamically in fl_change()
+    - udp: with udp_segment release on error path
+    - ip6_gre: fix tunnel list corruption for x-netns
+    - erspan: build the header with the right proto according to erspan_ver
+    - net: phy: marvell: Fix deadlock from wrong locking
+    - ip6_gre: update version related info when changing link
+    - tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state
+    - mei: me: mark LBG devices as having dma support
+    - mei: me: add denverton innovation engine device IDs
+    - USB: leds: fix regression in usbport led trigger
+    - USB: serial: simple: add Motorola Tetra TPG2200 device id
+    - USB: serial: pl2303: add new PID to support PL2303TB
+    - ceph: clear inode pointer when snap realm gets dropped by its inode
+    - ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages
+    - ASoC: rt5514-spi: Fix potential NULL pointer dereference
+    - ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode
+    - clk: socfpga: stratix10: fix rate calculation for pll clocks
+    - clk: socfpga: stratix10: fix naming convention for the fixed-clocks
+    - inotify: Fix fd refcount leak in inotify_add_watch().
+    - ALSA: hda/realtek - Fix typo for ALC225 model
+    - ALSA: hda - Add mute LED support for HP ProBook 470 G5
+    - ARCv2: lib: memeset: fix doing prefetchw outside of buffer
+    - ARC: adjust memblock_reserve of kernel memory
+    - ARC: perf: map generic branches to correct hardware condition
+    - s390/mm: always force a load of the primary ASCE on context switch
+    - s390/early: improve machine detection
+    - s390/smp: fix CPU hotplug deadlock with CPU rescan
+    - misc: ibmvsm: Fix potential NULL pointer dereference
+    - char/mwave: fix potential Spectre v1 vulnerability
+    - [arm64] mmc: dw_mmc-bluefield: : Fix the license information
+    - [arm64] mmc: meson-gx: Free irq in release() callback
+    - staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1
+    - tty: Handle problem if line discipline does not have receive_buf
+    - uart: Fix crash in uart_write and uart_put_char
+    - tty/n_hdlc: fix __might_sleep warning
+    - hv_balloon: avoid touching uninitialized struct page during tail onlining
+    - Drivers: hv: vmbus: Check for ring when getting debug info
+    - vgacon: unconfuse vc_origin when using soft scrollback
+    - CIFS: Fix possible hang during async MTU reads and writes
+    - CIFS: Fix credits calculations for reads with errors
+    - CIFS: Fix credit calculation for encrypted reads with errors
+    - CIFS: Do not reconnect TCP session in add_credits()
+    - smb3: add credits we receive from oplock/break PDUs
+    - Input: xpad - add support for SteelSeries Stratus Duo
+    - Input: input_event - provide override for sparc64
+    - Input: uinput - fix undefined behavior in uinput_validate_absinfo()
+    - acpi/nfit: Block function zero DSMs
+    - acpi/nfit: Fix command-supported detection
+    - scsi: ufs: Use explicit access size in ufshcd_dump_regs
+    - dm thin: fix passdown_double_checking_shared_status()
+    - dm crypt: fix parsing of extended IV arguments
+    - [x86] drm/amdgpu: Add APTX quirk for Lenovo laptop
+    - [x86] KVM: Fix single-step debugging
+    - [x86] KVM: Fix PV IPIs for 32-bit KVM host
+    - [x86] KVM: WARN_ONCE if sending a PV IPI returns a fatal error
+    - [x86] kvm: vmx: Use kzalloc for cached_vmcs12
+    - [x86] KVM/nVMX: Do not validate that posted_intr_desc_addr is page
+      aligned
+    - [x86] pkeys: Properly copy pkey state at fork()
+    - [x86] selftests/pkeys: Fork() to check for state being preserved
+    - [x86] kaslr: Fix incorrect i8254 outb() parameters
+    - [x86] entry/64/compat: Fix stack switching for XEN PV
+    - [arm64] irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size
+    - can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by
+      removing it
+    - can: bcm: check timer values before ktime conversion
+    - can: flexcan: fix NULL pointer exception during bringup
+    - vt: make vt_console_print() compatible with the unicode screen buffer
+    - vt: always call notifier with the console lock held
+    - vt: invoke notifier on screen size change
+    - [arm64] drm/meson: Fix atomic mode switching regression
+    - bpf: improve verifier branch analysis
+    - bpf: add per-insn complexity limit
+    - bpf: move {prev_,}insn_idx into verifier env
+    - bpf: move tmp variable into ax register in interpreter
+    - bpf: enable access to ax register also from verifier rewrite
+    - bpf: restrict map value pointer arithmetic for unprivileged
+    - bpf: restrict stack pointer arithmetic for unprivileged
+    - bpf: restrict unknown scalars of mixed signed bounds for unprivileged
+    - bpf: fix check_map_access smin_value test when pointer contains offset
+    - bpf: prevent out of bounds speculation on pointer arithmetic
+      (CVE-2019-7308)
+    - bpf: fix sanitation of alu op with pointer / scalar type from different
+      paths (CVE-2019-7308)
+    - bpf: fix inner map masking to prevent oob under speculation
+    - [s390*] smp: Fix calling smp_call_ipl_cpu() from ipl CPU
+    - nvmet-rdma: Add unlikely for response allocated check
+    - nvmet-rdma: fix null dereference under heavy load
+    - Revert "mm, memory_hotplug: initialize struct pages for the full memory
+      section"
+    - usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup
+    - ide: fix a typo in the settings proc file name
+    - Input: input_event - fix the CONFIG_SPARC64 mixup
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.20
+    - Fix "net: ipv4: do not handle duplicate fragments as overlapping"
+    - ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation
+    - ipvlan, l3mdev: fix broken l3s mode wrt local routes
+    - l2tp: copy 4 more bytes to linear part if necessary
+    - l2tp: fix reading optional fields of L2TPv3
+    - net: ip_gre: always reports o_key to userspace
+    - net: ip_gre: use erspan key field for tunnel lookup
+    - net/mlx4_core: Add masking for a few queries on HCA caps
+    - netrom: switch to sock timer API
+    - net/rose: fix NULL ax25_cb kernel panic
+    - net: set default network namespace in init_dummy_netdev()
+    - sctp: improve the events for sctp stream reset
+    - tun: move the call to tun_set_real_num_queues
+    - vhost: fix OOB in get_rx_bufs()
+      (CVE-2018-16880)
+    - net: ip6_gre: always reports o_key to userspace
+    - sctp: improve the events for sctp stream adding
+    - net/mlx5e: Allow MAC invalidation while spoofchk is ON
+    - ip6mr: Fix notifiers call on mroute_clean_tables()
+    - sctp: set chunk transport correctly when it's a new asoc
+    - sctp: set flow sport from saddr only when it's 0
+    - virtio_net: Don't enable NAPI when interface is down
+    - virtio_net: Don't call free_old_xmit_skbs for xdp_frames
+    - virtio_net: Fix not restoring real_num_rx_queues
+    - virtio_net: Fix out of bounds access of sq
+    - virtio_net: Don't process redirected XDP frames when XDP is disabled
+    - virtio_net: Use xdp_return_frame to free xdp_frames on destroying vqs
+    - virtio_net: Differentiate sk_buff and xdp_frame on freeing
+    - CIFS: Do not count -ENODATA as failure for query directory
+    - CIFS: Fix trace command logging for SMB2 reads and writes
+    - CIFS: Do not consider -ENODATA as stat failure for reads
+    - fs/dcache: Fix incorrect nr_dentry_unused accounting in
+      shrink_dcache_sb()
+    - iommu/vt-d: Fix memory leak in intel_iommu_put_resv_regions()
+    - NFS: Fix up return value on fatal errors in nfs_page_async_flush()
+    - [arm64] kaslr: ensure randomized quantities are clean also when kaslr is
+      off
+    - [arm64] Do not issue IPIs for user executable ptes
+    - [arm64] hyp-stub: Forbid kprobing of the hyp-stub
+    - [arm64] hibernate: Clean the __hyp_text to PoC after resume
+    - gpiolib: fix line event timestamps for nested irqs
+    - gpio: pcf857x: Fix interrupts on multiple instances
+    - gfs2: Revert "Fix loop in gfs2_rbm_find"
+    - [arm*] mmc: bcm2835: Fix DMA channel leak on probe error
+    - mmc: mediatek: fix incorrect register setting of hs400_cmd_int_delay
+    - ALSA: usb-audio: Add Opus #3 to quirks for native DSD support
+    - ALSA: hda/realtek - Fixed hp_pin no value
+    - IB/hfi1: Remove overly conservative VM_EXEC flag check
+    - [x86] platform: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK
+    - [x86] platform: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes
+    - mmc: sdhci-iproc: handle mmc_of_parse() errors during probe
+    - Btrfs: fix deadlock when allocating tree block during leaf/node split
+    - btrfs: On error always free subvol_name in btrfs_mount
+    - kernel/exit.c: release ptraced tasks before zap_pid_ns_processes
+    - mm/hugetlb.c: teach follow_hugetlb_page() to handle FOLL_NOWAIT
+    - oom, oom_reaper: do not enqueue same task twice
+    - mm,memory_hotplug: fix scan_movable_pages() for gigantic hugepages
+    - mm, oom: fix use-after-free in oom_kill_process
+    - mm: hwpoison: use do_send_sig_info() instead of force_sig()
+    - mm: migrate: don't rely on __PageMovable() of newpage after unlocking it
+    - of: Convert to using %pOFn instead of device_node.name
+    - of: overlay: add tests to validate kfrees from overlay removal
+    - of: overlay: add missing of_node_get() in __of_attach_node_sysfs
+    - of: overlay: use prop add changeset entry for property in new nodes
+    - of: overlay: do not duplicate properties from overlay for new nodes
+    - md/raid5: fix 'out of memory' during raid cache recovery
+    - cifs: Always resolve hostname before reconnecting
+
+  [ Luca Boccassi ]
+  * Do not generate linux-source-$ver stanza in debian/control if
+    source is set to disabled in debian/config/defines.
+  * linux-perf: explicitly disable the jvmti feature and shared library.
+  * Document pkg.linux.nosource in debian/README.source.
+  * [amd64] enable UIO_HV_GENERIC for Azure's VMBus access.
+  * [cloud-amd64] enable UIO for Azure's VMBus access, and VFIO for guests
+    running on an hypervisor that exposes a vIOMMU.
+
+  [ Ben Hutchings ]
+  * debian/rules.d, debian/rules.real: Restore build of userland headers for
+    tools
+  * debian/rules.d: Delete now-unused recursive makefiles
+  * debian/rules.d/tools/perf/Makefile: Delete redundant arch/profile checks
+  * debian/control: Add !pkg.linux.nokernel to qualification for compiler
+    build-deps
+  * [i386] debian/control: Fix cross-compiler build-dependency
+  * debian/README.source: Document how to run kconfigeditor2
+  * [armhf,arm64] serial: 8250: Disable SERIAL_8250_DEPRECATED_OPTIONS
+  * percpu: convert spin_lock_irq to spin_lock_irqsave (fixes boot failure with
+    alpha-generic flavour)
+  * debian/tests/python: Fix spurious failure due to misuse of stderr
+  * Update "Revert "objtool: Fix CONFIG_STACK_VALIDATION=y warning for ..."
+    to not duplicate the conditional warning/error
+  * Bump ABI to 3
+  * drivers/firmware: Enable FW_CFG_SYSFS as module (Closes: #882208)
+  * [arm64,armhf,ia64,riscv64,sparc64] udeb: Add usb-serial-modules
+    (Closes: #903824)
+  * [powerpc*,sparc64] udeb: Add nic-usb-modules
+  * [armhf,riscv64,s390x] udeb: Add cdrom-core-modules
+  * 9p: Enable NET_9P_XEN as module
+  * ACPI: Enable ACPI_TAD as module
+  * amd-xgbe: Enable AMD_XGBE_DCB
+  * ath9k: Enable ATH9K_CHANNEL_CONTEXT
+  * block: Enable BLK_DEV_ZONED (except armel/marvell)
+  * bluetooth: Enable BT_HCIUART_RTL; BT_HCIUART_NOKIA, BT_MTKUART as modules
+  * bnxt: Enable BNXT_DCB
+  * ethernet: Enable HINIC, ICE, LAN743X, LIQUIDIO_VF as modules
+  * can: Enable CAN_VXCAN, CAN_MCBA_USB, CAN_UCAN as modules
+  * dm: Enable DM_UNSTRIPED, DM_WRITECACHE, DM_ZONED as modules
+  * [arm64,armhf] drm: Enable DRM_PANEL_RASPBERRYPI_TOUCHSCREEN as module
+  * dvb-usb-v2: Enable DVB_USB_ZD1301 as module
+  * gnss: Enable GNSS, GNSS_SIRF_SERIAL, GNSS_UBX_SERIAL as modules
+  * gpio: Enable GPIO_EXAR, GPIO_PCI_IDIO_16, GPIO_PCIE_IDIO_24 as modules
+  * HID: Enable HID_ACCUTOUCH, HID_COUGAR, HID_ELAN, HID_ITE, HID_JABRA,
+    HID_MAYFLASH, HID_REDRAGON, HID_RETRODE, HID_STEAM, HID_UDRAW_PS3 as
+    modules
+  * [x86] i2c: Enable I2C_DESIGNWARE_BAYTRAIL
+  * IB: Enable CGROUP_RDMA (except armel/marvell)
+  * ieee802154: Enable IEEE802154_HWSIM as module
+  * inet: Enable INET_RAW_DIAG as module
+  * input: Enable INPUT_AXP20X_PEK as module
+  * IPMI: Enable IPMI_SSIF as module
+  * joystick: Enable JOYSTICK_PXRC as module
+  * media/rc: Enable IR_IMON_DECODER, IR_IMON_RAW as modules
+  * [x86] mfd: Enable INTEL_SOC_PMIC_BXTWC, INTEL_SOC_PMIC_CHTDC_TI as modules
+  * mlx5: Enable MLX5_FPGA, MLX5_CORE_IPOIB; MLXFW as module
+  * net: Enable BPF_STREAM_PARSER, XDP_SOCKETS (except armel/marvell)
+    (Closes: #908860); NET_FAILOVER, SMC, SMC_DIAG, VSOCKMON as modules
+  * net/phy: Enable LED_TRIGGER_PHY; CORTINA_PHY, DP83822_PHY, DP83TC811_PHY,
+    MARVELL_10G_PHY, MICROCHIP_T1_PHY, RENESAS_PHY, ROCKCHIP_PHY as modules
+  * net/sched: Enable NET_SCH_CBS, NET_SCH_ETF, NET_SCH_SKBPRIO, NET_EMATCH_IPT
+    as modules
+  * PCMCIA: Enable SCR24X as module
+  * [x86] pinctrl: Enable PINCTRL_CANNONLAKE, PINCTRL_CEDARFORK,
+    PINCTRL_DENVERTON, PINCTRL_GEMINILAKE, PINCTRL_ICELAKE, PINCTRL_LEWISBURG
+  * [x86] rmi4: Re-enable RMI4_CORE, RMI4_SMB as modules (Closes: #875621);
+    RMI4_F03, RMI4_F11, RMI4_F12, RMI4_F30, RMI4_F34, RMI4_F55
+  * xfrm: Enable XFRM_INTERFACE as module
+  * PCI: Enable PCI_PF_STUB as module
+  * ptp: Change PTP_1588_CLOCK_KVM from built-in to module
+  * random: Enable RANDOM_TRUST_CPU. This can be reverted using the kernel
+    parameter: random.trust_cpu=off
+  * SCSI: Enable QEDF, QEDI as modules
+  * serial: Enable SERIAL_8250_EXAR, USB_SERIAL_F8153X, USB_SERIAL_UPD78F0730
+    as modules
+  * sound: Enable SND_FIREWIRE_MOTU, SND_FIREFACE, SND_XEN_FRONTEND as modules
+  * [x86] sound: Enable SND_SOC_AMD_CZ_DA7219MX98357_MACH,
+    SND_SOC_AMD_CZ_RT5645_MACH, SND_SOC_INTEL_CHT_BSW_NAU8824_MACH,
+    SND_SOC_INTEL_BYT_CHT_DA7213_MACH, SND_SOC_INTEL_KBL_RT5663_MAX98927_MACH,
+    SND_SOC_INTEL_KBL_RT5663_RT5514_MAX98927_MACH,
+    SND_SOC_INTEL_KBL_DA7219_MAX98357A_MACH,
+    SND_SOC_INTEL_GLK_RT5682_MAX98357A_MACH as modules
+  * thermal: Enable DEVFREQ_THERMAL, THERMAL_STATISTICS
+  * tpm: Enable TCG_TIS_SPI, TCG_VTPM_PROXY as modules
+  * usbtouchscreen: Enable TOUCHSCREEN_USB_EASYTOUCH
+  * watchdog: Enable WATCHDOG_PRETIMEOUT_GOV, WATCHDOG_PRETIMEOUT_GOV_NOOP,
+    WATCHDOG_PRETIMEOUT_DEFAULT_GOV_NOOP; WATCHDOG_PRETIMEOUT_GOV_PANIC,
+    WDAT_WDT as modules
+  * [x86] watchdog: Enable INTEL_MEI_WDT, NI903X_WDT, NIC7018_WDT as modules
+  * wireless: Enable MT76x0U, MT76x2E, MT76x2U, QTNFMAC_PEARL_PCIE as modules
+    (Closes: #918331)
+  * zram: Enable ZRAM_WRITEBACK, ZRAM_MEMORY_TRACKING
+  * udeb: Add scsi-nic-modules containing Chelsio and Qlogic iSCSI/FC drivers
+
+  [ Marcin Juszkiewicz ]
+  * [arm64] enable ARM_CCI_PMU so ARM_CCI400_PMU and ARM_CCI5xx_PMU options
+    get really enabled.
+  * [arm64] enable PCI_PRI, PCI_PASID as PCI can be behind IOMMU in servers.
+  * udeb: Add virtio-gpu into d-i to get graphical output in VM instances.
+  * [arm64] Enable ARM64_ERRATUM_843419 (Closes: #920866)
+
+  [ Salvatore Bonaccorso ]
+  * [x86] kvmclock: set offset for kvm unstable clock (Closes: #918036)
+  * kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974)
+  * [x86] KVM: work around leak of uninitialized stack contents
+    (CVE-2019-7222)
+  * [x86] KVM: nVMX: unconditionally cancel preemption timer in free_nested
+    (CVE-2019-7221)
+  * HID: debug: fix the ring buffer implementation (CVE-2019-3819)
+
+  [ Hideki Yamane ]
+  * [x86] Enable Touchpad support on Gemini Lake via CONFIG_PINCTRL_GEMINILAKE
+    (Closes: #917388)
+  * [x86] Enable SND_SOC_ES8316 and Baytrail & Cherrytrail with ES8316 codec,
+    too (Closes: #918589)
+  * hwmon: Enable CONFIG_SENSORS_NCT7802,NCT7904,NPCM7XX,ASPEED and W83773G
+    to use HWMON hardware (Closes: #912597)
+  * net: can: Enable CONFIG_CAN_PEAK_PCIEFD for a PCI express CAN Bus adapter
+    (Closes: #920809)
+  * [armhf] Enable CONFIG_SENSORS_LM75 for armhf (Closes: #918114)
+  * [armhf] Enable CONFIG_IMX_THERMAL for armhf (Closes: #883023)
+  * [arm64] Enable CONFIG_ARM_ARMADA_37XX_CPUFREQ for arm64 (Closes: #917939)
+
+  [ Vagrant Cascadian ]
+  * [armhf] Enable CONFIG_MMC_SDHCI_OMAP=m, used on DRA7 and related SoCs.
+
+  [ Uwe Kleine-König ]
+  * [armel] add spi-orion to mtd.udeb to be able to access spi flash on e.g.
+    qnap ts-21x. (Closes: #920607)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 11 Feb 2019 16:55:59 +0000
+
+linux (4.19.16-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.14
+    - ax25: fix a use-after-free in ax25_fillin_cb()
+    - gro_cell: add napi_disable in gro_cells_destroy
+    - ip6mr: Fix potential Spectre v1 vulnerability
+    - ipv4: Fix potential Spectre v1 vulnerability
+    - ipv6: explicitly initialize udp6_addr in udp_sock_create6()
+    - ipv6: tunnels: fix two use-after-free
+    - ip: validate header length on virtual device xmit
+    - isdn: fix kernel-infoleak in capi_unlocked_ioctl
+    - net/wan: fix a double free in x25_asy_open_tty()
+    - packet: validate address length
+    - packet: validate address length if non-zero
+    - ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
+    - sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
+    - tipc: compare remote and local protocols in tipc_udp_enable()
+    - tipc: fix a double free in tipc_enable_bearer()
+    - tipc: fix a double kfree_skb()
+    - ipv6: frags: Fix bogus skb->sk in reassembled packets
+    - ipv6: route: Fix return value of ip6_neigh_lookup() on neigh_create()
+      error
+    - ALSA: rme9652: Fix potential Spectre v1 vulnerability
+    - ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities
+    - ALSA: pcm: Fix potential Spectre v1 vulnerability
+    - ALSA: emux: Fix potential Spectre v1 vulnerabilities
+    - powerpc/fsl: Fix spectre_v2 mitigations reporting
+    - usb: r8a66597: Fix a possible concurrency use-after-free bug in
+      r8a66597_endpoint_disable()
+    - [s390x] s390/pci: fix sleeping in atomic during hotplug
+    - [x86] x86/speculation/l1tf: Drop the swap storage limit restriction when
+      l1tf=off
+    - [x86] x86/mm: Drop usage of __flush_tlb_all() in
+      kernel_physical_mapping_init()
+    - [x86] KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup
+    - [arm64] arm64: KVM: Make VHE Stage-2 TLB invalidation operations
+      non-interruptible
+    - perf pmu: Suppress potential format-truncation warning
+    - perf env: Also consider env->arch == NULL as local operation
+    - ext4: fix possible use after free in ext4_quota_enable
+    - ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()
+    - ext4: include terminating u32 in size of xattr entries when expanding
+      inodes
+    - ext4: force inode writes when nfsd calls commit_metadata()
+    - ext4: check for shutdown and r/o file system in ext4_write_inode()
+    - [armhf,arm64] spi: bcm2835: Fix race on DMA termination
+    - [armhf,arm64] spi: bcm2835: Fix book-keeping of DMA termination
+    - [armhf,arm64] spi: bcm2835: Avoid finishing transfer prematurely in IRQ
+      mode
+    - btrfs: dev-replace: go back to suspended state if target device is missing
+    - btrfs: dev-replace: go back to suspend state if another EXCL_OP is running
+    - btrfs: skip file_extent generation check for free_space_inode in
+      run_delalloc_nocow
+    - Btrfs: fix fsync of files with multiple hard links in new directories
+    - btrfs: run delayed items before dropping the snapshot
+    - Btrfs: send, fix race with transaction commits that create snapshots
+    - brcmfmac: Fix out of bounds memory access during fw load
+    - dax: Don't access a freed inode
+    - f2fs: read page index before freeing
+    - f2fs: sanity check of xattr entry size
+    - media: imx274: fix stack corruption in imx274_read_reg
+    - media: v4l2-tpg: array index could become negative
+    - tools lib traceevent: Fix processing of dereferenced args in bprintk
+      events
+    - [mips*] MIPS: math-emu: Write-protect delay slot emulation pages
+    - [mips*] MIPS: Ensure pmd_present() returns false after pmd_mknotpresent()
+    - [mips*] MIPS: Align kernel load address to 64KB
+    - [mips*] MIPS: Expand MIPS32 ASIDs to 64 bits
+    - CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock
+      problem
+    - smb3: fix large reads on encrypted connections
+    - [arm*] KVM: arm/arm64: vgic: Cap SPIs to the VM-defined maximum
+    - [arm*] KVM: arm/arm64: vgic-v2: Set active_source to 0 when restoring
+      state
+    - [arm*] KVM: arm/arm64: vgic: Fix off-by-one bug in vgic_get_irq()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.15
+    - IB/core: Fix oops in netdev_next_upper_dev_rcu()
+    - xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force
+      clears the dst_entry.
+    - ieee802154: hwsim: fix off-by-one in parse nested
+    - netfilter: seqadj: re-load tcp header pointer after possible head
+      reallocation
+    - scsi: bnx2fc: Fix NULL dereference in error handling
+    - [ppc64el] ibmvnic: Convert reset work item mutex to spin lock
+    - [ppc64el] ibmvnic: Fix non-atomic memory allocation in IRQ context
+    - [x86] x86/mm: Fix guard hole handling
+    - i40e: fix mac filter delete when setting mac address
+    - ixgbe: Fix race when the VF driver does a reset
+    - netfilter: nat: can't use dst_hold on noref dst
+    - bnx2x: Clear fip MAC when fcoe offload support is disabled
+    - bnx2x: Remove configured vlans as part of unload sequence.
+    - bnx2x: Send update-svid ramrod with retry/poll flags enabled
+    - mt76: fix potential NULL pointer dereference in mt76_stop_tx_queues
+    - [x86] x86, hyperv: remove PCI dependency
+    - [arm64] net: hns: All ports can not work when insmod hns ko after rmmod.
+    - [arm64] net: hns: Fixed bug that netdev was opened twice
+    - [arm64] net: hns: Clean rx fbd when ae stopped.
+    - [arm64] net: hns: Avoid net reset caused by pause frames storm
+    - [arm64] net: hns: Add mac pcs config when enable|disable mac
+    - [arm64] net: hns: Fix ping failed when use net bridge and send multicast
+    - mac80211: fix a kernel panic when TXing after TXQ teardown
+    - [arm64,riscv64] net: macb: fix random memory corruption on RX with
+      64-bit DMA
+    - [arm64.risvv64] net: macb: fix dropped RX frames due to a race
+    - lan78xx: Resolve issue with changing MAC address
+    - [s390x] scsi: zfcp: fix posting too many status read buffers leading to
+      adapter shutdown
+    - fork: record start_time late
+    - zram: fix double free backing device
+    - hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined
+    - mm, devm_memremap_pages: kill mapping "System RAM" support
+    - memcg, oom: notify on oom killer invocation from the charge path
+    - mt76x0: init hw capabilities
+    - [amd64] media: cx23885: only reset DMA on problematic CPUs
+    - ALSA: cs46xx: Potential NULL dereference in probe
+    - ALSA: usb-audio: Avoid access before bLength check in
+      build_audio_procunit()
+    - ALSA: usb-audio: Check mixer unit descriptors more strictly
+    - ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks
+    - ALSA: usb-audio: Always check descriptor sizes in parser code
+    - Fix failure path in alloc_pid()
+    - block: deactivate blk_stat timer in wbt_disable_default()
+    - gfs2: Get rid of potential double-freeing in gfs2_create_inode
+    - gfs2: Fix loop in gfs2_rbm_find
+    - b43: Fix error in cordic routine
+    - nfsd4: zero-length WRITE should succeed
+    - [ppc*] powerpc/tm: Set MSR[TS] just prior to recheckpoint
+    - RDMA/srpt: Fix a use-after-free in the channel release code
+    - sched/fair: Fix infinite loop in update_blocked_averages() by reverting
+      a9e7f6544b9c
+    - [s390x] genwqe: Fix size check
+    - [x86] intel_th: msu: Fix an off-by-one in attribute store
+    - [armhf,arm64] drm/rockchip: psr: do not dereference encoder before it is
+      null checked.
+    - bnx2x: Fix NULL pointer dereference in bnx2x_del_all_vlans() on some hw
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.16
+    - Btrfs: fix deadlock when using free space tree due to block group
+      creation
+    - staging: rtl8188eu: Fix module loading from tasklet for CCMP encryption
+    - staging: rtl8188eu: Fix module loading from tasklet for WEP encryption
+    - cpufreq: scmi: Fix frequency invariance in slow path
+    - [x86] modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE
+    - ALSA: hda/realtek - Support Dell headset mode for New AIO platform
+    - ALSA: hda/realtek - Add unplug function into unplug state of Headset Mode
+      for ALC225
+    - ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225
+    - CIFS: Fix adjustment of credits for MTU requests
+    - CIFS: Do not set credits to 1 if the server didn't grant anything
+    - CIFS: Do not hide EINTR after sending network packets
+    - CIFS: Fix credit computation for compounded requests
+    - cifs: Fix potential OOB access of lock element array
+    - usb: cdc-acm: send ZLP for Telit 3G Intel based modems
+    - USB: storage: don't insert sane sense for SPC3+ when bad sense specified
+    - USB: storage: add quirk for SMI SM3350
+    - USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB
+    - slab: alien caches must not be initialized if the allocation of the alien
+      cache failed
+    - mm/usercopy.c: no check page span for stack objects
+    - mm, memcg: fix reclaim deadlock with writeback
+    - ACPI: power: Skip duplicate power resource references in _PRx
+    - ACPI / PMIC: xpower: Fix TS-pin current-source handling
+    - ACPI/IORT: Fix rc_dma_get_range()
+    - i2c: dev: prevent adapter retries and timeout being set as minus value
+    - vfio/type1: Fix unmap overflow off-by-one
+    - drm/amdgpu: Add new VegaM pci id
+    - PCI: dwc: Use interrupt masking instead of disabling
+    - PCI: dwc: Take lock when ACKing an interrupt
+    - PCI: dwc: Move interrupt acking into the proper callback
+    - drm/amd/display: Fix MST dp_blank REG_WAIT timeout
+    - drm/fb_helper: Allow leaking fbdev smem_start
+    - drm/fb-helper: Partially bring back workaround for bugs of SDL 1.2
+    - [x86] drm/i915: Unwind failure on pinning the gen7 ppgtt
+    - drm/amdgpu: Don't ignore rc from drm_dp_mst_topology_mgr_resume()
+    - drm/amdgpu: Don't fail resume process if resuming atomic state fails
+    - rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set
+    - ext4: make sure enough credits are reserved for dioread_nolock writes
+    - ext4: fix a potential fiemap/page fault deadlock w/ inline_data
+    - ext4: avoid kernel warning when writing the superblock to a dead device
+    - ext4: use ext4_write_inode() when fsyncing w/o a journal
+    - ext4: track writeback errors using the generic tracking infrastructure
+    - ext4: fix special inode number checks in __ext4_iget()
+    - mm: page_mapped: don't assume compound page is huge or THP
+    - sunrpc: use-after-free in svc_process_common()
+    - [armhf,arm64] KVM: Fix VMID alloc race by reverting to lock-less
+    - [arm64] compat: Don't pull syscall number from regs in arm_compat_syscall
+    - Btrfs: fix access to available allocation bits when starting balance
+    - Btrfs: fix deadlock when enabling quotas due to concurrent snapshot
+      creation
+    - Btrfs: use nofs context when initializing security xattrs to avoid
+      deadlock
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] Add patch to build with -ffreestanding to fix FTBFS
+
+  [ Ben Hutchings ]
+  * [ia64,m68k] libbpf: Really don't build on architectures without perf events
+  * Use dh_listpackages to determine which packages to build
+  * Add pkg.linux.nokernel build profile that excludes kernel image and header
+    packages
+
+  [ Yves-Alexis Perez ]
+  * Bump ABI to 2 because of changes in struct sock_common from 60f05dddf1eb
+  * [rt] Update to 4.19.15-rt12
+    - rtmutex/rwlock: preserve state like a sleeping lock
+
+  [ Salvatore Bonaccorso ]
+  * ipv6: Consider sk_bound_dev_if when binding a socket to an address
+    (Closes: #918103)
+  * posix-cpu-timers: Unbreak timer rearming (Closes: #919019, #919049)
+
+  [ Michal Simek ]
+  * [arm64] Enable Xilinx ZynqMP SoC and drivers
+
+  [ YunQiang Su ]
+  * [mipsel, mips64el] Enable DRM_AST and FB_SM750 for loongson-3
+    install ast and sm750fb to loongson-3's fb-modules
+
+  [ Romain Perier ]
+  * [rt] Update to 4.19.13-rt10
+
+  [ Luigi Baldoni ]
+  * [x86] Enable LEDS_APU to support leds on PC Engines
+    APU SBC series
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 17 Jan 2019 18:56:17 +0000
+
+linux (4.19.13-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.13
+    - Revert "vfs: Allow userns root to call mknod on owned filesystems."
+    - USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
+      (CVE-2018-19985)
+    - xhci: Don't prevent USB2 bus suspend in state check intended for USB3
+      only
+    - USB: xhci: fix 'broken_suspend' placement in struct xchi_hcd
+    - USB: serial: option: add GosunCn ZTE WeLink ME3630
+    - USB: serial: option: add HP lt4132
+    - USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode)
+    - USB: serial: option: add Fibocom NL668 series
+    - USB: serial: option: add Telit LN940 series
+    - ubifs: Handle re-linking of inodes correctly while recovery
+    - scsi: t10-pi: Return correct ref tag when queue has no integrity profile
+    - scsi: sd: use mempool for discard special page
+    - mmc: core: Reset HPI enabled state during re-init and in case of errors
+    - mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support
+    - mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl
+    - [armhf] mmc: omap_hsmmc: fix DMA API warning
+    - gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers
+    - posix-timers: Fix division by zero bug
+    - [x86] KVM: Fix NULL deref in vcpu_scan_ioapic
+    - [x86] kvm: Add AMD's EX_CFG to the list of ignored MSRs
+    - [x86] KVM: Fix UAF in nested posted interrupt processing
+    - [x86] Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened
+      channels
+    - futex: Cure exit race
+    - [x86] mtrr: Don't copy uninitialized gentry fields back to userspace
+    - [x86] mm: Fix decoy address handling vs 32-bit builds (Closes: #917569)
+    - [x86] vdso: Pass --eh-frame-hdr to the linker
+    - panic: avoid deadlocks in re-entrant console drivers
+    - mm: add mm_pxd_folded checks to pgtable_bytes accounting functions
+    - mm: make the __PAGETABLE_PxD_FOLDED defines non-empty
+    - mm: introduce mm_[p4d|pud|pmd]_folded
+    - xfrm_user: fix freeing of xfrm states on acquire
+    - rtlwifi: Fix leak of skb when processing C2H_BT_INFO
+    - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT to old firmwares
+    - Revert "mwifiex: restructure rx_reorder_tbl_lock usage"
+    - iwlwifi: add new cards for 9560, 9462, 9461 and killer series
+    - mm, memory_hotplug: initialize struct pages for the full memory section
+    - mm: thp: fix flags for pmd migration when split
+    - mm, page_alloc: fix has_unmovable_pages for HugePages
+    - mm: don't miss the last page because of round-off error
+    - Input: elantech - disable elan-i2c for P52 and P72
+    - proc/sysctl: don't return ENOMEM on lookup when a table is unregistering
+    - drm/ioctl: Fix Spectre v1 vulnerabilities
+
+  [ Uwe Kleine-König ]
+  * [armhf] enable some kconfig items for Allwinner SoCs (SUNXI_CCU=y,
+    SUN8I_DE2_CCU=y, DRM_SUN8I_DW_HDMI=m, SND_SUN8I_CODEC=m,
+    SND_SUN8I_CODEC_ANALOG=m). (Closes: #915899)
+
+  [ Ben Hutchings ]
+  * linux-image-*-unsigned: Remove Provides field (Closes: #916927)
+  * [ia64,m68k] libbpf: Don't build on architectures without performance events
+  * [riscv64] tools uapi: fix RISC-V 64-bit support
+  * [powerpc,powerpcspe,ppc64] linux-config: Eliminate config.*_bootwrapper.gz
+    files
+  * [powerpcspe] Fix -mcpu= options for SPE-only compiler
+  * debian/lib/python/debian_linux/debian.py: Fix deprecated import of
+    MutableSet
+  * Fix pycodestyle "line break after binary operator" warnings
+  * Fix pycodestyle "inalid escape sequence" warnings
+
+  [ Romain Perier ]
+  * [rt] Update to 4.19.10-rt8
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 30 Dec 2018 10:04:03 +0100
+
+linux (4.19.12-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.10
+    - ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes
+    - ipv6: Check available headroom in ip6_xmit() even without options
+    - ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output
+    - [arm64, hppa, powerpc, x86, alpha, armhf, mips*] net: 8139cp: fix a BUG
+      triggered by changing mtu with network traffic
+    - net: phy: don't allow __set_phy_supported to add unsupported modes
+    - net: Prevent invalid access to skb->prev in __qdisc_drop_all
+    - net: use skb_list_del_init() to remove from RX sublists
+    - Revert "net/ibm/emac: wrong bit is used for STA control"
+    - rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
+    - sctp: kfree_rcu asoc
+    - tcp: Do not underestimate rwnd_limited
+    - tcp: fix NULL ref in tail loss probe
+    - tun: forbid iface creation with rtnl ops
+    - virtio-net: keep vnet header zeroed after processing XDP
+    - net: phy: sfp: correct store of detected link modes
+    - sctp: update frag_point when stream_interleave is set
+    - net: restore call to netdev_queue_numa_node_write when resetting XPS
+    - net: fix XPS static_key accounting
+    - [armhf] OMAP2+: prm44xx: Fix section annotation on
+      omap44xx_prm_enable_io_wakeup
+    - [arm64, x86] staging: rtl8723bs: Fix the return value in case of error in
+      'rtw_wx_read32()'
+    - [armhf] dts: am3517: Fix pinmuxing for CD on MMC1
+    - [armhf] dts: LogicPD Torpedo: Fix mmc3_dat1 interrupt
+    - [armhf] dts: logicpd-somlv: Fix interrupt on mmc3_dat1
+    - [armhf] dts: am3517-som: Fix WL127x Wifi interrupt
+    - tools: bpftool: prevent infinite loop in get_fdinfo()
+    - [arm64] dts: sdm845-mtp: Reserve reserved gpios
+    - sysv: return 'err' instead of 0 in __sysv_write_inode
+    - netfilter: nf_tables: don't skip inactive chains during update
+    - perf tools: Fix crash on synthesizing the unit
+    - netfilter: xt_RATEEST: remove netns exit routine
+    - netfilter: nf_tables: fix use-after-free when deleting compat expressions
+    - [armhf] ASoC: rockchip: add missing slave_config setting for I2S
+    - s390/cpum_cf: Reject request for sampling in event initialization
+    - [arm64, armel, x86, armhf] ASoC: dapm: Recalculate audio map forcely when
+      card instantiated
+    - [armhf] spi: omap2-mcspi: Add missing suspend and resume calls
+    - bpf: allocate local storage buffers using GFP_ATOMIC
+    - aio: fix failure to put the file pointer
+    - netfilter: xt_hashlimit: fix a possible memory leak in htable_create()
+    - hwmon: (w83795) temp4_type has writable permission
+    - perf tools: Restore proper cwd on return from mnt namespace
+    - [armhf] PCI: imx6: Fix link training status detection in link up check
+    - objtool: Fix double-free in .cold detection error path
+    - objtool: Fix segfault in .cold detection with -ffunction-sections
+    - [arm64] phy: qcom-qusb2: Use HSTX_TRIM fused value as is
+    - [arm64] phy: qcom-qusb2: Fix HSTX_TRIM tuning with fused value for SDM845
+    - Btrfs: send, fix infinite loop due to directory rename dependencies
+    - RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR
+    - RDMA/core: Add GIDs while changing MAC addr only for registered ndev
+    - RDMA/rdmavt: Fix rvt_create_ah function signature
+    - tools: bpftool: fix potential NULL pointer dereference in do_load
+    - ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf
+    - [x86] thunderbolt: Prevent root port runtime suspend during NVM upgrade
+    - [arm64] drm/meson: add support for 1080p25 mode
+    - netfilter: ipv6: Preserve link scope traffic original oif
+    - IB/mlx5: Fix page fault handling for MW
+    - netfilter: add missing error handling code for register functions
+    - [x86] KVM: VMX: Update shared MSRs to be saved/restored on MSR_EFER.LMA
+      changes
+    - [x86] kvm/vmx: fix old-style function declaration
+    - [arm64] net: thunderx: fix NULL pointer dereference in nic_remove
+    - netfilter: nf_tables: deactivate expressions in rule replecement routine
+    - ALSA: usb-audio: Add vendor and product name for Dell WD19 Dock
+    - cachefiles: Fix an assertion failure when trying to update a failed object
+    - fscache: Fix race in fscache_op_complete() due to split atomic_sub & read
+    - cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is
+      active
+    - igb: fix uninitialized variables
+    - ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
+    - [arm64] net: hisilicon: remove unexpected free_netdev
+    - drm/amdgpu: Add delay after enable RLC ucode
+    - [arm64, powerpc, x86] drm/ast: fixed reading monitor EDID not stable issue
+    - Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"
+    - afs: Fix validation/callback interaction
+    - fscache: fix race between enablement and dropping of object
+    - cachefiles: Explicitly cast enumerated type in put_object
+    - fscache, cachefiles: remove redundant variable 'cache'
+    - nvme: warn when finding multi-port subsystems without multipathing enabled
+    - ocfs2: fix deadlock caused by ocfs2_defrag_extent()
+    - mm/page_alloc.c: fix calculation of pgdat->nr_zones
+    - hfs: do not free node before using
+    - hfsplus: do not free node before using
+    - initramfs: clean old path before creating a hardlink
+    - ocfs2: fix potential use after free
+    - dax: Check page->mapping isn't NULL
+    - ALSA: hda/realtek - Fixed headphone issue for ALC700
+    - ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN
+    - ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294
+    - ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294
+    - ALSA: hda/realtek - Fix the mute LED regresion on Lenovo X1 Carbon
+    - IB/hfi1: Fix an out-of-bounds access in get_hw_stats
+    - bpf: fix off-by-one error in adjust_subprog_starts
+    - tcp: lack of available data can also cause TSO defer
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.11
+    - sched/pelt: Fix warning and clean up IRQ PELT config
+    - scsi: raid_attrs: fix unused variable warning
+    - [i386] staging: olpc_dcon: add a missing dependency
+    - [arm64] dts: qcom-apq8064-arrow-sd-600eval fix graph_endpoint warning
+    - [arm64] drm/msm: fix address space warning
+    - aio: fix spectre gadget in lookup_ioctx
+    - fs/iomap.c: get/put the page in iomap_page_create/release()
+    - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is
+      registered
+    - [arm64] dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing
+    - block/bio: Do not zero user pages
+    - ovl: fix decode of dir file handle with multi lower layers
+    - ovl: fix missing override creds in link of a metacopy upper
+    - [armhf] MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310
+    - mmc: core: use mrq->sbc when sending CMD23 for RPMB
+    - mmc: sdhci: fix the timeout check window for clock and reset
+    - fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS
+    - [arm] mmp/mmp2: fix cpu_is_mmp2() on mmp2-dt
+    - [arm] dts: bcm2837: Fix polarity of wifi reset GPIOs (Closes: #911443)
+    - dm thin: send event about thin-pool state change _after_ making it
+    - dm cache metadata: verify cache has blocks in
+      blocks_are_clean_separate_dirty()
+    - dm: call blk_queue_split() to impose device limits on bios
+    - tracing: Fix memory leak of instance function hash filters
+    - [powerpc*] msi: Fix NULL pointer access in teardown code
+    - drm/nouveau/kms: Fix memory leak in nv50_mstm_del()
+    - drm/nouveau/kms/nv50-: also flush fb writes when rewinding push buffer
+    - Revert "drm/rockchip: Allow driver to be shutdown on reboot/kexec"
+    - [x86] drm/i915/execlists: Apply a full mb before execution for Braswell
+    - [amd64] drm/amdkfd: add new vega10 pci ids
+    - drm/amdgpu: add some additional vega10 pci ids
+    - drm/amdgpu: update smu firmware images for VI variants (v2)
+    - drm/amdgpu: update SMC firmware image for polaris10 variants
+    - [x86] build: Fix compiler support check for CONFIG_RETPOLINE
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.12
+    - locking/qspinlock: Re-order code
+    - [x86] locking/qspinlock, x86: Provide liveness guarantee
+    - [amd64] IB/hfi1: Remove race conditions in user_sdma send path
+    - mac80211_hwsim: fix module init error paths for netlink
+    - [x86] Input: hyper-v - fix wakeup from suspend-to-idle
+    - scsi: libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset
+    - [x86] scsi: vmw_pscsi: Rearrange code to avoid multiple calls to
+      free_irq during unload
+    - [x86] earlyprintk/efi: Fix infinite loop on some screen widths
+    - [arm64] drm/msm: Fix task dump in gpu recovery
+    - [arm64] drm/msm/gpu: Fix a couple memory leaks in debugfs
+    - [arm64] drm/msm: fix handling of cmdstream offset
+    - [arm64] drm/msm/dsi: configure VCO rate for 10nm PLL driver
+    - [arm64] drm/msm: Grab a vblank reference when waiting for commit_done
+    - drm/ttm: fix LRU handling in ttm_buffer_object_transfer
+    - drm/amdgpu: wait for IB test on first device open
+    - [arm64,armhf] net: stmmac: Move debugfs init/exit to
+      ->probe()/->remove()
+    - [amd64] net: aquantia: fix rx checksum offload bits
+    - bonding: fix 802.3ad state sent to partner when unbinding slave
+    - liquidio: read sc->iq_no before release sc
+    - nfs: don't dirty kernel pages read by direct-io
+    - SUNRPC: Fix a potential race in xprt_connect()
+    - [sparc64] sbus: char: add of_node_put()
+    - [sparc64] drivers/sbus/char: add of_node_put()
+    - [sparc64] drivers/tty: add missing of_node_put()
+    - [arm64] drm/msm/hdmi: Enable HPD after HDMI IRQ is set up
+    - [amr64] drm/msm: dpu: Don't set legacy plane->crtc pointer
+    - [arm64] drm/msm: dpu: Fix "WARNING: invalid free of devm_ allocated
+      data"
+    - [arm64] drm/msm: Fix error return checking
+    - [arm64] clk: mvebu: Off by one bugs in cp110_of_clk_get()
+    - Input: synaptics - enable SMBus for HP 15-ay000
+    - [armhf] Input: omap-keypad - fix keyboard debounce configuration
+    - libata: whitelist all SAMSUNG MZ7KM* solid-state disks
+    - macvlan: return correct error value
+    - [arm64,armhf] mv88e6060: disable hardware level MAC learning
+    - net/mlx4_en: Fix build break when CONFIG_INET is off
+    - bpf: check pending signals while verifying programs
+    - [arm*] 8814/1: mm: improve/fix ARM v7_dma_inv_range() unaligned address
+      handling
+    - [arm*] 8815/1: V7M: align v7m_dma_inv_range() with v7 counterpart
+    - [arm*] 8816/1: dma-mapping: fix potential uninitialized return
+    - [arm64,armhf] thermal: armada: fix legacy validity test sense
+    - [arm64,armhf] net: mvpp2: fix detection of 10G SFP modules
+    - [arm64,armhf] net: mvpp2: fix phylink handling of invalid PHY modes
+    - drm/amdgpu/vcn: Update vcn.cur_state during suspend
+    - [amd64,arm64] acpi/nfit: Fix user-initiated ARS to be "ARS-long" rather
+      than "ARS-short"
+    - drm/ast: Fix connector leak during driver unload
+    - cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure
+      cifs)
+    - vhost/vsock: fix reset orphans race with close timeout
+    - [x86] i2c: scmi: Fix probe error on devices with an empty SMB0001 ACPI
+      device node
+    - nvme: validate controller state before rescheduling keep alive
+    - nvmet-rdma: fix response use after free
+    - Btrfs: fix missing delayed iputs on unmount
+
+  [ Uwe Kleine-König ]
+  * [arm] Fix probing of 3rd gpio device on Armada 370.
+
+  [ Ben Hutchings ]
+  * linux-perf: Fix build-time check for unversioned files
+  * linux-perf: Fix installation directories for BPF headers and examples
+    (Closes: #916774)
+
+  [ Noah Meyerhans ]
+  * drivers/net/ethernet/amazon: Backport v2.0.2 from Linux 4.20
+
+  [ Bastian Blank ]
+  * Ignore various ABI changes.
+
+  [ Salvatore Bonaccorso ]
+  * iomap: Revert "fs/iomap.c: get/put the page in
+    iomap_page_create/release()"
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 22 Dec 2018 09:06:45 +0100
+
+linux (4.19.9-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.6
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.7
+    - [x86] KVM: LAPIC: Fix pv ipis use-before-initialization (CVE-2018-19406)
+    - mm: cleancache: fix corruption on missed inode invalidation
+      (CVE-2018-16862)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.8
+    - blk-mq: fix corruption with direct issue (Closes: #915666)
+    - userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails
+      (CVE-2018-18397)
+    - userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem
+      (CVE-2018-18397)
+    - userfaultfd: shmem: add i_size checks (CVE-2018-18397)
+    - userfaultfd: shmem: UFFDIO_COPY: set the page dirty if VM_WRITE is not
+      set (CVE-2018-18397)
+    - blk-mq: punt failed direct issue to dispatch list
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9
+    - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in
+      card.c (CVE-2018-19824)
+    - vhost/vsock: fix use-after-free in network stack callers
+      (CVE-2018-14625)
+
+  [ Marcin Juszkiewicz ]
+  * [arm64] Enable ACPI IMPI
+  * [arm64] Enable IPMI watchdog and power off support
+  * [arm64] Enable PCI Express hotplug
+  * [arm64] Enable PMU for several server cpus
+  * [arm64] Enable HiSilicon LPC for serial/ipmi access
+
+  [ Romain Perier ]
+  * [x86] Enable support for error detection and correction on the Intel
+    Pondicherry2 Integrated Memory Controller (Closes: #914946)
+  * [rt] Update to 4.19.8-rt6
+
+  [ Uwe Kleine-König ]
+  * Enable usb support for ATH10K (Closes: #915083)
+
+  [ Luca Boccassi ]
+  * debian/rules.real: Split the rules so that the [un]versioned_tools
+    knobs can be used to avoid building them. Fixes FTBFS with unversioned
+    tools disabled.
+  * perf: do not ship python2-only call-graph-from-sql script.
+  * Override Lintian warning dbg-package-missing-depends in source too.
+
+  [ Ben Hutchings ]
+  * debian/rules.real: Mark most targets as phony
+  * debian/rules: Mark more targets as phony
+  * libcpupower: Hide private function and drop it from .symbols file
+  * integrity: Disable INTEGRITY_TRUSTED_KEYRING (Closes: #865277)
+
+  [ Vagrant Cascadian ]
+  * debian/config/config: Enable Z3FOLD as a module.
+
+  [ Salvatore Bonaccorso ]
+  * Set ABI to 1
+
+  [ Nicolas Schier ]
+  * ovl: permit overlayfs mounts in user namespaces (Closes: #913880)
+
+  [ Hilko Bengen ]
+  * Add patches to build libbpf.so with SONAME, link against libelf
+  * Add versioned libbpf, libbpf-dev package (Closes: #914428)
+
+  [ Hans van Kranenburg ]
+  * [x86] Add patch to repair booting as Xen dom0 (Closes: #914951)
+  * [x86] Add patches to support booting a Xen PVH guest via Grub2
+
+  [ Christoph Anton Mitterer ]
+  * crypto: Enable MORUS and AEGIS AEAD ciphers (Closes: #914136)
+  * [amd64]: Enable AES-NI/SSE2/AVX2 optimised implementations of the MORUS
+    and AEGIS AEAD ciphers
+
+  [ Bastian Blank ]
+  * Enable NFT_CONNLIMIT, NFT_TUNNEL, NFT_SOCKET, NFT_OSF, NFT_TPROXY,
+    IP_VS_MH.
+  * Enable netfilter flow table support.
+  * [x86] Enable DRM_XEN_FRONTEND.
+  * Enable EFI_BOOTLOADER_CONTROL, EFI_CAPSULE_LOADER.
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 16 Dec 2018 19:45:54 +0100
+
+linux (4.19.5-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.19
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.1
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.2
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.3
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.4
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.5
+
+  [ Ben Hutchings ]
+  * linux-perf: Enable verbose output for build-time feature detection
+  * udeb: Define mtd-core-modules package to contain MTD core if not built-in
+  * udeb: Move MTD core from nic-modules to mtd-core-modules
+  * debian/changelog: Move older entries to changelog.old
+  * debian/rules: Checksum only the source name and version from
+    debian/changelog
+  * Move generation of CONFIG_BUILD_SALT to gencontrol.py
+  * [x86] hyperv-daemons: Make all services conditional on device existence
+  * debian/rules.real: Fix build failure with pkg.linux.nosource profile
+  * debian/source/options: Delete redundant compression setting; satisfy
+    lintian
+  * Documentation/media: uapi: Explicitly say there are no Invariant Sections
+    (Closes: #698668)
+
+  [ Karsten Merker ]
+  * [riscv64] Build a kernel image and udebs for riscv64 (Closes: #908161)
+
+  [ Uwe Kleine-König ]
+  * [armhf,arm64] enable SND_BCM2835 as a module (Closes: #911121)
+  * Enable Orange filesystem (Closes: #911743)
+  * [arm64] Enable hns3 network driver as a module. (Closes: #914422)
+
+  [ Noah Meyerhans ]
+  * [cloud-amd64] Enable Amazon ENA ethernet driver (Closes: #910049)
+
+  [ Romain Perier ]
+  * [rt] Update to 4.19.1-rt3
+  * [rt] Update patch arm-disable-NEON-in-kernel-mode.patch, so it can be
+    applied onto 4.19.2
+  * [rt] Update patch
+    irq-allow-disabling-of-softirq-processing-in-irq-thread-context.patch, so
+    it can be applied onto 4.19.2
+  * [amd64] Enable AMD pinctrl driver (Closes: #908954)
+  * Enable Diffie-Hellman operations on retained keys (Closes: #911998)
+  * Update patch features/all/lockdown/enable-cold-boot-attack-mitigation.patch,
+    so it can be applied onto 4.19.2
+  * [x86] Enable DisplayPort CEC-Tunneling-over-AUX HDMI support
+    (Closes: #913199)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 27 Nov 2018 20:06:42 +0100
+
+linux (4.19~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Uwe Kleine-König ]
+  * [armhf] enable MVNETA_BM_ENABLE and CAN_FLEXCAN as a module
+  * enable NET_SCH_CAKE as a module (Closes: #908709)
+  * enable HID_NTI as a module (Closes: #910260)
+
+  [ Ben Hutchings ]
+  * linux-kbuild: Include scripts/subarch.include (Closes: #910348)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 07 Oct 2018 23:48:27 +0100
+
+linux (4.19~rc6-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [ppc64el] udeb: Fix relative #include filenames in kernel-image module
+    list (really fixes FTBFS?)
+  * debian/bin, debian/lib/python: Fix most errors reported by pycodestyle
+  * debian/bin, debian/rules.real: Add symlink to Python package directory
+    instead of editing path
+  * debian/bin, debian/lib/python: Clean up imports based on pyflakes report
+  * debian/bin, debian/lib/python: Delete write-only vars reported by pyflakes
+  * debian/lib/python/debian_linux/gencontrol.py: Delete broken methods
+  * debian/lib/python/debian_linux/config.py: Fix undefined exception type
+  * Add Python static checks and unit tests to autopkgtest tests
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 03 Oct 2018 18:57:08 +0100
+
+linux (4.19~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * debian/control: Add arch-qualification to build-dependencies for linux-perf
+    (Closes: #908519)
+  * debian/control: Build-depend on libunwind-dev instead of libunwind8-dev
+  * [hppa,mips*,powerpc*,sh4] debian/control: Build-depend on libunwind-dev for
+    linux-perf
+  * debian/control: Build-depend on libnuma-dev for linux-perf on all arches
+  * debian/control: Remove "cross" from profiles for build-dep on libssl-dev
+  * [mips64*] debian/control: Build-depend on gcc-multilib for linux-perf
+  * debian/lib/python: Use raw strings for all regexes
+  * debian/control: Fix restrictions for build-deps on asciidoctor and
+    patchutils
+  * Add support for specifying build-dependencies in binary package templates
+  * debian/templates: Move various build-dependencies to binary package
+    templates
+  * linux-perf: Fix generation of Perl and Python interpreter dependencies
+    (Closes: #908547)
+  * lockdep, lib{cpupower,lockdep}-dev: Remove bogus deps on ${shlibs:Depends}
+  * debian/rules.d/tools/power/linux-cpupower: Add "+" to recursive make
+    commands
+  * tools: x86_energy_perf_policy: Fix "uninitialized variable" warnings at -O2
+  * tools: turbostat: Add checks for failure of fgets() and fscanf()
+  * debian/control: Build-depend on texlive-latex-{base,extra}, dvipng for
+    linux-doc
+  * debian/rules{,.real}: Use /usr/share/dpkg/architecture.mk
+  * debian/signing_templates/rules: Use /usr/share/dpkg/architecture.mk
+  * linux-image-*-signed-template: Add ${misc:Depends} to Depends
+  * linux-image-*-signed-template: Include changelog and copyright files
+  * linux-image-*-signed-template: Depend on dpkg-dev
+  * linux-image-*-signed-template: Override lintian warnings about non-
+    executable scripts
+  * [ia64] udeb: Fix priority of sn-modules
+  * Revert "Revert "net: increase fragment memory usage limits"", as 4.19
+    includes a better fix for CVE-2018-5391
+  * debian/patches: Add Forwarded fields to several patches
+  * [ppc64el] udeb: Fix relative #include filenames in module lists (fixes
+    FTBFS)
+  * [ppc64] udeb: Revert accidental change to nic-pcmcia-modules dependencies
+    (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 18 Sep 2018 15:52:02 +0100
+
+linux (4.19~rc3-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [s390x] linux-image: Install compressed kernel image (fixes FTBFS)
+  * [powerpc*] boot: Fix missing crc32poly.h when building with KERNEL_XZ
+    (fixes FTBFS)
+  * [x86] boot: Fix EFI stub alignment
+  * wireless: Update "wireless: Disable regulatory.db direct loading" for
+    4.19-rc3
+  * aufs: Update support patchset to aufs4.x-rcN 20180910
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 10 Sep 2018 20:13:55 +0100
+
+linux (4.19~rc2-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Disable until it is updated for Linux 4.19
+  * debian/rules.d: Update for move of bin2c back up to scripts
+  * locking/lockdep: Delete unnecesary #include (fixes liblockdep build)
+  * [hppa] debian/control: Simplify build-dependencies for 64-bit toolchain
+  * Compile with gcc-8 on all architectures
+  * udeb: Merge configuration directories and files across architectures
+  * [alpha,hppa] udeb: Remove incorrect dependency overrides
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 03 Sep 2018 21:34:41 +0100
+
+linux (4.18.20-2) unstable; urgency=medium
+
+  * linux-kbuild: Include scripts/subarch.include (Closes: #910348)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 23 Nov 2018 19:15:55 +0000
+
+linux (4.18.20-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.11
+    - gso_segment: Reset skb->mac_len after modifying network header
+    - ipv6: fix possible use-after-free in ip6_xmit()
+    - net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT
+    - [alpha, hppa, x86] net: hp100: fix always-true check for link up state
+    - pppoe: fix reception of frames with no mac header
+    - qmi_wwan: set DTR for modems in forced USB2 mode
+    - udp4: fix IP_CMSG_CHECKSUM for connected sockets
+    - neighbour: confirm neigh entries when ARP packet is received
+    - udp6: add missing checks on edumux packet processing
+    - net/sched: act_sample: fix NULL dereference in the data path
+    - hv_netvsc: fix schedule in RCU context
+    - [arm64, armhf] net: dsa: mv88e6xxx: Fix ATU Miss Violation
+    - socket: fix struct ifreq size in compat ioctl
+    - bnxt_en: Fix VF mac address regression.
+    - ipv6: use rt6_info members when dst is set in rt6_fill_node
+    - net/ipv6: do not copy dst flags on rt init
+    - [arm64, armhf] net: mvpp2: let phylink manage the carrier state
+    - net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags
+    - NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
+    - NFC: Fix the number of pipes
+    - ASoC: uapi: fix sound/skl-tplg-interface.h userspace compilation errors
+    - ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at
+      error path
+    - ALSA: bebob: use address returned by kmalloc() instead of kernel stack for
+      streaming DMA mapping
+    - [powerpc*, mips*, x86, alpha, sparc*] ALSA: emu10k1: fix possible info
+      leak to userspace on SNDRV_EMU10K1_IOCTL_INFO
+    - ALSA: firewire-digi00x: fix memory leak of private data
+    - ALSA: firewire-tascam: fix memory leak of private data
+    - ALSA: fireworks: fix memory leak of response buffer at error path
+    - ALSA: oxfw: fix memory leak for model-dependent data at error path
+    - ALSA: oxfw: fix memory leak of discovered stream formats at error path
+    - ALSA: oxfw: fix memory leak of private data
+    - mtd: devices: m25p80: Make sure the buffer passed in op is DMA-able
+    - [x86] platform: dell-smbios-wmi: Correct a memory leak
+    - [x86] platform: alienware-wmi: Correct a memory leak
+    - xen/netfront: don't bug in case of too many frags
+    - Revert "PCI: Add ACS quirk for Intel 300 series"
+    - crypto: x86/aegis,morus - Do not require OSXSAVE for SSE2
+    - fork: report pid exhaustion correctly
+    - mm: disable deferred struct page for 32-bit arches
+    - mm: shmem.c: Correctly annotate new inodes for lockdep
+    - bpf/verifier: disallow pointer subtraction
+    - Revert "ubifs: xattr: Don't operate on deleted inodes"
+    - libata: mask swap internal and hardware tag
+    - ocfs2: fix ocfs2 read block panic
+    - drm/i915/bdw: Increase IPS disable timeout to 100ms
+    - drm/nouveau: Reset MST branching unit before enabling
+    - drm/nouveau: Only write DP_MSTM_CTRL when needed
+    - drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend()
+    - drm/nouveau: Fix deadlocks in nouveau_connector_detect()
+    - drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload
+    - drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement
+    - drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM
+      requests
+    - drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in
+      connector_detect()
+    - drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early
+    - drm/vc4: Fix the "no scaling" case on multi-planar YUV formats
+    - drm: udl: Destroy framebuffer only if it was initialized
+    - drm/amdgpu: add new polaris pci id
+    - tty: vt_ioctl: fix potential Spectre v1
+    - ext4: check to make sure the rename(2)'s destination is not freed
+    - ext4: avoid divide by zero fault when deleting corrupted inline
+      directories
+    - ext4: avoid arithemetic overflow that can trigger a BUG
+    - ext4: recalucate superblock checksum after updating free blocks/inodes
+    - ext4: fix online resize's handling of a too-small final block group
+    - ext4: fix online resizing for bigalloc file systems with a 1k block size
+    - ext4: don't mark mmp buffer head dirty
+    - ext4: show test_dummy_encryption mount option in /proc/mounts
+    - ext4, dax: add ext4_bmap to ext4_dax_aops
+    - ext4, dax: set ext4_dax_aops for dax files
+    - sched/fair: Fix vruntime_normalized() for remote non-migration wakeup
+    - [x86] vmw_balloon: include asm/io.h
+    - iw_cxgb4: only allow 1 flush on user qps
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.12
+    - tsl2550: fix lux1_input error in low light
+    - vmci: type promotion bug in qp_host_get_user_memory()
+    - [x86] numa_emulation: Fix emulated-to-physical node mapping
+    - staging: rts5208: fix missing error check on call to rtsx_write_register
+    - [armhf] power: supply: axp288_charger: Fix initial
+      constant_charge_current value
+    - [sh4] serial: sh-sci: Stop RX FIFO timer during port shutdown
+    - [arm64] power: vexpress: fix corruption in notifier registration
+    - [x86] iommu/amd: make sure TLB to be flushed before IOVA freed
+    - Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
+    - USB: serial: kobil_sct: fix modem-status error handling
+    - 6lowpan: iphc: reset mac_header after decompress to fix panic
+    - [s390x] mm: correct allocate_pgste proc_handler callback
+    - power: remove possible deadlock when unregistering power_supply
+    - cxgb4: Fix the condition to check if the card is T5
+    - RDMA/bnxt_re: Fix a couple off by one bugs
+    - RDMA/i40w: Hold read semaphore while looking after VMA
+    - RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c
+    - IB/core: type promotion bug in rdma_rw_init_one_mr()
+    - IB/mlx4: Test port number before querying type.
+    - vhost_net: Avoid tx vring kicks during busyloop
+    - IB/mlx5: Fix GRE flow specification
+    - include/rdma/opa_addr.h: Fix an endianness issue
+    - x86/tsc: Add missing header to tsc_msr.c
+    - ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled
+    - [x86] entry/64: Add two more instruction suffixes
+    - scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
+      buffer size
+    - scsi: klist: Make it safe to use klists in atomic context
+    - [powerpc*] scsi: ibmvscsi: Improve strings handling
+    - scsi: target: Avoid that EXTENDED COPY commands trigger lock inversion
+    - usb: wusbcore: security: cast sizeof to int for comparison
+    - ath10k: sdio: use same endpoint id for all packets in a bundle
+    - ath10k: sdio: set skb len for all rx packets
+    - [powerpc*] powerpc/powernv/ioda2: Reduce upper limit for DMA window size
+    - [x86] platform/x86: asus-wireless: Fix uninitialized symbol usage
+    - [x86] ACPI / button: increment wakeup count only when notified
+    - alarmtimer: Prevent overflow for relative nanosleep (CVE-2018-13053)
+    - [s390x] s390/dasd: correct numa_node in dasd_alloc_queue
+    - [s390x] s390/scm_blk: correct numa_node in scm_blk_dev_setup
+    - posix-timers: Make forward callback return s64
+    - posix-timers: Sanitize overrun handling (CVE-2018-12896)
+    - [powerpc*] ALSA: snd-aoa: add of_node_put() in error path
+    - ath10k: use locked skb_dequeue for rx completions
+    - [armhf] media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial
+      data
+    - staging: android: ashmem: Fix mmap size validation
+    - staging: mt7621-eth: Fix memory leak in mtk_add_mac() error path
+    - [powerpc*, x86, alpha, m68k, hppa] drivers/tty: add error handling for
+      pcmcia_loop_config
+    - [arm64] dts: renesas: salvator-common: Fix adv7482 decimal unit addresses
+    - [x86] media: tm6000: add error handling for dvb_register_adapter
+    - [powerpc*, mips*, arm64, x86, alpha] ALSA: hda: Add AZX_DCAPS_PM_RUNTIME
+      for AMD Raven Ridge
+    - ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
+    - [armhf] drm/sun4i: Enable DW HDMI PHY clock
+    - [armhf] drm/sun4i: Fix releasing node when enumerating enpoints
+    - ath10k: transmit queued frames after processing rx packets
+    - mt76x2: fix mrr idx/count estimation in mt76x2_mac_fill_tx_status()
+    - rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
+    - brcmsmac: fix wrap around in conversion from constant to s16
+    - bitfield: fix *_encode_bits()
+    - [arm64]wlcore: Add missing PM call for
+      wlcore_cmd_wait_for_event_or_timeout()
+    - [armhf] drm/omap: gem: Fix mm_list locking
+    - [armhf] mvebu: declare asm symbols as character arrays in pmsu.c
+    - RDMA/uverbs: Don't overwrite NULL pointer with ZERO_SIZE_PTR
+    - HID: hid-ntrig: add error handling for sysfs_create_group
+    - [x86] HID: i2c-hid: Use devm to allocate i2c_hid struct
+    - [arm64] dts: renesas: Fix VSPD registers range
+    - drm/v3d: Take a lock across GPU scheduler job creation and queuing.
+    - scsi: bnx2i: add error handling for ioremap_nocache
+    - [arm64] scsi: hisi_sas: Fix the conflict between dev gone and host reset
+    - [armhf] spi: orion: fix CS GPIO handling again
+    - scsi: megaraid_sas: Update controller info during resume
+    - [x86] ASoC: Intel: bytcr_rt5640: Fix Acer Iconia 8 over-current detect
+      threshold
+    - [x86] EDAC, i7core: Fix memleaks and use-after-free on probe and remove
+    - [x86, arm64, armhf] ASoC: dapm: Fix potential DAI widget pointer deref
+      when linking DAIs
+    - module: exclude SHN_UNDEF symbols from kallsyms api
+    - nfsd: fix corrupted reply to badly ordered compound
+    - [mips*, arm64, x86] EDAC: Fix memleak in module init error path
+    - ath10k: fix incorrect size of dma_free_coherent in
+      ath10k_ce_alloc_src_ring_64
+    - ath10k: snoc: use correct bus-specific pointer in RX retry
+    - fs/lock: skip lock owner pid translation in case we are in init_pid_ns
+    - ath10k: fix memory leak of tpc_stats
+    - Input: xen-kbdfront - fix multi-touch XenStore node's locations
+    - drm/vc4: Add missing formats to vc4_format_mod_supported().
+    - [armhf] ARM: dts: dra7: fix DCAN node addresses
+    - drm/vc4: plane: Expand the lower bits by repeating the higher bits
+    - block: fix deadline elevator drain for zoned block devices
+    - [x86] mm: Expand static page table for fixmap space
+    - [armhf] serial: imx: restore handshaking irq for imx1
+    - [arm64] serial: mvebu-uart: Fix reporting of effective CSIZE to userspace
+    - [x86] intel_th: Fix device removal logic
+    - [x86] intel_th: Fix resource handling for ACPI glue layer
+    - spi: tegra20-slink: explicitly enable/disable clock
+    - [mips*, 'arm64', x86, armhf] regulator: fix crash caused by null driver
+      data
+    - [mips*, 'arm64', x86, armhf] regulator: Fix 'do-nothing' value for
+      regulators without suspend state
+    - USB: fix error handling in usb_driver_claim_interface()
+    - USB: handle NULL config in usb_find_alt_setting()
+    - usb: core: safely deal with the dynamic quirk lists
+    - [armhf] usb: musb: dsps: do not disable CPPI41 irq in driver teardown
+    - USB: usbdevfs: sanitize flags more
+    - USB: usbdevfs: restore warning for nonsensical flags
+    - Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in
+      service_outstanding_interrupt()"
+    - USB: remove LPM management from usb_driver_claim_interface()
+    - uaccess: Fix is_source param for check_copy_size() in
+      copy_to_iter_mcsafe()
+    - filesystem-dax: Fix use of zero page
+    - Input: elantech - enable middle button of touchpad on ThinkPad P72
+    - IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop
+    - IB/hfi1: Fix SL array bounds check
+    - IB/hfi1: Invalid user input can result in crash
+    - IB/hfi1: Fix context recovery when PBC has an UnsupportedVL
+    - IB/hfi1: Fix destroy_qp hang after a link down
+    - [x86] ACPI / hotplug / PCI: Don't scan for non-hotplug bridges if slot
+      is not bridge
+    - RDMA/uverbs: Atomically flush and mark closed the comp event queue
+    - ARM: OMAP2+: Fix null hwmod for ti-sysc debug
+    - ARM: OMAP2+: Fix module address for modules using mpu_rt_idx
+    - bus: ti-sysc: Fix module register ioremap for larger offsets
+    - qed: Wait for ready indication before rereading the shmem
+    - qed: Wait for MCP halt and resume commands to take place
+    - qed: Prevent a possible deadlock during driver load and unload
+    - qed: Avoid sending mailbox commands when MFW is not responsive
+    - thermal: of-thermal: disable passive polling when thermal zone is disabled
+    - isofs: reject hardware sector size > 2048 bytes
+    - mmc: atmel-mci: fix bad logic of sg_copy_{from,to}_buffer conversion
+    - mmc: android-goldfish: fix bad logic of sg_copy_{from,to}_buffer
+      conversion
+    - bus: ti-sysc: Fix no_console_suspend handling
+    - [armhf] dts: omap4-droid4: fix vibrations on Droid 4
+    - bpf, sockmap: fix sock_hash_alloc and reject zero-sized keys
+    - bpf, sockmap: fix sock hash count in alloc_sock_hash_elem
+    - tls: possible hang when do_tcp_sendpages hits sndbuf is full case
+    - bpf: sockmap: write_space events need to be passed to TCP handler
+    - drm/amdgpu: fix VM clearing for the root PD
+    - drm/amdgpu: fix preamble handling
+    - amdgpu: fix multi-process hang issue
+    - net/ncsi: Fixup .dumpit message flags and ID check in Netlink handler
+    - tcp_bbr: add bbr_check_probe_rtt_done() helper
+    - tcp_bbr: in restart from idle, see if we should exit PROBE_RTT
+    - net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES
+    - net: hns: fix skb->truesize underestimation
+    - tools: bpftool: return from do_event_pipe() on bad arguments
+    - e1000: check on netif_running() before calling e1000_up()
+    - e1000: ensure to free old tx/rx rings in set_ringparam()
+    - ixgbe: fix driver behaviour after issuing VFLR
+    - i40e: Fix for Tx timeouts when interface is brought up if DCB is enabled
+    - i40e: fix condition of WARN_ONCE for stat strings
+    - [arm64] crypto: cavium/nitrox - fix for command corruption in queue full
+      case with backlog submissions.
+    - hwmon: (ina2xx) fix sysfs shunt resistor read access
+    - hwmon: (adt7475) Make adt7475_read_word() return errors
+    - Revert "ARM: dts: imx7d: Invert legacy PCI irq mapping"
+    - drm/amdgpu: Enable/disable gfx PG feature in rlc safe mode
+    - drm/amdgpu: Update power state at the end of smu hw_init.
+    - ata: ftide010: Add a quirk for SQ201
+    - nvme-fcloop: Fix dropped LS's to removed target port
+    - [armhf] dts: omap4-droid4: Fix emmc errors seen on some devices
+    - drm/amdgpu: Need to set moved to true when evict bo
+    - [arm64, armhf] smccc-1.1: Make return values unsigned long
+    - [arm64, armhf] smccc-1.1: Handle function result as parameters
+    - i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus
+    - clk: x86: Set default parent to 48Mhz
+    - [x86] pti: Fix section mismatch warning/error
+    - [powerpc*] KVM: PPC: Book3S HV: Fix guest r11 corruption with POWER9 TM
+      workarounds
+    - [powerpc*] fix csum_ipv6_magic() on little endian platforms
+    - [powerpc*] pkeys: Fix reading of ibm, processor-storage-keys property
+    - [powerpc*] pseries: Fix unitialized timer reset on migration
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.13
+    - mac80211: Run TXQ teardown code before de-registering interfaces
+    - mac80211_hwsim: require at least one channel
+    - Btrfs: fix unexpected failure of nocow buffered writes after snapshotting
+      when low on space
+    - [powerpc*] KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate
+      function
+    - cfg80211: remove division by size of sizeof(struct ieee80211_wmm_rule)
+    - btrfs: btrfs_shrink_device should call commit transaction at the end
+    - scsi: csiostor: add a check for NULL pointer after kmalloc()
+    - scsi: csiostor: fix incorrect port capabilities
+    - scsi: libata: Add missing newline at end of file
+    - scsi: aacraid: fix a signedness bug
+    - bpf, sockmap: fix potential use after free in bpf_tcp_close
+    - bpf, sockmap: fix psock refcount leak in bpf_tcp_recvmsg
+    - bpf: sockmap, decrement copied count correctly in redirect error case
+    - mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
+    - mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
+    - cfg80211: make wmm_rule part of the reg_rule structure
+    - mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom
+    - nl80211: Fix nla_put_u8 to u16 for NL80211_WMMR_TXOP
+    - nl80211: Pass center frequency in kHz instead of MHz
+    - bpf: fix several offset tests in bpf_msg_pull_data
+    - mac80211: mesh: fix HWMP sequence numbering to follow standard
+    - mac80211: avoid kernel panic when building AMSDU from non-linear SKB
+    - bpf: fix msg->data/data_end after sg shift repair in bpf_msg_pull_data
+    - bpf: fix shift upon scatterlist ring wrap-around in bpf_msg_pull_data
+    - bpf: fix sg shift repair start offset in bpf_msg_pull_data
+    - [arm64] net: hns: add the code for cleaning pkt in chip
+    - [arm64] net: hns: add netif_carrier_off before change speed and duplex
+    - [arm64, armhf] net: mvpp2: initialize port of_node pointer
+    - cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
+    - mac80211: do not convert to A-MSDU if frag/subframe limited
+    - mac80211: always account for A-MSDU header changes
+    - Revert "blk-throttle: fix race between blkcg_bio_issue_check() and
+      cgroup_rmdir()"
+    - md/raid5-cache: disable reshape completely
+    - RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
+    - bpf: Fix bpf_msg_pull_data()
+    - bpf: avoid misuse of psock when TCP_ULP_BPF collides with another ULP
+    - fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
+    - mac80211: fix an off-by-one issue in A-MSDU max_subframe computation
+    - cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
+    - mac80211: fix WMM TXOP calculation
+    - mac80211: fix a race between restart and CSA flows
+    - mac80211: Fix station bandwidth setting after channel switch
+    - mac80211: don't Tx a deauth frame if the AP forbade Tx
+    - mac80211: shorten the IBSS debug messages
+    - [powerpc*] net/ibm/emac: wrong emac_calc_base call was used by typo
+    - ceph: avoid a use-after-free in ceph_destroy_options()
+    - firmware: arm_scmi: fix divide by zero when sustained_perf_level is zero
+    - afs: Fix cell specification to permit an empty address list
+    - mm: madvise(MADV_DODUMP): allow hugetlbfs pages
+    - bpf: 32-bit RSH verification must truncate input before the ALU op
+      (CVE-2018-18445)
+    - netfilter: xt_cluster: add dependency on conntrack module
+    - [x86] HID: intel-ish-hid: Enable Sunrise Point-H ish driver
+    - HID: add support for Apple Magic Keyboards
+    - HID: hid-saitek: Add device ID for RAT 7 Contagion
+    - scsi: iscsi: target: Set conn->sess to NULL when
+      iscsi_login_set_conn_values fails
+    - scsi: iscsi: target: Fix conn_ops double free
+    - perf annotate: Properly interpret indirect call
+    - perf evsel: Fix potential null pointer dereference in
+      perf_evsel__new_idx()
+    - perf util: Fix bad memory access in trace info.
+    - [powerpc*] perf probe: Ignore SyS symbols irrespective of endianness
+    - [arm64] perf annotate: Fix parsing aarch64 branch instructions after
+      objdump update
+    - netfilter: nf_tables: release chain in flushing set
+    - HID: sensor-hub: Restore fixup for Lenovo ThinkPad Helix 2 sensor hub
+      report
+    - USB: yurex: Check for truncation in yurex_read()
+    - nvmet-rdma: fix possible bogus dereference under heavy load
+    - net/mlx5: Consider PCI domain in search for next dev
+    - [x86] HID: i2c-hid: Don't reset device upon system resume
+    - dm raid: fix reshape race on small devices
+    - drm/nouveau: fix oops in client init failure path
+    - drm/nouveau/mmu: don't attempt to dereference vmm without valid instance
+      pointer
+    - drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS
+    - drm/nouveau/disp: fix DP disable race
+    - drm/nouveau/disp/gm200-: enforce identity-mapped SOR assignment for
+      LVDS/eDP panels
+    - dm raid: fix stripe adding reshape deadlock
+    - dm raid: fix rebuild of specific devices by updating superblock
+    - dm raid: fix RAID leg rebuild errors
+    - r8169: set TxConfig register after TX / RX is enabled, just like RxConfig
+    - fs/cifs: suppress a string overflow warning
+    - net: ena: fix surprise unplug NULL dereference kernel crash
+    - net: ena: fix driver when PAGE_SIZE == 64kB
+    - net: ena: fix device destruction to gracefully free resources
+    - net: ena: fix potential double ena_destroy_device()
+    - net: ena: fix missing lock during device destruction
+    - net: ena: fix missing calls to READ_ONCE
+    - sched/topology: Set correct NUMA topology type
+    - dm thin metadata: try to avoid ever aborting transactions
+    - netfilter: nfnetlink_queue: Solve the NFQUEUE/conntrack clash for
+      NF_REPEAT
+    - netfilter: xt_hashlimit: use s->file instead of s->private
+    - drm/amdgpu: Fix SDMA hang in prt mode v2
+    - drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk
+    - r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
+    - [s390x] qeth: use vzalloc for QUERY OAT buffer
+    - [s390x] qeth: don't dump past end of unknown HW header
+    - cifs: read overflow in is_valid_oplock_break()
+    - asm-generic: io: Fix ioport_map() for !CONFIG_GENERIC_IOMAP &&
+      CONFIG_INDIRECT_PIO
+    - xen/manage: don't complain about an empty value in control/sysrq node
+    - [mips*, x86, s390x] xen: avoid crash in disable_hotplug_cpu
+    - new primitive: discard_new_inode()
+    - vfs: don't evict uninitialized inode
+    - ovl: set I_CREATING on inode being created
+    - ovl: fix access beyond unterminated strings
+    - ovl: fix memory leak on unlink of indexed file
+    - ovl: fix format of setxattr debug
+    - sysfs: Do not return POSIX ACL xattrs via listxattr
+    - b43: fix DMA error related regression with proprietary firmware
+    - firmware: Fix security issue with request_firmware_into_buf()
+    - firmware: Always initialize the fw_priv list object
+    - smb2: fix missing files in root share directory listing
+    - [x86] iommu/amd: Clear memory encryption mask from physical address
+    - ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760
+    - [x86] crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
+    - crypto: chelsio - Fix memory corruption in DMA Mapped buffers.
+    - [arm64, armhf, x86, powerpc*] gpiolib: Free the last requested descriptor
+    - [x86] Drivers: hv: vmbus: Use get/put_cpu() in vmbus_connect()
+    - proc: restrict kernel stack dumps to root (CVE-2018-17972)
+    - ocfs2: fix locking for res->tracking and dlm->tracking_list
+    - [x86] HID: i2c-hid: disable runtime PM operations on hantick touchpad
+    - ixgbe: check return value of napi_complete_done()
+    - dm thin metadata: fix __udivdi3 undefined on 32-bit
+    - Revert "drm/amd/pp: Send khz clock values to DC for smu7/8"
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.14
+    - perf/core: Add sanity check to deal with pinned event failure
+    - mm: migration: fix migration of huge PMD shared pages
+    - mm, thp: fix mlocking THP page with migration enabled
+    - mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly
+    - [x86] KVM: fix L1TF's MMIO GFN calculation
+    - [x86] KVM: VMX: check for existence of secondary exec controls before
+      accessing
+    - blk-mq: I/O and timer unplugs are inverted in blktrace
+    - [powerpc*, mips*, arm64, x86, alpha, armhf] mmc: core: Fix debounce time
+      to use microseconds
+    - [powerpc*, mips*, arm64, x86, alpha, armhf] mmc: slot-gpio: Fix debounce
+      time to use miliseconds again
+    - mac80211: allocate TXQs for active monitor interfaces
+    - drm/amdgpu: Fix vce work queue was not cancelled when suspend
+    - [x86] vdso: Fix asm constraints on vDSO syscall fallbacks
+    - [x86] vdso: Only enable vDSO retpolines when enabled and supported
+    - [x86] vdso: Fix vDSO syscall fallback asm constraint regression
+    - [powerpc*, mips*, arm64, x86, s390x, armhf, sparc, hppa] PCI: Reprogram
+      bridge prefetch registers on resume
+    - mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys
+    - dm mpath: fix attached_handler_name leak and dangling hw_handler_name
+      pointer
+    - dm cache metadata: ignore hints array being too small during resize
+    - dm cache: fix resize crash if user doesn't reload cache table
+    - USB: serial: simple: add Motorola Tetra MTP6550 id
+    - USB: serial: option: improve Quectel EP06 detection
+    - USB: serial: option: add two-endpoints device-id flag
+    - usb: cdc_acm: Do not leak URB buffers
+    - tty: Drop tty->count on tty_reopen() failure
+    - [powerpc*] Avoid code patching freed init sections
+    - [powerpc*] lib: fix book3s/32 boot failure due to code patching
+    - f2fs: fix invalid memory access
+    - tipc: call start and done ops directly in __tipc_nl_compat_dumpit()
+    - ubifs: Check for name being NULL while mounting
+    - rds: rds_ib_recv_alloc_cache() should call alloc_percpu_gfp() instead
+    - ath10k: fix scan crash due to incorrect length calculation
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.15
+    - bnxt_en: Fix TX timeout during netpoll.
+    - bnxt_en: free hwrm resources, if driver probe fails.
+    - bonding: avoid possible dead-lock
+    - ip6_tunnel: be careful when accessing the inner header
+    - ip_tunnel: be careful when accessing the inner header
+    - ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
+    - ipv6: take rcu lock in rawv6_send_hdrinc()
+    - [armhf] net: dsa: bcm_sf2: Call setup during switch resume
+    - [arm64] net: hns: fix for unmapping problem when SMMU is on
+    - net: ipv4: update fnhe_pmtu when first hop's MTU changes
+    - net/ipv6: Display all addresses in output of /proc/net/if_inet6
+    - netlabel: check for IPV4MASK in addrinfo_get
+    - [armhf,arm64] net: mvpp2: Extract the correct ethtype from the skb for
+      tx csum offload
+    - [armhf,arm64] net: mvpp2: fix a txq_done race condition
+    - net: sched: Add policy validation for tc attributes
+    - net: sched: cls_u32: fix hnode refcounting
+    - net/usb: cancel pending work when unbinding smsc75xx
+    - qlcnic: fix Tx descriptor corruption on 82xx devices
+    - qmi_wwan: Added support for Gemalto's Cinterion ALASxx WWAN interface
+    - rtnetlink: fix rtnl_fdb_dump() for ndmsg header
+    - rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096
+    - sctp: update dst pmtu with the correct daddr
+    - team: Forbid enslaving team device to itself
+    - tipc: fix flow control accounting for implicit connect
+    - udp: Unbreak modules that rely on external __skb_recv_udp() availability
+    - tun: remove unused parameters
+    - tun: initialize napi_mutex unconditionally
+    - tun: napi flags belong to tfile
+    - [armhf,arm64] net: stmmac: Fixup the tail addr setting in xmit path
+    - net/packet: fix packet drop as of virtio gso
+    - [armhf] net: dsa: bcm_sf2: Fix unbind ordering
+    - net/mlx5e: Set vlan masks for all offloaded TC rules
+    - net: aquantia: memory corruption on jumbo frames
+    - net/mlx5: E-Switch, Fix out of bound access when setting vport rate
+    - bonding: pass link-local packets to bonding master also.
+    - bonding: fix warning message
+    - [armhf,arm64] net: stmmac: Rework coalesce timer and fix multi-queue
+      races
+    - nfp: avoid soft lockups under control message storm
+    - bnxt_en: don't try to offload VLAN 'modify' action
+    - net-ethtool: ETHTOOL_GUFO did not and should not require CAP_NET_ADMIN
+    - net: phy: phylink: fix SFP interface autodetection
+    - sfp: fix oops with ethtool -m
+    - tcp/dccp: fix lockdep issue when SYN is backlogged
+    - inet: make sure to grab rcu_read_lock before using ireq->ireq_opt
+    - [armhf] net: dsa: b53: Keep CPU port as tagged in all VLANs
+    - rtnetlink: Fail dump if target netnsid is invalid
+    - bnxt_en: Fix VNIC reservations on the PF.
+    - net: ipv4: don't let PMTU updates increase route MTU
+    - net/mlx5: Check for SQ and not RQ state when modifying hairpin SQ
+    - bnxt_en: Fix enables field in HWRM_QUEUE_COS2BW_CFG request
+    - bnxt_en: get the reduced max_irqs by the ones used by RDMA
+    - net/ipv6: Remove extra call to ip6_convert_metrics for multipath case
+    - net/ipv6: stop leaking percpu memory in fib6 info
+    - qed: Fix shmem structure inconsistency between driver and the mfw.
+    - r8169: fix network stalls due to missing bit TXCFG_AUTO_FIFO
+    - r8169: set RX_MULTI_EN bit in RxConfig for 8168F-family chips
+    - vxlan: fill ttl inherit info
+    - ASoC: dapm: Fix NULL pointer deference on CODEC to CODEC DAIs
+    - hwmon: (nct6775) Fix access to fan pulse registers
+    - [x86] ASoC: AMD: Ensure reset bit is cleared before configuring
+    - Bluetooth: SMP: Fix trying to use non-existent local OOB data
+    - Bluetooth: Use correct tfm to generate OOB data
+    - Bluetooth: hci_ldisc: Free rw_semaphore on close
+    - [armhf] mfd: omap-usb-host: Fix dts probe of children
+    - [powerpc*] KVM: Book3S HV: Don't use compound_order to determine host
+      mapping size
+    - scsi: iscsi: target: Don't use stack buffer for scatterlist
+    - scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted()
+    - sound: enable interrupt after dma buffer initialization
+    - sound: don't call skl_init_chip() to reset intel skl soc
+    - bpf: btf: Fix end boundary calculation for type section
+    - bpf: use __GFP_COMP while allocating page
+    - hwmon: (nct6775) Fix virtual temperature sources for NCT6796D
+    - hwmon: (nct6775) Fix RPM output for fan7 on NCT6796D
+    - [armhf,arm64] stmmac: fix valid numbers of unicast filter entries
+    - hwmon: (nct6775) Use different register to get fan RPM for fan7
+    - [x86] PCI: hv: support reporting serial number as slot information
+    - [x86] clk: add "ether_clk" alias for Bay Trail / Cherry Trail
+    - [x86] clk: Stop marking clocks as CLK_IS_CRITICAL
+    - [x86] pinctrl: cannonlake: Fix gpio base for GPP-E
+    - [x86] kvm/lapic: always disable MMIO interface in x2APIC mode
+    - drm/amdgpu: Fix SDMA HQD destroy error on gfx_v7
+    - drm/amdkfd: Change the control stack MTYPE from UC to NC on GFX9
+    - drm/amdkfd: Fix ATS capablity was not reported correctly on some APUs
+    - mm/vmstat.c: fix outdated vmstat_text
+    - afs: Fix afs_server struct leak
+    - afs: Fix clearance of reply
+    - [mips*] Fix CONFIG_CMDLINE handling
+    - [mips*] VDSO: Always map near top of user memory
+    - [sparc64] mach64: detect the dot clock divider correctly on sparc
+    - vsprintf: Fix off-by-one bug in bstr_printf() processing dereferenced
+      pointers
+    - percpu: stop leaking bitmap metadata blocks
+    - perf script python: Fix export-to-postgresql.py occasional failure
+    - perf script python: Fix export-to-sqlite.py sample columns
+    - [s390x] cio: Fix how vfio-ccw checks pinned pages
+    - dm cache: destroy migration_cache if cache target registration failed
+    - dm: fix report zone remapping to account for partition offset
+    - dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled
+    - dm linear: fix linear_end_io conditional definition
+    - cgroup: Fix dom_cgrp propagation when enabling threaded mode
+    - drm/nouveau/drm/nouveau: Grab runtime PM ref in nv50_mstc_detect()
+    - mmc: block: avoid multiblock reads for the last sector in SPI mode
+    - [armhf] pinctrl: mcp23s08: fix irq and irqchip setup order
+    - [arm64] perf: Reject stand-alone CHAIN events for PMUv3
+    - mm/mmap.c: don't clobber partially overlapping VMA with
+      MAP_FIXED_NOREPLACE
+    - mm/thp: fix call to mmu_notifier in set_pmd_migration_entry() v2
+    - filesystem-dax: Fix dax_layout_busy_page() livelock
+    - mm: Preserve _PAGE_DEVMAP across mprotect() calls
+    - [x86] i2c: i2c-scmi: fix for i2c_smbus_write_block_data
+    - [powerpc*] KVM: Book3S HV: Avoid crash from THP collapse during radix
+      page fault
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.16
+    - media: af9035: prevent buffer overflow on write
+    - spi: gpio: Fix copy-and-paste error
+    - batman-adv: Avoid probe ELP information leak
+    - batman-adv: Fix segfault when writing to throughput_override
+    - batman-adv: Fix segfault when writing to sysfs elp_interval
+    - batman-adv: Prevent duplicated gateway_node entry
+    - batman-adv: Prevent duplicated nc_node entry
+    - batman-adv: Prevent duplicated softif_vlan entry
+    - batman-adv: Prevent duplicated global TT entry
+    - batman-adv: Prevent duplicated tvlv handler
+    - batman-adv: fix backbone_gw refcount on queue_work() failure
+    - batman-adv: fix hardif_neigh refcount on queue_work() failure
+    - cxgb4: fix abort_req_rss6 struct
+    - [armhf] clocksource/drivers/ti-32k: Add CLOCK_SOURCE_SUSPEND_NONSTOP flag
+      for non-am43 SoCs
+    - [powerpc*] scsi: ibmvscsis: Fix a stringop-overflow warning
+    - [powerpc*] scsi: ibmvscsis: Ensure partition name is properly NUL
+      terminated
+    - [x86] intel_th: pci: Add Ice Lake PCH support
+    - [m68k] Input: atakbd - fix Atari keymap
+    - [m68k] Input: atakbd - fix Atari CapsLock behaviour
+    - [powerpc*] net: emac: fix fixed-link setup for the RTL8363SB switch
+    - qed: Fix populating the invalid stag value in multi function mode.
+    - qed: Do not add VLAN 0 tag to untagged frames in multi-function mode.
+    - [armhf,arm64] PCI: dwc: Fix scheduling while atomic issues
+    - RDMA/uverbs: Fix validity check for modify QP
+    - scsi: lpfc: Synchronize access to remoteport via rport
+    - [arm64] drm: mali-dp: Call drm_crtc_vblank_reset on device init
+    - scsi: ipr: System hung while dlpar adding primary ipr adapter back
+    - scsi: sd: don't crash the host on invalid commands
+    - bpf: sockmap only allow ESTABLISHED sock state
+    - bpf: sockmap, fix transition through disconnect without close
+    - bpf: test_maps, only support ESTABLISHED socks
+    - net/mlx4: Use cpumask_available for eq->affinity_mask
+    - clocksource/drivers/fttmr010: Fix set_next_event handler
+    - RDMA/bnxt_re: Fix system crash during RDMA resource initialization
+    - [armhf,arm64] iommu/rockchip: Free irqs in shutdown handler
+    - [x86] pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type
+    - [powerpc*] tm: Fix userspace r13 corruption
+    - [powerpc*] tm: Avoid possible userspace r1 corruption on reclaim
+    - [powerpc*] numa: Use associativity if VPHN hcall is successful
+    - [x86] iommu/amd: Return devid as alias for ACPI HID devices
+    - [x86] boot: Fix kexec booting failure in the SEV bit detection code
+    - Revert "vfs: fix freeze protection in mnt_want_write_file() for
+      overlayfs"
+    - mremap: properly flush TLB before releasing the page
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.17
+    - xfrm: Validate address prefix lengths in the xfrm selector.
+    - xfrm6: call kfree_skb when skb is toobig
+    - xfrm: reset transport header back to network header after all input
+      transforms ahave been applied
+    - xfrm: reset crypto_done when iterating over multiple input xfrms
+    - mac80211: Always report TX status
+    - cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
+    - mac80211: fix pending queue hang due to TX_DROP
+    - cfg80211: Address some corner cases in scan result channel updating
+    - mac80211: TDLS: fix skb queue/priority assignment
+    - mac80211: fix TX status reporting for ieee80211s
+    - xfrm: Fix NULL pointer dereference when skb_dst_force clears the
+      dst_entry.
+    - [armel,armhf] 8799/1: mm: fix pci_ioremap_io() offset check
+    - xfrm: validate template mode
+    - netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev
+    - netfilter: conntrack: get rid of double sizeof
+    - [arm64] hugetlb: Fix handling of young ptes
+    - nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT
+    - mac80211_hwsim: fix locking when iterating radios during ns exit
+    - mac80211_hwsim: fix race in radio destruction from netlink notifier
+    - mac80211_hwsim: do not omit multicast announce of first added radio
+    - Bluetooth: SMP: fix crash in unpairing
+    - qed: Avoid implicit enum conversion in qed_set_tunn_cls_info
+    - qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv
+    - qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor
+    - qed: Avoid constant logical operation warning in qed_vf_pf_acquire
+    - qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt
+    - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
+    - scsi: qedi: Initialize the stats mutex lock
+    - rxrpc: Fix checks as to whether we should set up a new call
+    - rxrpc: Fix RTT gathering
+    - rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket
+    - rxrpc: Fix error distribution
+    - netfilter: nft_set_rbtree: add missing rb_erase() in GC routine
+    - netfilter: avoid erronous array bounds warning
+    - asix: Check for supported Wake-on-LAN modes
+    - ax88179_178a: Check for supported Wake-on-LAN modes
+    - lan78xx: Check for supported Wake-on-LAN modes
+    - sr9800: Check for supported Wake-on-LAN modes
+    - r8152: Check for supported Wake-on-LAN Modes
+    - smsc75xx: Check for Wake-on-LAN modes
+    - smsc95xx: Check for Wake-on-LAN modes
+    - cfg80211: fix use-after-free in reg_process_hint()
+    - [x86] KVM: nVMX: Do not expose MPX VMX controls when guest MPX disabled
+    - [x86] KVM: Do not use kvm_x86_ops->mpx_supported() directly
+    - [x86] KVM: nVMX: Fix emulation of VM_ENTRY_LOAD_BNDCFGS
+    - perf/core: Fix perf_pmu_unregister() locking
+    - [x86] perf/intel/uncore: Use boot_cpu_data.phys_proc_id instead of
+      hardcorded physical package ID 0
+    - perf/ring_buffer: Prevent concurent ring buffer access
+    - [x86] perf/intel/uncore: Fix PCI BDF address of M3UPI on SKX
+    - [x86] perf/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf
+      events
+    - thunderbolt: Do not handle ICM events after domain is stopped
+    - thunderbolt: Initialize after IOMMUs
+    - Revert "serial: 8250_dw: Fix runtime PM handling"
+    - locking/ww_mutex: Fix runtime warning in the WW mutex selftest
+    - drm/amd/display: Signal hw_done() after waiting for flip_done()
+    - be2net: don't flip hw_features when VXLANs are added/deleted
+    - [powerpc*] numa: Skip onlining a offline node in kdump path
+    - net: cxgb3_main: fix a missing-check bug
+    - yam: fix a missing-check bug
+    - ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()
+    - mm/gup_benchmark: fix unsigned comparison to zero in __gup_benchmark_ioctl
+    - mm/migrate.c: split only transparent huge pages when allocation fails
+    - [x86] paravirt: Fix some warning messages
+    - [arm64] clk: mvebu: armada-37xx-periph: Remove unused var num_parents
+    - libertas: call into generic suspend code before turning off power
+    - perf report: Don't try to map ip to invalid map
+    - HID: i2c-hid: Remove RESEND_REPORT_DESCR quirk and its handling
+    - [armhf] dts: imx53-qsb: disable 1.2GHz OPP
+    - perf record: Use unmapped IP for inline callchain cursors
+    - rxrpc: Don't check RXRPC_CALL_TX_LAST after calling
+      rxrpc_rotate_tx_window()
+    - rxrpc: Carry call state out of locked section in rxrpc_rotate_tx_window()
+    - rxrpc: Only take the rwind and mtu values from latest ACK
+    - rxrpc: Fix connection-level abort handling
+    - [x86] net: ena: fix warning in rmmod caused by double iounmap
+    - [x86] net: ena: fix rare bug when failed restart/resume is followed by
+      driver removal
+    - [x86] net: ena: fix NULL dereference due to untimely napi initialization
+    - gpio: Assign gpio_irq_chip::parents to non-stack pointer
+    - IB/mlx5: Unmap DMA addr from HCA before IOMMU
+    - rds: RDS (tcp) hangs on sendto() to unresponding address
+    - afs: Fix cell proc list
+    - fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()
+    - Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"
+    - bridge: do not add port to router list when receives query with source
+      0.0.0.0
+    - ipv6: mcast: fix a use-after-free in inet6_mc_check
+    - ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are
+      called
+    - ipv6: rate-limit probes for neighbourless routes
+    - llc: set SOCK_RCU_FREE in llc_sap_add_socket()
+    - net: fec: don't dump RX FIFO register when not available
+    - net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
+    - net/mlx5e: fix csum adjustments caused by RXFCS
+    - net: sched: gred: pass the right attribute to gred_change_table_def()
+    - net: socket: fix a missing-check bug
+    - [armhf,arm64] net: stmmac: Fix stmmac_mdio_reset() when building stmmac
+      as  modules
+    - net: udp: fix handling of CHECKSUM_COMPLETE packets
+    - r8169: fix NAPI handling under high load
+    - rtnetlink: Disallow FDB configuration for non-Ethernet device
+    - sctp: fix race on sctp_id2asoc
+    - tipc: fix unsafe rcu locking when accessing publication list
+    - udp6: fix encap return code for resubmitting
+    - vhost: Fix Spectre V1 vulnerability
+    - virtio_net: avoid using netif_tx_disable() for serializing tx routine
+    - ethtool: fix a privilege escalation bug
+    - bonding: fix length of actor system
+    - ip6_tunnel: Fix encapsulation layout
+    - openvswitch: Fix push/pop ethernet validation
+    - net: ipmr: fix unresolved entry dumps
+    - net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type
+    - net: sched: Fix for duplicate class dump
+    - net/sched: cls_api: add missing validation of netlink attributes
+    - net/ipv6: Allow onlink routes to have a device mismatch if it is the
+      default route
+    - sctp: fix the data size calculation in sctp_data_size
+    - sctp: not free the new asoc when sctp_wait_for_connect returns err
+    - net/mlx5: Fix memory leak when setting fpga ipsec caps
+    - net: bpfilter: use get_pid_task instead of pid_task
+    - net: drop skb on failure in ip_check_defrag()
+    - net: fix pskb_trim_rcsum_slow() with odd trim offset
+    - net/mlx5: WQ, fixes for fragmented WQ buffers API
+    - [sparc64] Make corrupted user stacks more debuggable.
+    - [sparc64] Set %l4 properly on trap return after handling signals.
+    - [sparc64] Wire up compat getpeername and getsockname.
+    - [sparc64] Fix single-pcr perf event counter management.
+    - [sparc64] Fix syscall fallback bugs in VDSO.
+    - [sparc64] Throttle perf events properly.
+    - net: bridge: remove ipv6 zero address check in mcast queries
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.18
+    - vfs: swap names of {do,vfs}_clone_file_range()
+    - bpf: fix partial copy of map_ptr when dst is scalar
+    - [armhf,arm64] clk: sunxi-ng: sun4i: Set VCO and PLL bias current to
+      lowest setting
+    - fscache: Fix incomplete initialisation of inline key space
+    - cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)
+    - fscache: Fix out of bound read in long cookie keys
+    - ptp: fix Spectre v1 vulnerability
+    - drm/edid: VSDB yCBCr420 Deep Color mode bit definitions
+    - drm: fb-helper: Reject all pixel format changing requests
+    - RDMA/ucma: Fix Spectre v1 vulnerability (CVE-2017-5753)
+    - IB/ucm: Fix Spectre v1 vulnerability (CVE-2017-5753)
+    - cdc-acm: do not reset notification buffer index upon urb unlinking
+    - cdc-acm: correct counting of UART states in serial state notification
+    - cdc-acm: fix race between reset and control messaging
+    - usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
+    - usb: gadget: storage: Fix Spectre v1 vulnerability
+    - usb: roles: intel_xhci: Fix Unbalanced pm_runtime_enable
+    - usb: xhci: pci: Enable Intel USB role mux on Apollo Lake platforms
+    - USB: fix the usbfs flag sanitization for control transfers
+    - tracing: Fix synthetic event to accept unsigned modifier
+    - tracing: Fix synthetic event to allow semicolon at end
+    - [armhf] drm/sun4i: Fix an ulong overflow in the dotclock driver
+    - sched/fair: Fix throttle_list starvation with low CFS quota
+    - [x86] tsc: Force inlining of cyc2ns bits
+    - [x86] hibernate: Fix nosave_regions setup for hibernation
+    - [x86] percpu: Fix this_cpu_read()
+    - [x86] time: Correct the attribute on jiffies' definition
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.19
+    - [armhf] mtd: rawnand: marvell: fix the IRQ handler complete() condition
+    - spi: spi-mem: Adjust op len based on message/transfer size limitations
+    - bcache: trace missed reading by cache_missed
+    - bcache: correct dirty data statistics
+    - bcache: fix miss key refill->end in writeback
+    - hwmon: (pmbus) Fix page count auto-detection.
+    - jffs2: free jffs2_sb_info through jffs2_kill_sb()
+    - block: setup bounce bio_sets properly
+    - block: don't deal with discard limit in blkdev_issue_discard()
+    - block: make sure discard bio is aligned with logical block size
+    - block: make sure writesame bio is aligned with logical block size
+    - cpufreq: conservative: Take limits changes into account properly
+    - dma-mapping: fix panic caused by passing empty cma command line argument
+    - pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
+    - ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer()
+    - ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended
+      opcodes
+    - [x86] kprobes: Use preempt_enable() in optimized_callback()
+    - ipmi: Fix timer race with module unload
+    - acpi, nfit: Fix Address Range Scrub completion tracking
+    - [hppa] Fix address in HPMC IVA
+    - [hppa] Fix map_pages() to not overwrite existing pte entries
+    - [hppa] Fix exported address of os_hpmc handler
+    - [x86] ALSA: hda - Add quirk for ASUS G751 laptop
+    - [x86] ALSA: hda - Fix headphone pin config for ASUS G751
+    - [x86] ALSA: hda/realtek - Fix the problem of the front MIC on the Lenovo
+      M715
+    - [x86] ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905)
+    - ALSA: hda: Add 2 more models to the power_save blacklist
+    - ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
+    - [x86] speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
+      (CVE-2017-5715)
+    - [x86] xen: Fix boot loader version reported for PVH guests
+    - [x86] corruption-check: Fix panic in memory_corruption_check() when boot
+      option without value is provided
+    - [x86] mm/pat: Disable preemption around __flush_tlb_all()
+    - [x86] speculation: Support Enhanced IBRS on future CPUs (CVE-2017-5715)
+    - [armhf] dts: exynos: Disable pull control for MAX8997 interrupts on
+      Origen
+    - drm: fix use of freed memory in drm_mode_setcrtc
+    - bpf: do not blindly change rlimit in reuseport net selftest
+    - nvme: remove ns sibling before clearing path
+    - Revert "perf tools: Fix PMU term format max value calculation"
+    - xsk: do not call synchronize_net() under RCU read lock
+    - xfrm: policy: use hlist rcu variants on insert
+    - [x86] perf vendor events intel: Fix wrong filter_band* values for uncore
+      events
+    - r8169: Enable MSI-X on RTL8106e
+    - nfp: flower: fix pedit set actions for multiple partial masks
+    - nfp: flower: use offsets provided by pedit instead of index for ipv6
+    - sched/fair: Fix the min_vruntime update logic in dequeue_entity()
+    - perf evsel: Store ids for events with their own cpus
+      perf_event__synthesize_event_update_cpus
+    - perf tools: Fix use of alternatives to find JDIR
+    - perf cpu_map: Align cpu map synthesized events properly.
+    - perf report: Don't crash on invalid inline debug information
+    - [x86] fpu: Remove second definition of fpu in __fpu__restore_sig()
+    - net: qla3xxx: Remove overflowing shift statement
+    - r8169: re-enable MSI-X on RTL8168g
+    - drm: Get ref on CRTC commit object when waiting for flip_done
+    - [arm64] net: socionext: Reset tx queue in ndo_stop
+    - netfilter: xt_nat: fix DNAT target for shifted portmap ranges
+    - [m68k] ataflop: fix error handling during setup
+    - [m68k] swim: fix cleanup on setup error
+    - [arm64] cpufeature: ctr: Fix cpu capability check for late CPUs
+    - nfp: devlink port split support for 1x100G CXP NIC
+    - tun: Consistently configure generic netdev params via rtnetlink
+    - [s390x] sthyi: Fix machine name validity indication
+    - hwmon: (pwm-fan) Set fan speed to 0 on suspend
+    - lightnvm: pblk: fix race on sysfs line state
+    - lightnvm: pblk: fix two sleep-in-atomic-context bugs
+    - lightnvm: pblk: fix race condition on metadata I/O
+    - perf tools: Free temporary 'sys' string in read_event_files()
+    - perf tools: Cleanup trace-event-info 'tdata' leak
+    - perf strbuf: Match va_{add,copy} with va_end
+    - [x86] cpupower: Fix coredump on VMWare
+    - bcache: Populate writeback_rate_minimum attribute
+    - mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
+    - sdhci: acpi: add free_slot callback
+    - iwlwifi: pcie: avoid empty free RB queue
+    - iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface
+    - iwlwifi: mvm: check for n_profiles validity in EWRD ACPI
+    - [i386] olpc: Indicate that legacy PC XO-1 platform should not register
+      RTC
+    - ACPI/PPTT: Handle architecturally unknown cache types
+    - ACPI / PM: LPIT: Register sysfs attributes based on FADT
+    - ACPI / processor: Fix the return value of acpi_processor_ids_walk()
+    - cpufreq: dt: Try freeing static OPPs only if we have added them
+    - [x86] intel_rdt: Show missing resctrl mount options
+    - [arm64] signal: Introduce COMPAT_SIGMINSTKSZ for use in
+      compat_sys_sigaltstack
+    - [arm64] net: hns3: Fix for packet buffer setting bug
+    - [x86] boot: Fix EFI stub alignment
+    - [arm64] net: hns3: Add nic state check before calling netif_tx_wake_queue
+    - [arm64] net: hns3: Fix ets validate issue
+    - [armhf,arm64] pinctrl: sunxi: fix 'pctrl->functions' allocation in
+      sunxi_pinctrl_build_state
+    - [arm64] pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux
+    - brcmfmac: fix for proper support of 160MHz bandwidth
+    - [arm64] net: hns3: Check hdev state when getting link status
+    - [arm64] net: hns3: Set STATE_DOWN bit of hdev state when stopping net
+    - net: phy: phylink: ensure the carrier is off when starting phylink
+    - block, bfq: correctly charge and reset entity service in all cases
+    - [arm64] entry: Allow handling of undefined instructions from EL1
+    - kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
+    - spi: gpio: No MISO does not imply no RX
+    - ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers
+    - [arm64] pinctrl: qcom: spmi-mpp: Fix drive strength setting
+    - bpf/verifier: fix verifier instability
+    - failover: Add missing check to validate 'slave_dev' in
+      net_failover_slave_unregister
+    - perf tests: Fix record+probe_libc_inet_pton.sh without ping's debuginfo
+    - [arm64] pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant
+    - [arm64] pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant
+    - [arm64] net: hns3: Preserve vlan 0 in hardware table
+    - [arm64] net: hns3: Fix ping exited problem when doing lp selftest
+    - [arm64] net: hns3: Fix for vf vlan delete failed problem
+    - [armhf,arm64] net: dsa: mv88e6xxx: Fix writing to a PHY page.
+    - rsi: fix memory alignment issue in ARM32 platforms
+    - iwlwifi: mvm: fix BAR seq ctrl reporting
+    - ixgbe: disallow IPsec Tx offload when in SR-IOV mode
+    - ixgbevf: VF2VF TCP RSS
+    - ath10k: schedule hardware restart if WMI command times out
+    - libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9
+    - cgroup, netclassid: add a preemption point to write_classid
+    - [armhf,arm64] net: stmmac: dwmac-sun8i: fix OF child-node lookup
+    - f2fs: fix to account IO correctly for cgroup writeback
+    - MD: Memory leak when flush bio size is zero
+    - md: fix memleak for mempool
+    - scsi: esp_scsi: Track residual for PIO transfers
+    - scsi: ufs: Schedule clk gating work on correct queue
+    - UAPI: ndctl: Fix g++-unsupported initialisation in headers
+    - [x86] KVM: nVMX: Clear reserved bits of #DB exit qualification
+    - scsi: megaraid_sas: fix a missing-check bug
+    - RDMA/core: Do not expose unsupported counters
+    - IB/ipoib: Clear IPCB before icmp_send
+    - usb: host: ohci-at91: fix request of irq for optional gpio
+    - usb: typec: tcpm: Report back negotiated PPS voltage and current
+    - tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/
+      deactivated
+    - f2fs: clear PageError on the read path
+    - [x86] Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask
+    - [x86] VMCI: Resource wildcard match fixed
+    - PCI / ACPI: Enable wake automatically for power managed bridges
+    - xprtrdma: Reset credit grant properly after a disconnect
+    - irqchip/pdc: Setup all edge interrupts as rising edge at GIC
+    - [armhf,arm64] usb: dwc2: fix a race with external vbus supply
+    - ext4: fix argument checking in EXT4_IOC_MOVE_EXT
+    - MD: fix invalid stored role for a disk
+    - nvmem: check the return value of nvmem_add_cells()
+    - xhci: Avoid USB autosuspend when resuming USB2 ports.
+    - f2fs: fix to recover inode's crtime during POR
+    - f2fs: fix to recover inode's i_flags during POR
+    - PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice
+    - [armhf.arm64] usb: chipidea: Prevent unbalanced IRQ disable
+    - [x86] driver/dma/ioat: Call del_timer_sync() without holding prep_lock
+    - IB/mlx5: Allow transition of DCI QP to reset
+    - uio: ensure class is registered before devices
+    - scsi: lpfc: Correct soft lockup when running mds diagnostics
+    - scsi: lpfc: Correct race with abort on completion path
+    - f2fs: avoid sleeping under spin_lock
+    - f2fs: report error if quota off error during umount
+    - signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid
+      namespace init
+    - IB/rxe: fix for duplicate request processing and ack psns
+    - ALSA: hda: Check the non-cached stream buffers more explicitly
+    - [x86] cpupower: Fix AMD Family 0x17 msr_pstate size
+    - Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()"
+    - f2fs: fix to recover cold bit of inode block during POR
+    - f2fs: fix to account IO correctly
+    - OPP: Free OPP table properly on performance state irregularities
+    - [armhf] dts: exynos: Add missing cooling device properties for CPUs
+    - [armhf] dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings
+    - [armhf] dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250
+    - xen-swiotlb: use actually allocated size on check physical continuous
+    - tpm: Restore functionality to xen vtpm driver.
+    - xen/blkfront: avoid NULL blkfront_info dereference on device removal
+    - xen/balloon: Support xend-based toolstack
+    - xen: fix race in xen_qlock_wait()
+    - xen: make xen_qlock_wait() nestable
+    - xen/pvh: increase early stack size
+    - xen/pvh: don't try to unplug emulated devices
+    - libertas: don't set URB_ZERO_PACKET on IN USB transfer
+    - usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten
+    - usb: typec: tcpm: Fix APDO PPS order checking to be based on voltage
+    - mt76: mt76x2: fix multi-interface beacon configuration
+    - iwlwifi: mvm: check return value of rs_rate_from_ucode_rate()
+    - net/ipv4: defensive cipso option parsing
+    - libnvdimm: Hold reference on parent while scheduling async init
+    - libnvdimm, region: Fail badblocks listing for inactive regions
+    - libnvdimm, pmem: Fix badblocks population for 'raw' namespaces
+    - [x86] ASoC: intel: skylake: Add missing break in skl_tplg_get_token()
+    - IB/mlx5: Fix MR cache initialization
+    - IB/rxe: Revise the ib_wr_opcode enum
+    - jbd2: fix use after free in jbd2_log_do_checkpoint()
+    - gfs2_meta: ->mount() can get NULL dev_name
+    - ext4: fix EXT4_IOC_SWAP_BOOT
+    - ext4: initialize retries variable in ext4_da_write_inline_data_begin()
+    - ext4: fix setattr project check in fssetxattr ioctl
+    - ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR
+    - ext4: fix use-after-free race in ext4_remount()'s error path
+    - selinux: fix mounting of cgroup2 under older policies
+    - HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452
+    - HID: hiddev: fix potential Spectre v1
+    - [x86] EDAC, amd64: Add Family 17h, models 10h-2fh support
+    - [x86] EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting
+    - [x86] EDAC, skx_edac: Fix logical channel intermediate decoding
+    - PCI/ASPM: Fix link_state teardown on device removal
+    - [x86] PCI: vmd: White list for fast interrupt handlers
+    - [powerpc*] signal/GenWQE: Fix sending of SIGKILL
+    - signal: Guard against negative signal numbers in copy_siginfo_from_user32
+    - crypto: lrw - Fix out-of bounds access on counter overflow
+    - crypto: tcrypt - fix ghash-generic speed test
+    - [x86] crypto: aesni - don't use GFP_ATOMIC allocation if the request
+      doesn't cross a page in gcm
+    - mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range()
+    - ima: fix showing large 'violations' or 'runtime_measurements_count'
+    - hugetlbfs: dirty pages as they are added to pagecache
+    - mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly
+    - mm/hmm: fix race between hmm_mirror_unregister() and mmu_notifier callback
+    - [armhf,arm64] KVM: Ensure only THP is candidate for adjustment
+    - [arm64] KVM: Fix caching of host MDCR_EL2 value
+    - [armhf] w1: omap-hdq: fix missing bus unregister at removal
+    - smb3: allow stats which track session and share reconnects to be reset
+    - smb3: do not attempt cifs operation in smb3 query info error path
+    - smb3: on kerberos mount if server doesn't specify auth type use krb5
+    - printk: Fix panic caused by passing log_buf_len to command line
+    - genirq: Fix race on spurious interrupt detection
+    - NFSv4.1: Fix the r/wsize checking
+    - nfs: Fix a missed page unlock after pg_doio()
+    - nfsd: correctly decrement odstate refcount in error path
+    - nfsd: Fix an Oops in free_session()
+    - lockd: fix access beyond unterminated strings in prints
+    - dm ioctl: harden copy_params()'s copy_from_user() from malicious users
+    - dm zoned: fix metadata block ref counting
+    - dm zoned: fix various dmz_get_mblock() issues
+    - media: ov7670: make "xclk" clock optional
+    - fsnotify: Fix busy inodes during unmount
+    - [powerpc*] msi: Fix compile error on mpc83xx
+    - [powerpc*] tm: Fix HFSCR bit for no suspend case
+    - [powerpc*] 4s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9
+    - [mips*] memset: Fix CPU_DADDI_WORKAROUNDS `small_fixup' regression
+    - [mips*/octeon] fix out of bounds array access on CN68XX
+    - rtc: ds1307: fix ds1339 wakealarm support
+    - rtc: cmos: Fix non-ACPI undefined reference to `hpet_rtc_interrupt'
+    - rtc: cmos: Remove the `use_acpi_alarm' module parameter for !ACPI
+    - [armhf] power: supply: twl4030-charger: fix OF sibling-node lookup
+    - [armhf,arm64] iommu/arm-smmu: Ensure that page-table updates are visible
+      before TLBI
+    - media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
+    - Revert "media: dvbsky: use just one mutex for serializing device R/W ops"
+    - media: cec: make cec_get_edid_spa_location() an inline function
+    - media: cec: integrate cec_validate_phys_addr() in cec-api.c
+    - xen: fix xen_qlock_wait()
+    - xen: remove size limit of privcmd-buf mapping interface
+    - xen-blkfront: fix kernel panic with negotiate_mq error path
+    - media: cec: add new tx/rx status bits to detect aborts/timeouts
+    - media: cec: fix the Signal Free Time calculation
+    - media: cec: forgot to cancel delayed work
+    - media: em28xx: use a default format if TRY_FMT fails
+    - media: tvp5150: avoid going past array on v4l2_querymenu()
+    - media: em28xx: fix input name for Terratec AV 350
+    - media: em28xx: make v4l2-compliance happier by starting sequence on zero
+    - media: em28xx: fix handler for vidioc_s_input()
+    - media: media colorspaces*.rst: rename AdobeRGB to opRGB
+    - media: replace ADOBERGB by OPRGB
+    - media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
+    - [arm64] lse: remove -fcall-used-x0 flag
+    - [arm64] rpmsg: smd: fix memory leak on channel create
+    - Cramfs: fix abad comparison when wrap-arounds occur
+    - [armhf,arm64] soc/tegra: pmc: Fix child-node lookup
+    - tracing: Return -ENOENT if there is no target synthetic event
+    - btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
+    - btrfs: Handle owner mismatch gracefully when walking up tree
+    - btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid
+      deadlock
+    - btrfs: fix error handling in free_log_tree
+    - btrfs: fix error handling in btrfs_dev_replace_start
+    - btrfs: Enhance btrfs_trim_fs function to handle error better
+    - btrfs: Ensure btrfs_trim_fs can trim the whole filesystem
+    - btrfs: iterate all devices during trim, instead of fs_devices::alloc_list
+    - btrfs: don't attempt to trim devices that don't support it
+    - btrfs: keep trim from interfering with transaction commits
+    - btrfs: wait on caching when putting the bg cache
+    - Btrfs: don't clean dirty pages during buffered writes
+    - btrfs: release metadata before running delayed refs
+    - btrfs: protect space cache inode alloc with GFP_NOFS
+    - btrfs: reset max_extent_size on clear in a bitmap
+    - btrfs: make sure we create all new block groups
+    - Btrfs: fix warning when replaying log after fsync of a tmpfile
+    - Btrfs: fix wrong dentries after fsync of file that got its parent
+      replaced
+    - btrfs: qgroup: Dirty all qgroups before rescan
+    - Btrfs: fix null pointer dereference on compressed write path error
+    - Btrfs: fix assertion on fsync of regular file when using no-holes feature
+    - Btrfs: fix deadlock when writing out free space caches
+    - btrfs: reset max_extent_size properly
+    - btrfs: set max_extent_size properly
+    - btrfs: don't use ctl->free_space for max_extent_size
+    - btrfs: only free reserved extent if we didn't insert it
+    - btrfs: fix insert_reserved error handling
+    - btrfs: don't run delayed_iputs in commit
+    - btrfs: move the dio_sem higher up the callchain
+    - Btrfs: fix use-after-free during inode eviction
+    - Btrfs: fix use-after-free when dumping free space
+    - net: sched: Remove TCA_OPTIONS from policy
+    - userns: also map extents in the reverse map to kernel IDs
+    - bpf: wait for running BPF programs when updating map-in-map
+    - MD: fix invalid stored role for a disk - try2
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.20
+    - [powerpc*] traps: restore recoverability of machine_check interrupts
+    - [powerpc*] 64/module: REL32 relocation range check
+    - [powerpc*] mm: Fix page table dump to work on Radix
+    - [powerpc*] mm: fix always true/false warning in slice.c
+    - drm/amd/display: fix bug of accessing invalid memory
+    - Input: wm97xx-ts - fix exit path
+    - [powerpc*] eeh: Fix possible null deref in eeh_dump_dev_log()
+    - tty: check name length in tty_find_polling_driver()
+    - tracing/kprobes: Check the probe on unloaded module correctly
+    - drm/amdgpu/powerplay: fix missing break in switch statements
+    - [powerpc*] nohash: fix undefined behaviour when testing page size support
+    - [powerpc*] mm: Don't report hugepage tables as memory leaks when using
+      kmemleak
+    - [armhf] drm/omap: fix memory barrier bug in DMM driver
+    - drm/amd/display: fix gamma not being applied
+    - [arm64] drm/hisilicon: hibmc: Do not carry error code in HiBMC
+      framebuffer pointer
+    - media: pci: cx23885: handle adding to list failure
+    - [mips*] kexec: Mark CPU offline before disabling local IRQ
+    - [powerpc*] memtrace: Remove memory in chunks
+    - [mips*] PCI: Call pcie_bus_configure_settings() to set MPS/MRRS
+    - media: tvp5150: fix width alignment during set_selection()
+    - drm/amdgpu: Fix SDMA TO after GPU reset v3
+    - 9p locks: fix glock.client_id leak in do_lock
+    - udf: Prevent write-unsupported filesystem to be remounted read-write
+    - 9p: clear dangling pointers in p9stat_free
+    - cdrom: fix improper type cast, which can leat to information leak.
+    - ovl: fix error handling in ovl_verify_set_fh()
+    - ovl: check whiteout in ovl_create_over_whiteout()
+    - [sh4] serial: sh-sci: Fix could not remove dev_attr_rx_fifo_timeout
+    - scsi: qla2xxx: Fix incorrect port speed being set for FC adapters
+    - scsi: qla2xxx: Fix process response queue for ISP26XX and above
+    - scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx
+    - scsi: qla2xxx: shutdown chip if reset fail
+    - scsi: qla2xxx: Fix duplicate switch database entries
+    - scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured
+    - fuse: Fix use-after-free in fuse_dev_do_read()
+    - fuse: Fix use-after-free in fuse_dev_do_write()
+    - fuse: fix blocked_waitq wakeup
+    - fuse: set FR_SENT while locked
+    - ovl: fix recursive oi->lock in ovl_link()
+    - scsi: qla2xxx: Fix re-using LoopID when handle is in use
+    - scsi: qla2xxx: Fix NVMe session hang on unload
+    - [arm64] clk: meson-gxbb: set fclk_div3 as CLK_IS_CRITICAL
+    - [arm64] clk: meson: axg: mark fdiv2 and fdiv3 as critical
+    - zram: close udev startup race condition as default groups
+    - [mips*el/loonsgon-3] Fix CPU UART irq delivery problem
+    - [mips*el/loongson-3] Fix BRIDGE irq delivery problem
+    - [armhf] clk: s2mps11: Fix matching when built as module and DT node
+      contains compatible
+    - [armhf,arm64] clk: sunxi-ng: h6: fix bus clocks' divider position
+    - [arm64] clk: rockchip: fix wrong mmc sample phase shift for rk3328
+    - [armhf,arm64] clk: rockchip: Fix static checker warning in
+      rockchip_ddrclk_get_parent call
+    - libceph: bump CEPH_MSG_MAX_DATA_LEN
+    - Revert "ceph: fix dentry leak in splice_dentry()"
+    - thermal: core: Fix use-after-free in thermal_cooling_device_destroy_sysfs
+    - mach64: fix display corruption on big endian machines
+    - mach64: fix image corruption due to reading accelerator registers
+    - acpi/nfit, x86/mce: Handle only uncorrectable machine checks
+    - acpi/nfit, x86/mce: Validate a MCE's address before using it
+    - acpi, nfit: Fix ARS overflow continuation
+    - [arm64] reset: hisilicon: fix potential NULL pointer dereference
+    - vhost/scsi: truncate T10 PI iov_iter to prot_bytes
+    - scsi: qla2xxx: Initialize port speed to avoid setting lower speed
+    - SCSI: fix queue cleanup race before queue initialization is done
+    - [powerpc*] Revert "powerpc/8xx: Use L1 entry APG to handle _PAGE_ACCESSED
+      for CONFIG_SWAP"
+    - ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry
+    - ocfs2: free up write context when direct IO failed
+    - mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings
+    - memory_hotplug: cond_resched in __remove_pages
+    - netfilter: conntrack: fix calculation of next bucket number in early_drop
+    - [armhf] 8809/1: proc-v7: fix Thumb annotation of cpu_v7_hvc_switch_mm
+    - bonding/802.3ad: fix link_failure_count tracking
+    - mtd: nand: Fix nanddev_neraseblocks()
+    - mtd: docg3: don't set conflicting BCH_CONST_PARAMS option
+    - hwmon: (core) Fix double-free in __hwmon_device_register()
+    - perf stat: Handle different PMU names with common prefix
+    - of, numa: Validate some distance map rules
+    - [x86] hyper-v: Enable PIT shutdown quirk
+    - termios, tty/tty_baudrate.c: fix buffer overrun
+    - watchdog/core: Add missing prototypes for weak functions
+    - btrfs: fix pinned underflow after transaction aborted
+    - Btrfs: fix cur_offset in the error case for nocow
+    - Btrfs: fix infinite loop on inode eviction after deduplication of eof
+      block
+    - Btrfs: fix data corruption due to cloning of eof block
+    - clockevents/drivers/i8253: Add support for PIT shutdown quirk
+    - ext4: add missing brelse() update_backups()'s error path
+    - ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path
+    - ext4: add missing brelse() add_new_gdb_meta_bg()'s error path
+    - ext4: avoid potential extra brelse in setup_new_flex_group_blocks()
+    - ext4: missing !bh check in ext4_xattr_inode_write()
+    - ext4: fix possible inode leak in the retry loop of ext4_resize_fs()
+    - ext4: avoid buffer leak on shutdown in ext4_mark_iloc_dirty()
+    - ext4: avoid buffer leak in ext4_orphan_add() after prior errors
+    - ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while
+      resizing
+    - ext4: avoid possible double brelse() in add_new_gdb() on error path
+    - ext4: fix possible leak of sbi->s_group_desc_leak in error path
+    - ext4: fix possible leak of s_journal_flag_rwsem in error path
+    - ext4: fix buffer leak in ext4_xattr_get_block() on error path
+    - ext4: release bs.bh before re-using in ext4_xattr_block_find()
+    - ext4: fix buffer leak in ext4_xattr_move_to_block() on error path
+    - ext4: fix buffer leak in ext4_expand_extra_isize_ea() on error path
+    - ext4: fix buffer leak in __ext4_read_dirblock() on error path
+    - mount: Retest MNT_LOCKED in do_umount
+    - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
+    - mount: Prevent MNT_DETACH from disconnecting locked mounts
+    - mnt: fix __detach_mounts infinite loop
+    - sunrpc: correct the computation for page_ptr when truncating
+    - NFSv4: Don't exit the state manager without clearing
+      NFS4CLNT_MANAGER_RUNNING
+    - nfsd: COPY and CLONE operations require the saved filehandle to be set
+    - rtc: hctosys: Add missing range error reporting
+    - fuse: fix use-after-free in fuse_direct_IO()
+    - fuse: fix leaked notify reply
+    - selinux: check length properly in SCTP bind hook
+    - configfs: replace strncpy with memcpy
+    - gfs2: Put bitmap buffers in put_super
+    - gfs2: Fix metadata read-ahead during truncate (2)
+    - libata: blacklist SAMSUNG MZ7TD256HAFV-000L9 SSD
+    - crypto: user - fix leaking uninitialized memory to userspace
+    - hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!
+    - mm/swapfile.c: use kvzalloc for swap_info_struct allocation
+    - [armhf,arm64] efi/libstub: Pack FDT after populating it
+    - [armhf,arm64] drm/rockchip: Allow driver to be shutdown on reboot/kexec
+    - [arm64] drm/msm: fix OF child-node lookup
+    - drm/amdgpu: Fix typo in amdgpu_vmid_mgr_init
+    - drm/amdgpu: add missing CHIP_HAINAN in amdgpu_ucode_get_load_type
+    - drm/nouveau: Check backlight IDs are >= 0, not > 0
+    - drm/nouveau: Fix nv50_mstc->best_encoder()
+    - drm/amd/powerplay: Enable/Disable NBPSTATE on On/OFF of UVD
+    - [armhf] drm/etnaviv: fix bogus fence complete check in timeout handler
+    - drm/dp_mst: Check if primary mstb is null
+    - drm: panel-orientation-quirks: Add quirk for Acer One 10 (S1003)
+    - [x86] drm/i915/dp: Link train Fallback on eDP only if fallback link BW
+      can fit panel's native mode
+    - [x86] drm/i915: Restore vblank interrupts earlier
+    - [x86] drm/i915: Don't unset intel_connector->mst_port
+    - [x86] drm/i915: Skip vcpi allocation for MSTB ports that are gone
+    - [x86] drm/i915: Large page offsets for pread/pwrite
+    - [x86] drm/i915/dp: Fix link retraining comment in intel_dp_long_pulse()
+    - [x86] drm/i915/dp: Restrict link retrain workaround to external monitors
+    - [x86] drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values
+    - [x86] drm/i915: Fix error handling for the NV12 fb dimensions check
+    - [x86] drm/i915: Fix ilk+ watermarks when disabling pipes
+    - [x86] drm/i915: Compare user's 64b GTT offset even on 32b
+    - [x86] drm/i915: Don't oops during modeset shutdown after lpe audio deinit
+    - [x86] drm/i915: Mark pin flags as u64
+    - [x86] drm/i915/ringbuffer: Delay after EMIT_INVALIDATE for gen4/gen5
+    - [x86] drm/i915/execlists: Force write serialisation into context image vs
+      execution
+    - [x86] drm/i915: Fix possible race in intel_dp_add_mst_connector()
+    - [armhf,arm64] CONFIG_XEN_PV breaks xen_create_contiguous_region on ARM
+
+  [ Ben Hutchings ]
+  * linux-perf: Fix BPF feature detection
+  * [rt] Update to 4.18.16-rt9:
+    - Revert "rcu: Use cpus_read_lock() while looking at cpu_online_mask"
+    - EXP rcu: Revert expedited GP parallelization cleverness
+
+  [ Romain Perier ]
+  * [rt] Update to 4.18.12-rt7
+  * Fixed FTBFS caused by wireless-disable-regulatory.db-direct-loading.patch,
+    due to conflicting types for 'reg_query_regdb_wmm'
+
+  [ Vagrant Cascadian ]
+  * [arm64] Update pinebook/teres-i device-tree patches to 4.19.x:
+    - Enables the lid to wakeup from suspend.
+
+  [ Salvatore Bonaccorso ]
+  * [x86] swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels
+    (Closes: #908924)
+  * mremap: properly flush TLB before releasing the page (CVE-2018-18281)
+  * cdrom: fix improper type cast, which can leat to information leak
+    (CVE-2018-18710)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 21 Nov 2018 20:55:46 +0000
+
+linux (4.18.10-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [rt][arm64,armhf] Fix build failure after rebasing onto 4.18.10
+  * xen-netback: fix input validation in xenvif_set_hash_mapping()
+    (CVE-2018-15471)
+  * Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct
+    member name" (Closes: #909813)
+
+  [ Salvatore Bonaccorso ]
+  * [arm64] KVM: Tighten guest core register access from userspace
+    (CVE-2018-18021)
+  * [arm64] KVM: Sanitize PSTATE.M when being set from userspace
+    (CVE-2018-18021)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 07 Oct 2018 21:57:06 +0100
+
+linux (4.18.10-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.9
+    - i2c: xiic: Make the start and the byte count write atomic
+    - i2c: i801: fix DNV's SMBCTRL register offset
+    - HID: multitouch: fix Elan panels with 2 input modes declaration
+    - HID: core: fix grouping by application
+    - HID: i2c-hid: Fix flooded incomplete report after S3 on Rayd touchscreen
+    - HID: input: fix leaking custom input node name
+    - mm/hugetlb: filter out hugetlb pages if HUGEPAGE migration is not
+      supported.
+    - mac80211: don't update the PM state of a peer upon a multicast frame
+    - scsi: lpfc: Correct MDS diag and nvmet configuration
+    - nbd: don't allow invalid blocksize settings
+    - block: don't warn when doing fsync on read-only devices
+    - block: bfq: swap puts in bfqg_and_blkg_put
+    - android: binder: fix the race mmap and alloc_new_buf_locked
+    - [mips*] VDSO: Match data page cache colouring when D$ aliases
+    - smb3: Backup intent flag missing for directory opens with backupuid mounts
+    - smb3: check for and properly advertise directory lease support
+    - cifs: connect to servername instead of IP for IPC$ share
+    - btrfs: fix qgroup_free wrong num_bytes in btrfs_subvolume_reserve_metadata
+    - btrfs: fix data corruption when deduplicating between different files
+    - [arm64] KVM: Only force FPEXC32_EL2.EN if trapping FPSIMD
+    - [armhf, arm64] KVM: Clean dcache to PoC when changing PTE due to CoW
+    - [[powerpc*] KVM: Book3S HV: Use correct pagesize in kvm_unmap_radix()
+    - [s390x] KVM: vsie: copy wrapping keys to right place
+    - [x86] KVM: SVM: Set EMULTYPE_NO_REEXECUTE for RSM emulation
+    - [x86] KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO
+      instr
+    - [x86] KVM: Invert emulation re-execute behavior to make it opt-in
+    - [x86] KVM: Merge EMULTYPE_RETRY and EMULTYPE_ALLOW_REEXECUTE
+    - [x86] KVM: Default to not allowing emulation retry in kvm_mmu_page_fault
+    - [x86] KVM: Do not re-{try,execute} after failed emulation in L2
+    - ACPI / LPSS: Force LPSS quirks on boot
+    - memory: ti-aemif: fix a potential NULL-pointer dereference
+    - ALSA: hda - Fix cancel_work_sync() stall from jackpoll work
+    - cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun()
+    - cpu/hotplug: Prevent state corruption on error rollback
+    - [x86] microcode: Make sure boot_cpu_data.microcode is up-to-date
+    - [x86] microcode: Update the new microcode revision unconditionally
+    - [x86] process: Don't mix user/kernel regs in 64bit __show_regs()
+    - [x86] apic/vector: Make error return value negative
+    - switchtec: Fix Spectre v1 vulnerability
+    - misc: mic: SCIF Fix scif_get_new_port() error handling
+    - ALSA: hda/realtek - Add mute LED quirk for HP Spectre x360
+    - ethtool: Remove trailing semicolon for static inline
+    - i2c: aspeed: Add an explicit type casting for *get_clk_reg_val
+    - Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV
+    - gpio: tegra: Move driver registration to subsys_init level
+    - [powerpc*] powernv: Fix concurrency issue with npu->mmio_atsd_usage
+    - [powerpc*] 4xx: Fix error return path in ppc4xx_msi_probe()
+    - media: davinci: vpif_display: Mix memory leak on probe error path
+    - media: dw2102: Fix memleak on sequence of probes
+    - net: phy: Fix the register offsets in Broadcom iProc mdio mux driver
+    - scsi: qla2xxx: Fix unintended Logout
+    - scsi: qla2xxx: Fix session state stuck in Get Port DB
+    - scsi: qla2xxx: Silent erroneous message
+    - clk: scmi: Fix the rounding of clock rate
+    - blk-mq: fix updating tags depth
+    - scsi: lpfc: Fix driver crash when re-registering NVME rports.
+    - scsi: target: fix __transport_register_session locking
+    - md/raid5: fix data corruption of replacements after originals dropped
+    - timers: Clear timer_base::must_forward_clk with timer_base::lock held
+    - gpu: ipu-v3: default to id 0 on missing OF alias
+    - misc: ti-st: Fix memory leak in the error path of probe()
+    - uio: potential double frees if __uio_register_device() fails
+    - firmware: vpd: Fix section enabled flag on vpd_section_destroy
+    - [x86] Drivers: hv: vmbus: Cleanup synic memory free path
+    - tty: rocket: Fix possible buffer overwrite on register_PCI
+    - uio: fix possible circular locking dependency
+    - iwlwifi: pcie: don't access periphery registers when not available
+    - IB/IPoIB: Set ah valid flag in multicast send flow
+    - f2fs: fix to active page in lru list for read path
+    - f2fs: do not set free of current section
+    - f2fs: Keep alloc_valid_block_count in sync
+    - f2fs: issue discard align to section in LFS mode
+    - f2fs: fix defined but not used build warnings
+    - f2fs: fix to detect looped node chain correctly
+    - ASoC: soc-pcm: Use delay set in component pointer function
+    - perf tools: Allow overriding MAX_NR_CPUS at compile time
+    - device-dax: avoid hang on error before devm_memremap_pages()
+    - NFSv4.0 fix client reference leak in callback
+    - perf c2c report: Fix crash for empty browser
+    - perf evlist: Fix error out while applying initial delay and LBR
+    - [powerpc*] pseries: fix EEH recovery of some IOV devices
+    - [powerpc*] macintosh/via-pmu: Add missing mmio accessors
+    - ath9k: report tx status on EOSP
+    - ath9k_hw: fix channel maximum power level test
+    - ath10k: prevent active scans on potential unusable channels
+    - wlcore: Set rx_status boottime_ns field on rx
+    - rpmsg: core: add support to power domains for devices
+    - mtd: rawnand: make subop helpers return unsigned values
+    - scsi: tcmu: do not set max_blocks if data_bitmap has been setup
+    - [mips*] Fix ISA virt/bus conversion for non-zero PHYS_OFFSET
+    - ata: libahci: Allow reconfigure of DEVSLP register
+    - ata: libahci: Correct setting of DEVSLP register
+    - nfs: Referrals not inheriting proto setting from parent
+    - scsi: 3ware: fix return 0 on the error path of probe
+    - tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access()
+    - ath10k: disable bundle mgmt tx completion event support
+    - media: em28xx: explicitly disable TS packet filter
+    - PCI: mobiveil: Fix struct mobiveil_pcie.pcie_reg_base address type
+    - [powerpc*] mm: Don't report PUDs as memory leaks when using kmemleak
+    - Bluetooth: hidp: Fix handling of strncpy for hid->name information
+    - [x86] mm: Remove in_nmi() warning from vmalloc_fault()
+    - [armhf] pinctrl: imx: off by one in imx_pinconf_group_dbg_show()
+    - gpio: pxa: disable pinctrl calls for PXA3xx
+    - gpio: ml-ioh: Fix buffer underwrite on probe error path
+    - [x86, arm64] pinctrl/amd: only handle irq if it is pending and unmasked
+    - [armhf, arm64] net: mvneta: fix mtu change on port without link
+    - f2fs: try grabbing node page lock aggressively in sync scenario
+    - pktcdvd: Fix possible Spectre-v1 for pkt_devs
+    - f2fs: fix to skip GC if type in SSA and SIT is inconsistent
+    - [x86] tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
+    - f2fs: fix to do sanity check with reserved blkaddr of inline inode
+      (CVE-2018-13099)
+    - [mips*] Octeon: add missing of_node_put()
+    - [mips*] generic: fix missing of_node_put()
+    - thermal: rcar_thermal: avoid NULL dereference in absence of IRQ resources
+    - thermal_hwmon: Sanitize attribute name passed to hwmon
+    - net: dcb: For wild-card lookups, use priority -1, not 0
+    - dm cache: only allow a single io_mode cache feature to be requested
+    - Input: atmel_mxt_ts - only use first T9 instance
+    - [powerpc*] partitions/aix: append null character to print data from disk
+    - [powerpc*] partitions/aix: fix usage of uninitialized lv_info and lvname
+      structures
+    - drm/amd/display: Prevent PSR from being enabled if initialization fails
+    - media: em28xx: Fix dual transport stream operation
+    - [arm64] iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in
+      kdump kernel
+    - f2fs: fix to wait on page writeback before updating page
+    - f2fs: Fix uninitialized return in f2fs_ioc_shutdown()
+    - media: em28xx: Fix DualHD disconnect oops
+    - f2fs: avoid potential deadlock in f2fs_sbi_store
+    - f2fs: fix to do sanity check with secs_per_zone (CVE-2018-13100)
+    - [armhf] mfd: ti_am335x_tscadc: Fix struct clk memory leak
+    - f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize
+    - f2fs: fix to propagate return value of scan_nat_page()
+    - f2fs: fix to do sanity check with extra_attr feature (CVE-2018-13098)
+    - RDMA/hns: Add illegal hop_num judgement
+    - NFSv4.1: Fix a potential layoutget/layoutrecall deadlock
+    - RDMA/hns: Update the data type of immediate data
+    - [mips*] WARN_ON invalid DMA cache maintenance, not BUG_ON
+    - [mips*] mscc: ocelot: fix length of memory address space for MIIM
+    - RDMA/cma: Do not ignore net namespace for unbound cm_id
+    - clocksource: Revert "Remove kthread"
+    - autofs: fix autofs_sbi() does not check super block type
+    - mm: get rid of vmacache_flush_all() entirely (CVE-2018-17182)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.10
+    - be2net: Fix memory leak in be_cmd_get_profile_config()
+    - net/mlx5: Fix use-after-free in self-healing flow
+    - rds: fix two RCU related problems
+    - tipc: orphan sock in tipc_release()
+    - net/mlx5: E-Switch, Fix memory leak when creating switchdev mode FDB
+      tables
+    - net/tls: Set count of SG entries if sk_alloc_sg returns -ENOSPC
+    - net/mlx5: Check for error in mlx5_attach_interface
+    - net/mlx5: Fix debugfs cleanup in the device init/remove flow
+    - erspan: fix error handling for erspan tunnel
+    - erspan: return PACKET_REJECT when the appropriate tunnel is not found
+    - tcp: really ignore MSG_ZEROCOPY if no SO_ZEROCOPY
+    - net/mlx5: Fix not releasing read lock when adding flow rules
+    - net/mlx5: Fix possible deadlock from lockdep when adding fte to fg
+    - net/mlx5: Use u16 for Work Queue buffer fragment size
+    - [armhf, arm64] usb: dwc3: change stream event enable bit back to 13
+    - [arm64] iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
+    - [armhf] iommu/io-pgtable-arm-v7s: Abort allocation when table address
+      overflows the PTE
+    - [armhf] iommu/io-pgtable-arm: Fix pgtable allocation in selftest
+    - ALSA: msnd: Fix the default sample sizes
+    - ALSA: usb-audio: Add support for Encore mDSD USB DAC
+    - ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro
+    - xfrm: fix 'passing zero to ERR_PTR()' warning
+    - [amd64, arm64] amd-xgbe: use dma_mapping_error to check map errors
+    - nfp: don't fail probe on pci_sriov_set_totalvfs() errors
+    - iwlwifi: cancel the injective function between hw pointers to tfd entry
+      index
+    - gfs2: Special-case rindex for gfs2_grow
+    - [armhf] clk: imx6ul: fix missing of_node_put()
+    - [armhf] clk: imx6sll: fix missing of_node_put()
+    - [arm64] clk: mvebu: armada-37xx-periph: Fix wrong return value in
+      get_parent
+    - Input: pxrc - fix freeing URB on device teardown
+    - clk: core: Potentially free connection id
+    - clk: clk-fixed-factor: Clear OF_POPULATED flag in case of failure
+    - media: tw686x: Fix oops on buffer alloc failure
+    - [armhf] dmaengine: pl330: fix irq race with terminate_all
+    - [mips*] ath79: fix system restart
+    - media: videobuf2-core: check for q->error in vb2_core_qbuf()
+    - IB/rxe: Drop QP0 silently
+    - block: allow max_discard_segments to be stacked
+    - IB/ipoib: Fix error return code in ipoib_dev_init()
+    - mtd/maps: fix solutionengine.c printk format warnings
+    - gfs2: Don't reject a supposedly full bitmap if we have blocks reserved
+    - perf tools: Synthesize GROUP_DESC feature in pipe mode
+    - perf tools: Fix struct comm_str removal crash
+    - [powerpc*] perf: Fix callchain ip filtering when return address is in a
+      register
+    - fbdev: Distinguish between interlaced and progressive modes
+    - [armhf] exynos: Clear global variable on init error path
+    - [powerpc*] perf: Fix callchain ip filtering
+    - nvmet: fix file discard return status
+    - nvme-rdma: unquiesce queues when deleting the controller
+    - [armhf, arm64] KVM: vgic: Fix possible spectre-v1 write in
+      vgic_mmio_write_apr()
+    - [powerpc*] powerpc/powernv: opal_put_chars partial write fix
+    - perf script: Show correct offsets for DWARF-based unwinding
+    - ASoC: rt5514: Fix the issue of the delay volume applied
+    - [mips*] jz4740: Bump zload address
+    - mac80211: restrict delayed tailroom needed decrement
+    - Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets
+    - wan/fsl_ucc_hdlc: use IS_ERR_VALUE() to check return value of
+      qe_muram_alloc
+    - [arm64] fix possible spectre-v1 write in ptrace_hbp_set_event()
+    - reset: imx7: Fix always writing bits as 0
+    - efi/arm: preserve early mapping of UEFI memory map longer for BGRT
+    - ALSA: usb-audio: Generic DSD detection for Thesycon-based implementations
+    - nfp: avoid buffer leak when FW communication fails
+    - xen-netfront: fix queue name setting
+    - [arm64] dts: qcom: db410c: Fix Bluetooth LED trigger
+    - ARM: dts: qcom: msm8974-hammerhead: increase load on l20 for sdhci
+    - soc: qcom: smem: Correct check for global partition
+    - [s390x] qeth: fix race in used-buffer accounting
+    - [s390x] qeth: reset layer2 attribute on layer switch
+    - platform/x86: toshiba_acpi: Fix defined but not used build warnings
+    - KVM: arm/arm64: Fix vgic init race
+    - drivers/base: stop new probing during shutdown
+    - i2c: aspeed: Fix initial values of master and slave state
+    - drm/amd/pp: Set Max clock level to display by default
+    - regulator: qcom_spmi: Use correct regmap when checking for error
+    - regulator: qcom_spmi: Fix warning Bad of_node_put()
+    - iommu/ipmmu-vmsa: IMUCTRn.TTSEL needs a special usage on R-Car Gen3
+    - dmaengine: mv_xor_v2: kill the tasklets upon exit
+    - crypto: sharah - Unregister correct algorithms for SAHARA 3
+    - [x86] pti: Check the return value of pti_user_pagetable_walk_p4d()
+    - [x86] pti: Check the return value of pti_user_pagetable_walk_pmd()
+    - [x86} mm/pti: Add an overflow check to pti_clone_pmds()
+    - PCI/AER: Honor "pcie_ports=native" even if HEST sets FIRMWARE_FIRST
+    - xen-netfront: fix warn message as irq device name has '/'
+    - RDMA/cma: Protect cma dev list with lock
+    - pstore: Fix incorrect persistent ram buffer mapping
+    - xen/netfront: fix waiting for xenbus state change
+    - IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler
+    - [s390x] crypto: Fix return code checking in cbc_paes_crypt()
+    - [armhf] mmc: omap_hsmmc: fix wakeirq handling on removal
+    - ipmi: Rework SMI registration failure
+    - ipmi: Move BT capabilities detection to the detect call
+    - ipmi: Fix I2C client removal in the SSIF driver
+    - ovl: fix oopses in ovl_fill_super() failure paths
+    - vmbus: don't return values for uninitalized channels
+    - tools: hv: Fix a bug in the key delete code
+    - misc: ibmvsm: Fix wrong assignment of return code
+    - misc: hmc6352: fix potential Spectre v1
+    - xhci: Fix use after free for URB cancellation on a reallocated endpoint
+    - usb: Don't die twice if PCI xhci host is not responding in resume
+    - usb: xhci: fix interrupt transfer error happened on MTK platforms
+    - usb: mtu3: fix error of xhci port id when enable U3 dual role
+    - mei: ignore not found client in the enumeration
+    - mei: bus: fix hw module get/put balance
+    - mei: bus: need to unlink client before freeing
+    - dm verity: fix crash on bufio buffer that was allocated with vmalloc
+    - usb: Add quirk to support DJI CineSSD
+    - usb: uas: add support for more quirk flags
+    - usb: Avoid use-after-free by flushing endpoints early in
+      usb_set_interface()
+    - usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame()
+    - usb: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB
+      controller
+    - usb: gadget: udc: renesas_usb3: fix maxpacket size of ep0
+    - usb: net2280: Fix erroneous synchronization change
+    - usb: serial: io_ti: fix array underflow in completion handler
+    - usb: misc: uss720: Fix two sleep-in-atomic-context bugs
+    - usb: serial: ti_usb_3410_5052: fix array underflow in completion handler
+    - usb: yurex: Fix buffer over-read in yurex_write()
+    - usb: cdc-wdm: Fix a sleep-in-atomic-context bug in
+      service_outstanding_interrupt()
+    - Revert "cdc-acm: implement put_char() and flush_chars()"
+    - cifs: prevent integer overflow in nxt_dir_entry()
+    - CIFS: fix wrapping bugs in num_entries()
+    - cifs: integer overflow in in SMB2_ioctl()
+    - xtensa: ISS: don't allocate memory in platform_setup
+    - perf/core: Force USER_DS when recording user stack data
+    - perf tools: Fix maps__find_symbol_by_name()
+    - of: fix phandle cache creation for DTs with no phandles
+    - x86/EISA: Don't probe EISA bus for Xen PV guests
+    - NFSv4: Fix a tracepoint Oops in initiate_file_draining()
+    - NFSv4.1 fix infinite loop on I/O.
+    - of: add helper to lookup compatible child node
+    - mmc: meson-mx-sdio: fix OF child-node lookup
+    - binfmt_elf: Respect error return from `regset->active'
+    - net/mlx5: Add missing SET_DRIVER_VERSION command translation
+    - audit: fix use-after-free in audit_add_watch
+    - mtdchar: fix overflows in adjustment of `count`
+    - vfs: fix freeze protection in mnt_want_write_file() for overlayfs
+    - bpf: fix rcu annotations in compute_effective_progs()
+    - spi: dw: fix possible race condition
+    - Bluetooth: Use lock_sock_nested in bt_accept_enqueue
+    - evm: Don't deadlock if a crypto algorithm is unavailable
+    - [powerpc*] KVM: Book3S HV: Add of_node_put() in success path
+    - security: check for kstrdup() failure in lsm_append()
+    - PM / devfreq: use put_device() instead of kfree()
+    - [powerpc*] KVM: Book3S: Fix matching of hardware and emulated TCE tables
+    - configfs: fix registered group removal
+    - sched/core: Use smp_mb() in wake_woken_function()
+    - efi/esrt: Only call efi_mem_reserve() for boot services memory
+    - [arm64] net: hns3: Reset net device with rtnl_lock
+    - [arm64] net: hns3: Fix for reset_level default assignment probelm
+    - [arm64] hisi: handle of_iomap and fix missing of_node_put
+    - [arm64] hisi: fix error handling and missing of_node_put
+    - [arm64] net: hns3: Fix return value error in hns3_reset_notify_down_enet
+    - [arm64] hisi: check of_iomap and fix missing of_node_put
+    - liquidio: fix hang when re-binding VF host drv after running DPDK VF
+      driver
+    - [armhf] gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
+    - ASoC: hdmi-codec: fix routing
+    - serial: 8250: of: Correct of_platform_serial_setup() error handling
+    - tty: fix termios input-speed encoding when using BOTHER
+    - tty: fix termios input-speed encoding
+    - [armhf, arm64] mmc: tegra: prevent HS200 on Tegra 3
+    - mmc: sdhci: do not try to use 3.3V signaling if not supported
+    - drm/nouveau: Fix runtime PM leak in drm_open()
+    - drm/nouveau/debugfs: Wake up GPU before doing any reclocking
+    - [armhf, arm64] drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping
+    - tls: Fix zerocopy_from_iter iov handling
+    - parport: sunbpp: fix error return code
+    - sched/fair: Fix util_avg of new tasks for asymmetric systems
+    - f2fs: do checkpoint in kill_sb
+    - drm/amd/display: support access ddc for mst branch
+    - gpiolib: Mark gpio_suffixes array with __maybe_unused
+    - [armhf, arm64] net: mvpp2: make sure we use single queue mode on PPv2.1
+    - mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
+    - input: rohm_bu21023: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
+    - [x86] drm/amdkfd: Fix kernel queue 64 bit doorbell offset calculation
+    - [x86] drm/amdkfd: Fix error codes in kfd_get_process
+    - ALSA: pcm: Fix snd_interval_refine first/last with open min/max
+    - scsi: libfc: fixup 'sleeping function called from invalid context'
+    - scsi: lpfc: Fix NVME Target crash in defer rcv logic
+    - scsi: lpfc: Fix panic if driver unloaded when port is offline
+    - [arm64] perf: Disable PMU while processing counter overflows
+    - drm/amd/pp: Send khz clock values to DC for smu7/8
+    - IB/mlx5: fix uaccess beyond "count" in debugfs read/write handlers
+    - blk-mq: only attempt to merge bio if there is rq in sw queue
+    - blk-mq: avoid to synchronize rcu inside blk_cleanup_queue()
+    - [arm64] pinctrl: msm: Fix msm_config_group_get() to be compliant
+    - [arm64] pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be
+      compliant
+    - [armhf, arm64] clk: tegra: bpmp: Don't crash when a clock fails to
+      register
+    - [x86] mei: bus: type promotion bug in mei_nfc_if_version()
+    - [x86] crypto: ccp - add timeout support in the SEV command
+
+  [ Vagrant Cascadian ]
+  * debian/rules.real: Generate linux-source tarball with root user and
+    group specified, to fix reproducibility issues.
+
+  [ Ben Hutchings ]
+  * drivers/net/ethernet: Ignore ABI changes
+  * [arm64] ACPI: Change ACPI_NFIT from built-in to module
+  * [i386/686] Enable MGEODE_LX instead of M686 (regression in 4.16)
+    - x86-32: Disable 3D-Now in generic config
+  * Bump ABI to 2
+
+  [ Yves-Alexis Perez ]
+  * [x86] enable PINCTRL_AMD for touchpad support on Lenovo IdeaPad.
+    (closes: #876141)
+
+  [ Geoff Levand ]
+  * [arm64] Add support for new server hardware (Closes: #900581):
+    - Enable SCHED_SMT for hardware multithreading processors
+    - Enable ARM64_LSE_ATOMICS for v8.1 processors
+    - ACPI: Enable ACPI_PCI_SLOT, ACPI_HED, ACPI_BGRT, ACPI_APEI,
+      ACPI_APEI_GHES, ACPI_APEI_PCIEAER, ACPI_APEI_SEA,
+      ACPI_APEI_MEMORY_FAILURE as built-in;
+      ACPI_APEI_EINJ, WDAT_WDT as modules
+  * [arm64] acpi: Add fixup for HPE m400 quirks
+
+  [ Salvatore Bonaccorso ]
+  * floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl
+    (CVE-2018-7755)
+  * scsi: target: iscsi: Use hex2bin instead of a re-implementation
+    (CVE-2018-14633)
+  * scsi: target: iscsi: Use bin2hex instead of a re-implementation
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 30 Sep 2018 18:02:51 +0100
+
+linux (4.18.8-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.7
+    - rcu: Make expedited GPs handle CPU 0 being offline
+    - net: 6lowpan: fix reserved space for single frames
+    - net: mac802154: tx: expand tailroom if necessary
+    - 9p/net: Fix zero-copy path in the 9p virtio transport
+    - spi: pxa2xx: Add support for Intel Ice Lake
+    - mmc: block: Fix unsupported parallel dispatch of requests
+    - readahead: stricter check for bdi io_pages
+    - block: fix infinite loop if the device loses discard capability
+    - block: blk_init_allocated_queue() set q->fq as NULL in the fail case
+    - block: really disable runtime-pm for blk-mq
+    - blkcg: Introduce blkg_root_lookup()
+    - block: Introduce blk_exit_queue()
+    - block: Ensure that a request queue is dissociated from the cgroup
+      controller
+    - apparmor: fix bad debug check in apparmor_secid_to_secctx()
+    - dma-buf: Move BUG_ON from _add_shared_fence to _add_shared_inplace
+    - libertas: fix suspend and resume for SDIO connected cards
+    - media: Revert "[media] tvp5150: fix pad format frame height"
+    - [arm64] mailbox: xgene-slimpro: Fix potential NULL pointer dereference
+    - Replace magic for trusting the secondary keyring with #define
+    - Fix kexec forbidding kernels signed with keys in the secondary keyring to
+      boot
+    - [powerpc*] fadump: handle crash memory ranges array index overflow
+    - [powerpc*] 64s: Fix page table fragment refcount race vs speculative
+      references
+    - [powerpc*] pseries: Fix endianness while restoring of r3 in MCE handler.
+    - [powerpc*] pkeys: Give all threads control of their key permissions
+    - [powerpc*] pkeys: Deny read/write/execute by default
+    - [powerpc*] pkeys: key allocation/deallocation must not change pkey
+      registers
+    - [powerpc*] pkeys: Save the pkey registers before fork
+    - [powerpc*] pkeys: Fix calculation of total pkeys.
+    - [powerpc*] pkeys: Preallocate execute-only key
+    - [powerpc*] nohash: fix pte_access_permitted()
+    - [powerpc64] ftrace: Include ftrace.h needed for enable/disable calls
+    - [powerpc*] powernv/pci: Work around races in PCI bridge enabling
+    - cxl: Fix wrong comparison in cxl_adapter_context_get()
+    - ocxl: Fix page fault handler in case of fault on dying process
+    - IB/mlx5: Honor cnt_set_id_valid flag instead of set_id
+    - IB/mlx5: Fix leaking stack memory to userspace
+    - IB/srpt: Fix srpt_cm_req_recv() error path (1/2)
+    - IB/srpt: Fix srpt_cm_req_recv() error path (2/2)
+    - IB/srpt: Support HCAs with more than two ports
+    - RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq
+    - ib_srpt: Fix a use-after-free in srpt_close_ch()
+    - ib_srpt: Fix a use-after-free in __srpt_close_all_ch()
+    - RDMA/rxe: Set wqe->status correctly if an unexpected response is received
+    - 9p: fix multiple NULL-pointer-dereferences
+    - fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr
+      failed
+    - 9p/virtio: fix off-by-one error in sg list bounds check
+    - net/9p/client.c: version pointer uninitialized
+    - net/9p/trans_fd.c: fix race-condition by flushing workqueue before the
+      kfree()
+    - dm integrity: change 'suspending' variable from bool to int
+    - dm thin: stop no_space_timeout worker when switching to write-mode
+    - dm cache metadata: save in-core policy_hint_size to on-disk superblock
+    - dm cache metadata: set dirty on all cache blocks after a crash
+    - dm crypt: don't decrease device limits
+    - dm writecache: fix a crash due to reading past end of dirty_bitmap
+    - uart: fix race between uart_put_char() and uart_shutdown()
+    - [x86] Drivers: hv: vmbus: Fix the offer_in_progress in
+      vmbus_process_offer()
+    - [x86] Drivers: hv: vmbus: Reset the channel callback in
+      vmbus_onoffer_rescind()
+    - extcon: Release locking when sending the notification of connector state
+    - [x86] vmw_balloon: fix inflation of 64-bit GFNs
+    - [x86] vmw_balloon: do not use 2MB without batching
+    - [x86] vmw_balloon: VMCI_DOORBELL_SET does not check status
+    - [x86] vmw_balloon: fix VMCI use when balloon built into kernel
+    - [armhf] rtc: omap: fix resource leak in registration error path
+    - [armhf] rtc: omap: fix potential crash on power off
+    - tracing: Do not call start/stop() functions when tracing_on does not
+      change
+    - tracing/blktrace: Fix to allow setting same value
+    - printk/tracing: Do not trace printk_nmi_enter()
+    - uprobes: Use synchronize_rcu() not synchronize_sched()
+    - mfd: hi655x: Fix regmap area declared size for hi655x
+    - ovl: fix wrong use of impure dir cache in ovl_iterate()
+    - ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
+    - ACPICA: Clear status of all events when entering sleep states
+    - drivers/block/zram/zram_drv.c: fix bug storing backing_dev
+    - sched: idle: Avoid retaining the tick when it has been stopped
+    - cpuidle: menu: Handle stopped tick more aggressively
+    - cpufreq: governor: Avoid accessing invalid governor_data
+    - PM / sleep: wakeup: Fix build error caused by missing SRCU support
+    - ALSA: ac97: fix device initialization in the compat layer
+    - ALSA: ac97: fix check of pm_runtime_get_sync failure
+    - ALSA: ac97: fix unbalanced pm_runtime_enable
+    - [x86, arm64] i2c: designware: Re-init controllers with pm_disabled set on
+      resume
+    - [x86] KVM: VMX: fixes for vmentry_l1d_flush module parameter
+    - [powerpc*] KVM: Book3S: Fix guest DMA when guest partially backed by
+      THP pages
+    - block, bfq: return nbytes and not zero from struct cftype .write() method
+    - pnfs/blocklayout: off by one in bl_map_stripe()
+    - nfsd: fix leaked file lock with nfs exported overlayfs
+    - NFSv4 client live hangs after live data migration recovery
+    - NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
+    - NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
+    - [armhf] ARM: dts: am57xx-idk: Enable dual role for USB2 port
+    - [armhf] pwm: omap-dmtimer: Return -EPROBE_DEFER if no dmtimer platform
+      data
+    - mm/tlb: Remove tlb_remove_table() non-concurrent condition
+    - [x86] iommu/vt-d: Add definitions for PFSID
+    - [x86] iommu/vt-d: Fix dev iotlb pfsid use
+    - sys: don't hold uts_sem while accessing userspace memory
+    - ubifs: Fix memory leak in lprobs self-check
+    - Revert "UBIFS: Fix potential integer overflow in allocation"
+    - ubifs: Check data node size before truncate
+    - ubifs: xattr: Don't operate on deleted inodes
+    - ubifs: Fix directory size calculation for symlinks
+    - ubifs: Fix synced_i_size calculation for xattr inodes
+    - [armhf] pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
+    - [armhf] pwm: tiehrpwm: Fix disabling of output of PWMs
+    - fb: fix lost console when the user unplugs a USB adapter
+    - udlfb: fix semaphore value leak
+    - udlfb: fix display corruption of the last line
+    - udlfb: don't switch if we are switching to the same videomode
+    - udlfb: set optimal write delay
+    - udlfb: make a local copy of fb_ops
+    - udlfb: handle allocation failure
+    - udlfb: set line_length in dlfb_ops_set_par
+    - getxattr: use correct xattr length
+    - libnvdimm: Use max contiguous area for namespace size
+    - libnvdimm: fix ars_status output length calculation
+    - bcache: release dc->writeback_lock properly in bch_writeback_thread()
+    - cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
+    - mm, dev_pagemap: Do not clear ->mapping on final put
+    - perf auxtrace: Fix queue resize
+    - [x86] crypto: vmx - Fix sleep-in-atomic bugs
+    - [x86] crypto: aesni - Use unaligned loads from gcm_context_data
+    - [arm64] crypto: arm64/sm4-ce - check for the right CPU feature bit
+    - fs/quota: Fix spectre gadget in do_quotactl
+    - udf: Fix mounting of Win7 created UDF filesystems
+    - cpuidle: menu: Retain tick when shallow state is selected
+    - [arm64] mm: always enable CONFIG_HOLES_IN_ZONE
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.8
+    - act_ife: fix a potential use-after-free
+    - ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT
+      state
+    - net: sched: Fix memory exposure from short TCA_U32_SEL
+    - qlge: Fix netdev features configuration.
+    - r8152: disable RX aggregation on new Dell TB16 dock
+    - tcp: do not restart timewait timer on rst reception
+    - vti6: remove !skb->ignore_df check from vti6_xmit()
+    - act_ife: move tcfa_lock down to where necessary
+    - act_ife: fix a potential deadlock
+    - net: sched: action_ife: take reference to meta module
+    - bnxt_en: Clean up unused functions.
+    - bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA.
+    - net/sched: act_pedit: fix dump of extended layered op
+    - tipc: fix a missing rhashtable_walk_exit()
+    - [x86] hv_netvsc: Fix a deadlock by getting rtnl lock earlier in
+      netvsc_probe()
+    - tipc: fix the big/little endian issue in tipc_dest
+    - sctp: remove useless start_fail from sctp_ht_iter in proc
+    - erspan: set erspan_ver to 1 by default when adding an erspan dev
+    - ipv6: don't get lwtstate twice in ip6_rt_copy_init()
+    - net/ipv6: init ip6 anycast rt->dst.input as ip6_input
+    - net/ipv6: Only update MTU metric if it set
+    - net/ipv6: Put lwtstate when destroying fib6_info
+    - net/mlx5: Fix SQ offset in QPs with small RQ
+    - r8169: set RxConfig after tx/rx is enabled for RTL8169sb/8110sb devices
+    - [armhf,arm64] Revert "net: stmmac: Do not keep rearming the coalesce
+      timer in stmmac_xmit"
+    - ip6_vti: fix creating fallback tunnel device for vti6
+    - ip6_vti: fix a null pointer deference when destroy vti6 tunnel
+    - nfp: wait for posted reconfigs when disabling the device
+    - sctp: hold transport before accessing its asoc in sctp_transport_get_next
+    - vhost: correctly check the iova range when waking virtqueue
+    - [x86] hv_netvsc: ignore devices that are not PCI
+    - cifs: check if SMB2 PDU size has been padded and suppress the warning
+    - hfsplus: don't return 0 when fill_super() failed
+    - hfs: prevent crash on exit from failed search
+    - sunrpc: Don't use stack buffer with scatterlist
+    - fork: don't copy inconsistent signal handler state to child
+    - fs/proc/vmcore.c: hide vmcoredd_mmap_dumps() for nommu builds
+    - reiserfs: change j_timestamp type to time64_t
+    - [armhf,arm64] iommu/rockchip: Handle errors returned from PM framework
+    - hfsplus: fix NULL dereference in hfsplus_lookup() (CVE-2018-14617)
+    - [armhf,arm64] iommu/rockchip: Move irq request past pm_runtime_enable
+    - fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
+    - fat: validate ->i_start before using
+    - workqueue: skip lockdep wq dependency in cancel_work_sync()
+    - workqueue: re-add lockdep dependencies for flushing
+    - scripts: modpost: check memory allocation results
+    - apparmor: fix an error code in __aa_create_ns()
+    - virtio: pci-legacy: Validate queue pfn
+    - [x86] mce: Add notifier_block forward declaration
+    - i2c: core: ACPI: Make acpi_gsb_i2c_read_bytes() check i2c_transfer return
+      value
+    - IB/hfi1: Invalid NUMA node information can cause a divide by zero
+    - [armhf,arm64] pwm: meson: Fix mux clock names
+    - [powerpc*] topology: Get topology for shared processors at boot
+    - mm/fadvise.c: fix signed overflow UBSAN complaint
+    - mm: make DEFERRED_STRUCT_PAGE_INIT explicitly depend on SPARSEMEM
+    - fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
+    - [x86] platform: intel_punit_ipc: fix build errors
+    - bpf, sockmap: fix map elem deletion race with smap_stop_sock
+    - tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
+    - bpf, sockmap: fix sock_map_ctx_update_elem race with exist/noexist
+    - net/xdp: Fix suspicious RCU usage warning
+    - bpf, sockmap: fix leakage of smap_psock_map_entry
+    - netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
+    - [s390x] kdump: Fix memleak in nt_vmcoreinfo
+    - ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
+    - mfd: sm501: Set coherent_dma_mask when creating subdevices
+    - netfilter: x_tables: do not fail xt_alloc_table_info too easilly
+    - [x86] platform: asus-nb-wmi: Add keymap entry for lid flip action on
+      UX360
+    - netfilter: fix memory leaks on netlink_dump_start error
+    - tcp, ulp: add alias for all ulp modules
+    - ubi: Initialize Fastmap checkmapping correctly
+    - ACPICA: ACPICA: add status check for acpi_hw_read before assigning return
+      value
+    - [arm*] perf arm spe: Fix uninitialized record error variable
+    - [arm64] net: hns3: Fix for command format parsing error in
+      hclge_is_all_function_id_zero
+    - block: don't warn for flush on read-only device
+    - [arm64] net: hns3: Fix for phy link issue when using marvell phy driver
+    - PCI: Match Root Port's MPS to endpoint's MPSS as necessary
+    - drm/amd/display: Guard against null crtc in CRC IRQ
+    - perf tools: Check for null when copying nsinfo.
+    - f2fs: avoid race between zero_range and background GC
+    - f2fs: fix avoid race between truncate and background GC
+    - net/9p/trans_fd.c: fix race by holding the lock
+    - net/9p: fix error path of p9_virtio_probe
+    - f2fs: fix to clear PG_checked flag in set_page_dirty()
+    - [armhf,arm64] pinctrl: axp209: Fix NULL pointer dereference after
+      allocation
+    - bpf: fix bpffs non-array map seq_show issue
+    - [powerpc*] uaccess: Enable get_user(u64, *p) on 32-bit
+    - [powerpc*] Fix size calculation using resource_size()
+    - [powerpc*] perf probe powerpc: Fix trace event post-processing
+    - block: bvec_nr_vecs() returns value for wrong slab
+    - brcmfmac: fix brcmf_wiphy_wowl_params() NULL pointer dereference
+    - [s390x] dasd: fix hanging offline processing due to canceled worker
+    - [s390x] dasd: fix panic for failed online processing
+    - ACPI / scan: Initialize status to ACPI_STA_DEFAULT
+    - blk-mq: count the hctx as active before allocating tag
+    - scsi: aic94xx: fix an error code in aic94xx_init()
+    - NFSv4: Fix error handling in nfs4_sp4_select_mode()
+    - Input: do not use WARN() in input_alloc_absinfo()
+    - xen/balloon: fix balloon initialization for PVH Dom0
+    - [armhf] PCI: mvebu: Fix I/O space end address calculation
+    - dm kcopyd: avoid softlockup in run_complete_job
+    - [x86] staging: comedi: ni_mio_common: fix subdevice flags for PFI
+      subdevice
+    - ASoC: rt5677: Fix initialization of rt5677_of_match.data
+    - [armhf] iommu/omap: Fix cache flushes on L2 table entries
+    - selinux: cleanup dentry and inodes on error in selinuxfs
+    - RDS: IB: fix 'passing zero to ERR_PTR()' warning
+    - cfq: Suppress compiler warnings about comparisons
+    - smb3: fix reset of bytes read and written stats
+    - CIFS: fix memory leak and remove dead code
+    - SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
+    - smb3: if server does not support posix do not allow posix mount option
+    - [powerpcspe] platforms/85xx: fix t1042rdb_diu.c build errors & warning
+    - [powerpc*] 64s: Make rfi_flush_fallback a little more robust
+    - [powerpc*] pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
+    - [armhf,arm64] clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in
+      rk3399
+    - drm/amd/display: Read back max backlight value at boot
+    - [x86] KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
+    - [x86] kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
+    - [armhf] drm/etnaviv: fix crash in GPU suspend when init failed due to
+      buffer placement
+    - btrfs: Exit gracefully when chunk map cannot be inserted to the tree
+    - btrfs: replace: Reset on-disk dev stats value after replace
+    - btrfs: fix in-memory value of total_devices after seed device deletion
+    - btrfs: relocation: Only remove reloc rb_trees if reloc control has been
+      initialized (CVE-2018-14609)
+    - btrfs: tree-checker: Detect invalid and empty essential trees
+      (CVE-2018-14612)
+    - btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
+    - btrfs: lift uuid_mutex to callers of btrfs_open_devices
+    - btrfs: Don't remove block group that still has pinned down bytes
+    - btrfs: Fix a C compliance issue
+    - [armhf,arm64] rockchip: Force CONFIG_PM on Rockchip systems
+    - btrfs: do btrfs_free_stale_devices outside of device_list_add
+    - btrfs: extend locked section when adding a new device in device_list_add
+    - btrfs: rename local devices for fs_devices in btrfs_free_stale_devices(
+    - btrfs: use device_list_mutex when removing stale devices
+    - btrfs: lift uuid_mutex to callers of btrfs_scan_one_device
+    - btrfs: lift uuid_mutex to callers of btrfs_parse_early_options
+    - btrfs: reorder initialization before the mount locks uuid_mutex
+    - btrfs: fix mount and ioctl device scan ioctl race
+    - [x86] drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
+    - [x86] drm/i915: Nuke the LVDS lid notifier
+    - [x86] drm/i915: Increase LSPCON timeout
+    - [x86] drm/i915: Free write_buf that we allocated with kzalloc.
+    - drm/amdgpu: update uvd_v6_0_ring_vm_funcs to use new nop packet
+    - drm/amdgpu: fix a reversed condition
+    - drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
+    - drm/amd/pp: Convert voltage unit in mV*4 to mV on CZ/ST
+    - drm/amd/powerplay: fixed uninitialized value
+    - drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
+    - drm/edid: Quirk Vive Pro VR headset non-desktop.
+    - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
+    - drm/amd/display: fix type of variable
+    - drm/amd/display: Don't share clk source between DP and HDMI
+    - drm/amd/display: update clk for various HDMI color depths
+    - drm/amd/display: Use requested HDMI aspect ratio
+    - drm/amd/display: Report non-DP display as disconnected without EDID
+    - [armhf,arm64] drm/rockchip: lvds: add missing of_node_put
+    - [armhf,arm64] drm/rockchip: vop: split out core clock enablement into
+      separate functions
+    - [armhf,arm64] drm/rockchip: vop: fix irq disabled after vop driver probed
+    - drm/amd/display: Pass connector id when executing VBIOS CT
+    - drm/amd/display: Check if clock source in use before disabling
+    - drm/amdgpu: update tmr mc address
+    - drm/amdgpu:add tmr mc address into amdgpu_firmware_info
+    - drm/amdgpu:add new firmware id for VCN
+    - drm/amdgpu:add VCN support in PSP driver
+    - drm/amdgpu:add VCN booting with firmware loaded by PSP
+    - drm/amdgpu: fix incorrect use of fcheck
+    - drm/amdgpu: fix incorrect use of drm_file->pid
+    - [x86] drm/i915: Re-apply "Perform link quality check, unconditionally
+      during long pulse"
+    - uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member
+      name
+    - mm: respect arch_dup_mmap() return value
+    - [x86] drm/i915: set DP Main Stream Attribute for color range on DDI
+      platforms
+    - [i386] tsc: Prevent result truncation on 32bit
+    - drm/amdgpu: Keep track of amount of pinned CPU visible VRAM
+    - drm/amdgpu: Make pin_size values atomic
+    - drm/amdgpu: Warn and update pin_size values when destroying a pinned BO
+    - drm/amdgpu: Don't warn on destroying a pinned BO
+    - debugobjects: Make stack check warning more informative
+    - [i386] pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
+    - [x86] xen: don't write ptes directly in 32-bit PV guests
+    - [x86] kvm: Set highest physical address bits in non-present/reserved SPTEs
+    - [x86] kvm: avoid unused variable warning
+    - HID: redragon: fix num lock and caps lock LEDs
+
+  [ Ben Hutchings ]
+  * [x86] wireless: Enable R8822BE as module (Closes: #908330)
+  * Move all patch generation scripts to debian/bin
+  * [rt] genpatch-rt: Store patches and series file in debian/patches-rt
+  * linux-headers: Stop linking the doc directory, which is not binNMU-safe
+  * debian/copyright: Simplify exclusions to work with mk-origtargz
+  * debian/{watch,bin/uscan-hook}: Drop uscan hook in favour of uupdate
+  * debian/watch: Add options for signature validation
+  * README.Debian: Update URLs that were pointing to Alioth
+  * README.Debian: Describe where to find patches for a specific version
+  * Revert "i40e: Add kconfig dependency to ensure cmpxchg64() is available"
+
+  [ Salvatore Bonaccorso ]
+  * mac80211: don't update the PM state of a peer upon a multicast frame
+    (Closes: #887045, #886292)
+
+  [ Romain Perier ]
+  * [x86] Enable TI TPS6598x USB Power Delivery controller family
+  * [x86] crypto: ccp: add timeout support in the SEV command (Closes: #908248)
+  * [rt] Update to 4.18.7-rt5
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 18 Sep 2018 03:05:01 +0100
+
+linux (4.18.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6
+    - scsi: libsas: dynamically allocate and free ata host
+    - xprtrdma: Fix disconnect regression
+    - mei: don't update offset in write
+    - cifs: add missing support for ACLs in SMB 3.11
+    - cifs: fix uninitialized ptr deref in smb2 signing
+    - cifs: add missing debug entries for kconfig options
+    - cifs: use a refcount to protect open/closing the cached file handle
+    - cifs: check kmalloc before use
+    - smb3: enumerating snapshots was leaving part of the data off end
+    - smb3: Do not send SMB3 SET_INFO if nothing changed
+    - smb3: don't request leases in symlink creation and query
+    - smb3: fill in statfs fsid and correct namelen
+    - btrfs: use correct compare function of dirty_metadata_bytes
+    - btrfs: don't leak ret from do_chunk_alloc
+    - Btrfs: fix mount failure after fsync due to hard link recreation
+    - Btrfs: fix btrfs_write_inode vs delayed iput deadlock
+    - Btrfs: fix send failure when root has deleted files still open
+    - Btrfs: send, fix incorrect file layout after hole punching beyond eof
+    - hwmon: (k10temp) 27C Offset needed for Threadripper2
+    - [armhf] bpf: fix stack var offset in jit
+    - [armhf, arm64] iommu/arm-smmu: Error out only if not enough context
+      interrupts
+    - printk: Split the code for storing a message into the log buffer
+    - printk: Create helper function to queue deferred console handling
+    - printk/nmi: Prevent deadlock when accessing the main log buffer in NMI
+    - [arm64] kprobes: Fix %p uses in error messages
+    - [arm64] Fix mismatched cache line size detection
+    - [arm64] Handle mismatched cache type
+    - [arm64] mm: check for upper PAGE_SHIFT bits in pfn_valid()
+    - [arm64] dts: rockchip: corrected uart1 clock-names for rk3328
+    - [armhf, arm64] KVM: Fix potential loss of ptimer interrupts
+    - [armhf, arm64] KVM: Fix lost IRQs from emulated physcial timer when
+      blocked
+    - [armhf, arm64] KVM: Skip updating PMD entry if no change
+    - [armhf, arm64] KVM: Skip updating PTE entry if no change
+    - [s390x] kvm: fix deadlock when killed by oom
+    - [s390x] perf kvm: Fix subcommands on s390
+    - stop_machine: Reflow cpu_stop_queue_two_works()
+    - stop_machine: Atomically queue and wake stopper threads
+    - ext4: check for NUL characters in extended attribute's name
+    - ext4: use ext4_warning() for sb_getblk failure
+    - ext4: sysfs: print ext4_super_block fields as little-endian
+    - ext4: reset error code in ext4_find_entry in fallback
+    - ext4: fix race when setting the bitmap corrupted flag
+    - nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event
+    - [x86] gpu: reserve ICL's graphics stolen memory
+    - [x86] platform: wmi: Do not mix pages and kmalloc
+    - [x86] platform: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too
+    - mm: move tlb_table_flush to tlb_flush_mmu_free
+    - [x86] mm/tlb, mm: Support invalidating TLB caches for RCU_TABLE_FREE
+    - [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit
+    - [x86] speculation/l1tf: Fix off-by-one error when warning that system has
+      too much RAM (Closes: #907581)
+    - [x86] speculation/l1tf: Suggest what to do on systems with too much RAM
+    - [x86] vdso: Fix vDSO build if a retpoline is emitted
+    - [x86] process: Re-export start_thread()
+    - [x86] KVM: ensure all MSRs can always be KVM_GET/SET_MSR'd
+    - [x86] KVM: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts
+      disabled
+    - fuse: Don't access pipe->buffers without pipe_lock()
+    - fuse: fix initial parallel dirops
+    - fuse: fix double request_end()
+    - fuse: fix unlocked access to processing queue
+    - fuse: umount should wait for all requests
+    - fuse: Fix oops at process_init_reply()
+    - fuse: Add missed unlock_page() to fuse_readpages_fill()
+    - lib/vsprintf: Do not handle %pO[^F] as %px
+    - udl-kms: change down_interruptible to down
+    - udl-kms: handle allocation failure
+    - udl-kms: fix crash due to uninitialized memory
+    - udl-kms: avoid division
+    - b43legacy/leds: Ensure NUL-termination of LED name string
+    - b43/leds: Ensure NUL-termination of LED name string
+    - ASoC: dpcm: don't merge format from invalid codec dai
+    - ASoC: zte: Fix incorrect PCM format bit usages
+    - ASoC: sirf: Fix potential NULL pointer dereference
+    - ASoC: wm_adsp: Correct DSP pointer for preloader control
+    - [armhf] pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
+    - scsi: qla2xxx: Fix stalled relogin
+    - [x86] vdso: Fix lsl operand order
+    - [x86 ]nmi: Fix NMI uaccess race against CR3 switching
+    - [x86] irqflags: Mark native_restore_fl extern inline
+    - [x86] spectre: Add missing family 6 check to microcode check
+    - [x86] speculation/l1tf: Increase l1tf memory limit for Nehalem+
+      (Closes: #907581)
+    - hwmon: (nct6775) Fix potential Spectre v1
+    - [x86] entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit()
+    - [x86] Allow generating user-space headers without a compiler
+    - [s390x] mm: fix addressing exception after suspend/resume
+    - [s390x] lib: use expoline for all bcr instructions
+    - [s390x] fix br_r1_trampoline for machines without exrl
+    - [s390x] qdio: reset old sbal_state flags
+    - [s390x] numa: move initial setup of node_to_cpumask_map
+    - [s390x] pci: fix out of bounds access during irq setup
+    - [s390x] purgatory: Fix crash with expoline enabled
+    - [s390x] purgatory: Add missing FORCE to Makefile targets
+    - kprobes: Show blacklist addresses as same as kallsyms does
+    - kprobes: Replace %p with other pointer types
+    - kprobes/arm: Fix %p uses in error messages
+    - kprobes: Make list and blacklist root user read only
+    - [mips*] Correct the 64-bit DSP accumulator register size
+    - [mips*] memset.S: Fix byte_fixup for MIPSr6
+    - [mips*] Always use -march=<arch>, not -<arch> shortcuts
+    - [mips*] Change definition of cpu_relax() for Loongson-3
+    - [mips*] lib: Provide MIPS64r6 __multi3() for GCC < 7
+    - tpm: Return the actual size when receiving an unsupported command
+    - tpm: separate cmd_ready/go_idle from runtime_pm
+    - scsi: mpt3sas: Fix calltrace observed while running IO & reset
+    - scsi: mpt3sas: Fix _transport_smp_handler() error path
+    - scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
+    - scsi: core: Avoid that SCSI device removal through sysfs triggers a
+      deadlock
+    - iscsi target: fix session creation failure handling
+    - mtd: rawnand: hynix: Use ->exec_op() in hynix_nand_reg_write_op()
+    - mtd: rawnand: fsmc: Stop using chip->read_buf()
+    - mtd: rawnand: marvell: add suspend and resume hooks
+    - mtd: rawnand: qcom: wait for desc completion in all BAM channels
+    - [arm64] clk: rockchip: fix clk_i2sout parent selection bits on rk3399
+    - PM / clk: signedness bug in of_pm_clk_add_clks()
+    - power: generic-adc-battery: fix out-of-bounds write when copying channel
+      properties
+    - power: generic-adc-battery: check for duplicate properties copied from
+      iio channels
+    - watchdog: Mark watchdog touch functions as notrace
+    - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status
+    - [x86] dumpstack: Don't dump kernel memory based on usermode RIP
+
+  [ Ben Hutchings ]
+  * Set ABI to 1
+  * [x86,arm64] Disable code signing for upload to unstable
+  * [rt] Re-enable PREEMPT_RT
+  * aufs: Update support patchset to aufs4.18-20180827 (no functional change)
+  * netfilter: Enable NF_TABLES_SET as module, replacing the multiple set
+    type modules that were enabled before 4.18
+  * [powerpc,powerpcspe,ppc64] Build-Depend on updated kernel-wedge to fix
+    broken symlinks in kernel-image udeb
+
+  [ Romain Perier ]
+  * [rt] Update to 4.18.5-rt3
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 06 Sep 2018 15:32:14 +0100
+
+linux (4.18.5-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.18
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.1
+    - [x86] paravirt: Fix spectre-v2 mitigations for paravirt guests
+    - [x86] speculation: Protect against userspace-userspace spectreRSB
+    - [x86] kprobes: Fix %p uses in error messages
+    - [x86] irqflags: Provide a declaration for native_save_fl
+    - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
+    - [x86] speculation/l1tf: Change order of offset/type in swap entry
+    - [x86] speculation/l1tf: Protect swap entries against L1TF
+    - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation
+    - [x86] speculation/l1tf: Make sure the first page is always reserved
+    - [x86] speculation/l1tf: Add sysfs reporting for l1tf
+    - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE
+      mappings
+    - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2
+    - [x86] Move the l1tf function and define pr_fmt properly
+    - sched/smt: Update sched_smt_present at runtime
+    - [x86] smp: Provide topology_is_primary_thread()
+    - [x86] topology: Provide topology_smt_supported()
+    - cpu/hotplug: Make bringup/teardown of smp threads symmetric
+    - cpu/hotplug: Split do_cpu_down()
+    - cpu/hotplug: Provide knobs to control SMT
+    - [x86] cpu: Remove the pointless CPU printout
+    - [x86] cpu/AMD: Remove the pointless detect_ht() call
+    - [x86] cpu/common: Provide detect_ht_early()
+    - [x86] cpu/topology: Provide detect_extended_topology_early()
+    - [x86] cpu/intel: Evaluate smp_num_siblings early
+    - [x86] cpu/AMD: Do not check CPUID max ext level before parsing SMP info
+    - [x86] cpu/AMD: Evaluate smp_num_siblings early
+    - [x86] apic: Ignore secondary threads if nosmt=force
+    - [x86] speculation/l1tf: Extend 64bit swap file size limit
+    - [x86] cpufeatures: Add detection of L1D cache flush support.
+    - [x86] cpu/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
+    - [x86] speculation/l1tf: Protect PAE swap entries against L1TF
+    - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE
+    - Revert "x86/apic: Ignore secondary threads if nosmt=force"
+    - cpu/hotplug: Boot HT siblings at least once
+    - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present
+    - [x86] KVM/VMX: Add module argument for L1TF mitigation
+    - [x86] KVM/VMX: Add L1D flush algorithm
+    - [x86] KVM/VMX: Add L1D MSR based flush
+    - [x86] KVM/VMX: Add L1D flush logic
+    - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest
+      numbers
+    - [x86] KVM/VMX: Add find_msr() helper function
+    - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting
+    - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
+    - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
+    - cpu/hotplug: Online siblings when SMT control is turned on
+    - [x86] litf: Introduce vmx status variable
+    - [x86] kvm: Drop L1TF MSR list approach
+    - [x86] l1tf: Handle EPT disabled state proper
+    - [x86] kvm: Move l1tf setup function
+    - [x86] kvm: Add static key for flush always
+    - [x86] kvm: Serialize L1D flush parameter setter
+    - [x86] kvm: Allow runtime control of L1D flush
+    - cpu/hotplug: Expose SMT control init function
+    - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
+    - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations
+    - [x86] speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED
+      architectures
+    - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content
+    - cpu/hotplug: detect SMT disabled by BIOS
+    - [x86] KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
+    - [x86] KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
+    - [x86] KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
+    - [x86] irq: Demote irq_cpustat_t::__softirq_pending to u16
+    - [x86] KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
+    - [x86] Don't include linux/irq.h from asm/hardirq.h
+    - [x86] irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
+    - [x86] KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
+    - [x86] speculation: Simplify sysfs report of VMX L1TF vulnerability
+    - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
+    - [x86] KVM/VMX: Tell the nested hypervisor to skip L1D flush on vmentry
+    - cpu/hotplug: Fix SMT supported evaluation
+    - [x86] speculation/l1tf: Invert all not present mappings
+    - [x86] speculation/l1tf: Make pmd/pud_mknotpresent() invert
+    - [x86] mm/pat: Make set_memory_np() L1TF safe
+    - [x86] mm/kmmio: Make the tracer robust against L1TF
+    - tools headers: Synchronise x86 cpufeatures.h for L1TF additions
+    - [x86] microcode: Allow late microcode loading with SMT disabled
+    - cpu/hotplug: Non-SMP machines do not make use of booted_once
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.2
+    - [x86] l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled
+    - [x86] hyper-v: Check for VP_INVAL in hyperv_flush_tlb_others()
+    - [x86] platform/UV: Mark memblock related init code and data correctly
+    - [x86] mm/pti: Clear Global bit more aggressively
+    - [x86] xen/pv: Call get_cpu_address_sizes to set x86_virt/phys_bits
+    - [x86] mm: Disable ioremap free page handling on x86-PAE
+    - crypto: ccp - Check for NULL PSP pointer at module unload
+    - crypto: ccp - Fix command completion detection race
+    - [x86] crypto: x86/sha256-mb - fix digest copy in
+      sha256_mb_mgr_get_comp_job_avx2()
+    - crypto: vmac - require a block cipher with 128-bit block size
+    - crypto: vmac - separate tfm and request context
+    - Bluetooth: hidp: buffer overflow in hidp_process_report (CVE-2018-9363)
+    - ioremap: Update pgtable free interfaces with addr
+    - [x86] mm: Add TLB purge to free pmd/pte page interfaces
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.3
+    - [x86] speculation/l1tf: Exempt zeroed PTEs from inversion
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.4
+    - l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
+    - net_sched: fix NULL pointer dereference when delete tcindex filter
+    - net_sched: Fix missing res info when create new tc_index filter
+    - r8169: don't use MSI-X on RTL8168g
+    - ALSA: hda - Sleep for 10ms after entering D3 on Conexant codecs
+    - ALSA: hda - Turn CX8200 into D3 as well upon reboot
+    - ALSA: vx222: Fix invalid endian conversions
+    - ALSA: cs5535audio: Fix invalid endian conversion
+    - ALSA: dice: fix wrong copy to rx parameters for Alesis iO26
+    - ALSA: hda: Correct Asrock B85M-ITX power_save blacklist entry
+    - ALSA: memalloc: Don't exceed over the requested size
+    - ALSA: vxpocket: Fix invalid endian conversions
+    - ALSA: seq: Fix poll() error return
+    - media: gl861: fix probe of dvb_usb_gl861
+    - USB: serial: sierra: fix potential deadlock at close
+    - USB: serial: pl2303: add a new device id for ATEN
+    - USB: option: add support for DW5821e
+    - [x86] ACPI / PM: save NVS memory for ASUS 1025C laptop
+    - tty: serial: 8250: Revert NXP SC16C2552 workaround
+    - serial: 8250_exar: Read INT0 from slave device, too
+    - [x86, armhf, arm64] serial: 8250_dw: always set baud rate in
+      dw8250_set_termios
+    - [armhf, arm64] serial: 8250_dw: Add ACPI support for uart on Broadcom SoC
+    - uio: fix wrong return value from uio_mmap()
+    - Revert "uio: use request_threaded_irq instead"
+    - Bluetooth: avoid killing an already killed socket
+    - net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd()
+    - [x86] hv/netvsc: Fix NULL dereference at single queue mode fallback
+    - r8169: don't use MSI-X on RTL8106e
+    - ip_vti: fix a null pointer deferrence when create vti fallback tunnel
+    - [arm64] net: ethernet: mvneta: Fix napi structure mixup on armada 3700
+    - [arm64] net: mvneta: fix mvneta_config_rss on armada 3700
+    - cls_matchall: fix tcf_unbind_filter missing
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.5
+    - [mips*, x86] EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[]
+    - pty: fix O_CLOEXEC for TIOCGPTPEER
+    - mm: Allow non-direct-map arguments to free_reserved_area()
+    - [x86] mm/init: Pass unconverted symbol addresses to free_init_pages()
+    - [x86] mm/init: Add helper for freeing kernel image pages
+    - [x86] mm/init: Remove freed kernel image areas from alias mapping
+    - [powerpc64] Show ori31 availability in spectre_v1 sysfs file not v2
+    - ext4: fix spectre gadget in ext4_mb_regular_allocator()
+    - [x86] drm/i915/kvmgt: Fix potential Spectre v1
+    - drm/amdgpu/pm: Fix potential Spectre v1
+    - [hppa/parisc] Remove unnecessary barriers from spinlock.h
+    - [hppa/parisc] Remove ordered stores from syscall.S
+    - PCI: Restore resized BAR state on resume
+    - PCI/ACPI/PM: Resume all bridges on suspend-to-RAM
+    - PCI: hotplug: Don't leak pci_slot on registration failure
+    - [arm64] PCI: aardvark: Size bridges before resources allocation
+    - PCI: Skip MPS logic for Virtual Functions (VFs)
+    - PCI: pciehp: Fix use-after-free on unplug
+    - PCI: pciehp: Fix unprotected list iteration in IRQ handler
+    - i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes
+    - [armhf] i2c: imx: Fix race condition in dma read
+    - reiserfs: fix broken xattr handling (heap corruption, bad retval)
+
+  [ Uwe Kleine-König ]
+  * [arm64] enable RTC_DRV_PCF8563 for Odroid-C2
+
+  [ Romain Perier ]
+  * [armhf, arm64] add the rt featureset, which adds support for
+    PREEMPT_RT (Closes #719547)
+  * spi: Enable CONFIG_SPI_SPIDEV (Closes: #904043)
+
+  [ Ben Hutchings ]
+  * certs: Remove certificate for my personal signing key
+  * Update policy version to 4.2.0:
+    - linux-kbuild: Change "#!/usr/bin/env perl" to "#!/usr/bin/perl"
+    - Build with KBUILD_VERBOSE=1 by default
+    - objtool, usbip: Build with V=1 by default
+  * cpupower: Fix handling of noopt and nostrip build options
+  * debian/bin/gencontrol_signed.py: Add certificate fingerprints to template
+    metadata
+  * scripts/kernel-doc: Escape all literal braces in regexes (Closes: #905116)
+  * debian/bin/genorig.py: Add support for debian/copyright Files-Excluded
+    field
+  * Move file exclusion from d/p/debian/dfsg/files-1 to d/copyright
+  * Move disabling of broken features from d/p/series-orig to d/p/series
+  * Remove our private patch system, which is no longer needed
+  * debian/bin: Change "#!/usr/bin/env python3" to "#!/usr/bin/python3"
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 26 Aug 2018 20:52:17 +0100
+
+linux (4.18~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] net: Enable CONFIG_XSURF100 as module.
+  * [m68k] udeb: Remove individual modules from nic-modules.
+  * [m68k] scsi: Enable CONFIG_SCSI_ZORRO_ESP as module.
+  * [m68k] udeb: Add zorro_esp module to scsi-modules.
+
+  [ Ben Hutchings ]
+  * [powerpcspe] powerpc/Makefile: Assemble with -me500 when building for E500
+    (fixes FTBFS) (thanks to James Clarke)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 19 Jul 2018 16:16:23 +0100
+
+linux (4.18~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * Remove remaining Python 2 (build-)dependencies:
+    - Build docs using Python 3 version of Sphinx
+    - linux-perf: Build docs using asciidoctor
+    - linux-perf: Use Python 3 for scripts
+  * autofs: rename 'autofs' module back to 'autofs4' (Closes: #902946)
+  * udeb: Move of_mdio to nic-shared-modules (Closes: #903587)
+  * [armhf] mm: Export __sync_icache_dcache() for xen-privcmd (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 12 Jul 2018 05:12:50 +0100
+
+linux (4.18~rc3-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs4.x-rcN 20180702
+  * netfilter: ipvs: Fix invalid bytes in IP_VS_MH_TAB_INDEX help text
+  * Update config for 4.18 using kconfigeditor2
+    - [x86,arm64] PCI: HOTPLUG_PCI_SHPC is now built-in
+  * Move config files from linux-source-<version> to an arch-dependent
+    linux-config-<version> package
+  * lockdep: Stub task_struct::state
+  * [sh4] udeb: Add nic-shared-modules package
+  * udeb: Moved fixed_phy to nic-shared-modules
+
+  [ YunQiang Su ]
+  * [mips*r6*] Enable dtb building for boston.
+  * [mips*r6*/mipsn32*] build linux-perf in rules.real.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 03 Jul 2018 17:26:05 +0100
+
+linux (4.17.17-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.16
+    - [x86] platform/UV: Mark memblock related init code and data correctly
+    - [x86] mm/pti: Clear Global bit more aggressively
+    - [x86] xen/pv: Call get_cpu_address_sizes to set x86_virt/phys_bits
+    - [x86] mm: Disable ioremap free page handling on x86-PAE
+    - kbuild: verify that $DEPMOD is installed
+    - [x86] crypto: ccp - Check for NULL PSP pointer at module unload
+    - [x86] crypto: ccp - Fix command completion detection race
+    - crypto: vmac - require a block cipher with 128-bit block size
+    - crypto: vmac - separate tfm and request context
+    - crypto: blkcipher - fix crash flushing dcache in error path
+    - crypto: ablkcipher - fix crash flushing dcache in error path
+    - crypto: skcipher - fix aligning block size in skcipher_copy_iv()
+    - crypto: skcipher - fix crash flushing dcache in error path
+    - ioremap: Update pgtable free interfaces with addr
+    - [x86] mm: Add TLB purge to free pmd/pte page interfaces
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.17
+    - [x86] speculation/l1tf: Exempt zeroed PTEs from inversion
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 18 Aug 2018 14:02:58 +0200
+
+linux (4.17.15-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.15
+    - [hppa/parisc] Enable CONFIG_MLONGCALLS by default
+    - [hppa/parisc] Define mb() and add memory barriers to assembler unlock
+      sequences
+    - Mark HI and TASKLET softirq synchronous
+    - stop_machine: Disable preemption after queueing stopper threads
+    - sched/deadline: Update rq_clock of later_rq when pushing a task
+    - zram: remove BD_CAP_SYNCHRONOUS_IO with writeback feature
+    - xen/netfront: don't cache skb_shinfo()
+    - bpf, sockmap: fix leak in bpf_tcp_sendmsg wait for mem path
+    - bpf, sockmap: fix bpf_tcp_sendmsg sock error handling
+    - scsi: sr: Avoid that opening a CD-ROM hangs with runtime power
+      management enabled
+    - scsi: qla2xxx: Fix memory leak for allocating abort IOCB
+    - init: rename and re-order boot_cpu_state_init()
+    - root dentries need RCU-delayed freeing
+    - make sure that __dentry_kill() always invalidates d_seq, unhashed or not
+    - fix mntput/mntput race
+    - fix __legitimize_mnt()/mntput() race
+    - [armhf] dts: imx6sx: fix irq for pcie bridge
+    - [x86] paravirt: Fix spectre-v2 mitigations for paravirt guests
+    - [x86] speculation: Protect against userspace-userspace spectreRSB
+    - [x86] kprobes/x86: Fix %p uses in error messages
+    - [x86] irqflags: Provide a declaration for native_save_fl
+    - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
+    - [x86] speculation/l1tf: Change order of offset/type in swap entry
+    - [x86] speculation/l1tf: Protect swap entries against L1TF
+    - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation
+    - [x86] speculation/l1tf: Make sure the first page is always reserved
+    - [x86] speculation/l1tf: Add sysfs reporting for l1tf
+    - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE
+      mappings
+    - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2
+    - [x86] bugs: Move the l1tf function and define pr_fmt properly
+    - sched/smt: Update sched_smt_present at runtime
+    - [x86] smp: Provide topology_is_primary_thread()
+    - [x86] topology: Provide topology_smt_supported()
+    - cpu/hotplug: Make bringup/teardown of smp threads symmetric
+    - cpu/hotplug: Split do_cpu_down()
+    - cpu/hotplug: Provide knobs to control SMT
+    - [x86] cpu: Remove the pointless CPU printout
+    - [x86] cpu/AMD: Remove the pointless detect_ht() call
+    - [x86] cpu/common: Provide detect_ht_early()
+    - [x86] cpu/topology: Provide detect_extended_topology_early()
+    - [x86] cpu/intel: Evaluate smp_num_siblings early
+    - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info
+    - [x86] cpu/AMD: Evaluate smp_num_siblings early
+    - [x86] apic: Ignore secondary threads if nosmt=force
+    - [x86] speculation/l1tf: Extend 64bit swap file size limit
+    - [x86] cpufeatures: Add detection of L1D cache flush support.
+    - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
+    - [x86] speculation/l1tf: Protect PAE swap entries against L1TF
+    - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE
+    - Revert "[x86] apic: Ignore secondary threads if nosmt=force"
+    - cpu/hotplug: Boot HT siblings at least once
+    - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present
+    - [x86] KVM/VMX: Add module argument for L1TF mitigation
+    - [x86] KVM/VMX: Add L1D flush algorithm
+    - [x86] KVM/VMX: Add L1D MSR based flush
+    - [x86] KVM/VMX: Add L1D flush logic
+    - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest
+      numbers
+    - [x86] KVM/VMX: Add find_msr() helper function
+    - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting
+    - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
+    - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
+    - cpu/hotplug: Online siblings when SMT control is turned on
+    - [x86] litf: Introduce vmx status variable
+    - [x86] kvm: Drop L1TF MSR list approach
+    - [x86] l1tf: Handle EPT disabled state proper
+    - [x86] kvm: Move l1tf setup function
+    - [x86] kvm: Add static key for flush always
+    - [x86] kvm: Serialize L1D flush parameter setter
+    - [x86] kvm: Allow runtime control of L1D flush
+    - cpu/hotplug: Expose SMT control init function
+    - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
+    - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations
+    - Documentation: Add section about CPU vulnerabilities
+    - [x86] speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED
+      architectures
+    - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content
+    - Documentation/l1tf: Fix typos
+    - cpu/hotplug: detect SMT disabled by BIOS
+    - [x86] KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
+    - [x86] KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
+    - [x86] KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
+    - [x86] irq: Demote irq_cpustat_t::__softirq_pending to u16
+    - [x86] KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
+    - [x86] Don't include linux/irq.h from asm/hardirq.h
+    - [x86] irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
+    - [x86] KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
+    - Documentation/l1tf: Remove Yonah processors from not vulnerable list
+    - [x86] speculation: Simplify sysfs report of VMX L1TF vulnerability
+    - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
+    - KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
+    - cpu/hotplug: Fix SMT supported evaluation
+    - [x86] speculation/l1tf: Invert all not present mappings
+    - [x86] speculation/l1tf: Make pmd/pud_mknotpresent() invert
+    - [x86] mm/pat: Make set_memory_np() L1TF safe
+    - [x86] mm/kmmio: Make the tracer robust against L1TF
+    - tools headers: Synchronize prctl.h ABI header
+    - tools headers: Synchronise x86 cpufeatures.h for L1TF additions
+    - [x86] microcode: Allow late microcode loading with SMT disabled
+    - [x86] smp: fix non-SMP broken build due to redefinition of
+      apic_id_is_primary_thread
+    - cpu/hotplug: Non-SMP machines do not make use of booted_once
+    - [x86] init: fix build with CONFIG_SWAP=n
+    - [x86] CPU/AMD: Have smp_num_siblings and cpu_llc_id always be present
+
+  [ Ben Hutchings ]
+  * serdev: Enable SERIAL_DEV_BUS, SERIAL_DEV_CTRL_TTYPORT as built-in
+    (except on armel)
+    - bluetooth: Re-enable BT_HCIUART_{BCM,LL} (Closes: #906048)
+  * drivers/net/phy: Enable SFP as module (Closes: #906054)
+  * Revert "net: increase fragment memory usage limits" (CVE-2018-5391)
+
+  [ Salvatore Bonaccorso ]
+  * [x86] l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled
+  * [x86] i8259: Add missing include file
+  * Bluetooth: hidp: buffer overflow in hidp_process_report (CVE-2018-9363)
+  * Bump ABI to 3
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 17 Aug 2018 05:11:43 +0200
+
+linux (4.17.14-1) unstable; urgency=high
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.9
+    - compiler-gcc.h: Add __attribute__((gnu_inline)) to all inline declarations
+    - [x86] asm: Add _ASM_ARG* constants for argument registers to <asm/asm.h>
+    - [x86] paravirt: Make native_save_fl() extern inline
+    - alx: take rtnl before calling __alx_open from resume
+    - atm: Preserve value of skb->truesize when accounting to vcc
+    - atm: zatm: Fix potential Spectre v1
+    - [x86] hv_netvsc: split sub-channel setup into async and sync
+    - ipv6: sr: fix passing wrong flags to crypto_alloc_shash()
+    - ipvlan: fix IFLA_MTU ignored on NEWLINK
+    - ixgbe: split XDP_TX tail and XDP_REDIRECT map flushing
+    - net: dccp: avoid crash in ccid3_hc_rx_send_feedback()
+    - net: dccp: switch rx_tstamp_last_feedback to monotonic clock
+    - net: fix use-after-free in GRO with ESP
+    - net/mlx5e: Avoid dealing with vport representors if not being e-switch
+      manager
+    - net/mlx5e: Don't attempt to dereference the ppriv struct if not being
+      eswitch manager
+    - net/mlx5: E-Switch, Avoid setup attempt if not being e-switch manager
+    - net/mlx5: Fix command interface race in polling mode
+    - net/mlx5: Fix incorrect raw command length parsing
+    - net/mlx5: Fix required capability for manipulating MPFS
+    - net/mlx5: Fix wrong size allocation for QoS ETC TC regitster
+    - [armhf, arm64] net: mvneta: fix the Rx desc DMA address in the Rx path
+    - net/packet: fix use-after-free
+    - net/sched: act_ife: fix recursive lock and idr leak
+    - net/sched: act_ife: preserve the action control in case of error
+    - net_sched: blackhole: tell upper qdisc about dropped packets
+    - net: sungem: fix rx checksum support
+    - net/tcp: Fix socket lookups with SO_BINDTODEVICE
+    - qede: Adverstise software timestamp caps when PHC is not available.
+    - qed: Fix setting of incorrect eswitch mode.
+    - qed: Fix use of incorrect size in memcpy call.
+    - qed: Limit msix vectors in kdump kernel to the minimum required count.
+    - qmi_wwan: add support for the Dell Wireless 5821e module
+    - r8152: napi hangup fix after disconnect
+    - [s390x] qeth: don't clobber buffer on async TX completion
+    - [armhf, arm64] stmmac: fix DMA channel hang in half-duplex mode
+    - tcp: fix Fast Open key endianness
+    - tcp: prevent bogus FRTO undos with non-SACK flows
+    - vhost_net: validate sock before trying to put its fd
+    - VSOCK: fix loopback on big-endian systems
+    - nfp: flower: fix mpls ether type detection
+    - net: use dev_change_tx_queue_len() for SIOCSIFTXQLEN
+    - nfp: reject binding to shared blocks
+    - xen-netfront: Fix mismatched rtnl_unlock
+    - xen-netfront: Update features after registering netdev
+    - enic: do not overwrite error code
+    - i40e: split XDP_TX tail and XDP_REDIRECT map flushing
+    - IB/mlx5: Avoid dealing with vport representors if not being e-switch
+      manager
+    - [s390x] Revert "s390/qeth: use Read device to query hypervisor for MAC"
+    - [s390x] qeth: avoid using is_multicast_ether_addr_64bits on (u8 *)[6]
+    - [s390x] qeth: fix race when setting MAC address
+    - sfc: correctly initialise filter rwsem for farch
+    - virtio_net: split XDP_TX kick and XDP_REDIRECT map flushing
+    - [x86] kvm/Kconfig: Ensure CRYPTO_DEV_CCP_DD state at minimum matches
+      KVM_AMD
+    - net: cxgb3_main: fix potential Spectre v1
+    - net: lan78xx: Fix race in tx pending skb size calculation
+    - [x86] PCI: hv: Disable/enable IRQs rather than BH in hv_compose_msi_msg()
+    - netfilter: ebtables: reject non-bridge targets
+    - reiserfs: fix buffer overflow with long warning messages
+    - KEYS: DNS: fix parsing multiple options
+    - tls: Stricter error checking in zerocopy sendmsg path
+    - autofs: fix slab out of bounds read in getname_kernel()
+    - netfilter: ipv6: nf_defrag: drop skb dst before queueing
+    - bpf: reject any prog that failed read-only lock
+    - rds: avoid unenecessary cong_update in loop transport
+    - block: don't use blocking queue entered for recursive bio submits
+    - bpf: sockmap, fix crash when ipv6 sock is added
+    - bpf: sockmap, consume_skb in close path
+    - bpf: don't leave partial mangled prog in jit_subprogs error path
+    - net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.
+    - ipvs: initialize tbl->entries after allocation
+    - ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()
+    - [armhf, arm64] smccc: Add SMCCC-specific return codes
+    - [arm64] Add 'ssbd' command-line option
+    - [arm64] ssbd: Add global mitigation state accessor
+    - [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation
+    - [arm64] ssbd: Restore mitigation status on CPU resume
+    - [arm64] ssbd: Introduce thread flag to control userspace mitigation
+    - [arm64] ssbd: Add prctl interface for per-thread mitigation
+    - [arm64] KVM: Add HYP per-cpu accessors
+      ARCH_FEATURES_FUNC_ID
+    - bpf: enforce correct alignment for instructions
+    - [armhf] bpf: fix to use bpf_jit_binary_lock_ro api
+    - bpf: undo prog rejection on read-only lock failure
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.10
+    - scsi: sd_zbc: Fix variable type and bogus comment
+    - scsi: qla2xxx: Fix inconsistent DMA mem alloc/free
+    - scsi: qla2xxx: Fix kernel crash due to late workqueue allocation
+    - scsi: qla2xxx: Fix NULL pointer dereference for fcport search
+    - KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in
+      parallel.
+    - KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer
+    - [x86] KVM: VMX: Mark VMXArea with revision_id of physical CPU even when
+      eVMCS enabled
+    - [x86] kvm/vmx: don't read current->thread.{fs,gs}base of legacy tasks
+    - [x86] kvmclock: set pvti_cpu0_va after enabling kvmclock
+    - [x86] apm: Don't access __preempt_count with zeroed fs
+    - [x86] events/intel/ds: Fix bts_interrupt_threshold alignment
+    - [x86] MCE: Remove min interval polling limitation
+    - fat: fix memory allocation failure handling of match_strdup()
+    - ALSA: rawmidi: Change resized buffers atomically
+    - [x86] ALSA: hda/realtek - Add Panasonic CF-SZ6 headset jack quirk
+    - [x86] ALSA: hda/realtek - Yet another Clevo P950 quirk entry
+    - [x86] ALSA: hda: add mute led support for HP ProBook 455 G5
+    - mm: memcg: fix use after free in mem_cgroup_iter()
+    - mm/huge_memory.c: fix data loss when splitting a file pmd
+    - [x86] cpufreq: intel_pstate: Register when ACPI PCCH is present
+    - [x86, arm64, powerpc*] vfio/pci: Fix potential Spectre v1
+    - stop_machine: Disable preemption when waking two stopper threads
+    - [powerpc*] powerpc/powernv: Fix save/restore of SPRG3 on entry/exit from
+      stop (idle)
+    - drm/amdgpu: Reserve VM root shared fence slot for command submission (v3)
+    - [x86] drm/i915: Fix hotplug irq ack on i965/g4x
+    - Revert "drm/amd/display: Don't return ddc result and read_bytes in same
+      return value"
+    - [x86] drm/nouveau: Remove bogus crtc check in pmops_runtime_idle
+    - [x86] drm/nouveau: Use drm_connector_list_iter_* for iterating connectors
+    - [x86] drm/nouveau: Avoid looping through fake MST connectors
+    - gen_stats: Fix netlink stats dumping in the presence of padding
+    - ipv4: Return EINVAL when ping_group_range sysctl doesn't map to user ns
+    - ipv6: fix useless rol32 call on hash
+    - ipv6: ila: select CONFIG_DST_CACHE
+    - lib/rhashtable: consider param->min_size when setting initial table size
+    - net: diag: Don't double-free TCP_NEW_SYN_RECV sockets in tcp_abort
+    - net: Don't copy pfmemalloc flag in __copy_skb_header()
+    - skbuff: Unconditionally copy pfmemalloc in __skb_clone()
+    - net/ipv4: Set oif in fib_compute_spec_dst
+    - net/ipv6: Do not allow device only routes via the multipath API
+    - net: phy: fix flag masking in __set_phy_supported
+    - qmi_wwan: add support for Quectel EG91
+    - rhashtable: add restart routine in rhashtable_free_and_destroy()
+    - sch_fq_codel: zero q->flows_cnt when fq_codel_init fails
+    - tg3: Add higher cpu clock for 5762.
+    - net: ip6_gre: get ipv6hdr after skb_cow_head()
+    - sctp: introduce sctp_dst_mtu
+    - sctp: fix the issue that pathmtu may be set lower than MINSEGMENT
+    - [x86] hv_netvsc: Fix napi reschedule while receive completion is busy
+    - net: aquantia: vlan unicast address list correct handling
+    - net/mlx4_en: Don't reuse RX page when XDP is set
+    - ipv6: make DAD fail with enhanced DAD when nonce length differs
+    - net: usb: asix: replace mii_nway_restart in resume path
+    - [alpha] fix osf_wait4() breakage
+    - drm_mode_create_lease_ioctl(): fix open-coded filp_clone_open()
+    - xhci: Fix perceived dead host due to runtime suspend race with event
+      handler
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.11
+    - [x86] KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
+    - [x86] Revert "iommu/intel-iommu: Enable CONFIG_DMA_DIRECT_OPS=y and clean
+      up intel_{alloc,free}_coherent()"
+    - [mips*] Fix off-by-one in pci_resource_to_user()
+    - [arm64] clk: mvebu: armada-37xx-periph: Fix switching CPU rate from 300Mhz
+      to 1.2GHz
+    - [x86] xen/PVH: Set up GS segment for stack canary
+    - [x86] drm/nouveau: Fix runtime PM leak in nv50_disp_atomic_commit()
+    - [x86] drm/nouveau: Set DRIVER_ATOMIC cap earlier to fix debugfs
+    - [arm64] clk: meson-gxbb: set fclk_div2 as CLK_IS_CRITICAL
+    - bonding: set default miimon value for non-arp modes if not set
+    - ip: hash fragments consistently
+    - ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
+    - net: dsa: mv88e6xxx: fix races between lock and irq freeing
+    - net/mlx4_core: Save the qpn from the input modifier in RST2INIT wrapper
+    - net-next/hinic: fix a problem in hinic_xmit_frame()
+    - net: skb_segment() should not return NULL
+    - tcp: fix dctcp delayed ACK schedule
+    - tcp: helpers to send special DCTCP ack
+    - tcp: do not cancel delay-AcK on DCTCP special ACK
+    - tcp: do not delay ACK in DCTCP upon CE status change
+    - net/mlx5: E-Switch, UBSAN fix undefined behavior in mlx5_eswitch_mode
+    - r8169: restore previous behavior to accept BIOS WoL settings
+    - tls: check RCV_SHUTDOWN in tls_wait_data
+    - net/mlx5e: Add ingress/egress indication for offloaded TC flows
+    - net/mlx5e: Only allow offloading decap egress (egdev) flows
+    - net/mlx5e: Refine ets validation function
+    - nfp: flower: ensure dead neighbour entries are not offloaded
+    - sock: fix sg page frag coalescing in sk_alloc_sg
+    - net: phy: consider PHY_IGNORE_INTERRUPT in phy_start_aneg_priv
+    - multicast: do not restore deleted record source filter mode to new one
+    - net/ipv6: Fix linklocal to global address with VRF
+    - net/mlx5e: Don't allow aRFS for encapsulated packets
+    - net/mlx5e: Fix quota counting in aRFS expire flow
+    - net/mlx5: Adjust clock overflow work period
+    - rtnetlink: add rtnl_link_state check in rtnl_configure_link
+    - vxlan: add new fdb alloc and create helpers
+    - vxlan: make netlink notify in vxlan_fdb_destroy optional
+    - vxlan: fix default fdb entry netlink notify ordering during netdev create
+    - tcp: free batches of packets in tcp_prune_ofo_queue()
+      CVE-2018-5390
+    - tcp: avoid collapses in tcp_prune_queue() if possible
+    - tcp: detect malicious patterns in tcp_collapse_ofo_queue()
+    - tcp: call tcp_drop() from tcp_data_queue_ofo()
+    - tcp: add tcp_ooo_try_coalesce() helper
+    - Revert "staging:r8188eu: Use lib80211 to support TKIP"
+    - staging: speakup: fix wraparound in uaccess length check
+    - usb: cdc_acm: Add quirk for Castles VEGA3000
+    - usb: core: handle hub C_PORT_OVER_CURRENT condition
+    - [armhf, arm64] usb: dwc2: Fix DMA alignment to start at allocated boundary
+    - [armhf, arm64] usb: xhci: Fix memory leak in xhci_endpoint_reset()
+    - [x86, arm64] ACPICA: AML Parser: ignore dispatcher error status during
+      table load
+    - driver core: Partially revert "driver core: correct device's shutdown
+      order"
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.12
+    - Input: elan_i2c - add ACPI ID for lenovo ideapad 330
+    - Input: i8042 - add Lenovo LaVie Z to the i8042 reset list
+    - Input: elan_i2c - add another ACPI ID for Lenovo Ideapad 330-15AST
+    - mm: disallow mappings that conflict for devm_memremap_pages()
+    - kvm, mm: account shadow page tables to kmemcg
+    - delayacct: fix crash in delayacct_blkio_end() after delayacct init failure
+    - tracing: Fix double free of event_trigger_data
+    - tracing: Fix possible double free in event_enable_trigger_func()
+    - kthread, tracing: Don't expose half-written comm when creating kthreads
+    - tracing/kprobes: Fix trace_probe flags on enable_trace_kprobe() failure
+    - tracing: Quiet gcc warning about maybe unused link variable
+    - [arm64] fix vmemmap BUILD_BUG_ON() triggering on !vmemmap setups
+    - [x86] drm/i915/glk: Add Quirk for GLK NUC HDMI port issues.
+    - kcov: ensure irq code sees a valid area
+    - mm: check for SIGKILL inside dup_mmap() loop
+    - drm/amd/powerplay: Set higher SCLK&MCLK frequency than dpm7 in OD (v2)
+    - xen/netfront: raise max number of slots in xennet_get_responses()
+    - [x86] hv_netvsc: fix network namespace issues with VF support
+    - skip LAYOUTRETURN if layout is invalid
+    - ixgbe: Fix setting of TC configuration for macvlan case
+    - ALSA: emu10k1: add error handling for snd_ctl_add
+    - ALSA: fm801: add error handling for snd_ctl_add
+    - NFSv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY
+    - nfsd: fix error handling in nfs4_set_delegation()
+    - nfsd: fix potential use-after-free in nfsd4_decode_getdeviceinfo
+    - vfio: platform: Fix reset module leak in error path
+    - vfio/mdev: Check globally for duplicate devices
+    - vfio/type1: Fix task tracking for QEMU vCPU hotplug
+    - kernel/hung_task.c: show all hung tasks before panic
+    - mem_cgroup: make sure moving_account, move_lock_task and stat_cpu in the
+      same cacheline
+    - mm: /proc/pid/pagemap: hide swap entries from unprivileged users
+    - mm: vmalloc: avoid racy handling of debugobjects in vunmap
+    - mm/slub.c: add __printf verification to slab_err()
+    - rtc: ensure rtc_set_alarm fails when alarms are not supported
+    - rxrpc: Fix terminal retransmission connection ID to include the channel
+    - [arm64] net: hns3: Fix for VF mailbox cannot receiving PF response
+    - perf tools: Fix pmu events parsing rule
+    - netfilter: ipset: forbid family for hash:mac sets
+    - netfilter: ipset: List timing out entries with "timeout 1" instead of zero
+    - printk: drop in_nmi check from printk_safe_flush_on_panic()
+    - [armhf] bpf: fix inconsistent naming about emit_a32_lsr_{r64,i64}
+    - ceph: fix alignment of rasize
+    - ceph: fix use-after-free in ceph_statfs()
+    - e1000e: Ignore TSYNCRXCTL when getting I219 clock attributes
+    - infiniband: fix a possible use-after-free bug (CVE-2018-14734)
+    - [powerpc*] lib: Adjust .balign inside string functions for PPC32
+    - [powerpc*] 64s: Add barrier_nospec
+    - [powerpc*] eeh: Fix use-after-release of EEH driver
+    - [powerpc*] 64s: Fix compiler store ordering to SLB shadow area
+    - [arm64] net: hns3: Fix for phy not link up problem after resetting
+    - [arm64] net: hns3: Fix for service_task not running problem after
+      resetting
+    - RDMA/mad: Convert BUG_ONs to error flows
+    - lightnvm: fix partial read error path
+    - lightnvm: proper error handling for pblk_bio_add_pages
+    - lightnvm: pblk: warn in case of corrupted write buffer
+    - netfilter: nf_tables: check msg_type before nft_trans_set(trans)
+    - pnfs: Don't release the sequence slot until we've processed layoutget on
+      open
+    - NFS: Fix up nfs_post_op_update_inode() to force ctime updates
+    - disable loading f2fs module on PAGE_SIZE > 4KB
+    - f2fs: fix error path of move_data_page
+    - f2fs: don't drop dentry pages after fs shutdown
+    - f2fs: fix to don't trigger writeback during recovery
+    - f2fs: fix to wait page writeback during revoking atomic write
+    - f2fs: Fix deadlock in shutdown ioctl
+    - f2fs: fix missing clear FI_NO_PREALLOC in some error case
+    - f2fs: fix to detect failure of dquot_initialize
+    - f2fs: fix race in between GC and atomic open
+    - block, bfq: remove wrong lock in bfq_requests_merged
+    - usbip: usbip_detach: Fix memory, udev context and udev leak
+    - usbip: dynamically allocate idev by nports found in sysfs
+    - [x86] perf/x86/intel/uncore: Correct fixed counter index check in
+      generic code
+    - [x86] perf/x86/intel/uncore: Correct fixed counter index check for NHM
+    - PCI: Fix devm_pci_alloc_host_bridge() memory leak
+    - btrfs: balance dirty metadata pages in btrfs_finish_ordered_io
+    - iwlwifi: pcie: fix race in Rx buffer allocator
+    - iwlwifi: mvm: open BA session only when sta is authorized
+    - Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
+    - drm/amd/display: Do not program interrupt status on disabled crtc
+    - Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
+    - ASoC: dpcm: fix BE dai not hw_free and shutdown
+    - mfd: cros_ec: Fail early if we cannot identify the EC
+    - mwifiex: handle race during mwifiex_usb_disconnect
+    - wlcore: sdio: check for valid platform device data before suspend
+    - [arm64] net: hns3: Fixes initalization of RoCE handle and makes it
+      conditional
+    - [arm64] net: hns3: Fixes the init of the VALID BD info in the descriptor
+    - media: tw686x: Fix incorrect vb2_mem_ops GFP flags
+    - media: cec-pin-error-inj: avoid a false-positive Spectre detection
+    - media: videobuf2-core: don't call memop 'finish' when queueing
+    - Btrfs: don't return ino to ino cache if inode item removal fails
+    - Btrfs: don't BUG_ON() in btrfs_truncate_inode_items()
+    - btrfs: add barriers to btrfs_sync_log before log_commit_wait wakeups
+    - btrfs: qgroup: Finish rescan when hit the last leaf of extent tree
+    - [x86] microcode: Make the late update update_lock a raw lock for RT
+    - PM / wakeup: Make s2idle_lock a RAW_SPINLOCK
+    - PCI: Prevent sysfs disable of device while driver is attached
+    - [arm64] soc: qcom: qmi: fix a buffer sizing bug
+    - [arm64] soc: qcom: smem: fix qcom_smem_set_global_partition()
+    - [arm64] soc: qcom: smem: byte swap values properly
+    - nvme-rdma: stop admin queue before freeing it
+    - nvme-pci: Fix AER reset handling
+    - ath: Add regulatory mapping for : FCC3_ETSIC, ETSI8_WORLD, APL13_WORLD,
+      APL2_FCCA, Uganda, Tanzania, Serbia, Bermuda and Bahamas
+    - sched/cpufreq: Modify aggregate utilization to always include blocked FAIR
+      utilization
+    - [powerpc*] Add a missing include header
+    - [powerpc*] chrp/time: Make some functions static, add missing header
+      include
+    - [powerpc*] powermac: Add missing prototype for note_bootable_part()
+    - [powerpc*] powermac: Mark variable x as unused
+    - powerpc: Add __printf verification to prom_printf
+    - [x86] KVM: prevent integer overflows in KVM_MEMORY_ENCRYPT_REG_REGION
+    - [powerpc*] 8xx: fix invalid register expression in head_8xx.S
+    - [arm64] pinctrl: msm: fix gpio-hog related boot issues
+    - bpf: fix multi-function JITed dump obtained via syscall
+    - [powerpc*] bpf: pad function address loads with NOPs
+    - PCI: pciehp: Request control of native hotplug only if supported
+    - mwifiex: correct histogram data with appropriate index
+    - ima: based on policy verify firmware signatures (pre-allocated buffer)
+    - spi: Add missing pm_runtime_put_noidle() after failed get
+    - [arm64] net: hns3: Fix for CMDQ and Misc. interrupt init order problem
+    - [arm64] net: hns3: Fix the missing client list node initialization
+    - [arm64] net: hns3: Fix for hns3 module is loaded multiple times problem
+    - fscrypt: use unbound workqueue for decryption
+    - [armhf, arm64] net: mvpp2: Add missing VLAN tag detection
+    - scsi: ufs: ufshcd: fix possible unclocked register access
+    - scsi: ufs: fix exception event handling
+    - [s390x] scsi: zfcp: assert that the ERP lock is held when tracing a
+      recovery trigger
+    - drm/nouveau: remove fence wait code from deferred client work handler
+    - drm/nouveau/gem: lookup VMAs for buffers referenced by pushbuf ioctl
+    - drm/nouveau/fifo/gk104-: poll for runlist update completion
+    - Bluetooth: btusb: add ID for LiteOn 04ca:301a
+    - rtc: tps6586x: fix possible race condition
+    - rtc: vr41xx: fix possible race condition
+    - rtc: tps65910: fix possible race condition
+    - ALSA: emu10k1: Rate-limit error messages about page errors
+    - regulator: pfuze100: add .is_enable() for pfuze100_swb_regulator_ops
+    - md/raid1: add error handling of read error from FailFast device
+    - md: fix NULL dereference of mddev->pers in remove_and_add_spares()
+    - ixgbevf: fix MAC address changes through ixgbevf_set_mac()
+    - gpu: host1x: Acquire a reference to the IOVA cache
+    - media: smiapp: fix timeout checking in smiapp_read_nvm
+    - PCI/DPC: Clear interrupt status in interrupt handler top half
+    - clocksource: Move inline keyword to the beginning of function declarations
+    - net: ethernet: ti: cpsw-phy-sel: check bus_find_device() ret value
+    - ALSA: usb-audio: Apply rate limit to warning messages in URB complete
+      callback
+    - [arm64] net: hns3: Fix for fiber link up problem
+    - media: atomisp: ov2680: don't declare unused vars
+    - media: staging: atomisp: Comment out several unused sensor resolutions
+    - [arm64] cmpwait: Clear event register before arming exclusive monitor
+    - HID: hid-plantronics: Re-resend Update to map button for PTT products
+    - drm/amd/display: remove need of modeset flag for overlay planes (V2)
+    - drm/radeon: fix mode_valid's return type
+    - drm/amdgpu: Remove VRAM from shared bo domains.
+    - drm/amd/display: Fix dim display on DCE11
+    - IB: Fix RDMA_RXE and INFINIBAND_RDMAVT dependencies for DMA_VIRT_OPS
+    - [powerpc*] embedded6xx/hlwd-pic: Prevent interrupts from being handled by
+      Starlet
+    - HID: i2c-hid: check if device is there before really probing
+    - rsi: Add null check for virtual interfaces in wowlan config
+    - nvmem: properly handle returned value nvmem_reg_read
+    - [armhf] ARM: dts: imx53: Fix LDB OF graph warning
+    - i40e: free the skb after clearing the bitlock
+    - tty: Fix data race in tty_insert_flip_string_fixed_flag
+    - dma-iommu: Fix compilation when !CONFIG_IOMMU_DMA
+    - net: phy: phylink: Release link GPIO
+    - media: rcar_jpu: Add missing clk_disable_unprepare() on error in
+      jpu_open()
+    - libata: Fix command retry decision
+    - ACPI / LPSS: Only call pwm_add_table() for Bay Trail PWM if PMIC HRV is 2
+    - media: media-device: fix ioctl function types
+    - media: saa7164: Fix driver name in debug output
+    - media: em28xx: Fix DualHD broken second tuner
+    - mtd: rawnand: fsl_ifc: fix FSL NAND driver to read all ONFI parameter
+      pages
+    - brcmfmac: Add support for bcm43364 wireless chipset
+    - [s390x] cpum_sf: Add data entry sizes to sampling trailer entry
+    - perf: fix invalid bit in diagnostic entry
+    - net: phy: sfp: handle cases where neither BR, min nor BR, max is given
+    - bnxt_en: Check unsupported speeds in bnxt_update_link() on PF only.
+    - bnxt_en: Always forward VF MAC address to the PF.
+    - mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is
+      enabled
+    - staging: most: cdev: fix chrdev_region leak
+    - scsi: 3w-9xxx: fix a missing-check bug
+    - scsi: 3w-xxxx: fix a missing-check bug
+    - scsi: megaraid: silence a static checker bug
+    - scsi: hisi_sas: config ATA de-reset as an constrained command for v3 hw
+    - soc/tegra: pmc: Don't allocate struct tegra_powergate on stack
+    - scsi: qedf: Set the UNLOADING flag when removing a vport
+    - dma-direct: try reallocation with GFP_DMA32 if possible
+    - staging: lustre: o2iblnd: fix race at kiblnd_connect_peer
+    - staging: lustre: o2iblnd: Fix FastReg map/unmap for MLX5
+    - thermal: exynos: fix setting rising_threshold for Exynos5433
+    - regulator: add dummy function of_find_regulator_by_node
+    - bpf: fix references to free_bpf_prog_info() in comments
+    - f2fs: avoid fsync() failure caused by EAGAIN in writepage()
+    - media: em28xx: fix a regression with HVR-950
+    - media: siano: get rid of __le32/__le16 cast warnings
+    - mt76x2: fix avg_rssi estimation
+    - drm/atomic: Handling the case when setting old crtc for plane
+    - mmc: sdhci-omap: Fix when capabilities are obtained from
+      SDHCI_CAPABILITIES reg
+    - f2fs: check cap_resource only for data blocks
+    - mlxsw: spectrum_router: Return an error for non-default FIB rules
+    - ALSA: hda/ca0132: fix build failure when a local macro is defined
+    - mmc: dw_mmc: update actual clock for mmc debugfs
+    - mmc: pwrseq: Use kmalloc_array instead of stack VLA
+    - [arm64] dt-bindings: pinctrl: meson: add support for the Meson8m2 SoC
+    - [armhf] spi: meson-spicc: Fix error handling in meson_spicc_probe()
+    - [arm64] net: hns3: Fixes the out of bounds access in hclge_map_tqp
+    - dt-bindings: net: meson-dwmac: new compatible name for AXG SoC
+    - i40e: Add advertising 10G LR mode
+    - i40e: avoid overflow in i40e_ptp_adjfreq()
+    - mt76: add rcu locking around tx scheduling
+    - backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
+    - stop_machine: Use raw spinlocks
+    - delayacct: Use raw_spinlocks
+    - ath10k: fix kernel panic while reading tpc_stats
+    - memory: tegra: Do not handle spurious interrupts
+    - memory: tegra: Apply interrupts mask per SoC
+    - nvme: lightnvm: add granby support
+    - ASoC: fsl_ssi: Use u32 variable type when using regmap_read()
+    - ASoC: compress: Only call free for components which have been opened
+    - igb: Fix queue selection on MAC filters on i210
+    - qtnfmac: pearl: pcie: fix memory leak in qtnf_fw_work_handler
+    - drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
+    - ipconfig: Correctly initialise ic_nameservers
+    - rsi: Fix 'invalid vdd' warning in mmc
+    - rsi: fix nommu_map_sg overflow kernel panic
+    - audit: allow not equal op for audit by executable
+    - [armhf, arm64] drm/rockchip: analogix_dp: Do not call Analogix code before 
+      bind
+    - [x86] platform/x86: dell-smbios: Match on www.dell.com in OEM strings too
+    - staging: vchiq_core: Fix missing semaphore release in error case
+    - staging: lustre: llite: correct removexattr detection
+    - staging: lustre: ldlm: free resource when ldlm_lock_create() fails.
+    - staging: ks7010: fix error handling in ks7010_upload_firmware
+    - serial: core: Make sure compiler barfs for 16-byte earlycon names
+    - soc: imx: gpcv2: Do not pass static memory as platform data
+    - microblaze: Fix simpleImage format generation
+    - usb: hub: Don't wait for connect state at resume for powered-off ports
+    - crypto: authencesn - don't leak pointers to authenc keys
+    - crypto: authenc - don't leak pointers to authenc keys
+    - y2038: ipc: Use ktime_get_real_seconds consistently
+    - media: rc: mce_kbd decoder: low timeout values cause double keydowns
+    - media: omap3isp: fix unbalanced dma_iommu_mapping
+    - regulator: Don't return or expect -errno from of_map_mode()
+    - ath10k: search all IEs for variant before falling back
+    - drm/stm: ltdc: fix warning in ltdc_crtc_update_clut()
+    - scsi: scsi_dh: replace too broad "TP9" string with the exact models
+    - scsi: megaraid_sas: Increase timeout by 1 sec for non-RAID fastpath IOs
+    - scsi: cxlflash: Synchronize reset and remove ops
+    - scsi: cxlflash: Avoid clobbering context control register value
+    - PCI/ASPM: Disable ASPM L1.2 Substate if we don't have LTR
+    - media: atomisp: compat32: fix __user annotations
+    - media: cec: fix smatch error
+    - media: si470x: fix __be16 annotations
+    - net: socionext: reset hardware in ndo_stop
+    - ASoC: topology: Fix bclk and fsync inversion in set_link_hw_format()
+    - ASoC: topology: Add missing clock gating parameter when parsing hw_configs
+    - [armhf] ARM: dts: imx6qdl-wandboard: Let the codec control MCLK pinctrl
+    - drm: Add DP PSR2 sink enable bit
+    - drm/atomic-helper: Drop plane->fb references only for
+      drm_atomic_helper_shutdown()
+    - drm/dp/mst: Fix off-by-one typo when dump payload table
+    - drm/amdgpu: Avoid reclaim while holding locks taken in MMU notifier
+    - block: bio_iov_iter_get_pages: fix size of last iovec
+    - blkdev: __blkdev_direct_IO_simple: fix leak in error case
+    - block: reset bi_iter.bi_done after splitting bio
+    - nvmet-fc: fix target sgl list on large transfers
+    - i2c: rcar: handle RXDMA HW behaviour on Gen3
+    - random: mix rdrand with entropy sent in from userspace
+    - squashfs: be more careful about metadata corruption
+    - ext4: fix false negatives *and* false positives in
+      ext4_check_descriptors()
+    - ext4: fix inline data updates with checksums enabled
+    - ext4: check for allocation block validity with block group locked
+    - ext4: fix check to prevent initializing reserved inodes
+    - gpio: of: Handle fixed regulator flags properly
+    - gpio: uniphier: set legitimate irq trigger type in .to_irq hook
+    - RDMA/uverbs: Protect from attempts to create flows on unsupported QP
+    - net: dsa: qca8k: Force CPU port to its highest bandwidth
+    - net: dsa: qca8k: Enable RXMAC when bringing up a port
+    - net: dsa: qca8k: Add QCA8334 binding documentation
+    - net: dsa: qca8k: Allow overwriting CPU port setting
+    - ipv4: remove BUG_ON() from fib_compute_spec_dst
+    - netdevsim: don't leak devlink resources
+    - net: ena: Fix use of uninitialized DMA address bits field
+    - net: fix amd-xgbe flow-control issue
+    - net: lan78xx: fix rx handling before first packet is send
+    - net: mdio-mux: bcm-iproc: fix wrong getter and setter pair
+    - NET: stmmac: align DMA stuff to largest cache line length
+    - RDS: RDMA: Fix the NULL-ptr deref in rds_ib_get_mr
+    - tcp_bbr: fix bw probing to raise in-flight data for very small BDPs
+    - virtio_net: Fix incosistent received bytes counter
+    - xen-netfront: wait xenbus state change when load module manually
+    - cxgb4: Added missing break in ndo_udp_tunnel_{add/del}
+    - net: rollback orig value on failure of dev_qdisc_change_tx_queue_len
+    - netlink: Do not subscribe to non-existent groups
+    - netlink: Don't shift with UB on nlk->ngroups
+    - tcp: do not force quickack when receiving out-of-order packets
+    - tcp: add max_quickacks param to tcp_incr_quickack and
+      tcp_enter_quickack_mode
+    - tcp: do not aggressively quick ack after ECN events
+    - tcp: refactor tcp_ecn_check_ce to remove sk type cast
+    - tcp: add one more quick ack after after ECN events
+    - tcp: ack immediately when a cwr packet arrives
+    - ACPI / LPSS: Avoid PM quirks on suspend and resume from hibernation
+    - [x86, arm64] ACPICA: AML Parser: ignore control method status in
+      module-level code
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.13
+    - bonding: avoid lockdep confusion in bond_get_stats()
+    - inet: frag: enforce memory limits earlier
+    - ipv4: frags: handle possible skb truesize change
+    - net: dsa: Do not suspend/resume closed slave_dev
+    - netlink: Fix spectre v1 gadget in netlink_create()
+    - [armhf, arm64] net: stmmac: Fix WoL for PCI-based setups
+    - rxrpc: Fix user call ID check in rxrpc_service_prealloc_one
+    - net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager
+    - net/mlx5e: Set port trust mode to PCP as default
+    - net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow
+    - squashfs: more metadata hardening
+    - can: ems_usb: Fix memory leak on ems_usb_disconnect()
+    - net: socket: fix potential spectre v1 gadget in socketcall
+    - net: socket: Fix potential spectre v1 gadget in sock_is_registered
+    - virtio_balloon: fix another race between migration and ballooning
+    - [x86] efi: Access EFI MMIO data as unencrypted when SEV is active
+    - [x86] apic: Future-proof the TSC_DEADLINE quirk for SKX
+    - [x86] entry/64: Remove %ebx handling from error_entry/exit
+    - [86] kvm: x86: vmx: fix vpid leak
+    - audit: fix potential null dereference 'context->module.name'
+    - ipc/shm.c add ->pagesize function to shm_vm_ops
+    - userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
+    - iwlwifi: add more card IDs for 9000 series
+    - brcmfmac: fix regression in parsing NVRAM for multiple devices
+    - RDMA/uverbs: Expand primary and alt AV port checks
+    - [x86] crypto: padlock-aes - Fix Nano workaround data corruption
+    - [armhf, arm64] drm/vc4: Reset ->{x, y}_scaling[1] when dealing with
+      uniplanar formats
+    - drm/atomic: Check old_plane_state->crtc in drm_atomic_helper_async_check()
+    - drm/atomic: Initialize variables in drm_atomic_helper_async_check() to
+      make gcc happy
+    - scsi: sg: fix minor memory leak in error path
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.14
+    - scsi: qla2xxx: Fix unintialized List head crash
+    - scsi: qla2xxx: Fix NPIV deletion by calling wait_for_sess_deletion
+    - scsi: qla2xxx: Fix driver unload by shutting down chip
+    - scsi: qla2xxx: Fix ISP recovery on unload
+    - scsi: qla2xxx: Return error when TMF returns
+    - jfs: Fix usercopy whitelist for inline inode data
+    - genirq: Make force irq threading setup more robust
+    - [x86] perf/x86/intel/uncore: Fix hardcoded index of Broadwell extra PCI
+      devices
+    - nohz: Fix local_timer_softirq_pending()
+    - nohz: Fix missing tick reprogram when interrupting an inline softirq
+    - netlink: Don't shift on 64 for ngroups
+    - ring_buffer: tracing: Inherit the tracing setting to next ring buffer
+    - i2c: imx: Fix reinit_completion() use
+    - Btrfs: fix file data corruption after cloning a range and fsync
+    - Partially revert "block: fail op_is_write() requests to read-only
+      partitions" (Closes: #900442)
+    - xfs: don't call xfs_da_shrink_inode with NULL bp
+    - xfs: validate cached inodes are free when allocated
+    - jfs: Fix inconsistency between memory allocation and ea_buf->max_size
+
+  [ Ben Hutchings ]
+  * [armhf] gpu: host1x: Drop my build fix in favour of upstream fix:
+    - Revert "Revert "gpu: host1x: Add IOMMU support""
+    - gpu: host1x: Fix compiler errors by converting to dma_addr_t
+  * [ia64] sched: Disable SCHED_STACK_END_CHECK (Closes: #905461)
+  * mtd: powernv_flash: set of_node in mtd's dev (Closes: #904380)
+  * block: really disable runtime-pm for blk-mq (Closes: #904441)
+
+  [ Bastian Blank ]
+  * Bump ABI to 2
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 13 Aug 2018 15:33:58 +0200
+
+linux (4.17.8-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.7
+    - bpf: reject passing modified ctx to helper functions
+    - [mips*] Call dump_stack() from show_regs()
+    - [mips*] Use async IPIs for arch_trigger_cpumask_backtrace()
+    - [mips*] Fix ioremap() RAM check
+    - [armhf] drm/etnaviv: Check for platform_device_register_simple() failure
+    - [armhf] drm/etnaviv: Fix driver unregistering
+    - [armhf] drm/etnaviv: bring back progress check in job timeout handler
+    - ACPICA: Clear status of all events when entering S5
+    - [armhf] mmc: sdhci-esdhc-imx: allow 1.8V modes without 100/200MHz
+      pinctrl states
+    - [armhf] mmc: dw_mmc: fix card threshold control configuration
+    - [x86] ibmasm: don't write out of bounds in read handler
+    - [arm64,x86] staging: rtl8723bs: Prevent an underflow in
+      rtw_check_beacon_data().
+    - ata: Fix ZBC_OUT command block check
+    - ata: Fix ZBC_OUT all bit handling
+    - [x86] mei: discard messages from not connected client during power down.
+    - mtd: spi-nor: cadence-quadspi: Fix direct mode write timeouts
+    - tracing/kprobe: Release kprobe print_fmt properly
+    - vmw_balloon: fix inflation with batching
+    - ahci: Add Intel Ice Lake LP PCI ID
+    - ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS
+    - [x86] thunderbolt: Notify userspace when boot_acl is changed
+    - USB: serial: ch341: fix type promotion bug in ch341_control_in()
+    - USB: serial: cp210x: add another USB ID for Qivicon ZigBee stick
+    - USB: serial: keyspan_pda: fix modem-status error handling
+    - USB: yurex: fix out-of-bounds uaccess in read handler
+    - USB: serial: mos7840: fix status-register error handling
+    - usb: quirks: add delay quirks for Corsair Strafe
+    - xhci: xhci-mem: off by one in xhci_stream_id_to_ring()
+    - mm: zero unavailable pages before memmap init
+    - ALSA: hda/realtek - two more lenovo models need fixup of
+      MIC_LOCATION
+    - ALSA: hda - Handle pm failure during hotplug
+    - mm: do not drop unused pages when userfaultd is running
+    - fs/proc/task_mmu.c: fix Locked field in /proc/pid/smaps*
+    - x86/purgatory: add missing FORCE to Makefile target
+    - fs, elf: make sure to page align bss in load_elf_library
+    - mm: do not bug_on on incorrect length in __mm_populate()
+    - tracing: Reorder display of TGID to be after PID
+    - kbuild: delete INSTALL_FW_PATH from kbuild documentation
+    - acpi, nfit: Fix scrub idle detection
+    - [arm64] neon: Fix function may_use_simd() return error status
+    - tools build: fix # escaping in .cmd files for future Make
+    - IB/hfi1: Fix incorrect mixing of ERR_PTR and NULL return values
+    - [arm64,armhf] i2c: tegra: Fix NACK error handling
+    - i2c: recovery: if possible send STOP with recovery pulses
+    - iw_cxgb4: correctly enforce the max reg_mr depth
+    - [x86] xen: remove global bit from __default_kernel_pte_mask for pv
+      guests
+    - [x86] xen: setup pv irq ops vector earlier
+    - bsg: fix bogus EINVAL on non-data commands
+    - [x86] uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn()
+    - netfilter: nf_queue: augment nfqa_cfg_policy
+    - crypto: don't optimize keccakf()
+    - netfilter: x_tables: initialise match/target check parameter
+      struct
+    - loop: add recursion validation to LOOP_CHANGE_FD
+    - xfs: fix inobt magic number check
+    - PM / hibernate: Fix oops at snapshot_write()
+    - RDMA/ucm: Mark UCM interface as BROKEN
+    - loop: remember whether sysfs_create_group() was done
+    - [x86] kvm: vmx: Nested VM-entry prereqs for event inj.
+    - f2fs: give message and set need_fsck given broken node id
+    - f2fs: avoid bug_on on corrupted inode
+    - f2fs: sanity check on sit entry
+    - f2fs: sanity check for total valid node blocks
+    - [armhf] dts: armada-38x: use the new thermal binding
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.8
+    - mm: don't do zero_resv_unavail if memmap is not allocated
+
+  [ Ben Hutchings ]
+  * ext4: fix false negatives *and* false positives in ext4_check_descriptors()
+    (Closes: #903838)
+  * Fix remaining build failures with gcc 8 (Closes: #897802):
+    - tools/lib/api/fs/fs.c: Fix misuse of strncpy()
+    - usbip: Fix misuse of strncpy()
+
+  [ Salvatore Bonaccorso ]
+  * Ignore ABI changes for acpi_nfit_desc_init and acpi_nfit_init
+  * Ignore ABI changes for loop_register_transfer
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 20 Jul 2018 23:08:27 +0200
+
+linux (4.17.6-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [armhf] drm/sun4i: Ignore ABI changes (fixes FTBFS)
+  * debian/control: Fix arch/profile qualifications for libelf-dev
+    build-dependency
+  * debian/rules.real: Pass KERNEL_ARCH variable down to debian/rules.d
+  * debian/rules.d/tools/perf/Makefile: Use KERNEL_ARCH variable
+  * linux-kbuild: Fix the assumed host architecture for cross-built objtool
+  * [ppc64] linux-bootwrapper: Work around compiler include path quirk
+    (fixes FTBFS)
+  * Fix file conflicts between debug packages where a vDSO is identical
+    (Closes: #872263):
+    - kbuild: Add build salt to the kernel and modules
+    - [arm64,powerpc,x86] Add build salt to the vDSO
+    - Set BUILD_SALT equal to the release string
+  * init: Avoid ABI change for build salt
+
+  [ Vagrant Cascadian ]
+  * [riscv64] Build linux-libc-dev (Closes: #886440).
+    Thanks to Manuel A. Fernandez Montecelo.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 15 Jul 2018 23:45:56 +0100
+
+linux (4.17.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.4
+    - [x86] spectre_v1: Disable compiler optimizations over
+      array_index_mask_nospec()
+    - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths
+    - [x86] UV: Add adjustable set memory block size function
+    - [x86] UV: Use new set memory block size function
+    - [x86] UV: Add kernel parameter to set memory block size
+    - [x86] mce: Improve error message when kernel cannot recover
+    - [x86] mce: Check for alternate indication of machine check recovery on
+      Skylake
+    - [x86] mce: Fix incorrect "Machine check from unknown source" message
+    - [x86] mce: Do not overwrite MCi_STATUS in mce_no_way_out()
+    - [x86] Call fixup_exception() before notify_die() in math_error()
+    - [m68k] mm: Adjust VM area to be unmapped by gap size for __iounmap()
+    - [m68k] mac: Fix SWIM memory resource end address
+    - hwmon: (k10temp) Add support for Stoney Ridge and Bristol Ridge CPUs
+    - mtd: spi-nor: intel-spi: Fix atomic sequence handling
+    - serial: sh-sci: Use spin_{try}lock_irqsave instead of open coding version
+    - signal/xtensa: Consistenly use SIGBUS in do_unaligned_user
+    - PM / Domains: Fix error path during attach in genpd
+    - PCI / PM: Do not clear state_saved for devices that remain suspended
+    - ACPI / LPSS: Avoid PM quirks on suspend and resume from S3
+    - PM / core: Fix supplier device runtime PM usage counter imbalance
+    - PM / OPP: Update voltage in case freq == old_freq
+    - mmc: renesas_sdhi: really fix WP logic regressions
+    - usb: do not reset if a low-speed or full-speed device timed out
+    - 1wire: family module autoload fails because of upper/lower case mismatch.
+    - ASoC: dapm: delete dapm_kcontrol_data paths list before freeing it
+    - ASoC: cs35l35: Add use_single_rw to regmap config
+    - ASoC: mediatek: preallocate pages use platform device
+    - ASoC: cirrus: i2s: Fix LRCLK configuration
+    - ASoC: cirrus: i2s: Fix {TX|RX}LinCtrlData setup
+    - thermal: bcm2835: Stop using printk format %pCr
+    - lib/vsprintf: Remove atomic-unsafe support for %pCr
+    - ftrace/selftest: Have the reset_trigger code be a bit more careful
+    - mips: ftrace: fix static function graph tracing
+    - branch-check: fix long->int truncation when profiling branches
+    - ipmi:bt: Set the timeout before doing a capabilities check
+    - Bluetooth: hci_qca: Avoid missing rampatch failure with userspace fw
+      loader
+    - printk: fix possible reuse of va_list variable
+    - fuse: fix congested state leak on aborted connections
+    - fuse: atomic_o_trunc should truncate pagecache
+    - fuse: don't keep dead fuse_conn at fuse_fill_super().
+    - fuse: fix control dir setup and teardown
+    - [powerpc*] mm/hash: Add missing isync prior to kernel stack SLB switch
+    - [powerpc*] pkeys: Detach execute_only key on !PROT_EXEC
+    - [powerpc*] ptrace: Fix setting 512B aligned breakpoints with
+      PTRACE_SET_DEBUGREG
+    - [powerpc*] perf: Fix memory allocation for core-imc based on
+      num_possible_cpus()
+    - [powerpc*] ptrace: Fix enforcement of DAWR constraints
+    - [powerpc*] powernv/ioda2: Remove redundant free of TCE pages
+    - [powerpc*] powernv: copy/paste - Mask SO bit in CR
+    - [powerpc*] powernv/cpuidle: Init all present cpus for deep states
+    - [powerpc*] cpuidle: powernv: Fix promotion from snooze if next state
+      disabled
+    - [powerpc*] fadump: Unregister fadump on kexec down path.
+    - libnvdimm, pmem: Do not flush power-fail protected CPU caches
+    - [armhf, arm64] soc: rockchip: power-domain: Fix wrong value when power
+      up pd with writemask
+    - [powerpc*] 64s/radix: Fix radix_kvm_prefetch_workaround paca access of not
+      possible CPU
+    - [powerpc] e500mc: Set assembler machine type to e500mc
+    - [powerpc*] 64s: Fix DT CPU features Power9 DD2.1 logic
+    - cxl: Configure PSL to not use APC virtual machines
+    - cxl: Disable prefault_mode in Radix mode
+    - [armhf] 8764/1: kgdb: fix NUMREGBYTES so that gdb_regs[] is the correct size
+    - [armhf] dts: Fix SPI node for Arria10
+    - [armhf] dts: socfpga: Fix NAND controller node compatible
+    - [armhf] dts: socfpga: Fix NAND controller clock supply
+    - [armhf] dts: socfpga: Fix NAND controller node compatible for Arria10
+    - hwrng: core - Always drop the RNG in hwrng_unregister()
+    - softirq: Reorder trace_softirqs_on to prevent lockdep splat
+    - [arm64] Fix syscall restarting around signal suppressed by tracer
+    - [arm64] crypto: arm64/aes-blk - fix and move skcipher_walk_done out of
+      kernel_neon_begin, _end
+    - [arm64] kpti: Use early_param for kpti= command-line option
+    - [arm64] mm: Ensure writes to swapper are ordered wrt subsequent cache
+      maintenance
+    - [arm64] dts: marvell: fix CP110 ICU node size
+    - [arm64] dts: meson: disable sd-uhs modes on the libretech-cc
+    - [arm64] dts: meson-gx: fix ATF reserved memory region
+    - of: overlay: validate offset from property fixups
+    - of: unittest: for strings, account for trailing \0 in property length
+      field
+    - of: platform: stop accessing invalid dev in of_platform_device_destroy
+    - tpm: fix use after free in tpm2_load_context()
+    - tpm: fix race condition in tpm_common_write()
+    - efi/libstub/tpm: Initialize efi_physical_addr_t vars to zero for mixed
+      mode
+    - IB/qib: Fix DMA api warning with debug kernel
+    - IB/{hfi1, qib}: Add handling of kernel restart
+    - IB/mlx4: Mark user MR as writable if actual virtual memory is writable
+    - IB/core: Make testing MR flags for writability a static inline function
+    - IB/mlx5: Fetch soft WQE's on fatal error state
+    - IB/isert: Fix for lib/dma_debug check_sync warning
+    - IB/isert: fix T10-pi check mask setting
+    - IB/hfi1: Fix fault injection init/exit issues
+    - IB/hfi1: Reorder incorrect send context disable
+    - IB/hfi1: Optimize kthread pointer locking when queuing CQ entries
+    - IB/hfi1: Fix user context tail allocation for DMA_RTAIL
+    - IB/uverbs: Fix ordering of ucontext check in ib_uverbs_write
+    - RDMA/mlx4: Discard unknown SQP work requests
+    - xprtrdma: Return -ENOBUFS when no pages are available
+    - RDMA/core: Save kernel caller name when creating CQ using ib_create_cq()
+    - mtd: rawnand: Do not check FAIL bit when executing a SET_FEATURES op
+    - mtd: cfi_cmdset_0002: Change write buffer to check correct value
+    - mtd: rawnand: denali_dt: set clk_x_rate to 200 MHz unconditionally
+    - mtd: rawnand: fix return value check for bad block status
+    - mtd: rawnand: mxc: set spare area size register explicitly
+    - mtd: rawnand: micron: add ONFI_FEATURE_ON_DIE_ECC to supported features
+    - mtd: rawnand: All AC chips have a broken GET_FEATURES(TIMINGS).
+    - mtd: cfi_cmdset_0002: Use right chip in do_ppb_xxlock()
+    - mtd: cfi_cmdset_0002: fix SEGV unlocking multiple chips
+    - mtd: cfi_cmdset_0002: Fix unlocking requests crossing a chip boudary
+    - mtd: cfi_cmdset_0002: Avoid walking all chips when unlocking.
+    - clk:aspeed: Fix reset bits for PCI/VGA and PECI
+    - [x86] PCI: hv: Make sure the bus domain is really unique
+    - PCI: Add ACS quirk for Intel 7th & 8th Gen mobile
+    - PCI: Add ACS quirk for Intel 300 series
+    - PCI: pciehp: Clear Presence Detect and Data Link Layer Status Changed on
+      resume
+    - PCI: Account for all bridges on bus when distributing bus numbers
+    - auxdisplay: fix broken menu
+    - pinctrl: armada-37xx: Fix spurious irq management
+    - pinctrl: samsung: Correct EINTG banks order
+    - pinctrl: devicetree: Fix pctldev pointer overwrite
+    - cpufreq: intel_pstate: Fix scaling max/min limits with Turbo 3.0
+    - [mips*] pb44: Fix i2c-gpio GPIO descriptor table
+    - [mips*] io: Add barrier after register read in inX()
+    - time: Make sure jiffies_to_msecs() preserves non-zero time periods
+    - irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node
+    - locking/rwsem: Fix up_read_non_owner() warning with DEBUG_RWSEMS
+    - X.509: unpack RSA signatureValue field from BIT STRING
+    - Btrfs: fix return value on rename exchange failure
+    - iio: adc: ad7791: remove sample freq sysfs attributes
+    - iio: sca3000: Fix an error handling path in 'sca3000_probe()'
+    - mm: fix __gup_device_huge vs unmap
+    - scsi: scsi_debug: Fix memory leak on module unload
+    - scsi: hpsa: disable device during shutdown
+    - scsi: qla2xxx: Delete session for nport id change
+    - scsi: qla2xxx: Fix setting lower transfer speed if GPSC fails
+    - scsi: qla2xxx: Mask off Scope bits in retry delay
+    - scsi: qla2xxx: Spinlock recursion in qla_target
+    - scsi: zfcp: fix missing SCSI trace for result of eh_host_reset_handler
+    - scsi: zfcp: fix missing SCSI trace for retry of abort / scsi_eh TMF
+    - scsi: zfcp: fix misleading REC trigger trace where erp_action setup
+      failed
+    - scsi: zfcp: fix missing REC trigger trace on terminate_rport_io early
+      return
+    - scsi: zfcp: fix missing REC trigger trace on terminate_rport_io for
+      ERP_FAILED
+    - scsi: zfcp: fix missing REC trigger trace for all objects in ERP_FAILED
+    - scsi: zfcp: fix missing REC trigger trace on enqueue without ERP thread
+    - linvdimm, pmem: Preserve read-only setting for pmem devices
+    - libnvdimm, pmem: Unconditionally deep flush on *sync
+    - [armhf] clk: meson: meson8b: mark fclk_div2 gate clocks as CLK_IS_CRITICAL
+    - [armhf] rtc: sun6i: Fix bit_idx value for clk_register_gate
+    - md: fix two problems with setting the "re-add" device state.
+    - rpmsg: smd: do not use mananged resources for endpoints and channels
+    - ubi: fastmap: Cancel work upon detach
+    - ubi: fastmap: Correctly handle interrupted erasures in EBA
+    - UBIFS: Fix potential integer overflow in allocation
+    - backlight: as3711_bl: Fix Device Tree node lookup
+    - backlight: max8925_bl: Fix Device Tree node lookup
+    - backlight: tps65217_bl: Fix Device Tree node lookup
+    - Revert "iommu/amd_iommu: Use CONFIG_DMA_DIRECT_OPS=y and
+      dma_direct_{alloc,free}()"
+    - f2fs: don't use GFP_ZERO for page caches
+    - um: Fix initialization of vector queues
+    - um: Fix raw interface options
+    - mfd: twl-core: Fix clock initialization
+    - mfd: intel-lpss: Program REMAP register in PIO mode
+    - mfd: intel-lpss: Fix Intel Cannon Lake LPSS I2C input clock
+    - perf tools: Fix symbol and object code resolution for vdso32 and vdsox32
+    - [x86] perf intel-pt: Fix sync_switch INTEL_PT_SS_NOT_TRACING
+    - [x86] perf intel-pt: Fix decoding to accept CBR between FUP and
+      corresponding TIP
+    - [x86] perf intel-pt: Fix MTC timing after overflow
+    - [x86] perf intel-pt: Fix "Unexpected indirect branch" error
+    - [x86] perf intel-pt: Fix packet decoding of CYC packets
+    - media: vsp1: Release buffers for each video node
+    - media: uvcvideo: Support realtek's UVC 1.5 device
+    - media: cx231xx: Ignore an i2c mux adapter
+    - media: v4l2-compat-ioctl32: prevent go past max size
+    - media: cx231xx: Add support for AverMedia DVD EZMaker 7
+    - media: rc: mce_kbd decoder: fix stuck keys
+    - media: dvb_frontend: fix locking issues at dvb_frontend_get_event()
+    - nfsd: restrict rd_maxcount to svc_max_payload in nfsd_encode_readdir
+    - NFSv4: Fix possible 1-byte stack overflow in
+      nfs_idmap_read_and_verify_message
+    - NFSv4: Revert commit 5f83d86cf531d ("NFSv4.x: Fix wraparound issues..")
+    - NFSv4: Fix a typo in nfs41_sequence_process
+    - video: uvesafb: Fix integer overflow in allocation (CVE-2018-13406)
+    - ACPI / LPSS: Add missing prv_offset setting for byt/cht PWM devices
+    - Input: silead - add MSSL0002 ACPI HID
+    - Input: elan_i2c - add ELAN0618 (Lenovo v330 15IKB) ACPI ID
+    - pwm: lpss: platform: Save/restore the ctrl register over a suspend/resume
+    - rbd: flush rbd_dev->watch_dwork after watch is unregistered
+    - mm/ksm.c: ignore STABLE_FLAG of rmap_item->address in rmap_walk_ksm()
+    - mm: fix devmem_is_allowed() for sub-page System RAM intersections
+    - xen: Remove unnecessary BUG_ON from __unbind_from_irq()
+    - net: ethernet: fix suspend/resume in davinci_emac
+    - udf: Detect incorrect directory size
+    - Input: xpad - fix GPD Win 2 controller name
+    - Input: psmouse - fix button reporting for basic protocols
+    - Input: elan_i2c_smbus - fix more potential stack buffer overflows
+    - Input: elantech - enable middle button of touchpads on ThinkPad P52
+    - Input: elantech - fix V4 report decoding for module with middle key
+    - ALSA: timer: Fix UBSAN warning at SNDRV_TIMER_IOCTL_NEXT_DEVICE ioctl
+    - ALSA: hda - Force to link down at runtime suspend on ATI/AMD HDMI
+    - ALSA: hda/realtek - Fix pop noise on Lenovo P50 & co
+    - ALSA: hda/realtek - Add a quirk for FSC ESPRIMO U9210
+    - ALSA: hda/realtek - Fix the problem of two front mics on more machines
+    - Revert "i2c: algo-bit: init the bus to a known state"
+    - i2c: gpio: initialize SCL to HIGH again
+    - slub: fix failure when we delete and create a slab cache
+    - kasan: depend on CONFIG_SLUB_DEBUG
+    - dm: use bio_split() when splitting out the already processed bio
+    - pmem: only set QUEUE_FLAG_DAX for fsdax mode
+    - block: Fix transfer when chunk sectors exceeds max
+    - block: Fix cloning of requests with a special payload
+    - [x86] e820: put !E820_TYPE_RAM regions into memblock.reserved
+    - selinux: move user accesses in selinuxfs out of locked regions
+    - [x86] entry/64/compat: Fix "x86/entry/64/compat: Preserve r8-r11 in int
+      $0x80"
+    - [x86] efi: Fix efi_call_phys_epilog() with CONFIG_X86_5LEVEL=y
+    - dm zoned: avoid triggering reclaim from inside dmz_map()
+    - dm thin: handle running out of data space vs concurrent discard
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.5
+    - [armhf,arm64] usb: dwc2: fix the incorrect bitmaps for the ports of
+      multi_tt hub
+    - usb: typec: tcpm: fix logbuffer index is wrong if _tcpm_log is re-entered
+    - acpi: Add helper for deactivating memory region
+    - usb: typec: ucsi: acpi: Workaround for cache mode issue
+    - usb: typec: ucsi: Fix for incorrect status data issue
+    - xhci: Fix kernel oops in trace_xhci_free_virt_device
+    - n_tty: Fix stall at n_tty_receive_char_special().
+    - n_tty: Access echo_* variables carefully.
+    - [armhf] iio: mma8452: Fix ignoring MMA8452_INT_DRDY
+    - serial: 8250_pci: Remove stalled entries in blacklist
+    - serdev: fix memleak on module unload
+    - vt: prevent leaking uninitialized data to userspace via /dev/vcs*
+    - drm/amdgpu: Add APU support in vi_set_uvd_clocks
+    - drm/amdgpu: Add APU support in vi_set_vce_clocks
+    - drm/amdgpu: fix the missed vcn fw version report
+    - drm/amdgpu: Grab/put runtime PM references in atomic_commit_tail()
+    - drm/amdgpu: fix clear_all and replace handling in the VM (v2)
+    - drm/amd/display: Clear connector's edid pointer
+    - [x86] drm/i915/dp: Send DPCD ON for MST before phy_up
+    - drm/qxl: Call qxl_bo_unref outside atomic context
+    - [armhf] Revert "drm/sun4i: Handle DRM_BUS_FLAG_PIXDATA_*EDGE"
+    - drm/amdgpu: Don't default to DC support for Kaveri and older
+    - drm/amdgpu: Use kvmalloc_array for allocating VRAM manager nodes array
+    - drm/amdgpu: Refactor amdgpu_vram_mgr_bo_invisible_size helper
+    - drm/amdgpu: Make amdgpu_vram_mgr_bo_invisible_size always accurate
+    - drm/amdgpu: Update pin_size values before unpinning BO
+    - drm/amdgpu: GPU vs CPU page size fixes in amdgpu_vm_bo_split_mapping
+    - drm/amdgpu: Count disabled CRTCs in commit tail earlier
+    - drm/amd/display: release spinlock before committing updates to stream
+    - [x86] drm/i915: Allow DBLSCAN user modes with eDP/LVDS/DSI
+    - [x86] drm/i915: Fix PIPESTAT irq ack on i965/g4x
+    - [x86] drm/i915: Disallow interlaced modes on g4x DP outputs
+    - [x86] drm/i915: Turn off g4x DP port in .post_disable()
+    - [x86] drm/i915: Enable provoking vertex fix on Gen9 systems.
+    - netfilter: ip6t_rpfilter: provide input interface for route lookup
+    - netfilter: xt_connmark: fix list corruption on rmmod
+    - netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in
+      nft_do_chain()
+    - [arm64] dts: meson-gxl-s905x-p212: Add phy-supply for usb0
+    - [x86] mm: Don't free P4D table when it is folded at runtime
+    - [armhf] dts: imx6q: Use correct SDMA script for SPI5 core
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.6
+    - userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access
+    - mm: hugetlb: yield when prepping struct pages
+    - mm: teach dump_page() to correctly output poisoned struct pages
+    - PCI / ACPI / PM: Resume bridges w/o drivers on suspend-to-RAM
+    - ACPICA: Drop leading newlines from error messages
+    - ACPI / battery: Safe unregistering of hooks
+    - tracing: Avoid string overflow
+    - tracing: Fix missing return symbol in function_graph output
+    - scsi: sg: mitigate read/write abuse
+    - scsi: aacraid: Fix PD performance regression over incorrect qd being set
+    - scsi: target: Fix truncated PR-in ReadKeys response
+    - [s390x] Correct register corruption in critical section cleanup
+    - drbd: fix access after free
+    - vfio: Use get_user_pages_longterm correctly
+    - [armhf] dts: imx51-zii-rdu1: fix touchscreen pinctrl
+    - [armhf] dts: omap3: Fix am3517 mdio and emac clock references
+    - [armhf] dts: dra7: Disable metastability workaround for USB2
+    - cifs: Fix use after free of a mid_q_entry
+    - cifs: Fix memory leak in smb2_set_ea()
+    - cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting
+    - cifs: Fix infinite loop when using hard mount option
+    - drm: Use kvzalloc for allocating blob property memory
+    - drm/udl: fix display corruption of the last line
+    - drm/amdgpu: Add amdgpu_atpx_get_dhandle()
+    - drm/amdgpu: Dynamically probe for ATIF handle (v2)
+    - ext4: include the illegal physical block in the bad map ext4_error msg
+    - ext4: add more mount time checks of the superblock
+    - ext4: check superblock mapped prior to committing
+    - HID: i2c-hid: Fix "incomplete report" noise
+    - HID: hiddev: fix potential Spectre v1 (CVE-2017-5715)
+    - HID: debug: check length before copy_to_user()
+    - HID: core: allow concurrent registration of drivers
+    - i2c: core: smbus: fix a potential missing-check bug
+    - i2c: smbus: kill memory leak on emulated and failed DMA SMBus xfers
+    - fs: allow per-device dax status checking for filesystems
+    - dax: change bdev_dax_supported() to support boolean returns
+    - dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
+    - dm: prevent DAX mounts if not supported
+    - mtd: cfi_cmdset_0002: Change definition naming to retry write operation
+    - mtd: cfi_cmdset_0002: Change erase functions to retry for error
+    - mtd: cfi_cmdset_0002: Change erase functions to check chip good only
+    - netfilter: nf_log: don't hold nf_log_mutex during user access
+    - [x86] staging: comedi: quatech_daqp_cs: fix no-op loop
+      daqp_ao_insn_write()
+    - Revert mm/vmstat.c: fix vmstat_update() preemption BUG
+
+  [ Sjoerd Simons ]
+  * [armhf] DRM: Enable CONFIG_DRM_IMX_PARALLEL_DISPLAY
+
+  [ Ben Hutchings ]
+  * linux-tools: Fix cross-build of objtool
+  * [powerpcspe] Fix build failures (thanks to James Clarke):
+    - powerpc/lib/sstep: Fix building for powerpcspe
+    - powerpc/lib/Makefile: Don't pull in quad.o for 32-bit kernels
+    - linux-perf: Disable building for powerpcspe
+  * [powerpc,powerpcspe,ppc64] Fix cross-build (Closes: #903096):
+    - Introduce linux-bootwrapper-<abiname> package containing boot wrapper
+      tools for the host architecture
+    - linux-image: Install symlinks to boot wrapper tools instead of the
+      native tools built by kbuild
+  * fs: Fix up non-directory creation in SGID directories (CVE-2018-13405)
+  * sound/pci/hda: Ignore ABI changes
+  * HID: Avoid ABI change in 4.17.6
+  * dax: Avoid ABI change in 4.17.6
+
+  [ Cyril Brulebois ]
+  * udeb: Add virtio_console to virtio-modules (Closes: #903122).
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 12 Jul 2018 02:05:27 +0100
+
+linux (4.17.3-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.3
+    - net: aquantia: fix unsigned numvecs comparison with less than zero
+    - bonding: re-evaluate force_primary when the primary slave name changes
+    - cdc_ncm: avoid padding beyond end of skb
+    - ipv6: allow PMTU exceptions to local routes
+    - [armhf,arm64] net: dsa: add error handling for pskb_trim_rcsum
+    - net/sched: act_simple: fix parsing of TCA_DEF_DATA
+    - tcp: verify the checksum of the first data segment in a new connection
+    - socket: close race condition between sock_close() and sockfs_setattr()
+      (CVE-2018-12232)
+    - udp: fix rx queue len reported by diag and proc interface
+    - net: in virtio_net_hdr only add VLAN_HLEN to csum_start if payload holds
+      vlan
+    - ACPICA: AML parser: attempt to continue loading table after error
+    - ext4: fix hole length detection in ext4_ind_map_blocks()
+    - ext4: update mtime in ext4_punch_hole even if no blocks are released
+    - ext4: do not allow external inodes for inline data (CVE-2018-11412)
+    - ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget()
+    - ext4: correctly handle a zero-length xattr with a non-zero e_value_offs
+      (CVE-2018-10840)
+    - ext4: fix fencepost error in check for inode count overflow during resize
+    - driver core: Don't ignore class_dir_create_and_add() failure.
+    - Btrfs: allow empty subvol= again
+    - Btrfs: fix clone vs chattr NODATASUM race
+    - Btrfs: fix memory and mount leak in btrfs_ioctl_rm_dev_v2()
+    - btrfs: return error value if create_io_em failed in cow_file_range
+    - btrfs: scrub: Don't use inode pages for device replace
+    - ALSA: usb-audio: Disable the quirk for Nura headset
+    - ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream()
+    - [x86] MCE: Fix stack out-of-bounds write in mce-inject.c: Flags_read()
+    - smb3: fix various xid leaks
+    - smb3: on reconnect set PreviousSessionId field
+    - CIFS: 511c54a2f69195b28afb9dd119f03787b1625bb4 adds a check for session
+      expiry
+    - cifs: For SMB2 security informaion query, check for minimum sized
+      security descriptor instead of sizeof FileAllInformation class
+    - nbd: fix nbd device deletion
+    - nbd: update size when connected
+    - nbd: use bd_set_size when updating disk size
+    - blk-mq: reinit q->tag_set_list entry only after grace period
+    - bdi: Move cgroup bdi_writeback to a dedicated low concurrency workqueue
+    - cpufreq: Fix new policy initialization during limits updates via sysfs
+    - cpufreq: governors: Fix long idle detection logic in load calculation
+    - libata: zpodd: small read overflow in eject_tray()
+    - libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk
+    - nvme/pci: Sync controller reset for AER slot_reset
+    - [x86] vector: Fix the args of vector_alloc tracepoint
+    - [x86] apic/vector: Prevent hlist corruption and leaks
+    - [x86] apic: Provide apic_ack_irq()
+    - [x86] ioapic: Use apic_ack_irq()
+    - [x86] platform/uv: Use apic_ack_irq()
+    - irq_remapping: Use apic_ack_irq()
+    - genirq/generic_pending: Do not lose pending affinity update
+    - genirq/affinity: Defer affinity setting if irq chip is busy
+    - genirq/migration: Avoid out of line call if pending is not set
+    - [x86] intel_rdt: Enable CMT and MBM on new Skylake stepping
+    - media: uvcvideo: Prevent setting unavailable flags
+    - media: rc: ensure input/lirc device can be opened after register
+    - iwlwifi: fw: harden page loading code
+    - [x86] HID: intel_ish-hid: ipc: register more pm callbacks to support
+      hibernation
+    - HID: wacom: Correct logical maximum Y for 2nd-gen Intuos Pro large
+    - vhost: fix info leak due to uninitialized memory (CVE-2018-1118)
+    - fs/binfmt_misc.c: do not allow offset overflow
+    - mm, page_alloc: do not break __GFP_THISNODE by zonelist reset
+
+  [ Ben Hutchings ]
+  * [amd64,arm64,armhf] android: Build modules to support Anbox
+    (Closes: #901492)
+    - Export symbols needed by Android drivers
+    - Enable building ashmem and binder as modules
+    - Enable ANDROID
+    - Enable ANDROID_BINDER_IPC, ASHMEM as modules
+    - Set ANDROID_BINDER_DEVICES="binder"
+    - Disable ANDROID_BINDER_IPC_32BIT
+  * [mips*] Increase RELOCATION_TABLE_SIZE to 0x00140000 (fixes FTBFS)
+  * Set ABI to 1
+  * [x86,arm64] Disable code signing for upload to unstable
+  * [x86] virt: vbox: Only copy_from_user the request-header once
+    (CVE-2018-12633)
+  * [x86] vboxguest: Enable VBOXGUEST and DRM_VBOXVIDEO as modules
+  * aufs: Update support patchset to aufs4.x-rcN-20180611
+  * debian/rules.d/scripts/mod/gendef.py: Use Python 3
+  * debian/rules: Fix pkg.linux.notools build profile
+  * tracing: Check for no filter when processing event filters (CVE-2018-12714)
+  * dm: Enable DM_INTEGRITY as module (except on armel) (Closes: #896649)
+  * debian/lib/python/debian_linux/debian.py: Accept arbitrary revision
+    suffixes (Closes: #898087)
+  * ext4: add corruption check in ext4_xattr_set_entry() (CVE-2018-10879)
+  * ext4: always verify the magic number in xattr blocks (CVE-2018-10879)
+  * ext4: always check block group bounds in ext4_init_block_bitmap()
+    (CVE-2018-10878)
+  * ext4: make sure bitmaps and the inode table don't overlap with bg
+    descriptors (CVE-2018-10878)
+  * ext4: only look at the bg_flags field if it is valid (CVE-2018-10876)
+  * ext4: verify the depth of extent tree in ext4_find_extent()
+    (CVE-2018-10877)
+  * ext4: clear i_data in ext4_inode_info when removing inline data
+    (CVE-2018-10881)
+  * ext4: never move the system.data xattr out of the inode body
+    (CVE-2018-10880)
+  * jbd2: don't mark block as modified if the handle is out of credits
+    (CVE-2018-10883)
+  * ext4: avoid running out of journal credits when appending to an inline file
+    (CVE-2018-10883)
+  * ext4: add more inode number paranoia checks (CVE-2018-10882)
+  * jfs: Fix inconsistency between memory allocation and ea_buf->max_size
+    (CVE-2018-12233)
+  * debian/control: Move bison and flex to Build-Depends (Closes: #901712)
+
+  [ Romain Perier ]
+  * [x86] amdgpu: Enable DCN 1.0 Raven family (Closes: #901349)
+  * [armhf] Enable missing SND_EDMA_SOC for davinci-mcasp on the BeagleBoneBlack
+
+  [ Vagrant Cascadian ]
+  * [arm64] Add device-tree to support Pinebook.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 02 Jul 2018 22:13:27 +0100
+
+linux (4.17.2-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.17
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.1
+    - netfilter: nf_flow_table: attach dst to skbs
+    - bnx2x: use the right constant
+    - ip6mr: only set ip6mr_table from setsockopt when ip6mr_new_table succeeds
+    - ipv6: omit traffic class when calculating flow hash
+    - l2tp: fix refcount leakage on PPPoL2TP sockets
+    - netdev-FAQ: clarify DaveM's position for stable backports
+    - net: metrics: add proper netlink validation
+    - net/packet: refine check for priv area size
+    - rtnetlink: validate attributes in do_setlink()
+    - sctp: not allow transport timeout value less than HZ/5 for hb_timer
+    - team: use netdev_features_t instead of u32
+    - vrf: check the original netdevice for generating redirect
+    - net: dsa: b53: Fix for brcm tag issue in Cygnus SoC
+    - ipmr: fix error path when ipmr_new_table fails
+    - PCI: hv: Do not wait forever on a device that has disappeared
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.2
+    - crypto: chelsio - request to HW should wrap
+    - blkdev_report_zones_ioctl(): Use vmalloc() to allocate large buffers
+    - KVM: X86: Fix reserved bits check for MOV to CR3
+    - KVM: x86: introduce linear_{read,write}_system
+    - kvm: fix typo in flag name
+    - kvm: nVMX: Enforce cpl=0 for VMX instructions
+    - KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system
+    - kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
+    - staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy
+    - NFC: pn533: don't send USB data off of the stack
+    - usbip: vhci_sysfs: fix potential Spectre v1
+    - usb-storage: Add support for FL_ALWAYS_SYNC flag in the UAS driver
+    - usb-storage: Add compatibility quirk flags for G-Technologies G-Drive
+    - Input: xpad - add GPD Win 2 Controller USB IDs
+    - phy: qcom-qusb2: Fix crash if nvmem cell not specified
+    - usb: core: message: remove extra endianness conversion in usb_set_isoch_delay
+    - usb: typec: wcove: Remove dependency on HW FSM
+    - usb: gadget: function: printer: avoid wrong list handling in printer_write()
+    - usb: gadget: udc: renesas_usb3: fix double phy_put()
+    - usb: gadget: udc: renesas_usb3: should remove debugfs
+    - usb: gadget: udc: renesas_usb3: should call pm_runtime_enable() before add udc
+    - usb: gadget: udc: renesas_usb3: should call devm_phy_get() before add udc
+    - usb: gadget: udc: renesas_usb3: should fail if devm_phy_get() returns error
+    - usb: gadget: udc: renesas_usb3: disable the controller's irqs for reconnecting
+    - serial: sh-sci: Stop using printk format %pCr
+    - tty/serial: atmel: use port->name as name in request_irq()
+    - serial: samsung: fix maxburst parameter for DMA transactions
+    - serial: 8250: omap: Fix idling of clocks for unused uarts
+    - vmw_balloon: fixing double free when batching mode is off
+    - doc: fix sysfs ABI documentation
+    - arm64: defconfig: Enable CONFIG_PINCTRL_MT7622 by default
+    - tty: pl011: Avoid spuriously stuck-off interrupts
+    - crypto: ccree - correct host regs offset
+    - Input: goodix - add new ACPI id for GPD Win 2 touch screen
+    - Input: elan_i2c - add ELAN0612 (Lenovo v330 14IKB) ACPI ID
+    - crypto: caam - strip input zeros from RSA input buffer
+    - crypto: caam - fix DMA mapping dir for generated IV
+    - crypto: caam - fix IV DMA mapping and updating
+    - crypto: caam/qi - fix IV DMA mapping and updating
+    - crypto: caam - fix size of RSA prime factor q
+    - crypto: cavium - Fix fallout from CONFIG_VMAP_STACK
+    - crypto: cavium - Limit result reading attempts
+    - crypto: vmx - Remove overly verbose printk from AES init routines
+    - crypto: vmx - Remove overly verbose printk from AES XTS init
+    - crypto: omap-sham - fix memleak
+
+  [ Vagrant Cascadian ]
+  * [armhf] Enable MFD_AC100 and RTC_DRV_AC100, used in allwinner A80/A83t
+    systems.
+
+  [ Helge Deller ]
+  * [hppa] Disable debug info due to required disk size.
+
+  [ Bastian Blank ]
+  * [cloud-amd64] Enable VIRTUALIZATION. (closes: #900861)
+  * [cloud-amd64] Enable MEMORY_HOTPLUG.
+
+  [ Romain Perier ]
+  * [arm64] correct voltage selector for Firefly-RK3399 (Closes: #900799)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable configuration options used in Firefly-RK3399:
+    DRM_ROCKCHIP, ROCKCHIP_ANALOGIX_DP, ROCKCHIP_DW_HDMI,
+    ROCKCHIP_DW_MIPI_DSI, ROCKCHIP_SARADC, ROCKCHIP_IOMMU, ROCKCHIP_EFUSE,
+    PHY_ROCKCHIP_TYPEC, ROCKCHIP_THERMAL (Closes: #901159).
+    Thanks to Heinrich Schuchardt.
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 19 Jun 2018 22:00:47 +0200
+
+linux (4.17~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Romain Perier]
+  * Update patch debian/wireless-disable-regulatory.db-direct-loading.patch to
+    fix a FTBFS with undefined symbol reg_query_regdb_wmm() that is used by
+    wireless driver iwlwifi.
+
+  [ Luca Boccassi ]
+  * Disable building linux-doc-* and tools documentation when the "nodoc"
+    build profile is used.
+  * Add new "pkg.linux.nosource" build profile that disables building the
+    linux-source-* package, and a "[packages] source" option for the
+    debian/config/defines file that defines the default behaviour.
+  * Remove redundant "Dual License" from debian/copyright to fix Lintian
+    source warning "space-in-std-shortname-in-dep5-copyright".
+  * Add missing Copyright line to debian/copyright to fix Lintian source
+    warning "missing-field-in-dep5-copyright".
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] Enable CONFIG_PATA_GAYLE as module.
+
+  [ Ben Hutchings ]
+  * Fix building only versioned tools packages
+  * Reclassify lockdep packages as unversioned tools
+  * [hppa/parisc64-smp] IB: Fix RDMA_RXE and INFINIBAND_RDMAVT dependencies for
+    DMA_VIRT_OPS
+  * rtl8192se: Fix warning introduced by "firmware: Remove redundant log
+    messages from drivers"
+  * SCSI: Enable SCSI_MQ_DEFAULT. This can be reverted using the kernel
+    parameter: scsi_mod.use_blk_mq=n
+  * dm: Enable DM_MQ_DEFAULT. This can be reverted using the kernel parameter:
+    dm_mod.use_blk_mq=n
+
+  [ Jason Duerstock ]
+  * [ia64] udeb: Add compress-modules package (fixes FTBFS)
+
+  [ YunQiang Su ]
+  * [mips{,64}el/loongson-3] enable NUMA, CPU_PM, CPU_IDLE, RS780_HPET,
+    REGULATOR. (Closes: #898521).
+  * [mips{,64}r6{,el}] use boston as the target, and enable MIPS_CPS.
+    Add a patch to disable uImage generation to avoid depend on u-boot-tools.
+    Fix typo the EL's flavor names in installer: not same within defines
+    Malta is never used for r6. (Closes: #898523)
+    Boston also requires relocation table size >= 0x00121000.
+
+  [ Vagrant Cascadian ]
+  * [armhf] Update mtd-modules: Replace pxa3xx_nand with marvell_nand.
+
+  [ Hideki Yamane ]
+  * Improve battery life on laptops (Closes: #898629)
+    Thanks to Hans de Goede <hdegoede@redhat.com>
+    - ATA: A new SATA link-powermanagement-policy will be the default on all
+      Intel mobile chipsets. This can be reverted by passing 
+      "ahci.mobile_lpm_policy=0" on the kernel commandline.
+    - sound: Enable Intel HDA codec power-saving by default with a 1 second
+      timeout. This can be overridden by passing "snd_hda_intel.power_save=0"
+      on the kernel commandline (0 is previously default).
+    - BlueTooth: Enable USB autosuspend for Bluetooth USB devices by default.
+      This can be disabled by passing "btusb.enable_autosuspend=n" on the
+      kernel commandline. 
+
+  [ Bastian Blank ]
+  * [cloud-amd64] Disable some filesystems.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 29 May 2018 09:54:12 +0100
+
+linux (4.17~rc3-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [amd64] Drop our patch "Don't WARN about expected W+X pages on Xen"; the
+    problem appears to have been fixed upstream
+  * Drop our patch "Kbuild: kconfig: Verbose version of --listnewconfig";
+    listnewconfig now shows symbol values by default
+  * debian/rules.real: Stop enabling verbose output for listnewconfig target
+  * Documentation: typec.rst: Use literal-block element with ascii art
+  * Documentation: Update references to drivers/base/firmware_class.c
+  * [armhf] Enable MTD_NAND_MARVELL as module, replacing MTD_NAND_PXA3xx
+  * linux-kbuild: Update genksyms makefile to run flex and bison
+  * Add support for building only versioned tools packages
+  * Change generation of linux-doc, linux-source, linux-support package names
+
+  [ Luca Boccassi ]
+  * Build-Dep on libelf-dev even for nopython/notools builds to fix FTBFS,
+    needed when CONFIG_STACK_VALIDATION and CONFIG_UNWINDER_ORC are enabled.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 30 Apr 2018 00:13:06 +0100
+
+linux (4.16.16-2) unstable; urgency=medium
+
+  * [powerpc*] Ignore further ABI changes in cxl.
+  * [ia64] Add compress-modules udeb.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 22 Jun 2018 11:50:22 +0200
+
+linux (4.16.16-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.13
+    - [mips*] c-r4k: Fix data corruption related to cache coherence
+    - [mips*] ptrace: Expose FIR register through FP regset
+    - [mips*] Fix ptrace(2) PTRACE_PEEKUSR and PTRACE_POKEUSR accesses to o32
+      FGRs
+    - affs_lookup(): close a race with affs_remove_link()
+    - fix breakage caused by d_find_alias() semantics change
+    - fs: don't scan the inode cache before SB_BORN is set
+    - aio: fix io_destroy(2) vs. lookup_ioctx() race
+    - Btrfs: fix error handling in btrfs_truncate()
+    - ALSA: timer: Fix pause event notification
+    - do d_instantiate/unlock_new_inode combinations safely
+    - mmc: block: propagate correct returned value in mmc_rpmb_ioctl
+    - mmc: sdhci-iproc: remove hard coded mmc cap 1.8v
+    - mmc: sdhci-iproc: fix 32bit writes for TRANSFER_MODE register
+    - mmc: sdhci-iproc: add SDHCI_QUIRK2_HOST_OFF_CARD_ON for cygnus
+    - ahci: Add PCI ID for Cannon Lake PCH-LP AHCI
+    - libata: Blacklist some Sandisk SSDs for NCQ
+    - libata: blacklist Micron 500IT SSD with MU01 firmware
+    - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent
+    - drm/vmwgfx: Fix 32-bit VMW_PORT_HB_[IN|OUT] macros
+    - [arm64] lse: Add early clobbers to some input/output asm operands
+    - [arm64] export tishift functions to modules
+    - [powerpc*] 64s: Clear PCR on boot
+    - IB/hfi1: Use after free race condition in send context error path
+    - IB/umem: Use the correct mm during ib_umem_release
+    - sr: pass down correctly sized SCSI sense buffer (CVE-2018-11506)
+    - bcma: fix buffer size caused crash in bcma_core_mips_print_irq()
+    - idr: fix invalid ptr dereference on item delete
+    - Revert "ipc/shm: Fix shmat mmap nil-page protection"
+    - ipc/shm: fix shmat() nil address after round-down when remapping
+    - mm/kasan: don't vfree() nonexistent vm_area
+    - kasan: free allocated shadow memory on MEM_CANCEL_ONLINE
+    - kasan: fix memory hotplug during boot
+    - kernel/sys.c: fix potential Spectre v1 issue
+    - PM / core: Fix direct_complete handling for devices with no callbacks
+    - KVM/VMX: Expose SSBD properly to guests
+    - KVM: s390: vsie: fix < 8k check for the itdba
+    - KVM: x86: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed
+    - kvm: x86: IA32_ARCH_CAPABILITIES is always supported
+    - x86/kvm: fix LAPIC timer drift when guest uses periodic mode
+    - [armhf] dts: sun4i: Fix incorrect clocks for displays
+    - sh: fix debug trap failure to process signals before return to user
+    - firmware: dmi_scan: Fix UUID length safety check
+    - nvme: don't send keep-alives to the discovery controller
+    - Btrfs: clean up resources during umount after trans is aborted
+    - Btrfs: fix loss of prealloc extents past i_size after fsync log replay
+    - x86/pgtable: Don't set huge PUD/PMD on non-leaf entries
+    - x86/mm: Do not forbid _PAGE_RW before init for __ro_after_init
+    - bnxt_en: Ignore src port field in decap filter nodes
+    - nvme: expand nvmf_check_if_ready checks
+    - fs/proc/proc_sysctl.c: fix potential page fault while unregistering
+      sysctl table
+    - kasan: fix invalid-free test crashing the kernel
+    - kasan, slub: fix handling of kasan_slab_free hook
+    - swap: divide-by-zero when zero length swap file on ssd
+    - z3fold: fix memory leak
+    - sr: get/drop reference to device in revalidate and check_events
+    - Force log to disk before reading the AGF during a fstrim
+    - cpufreq: CPPC: Initialize shared perf capabilities of CPUs
+    - powerpc/fscr: Enable interrupts earlier before calling get_user()
+    - perf tools: Fix perf builds with clang support
+    - perf clang: Add support for recent clang versions
+    - dp83640: Ensure against premature access to PHY registers after reset
+    - ibmvnic: Zero used TX descriptor counter on reset
+    - genirq/affinity: Don't return with empty affinity masks on error
+    - mm/ksm: fix interaction with THP
+    - mm: fix races between address_space dereference and free in
+      page_evicatable
+    - mm: thp: fix potential clearing to referenced flag in
+      page_idle_clear_pte_refs_one()
+    - Btrfs: bail out on error during replay_dir_deletes
+    - Btrfs: fix NULL pointer dereference in log_dir_items
+    - btrfs: Fix possible softlock on single core machines
+    - IB/rxe: Fix for oops in rxe_register_device on ppc64le arch
+    - ocfs2/dlm: don't handle migrate lockres if already in shutdown
+    - [powerpc*] 64s: Fix restore of AMOR on POWER9 after deep sleep
+    - sched/rt: Fix rq->clock_update_flags < RQCF_ACT_SKIP warning
+    - x86/mm: Fix bogus warning during EFI bootup, use boot_cpu_has() instead
+      of this_cpu_has() in build_cr3_noflush()
+    - KVM: VMX: raise internal error for exception during invalid protected
+      mode state
+    - lan78xx: Connect phy early
+    - fscache: Fix hanging wait on page discarded by writeback
+    - dmaengine: rcar-dmac: Fix too early/late system suspend/resume callbacks
+    - [sparc64] Make atomic_xchg() an inline function rather than a macro.
+    - riscv/spinlock: Strengthen implementations with fences
+    - platform/x86: dell-smbios: Fix memory leaks in build_tokens_sysfs()
+    - net: bgmac: Fix endian access in bgmac_dma_tx_ring_free()
+    - net: bgmac: Correctly annotate register space
+    - bnxt_en: fix clear flags in ethtool reset handling
+    - [powerpc*] 64s: sreset panic if there is no debugger or crash dump handlers
+    - btrfs: tests/qgroup: Fix wrong tree backref level
+    - Btrfs: fix copy_items() return value when logging an inode
+    - btrfs: fix lockdep splat in btrfs_alloc_subvolume_writers
+    - btrfs: qgroup: Fix root item corruption when multiple same source
+      snapshots are created with quota enabled
+    - rxrpc: Fix resend event time calculation
+    - rxrpc: Fix Tx ring annotation after initial Tx failure
+    - rxrpc: Don't treat call aborts as conn aborts
+    - xen/acpi: off by one in read_acpi_id()
+    - drivers: macintosh: rack-meter: really fix bogus memsets
+    - ACPI: acpi_pad: Fix memory leak in power saving threads
+    - powerpc/mpic: Check if cpu_possible() in mpic_physmask()
+    - ieee802154: ca8210: fix uninitialised data read
+    - ath10k: advertize beacon_int_min_gcd
+    - iommu/amd: Take into account that alloc_dev_data() may return NULL
+    - intel_th: Use correct method of finding hub
+    - [m68k] set dma and coherent masks for platform FEC ethernets
+    - iwlwifi: mvm: check if mac80211_queue is valid in iwl_mvm_disable_txq
+    - iwlwifi: mvm: take RCU lock before dereferencing
+    - net/mlx5e: Move all TX timeout logic to be under state lock
+    - parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode
+    - perf mmap: Fix accessing unmapped mmap in perf_mmap__read_done()
+    - hwmon: (nct6775) Fix writing pwmX_mode
+    - mt76x2: fix possible NULL pointer dereferencing in mt76x2_tx()
+    - mt76x2: fix warning in ieee80211_get_key_rx_seq()
+    - [powerpc] perf: Prevent kernel address leak to userspace via BHRB buffer
+    - [powerpc] perf: Fix kernel address leak via sampling registers
+    - rsi: fix kernel panic observed on 64bit machine
+    - tools/thermal: tmon: fix for segfault
+    - selftests: Print the test we're running to /dev/kmsg
+    - i40e: hold the RTNL lock while changing interrupt schemes
+    - net/mlx5: Protect from command bit overflow
+    - watchdog: davinci_wdt: fix error handling in davinci_wdt_probe()
+    - net: hns3: fix for the wrong shift problem in hns3_set_txbd_baseinfo
+    - net: hns3: fix for returning wrong value problem in
+      hns3_get_rss_indir_size
+    - net: hns3: fix for returning wrong value problem in hns3_get_rss_key_size
+    - net: qualcomm: rmnet: check for null ep to avoid null pointer dereference
+    - ath10k: Fix kernel panic while using worker (ath10k_sta_rc_update_wk)
+    - nvme_fc: fix abort race on teardown with lld reject
+    - nvme-pci: disable APST for Samsung NVMe SSD 960 EVO + ASUS PRIME Z370-A
+    - ath9k: fix crash in spectral scan
+    - btrfs: fix null pointer deref when target device is missing
+    - cxgb4: Setup FW queues before registering netdev
+    - hv_netvsc: Fix the return status in RX path
+    - ima: Fix Kconfig to select TPM 2.0 CRB interface
+    - ima: Fallback to the builtin hash algorithm
+    - watchdog: aspeed: Allow configuring for alternate boot
+    - gfs2: Check for the end of metadata in punch_hole
+    - virtio-net: Fix operstate for virtio when no VIRTIO_NET_F_STATUS
+    - [armhf] dts: socfpga: fix GIC PPI warning
+    - ima: clear IMA_HASH
+    - ext4: don't complain about incorrect features when probing
+    - drm/vmwgfx: Unpin the screen object backup buffer when not used
+    - iommu/mediatek: Fix protect memory setting
+    - cpufreq: cppc_cpufreq: Fix cppc_cpufreq_init() failure path
+    - firmware: fix checking for return values for fw_add_devm_name()
+    - IB/mlx5: Set the default active rate and width to QDR and 4X
+    - zorro: Set up z->dev.dma_mask for the DMA API
+    - bcache: quit dc->writeback_thread when BCACHE_DEV_DETACHING is set
+    - remoteproc: imx_rproc: Fix an error handling path in 'imx_rproc_probe()'
+    - bcache: fix cached_dev->count usage for bch_cache_set_error()
+    - ACPICA: Events: add a return on failure from acpi_hw_register_read
+    - ACPICA: Fix memory leak on unusual memory leak
+    - bcache: stop dc->writeback_rate_update properly
+    - ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c
+    - cxgb4: Fix queue free path of ULD drivers
+    - i2c: mv64xxx: Apply errata delay only in standard mode
+    - KVM: lapic: stop advertising DIRECTED_EOI when in-kernel IOAPIC is in use
+    - perf top: Fix top.c[all] all-graph config option reading
+    - perf stat: Fix core dump when flag T is used
+    - IB/core: Honor port_num while resolving GID for IB link layer
+    - drm/amdkfd: add missing include of mm.h
+    - coresight: Use %px to print pcsr instead of %p
+    - ibmvnic: Fix reset return from closed state
+    - regulator: gpio: Fix some error handling paths in 'gpio_regulator_probe()'
+    - spi: bcm-qspi: fIX some error handling paths
+    - net/smc: pay attention to MAX_ORDER for CQ entries
+    - MIPS: ath79: Fix AR724X_PLL_REG_PCIE_CONFIG offset
+    - powerpc/vas: Fix cleanup when VAS is not configured
+    - PCI: Restore config space on runtime resume despite being unbound
+    - watchdog: sprd_wdt: Fix error handling in sprd_wdt_enable()
+    - watchdog: dw: RMW the control register
+    - watchdog: aspeed: Fix translation of reset mode to ctrl register
+    - ipmi_ssif: Fix kernel panic at msg_done_handler
+    - [arm64] drm/meson: Fix some error handling paths in 'meson_drv_bind_master()'
+    - [arm64] drm/meson: Fix an un-handled error path in 'meson_drv_bind_master()'
+    - [powerpc] powernv/npu: Fix deadlock in mmio_invalidate()
+    - f2fs: flush cp pack except cp pack 2 page at first
+    - cxl: Check if PSL data-cache is available before issue flush request
+    - f2fs: fix to set KEEP_SIZE bit in f2fs_zero_range
+    - f2fs: fix to clear CP_TRIMMED_FLAG
+    - f2fs: fix to check extent cache in f2fs_drop_extent_tree
+    - perf/core: Fix installing cgroup events on CPU
+    - max17042: propagate of_node to power supply device
+    - perf/core: Fix perf_output_read_group()
+    - drm/panel: simple: Fix the bus format for the Ontat panel
+    - hwmon: (pmbus/max8688) Accept negative page register values
+    - hwmon: (pmbus/adm1275) Accept negative page register values
+    - [amd64] perf: Properly save/restore the PMU state in the NMI handler
+    - cdrom: do not call check_disk_change() inside cdrom_open()
+    - [armhf, arm64] efi: Only register page tables when they exist
+    - [amd64] perf: Fix large period handling on Broadwell CPUs
+    - [amd64] perf: Fix event update for auto-reload
+    - [arm64] dts: qcom: Fix SPI5 config on MSM8996
+    - [arm64] soc: qcom: wcnss_ctrl: Fix increment in NV upload
+    - gfs2: Fix fallocate chunk size
+    - [amd64] x86/devicetree: Initialize device tree before using it
+    - [amd64] x86/devicetree: Fix device IRQ settings in DT
+    - phy: rockchip-emmc: retry calpad busy trimming
+    - ALSA: vmaster: Propagate slave error
+    - phy: qcom-qmp: Fix phy pipe clock gating
+    - drm/bridge: sii902x: Retry status read after DDI I2C
+    - drm/amdgpu: Clean sdma wptr register when only enable wptr polling
+    - tools: hv: fix compiler warnings about major/target_fname
+    - block: null_blk: fix 'Invalid parameters' when loading module
+    - dmaengine: pl330: fix a race condition in case of threaded irqs
+    - [powerpc] mm/slice: Remove intermediate bitmap copy
+    - [powerpc] mm/slice: create header files dedicated to slices
+    - [powerpc] mm/slice: Enhance for supporting PPC32
+    - [powerpc] mm/slice: Fix hugepage allocation at hint address on 8xx
+    - dmaengine: rcar-dmac: Check the done lists in rcar_dmac_chan_get_residue()
+    - enic: enable rq before updating rq descriptors
+    - watchdog: asm9260_wdt: fix error handling in asm9260_wdt_probe()
+    - hwrng: stm32 - add reset during probe
+    - pinctrl: devicetree: Fix dt_to_map_one_config handling of hogs
+    - pinctrl: artpec6: dt: add missing pin group uart5nocts
+    - vfio-ccw: fence off transport mode
+    - dmaengine: qcom: bam_dma: get num-channels and num-ees from dt
+    - drm: omapdrm: dss: Move initialization code from component bind to probe
+    - [armhf] dts: dra71-evm: Correct evm_sd regulator max voltage
+    - drm/amdgpu: disable GFX ring and disable PQ wptr in hw_fini
+    - drm/amdgpu: adjust timeout for ib_ring_tests(v2)
+    - ibmvnic: Allocate statistics buffers during probe
+    - [armhf, arm64] net: stmmac: ensure that the device has released ownership
+      before reading data
+    - [armhf, arm64] net: stmmac: ensure that the MSS desc is the last desc to
+      set the own bit
+    - cpufreq: Reorder cpufreq_online() error code path
+    - dpaa_eth: fix SG mapping
+    - PCI: Add function 1 DMA alias quirk for Marvell 88SE9220
+    - udf: Provide saner default for invalid uid / gid
+    - ixgbe: prevent ptp_rx_hang from running when in FILTER_ALL mode
+    - sh_eth: fix TSU init on SH7734/R8A7740
+    - power: supply: ltc2941-battery-gauge: Fix temperature units
+    - [armhf] dts: bcm283x: Fix probing of bcm2835-i2s
+    - [armhf] dts: bcm283x: Fix pin function of JTAG pins
+    - PCMCIA / PM: Avoid noirq suspend aborts during suspend-to-idle
+    - hwrng: bcm2835 - Handle deferred clock properly
+    - audit: return on memory error to avoid null pointer dereference
+    - [armhf, arm64] net: stmmac: call correct function in
+      stmmac_mac_config_rx_queues_routing()
+    - rcu: Call touch_nmi_watchdog() while printing stall warnings
+    - pinctrl: sh-pfc: r8a7796: Fix MOD_SEL register pin assignment for SSI
+      pins group
+    - dt-bindings: display: msm/dsi: Fix the PHY regulator supply props
+    - drm/amd/display: Set vsc pack revision when DPCD revision is >= 1.2
+    - dpaa_eth: fix pause capability advertisement logic
+    - [mips*/octeon] Fix logging messages with spurious periods after newlines
+    - [arm64] soc: renesas: r8a77970-sysc: fix power area parents
+    - [armhf] drm/rockchip: Respect page offset for PRIME mmap calls
+    - x86/apic: Set up through-local-APIC mode on the boot CPU if 'noapic'
+      specified
+    - perf report: Fix wrong jump arrow
+    - perf tests: Use arch__compare_symbol_names to compare symbols
+    - perf report: Fix memory corruption in --branch-history mode
+      --branch-history
+    - perf tests: Fix dwarf unwind for stripped binaries
+    - selftests/net: fixes psock_fanout eBPF test case
+    - drm/vblank: Data type fixes for 64-bit vblank sequences.
+    - netlabel: If PF_INET6, check sk_buff ip header version
+    - drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen3
+    - drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen2
+    - selftests: Add FIB onlink tests
+    - regmap: Correct comparison in regmap_cached
+    - soc: amlogic: meson-gx-pwrc-vpu: fix error on shutdown when domain is
+      powered off
+    - i40e: Add delay after EMP reset for firmware to recover
+    - [armhf] dts: imx7d: cl-som-imx7: fix pinctrl_enet
+    - [armhf] dts: porter: Fix HDMI output routing
+    - regulator: of: Add a missing 'of_node_put()' in an error handling path of
+      'of_regulator_match()'
+    - pinctrl: msm: Use dynamic GPIO numbering
+    - pinctrl: mcp23s08: spi: Fix regmap debugfs entries
+    - kdb: make "mdr" command repeat
+    - drm/vmwgfx: Set dmabuf_size when vmw_dmabuf_init is successful
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.14
+    - objtool: Support GCC 8's cold subfunctions
+    - objtool: Support GCC 8 switch tables
+    - objtool: Detect RIP-relative switch table references
+    - objtool: Detect RIP-relative switch table references, part 2
+    - objtool: Fix "noreturn" detection for recursive sibling calls
+    - x86/mce/AMD: Carve out SMCA get_block_address() code
+    - x86/MCE/AMD: Cache SMCA MISC block addresses
+    - drm/vmwgfx: Use kasprintf
+    - drm/vmwgfx: Fix host logging / guestinfo reading error paths
+    - Revert "pinctrl: msm: Use dynamic GPIO numbering"
+    - xfs: convert XFS_AGFL_SIZE to a helper function
+    - xfs: detect agfl count corruption and reset agfl
+    - Input: synaptics - Lenovo Carbon X1 Gen5 (2017) devices should use RMI
+    - Input: synaptics - Lenovo Thinkpad X1 Carbon G5 (2017) with Elantech trackpoints should use RMI
+    - Input: synaptics - add Intertouch support on X1 Carbon 6th and X280
+    - Input: synaptics - add Lenovo 80 series ids to SMBus
+    - Input: elan_i2c_smbus - fix corrupted stack
+    - tracing: Fix crash when freeing instances with event triggers
+    - tracing: Make the snapshot trigger work with instances
+    - nvme: fix extended data LBA supported setting
+    - selinux: KASAN: slab-out-of-bounds in xattr_getsecurity
+    - cfg80211: further limit wiphy names to 64 bytes
+    - drm/amd/powerplay: Fix enum mismatch
+    - rtlwifi: rtl8192cu: Remove variable self-assignment in rf.c
+    - iio: ad7793: implement IIO_CHAN_INFO_SAMP_FREQ
+    - iio: hid-sensor-trigger: Fix sometimes not powering up the sensor after resume
+    - iio:buffer: make length types match kfifo types
+    - iio:kfifo_buf: check for uint overflow
+    - iio: adc: stm32-dfsdm: fix successive oversampling settings
+    - iio: adc: stm32-dfsdm: fix sample rate for div2 spi clock
+    - iio: adc: at91-sama5d2_adc: fix channel configuration for differential channels
+    - iio: adc: select buffer for at91-sama5d2_adc
+    - MIPS: lantiq: gphy: Drop reboot/remove reset asserts
+    - MIPS: ptrace: Fix PTRACE_PEEKUSR requests for 64-bit FGRs
+    - MIPS: prctl: Disallow FRE without FR with PR_SET_FP_MODE requests
+    - scsi: scsi_transport_srp: Fix shost to rport translation
+    - stm class: Use vmalloc for the master map
+    - hwtracing: stm: fix build error on some arches
+    - IB/core: Fix error code for invalid GID entry
+    - mm/huge_memory.c: __split_huge_page() use atomic ClearPageDirty()
+    - Revert "rt2800: use TXOP_BACKOFF for probe frames"
+    - intel_th: Use correct device when freeing buffers
+    - drm/psr: Fix missed entry in PSR setup time table.
+    - drm/i915/lvds: Move acpi lid notification registration to registration phase
+    - drm/i915: Disable LVDS on Radiant P845
+    - fix io_destroy()/aio_complete() race
+    - mm: fix the NULL mapping case in __isolate_lru_page()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.15
+    - mmap: introduce sane default mmap limits
+    - mmap: relax file size limit for regular files
+    - netfilter: nf_flow_table: attach dst to skbs
+    - kconfig: Avoid format overflow warning from GCC 8.1
+    - be2net: Fix error detection logic for BE3
+    - bnx2x: use the right constant
+    - cls_flower: Fix incorrect idr release when failing to modify rule
+    - dccp: don't free ccid2_hc_tx_sock struct in dccp_disconnect()
+    - enic: set DMA mask to 47 bit
+    - ip6mr: only set ip6mr_table from setsockopt when ip6mr_new_table succeeds
+    - ip6_tunnel: remove magic mtu value 0xFFF8
+    - ipmr: properly check rhltable_init() return value
+    - ipv4: remove warning in ip_recv_error
+    - ipv6: omit traffic class when calculating flow hash
+    - isdn: eicon: fix a missing-check bug
+    - kcm: Fix use-after-free caused by clonned sockets
+    - l2tp: fix refcount leakage on PPPoL2TP sockets
+    - mlxsw: spectrum: Forbid creation of VLAN 1 over port/LAG
+    - netdev-FAQ: clarify DaveM's position for stable backports
+    - net: ethernet: davinci_emac: fix error handling in probe()
+    - net: ipv4: add missing RTA_TABLE to rtm_ipv4_policy
+    - net: metrics: add proper netlink validation
+    - net/packet: refine check for priv area size
+    - net: phy: broadcom: Fix bcm_write_exp()
+    - net: usb: cdc_mbim: add flag FLAG_SEND_ZLP
+    - packet: fix reserve calculation
+    - qed: Fix mask for physical address in ILT entry
+    - rtnetlink: validate attributes in do_setlink()
+    - sctp: not allow transport timeout value less than HZ/5 for hb_timer
+    - team: use netdev_features_t instead of u32
+    - vhost: synchronize IOTLB message with dev cleanup
+    - vrf: check the original netdevice for generating redirect
+    - ipv6: sr: fix memory OOB access in seg6_do_srh_encap/inline
+    - net: phy: broadcom: Fix auxiliary control register reads
+    - net-sysfs: Fix memory leak in XPS configuration
+    - virtio-net: correctly transmit XDP buff after linearizing
+    - virtio-net: fix leaking page for gso packet during mergeable XDP
+    - net/mlx4: Fix irq-unsafe spinlock usage
+    - net/mlx5e: When RXFCS is set, add FCS data into checksum calculation
+    - tun: Fix NULL pointer dereference in XDP redirect
+    - virtio-net: correctly check num_buf during err path
+    - net: dsa: b53: Fix for brcm tag issue in Cygnus SoC
+    - net : sched: cls_api: deal with egdev path only if needed
+    - virtio-net: correctly redirect linearized packet
+    - ip_tunnel: restore binding to ifaces with a large mtu
+    - net: netsec: reduce DMA mask to 40 bits
+    - vhost_net: flush batched heads before trying to busy polling
+    - PCI: hv: Do not wait forever on a device that has disappeared
+    - drm: set FMODE_UNSIGNED_OFFSET for drm files
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.16
+    - netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()
+    - crypto: chelsio - request to HW should wrap
+    - blkdev_report_zones_ioctl(): Use vmalloc() to allocate large buffers
+    - af_key: Always verify length of provided sadb_key
+    - KVM: X86: Fix reserved bits check for MOV to CR3
+    - KVM: x86: introduce linear_{read,write}_system
+    - kvm: nVMX: Enforce cpl=0 for VMX instructions
+    - KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system
+    - staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy
+    - NFC: pn533: don't send USB data off of the stack
+    - usbip: vhci_sysfs: fix potential Spectre v1
+    - usb-storage: Add support for FL_ALWAYS_SYNC flag in the UAS driver
+    - usb-storage: Add compatibility quirk flags for G-Technologies G-Drive
+    - Input: xpad - add GPD Win 2 Controller USB IDs
+    - phy: qcom-qusb2: Fix crash if nvmem cell not specified
+    - usb: core: message: remove extra endianness conversion in usb_set_isoch_delay
+    - usb: typec: wcove: Remove dependency on HW FSM
+    - usb: gadget: function: printer: avoid wrong list handling in printer_write()
+    - usb: gadget: udc: renesas_usb3: fix double phy_put()
+    - usb: gadget: udc: renesas_usb3: should remove debugfs
+    - usb: gadget: udc: renesas_usb3: should call pm_runtime_enable() before add udc
+    - usb: gadget: udc: renesas_usb3: should call devm_phy_get() before add udc
+    - usb: gadget: udc: renesas_usb3: should fail if devm_phy_get() returns error
+    - usb: gadget: udc: renesas_usb3: disable the controller's irqs for reconnecting
+    - serial: sh-sci: Stop using printk format %pCr
+    - tty/serial: atmel: use port->name as name in request_irq()
+    - serial: samsung: fix maxburst parameter for DMA transactions
+    - serial: 8250: omap: Fix idling of clocks for unused uarts
+    - vmw_balloon: fixing double free when batching mode is off
+    - tty: pl011: Avoid spuriously stuck-off interrupts
+    - kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
+    - Input: goodix - add new ACPI id for GPD Win 2 touch screen
+    - Input: elan_i2c - add ELAN0612 (Lenovo v330 14IKB) ACPI ID
+    - crypto: caam - strip input zeros from RSA input buffer
+    - crypto: caam - fix DMA mapping dir for generated IV
+    - crypto: caam - fix IV DMA mapping and updating
+    - crypto: caam/qi - fix IV DMA mapping and updating
+    - crypto: caam - fix size of RSA prime factor q
+    - crypto: cavium - Fix fallout from CONFIG_VMAP_STACK
+    - crypto: cavium - Limit result reading attempts
+    - crypto: vmx - Remove overly verbose printk from AES init routines
+    - crypto: vmx - Remove overly verbose printk from AES XTS init
+    - crypto: omap-sham - fix memleak
+
+  [ Vagrant Cascadian ]
+  * [armhf] Enable MFD_AC100 and RTC_DRV_AC100, used in allwinner A80/A83t
+    systems.
+
+  [ Yves-Alexis Perez ]
+  * hardening: enable FORTIFY_SOURCE, disable HARDENED_USERCOPY_FALLBACK
+  * [x86] hardening: enable REFCOUNT_FULL
+
+  [ Ben Hutchings ]
+  * ext4: Fix duplicate softdep fields in module info
+
+  [ Bastian Blank ]
+  * hv_netvsc: Fix a network regression after ifdown/ifup
+  * [rt] Update to 4.16.15-rt7.
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable configuration options used in Firefly-RK3399:
+    DRM_ROCKCHIP, ROCKCHIP_ANALOGIX_DP, ROCKCHIP_DW_HDMI,
+    ROCKCHIP_DW_MIPI_DSI, ROCKCHIP_SARADC, ROCKCHIP_IOMMU, ROCKCHIP_EFUSE,
+    PHY_ROCKCHIP_TYPEC, ROCKCHIP_THERMAL (Closes: #901159).
+    Thanks to Heinrich Schuchardt.
+  * [arm64,armhf] Add device-tree to support Raspberry PI 3b+.
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 19 Jun 2018 20:23:54 +0200
+
+linux (4.16.12-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6
+    - Revert "pinctrl: intel: Initialize GPIO properly when used through
+      irqchip"
+    - [armhf] drm: bridge: dw-hdmi: Fix overflow workaround for Amlogic Meson
+      GX SoCs
+    - i40e: Fix attach VF to VM issue
+    - tpm: cmd_ready command can be issued only after granting locality
+    - tpm: tpm-interface: fix tpm_transmit/_cmd kdoc
+    - tpm: add retry logic
+    - Revert "ath10k: send (re)assoc peer command when NSS changed"
+    - bonding: do not set slave_dev npinfo before slave_enable_netpoll in
+      bond_enslave
+    - docs: ip-sysctl.txt: fix name of some ipv6 variables
+    - ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy
+    - ipv6: sr: fix NULL pointer dereference in seg6_do_srh_encap()- v4 pkts
+    - KEYS: DNS: limit the length of option strings
+    - l2tp: check sockaddr length in pppol2tp_connect()
+    - llc: delete timers synchronously in llc_sk_free()
+    - net: af_packet: fix race in PACKET_{R|T}X_RING
+    - net: fix deadlock while clearing neighbor proxy table
+    - [arm64,armhf] net: mvpp2: Fix DMA address mask size
+    - net: qmi_wwan: add Wistron Neweb D19Q1
+    - net/smc: fix shutdown in state SMC_LISTEN
+    - net: stmmac: Disable ACS Feature for GMAC >= 4
+    - packet: fix bitfield update race
+    - pppoe: check sockaddr length in pppoe_connect()
+    - Revert "macsec: missing dev_put() on error in macsec_newlink()"
+    - sctp: do not check port in sctp_inet6_cmp_addr
+    - strparser: Do not call mod_delayed_work with a timeout of LONG_MAX
+    - strparser: Fix incorrect strp->need_bytes value.
+    - tcp: clear tp->packets_out when purging write queue
+    - tcp: don't read out-of-bounds opsize
+    - tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets
+    - team: avoid adding twice the same option to the event list
+    - team: fix netconsole setup over team
+    - tipc: add policy for TIPC_NLA_NET_ADDR
+    - vlan: Fix reading memory beyond skb->tail in skb_vlan_tagged_multi
+    - vmxnet3: fix incorrect dereference when rxvlan is disabled
+    - [amd64,arm64] amd-xgbe: Add pre/post auto-negotiation phy hooks
+    - [amd64,arm64] amd-xgbe: Improve KR auto-negotiation and training
+    - [amd64,arm64] amd-xgbe: Only use the SFP supported transceiver signals
+    - net: sched: ife: signal not finding metaid
+    - net: sched: ife: handle malformed tlv length
+    - net: sched: ife: check on metadata length
+    - l2tp: hold reference on tunnels in netlink dumps
+    - l2tp: hold reference on tunnels printed in pppol2tp proc file
+    - l2tp: hold reference on tunnels printed in l2tp/tunnels debugfs file
+    - l2tp: fix {pppol2tp, l2tp_dfs}_seq_stop() in case of seq_file overflow
+    - llc: hold llc_sap before release_sock()
+    - llc: fix NULL pointer deref for SOCK_ZAPPED
+    - [s390x] qeth: fix error handling in adapter command callbacks
+    - [s390x] qeth: avoid control IO completion stalls
+    - [s390x] qeth: handle failure on workqueue creation
+    - [armhf] net: ethernet: ti: cpsw: fix tx vlan priority mapping
+    - net: validate attribute sizes in neigh_dump_table()
+    - bnxt_en: Fix memory fault in bnxt_ethtool_init()
+    - virtio-net: add missing virtqueue kick when flushing packets
+    - VSOCK: make af_vsock.ko removable again
+    - net: aquantia: Regression on reset with 1.x firmware
+    - tun: fix vlan packet truncation
+    - net: aquantia: oops when shutdown on already stopped device
+    - virtio_net: split out ctrl buffer
+    - virtio_net: fix adding vids on big-endian
+    - Revert "mm/hmm: fix header file if/else/endif maze"
+    - commoncap: Handle memory allocation failure.
+    - scsi: mptsas: Disable WRITE SAME
+    - cdrom: information leak in cdrom_ioctl_media_changed() (CVE-2018-10940)
+    - fsnotify: Fix fsnotify_mark_connector race
+    - [m68k] mac: Don't remap SWIM MMIO region
+    - [m68k] block/swim: Check drive type
+    - [m68k] block/swim: Don't log an error message for an invalid ioctl
+    - [m68k] block/swim: Remove extra put_disk() call from error path
+    - [m68k] block/swim: Rename macros to avoid inconsistent inverted logic
+    - [m68k] block/swim: Select appropriate drive on device open
+    - [m68k] block/swim: Fix array bounds check
+    - [m68k] block/swim: Fix IO error at end of medium
+    - tracing: Fix missing tab for hwlat_detector print format
+    - hwmon: (k10temp) Add temperature offset for Ryzen 2700X
+    - hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics
+    - [s390x] cio: update chpid descriptor after resource accessibility event
+    - [s390x] dasd: fix IO error for newly defined devices
+    - [s390x] uprobes: implement arch_uretprobe_is_alive()
+    - [s390x] cpum_cf: rename IBM z13/z14 counter names
+    - kprobes: Fix random address output of blacklist file
+    - ACPI / video: Only default only_lcd to true on Win8-ready _desktops_
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.7
+    - ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS
+    - ext4: set h_journal if there is a failure starting a reserved handle
+    - ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs
+    - random: set up the NUMA crng instances after the CRNG is fully
+      initialized
+    - random: fix possible sleeping allocation from irq context
+    - random: rate limit unseeded randomness warnings
+    - usbip: usbip_event: fix to not print kernel pointer address
+    - usbip: usbip_host: fix to hold parent lock for device_attach() calls
+    - usbip: vhci_hcd: Fix usb device and sockfd leaks
+    - usbip: vhci_hcd: check rhport before using in vhci_hub_control()
+    - Revert "xhci: plat: Register shutdown for xhci_plat"
+    - xhci: Fix USB ports for Dell Inspiron 5775
+    - USB: serial: simple: add libtransistor console
+    - USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster
+    - USB: serial: cp210x: add ID for NI USB serial console
+    - [arm64] serial: mvebu-uart: Fix local flags handling on termios update
+    - usb: typec: ucsi: Increase command completion timeout value
+    - usb: core: Add quirk for HP v222w 16GB Mini
+    - USB: Increment wakeup count on remote wakeup.
+    - ALSA: usb-audio: Skip broken EU on Dell dock USB-audio
+    - virtio: add ability to iterate over vqs
+    - virtio_console: don't tie bufs to a vq
+    - virtio_console: free buffers after reset
+    - virtio_console: drop custom control queue cleanup
+    - virtio_console: move removal code
+    - virtio_console: reset on out of memory
+    - drm/virtio: fix vq wait_event condition
+    - tty: Don't call panic() at tty_ldisc_init()
+    - tty: n_gsm: Fix long delays with control frame timeouts in ADM mode
+    - tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set
+    - tty: Avoid possible error pointer dereference at tty_ldisc_restore().
+    - tty: Use __GFP_NOFAIL for tty_ldisc_get()
+    - ALSA: dice: fix OUI for TC group
+    - ALSA: dice: fix error path to destroy initialized stream data
+    - ALSA: hda - Skip jack and others for non-existing PCM streams
+    - ALSA: opl3: Hardening for potential Spectre v1
+    - ALSA: asihpi: Hardening for potential Spectre v1
+    - ALSA: hdspm: Hardening for potential Spectre v1
+    - ALSA: rme9652: Hardening for potential Spectre v1
+    - ALSA: control: Hardening for potential Spectre v1
+    - ALSA: pcm: Return negative delays from SNDRV_PCM_IOCTL_DELAY.
+    - ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr
+    - ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device
+    - ALSA: seq: oss: Hardening for potential Spectre v1
+    - ALSA: hda: Hardening for potential Spectre v1
+    - ALSA: hda/realtek - Add some fixes for ALC233
+    - ALSA: hda/realtek - Update ALC255 depop optimize
+    - ALSA: hda/realtek - change the location for one of two front mics
+    - mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic
+    - mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block.
+    - mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug.
+    - mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block.
+    - mtd: rawnand: tango: Fix struct clk memory leak
+    - mtd: rawnand: marvell: fix the chip-select DT parsing logic
+    - kobject: don't use WARN for registration failures
+    - scsi: sd_zbc: Avoid that resetting a zone fails sporadically
+    - scsi: sd: Defer spinning up drive while SANITIZE is in progress
+    - blk-mq: start request gstate with gen 1
+    - bfq-iosched: ensure to clear bic/bfqq pointers when preparing request
+    - block: do not use interruptible wait anywhere
+    - [s390x] vfio: ccw: process ssch with interrupts disabled
+    - [arm64] PCI: aardvark: Fix logic in advk_pcie_{rd,wr}_conf()
+    - [arm64] PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf()
+    - [arm64] PCI: aardvark: Use ISR1 instead of ISR0 interrupt in legacy irq
+      mode
+    - [arm64] PCI: aardvark: Fix PCIe Max Read Request Size setting
+    - [armhf,arm64] KVM: Close VMID generation race
+    - [powerpc*] mm: Flush cache on memory hot(un)plug
+    - [powerpc*] mce: Fix a bug where mce loops on memory UE.
+    - [powerpc*] powernv/npu: Do a PID GPU TLB flush when invalidating a large
+      address range
+    - crypto: drbg - set freed buffers to NULL
+    - libceph: un-backoff on tick when we have a authenticated session
+    - libceph: reschedule a tick in finish_hunting()
+    - libceph: validate con->state at the top of try_write()
+    - PCI / PM: Do not clear state_saved in pci_pm_freeze() when smart suspend
+      is set
+    - module: Fix display of wrong module .text address
+    - earlycon: Use a pointer table to fix __earlycon_table stride
+    - [powerpc*] cpufreq: powernv: Fix hardlockup due to synchronous smp_call
+      in timer interrupt
+    - [powerpc*] rtc: opal: Fix OPAL RTC driver OPAL_BUSY loops
+    - drm/edid: Reset more of the display info
+    - drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders
+    - [x86] drm/i915/fbdev: Enable late fbdev initial configuration
+    - [x86] drm/i915/audio: set minimum CD clock to twice the BCLK
+    - [x86] drm/i915: Enable display WA#1183 from its correct spot
+    - drm/amd/display: Fix deadlock when flushing irq
+    - drm/amd/display: Don't read EDID in atomic_check
+    - drm/amd/display: Disallow enabling CRTC without primary plane with FB
+    - objtool, perf: Fix GCC 8 -Wrestrict error
+    - [x86] ipc: Fix x32 version of shmid64_ds and msqid64_ds
+    - [x86] smpboot: Don't use mwait_play_dead() on AMD systems
+    - [x86] microcode/intel: Save microcode patch unconditionally
+    - [x86] microcode: Do not exit early from __reload_late()
+    - tick/sched: Do not mess with an enqueued hrtimer
+    - [x86] crypto: ccp - add check to get PSP master only when PSP is
+      detected
+    - [armhf,arm64] KVM: Add PSCI version selection API
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.8
+    - ACPI / button: make module loadable when booted in non-ACPI mode
+    - [arm64] Add work around for Arm Cortex-A55 Erratum 1024718
+    - ALSA: hda - Fix incorrect usage of IS_REACHABLE()
+    - ALSA: pcm: Check PCM state at xfern compat ioctl
+    - ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger()
+    - ALSA: dice: fix kernel NULL pointer dereference due to invalid
+      calculation for array index
+    - ALSA: aloop: Mark paused device as inactive
+    - ALSA: aloop: Add missing cable lock to ctl API callbacks
+    - errseq: Always report a writeback error once
+    - tracepoint: Do not warn on ENOMEM
+    - scsi: target: Fix fortify_panic kernel exception
+    - Input: leds - fix out of bound access
+    - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook
+      Pro
+    - swiotlb: fix inversed DMA_ATTR_NO_WARN test
+    - rtlwifi: cleanup 8723be ant_sel definition
+    - xfs: prevent creating negative-sized file via INSERT_RANGE
+    - RDMA/cxgb4: release hw resources on device removal
+    - RDMA/ucma: Allow resolving address w/o specifying source address
+    - RDMA/mlx5: Fix multiple NULL-ptr deref errors in rereg_mr flow
+    - RDMA/mlx4: Add missed RSS hash inner header flag
+    - RDMA/mlx5: Protect from shift operand overflow
+    - NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2
+    - IB/mlx5: Use unlimited rate when static rate is not supported
+    - infiniband: mlx5: fix build errors when INFINIBAND_USER_ACCESS=m
+    - IB/hfi1: Fix handling of FECN marked multicast packet
+    - IB/hfi1: Fix loss of BECN with AHG
+    - IB/hfi1: Fix NULL pointer dereference when invalid num_vls is used
+    - iw_cxgb4: Atomically flush per QP HW CQEs
+    - btrfs: Take trans lock before access running trans in check_delayed_ref
+    - [arm64,armhf] drm/vc4: Make sure vc4_bo_{inc,dec}_usecnt() calls are
+      balanced
+    - [x86] drm/vmwgfx: Fix a buffer object leak
+    - drm/bridge: vga-dac: Fix edid memory leak
+    - xhci: Fix use-after-free in xhci_free_virt_device
+    - USB: serial: visor: handle potential invalid device configuration
+    - [arm64,armhf] usb: dwc3: gadget: Fix list_del corruption in
+      dwc3_ep_dequeue
+    - USB: Accept bulk endpoints with 1024-byte maxpacket
+    - USB: serial: option: reimplement interface masking
+    - USB: serial: option: adding support for ublox R410M
+    - [arm64,armhf] usb: musb: host: fix potential NULL pointer dereference
+    - [arm64, armhf] usb: musb: trace: fix NULL pointer dereference in
+      musb_g_tx()
+    - [x86] platform/x86: asus-wireless: Fix NULL pointer dereference
+    - [x86] platform/x86: Kconfig: Fix dell-laptop dependency chain.
+    - [x86] KVM: remove APIC Timer periodic/oneshot spikes
+    - [x86] tsc: Always unregister clocksource_tsc_early
+    - [x86] tsc: Fix mark_tsc_unstable()
+    - [arm64] irqchip/qcom: Fix check for spurious interrupts
+    - clocksource: Allow clocksource_mark_unstable() on unregistered
+      clocksources
+    - clocksource: Initialize cs->wd_list
+    - clocksource: Consistent de-rate when marking unstable
+    - tracing: Fix bad use of igrab in trace_uprobe.c
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.9
+    - ipvs: fix rtnl_lock lockups caused by start_sync_thread
+    - netfilter: ebtables: don't attempt to allocate 0-sized compat array
+    - clk: ti: fix flag space conflict with clkctrl clocks
+    - rds: tcp: must use spin_lock_irq* and not spin_lock_bh with
+      rds_tcp_conn_lock
+    - crypto: af_alg - fix possible uninit-value in alg_bind()
+    - netlink: fix uninit-value in netlink_sendmsg
+    - net: fix rtnh_ok()
+    - net: initialize skb->peeked when cloning
+    - net: fix uninit-value in __hw_addr_add_ex()
+    - dccp: initialize ireq->ir_mark
+    - ipv4: fix uninit-value in ip_route_output_key_hash_rcu()
+    - soreuseport: initialise timewait reuseport field
+    - inetpeer: fix uninit-value in inet_getpeer
+    - bpf/tracing: fix a deadlock in perf_event_detach_bpf_prog
+    - memcg: fix per_node_info cleanup
+    - perf: Remove superfluous allocation error check
+    - i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr()
+    - tcp: fix TCP_REPAIR_QUEUE bound checking
+    - bdi: wake up concurrent wb_shutdown() callers.
+    - bdi: Fix use after free bug in debugfs_remove()
+    - bdi: Fix oops in wb_workfn()
+    - compat: fix 4-byte infoleak via uninitialized struct field
+    - gpioib: do not free unrequested descriptors
+    - gpio: fix error path in lineevent_create
+    - rfkill: gpio: fix memory leak in probe error path
+    - libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs
+    - dm integrity: use kvfree for kvmalloc'd memory
+    - tracing: Fix regex_match_front() to not over compare the test string
+    - mm: sections are not offlined during memory hotremove
+    - mm, oom: fix concurrent munlock and oom reaper unmap (CVE-2018-1000200)
+    - ceph: fix rsize/wsize capping in ceph_direct_read_write()
+    - can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg()
+    - [armhf,arm64] drm/vc4: Fix scaling of uni-planar formats
+    - drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages
+    - [x86] drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log
+    - [x86] drm/i915: Adjust eDP's logical vco in a reliable place.
+    - drm/nouveau: Fix deadlock in nv50_mstm_register_connector()
+      (Closes: #898825)
+    - drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client
+    - drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear()
+    - drm/atomic: Clean private obj old_state/new_state in
+      drm_atomic_state_default_clear()
+    - net: atm: Fix potential Spectre v1
+    - atm: zatm: Fix potential Spectre v1
+    - PCI / PM: Always check PME wakeup capability for runtime wakeup support
+    - PCI / PM: Check device_may_wakeup() in pci_enable_wake()
+    - cpufreq: schedutil: Avoid using invalid next_freq
+    - Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174"
+    - [x86] Bluetooth: btusb: Add Dell XPS 13 9360 to
+      btusb_needs_reset_resume_table
+    - Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome
+      chipsets
+    - [armhf] thermal: exynos: Reading temperature makes sense only when TMU is
+      turned on
+    - [armhf] thermal: exynos: Propagate error value from tmu_read()
+    - nvme: add quirk to force medium priority for SQ creation
+    - nvme: Fix sync controller reset return
+    - smb3: directory sync should not return an error
+    - swiotlb: silent unwanted warning "buffer is full"
+    - sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]
+    - sched/autogroup: Fix possible Spectre-v1 indexing for
+      sched_prio_to_weight[]
+    - tracing/uprobe_event: Fix strncpy corner case
+    - [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_*
+    - [x86] perf/cstate: Fix possible Spectre-v1 indexing for pkg_msr
+    - [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver
+    - perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[]
+    - [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.10
+    - 8139too: Use disable_irq_nosync() in rtl8139_poll_controller()
+    - bridge: check iface upper dev when setting master via ioctl
+    - dccp: fix tasklet usage
+    - ipv4: fix fnhe usage by non-cached routes
+    - ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg
+    - llc: better deal with too small mtu
+    - net: ethernet: sun: niu set correct packet size in skb
+    - [armhf] net: ethernet: ti: cpsw: fix packet leaking in dual_mac mode
+    - net/mlx4_en: Fix an error handling path in 'mlx4_en_init_netdev()'
+    - net/mlx4_en: Verify coalescing parameters are in range
+    - net/mlx5e: Err if asked to offload TC match on frag being first
+    - net/mlx5: E-Switch, Include VF RDMA stats in vport statistics
+    - net sched actions: fix refcnt leak in skbmod
+    - net_sched: fq: take care of throttled flows before reuse
+    - net: support compat 64-bit time in {s,g}etsockopt
+    - openvswitch: Don't swap table in nlattr_set() after OVS_ATTR_NESTED is
+      found
+    - qmi_wwan: do not steal interfaces from class drivers
+    - r8169: fix powering up RTL8168h
+    - rds: do not leak kernel memory to user land
+    - sctp: delay the authentication for the duplicated cookie-echo chunk
+    - sctp: fix the issue that the cookie-ack with auth can't get processed
+    - sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr
+    - sctp: remove sctp_chunk_put from fail_mark err path in
+      sctp_ulpevent_make_rcvmsg
+    - sctp: use the old asoc when making the cookie-ack chunk in dupcook_d
+    - tcp_bbr: fix to zero idle_restart only upon S/ACKed data
+    - tcp: ignore Fast Open on repair mode
+    - tg3: Fix vunmap() BUG_ON() triggered from tg3_free_consistent().
+    - bonding: do not allow rlb updates to invalid mac
+    - bonding: send learning packets for vlans on slave
+    - net: sched: fix error path in tcf_proto_create() when modules are not
+      configured
+    - net/mlx5e: TX, Use correct counter in dma_map error flow
+    - net/mlx5: Avoid cleaning flow steering table twice during error flow
+    - [x86] hv_netvsc: set master device
+    - ipv6: fix uninit-value in ip6_multipath_l3_keys()
+    - net/mlx5e: Allow offloading ipv4 header re-write for icmp
+    - udp: fix SO_BINDTODEVICE
+    - net/mlx5e: DCBNL fix min inline header size for dscp
+    - sctp: clear the new asoc's stream outcnt in sctp_stream_update
+    - tcp: restore autocorking
+    - tipc: fix one byte leak in tipc_sk_set_orig_addr()
+    - [x86] hv_netvsc: Fix net device attach on older Windows hosts
+    - ipv4: reset fnhe_mtu_locked after cache route flushed
+    - net/mlx5: Fix mlx5_get_vector_affinity function
+    - net: phy: sfp: fix the BR,min computation
+    - net/smc: keep clcsock reference in smc_tcp_listen_work()
+    - scsi: aacraid: Correct hba_send to include iu_type
+    - proc: do not access cmdline nor environ from file-backed areas
+      (CVE-2018-1120)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.11
+    - xhci: Fix USB3 NULL pointer dereference at logical disconnect.
+    - usbip: usbip_host: refine probe and disconnect debug msgs to be useful
+    - usbip: usbip_host: delete device from busid_table after rebind
+    - usbip: usbip_host: run rebind from exit when module is removed
+    - usbip: usbip_host: fix NULL-ptr deref and use-after-free errors
+    - usbip: usbip_host: fix bad unlock balance during stub_probe()
+    - ALSA: usb: mixer: volume quirk for CM102-A+/102S+
+    - ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup
+    - ALSA: hda: Add Lenovo C50 All in one to the power_save blacklist
+    - ALSA: control: fix a redundant-copy issue
+    - [amd64] spi: pxa2xx: Allow 64-bit DMA
+    - KVM: vmx: update sec exec controls for UMIP iff emulating UMIP
+    - [armhf,arm64] KVM: Properly protect VGIC locks from IRQs
+    - [armhf,arm64] KVM: VGIC/ITS: Promote irq_lock() in update_affinity
+    - [armhf,arm64] KVM: VGIC/ITS save/restore: protect kvm_read_guest() calls
+    - [armhf,arm64] KVM: VGIC/ITS: protect kvm_read_guest() calls with SRCU
+      lock
+    - hwmon: (k10temp) Fix reading critical temperature register
+    - hwmon: (k10temp) Use API function to access System Management Network
+    - [s390x] vfio: ccw: fix cleanup if cp_prefetch fails
+    - tracing/x86/xen: Remove zero data size trace events
+      trace_xen_mmu_flush_tlb{_all}
+    - vsprintf: Replace memory barrier with static_key for random_ptr_key
+      update
+    - [x86] amd_nb: Add support for Raven Ridge CPUs
+    - [arm64] tee: shm: fix use-after-free via temporarily dropped reference
+    - netfilter: nf_tables: free set name in error path
+    - netfilter: nf_tables: can't fail after linking rule into active rule
+      list
+    - netfilter: nf_tables: nf_tables_obj_lookup_byhandle() can be static
+    - [arm64] dts: marvell: armada-cp110: Add clocks for the xmdio node
+    - [arm64] dts: marvell: armada-cp110: Add mg_core_clk for ethernet node
+    - i2c: designware: fix poll-after-enable regression
+    - mtd: rawnand: marvell: Fix read logic for layouts with ->nchunks > 2
+    - [powerpc*] powerpc/powernv: Fix NVRAM sleep in invalid context when
+      crashing
+    - drm: Match sysfs name in link removal to link creation
+    - radix tree: fix multi-order iteration race
+    - mm: don't allow deferred pages with NEED_PER_CPU_KM
+    - [x86] drm/i915/gen9: Add WaClearHIZ_WM_CHICKEN3 for bxt and glk
+    - [s390x] qdio: fix access to uninitialized qdio_q fields
+    - [s390x] cpum_sf: ensure sample frequency of perf event attributes is
+      non-zero
+    - [s390x] qdio: don't release memory in qdio_setup_irq()
+    - [s390x] remove indirect branch from do_softirq_own_stack
+    - bcache: return 0 from bch_debug_init() if CONFIG_DEBUG_FS=n
+    - [x86] pkeys: Override pkey when moving away from PROT_EXEC
+    - [x86] pkeys: Do not special case protection key 0
+    - efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32'
+      definition for mixed mode
+    - [arm*] 8771/1: kprobes: Prohibit kprobes on do_undefinstr
+    - [x86] apic/x2apic: Initialize cluster ID properly
+    - [x86] mm: Drop TS_COMPAT on 64-bit exec() syscall
+    - tick/broadcast: Use for_each_cpu() specially on UP kernels
+    - [arm*] 8769/1: kprobes: Fix to use get_kprobe_ctlblk after irq-disabed
+    - [arm*] 8770/1: kprobes: Prohibit probing on optimized_callback
+    - [arm*] 8772/1: kprobes: Prohibit kprobes on get_user functions
+    - Btrfs: fix xattr loss after power failure
+    - Btrfs: send, fix invalid access to commit roots due to concurrent
+      snapshotting
+    - btrfs: property: Set incompat flag if lzo/zstd compression is set
+    - btrfs: fix crash when trying to resume balance without the resume flag
+    - btrfs: Split btrfs_del_delalloc_inode into 2 functions
+    - btrfs: Fix delalloc inodes invalidation during transaction abort
+    - btrfs: fix reading stale metadata blocks after degraded raid1 mounts
+    - x86/nospec: Simplify alternative_msr_write()
+    - x86/bugs: Concentrate bug detection into a separate function
+    - x86/bugs: Concentrate bug reporting into a separate function
+    - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits
+    - x86/bugs, KVM: Support the combination of guest and host IBRS
+    - x86/bugs: Expose /sys/../spec_store_bypass
+    - x86/cpufeatures: Add X86_FEATURE_RDS
+    - x86/bugs: Provide boot parameters for the spec_store_bypass_disable
+      mitigation
+    - x86/bugs/intel: Set proper CPU features and setup RDS
+    - x86/bugs: Whitelist allowed SPEC_CTRL MSR values
+    - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested
+    - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest
+    - x86/speculation: Create spec-ctrl.h to avoid include hell
+    - prctl: Add speculation control prctls
+    - x86/process: Allow runtime control of Speculative Store Bypass
+    - x86/speculation: Add prctl for Speculative Store Bypass mitigation
+    - nospec: Allow getting/setting on non-current task
+    - proc: Provide details on speculation flaw mitigations
+    - seccomp: Enable speculation flaw mitigations
+    - x86/bugs: Make boot modes __ro_after_init
+    - prctl: Add force disable speculation
+    - seccomp: Use PR_SPEC_FORCE_DISABLE
+    - seccomp: Add filter flag to opt-out of SSB mitigation
+    - seccomp: Move speculation migitation control to arch code
+    - x86/speculation: Make "seccomp" the default mode for Speculative Store
+      Bypass
+    - x86/bugs: Rename _RDS to _SSBD
+    - proc: Use underscores for SSBD in 'status'
+    - Documentation/spec_ctrl: Do some minor cleanups
+    - x86/bugs: Fix __ssb_select_mitigation() return type
+    - x86/bugs: Make cpu_show_common() static
+    - x86/bugs: Fix the parameters alignment and missing void
+    - x86/cpu: Make alternative_msr_write work for 32-bit code
+    - KVM: SVM: Move spec control call after restore of GS
+    - x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP
+    - x86/cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS
+    - x86/cpufeatures: Disentangle SSBD enumeration
+    - x86/cpufeatures: Add FEATURE_ZEN
+    - x86/speculation: Handle HT correctly on AMD
+    - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL
+    - x86/speculation: Add virtualized speculative store bypass disable
+      support
+    - x86/speculation: Rework speculative_store_bypass_update()
+    - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host}
+    - x86/bugs: Expose x86_spec_ctrl_base directly
+    - x86/bugs: Remove x86_spec_ctrl_set()
+    - x86/bugs: Rework spec_ctrl base and mask logic
+    - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG
+    - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
+    - x86/bugs: Rename SSBD_NO to SSB_NO
+    - bpf: Prevent memory disambiguation attack
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.12
+    - net/mlx5: Fix build break when CONFIG_SMP=n
+    - net: Fix a bug in removing queues from XPS map
+    - net/mlx4_core: Fix error handling in mlx4_init_port_info.
+    - net/sched: fix refcnt leak in the error path of tcf_vlan_init()
+    - net: sched: red: avoid hashing NULL child
+    - net/smc: check for missing nlattrs in SMC_PNETID messages
+    - net: test tailroom before appending to linear skb
+    - packet: in packet_snd start writing at link layer allocation
+    - sock_diag: fix use-after-free read in __sk_free
+    - tcp: purge write queue in tcp_connect_init()
+    - tun: fix use after free for ptr_ring
+    - tuntap: fix use after free during release
+    - cxgb4: Correct ntuple mask validation for hash filters
+    - [armhf] net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule
+    - net: dsa: Do not register devlink for unused ports
+    - [armhf] net: dsa: bcm_sf2: Fix IPv6 rules and chain ID
+    - [armhf] net: dsa: bcm_sf2: Fix IPv6 rule half deletion
+    - 3c59x: convert to generic DMA API
+    - cxgb4: fix offset in collecting TX rate limit info
+    - vmxnet3: set the DMA mask before the first DMA map operation
+    - vmxnet3: use DMA memory barriers where required
+    - net: ip6_gre: Request headroom in __gre6_xmit()
+    - net: ip6_gre: Fix headroom request in ip6erspan_tunnel_xmit()
+    - net: ip6_gre: Split up ip6gre_tnl_link_config()
+    - net: ip6_gre: Split up ip6gre_tnl_change()
+    - net: ip6_gre: Split up ip6gre_newlink()
+    - net: ip6_gre: Split up ip6gre_changelink()
+    - net: ip6_gre: Fix ip6erspan hlen calculation
+    - net: ip6_gre: fix tunnel metadata device sharing.
+    - [sparc*]: vio: use put_device() instead of kfree()
+    - ext2: fix a block leak
+    - [powerpc*] rfi-flush: Always enable fallback flush on pseries
+    - [powerpc*] Add security feature flags for Spectre/Meltdown
+    - [powerpc*] pseries: Add new H_GET_CPU_CHARACTERISTICS flags
+    - [powerpc*] pseries: Set or clear security feature flags
+    - [powerpc*] powerpc/powernv: Set or clear security feature flags
+    - [powerpc*] powerpc/64s: Move cpu_show_meltdown()
+    - [powerpc*] powerpc/64s: Enhance the information in cpu_show_meltdown()
+    - [powerpc*] powerpc/powernv: Use the security flags in
+      pnv_setup_rfi_flush()
+    - [powerpc*] powerpc/pseries: Use the security flags in
+      pseries_setup_rfi_flush()
+    - [powerpc*] powerpc/64s: Wire up cpu_show_spectre_v1()
+    - [powerpc*] powerpc/64s: Wire up cpu_show_spectre_v2()
+    - [powerpc*] powerpc/pseries: Fix clearing of security feature flags
+    - [powerpc*] powerpc: Move default security feature flags
+    - [powerpc*] powerpc/64s: Add support for a store forwarding barrier at
+      kernel entry/exit
+    - [s390x] move nobp parameter functions to nospec-branch.c
+    - [s390x] add automatic detection of the spectre defense
+    - [s390x] report spectre mitigation via syslog
+    - [s390x] add sysfs attributes for spectre
+    - [s390x] add assembler macros for CPU alternatives
+    - [s390x] correct nospec auto detection init order
+    - [s390x] correct module section names for expoline code revert
+    - [s390x] move expoline assembler macros to a header
+    - [s390x] crc32-vx: use expoline for indirect branches
+    - [s390x] lib: use expoline for indirect branches
+    - [s390x] ftrace: use expoline for indirect branches
+    - [s390x] kernel: use expoline for indirect branches
+    - [s390x] move spectre sysfs attribute code
+    - [s390x] extend expoline to BC instructions
+    - [s390x] use expoline thunks in the BPF JIT
+    - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()
+    - [s390x] scsi: zfcp: fix infinite iteration on ERP ready list
+    - Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB
+    - ALSA: usb-audio: Add native DSD support for Luxman DA-06
+    - [arm64,armhf] usb: dwc3: Add SoftReset PHY synchonization delay
+    - [arm64,armhf] usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields
+    - [arm64,armhf] usb: dwc3: Makefile: fix link error on randconfig
+    - xhci: zero usb device slot_id member when disabling and freeing a xhci slot
+    - [arm64,armhf] usb: dwc2: Fix interval type issue
+    - [arm64,armhf] usb: dwc2: hcd: Fix host channel halt flow
+    - [arm64,armhf] usb: dwc2: host: Fix transaction errors in host mode
+    - usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS
+    - media: em28xx: USB bulk packet size fix
+    - Bluetooth: btusb: Add device ID for RTL8822BE
+    - Bluetooth: btusb: Add support for Intel Bluetooth device 22560
+      [8087:0026]
+    - xhci: Show what USB release number the xHC supports from protocol
+      capablity
+    - loop: don't call into filesystem while holding lo_ctl_mutex
+    - loop: fix LOOP_GET_STATUS lock imbalance
+    - cfg80211: limit wiphy names to 128 bytes
+    - hfsplus: stop workqueue when fill_super() failed
+    - [x86] kexec: Avoid double free_page() upon do_kexec_load() failure
+    - staging: bcm2835-audio: Release resources on module_exit()
+    - staging: lustre: fix bug in osc_enter_cache_try
+    - [x86] staging: rtl8192u: return -ENOMEM on failed allocation of
+      priv->oldaddr
+    - staging: lustre: lmv: correctly iput lmo_root
+    - [arm64] crypto: inside-secure - move the digest to the request context
+    - [arm64] crypto: inside-secure - wait for the request to complete if in
+      the backlog
+    - [x86] crypto: ccp - don't disable interrupts while setting up debugfs
+    - [arm64] crypto: inside-secure - do not process request if no command was
+      issued
+    - [arm64] crypto: inside-secure - fix the cache_len computation
+    - [arm64] crypto: inside-secure - fix the extra cache computation
+    - [arm64] crypto: inside-secure - do not overwrite the threshold value
+    - [armhf] crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss
+    - [arm64] crypto: inside-secure - fix the invalidation step during
+      cra_exit
+    - scsi: aacraid: Insure command thread is not recursively stopped
+    - scsi: devinfo: add HP DISK-SUBSYSTEM device, for HP XP arrays
+    - scsi: lpfc: Fix NVME Initiator FirstBurst
+    - scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD
+    - scsi: mvsas: fix wrong endianness of sgpio api
+    - scsi: lpfc: Fix issue_lip if link is disabled
+    - scsi: lpfc: Fix nonrecovery of NVME controller after cable swap.
+    - scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing
+    - scsi: lpfc: Fix IO failure during hba reset testing with nvme io.
+    - scsi: lpfc: Fix frequency of Release WQE CQEs
+    - [armhf] clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228
+    - clk: Don't show the incorrect clock phase
+    - clk: hisilicon: mark wdt_mux_p[] as const
+    - [arm64,armhf] clk: tegra: Fix pll_u rate configuration
+    - [armhf] clk: rockchip: Prevent calculating mmc phase if clock rate is
+      zero
+    - [armhf] clk: samsung: s3c2410: Fix PLL rates
+    - [armhf] clk: samsung: exynos7: Fix PLL rates
+    - [armhf] clk: samsung: exynos5260: Fix PLL rates
+    - [armhf] clk: samsung: exynos5433: Fix PLL rates
+    - [armhf] clk: samsung: exynos5250: Fix PLL rates
+    - [armhf] clk: samsung: exynos3250: Fix PLL rates
+    - clk: meson: axg: fix the od shift of the sys_pll
+    - clk: meson: axg: add the fractional part of the fixed_pll
+    - media: cx23885: Override 888 ImpactVCBe crystal frequency
+    - media: cx23885: Set subdev host data to clk_freq pointer
+    - media: em28xx: Add Hauppauge SoloHD/DualHD bulk models
+    - media: v4l: vsp1: Fix display stalls when requesting too many inputs
+    - media: i2c: adv748x: fix HDMI field heights
+    - media: vb2: Fix videobuf2 to map correct area
+    - media: vivid: fix incorrect capabilities for radio
+    - media: cx25821: prevent out-of-bounds read on array card
+    - [arm64] serial: mvebu-uart: fix tx lost characters
+    - [sh4] serial: sh-sci: Fix out-of-bounds access through DT alias
+    - [armhf] serial: samsung: Fix out-of-bounds access through serial port
+      index
+    - [armhf] serial: imx: Fix out-of-bounds access through serial port index
+    - [armhf] serial: arc_uart: Fix out-of-bounds access through DT alias
+    - [arm*] serial: 8250: Don't service RX FIFO if interrupts are disabled
+    - [armhf] rtc: snvs: Fix usage of snvs_rtc_enable
+    - rtc: hctosys: Ensure system time doesn't overflow time_t
+    - [arm64,armhf] rtc: rk808: fix possible race condition
+    - [armel/marvell] rtc: m41t80: fix race conditions
+    - [m68k] rtc: rp5c01: fix possible race condition
+
+  [ Romain Perier ]
+  * [armhf] DRM: Enable DW_HDMI_AHB_AUDIO and DW_HDMI_CEC (Closes: #897204)
+  * [armhf] MFD: Enable MFD_TPS65217 (Closes: #897590)
+
+  [ Ben Hutchings ]
+  * kbuild: use -fmacro-prefix-map to make __FILE__ a relative path
+  * Bump ABI to 2
+  * [rt] Update to 4.16.8-rt3
+  * [x86] KVM: VMX: Expose SSBD properly to guests.
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 4.16.7-rt1 and reenable
+  * [rt] certs: Reference certificate for test key used in Debian signing
+    service
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 27 May 2018 14:05:03 +0200
+
+linux (4.16.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.1
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.2
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.3
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4
+    - ext4: limit xattr size to INT_MAX (CVE-2018-1095)
+    - random: fix crng_ready() test (CVE-2018-1108)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.5
+
+  [ Ben Hutchings ]
+  * aufs: gen-patch: Fix Subject generation to skip SPDX-License-Identifier
+  * aufs: Update support patchset to aufs4.16-20180409 (no functional change)
+  * wireless: Add Debian wireless-regdb certificates (see #892229)
+  * Add support for compilers installed outside the default PATH
+  * linux-headers: Change linux-kbuild dependency to be versioned
+  * Set ABI to 1
+  * [x86,arm64] Disable code signing for upload to unstable
+  * debian/lib/python/debian_linux/debian.py: Fix binNMU changelog parsing
+  * debian/lib/python/debian_linux/debian.py: Fix binNMU revision parsing
+  * xfs: enhance dinode verifier (CVE-2018-10322)
+  * xfs: set format back to extents if xfs_bmap_extents_to_btree
+    (CVE-2018-10323)
+  * udeb: Add algif_skcipher to crypto-modules (Closes: #896968)
+  * ext4: fix bitmap position validation (fixes regression in 4.15.17-1)
+  * debian/lib/python/debian_linux/gencontrol.py: Allow uploads to *-security
+    with a simple revision
+
+  [ Vagrant Cascadian ]
+  * [arm64] Add patches to support SATA on Tegra210/Jetson-TX1.
+
+  [ James Clarke ]
+  * [ia64] Drop nic-modules Depends overrides (fixes FTBFS)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable features to support Pinebook and other A64 systems:
+    CONFIG_USB_MUSB_HDRC, CONFIG_USB_MUSB_SUNXI, CONFIG_SUN8I_DE2_CCU,
+    CONFIG_DMA_SUN6I
+  * [arm64] Add patch enabling simplefb LCD on A64.
+
+  [ Roger Shimizu ]
+  * [armel] Add dependency of udeb modules (fixes FTBFS):
+    - Add lzo_decompress to lzo-modules.
+    - Add cmdlinepart to mtd-modules.
+  * [armel] Add dependency of udeb packages (fixes FTBFS):
+    - Add package dependency of mtd-modules to jffs2-modules.
+    - Add package dependency of lzo-modules to squashfs-modules.
+
+  [ Helge Deller ]
+  * [hppa] Switch to self-decompressing kernel to save disk space in /boot
+
+  [ Uwe Kleine-König ]
+  * [amd64] enable AMD 10GbE Ethernet driver (CONFIG_AMD_XGBE=m)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 29 Apr 2018 17:09:14 +0100
+
+linux (4.16-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.16
+
+  [ Jeremy Stanley ]
+  * [x86] Power management support for GPD Pocket UMPC systems
+    (Closes: #895164)
+    - Enable CONFIG_PWM_LPSS_PLATFORM as a module (provides support for the
+      low-level power subsystem handling backlight control) along with its
+      dependency CONFIG_PWM=y
+    - Enable CONFIG_INTEL_INT0002_VGPIO as a module (provides support for the
+      Bay Trail/Cherry Trail virtual GPIO controller to handle power events)
+    - Enable CONFIG_REGULATOR (needed to build the already enabled
+      CONFIG_INTEL_CHT_INT33FE module which provides support for the ACPI
+      interface)
+    - Enable CONFIG_TYPEC_FUSB302 as a module (provides support for the USB
+      type-C interface) along with its dependencies CONFIG_TYPEC=m and
+      CONFIG_TYPEC_TCPM=m
+    - Enable CONFIG_BATTERY_MAX17042 as a module (provides support for the
+      battery level monitor)
+    - Enable CONFIG_CHARGER_BQ24190 as a module (provides support for the
+      battery charger) along with its dependencies CONFIG_EXTCON=m,
+      CONFIG_EXTCON_INTEL_CHT_WC=m, CONFIG_I2C_CHT_WC=m and
+      CONFIG_INTEL_SOC_PMIC_CHTWC=y
+
+  [ Roger Shimizu ]
+  * [armel] Bring back armel build by reverting two commits that disabled
+    armel previously:
+    - [2ed70eb] "Add empty featuresets for armel to help abiupdate script"
+    - [5f62872] "(Temporarily) disable armel kernel image build"
+  * [armel] Reduce armel image size by:
+    - Set CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
+    - Change MTD, MTD_CMDLINE_PARTS, RTC_DRV_MV, and SPI_ORION from
+      built-in to module.
+    - Disable VT, ZSWAP, RD_BZIP2, and RD_LZMA.
+    Thanks to Leigh Brown <leigh@solinno.co.uk> for his idea to disable VT.
+
+  [ Riku Voipio ]
+  * [armhf] Add dove cubox support, thanks to Josua Mayer (Closes: #876774)
+
+  [ Sjoerd Simons ]
+  * Enable DRM_DP_AUX_CHARDEV (Closes: #890235)
+
+  [ Ben Hutchings ]
+  * Set ABI name to trunk
+  * debian/config: Rename [build]signed-modules setting to signed-code
+  * debian/lib/python/debian_linux/gencontrol.py: Allow overriding output
+    filenames
+  * debian/lib/python/debian_linux/debian.py: Close changelog after parsing
+  * debian/lib/python/debian_linux/debian.py: Allow parsing any file as
+    changelog
+  * debian/rules.d/tools/lib/lockdep/Makefile: Fix repeated 'make install'
+  * Add template source package to support code signing
+  * Use a dummy build profile for udebs that we test-build before signing
+  * debian/lib/python/debian_linux/debian.py: Parse bottom lines of changelog
+    entries
+  * debian/bin/gencontrol_signed.py: Copy maintainer and date into template's
+    changelog
+  * [x86,arm64] Enable code signing again
+  * certs: Add certificate for test key used in Debian signing service
+  * integrity: Disable IMA until it works properly with lockdown
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 08 Apr 2018 14:44:18 +0200
+
+linux (4.16~rc6-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Jeremy Stanley ]
+  * [x86] Enable CONFIG_GPD_POCKET_FAN as a module (provides fan control on
+    GPD Pocket UMPC systems) (Closes: #893451)
+
+  [ Uwe Kleine-König ]
+  * [arm64] enable various drivers as module for teres-i OSHW laptop
+    (Closes: #892786)
+
+  [ Helge Deller ]
+  * [hppa] Re-enable 32-bit SMP kernel build. Qemu now supports it.
+
+  [ Ben Hutchings ]
+  * udeb: Add dependency from nic-modules to zlib-modules (fixes FTBFS on
+    some architectures)
+  * i40e: Add kconfig dependency to ensure cmpxchg64() is available
+    (fixes FTBFS on some architectures)
+  * [ia64] Re-add configuration for kernel and udebs:
+    - Revert "Remove all support for ia64" (Closes: #886693)
+    - Disable IRDA, consistent with other architectures
+    - linux-image: Don't suggest fdutils
+    - Compile with gcc-7
+    - linux-image: Improve flavour descriptions
+    - udeb: Combine core-modules/kernel-image and scsi{,-common,-extra}-modules
+    - udeb: Add i2c-modules
+
+  [ Vagrant Cascadian ]
+  * [armhf] Enable ARCH_MESON and related drivers.
+  * [armhf] Add device-tree patches from linux-next to support USB and
+    Ethernet on meson8b.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 20 Mar 2018 13:52:03 +0000
+
+linux (4.16~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Uwe Kleine-König ]
+  * netfilter: enable NFT_FIB_NETDEV as module
+
+  [ Thadeu Lima de Souza Cascardo ]
+  * [powerpc,ppc64el,ppc64] Enable CRASH_DUMP (Closes: #883432)
+
+  [ Bastian Blank ]
+  * Drop note about Xen from long descriptions.
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable ROCKCHIP_IODOMAIN as a module, to enable PCIe reset.
+  * [arm64] Enable REGULATOR_FAN53555 as a module, enabling cpufreq to
+    work on rk3399 A72 cores.
+  * [arm64] Apply patch from linux-next to fix eMMC corruption on
+    Odroid-C2 (Closes: #879072).
+
+  [ Ben Hutchings ]
+  * debian/control: Update profile qualification for build-deps on bison
+    and flex, which are now used to build kconfig
+  * debian/rules.d/tools/kconfig/Makefile: Use bison and flex to build kconfig
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 13 Mar 2018 02:06:57 +0000
+
+linux (4.15.17-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.12
+    - [i386] vm86: Fix POPF emulation
+    - [i386] speculation, objtool: Annotate indirect calls/jumps for objtool on
+      32-bit kernels
+    - [x86] speculation: Remove Skylake C2 from Speculation Control microcode
+      blacklist
+    - [x86] KVM: Fix device passthrough when SME is active
+    - [x86] mm: Fix vmalloc_fault to use pXd_large
+    - [hppa] Handle case where flush_cache_range is called with no context
+    - ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats()
+    - ALSA: hda - Revert power_save option default value
+    - ALSA: seq: Fix possible UAF in snd_seq_check_queue()
+    - ALSA: seq: Clear client entry before deleting else at closing
+    - drm/nouveau/bl: Fix oops on driver unbind
+    - drm/nouveau/mmu: ALIGN_DOWN correct variable (Closes: #895750)
+    - drm/amdgpu: fix prime teardown order
+    - drm/radeon: fix prime teardown order
+    - drm/amdgpu/dce: Don't turn off DP sink when disconnected
+    - fs: Teach path_connected to handle nfs filesystems with multiple roots.
+    - [armhf,arm64] KVM: Reduce verbosity of KVM init log
+    - [armhf,arm64] KVM: Reset mapped IRQs on VM reset
+    - [armhf,arm64] kvm: vgic-v3: Tighten synchronization for guests using v2
+      on v3
+    - [armhf.arm64] KVM: vgic: Don't populate multiple LRs with the same vintid
+    - lock_parent() needs to recheck if dentry got __dentry_kill'ed under it
+    - fs/aio: Add explicit RCU grace period when freeing kioctx
+    - fs/aio: Use RCU accessors for kioctx_table->table[]
+    - RDMAVT: Fix synchronization around percpu_ref
+    - [armhf.arm64] irqchip/gic-v3-its: Ensure nr_ites >= nr_lpis
+    - nvme: fix subsystem multiple controllers support check
+    - xfs: preserve i_rdev when recycling a reclaimable inode
+    - btrfs: Fix NULL pointer exception in find_bio_stripe
+    - btrfs: add missing initialization in btrfs_check_shared
+    - btrfs: alloc_chunk: fix DUP stripe size handling
+    - btrfs: Fix use-after-free when cleaning up fs_devs with a single stale
+      device
+    - btrfs: remove spurious WARN_ON(ref->count < 0) in find_parent_nodes
+    - btrfs: Fix memory barriers usage with device stats counters
+    - scsi: qla2xxx: Fix smatch warning in qla25xx_delete_{rsp|req}_que
+    - scsi: qla2xxx: Fix NULL pointer access for fcport structure
+    - scsi: qla2xxx: Fix logo flag for qlt_free_session_done()
+    - scsi: qla2xxx: Fix crashes in qla2x00_probe_one on probe failure
+    - usb: dwc2: fix STM32F7 USB OTG HS compatible
+    - USB: gadget: udc: Add missing platform_device_put() on error in
+      bdc_pci_probe()
+    - usb: dwc3: Fix GDBGFIFOSPACE_TYPE values
+    - usb: dwc3: core: Power-off core/PHYs on system_suspend in host mode
+    - usb: dwc3: of-simple: fix oops by unbalanced clk disable call
+    - usb: gadget: udc: renesas_usb3: fix oops in renesas_usb3_remove()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.13
+    - scsi: megaraid_sas: Do not use 32-bit atomic request descriptor for
+      Ventura controllers
+    - drm/amdgpu: use polling mem to set SDMA3 wptr for VF
+    - Bluetooth: hci_qca: Avoid setup failure on missing rampatch
+    - [arm64] Bluetooth: btqcomsmd: Fix skb double free corruption
+    - [x86] cpufreq: longhaul: Revert transition_delay_us to 200 ms
+    - [arm64] drm/msm: fix leak in failed get_pages
+    - IB/ipoib: Warn when one port fails to initialize
+    - RDMA/iwpm: Fix uninitialized error code in iwpm_send_mapinfo()
+    - [x86] hv_netvsc: Fix the receive buffer size limit
+    - [x86] hv_netvsc: Fix the TX/RX buffer default sizes
+    - tcp: allow TLP in ECN CWR
+    - libbpf: prefer global symbols as bpf program name source
+    - rtlwifi: rtl_pci: Fix the bug when inactiveps is enabled.
+    - rtlwifi: always initialize variables given to RT_TRACE()
+    - media: bt8xx: Fix err 'bt878_probe()'
+    - ath10k: handling qos at STA side based on AP WMM enable/disable
+    - media: dvb-frontends: Add delay to Si2168 restart
+    - qmi_wwan: set FLAG_SEND_ZLP to avoid network initiated disconnect
+    - serial: 8250_dw: Disable clock on error
+    - [armhf,arm64] cros_ec: fix nul-termination for firmware build info
+    - watchdog: Fix potential kref imbalance when opening watchdog
+    - watchdog: Fix kref imbalance seen if handle_boot_enabled=0
+    - platform/chrome: Use proper protocol transfer function
+    - [armhf] drm/tilcdc: ensure nonatomic iowrite64 is not used
+    - mmc: avoid removing non-removable hosts during suspend
+    - mmc: block: fix logical error to avoid memory leak
+    - /dev/mem: Add bounce buffer for copy-out
+    - [arm64] net: phy: meson-gxl: check phy_write return value
+    - IB/ipoib: Avoid memory leak if the SA returns a different DGID
+    - RDMA/cma: Use correct size when writing netlink stats
+    - IB/umem: Fix use of npages/nmap fields
+    - iser-target: avoid reinitializing rdma contexts for isert commands
+    - bpf/cgroup: fix a verification error for a CGROUP_DEVICE type prog
+    - PCI/ASPM: Calculate LTR_L1.2_THRESHOLD from device characteristics
+    - vgacon: Set VGA struct resource types
+    - [armhf] omapdrm: panel: fix compatible vendor string for td028ttec1
+    - [arm64] mmc: sdhci-xenon: wait 5ms after set 1.8V signal enable
+    - [armhf] drm/omap: DMM: Check for DMM readiness after successful
+      transaction commit
+    - pty: cancel pty slave port buf's work in tty_release
+    - clk: check ops pointer on clock register
+    - clk: use round rate to bail out early in set_rate
+    - pinctrl: Really force states during suspend/resume
+    - [armhf,arm64] pinctrl: rockchip: enable clock when reading pin direction
+      register
+    - [x86] iommu/vt-d: clean up pr_irq if request_threaded_irq fails
+    - ip6_vti: adjust vti mtu according to mtu of lower device
+    - ip_gre: fix error path when erspan_rcv failed
+    - ip_gre: fix potential memory leak in erspan_rcv
+    - [arm64] soc: qcom: smsm: fix child-node lookup
+    - scsi: lpfc: Fix SCSI LUN discovery when SCSI and NVME enabled
+    - scsi: lpfc: Fix issues connecting with nvme initiator
+    - RDMA/ocrdma: Fix permissions for OCRDMA_RESET_STATS
+    - nfsd4: permit layoutget of executable-only files
+    - clk: Don't touch hardware when reparenting during registration
+    - hwrng: core - Clean up RNG list when last hwrng is unregistered
+    - [armhf] dmaengine: ti-dma-crossbar: Fix event mapping for
+      TPCC_EVT_MUX_60_63
+    - IB/mlx5: Fix integer overflows in mlx5_ib_create_srq
+    - IB/mlx5: Fix out-of-bounds read in create_raw_packet_qp_rq
+    - [x86] RDMA/vmw_pvrdma: Fix usage of user response structures in ABI file
+    - serial: 8250_pci: Don't fail on multiport card class
+    - RDMA/core: Do not use invalid destination in determining port reuse
+    - clk: migrate the count of orphaned clocks at init
+    - RDMA/ucma: Fix access to non-initialized CM_ID object
+    - RDMA/ucma: Don't allow join attempts for unsupported AF family
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.14
+    - [armhf] iio: st_pressure: st_accel: pass correct platform data to init
+    - [arm64] iio: adc: meson-saradc: unlock on error in meson_sar_adc_lock()
+    - ALSA: usb-audio: Fix parsing descriptor of UAC2 processing unit
+    - ALSA: aloop: Sync stale timer before release
+    - ALSA: aloop: Fix access to not-yet-ready substream via cable
+    - ALSA: hda - Force polling mode on CFL for fixing codec communication
+    - ALSA: hda/realtek - Fix speaker no sound after system resume
+    - ALSA: hda/realtek - Fix Dell headset Mic can't record
+    - ALSA: hda/realtek - Always immediately update mute LED with pin VREF
+    - mmc: core: Fix tracepoint print of blk_addr and blksz
+    - mmc: core: Disable HPI for certain Micron (Numonyx) eMMC cards
+    - mmc: block: fix updating ext_csd caches on ioctl call
+    - [armhf] mmc: dw_mmc: Fix the DTO/CTO timeout overflow calculation for
+      32-bit systems
+    - [armhf] mmc: dw_mmc: exynos: fix the suspend/resume issue for exynos5433
+    - [armhf,arm64] mmc: dw_mmc: fix falling from idmac to PIO mode when
+      dw_mci_reset occurs
+    - PCI: Add function 1 DMA alias quirk for Highpoint RocketRAID 644L
+    - lockdep: fix fs_reclaim warning
+    - [armhf,arm64] clk: bcm2835: Fix ana->maskX definitions
+    - [armhf,arm64] clk: bcm2835: Protect sections updating shared registers
+    - [armhf,arm64] clk: sunxi-ng: a31: Fix CLK_OUT_* clock ops
+    - RDMA/mlx5: Fix crash while accessing garbage pointer and freed memory
+    - [x86] Drivers: hv: vmbus: Fix ring buffer signaling
+    - [armhf] pinctrl: samsung: Validate alias coming from DT
+    - Bluetooth: btusb: Remove Yoga 920 from the btusb_needs_reset_resume_table
+    - Bluetooth: btusb: Add Dell OptiPlex 3060 to btusb_needs_reset_resume_table
+    - Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174
+    - libata: fix length validation of ATAPI-relayed SCSI commands
+    - libata: remove WARN() for DMA or PIO command without data
+    - libata: don't try to pass through NCQ commands to non-NCQ devices
+    - libata: Apply NOLPM quirk to Crucial MX100 512GB SSDs
+    - libata: disable LPM for Crucial BX100 SSD 500GB drive
+    - libata: Enable queued TRIM for Samsung SSD 860
+    - libata: Apply NOLPM quirk to Crucial M500 480 and 960GB SSDs
+    - libata: Make Crucial BX100 500GB LPM quirk apply to all firmware versions
+    - libata: Modify quirks for MX100 to limit NCQ_TRIM quirk to MU01 version
+    - sched, cgroup: Don't reject lower cpu.max on ancestors
+    - cgroup: fix rule checking for threaded mode switching
+    - nfsd: remove blocked locks on client teardown
+    - hugetlbfs: check for pgoff value overflow (CVE-2018-7740)
+    - [x86] mm: implement free pmd/pte page interfaces
+    - mm/khugepaged.c: convert VM_BUG_ON() to collapse fail
+    - mm/thp: do not wait for lock_page() in deferred_split_scan()
+    - mm/shmem: do not wait for lock_page() in shmem_unused_huge_shrink()
+    - Revert "mm: page_alloc: skip over regions of invalid pfns where possible"
+    - [x86] drm/vmwgfx: Fix black screen and device errors when running without
+      fbdev
+    - [x86] drm/vmwgfx: Fix a destoy-while-held mutex problem.
+    - drm/radeon: Don't turn off DP sink when disconnected
+    - drm/amd/display: We shouldn't set format_default on plane as atomic driver
+    - drm/amd/display: Add one to EDID's audio channel count when passing to DC
+    - drm: Reject getfb for multi-plane framebuffers
+    - drm: udl: Properly check framebuffer mmap offsets
+    - mm/vmscan: wake up flushers for legacy cgroups too
+    - module: propagate error in modules_open()
+    - acpi, numa: fix pxm to online numa node associations
+    - ACPI / watchdog: Fix off-by-one error at resource assignment
+    - libnvdimm, {btt, blk}: do integrity setup before add_disk()
+    - brcmfmac: fix P2P_DEVICE ethernet address generation
+    - rtlwifi: rtl8723be: Fix loss of signal
+    - tracing: probeevent: Fix to support minus offset from symbol
+    - mtdchar: fix usage of mtd_ooblayout_ecc()
+    - staging: ncpfs: memory corruption in ncp_read_kernel() (CVE-2018-8822)
+    - [i386] can: cc770: Fix stalls on rt-linux, remove redundant IRQ ack
+    - [i386] can: cc770: Fix queue stall & dropped RTR reply
+    - [i386] can: cc770: Fix use after free in cc770_tx_interrupt()
+    - tty: vt: fix up tabstops properly
+    - [amd64] entry: Don't use IST entry for #BP stack
+    - [amd64] vsyscall: Use proper accessor to update P4D entry
+    - [x86] efi: Free efi_pgd with free_pages()
+    - posix-timers: Protect posix clock array access against speculation
+    - [x86] kvm: fix icebp instruction handling
+    - [amd64] build: Force the linker to use 2MB page size
+    - [amd64] boot: Verify alignment of the LOAD segment
+    - [x86] hwmon: (k10temp) Only apply temperature offset if result is positive
+    - [x86] hwmon: (k10temp) Add temperature offset for Ryzen 1900X
+    - [x86] perf/intel/uncore: Fix Skylake UPI event format
+    - perf stat: Fix CVS output format for non-supported counters
+    - perf/core: Fix ctx_event_type in ctx_resched()
+    - trace/bpf: remove helper bpf_perf_prog_read_value from tracepoint type
+      programs
+    - [x86] perf/intel: Don't accidentally clear high bits in bdw_limit_period()
+    - [x86] perf/intel/uncore: Fix multi-domain PCI CHA enumeration bug on
+      Skylake servers
+    - iio: ABI: Fix name of timestamp sysfs file
+    - bpf: skip unnecessary capability check
+    - [amd64] bpf: increase number of passes
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.15
+    - net: dsa: Fix dsa_is_user_port() test inversion
+    - openvswitch: meter: fix the incorrect calculation of max delta_t
+    - qed: Fix MPA unalign flow in case header is split across two packets.
+    - tcp: purge write queue upon aborting the connection
+    - qed: Fix non TCP packets should be dropped on iWARP ll2 connection
+    - net: phy: relax error checking when creating sysfs link netdev->phydev
+    - devlink: Remove redundant free on error path
+    - macvlan: filter out unsupported feature flags
+    - net: ipv6: keep sk status consistent after datagram connect failure
+    - ipv6: old_dport should be a __be16 in __ip6_datagram_connect()
+    - ipv6: sr: fix NULL pointer dereference when setting encap source address
+    - ipv6: sr: fix scheduling in RCU when creating seg6 lwtunnel state
+    - net: phy: Tell caller result of phy_change()
+    - ipv6: Reflect MTU changes on PMTU of exceptions for MTU-less routes
+    - net sched actions: return explicit error when tunnel_key mode is not
+      specified
+    - ppp: avoid loop in xmit recursion detection code
+    - rhashtable: Fix rhlist duplicates insertion
+    - sch_netem: fix skb leak in netem_enqueue()
+    - ieee802154: 6lowpan: fix possible NULL deref in lowpan_device_event()
+    - net: use skb_to_full_sk() in skb_update_prio()
+    - net: Fix hlist corruptions in inet_evict_bucket()
+    - [s390x] qeth: free netdevice when removing a card
+    - [s390x] qeth: when thread completes, wake up all waiters
+    - [s390x] qeth: lock read device while queueing next buffer
+    - [s390x] qeth: on channel error, reject further cmd requests
+    - dccp: check sk for closed state in dccp_sendmsg()
+    - ipv6: fix access to non-linear packet in ndisc_fill_redirect_hdr_option()
+    - l2tp: do not accept arbitrary sockets
+    - [armhf] net: ethernet: ti: cpsw: add check for in-band mode setting with
+      RGMII PHY interface
+    - [armhf] net: fec: Fix unbalanced PM runtime calls
+    - [s390x] net/iucv: Free memory obtained by kzalloc
+    - netlink: avoid a double skb free in genlmsg_mcast()
+    - net: Only honor ifindex in IP_PKTINFO if non-0
+    - net: systemport: Rewrite __bcm_sysport_tx_reclaim()
+    - qede: Fix qedr link update
+    - skbuff: Fix not waking applications when errors are enqueued
+    - team: Fix double free in error path
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.16
+    - [armhf] OMAP: Fix SRAM W+X mapping
+    - [armhf] 8746/1: vfp: Go back to clearing vfp_current_hw_state[]
+    - [armhf] dts: sun6i: a31s: bpi-m2: improve pmic properties
+    - [armhf] dts: sun6i: a31s: bpi-m2: add missing regulators
+    - mtd: jedec_probe: Fix crash in jedec_read_mfr()
+    - ALSA: usb-audio: Add native DSD support for TEAC UD-301
+    - ALSA: pcm: Use dma_bytes as size parameter in dma_mmap_coherent()
+    - ALSA: pcm: potential uninitialized return values
+    - perf/hwbp: Simplify the perf-hwbp code, fix documentation
+    - ceph: only dirty ITER_IOVEC pages for direct read
+    - ipc/shm.c: add split function to shm_vm_ops
+    - [powerpc*] mm: Add tracking of the number of coprocessors using a context
+    - [powerpc*] mm: Workaround Nest MMU bug with TLB invalidations
+    - [powerpc*] 64s: Fix lost pending interrupt due to race causing lost
+      update to irq_happened
+    - [powerpc*] 64s: Fix i-side SLB miss bad address handler saving
+      nonvolatile GPRs
+    - partitions/msdos: Unable to mount UFS 44bsd partitions
+    - xfrm_user: uncoditionally validate esn replay attribute struct
+    - RDMA/ucma: Check AF family prior resolving address
+    - RDMA/ucma: Fix use-after-free access in ucma_close
+    - RDMA/ucma: Ensure that CM_ID exists prior to access it
+    - RDMA/rdma_cm: Fix use after free race with process_one_req
+    - RDMA/ucma: Check that device is connected prior to access it
+    - RDMA/ucma: Check that device exists prior to accessing it
+    - RDMA/ucma: Introduce safer rdma_addr_size() variants
+    - ipv6: fix possible deadlock in rt6_age_examine_exception()
+    - net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()
+    - xfrm: Refuse to insert 32 bit userspace socket policies on 64 bit systems
+    - percpu: add __GFP_NORETRY semantics to the percpu balancing path
+    - netfilter: x_tables: make allocation less aggressive
+    - netfilter: bridge: ebt_among: add more missing match size checks
+    - l2tp: fix races with ipv4-mapped ipv6 addresses
+    - netfilter: drop template ct when conntrack is skipped.
+    - netfilter: x_tables: add and use xt_check_proc_name
+    - [arm64] phy: qcom-ufs: add MODULE_LICENSE tag
+    - Bluetooth: Fix missing encryption refresh on Security Request
+    - [x86] drm/i915/dp: Write to SET_POWER dpcd to enable MST hub.
+    - bitmap: fix memset optimization on big-endian systems
+    - [x86] mei: remove dev_err message on an unsupported ioctl
+    - /dev/mem: Avoid overwriting "err" in read_mem()
+    - media: usbtv: prevent double free in error case (CVE-2017-17975)
+    - crypto: lrw - Free rctx->ext with kzfree
+    - [arm64] crypto: inside-secure - fix clock management
+    - crypto: testmgr - Fix incorrect values in PKCS#1 test vector
+    - crypto: ahash - Fix early termination in hash walk
+    - [x86] crypto: ccp - return an actual key size from RSA max_size callback
+    - [arm*] crypto - Fix random regeneration of S_shipped
+    - [x86] crypto: cast5-avx - fix ECB encryption when long sg follows short
+      one
+    - Btrfs: fix unexpected cow in run_delalloc_nocow
+    - [x86] staging: comedi: ni_mio_common: ack ai fifo error interrupts.
+    - Revert "base: arch_topology: fix section mismatch build warnings"
+    - [x86] Input: ALPS - fix TrackStick detection on Thinkpad L570 and
+      Latitude 7370
+    - [x86] Input: i8042 - add Lenovo ThinkPad L460 to i8042 reset list
+    - [x86] Input: i8042 - enable MUX on Sony VAIO VGN-CS series to fix touchpad
+    - vt: change SGR 21 to follow the standards
+    - [arm64] net: hns: Fix ethtool private flags (CVE-2017-18222)
+    - Fix slab name "biovec-(1<<(21-12))"
+    - [armhf] Revert "ARM: dts: am335x-pepper: Fix the audio CODEC's reset pin"
+    - [armhf] Revert "ARM: dts: omap3-n900: Fix the audio CODEC's reset pin"
+    - Revert "cpufreq: Fix governor module removal race"
+    - Revert "ip6_vti: adjust vti mtu according to mtu of lower device"
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.17
+    - i40iw: Fix sequence number for the first partial FPDU
+    - i40iw: Correct Q1/XF object count equation
+    - i40iw: Validate correct IRD/ORD connection parameters
+    - [arm64] clk: meson: mpll: use 64-bit maths in params_from_rate
+    - ipv6: Reinject IPv6 packets if IPsec policy matches after SNAT
+    - thermal: power_allocator: fix one race condition issue for
+      thermal_instances list
+    - perf probe: Find versioned symbols from map
+    - perf probe: Add warning message if there is unexpected event name
+    - perf evsel: Fix swap for samples with raw data
+    - perf evsel: Enable ignore_missing_thread for pid option
+    - l2tp: fix missing print session offset info
+    - rds; Reset rs->rs_bound_addr in rds_add_bound() failure path
+    - [x86] ACPI / video: Default lcd_only to true on Win8-ready and newer
+      machines
+    - net/mlx4_en: Change default QoS settings
+    - IB/mlx5: Report inner RSS capability
+    - VFS: close race between getcwd() and d_move()
+    - [armhf,arm64] watchdog: dw_wdt: add stop watchdog operation
+    - clk: divider: fix incorrect usage of container_of
+    - PM / devfreq: Fix potential NULL pointer dereference in governor_store
+    - gpiolib: don't dereference a desc before validation
+    - net_sch: red: Fix the new offload indication
+    - [arm64] thermal/drivers/hisi: Remove bogus const from function return type
+    - RDMA/cma: Mark end of CMA ID messages
+    - f2fs: fix lock dependency in between dio_rwsem & i_mmap_sem
+    - [armhf] clk: sunxi-ng: a83t: Add M divider to TCON1 clock
+    - media: videobuf2-core: don't go out of the buffer range
+    - [x86] ASoC: Intel: Skylake: Disable clock gating during firmware and
+      library download
+    - [x86] ASoC: Intel: cht_bsw_rt5645: Analog Mic support
+    - [arm64] drm/msm: Fix NULL deref in adreno_load_gpu
+    - IB/ipoib: Fix for notify send CQ failure messages
+    - scsi: libiscsi: Allow sd_shutdown on bad transport
+    - scsi: mpt3sas: Proper handling of set/clear of "ATA command pending" flag.
+    - [armhf,arm64] irqchip/gic-v3: Fix the driver probe() fail due to disabled
+      GICC entry
+    - ACPI: EC: Fix debugfs_create_*() usage
+    - mac80211: Fix setting TX power on monitor interfaces
+    - vfb: fix video mode and line_length being set when loaded
+    - gpio: label descriptors using the device name
+    - [arm64] asid: Do not replace active_asids if already 0
+    - [powerpc*] powernv-cpufreq: Add helper to extract pstate from PMSR
+    - IB/rdmavt: Allocate CQ memory on the correct node
+    - blk-mq: avoid to map CPU into stale hw queue
+    - blk-mq: fix race between updating nr_hw_queues and switching io sched
+    - nvme-fabrics: protect against module unload during create_ctrl
+    - nvme-fabrics: don't check for non-NULL module in nvmf_register_transport
+    - [x86] pinctrl: baytrail: Enable glitch filter for GPIOs used as interrupts
+    - nvme_fcloop: disassocate local port structs
+    - nvme_fcloop: fix abort race condition
+    - tpm: return a TPM_RC_COMMAND_CODE response if command is not implemented
+    - perf report: Fix a no annotate browser displayed issue
+    - [x86] staging: lustre: disable preempt while sampling processor id.
+    - [x86] ASoC: Intel: sst: Fix the return value o
+      'sst_send_byte_stream_mrfld()'
+    - [armhf] power: supply: axp288_charger: Properly stop work on probe-error
+      / remove
+    - rt2x00: do not pause queue unconditionally on error path
+    - wl1251: check return from call to wl1251_acx_arp_ip_filter
+    - net/mlx5: Fix race for multiple RoCE enable
+    - bcache: ret IOERR when read meets metadata error
+    - bcache: stop writeback thread after detaching
+    - bcache: segregate flash only volume write streams
+    - scsi: libsas: Use dynamic alloced work to avoid sas event lost
+    - net: Fix netdev_WARN_ONCE macro
+    - scsi: libsas: fix memory leak in sas_smp_get_phy_events() (CVE-2018-7757)
+    - scsi: libsas: fix error when getting phy events
+    - scsi: libsas: initialize sas_phy status according to response of DISCOVER
+    - net/mlx5e: IPoIB, Use correct timestamp in child receive flow
+    - blk-mq: fix kernel oops in blk_mq_tag_idle()
+    - tty: n_gsm: Allow ADM response in addition to UA for control dlci
+    - block, bfq: put async queues for root bfq groups too
+    - serdev: Fix serdev_uevent failure on ACPI enumerated serdev-controllers
+    - i40evf: don't rely on netif_running() outside rtnl_lock()
+    - drm/amd/powerplay: fix memory leakage when reload (v2)
+    - cxgb4vf: Fix SGE FL buffer initialization logic for 64K pages
+    - PM / domains: Don't skip driver's ->suspend|resume_noirq() callbacks
+    - scsi: megaraid_sas: Error handling for invalid ldcount provided by
+      firmware in RAID map
+    - scsi: megaraid_sas: unload flag should be set after scsi_remove_host is
+      called
+    - RDMA/cma: Fix rdma_cm path querying for RoCE
+    - [x86] gart: Exclude GART aperture from vmcore
+    - sdhci: Advertise 2.0v supply on SDIO host controller
+    - Input: goodix - disable IRQs while suspended
+    - mtd: mtd_oobtest: Handle bitflips during reads
+    - crypto: aes-generic - build with -Os on gcc-7+
+    - perf tools: Fix copyfile_offset update of output offset
+    - tcmu: release blocks for partially setup cmds
+    - [x86] thermal: int3400_thermal: fix error handling in
+      int3400_thermal_probe()
+    - [x86] drm/i915/cnp: Ignore VBT request for know invalid DDC pin.
+    - [x86] drm/i915/cnp: Properly handle VBT ddc pin out of bounds.
+    - [x86] microcode: Propagate return value from updating functions
+    - [x86] CPU: Add a microcode loader callback
+    - [x86] CPU: Check CPU feature bits after microcode upgrade
+    - [x86] microcode: Get rid of struct apply_microcode_ctx
+    - [x86] microcode/intel: Check microcode revision before updating sibling
+      threads
+    - [x86] microcode/intel: Writeback and invalidate caches before updating
+      microcode
+    - [x86] microcode: Do not upload microcode if CPUs are offline
+    - [x86] microcode/intel: Look into the patch cache first
+    - [x86] microcode: Request microcode on the BSP
+    - [x86] microcode: Synchronize late microcode loading
+    - [x86] microcode: Attempt late loading only when new microcode is present
+    - [x86] microcode: Fix CPU synchronization routine
+    - arp: fix arp_filter on l3slave devices
+    - ipv6: the entire IPv6 header chain must fit the first fragment
+    - lan78xx: Crash in lan78xx_writ_reg (Workqueue: events
+      lan78xx_deferred_multicast_write)
+    - net: dsa: Discard frames from unused ports
+    - net: fix possible out-of-bound read in skb_network_protocol()
+    - net/ipv6: Fix route leaking between VRFs
+    - net/ipv6: Increment OUTxxx counters after netfilter hook
+    - netlink: make sure nladdr has correct size in netlink_connect()
+    - net/mlx5e: Verify coalescing parameters in range
+    - net sched actions: fix dumping which requires several messages to user
+      space
+    - net/sched: fix NULL dereference in the error path of tcf_bpf_init()
+    - pptp: remove a buggy dst release in pptp_connect()
+    - r8169: fix setting driver_data after register_netdev
+    - sctp: do not leak kernel memory to user space
+    - sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6
+    - sky2: Increase D3 delay to sky2 stops working after suspend
+    - vhost: correctly remove wait queue during poll failure
+    - vlan: also check phy_driver ts_info for vlan's real device
+    - vrf: Fix use after free and double free in vrf_finish_output
+    - bonding: fix the err path for dev hwaddr sync in bond_enslave
+    - bonding: move dev_mc_sync after master_upper_dev_link in bond_enslave
+    - bonding: process the err returned by dev_set_allmulti properly in
+      bond_enslave
+    - net: fool proof dev_valid_name()
+    - ip_tunnel: better validate user provided tunnel names
+    - ipv6: sit: better validate user provided tunnel names
+    - ip6_gre: better validate user provided tunnel names
+    - ip6_tunnel: better validate user provided tunnel names
+    - vti6: better validate user provided tunnel names
+    - net/mlx5e: Set EQE based as default TX interrupt moderation mode
+    - net_sched: fix a missing idr_remove() in u32_delete_key()
+    - net/sched: fix NULL dereference in the error path of tcf_vlan_init()
+    - net/mlx5e: Avoid using the ipv6 stub in the TC offload neigh update path
+    - net/mlx5e: Fix memory usage issues in offloading TC flows
+    - net/sched: fix NULL dereference in the error path of tcf_sample_init()
+    - nfp: use full 40 bits of the NSP buffer address
+    - ipv6: sr: fix seg6 encap performances with TSO enabled
+    - net/mlx5e: Don't override vport admin link state in switchdev mode
+    - net/mlx5e: Sync netdev vxlan ports at open
+    - net/sched: fix NULL dereference in the error path of tunnel_key_init()
+    - net/sched: fix NULL dereference on the error path of tcf_skbmod_init()
+    - strparser: Fix sign of err codes
+    - net/mlx4_en: Fix mixed PFC and Global pause user control requests
+    - net/mlx5e: Fix traffic being dropped on VF representor
+    - vhost: validate log when IOTLB is enabled
+    - route: check sysctl_fib_multipath_use_neigh earlier than hash
+    - team: move dev_mc_sync after master_upper_dev_link in team_port_add
+    - vhost_net: add missing lock nesting notation
+    - net/mlx4_core: Fix memory leak while delete slave's resources
+
+  [ Roger Shimizu ]
+  * [armel] Bring back armel build by reverting two commits that disabled
+    armel previously:
+    - [2ed70eb] "Add empty featuresets for armel to help abiupdate script"
+    - [5f62872] "(Temporarily) disable armel kernel image build"
+  * [armel] Reduce armel image size by:
+    - Set CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
+    - Change MTD, MTD_CMDLINE_PARTS, RTC_DRV_MV, and SPI_ORION from
+      built-in to module.
+    - Disable VT, ZSWAP, RD_BZIP2, and RD_LZMA.
+    Thanks to Leigh Brown <leigh@solinno.co.uk> for his idea to disable VT.
+  * [armel] Add dependency of udeb modules (fixes FTBFS):
+    - Add lzo_decompress to lzo-modules.
+    - Add cmdlinepart to mtd-modules.
+  * [armel] Add dependency of udeb packages (fixes FTBFS):
+    - Add package dependency of mtd-modules to jffs2-modules.
+    - Add package dependency of lzo-modules to squashfs-modules.
+
+  [ Ben Hutchings ]
+  * wireless: Disable regulatory.db direct loading (see #892229)
+  * Bump ABI to 3
+  * scsi: libsas: direct call probe and destruct (CVE-2017-18232)
+  * ext4: fail ext4_iget for root directory if unallocated (CVE-2018-1092)
+  * ext4: add validity checks for bitmap block numbers (CVE-2018-1093)
+  * ext4: always initialize the crc32c checksum driver (CVE-2018-1094)
+  * scsi: libsas: defer ata device eh commands to libata (CVE-2018-10021)
+  * [armel/marvell] linux-image: Replace supported model list with wiki link
+  * [armhf] udeb: Add i2c-exynos5 to i2c-modules (Closes: #895976)
+  * [arm*] iio: Enable DHT11 as module (Closes: #873176)
+  * udeb: Move arc4 and ecb from nic-wireless-modules to crypto-modules
+    (Closes: #895362)
+  * SCSI: Enable SCSI_SYM53C8XX_2 as module on all architectures
+    (Closes: #895532)
+  * [x86] Enable MFD_AXP20X_I2C, AXP288_FUEL_GAUGE as modules (Closes: #895129)
+  * w1: Enable all "slave" device drivers (Closes: #895340)
+  * [arm64] net/phy: Enable MDIO_BUS_MUX_MMIOREG as module (Closes: #894336)
+  * [x86] net: Enable THUNDERBOLT_NET as module (Closes: #894310)
+  * [x86] platform: Enable DELL_SMBIOS_SMM, DELL_SMBIOS_WMI as modules
+    (closes: #893976)
+  * ath9k_htc: Fix regression in 4.15, thanks to Ben Caradoc-Davies
+    (Closes: #891060)
+    - mac80211: add ieee80211_hw flag for QoS NDP support
+    - ath9k_htc: use non-QoS NDP for AP probing
+  * squashfs: Enable SQUASHFS_ZSTD (Closes: #883410)
+  * block: Enable BLK_SED_OPAL (except on armel)
+  * [arm64] Enable ARCH_SYNQUACER and related driver modules (Closes: #891787)
+  * [arm64] PCI: Enable PCI_TEGRA (Closes: #888817)
+  * [amd64] net: Enable AQTION as module
+  * udeb: Rename lzo-modules to compress-modules
+  * udeb: Add zstd_decompress to compress-modules and make squashfs-modules
+    depend on it
+
+  [ Vagrant Cascadian ]
+  * [armhf] Add patch to fix loading of imx6q-cpufreq module.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 19 Apr 2018 11:13:03 +0100
+
+linux (4.15.11-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.5
+    - IB/umad: Fix use of unprotected device pointer
+    - IB/qib: Fix comparison error with qperf compare/swap test
+    - IB/mlx4: Fix incorrectly releasing steerable UD QPs when have only ETH
+      ports
+    - IB/core: Fix two kernel warnings triggered by rxe registration
+    - IB/core: Fix ib_wc structure size to remain in 64 bytes boundary
+    - IB/core: Avoid a potential OOPs for an unused optional parameter
+    - RDMA/rxe: Fix a race condition related to the QP error state
+    - RDMA/rxe: Fix a race condition in rxe_requester()
+    - RDMA/rxe: Fix rxe_qp_cleanup()
+    - [powerpc*] cpufreq: powernv: Dont assume distinct pstate values for
+      nominal and pmin
+    - swiotlb: suppress warning when __GFP_NOWARN is set
+    - PM / devfreq: Propagate error from devfreq_add_device()
+    - mwifiex: resolve reset vs. remove()/shutdown() deadlocks
+    - ocfs2: try a blocking lock before return AOP_TRUNCATED_PAGE
+    - trace_uprobe: Display correct offset in uprobe_events
+    - [powerpc*] radix: Remove trace_tlbie call from radix__flush_tlb_all
+    - [powerpc*] kernel: Block interrupts when updating TIDR
+    - [powerpc*] vas: Don't set uses_vas for kernel windows
+    - [powerpc*] numa: Invalidate numa_cpu_lookup_table on cpu remove
+    - [powerpc*] mm: Flush radix process translations when setting MMU type
+    - [powerpc*] xive: Use hw CPU ids when configuring the CPU queues
+    - dma-buf: fix reservation_object_wait_timeout_rcu once more v2
+    - [s390x] fix handling of -1 in set{,fs}[gu]id16 syscalls
+    - [arm64] dts: msm8916: Correct ipc references for smsm
+    - [x86] gpu: add CFL to early quirks
+    - [x86] kexec: Make kexec (mostly) work in 5-level paging mode
+    - [x86] xen: init %gs very early to avoid page faults with stack protector
+    - [x86] PM: Make APM idle driver initialize polling state
+    - mm, memory_hotplug: fix memmap initialization
+    - [amd64] entry: Clear extra registers beyond syscall arguments, to reduce
+      speculation attack surface
+    - [amd64] entry/compat: Clear registers for compat syscalls, to reduce
+      speculation attack surface
+    - [armhf] crypto: sun4i_ss_prng - fix return value of sun4i_ss_prng_generate
+    - [armhf] crypto: sun4i_ss_prng - convert lock to _bh in
+      sun4i_ss_prng_generate
+    - [powerpc*] mm/radix: Split linear mapping on hot-unplug
+    - [x86] speculation: Update Speculation Control microcode blacklist
+    - [x86] speculation: Correct Speculation Control microcode blacklist again
+    - [x86] Revert "x86/speculation: Simplify
+      indirect_branch_prediction_barrier()"
+    - [x86] KVM: Reduce retpoline performance impact in
+      slot_handle_level_range(), by always inlining iterator helper methods
+    - [X86] nVMX: Properly set spec_ctrl and pred_cmd before merging MSRs
+    - [x86] KVM/nVMX: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02
+      MSR bitmap
+    - [x86] speculation: Clean up various Spectre related details
+    - PM / runtime: Update links_count also if !CONFIG_SRCU
+    - PM: cpuidle: Fix cpuidle_poll_state_init() prototype
+    - [x86] platform: wmi: fix off-by-one write in wmi_dev_probe()
+    - [amd64] entry: Clear registers for exceptions/interrupts, to reduce
+      speculation attack surface
+    - [amd64] entry: Merge SAVE_C_REGS and SAVE_EXTRA_REGS, remove unused
+      extensions
+    - [amd64] entry: Merge the POP_C_REGS and POP_EXTRA_REGS macros into a
+      single POP_REGS macro
+    - [amd64] entry: Interleave XOR register clearing with PUSH instructions
+    - [amd64] entry: Introduce the PUSH_AND_CLEAN_REGS macro
+    - [amd64] entry: Use PUSH_AND_CLEAN_REGS in more cases
+    - [amd64] entry: Get rid of the ALLOC_PT_GPREGS_ON_STACK and
+      SAVE_AND_CLEAR_REGS macros
+    - [amd64] entry: Indent PUSH_AND_CLEAR_REGS and POP_REGS properly
+    - [amd64] entry: Fix paranoid_entry() frame pointer warning
+    - [amd64] entry: Remove the unused 'icebp' macro
+    - gfs2: Fixes to "Implement iomap for block_map"
+    - objtool: Fix segfault in ignore_unreachable_insn()
+    - [x86] debug, objtool: Annotate WARN()-related UD2 as reachable
+    - [x86] debug: Use UD2 for WARN()
+    - [x86] speculation: Fix up array_index_nospec_mask() asm constraint
+    - nospec: Move array_index_nospec() parameter checking into separate macro
+    - [x86] speculation: Add <asm/msr-index.h> dependency
+    - [x86] mm: Rename flush_tlb_single() and flush_tlb_one() to
+      __flush_tlb_one_[user|kernel]()
+    - [x86] cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping
+    - [x86] spectre: Fix an error message
+    - [x86] cpu: Change type of x86_cache_size variable to unsigned int
+    - [amd64] entry: Fix CR3 restore in paranoid_exit()
+    - drm/ttm: Don't add swapped BOs to swap-LRU list
+    - drm/ttm: Fix 'buf' pointer update in ttm_bo_vm_access_kmap() (v2)
+    - drm/qxl: unref cursor bo when finished with it
+    - drm/qxl: reapply cursor after resetting primary
+    - drm/amd/powerplay: Fix smu_table_entry.handle type
+    - drm/ast: Load lut in crtc_commit
+    - drm: Check for lessee in DROP_MASTER ioctl
+    - [arm64] Add missing Falkor part number for branch predictor hardening
+    - drm/radeon: Add dpm quirk for Jet PRO (v2)
+    - drm/radeon: adjust tested variable
+    - [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a
+      physical CPU
+    - [powerpc*] rtc-opal: Fix handling of firmware error codes, prevent busy
+      loops
+    - mbcache: initialize entry->e_referenced in mb_cache_entry_create()
+    - mmc: sdhci: Implement an SDHCI-specific bounce buffer
+    - [armhf,arm64] mmc: bcm2835: Don't overwrite max frequency unconditionally
+    - [arm64] Revert "mmc: meson-gx: include tx phase in the tuning process"
+    - mlx5: fix mlx5_get_vector_affinity to start from completion vector 0
+    - [x86] Revert "apple-gmux: lock iGP IO to protect from vgaarb changes"
+    - ext4: fix a race in the ext4 shutdown path
+    - ext4: save error to disk in __ext4_grp_locked_error()
+    - ext4: correct documentation for grpid mount option
+    - mm: Fix memory size alignment in devm_memremap_pages_release()
+    - [mips*] Fix typo BIG_ENDIAN to CPU_BIG_ENDIAN
+    - [mips*] CPS: Fix MIPS_ISA_LEVEL_RAW fallout
+    - [mips*] Fix incorrect mem=X@Y handling
+    - [arm64] PCI: Disable MSI for HiSilicon Hip06/Hip07 only in Root Port mode
+    - [armhf,arm64] PCI: iproc: Fix NULL pointer dereference for BCMA
+    - [x86] PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
+    - console/dummy: leave .con_font_get set to NULL
+    - rbd: whitelist RBD_FEATURE_OPERATIONS feature bit
+    - xen: Fix {set,clear}_foreign_p2m_mapping on autotranslating guests
+    - xenbus: track caller request id
+    - seq_file: fix incomplete reset on read from zero offset
+    - tracing: Fix parsing of globs with a wildcard at the beginning
+    - mpls, nospec: Sanitize array index in mpls_label_ok() (CVE-2017-5753)
+    - rtlwifi: rtl8821ae: Fix connection lost problem correctly
+    - [arm64] proc: Set PTE_NG for table entries to avoid traversing them twice
+    - xprtrdma: Fix calculation of ri_max_send_sges
+    - xprtrdma: Fix BUG after a device removal
+    - blk-wbt: account flush requests correctly
+    - target/iscsi: avoid NULL dereference in CHAP auth error path
+    - iscsi-target: make sure to wake up sleeping login worker
+    - dm: correctly handle chained bios in dec_pending()
+    - Btrfs: fix deadlock in run_delalloc_nocow
+    - Btrfs: fix crash due to not cleaning up tree log block's dirty bits
+    - Btrfs: fix extent state leak from tree log
+    - Btrfs: fix btrfs_evict_inode to handle abnormal inodes correctly
+    - Btrfs: fix use-after-free on root->orphan_block_rsv
+    - Btrfs: fix unexpected -EEXIST when creating new inode
+    - 9p/trans_virtio: discard zero-length reply
+    - mtd: nand: vf610: set correct ooblayout
+    - ALSA: hda - Fix headset mic detection problem for two Dell machines
+    - ALSA: usb-audio: Fix UAC2 get_ctl request with a RANGE attribute
+    - ALSA: hda/realtek - Add headset mode support for Dell laptop
+    - ALSA: hda/realtek - Enable Thinkpad Dock device for ALC298 platform
+    - ALSA: hda/realtek: PCI quirk for Fujitsu U7x7
+    - ALSA: usb-audio: add implicit fb quirk for Behringer UFX1204
+    - ALSA: usb: add more device quirks for USB DSD devices
+    - ALSA: seq: Fix racy pool initializations (CVE-2018-7566)
+    - [armhf,arm64] mvpp2: fix multicast address filter
+    - usb: Move USB_UHCI_BIG_ENDIAN_* out of USB_SUPPORT
+    - [x86] mm, mm/hwpoison: Don't unconditionally unmap kernel 1:1 pages
+    - [armhf] dts: exynos: fix RTC interrupt for exynos5410
+    - [arm64] dts: msm8916: Add missing #phy-cells
+     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.6
+    - tun: fix tun_napi_alloc_frags() frag allocator
+    - ptr_ring: fail early if queue occupies more than KMALLOC_MAX_SIZE
+    - ptr_ring: try vmalloc() when kmalloc() fails
+    - selinux: ensure the context is NUL terminated in
+      security_context_to_sid_core()
+    - selinux: skip bounded transition processing if the policy isn't loaded
+    - media: pvrusb2: properly check endpoint types
+    - [x86] crypto: twofish-3way - Fix %rbp usage
+    - blk_rq_map_user_iov: fix error override
+    - [x86] KVM: fix escape of guest dr6 to the host
+    - kcov: detect double association with a single task
+    - netfilter: x_tables: fix int overflow in xt_alloc_table_info()
+    - netfilter: x_tables: avoid out-of-bounds reads in
+      xt_request_find_{match|target}
+    - netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in
+      clusterip_tg_check()
+    - netfilter: on sockopt() acquire sock lock only in the required scope
+    - netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()
+    - netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
+    - rds: tcp: correctly sequence cleanup on netns deletion.
+    - rds: tcp: atomically purge entries from rds_tcp_conn_list during netns
+      delete
+    - net: avoid skb_warn_bad_offload on IS_ERR
+    - net_sched: gen_estimator: fix lockdep splat
+    - [arm64] dts: add #cooling-cells to CPU nodes
+    - dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock
+    - xhci: Fix NULL pointer in xhci debugfs
+    - xhci: Fix xhci debugfs devices node disappearance after hibernation
+    - xhci: xhci debugfs device nodes weren't removed after device plugged out
+    - xhci: fix xhci debugfs errors in xhci_stop
+    - usbip: keep usbip_device sockfd state in sync with tcp_socket
+    - [x86] mei: me: add cannon point device ids
+    - [x86] mei: me: add cannon point device ids for 4th device
+    - vmalloc: fix __GFP_HIGHMEM usage for vmalloc_32 on 32b systems
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.7
+    - netfilter: drop outermost socket lock in getsockopt()
+    - [arm64] mm: don't write garbage into TTBR1_EL1 register
+    - kconfig.h: Include compiler types to avoid missed struct attributes
+    - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info
+    - [mips*] Drop spurious __unused in struct compat_flock
+    - cfg80211: fix cfg80211_beacon_dup
+    - i2c: designware: must wait for enable
+    - [armhf,arm64] i2c: bcm2835: Set up the rising/falling edge delays
+    - X.509: fix BUG_ON() when hash algorithm is unsupported
+    - X.509: fix NULL dereference when restricting key with unsupported_sig
+    - PKCS#7: fix certificate chain verification
+    - PKCS#7: fix certificate blacklisting
+    - [x86] genirq/matrix: Handle CPU offlining proper
+    - RDMA/uverbs: Protect from races between lookup and destroy of uobjects
+    - RDMA/uverbs: Protect from command mask overflow
+    - RDMA/uverbs: Fix bad unlock balance in ib_uverbs_close_xrcd
+    - RDMA/uverbs: Fix circular locking dependency
+    - RDMA/uverbs: Sanitize user entered port numbers prior to access it
+    - iio: buffer: check if a buffer has been set up when poll is called
+    - Kbuild: always define endianess in kconfig.h
+    - [x86] apic/vector: Handle vector release on CPU unplug correctly
+    - mm, swap, frontswap: fix THP swap if frontswap enabled
+    - mm: don't defer struct page initialization for Xen pv guests
+    - uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
+    - [armhf,arm64] irqchip/gic-v3: Use wmb() instead of smb_wmb() in
+      gic_raise_softirq()
+    - [mips*] irqchip/mips-gic: Avoid spuriously handling masked interrupts
+    - PCI/cxgb4: Extend T3 PCI quirk to T4+ devices
+    - [x86] net: thunderbolt: Tear down connection properly on suspend
+    - [x86] net: thunderbolt: Run disconnect flow asynchronously when logout is
+      received
+    - ohci-hcd: Fix race condition caused by ohci_urb_enqueue() and
+      io_watchdog_func()
+    - usb: ohci: Proper handling of ed_rm_list to handle race condition between
+      usb_kill_urb() and finish_unlinks()
+    - [arm64] Remove unimplemented syscall log message
+    - [arm64] Disable unhandled signal log messages by default
+    - [arm64] cpufeature: Fix CTR_EL0 field definitions
+    - USB: Add delay-init quirk for Corsair K70 RGB keyboards
+    - drm/edid: Add 6 bpc quirk for CPT panel in Asus UX303LA
+    - usb: host: ehci: use correct device pointer for dma ops
+    - usb: dwc3: gadget: Set maxpacket size for ep0 IN
+    - usb: dwc3: ep0: Reset TRB counter for ep0 IN
+    - usb: ldusb: add PIDs for new CASSY devices supported by this driver
+    - Revert "usb: musb: host: don't start next rx urb if current one failed"
+    - usb: gadget: f_fs: Process all descriptors during bind
+    - usb: gadget: f_fs: Use config_ep_by_speed()
+    - drm/cirrus: Load lut in crtc_commit
+    - drm/atomic: Fix memleak on ERESTARTSYS during non-blocking commits
+    - drm: Handle unexpected holes in color-eviction
+    - drm/amdgpu: disable MMHUB power gating on raven
+    - drm/amdgpu: fix VA hole handling on Vega10 v3
+    - drm/amdgpu: Add dpm quirk for Jet PRO (v2)
+    - drm/amdgpu: only check mmBIF_IOV_FUNC_IDENTIFIER on tonga/fiji
+    - drm/amdgpu: add atpx quirk handling (v2)
+    - drm/amdgpu: Avoid leaking PM domain on driver unbind (v2)
+    - drm/amdgpu: add new device to use atpx quirk
+    - [arm64] __show_regs: Only resolve kernel symbols when running at EL1
+    - [x86] drm/i915/breadcrumbs: Ignore unsubmitted signalers
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8
+    - vsprintf: avoid misleading "(null)" for %px
+    - hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers)
+    - ipmi_si: Fix error handling of platform device
+    - [x86] platform: dell-laptop: Allocate buffer on heap rather than globally
+    - [powerpc*] pseries: Enable RAS hotplug events later
+    - Bluetooth: btusb: Use DMI matching for QCA reset_resume quirking
+    - ixgbe: fix crash in build_skb Rx code path
+    - [x86] tpm: st33zp24: fix potential buffer overruns caused by bit glitches
+      on the bus
+    - tpm: fix potential buffer overruns caused by bit glitches on the bus
+    - [x86] tpm_i2c_infineon: fix potential buffer overruns caused by bit
+      glitches on the bus
+    - [x86] tpm_i2c_nuvoton: fix potential buffer overruns caused by bit
+      glitches on the bus
+    - [x86] tpm_tis: fix potential buffer overruns caused by bit glitches on
+      the bus
+    - ALSA: usb-audio: Add a quirck for B&W PX headphones
+    - ALSA: control: Fix memory corruption risk in snd_ctl_elem_read
+    - [x86] ALSA: x86: Fix missing spinlock and mutex initializations
+    - ALSA: hda: Add a power_save blacklist
+    - ALSA: hda - Fix pincfg at resume on Lenovo T470 dock
+    - mmc: sdhci-pci: Fix S0i3 for Intel BYT-based controllers
+    - [armhf,arm64] mmc: dw_mmc-k3: Fix out-of-bounds access through DT alias
+    - [armhf,arm64] mmc: dw_mmc: Avoid accessing registers in runtime suspended
+      state
+    - [armhf,arm64] mmc: dw_mmc: Factor out dw_mci_init_slot_caps
+    - [armhf,arm64] mmc: dw_mmc: Fix out-of-bounds access for slot's caps
+    - timers: Forward timer base before migrating timers
+    - [hppa] Use cr16 interval timers unconditionally on qemu
+    - [hppa] Reduce irq overhead when run in qemu
+    - [hppa] Fix ordering of cache and TLB flushes
+    - [hppa] Hide virtual kernel memory layout
+    - btrfs: use proper endianness accessors for super_copy
+    - block: fix the count of PGPGOUT for WRITE_SAME
+    - block: kyber: fix domain token leak during requeue
+    - block: pass inclusive 'lend' parameter to truncate_inode_pages_range
+    - vfio: disable filesystem-dax page pinning
+    - dax: fix vma_is_fsdax() helper
+    - direct-io: Fix sleep in atomic due to sync AIO
+    - [x86] xen: Zero MSR_IA32_SPEC_CTRL before suspend
+    - [x86] cpu_entry_area: Sync cpu_entry_area to initial_page_table
+    - bridge: check brport attr show in brport_show
+    - fib_semantics: Don't match route with mismatching tclassid
+    - hdlc_ppp: carrier detect ok, don't turn off negotiation
+    - [arm64] net: amd-xgbe: fix comparison to bitshift when dealing with a mask
+    - [armhf] net: ethernet: ti: cpsw: fix net watchdog timeout
+    - net: fix race on decreasing number of TX queues
+    - net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68
+    - netlink: ensure to loop over all netns in genlmsg_multicast_allns()
+    - net: sched: report if filter is too large to dump
+    - ppp: prevent unregistered channels from connecting to PPP units
+    - sctp: verify size of a new chunk in _sctp_make_chunk() (CVE-2018-5803)
+    - udplite: fix partial checksum initialization
+    - net/mlx5e: Fix TCP checksum in LRO buffers
+    - sctp: fix dst refcnt leak in sctp_v4_get_dst
+    - net/mlx5e: Specify numa node when allocating drop rq
+    - net: phy: fix phy_start to consider PHY_IGNORE_INTERRUPT
+    - tcp: Honor the eor bit in tcp_mtu_probe
+    - rxrpc: Fix send in rxrpc_send_data_packet()
+    - tcp_bbr: better deal with suboptimal GSO
+    - doc: Change the min default value of tcp_wmem/tcp_rmem.
+    - net/mlx5e: Fix loopback self test when GRO is off
+    - net_sched: gen_estimator: fix broken estimators based on percpu stats
+    - net/sched: cls_u32: fix cls_u32 on filter replace
+    - sctp: do not pr_err for the duplicated node in transport rhlist
+    - net: ipv4: Set addr_type in hash_keys for forwarded case
+    - sctp: fix dst refcnt leak in sctp_v6_get_dst()
+    - bridge: Fix VLAN reference count problem
+    - net/mlx5e: Verify inline header size do not exceed SKB linear size
+    - tls: Use correct sk->sk_prot for IPV6
+    - [arm64] amd-xgbe: Restore PCI interrupt enablement setting on resume
+    - cls_u32: fix use after free in u32_destroy_key()
+    - netlink: put module reference if dump start fails
+    - tcp: purge write queue upon RST
+    - tuntap: correctly add the missing XDP flush
+    - tuntap: disable preemption during XDP processing
+    - virtio-net: disable NAPI only when enabled during XDP set
+    - cxgb4: fix trailing zero in CIM LA dump
+    - net/mlx5: Fix error handling when adding flow rules
+    - net: phy: Restore phy_resume() locking assumption
+    - tcp: tracepoint: only call trace_tcp_send_reset with full socket
+    - l2tp: don't use inet_shutdown on tunnel destroy
+    - l2tp: don't use inet_shutdown on ppp session destroy
+    - l2tp: fix races with tunnel socket close
+    - l2tp: fix race in pppol2tp_release with session object destroy
+    - l2tp: fix tunnel lookup use-after-free race
+    - [s390x] qeth: fix underestimated count of buffer elements
+    - [s390x] qeth: fix SETIP command handling
+    - [s390x] qeth: fix overestimated count of buffer elements
+    - [s390x] qeth: fix IP removal on offline cards
+    - [s390x] qeth: fix double-free on IP add/remove race
+    - [s390x] Revert "s390/qeth: fix using of ref counter for rxip addresses"
+    - [s390x] qeth: fix IP address lookup for L3 devices
+    - [s390x] qeth: fix IPA command submission race
+    - tcp: revert F-RTO middle-box workaround
+    - tcp: revert F-RTO extension to detect more spurious timeouts
+    - blk-mq: don't call io sched's .requeue_request when requeueing rq to
+      ->dispatch
+    - media: m88ds3103: don't call a non-initalized function
+    - [x86] EDAC, sb_edac: Fix out of bound writes during DIMM configuration on
+      KNL
+    - [s390x] KVM: take care of clock-comparator sign control
+    - [s390x] KVM: provide only a single function for setting the tod (fix SCK)
+    - [s390x] KVM: consider epoch index on hotplugged CPUs
+    - [s390x] KVM: consider epoch index on TOD clock syncs
+    - nospec: Allow index argument to have const-qualified type
+    - [x86] mm: Fix {pmd,pud}_{set,clear}_flags()
+    - [armhf] orion: fix orion_ge00_switch_board_info initialization
+    - [armhf] dts: rockchip: Remove 1.8 GHz operation point from phycore som
+    - [armhf] mvebu: Fix broken PL310_ERRATA_753970 selects
+    - [x86] KVM: Fix SMRAM accessing even if VM is shutdown
+    - KVM: mmu: Fix overlap between public and private memslots
+    - [x86] KVM: Remove indirect MSR op calls from SPEC_CTRL
+    - [x86] KVM: move LAPIC initialization after VMCS creation
+    - [x86] KVM/VMX: Optimize vmx_vcpu_run() and svm_vcpu_run() by marking the
+      RDMSR path as unlikely()
+    - [x86] KVM: fix vcpu initialization with userspace lapic
+    - [x86] KVM: remove WARN_ON() for when vm_munmap() fails
+    - [x86] ACPI / bus: Parse tables as term_list for Dell XPS 9570 and
+      Precision M5530
+    - [armhf] dts: LogicPD SOM-LV: Fix I2C1 pinmux
+    - [armhf] dts: LogicPD Torpedo: Fix I2C1 pinmux
+    - [powerpc*] 64s/radix: Boot-time NULL pointer protection using a guard-PID
+    - md: only allow remove_and_add_spares when no sync_thread running.
+    - [x86] platform: dell-laptop: fix kbd_get_state's request value
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.9
+    - bpf: fix mlock precharge on arraymaps
+    - bpf: fix memory leak in lpm_trie map_free callback function
+    - bpf: fix rcu lockdep warning for lpm_trie map_free callback
+    - [amd64] bpf: implement retpoline for tail call (CVE-2017-5715)
+    - [arm64] bpf: fix out of bounds access in tail call
+    - bpf: add schedule points in percpu arrays management
+    - bpf: allow xadd only on aligned memory
+    - [powerpc*] bpf, ppc64: fix out of bounds access in tail call
+    - scsi: mpt3sas: fix oops in error handlers after shutdown/unload
+    - scsi: mpt3sas: wait for and flush running commands on shutdown/unload
+    - [x86] KVM: fix backward migration with async_PF
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.10
+    - RDMA/ucma: Limit possible option size
+    - RDMA/ucma: Check that user doesn't overflow QP state
+    - RDMA/mlx5: Fix integer overflow while resizing CQ
+    - bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in
+      __cpu_map_entry_alloc()
+    - IB/uverbs: Improve lockdep_check
+    - mac80211_hwsim: don't use WQ_MEM_RECLAIM
+    - [x86] drm/i915: Check for fused or unused pipes
+    - [x86] drm/i915/audio: fix check for av_enc_map overflow
+    - [x86] drm/i915: Fix rsvd2 mask when out-fence is returned
+    - [x86] drm/i915: Clear the in-use marker on execbuf failure
+    - [x86] drm/i915: Disable DC states around GMBUS on GLK
+    - [x86] drm/i915: Update watermark state correctly in sanitize_watermarks
+    - [x86] drm/i915: Try EDID bitbanging on HDMI after failed read
+    - [x86] drm/i915/perf: fix perf stream opening lock
+    - scsi: core: Avoid that ATA error handling can trigger a kernel hang or
+      oops (Closes: #891467)
+    - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS
+    - [x86] drm/i915: Always call to intel_display_set_init_power() in
+      resume_early.
+    - workqueue: Allow retrieval of current task's work struct
+    - drm: Allow determining if current task is output poll worker
+    - drm/nouveau: Fix deadlock on runtime suspend
+    - drm/radeon: Fix deadlock on runtime suspend
+    - drm/amdgpu: Fix deadlock on runtime suspend
+    - drm/nouveau: prefer XBGR2101010 for addfb ioctl
+    - drm/amd/powerplay/smu7: allow mclk switching with no displays
+    - drm/amd/powerplay/vega10: allow mclk switching with no displays
+    - Revert "drm/radeon/pm: autoswitch power state when in balanced mode"
+    - drm/amd/display: check for ipp before calling cursor operations
+    - drm/radeon: insist on 32-bit DMA for Cedar on PPC64/PPC64LE
+    - drm/amd/powerplay: fix power over limit on Fiji
+    - drm/amd/display: Default HDMI6G support to true. Log VBIOS table error.
+    - drm/amdgpu: used cached pcie gen info for SI (v2)
+    - drm/amdgpu: Notify sbios device ready before send request
+    - drm/radeon: fix KV harvesting
+    - drm/amdgpu: fix KV harvesting
+    - drm/amdgpu:Correct max uvd handles
+    - drm/amdgpu:Always save uvd vcpu_bo in VM Mode
+    - ovl: redirect_dir=nofollow should not follow redirect for opaque lower
+    - [mips*/octeon] irq: Check for null return on kzalloc allocation
+    - PCI: dwc: Fix enumeration end when reaching root subordinate
+    - Revert "Input: synaptics - Lenovo Thinkpad T460p devices should use RMI"
+    - bug: use %pB in BUG and stack protector failure
+    - lib/bug.c: exclude non-BUG/WARN exceptions from report_bug()
+    - mm/memblock.c: hardcode the end_pfn being -1
+    - Documentation/sphinx: Fix Directive import error
+    - loop: Fix lost writes caused by missing flag
+    - virtio_ring: fix num_free handling in error case
+    - [x390x] KVM: fix memory overwrites when not using SCA entries
+    - [arm64] mm: fix thinko in non-global page table attribute check
+    - IB/core: Fix missing RDMA cgroups release in case of failure to register
+      device
+    - Revert "nvme: create 'slaves' and 'holders' entries for hidden
+      controllers"
+    - kbuild: Handle builtin dtb file names containing hyphens
+    - dm bufio: avoid false-positive Wmaybe-uninitialized warning
+    - IB/mlx5: Fix incorrect size of klms in the memory region
+    - bcache: fix crashes in duplicate cache device register
+    - bcache: don't attach backing with duplicate UUID
+    - [x86] MCE: Save microcode revision in machine check records
+    - [x86] MCE: Serialize sysfs changes (CVE-2018-7995)
+    - perf tools: Fix trigger class trigger_on()
+    - [x86] spectre_v2: Don't check microcode versions when running under
+      hypervisors
+    - ALSA: hda/realtek - Add support headset mode for DELL WYSE
+    - ALSA: hda/realtek - Add headset mode support for Dell laptop
+    - ALSA: hda/realtek: Limit mic boost on T480
+    - ALSA: hda/realtek - Fix dock line-out volume on Dell Precision 7520
+    - ALSA: hda/realtek - Make dock sound work on ThinkPad L570
+    - ALSA: seq: Don't allow resizing pool in use
+    - ALSA: seq: More protection for concurrent write and ioctl races
+    - ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines
+    - ALSA: hda: add dock and led support for HP EliteBook 820 G3
+    - ALSA: hda: add dock and led support for HP ProBook 640 G2
+    - scsi: qla2xxx: Fix NULL pointer crash due to probe failure
+    - scsi: qla2xxx: Fix recursion while sending terminate exchange
+    - dt-bindings: Document mti,mips-cpc binding
+    - nospec: Kill array_index_nospec_mask_check()
+    - nospec: Include <asm/barrier.h> dependency
+    - [x86] entry: Reduce the code footprint of the 'idtentry' macro
+    - [x86] entry/64: Use 'xorl' for faster register clearing
+    - [x86] mm: Remove stale comment about KMEMCHECK
+    - [x86] asm: Improve how GEN_*_SUFFIXED_RMWcc() specify clobbers
+    - [x86] IO-APIC: Avoid warning in 32-bit builds
+    - [x86] LDT: Avoid warning in 32-bit builds with older gcc
+    - x86-64/realmode: Add instruction suffix
+    - Revert "x86/retpoline: Simplify vmexit_fill_RSB()"
+    - [x86] speculation: Use IBRS if available before calling into firmware
+    - [x86] retpoline: Support retpoline builds with Clang
+    - [x86] speculation, objtool: Annotate indirect calls/jumps for objtool
+    - [x86] speculation: Move firmware_restrict_branch_speculation_*() from C
+      to CPP
+    - [x86] paravirt, objtool: Annotate indirect calls
+    - [x86] boot, objtool: Annotate indirect jump in secondary_startup_64()
+    - [x86] mm/sme, objtool: Annotate indirect call in sme_encrypt_execute()
+    - objtool: Use existing global variables for options
+    - objtool: Add retpoline validation
+    - objtool: Add module specific retpoline rules
+    - objtool, retpolines: Integrate objtool with retpoline support more
+      closely
+    - objtool: Fix another switch table detection issue
+    - objtool: Fix 32-bit build
+    - [x86] kprobes: Fix kernel crash when probing .entry_trampoline code
+    - watchdog: hpwdt: SMBIOS check
+    - watchdog: hpwdt: Check source of NMI
+    - watchdog: hpwdt: fix unused variable warning
+    - watchdog: hpwdt: Remove legacy NMI sourcing.
+    - netfilter: add back stackpointer size checks (CVE-2018-1065)
+    - netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
+    - netfilter: xt_hashlimit: fix lock imbalance
+    - netfilter: x_tables: fix missing timer initialization in xt_LED
+    - netfilter: nat: cope with negative port range
+    - netfilter: IDLETIMER: be syzkaller friendly
+    - netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
+      (CVE-2018-1068)
+    - netfilter: bridge: ebt_among: add missing match size checks
+    - netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
+    - netfilter: use skb_to_full_sk in ip6_route_me_harder
+    - tpm_tis: Move ilb_base_addr to tpm_tis_data
+    - tpm: Keep CLKRUN enabled throughout the duration of transmit_cmd()
+    - tpm: delete the TPM_TIS_CLK_ENABLE flag
+    - tpm: remove unused variables
+    - tpm: only attempt to disable the LPC CLKRUN if is already enabled
+    - [x86] xen: Calculate __max_logical_packages on PV domains
+    - scsi: qla2xxx: Fix system crash for Notify ack timeout handling
+    - scsi: qla2xxx: Fix gpnid error processing
+    - scsi: qla2xxx: Move session delete to driver work queue
+    - scsi: qla2xxx: Skip IRQ affinity for Target QPairs
+    - scsi: qla2xxx: Fix re-login for Nport Handle in use
+    - scsi: qla2xxx: Retry switch command on time out
+    - scsi: qla2xxx: Serialize GPNID for multiple RSCN
+    - scsi: qla2xxx: Fix login state machine stuck at GPDB
+    - scsi: qla2xxx: Fix NPIV host cleanup in target mode
+    - scsi: qla2xxx: Relogin to target port on a cable swap
+    - scsi: qla2xxx: Fix Relogin being triggered too fast
+    - scsi: qla2xxx: Fix PRLI state check
+    - scsi: qla2xxx: Fix abort command deadlock due to spinlock
+    - scsi: qla2xxx: Replace fcport alloc with qla2x00_alloc_fcport
+    - scsi: qla2xxx: Fix scan state field for fcport
+    - scsi: qla2xxx: Clear loop id after delete
+    - scsi: qla2xxx: Defer processing of GS IOCB calls
+    - scsi: qla2xxx: Remove aborting ELS IOCB call issued as part of timeout.
+    - scsi: qla2xxx: Fix system crash in qlt_plogi_ack_unref
+    - scsi: qla2xxx: Fix memory leak in dual/target mode
+    - NFS: Fix an incorrect type in struct nfs_direct_req
+    - pNFS: Prevent the layout header refcount going to zero in pnfs_roc()
+    - NFS: Fix unstable write completion
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.11
+    - [x86] Treat R_X86_64_PLT32 as R_X86_64_PC32
+    - usb: host: xhci-rcar: add support for r8a77965
+    - xhci: Fix front USB ports on ASUS PRIME B350M-A
+    - xhci: fix endpoint context tracer output
+    - [sh4] serial: sh-sci: prevent lockup on full TTY buffers
+    - tty/serial: atmel: add new version check for usart
+    - uas: fix comparison for error code
+    - [x86] staging: comedi: fix comedi_nsamples_left.
+    - USB: storage: Add JMicron bridge 152d:2567 to unusual_devs.h
+    - usbip: vudc: fix null pointer dereference on udc->lock
+    - usb: quirks: add control message delay for 1b1c:1b20
+    - usb: usbmon: Read text within supplied buffer size
+    - usb: gadget: f_fs: Fix use-after-free in ffs_fs_kill_sb()
+    - [arm64,armhf] usb: dwc3: Fix lock-up on ID change during system
+      suspend/resume
+    - serial: 8250_pci: Add Brainboxes UC-260 4 port serial device
+    - serial: core: mark port as initialized in autoconfig
+    - earlycon: add reg-offset to physical address before mapping
+    - dm mpath: fix passing integrity data
+    - Revert "btrfs: use proper endianness accessors for super_copy"
+    - gfs2: Clean up {lookup,fillup}_metapath
+    - gfs2: Fixes to "Implement iomap for block_map" (2)
+    - [armhf] spi: imx: Fix failure path leak on GPIO request error correctly
+    - HID: multitouch: Only look at non touch fields in first packet of a
+      frame
+    - [powerpc*] KVM: Book3S HV: Avoid shifts by negative amounts
+    - drm/edid: set ELD connector type in drm_edid_to_eld()
+    - dma-buf/fence: Fix lock inversion within dma-fence-array
+    - video/hdmi: Allow "empty" HDMI infoframes
+    - [powerpc*] KVM: Book3S HV: Fix typo in kvmppc_hv_get_dirty_log_radix()
+    - HID: elo: clear BTN_LEFT mapping
+    - iwlwifi: mvm: rs: don't override the rate history in the search cycle
+    - [armhf] dts: exynos: Correct Trats2 panel reset line
+    - drm/amdgpu: fix get_max_engine_clock_in_mhz
+    - USB: ledtrig-usbport: fix of-node leak
+    - dt-bindings: serial: Add common rs485 binding for RTS polarity
+    - sched: Stop switched_to_rt() from sending IPIs to offline CPUs
+    - sched: Stop resched_cpu() from sending IPIs to offline CPUs
+    - crypto: chelsio - Fix an error code in chcr_hash_dma_map()
+    - crypto: keywrap - Add missing ULL suffixes for 64-bit constants
+    - crypto: cavium - fix memory leak on info
+    - test_firmware: fix setting old custom fw path back on exit
+    - drm/vblank: Fix vblank timestamp debugs
+    - net: ieee802154: adf7242: Fix bug if defined DEBUG
+    - perf report: Fix -D output for user metadata events
+    - net: xfrm: allow clearing socket xfrm policies.
+    - gpiolib: don't allow OPEN_DRAIN & OPEN_SOURCE flags simultaneously
+    - mtd: nand: fix interpretation of NAND_CMD_NONE in nand_command[_lp]()
+    - [arm64] net: thunderx: Set max queue count taking XDP_TX into account
+    - [armhf] dts: am335x-pepper: Fix the audio CODEC's reset pin
+    - [armhf] dts: omap3-n900: Fix the audio CODEC's reset pin
+    - mtd: nand: ifc: update bufnum mask for ver >= 2.0.0
+    - userns: Don't fail follow_automount based on s_user_ns
+    - xfrm: Fix xfrm_replay_overflow_offload_esn
+    - leds: pm8058: Silence pointer to integer size warning
+    - bpf: fix stack state printing in verifier log
+    - [armhf] drm/etnaviv: make THERMAL selectable
+    - ath10k: update tdls teardown state to target
+    - cpufreq: Fix governor module removal race
+    - [x86] KVM: Restart the guest when insn_len is zero and SEV is enabled
+    - drm/amdgpu:fix random missing of FLR NOTIFY
+    - scsi: lpfc: Fix crash during driver unload with running nvme traffic
+    - scsi: ses: don't ask for diagnostic pages repeatedly during probe
+    - [armhf] drm/sun4i: Fix format mask in DE2 driver
+    - [s390x] perf annotate: Fix unnecessary memory allocation for s390x
+    - perf annotate: Fix objdump comment parsing for Intel mov dissassembly
+    - iwlwifi: mvm: avoid dumping assert log when device is stopped
+    - drm/amdgpu:fix virtual dce bug
+    - drm/amdgpu: fix amdgpu_sync_resv v2
+    - bnxt_en: Uninitialized variable in bnxt_tc_parse_actions()
+    - [arm64] clk: qcom: msm8916: fix mnd_width for codec_digcodec
+    - mwifiex: cfg80211: do not change virtual interface during scan
+      processing
+    - ath10k: fix invalid STS_CAP_OFFSET_MASK
+    - tools/usbip: fixes build with musl libc toolchain
+    - [armhf] spi: sun6i: disable/unprepare clocks on remove
+    - bnxt_en: Don't print "Link speed -1 no longer supported" messages.
+    - scsi: core: scsi_get_device_flags_keyed(): Always return device flags
+    - scsi: devinfo: apply to HP XP the same flags as Hitachi VSP
+    - scsi: dh: add new rdac devices
+    - media: vsp1: Prevent suspending and resuming DRM pipelines
+    - dm raid: fix raid set size revalidation
+    - media: cpia2: Fix a couple off by one bugs
+    - [arm*] media: davinci: vpif_capture: add NULL check on devm_kzalloc
+      return value
+    - virtio_net: Disable interrupts if napi_complete_done rescheduled napi
+    - net: sched: drop qdisc_reset from dev_graft_qdisc
+    - veth: set peer GSO values
+    - [x86] drm/amdkfd: Fix memory leaks in kfd topology
+    - [powerpc*] modules: Don't try to restore r2 after a sibling call
+    - [powerpc/powerpc64,ppc64*] Don't trace irqs-off at interrupt return to
+      soft-disabled context
+    - [arm64] dts: renesas: salvator-common: Add EthernetAVB PHY reset
+    - agp/intel: Flush all chipset writes after updating the GGTT
+    - mac80211_hwsim: enforce PS_MANUAL_POLL to be set after PS_ENABLED
+    - mac80211: remove BUG() when interface type is invalid
+    - crypto: caam/qi - use correct print specifier for size_t
+    - mmc: mmc_test: Ensure command queue is disabled for testing
+    - Fix misannotated out-of-line _copy_to_user()
+    - ipvlan: add L2 check for packets arriving via virtual devices
+    - locking/locktorture: Fix num reader/writer corner cases
+    - ima: relax requiring a file signature for new files with zero length
+    - IB/mlx5: revisit -Wmaybe-uninitialized warning
+    - [arm64] dmaengine: qcom_hidma: check pending interrupts
+    - [x86] drm/i915/glk: Disable Guc and HuC on GLK
+
+  [ Ben Hutchings ]
+  * aufs: gen-patch: Fix Subject generation to skip SPDX-License-Identifier
+  * aufs: Update support patchset to aufs4.15-20180219 (no functional change)
+  * debian/control: Point Vcs URLs to Salsa
+  * [x86] sound/soc/intel: Enable SND_SOC_INTEL_SST_TOPLEVEL,
+    SND_SOC_INTEL_HASWELL, SND_SOC_INTEL_BAYTRAIL, SND_SST_ATOM_HIFI2_PLATFORM,
+    SND_SOC_INTEL_SKYLAKE as modules; re-enable dependent board drivers
+    (Closes: #892629)
+  * firmware_class: Refer to Debian wiki page when logging missing firmware
+    (Closes: #888405)
+  * amdgpu: Abort probing if firmware is not installed, as we do in radeon
+  * Bump ABI to 2
+  * [amd64] udeb: Add vmd to scsi-modules, required for NVMe on some systems
+    (Closes: #891482)
+  * udeb: Update patterns for PHY modules included in usb-modules
+    (Closes: #893154)
+
+  [ Uwe Kleine-König ]
+  * netfilter: enable NFT_FIB_NETDEV as module
+
+  [ Thadeu Lima de Souza Cascardo ]
+  * [powerpc,ppc64el,ppc64] Enable CRASH_DUMP (Closes: #883432)
+
+  [ Bastian Blank ]
+  * Drop note about Xen from long descriptions.
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable ROCKCHIP_IODOMAIN as a module, to enable PCIe reset.
+  * [arm64] Enable REGULATOR_FAN53555 as a module, enabling cpufreq to
+    work on rk3399 A72 cores.
+  * [arm64] Apply patch from linux-next to fix eMMC corruption on
+    Odroid-C2 (Closes: #879072).
+
+  [ Salvatore Bonaccorso ]
+  * mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl()
+    (CVE-2018-8087)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 20 Mar 2018 09:31:07 +0100
+
+linux (4.15.4-1) unstable; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.15
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.1
+    - Bluetooth: hci_serdev: Init hci_uart proto_lock to avoid oops
+    - tools/gpio: Fix build error with musl libc
+    - gpio: stmpe: i2c transfer are forbiden in atomic context
+    - gpio: Fix kernel stack leak to userspace
+    - scsi: storvsc: missing error code in storvsc_probe()
+    - staging: lustre: separate a connection destroy from free struct kib_conn
+    - staging: ccree: NULLify backup_info when unused
+    - staging: ccree: fix fips event irq handling build
+    - usb: option: Add support for FS040U modem
+    - serial: 8250_dw: Revert "Improve clock rate setting"
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.2
+    - [x86] KVM: Make indirect calls in emulator speculation safe
+    - [x86] KVM: VMX: Make indirect call speculation safe
+    - module/retpoline: Warn about missing retpoline in module
+    - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf
+    - [x86] cpufeatures: Add Intel feature bits for Speculation Control
+    - [x86] cpufeatures: Add AMD feature bits for Speculation Control
+    - [x86] msr: Add definitions for new speculation control MSRs
+    - [x86] pti: Do not enable PTI on CPUs which are not vulnerable to
+      Meltdown
+    - [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2
+      microcodes
+    - [x86] speculation: Add basic IBPB (Indirect Branch Prediction Barrier)
+      support
+    - [x86] alternative: Print unadorned pointers
+    - [x86] nospec: Fix header guards names
+    - [x86] bugs: Drop one "mitigation" from dmesg
+    - [x86] cpu/bugs: Make retpoline module warning conditional
+    - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags
+    - [x86] retpoline: Simplify vmexit_fill_RSB()
+    - [x86] speculation: Simplify indirect_branch_prediction_barrier()
+    - [x86] KVM: nVMX: Eliminate vmcs02 pool
+    - [x86] KVM: VMX: introduce alloc_loaded_vmcs
+    - objtool: Improve retpoline alternative handling
+    - objtool: Add support for alternatives at the end of a section
+    - objtool: Warn on stripped section symbol
+    - [x86] mm: Fix overlap of i386 CPU_ENTRY_AREA with FIX_BTMAP
+    - [x86] spectre: Check CONFIG_RETPOLINE in command line parser
+    - [x86] entry/64: Remove the SYSCALL64 fast path
+    - [x86] entry/64: Push extra regs right away
+    - [x86] asm: Move 'status' from thread_struct to thread_info
+    - Documentation: Document array_index_nospec
+    - array_index_nospec: Sanitize speculative array de-references
+    - [x86] Implement array_index_mask_nospec
+    - [x86] Introduce barrier_nospec
+    - [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec
+    - [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end}
+    - [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec
+    - [x86] get_user: Use pointer masking to limit speculation
+    - [x86] syscall: Sanitize syscall table de-references under speculation
+    - vfs, fdtable: Prevent bounds-check bypass via speculative execution
+    - nl80211: Sanitize array index in parse_txq_params
+    - [x86] spectre: Report get_user mitigation for spectre_v1
+    - [x86] spectre: Fix spelling mistake: "vunerable"-> "vulnerable"
+    - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel
+    - [x86] speculation: Use Indirect Branch Prediction Barrier in context
+      switch
+    - [x86] paravirt: Remove 'noreplace-paravirt' cmdline option
+    - [x86] KVM: VMX: make MSR bitmaps per-VCPU
+    - [x86] kvm: Update spectre-v1 mitigation
+    - [x86] retpoline: Avoid retpolines for built-in __init functions
+    - [x86] spectre: Simplify spectre_v2 command line parsing
+    - [x86] pti: Mark constant arrays as __initconst
+    - [x86] speculation: Fix typo IBRS_ATT, which should be IBRS_ALL
+    - [x86] KVM: Update the reverse_cpuid list to include CPUID_7_EDX
+    - [x86] KVM: Add IBPB support
+    - [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
+    - [x86] KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL
+    - [x86] KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL
+    - serial: core: mark port as initialized after successful IRQ change
+    - fpga: region: release of_parse_phandle nodes after use
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.3
+    - ip6mr: fix stale iterator
+    - net: igmp: add a missing rcu locking section
+    - qlcnic: fix deadlock bug
+    - qmi_wwan: Add support for Quectel EP06
+    - r8169: fix RTL8168EP take too long to complete driver initialization.
+    - tcp: release sk_frag.page in tcp_disconnect
+    - vhost_net: stop device during reset owner
+    - ipv6: addrconf: break critical section in addrconf_verify_rtnl()
+    - ipv6: change route cache aging logic
+    - Revert "defer call to mem_cgroup_sk_alloc()"
+    - net: ipv6: send unsolicited NA after DAD
+    - rocker: fix possible null pointer dereference in
+      rocker_router_fib_event_work
+    - tcp_bbr: fix pacing_gain to always be unity when using lt_bw
+    - cls_u32: add missing RCU annotation.
+    - ipv6: Fix SO_REUSEPORT UDP socket with implicit sk_ipv6only
+    - soreuseport: fix mem leak in reuseport_add_sock()
+    - net_sched: get rid of rcu_barrier() in tcf_block_put_ext()
+    - net: sched: fix use-after-free in tcf_block_put_ext
+    - crypto: tcrypt - fix S/G table for test_aead_speed()
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.4
+    - cifs: Fix missing put_xid in cifs_file_strict_mmap
+    - cifs: Fix autonegotiate security settings mismatch
+    - CIFS: zero sensitive data when freeing
+    - cpufreq: mediatek: add mediatek related projects into blacklist
+    - [arm64] watchdog: gpio_wdt: set WDOG_HW_RUNNING in gpio_wdt_stop
+    - Revert "drm/i915: mark all device info struct with __initconst"
+    - sched/rt: Use container_of() to get root domain in
+      rto_push_irq_work_func()
+    - sched/rt: Up the root domain ref count when passing it around via IPIs
+    - [arm64] mm: Use non-global mappings for kernel space
+    - [arm64] mm: Temporarily disable ARM64_SW_TTBR0_PAN
+    - [arm64] mm: Move ASID from TTBR0 to TTBR1
+    - [arm64] mm: Remove pre_ttbr0_update_workaround for Falkor erratum #E1003
+    - [arm64] mm: Rename post_ttbr0_update_workaround
+    - [arm64] mm: Fix and re-enable ARM64_SW_TTBR0_PAN
+    - [arm64] mm: Allocate ASIDs in pairs
+    - [arm64] mm: Add arm64_kernel_unmapped_at_el0 helper
+    - [arm64] mm: Invalidate both kernel and user ASIDs when performing TLBI
+    - [arm64] entry: Add exception trampoline page for exceptions from EL0
+    - [arm64] mm: Map entry trampoline into trampoline and kernel page tables
+    - [arm64] entry: Explicitly pass exception level to kernel_ventry macro
+    - [arm64] entry: Hook up entry trampoline to exception vectors
+    - [arm64] erratum: Work around Falkor erratum #E1003 in trampoline code
+    - [arm64] cpu_errata: Add Kryo to Falkor 1003 errata
+    - [arm64] tls: Avoid unconditional zeroing of tpidrro_el0 for native tasks
+    - [arm64] entry: Add fake CPU feature for unmapping the kernel at EL0
+    - [arm64] kaslr: Put kernel vectors address in separate data page
+    - [arm64] use RET instruction for exiting the trampoline
+    - [arm64] Kconfig: Add CONFIG_UNMAP_KERNEL_AT_EL0
+    - [arm64] Kconfig: Reword UNMAP_KERNEL_AT_EL0 kconfig entry
+    - [arm64] Take into account ID_AA64PFR0_EL1.CSV3
+    - [arm64] capabilities: Handle duplicate entries for a capability
+    - [arm64] mm: Introduce TTBR_ASID_MASK for getting at the ASID in the TTBR
+    - [arm64] kpti: Fix the interaction between ASID switching and software PAN
+    - [arm64] cputype: Add MIDR values for Cavium ThunderX2 CPUs
+    - [arm64] Turn on KPTI only on CPUs that need it
+    - [arm64] kpti: Make use of nG dependent on arm64_kernel_unmapped_at_el0()
+    - [arm64] mm: Permit transitioning from Global to Non-Global without BBM
+    - [arm64] kpti: Add ->enable callback to remap swapper using nG mappings
+    - [arm64] Force KPTI to be disabled on Cavium ThunderX
+    - [arm64] entry: Reword comment about post_ttbr_update_workaround
+    - [arm64] idmap: Use "awx" flags for .idmap.text .pushsection directives
+    - [arm64] barrier: Add CSDB macros to control data-value prediction
+    - [arm64] Implement array_index_mask_nospec()
+    - [arm64] Make USER_DS an inclusive limit
+    - [arm64] Use pointer masking to limit uaccess speculation
+    - [arm64] entry: Ensure branch through syscall table is bounded under
+      speculation
+    - [arm64] uaccess: Prevent speculative use of the current addr_limit
+    - [arm64] uaccess: Don't bother eliding access_ok checks in __{get,
+      put}_user
+    - [arm64] uaccess: Mask __user pointers for __arch_{clear, copy_*}_user
+    - [arm64] futex: Mask __user pointers prior to dereference
+    - [arm64] cpufeature: __this_cpu_has_cap() shouldn't stop early
+    - [arm64] Run enable method for errata work arounds on late CPUs
+    - [arm64] cpufeature: Pass capability structure to ->enable callback
+    - drivers/firmware: Expose psci_get_version through psci_ops structure
+    - [arm64] Move post_ttbr_update_workaround to C code
+    - [arm64] Add skeleton to harden the branch predictor against aliasing
+      attacks
+    - [arm64] Move BP hardening to check_and_switch_context
+    - [arm64] KVM: Use per-CPU vector when BP hardening is enabled
+    - [arm64] entry: Apply BP hardening for high-priority synchronous
+      exceptions
+    - [arm64] entry: Apply BP hardening for suspicious interrupts from EL0
+    - [arm64] cputype: Add missing MIDR values for Cortex-A72 and Cortex-A75
+    - [arm64] Implement branch predictor hardening for affected Cortex-A CPUs
+    - [arm64] Implement branch predictor hardening for Falkor
+    - [arm64] Branch predictor hardening for Cavium ThunderX2
+    - [arm64] KVM: Increment PC after handling an SMC trap
+    - [armhf,arm64] KVM: Consolidate the PSCI include files
+    - [armhf,arm64] KVM: Add PSCI_VERSION helper
+    - [armhf,arm64] KVM: Add smccc accessors to PSCI code
+    - [armhf,arm64] KVM: Implement PSCI 1.0 support
+    - [armhf,arm64] KVM: Advertise SMCCC v1.1
+    - [arm64] KVM: Make PSCI_VERSION a fast path
+    - [armhf,arm64] KVM: Turn kvm_psci_version into a static inline
+    - [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support
+    - [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling
+    - firmware/psci: Expose PSCI conduit
+    - firmware/psci: Expose SMCCC version through psci_ops
+    - arm/arm64: smccc: Make function identifiers an unsigned quantity
+    - arm/arm64: smccc: Implement SMCCC v1.1 inline primitive
+    - [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support
+    - [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround
+    - mtd: cfi: convert inline functions to macros
+    - mtd: nand: brcmnand: Disable prefetch by default
+    - mtd: nand: Fix nand_do_read_oob() return value
+    - mtd: nand: sunxi: Fix ECC strength choice
+    - ubi: Fix race condition between ubi volume creation and udev
+    - ubi: fastmap: Erase outdated anchor PEBs during attach
+    - ubi: block: Fix locking for idr_alloc/idr_remove
+    - ubifs: free the encrypted symlink target
+    - nfs/pnfs: fix nfs_direct_req ref leak when i/o falls back to the mds
+    - nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE
+    - NFS: Add a cond_resched() to nfs_commit_release_pages()
+    - NFS: Fix nfsstat breakage due to LOOKUPP
+    - NFS: commit direct writes even if they fail partially
+    - NFS: reject request for id_legacy key without auxdata
+    - NFS: Fix a race between mmap() and O_DIRECT
+    - nfsd: Detect unhashed stids in nfsd4_verify_open_stid()
+    - kernfs: fix regression in kernfs_fop_write caused by wrong type
+    - ahci: Annotate PCI ids for mobile Intel chipsets as such
+    - ahci: Add PCI ids for Intel Bay Trail, Cherry Trail and Apollo Lake AHCI
+    - ahci: Add Intel Cannon Lake PCH-H PCI ID
+    - crypto: hash - introduce crypto_hash_alg_has_setkey()
+    - crypto: cryptd - pass through absence of ->setkey()
+    - crypto: mcryptd - pass through absence of ->setkey()
+    - crypto: poly1305 - remove ->setkey() method
+    - crypto: hash - annotate algorithms taking optional key
+    - crypto: hash - prevent using keyed hashes without setting key
+    - media: v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt
+    - media: v4l2-ioctl.c: don't copy back the result for -ENOTTY
+    - media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF
+    - media: v4l2-compat-ioctl32.c: fix the indentation
+    - media: v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32
+    - media: v4l2-compat-ioctl32.c: avoid sizeof(type)
+    - media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32
+    - media: v4l2-compat-ioctl32.c: fix ctrl_is_pointer
+    - media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32
+    - media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type
+    - media: v4l2-compat-ioctl32.c: don't copy back the result for certain errors
+    - media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic
+    - media: v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs
+    - crypto: caam - fix endless loop when DECO acquire fails
+    - crypto: sha512-mb - initialize pending lengths correctly
+    - crypto: talitos - fix Kernel Oops on hashing an empty file
+    - [armhf,arm64 KVM: Fix SMCCC handling of unimplemented SMC/HVC calls
+    - [x86] KVM: nVMX: Fix races when sending nested PI while dest
+      enters/leaves L2
+    - [x86] KVM: nVMX: Fix bug of injecting L2 exception into L1
+    - [powerpc*] KVM: PPC: Book3S HV: Make sure we don't re-enter guest
+      without XIVE loaded
+    - [powerpc*] KVM: PPC: Book3S HV: Drop locks before reading guest memory
+    - [armhf,arm64] KVM: Handle CPU_PM_ENTER_FAILED
+    - [powerpc*] KVM: PPC: Book3S PR: Fix broken select due to misspelling
+    - watchdog: imx2_wdt: restore previous timeout after suspend+resume
+    - afs: Add missing afs_put_cell()
+    - afs: Need to clear responded flag in addr cursor
+    - afs: Fix missing cursor clearance
+    - afs: Fix server list handling
+    - btrfs: Handle btrfs_set_extent_delalloc failure in fixup worker
+    - Btrfs: raid56: iterate raid56 internal bio with bio_for_each_segment_all
+    - kasan: don't emit builtin calls when sanitization is off
+    - kasan: rework Kconfig settings
+    - media: dvb_frontend: be sure to init dvb_frontend_handle_ioctl() return
+      code
+    - media: dvb-frontends: fix i2c access helpers for KASAN
+    - media: dt-bindings/media/cec-gpio.txt: mention the CEC/HPD max voltages
+    - media: ts2020: avoid integer overflows on 32 bit machines
+    - media: vivid: fix module load error when enabling fb and no_error_inj=1
+    - media: cxusb, dib0700: ignore XC2028_I2C_FLUSH
+    - fs/proc/kcore.c: use probe_kernel_read() instead of memcpy()
+    - kernel/async.c: revert "async: simplify lowest_in_progress()"
+    - kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
+    - pipe: actually allow root to exceed the pipe buffer limits
+    - pipe: fix off-by-one error when checking buffer limits
+    - HID: quirks: Fix keyboard + touchpad on Toshiba Click Mini not working
+    - Bluetooth: btsdio: Do not bind to non-removable BCM43341
+    - Revert "Bluetooth: btusb: fix QCA Rome suspend/resume"
+    - Bluetooth: btusb: Restore QCA Rome suspend/resume fix with a "rewritten"
+      version
+    - ipmi: use dynamic memory for DMI driver override
+    - signal/openrisc: Fix do_unaligned_access to send the proper signal
+    - signal/sh: Ensure si_signo is initialized in do_divide_error
+    - alpha: fix crash if pthread_create races with signal delivery
+    - alpha: osf_sys.c: fix put_tv32 regression
+    - alpha: Fix mixed up args in EXC macro in futex operations
+    - alpha: fix reboot on Avanti platform
+    - alpha: fix formating of stack content
+    - xtensa: fix futex_atomic_cmpxchg_inatomic
+    - EDAC, octeon: Fix an uninitialized variable warning
+    - genirq: Make legacy autoprobing work again
+    - pinctrl: intel: Initialize GPIO properly when used through irqchip
+    - pinctrl: mcp23s08: fix irq setup order
+    - pinctrl: sx150x: Unregister the pinctrl on release
+    - pinctrl: sx150x: Register pinctrl before adding the gpiochip
+    - pinctrl: sx150x: Add a static gpio/pinctrl pin range mapping
+    - pktcdvd: Fix pkt_setup_dev() error path
+    - pktcdvd: Fix a recently introduced NULL pointer dereference
+    - blk-mq: quiesce queue before freeing queue
+    - clocksource/drivers/stm32: Fix kernel panic with multiple timers
+    - lib/ubsan.c: s/missaligned/misaligned/
+    - lib/ubsan: add type mismatch handler for new GCC/Clang
+    - objtool: Fix switch-table detection
+    - [arm64] dts: marvell: add Ethernet aliases
+    - drm/i915: Avoid PPS HW/SW state mismatch due to rounding
+    - ACPI: sbshc: remove raw pointer from printk() message (CVE-2018-5750)
+    - acpi, nfit: fix register dimm error handling
+    - ovl: force r/o mount when index dir creation fails
+    - ovl: fix failure to fsync lower dir
+    - ovl: take mnt_want_write() for work/index dir setup
+    - ovl: take mnt_want_write() for removing impure xattr
+    - ovl: hash directory inodes for fsnotify
+    - devpts: fix error handling in devpts_mntget()
+    - ftrace: Remove incorrect setting of glob search field
+    - scsi: core: Ensure that the SCSI error handler gets woken up
+    - scsi: lpfc: Fix crash after bad bar setup on driver attachment
+    - scsi: cxlflash: Reset command ioasc
+    - rcu: Export init_rcu_head() and destroy_rcu_head() to GPL modules
+
+  [ Bastian Blank ]
+  * Add cloud-amd64 kernel flavour.
+    - Support Microsoft Azure.
+    - Support Amazon EC2.
+    - Support Google Compute Engine.
+  * Enable NUMA_BALANCING_DEFAULT_ENABLED, enabled by all others.
+  * Enable INET_ESP_OFFLOAD, INET6_ESP_OFFLOAD, IPV6_SEG6_LWTUNNEL,
+    IPV6_SEG6_HMAC, NF_LOG_NETDEV, IP_SET_HASH_IPMAC, NET_ACT_SAMPLE,
+    IPVTAP, VIRTIO_MMIO, CRYPTO_RSA, CRYPTO_DH, CRYPTO_ECDH.
+  * x86: Enable SCHED_MC_PRIO, HYPERV_VSOCKETS.
+  * Enable NVME_MULTIPATH, NVME_FC, NVME_TARGET_FC, move nvme module into
+    scsi-modules installer udeb.
+  * Switch to SLUB as kernel allocator. (Closes: #862718)
+    - Enable SLUB_DEBUG, SLAB_FREELIST_HARDENED except on armel/marvell.
+      (Closes: #883069)
+  * Fix building of liblockdep.
+
+  [ Uwe Kleine-König ]
+  * [arm64] enable I2C_PXA for espressobin (Closes: #886983)
+
+  [ Ben Hutchings ]
+  * Enable CGROUP_BPF (except for armel) (Closes: #872560)
+  * usb: Enable USBIP_CORE, USBIP_VHCI_HCD, USBIP_HOST, USBIP_VUDC as
+    modules on all architectures (Closes: #888042)
+  * [x86] Rewrite "Make x32 syscall support conditional on a kernel parameter"
+    to use a static key
+
+  [ Salvatore Bonaccorso ]
+  * (Temporarily) disable armel kernel image build.
+    The armel/marvell kernel size is growing to large and the compressed
+    image is over the limit.
+    Given the armel architecture will most likely not be part of Buster,
+    disable the image build.
+    Cf. https://lists.debian.org/debian-kernel/2018/01/msg00278.html
+  * Set ABI to 1
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 18 Feb 2018 09:36:49 +0100
+
+linux (4.15~rc8-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+    - RDS: Heap OOB write in rds_message_alloc_sgs() (CVE-2018-5332)
+    - RDS: null pointer dereference in rds_atomic_free_op (CVE-2018-5333)
+    - loop: fix concurrent lo_open/lo_release (CVE-2018-5344)
+
+  [ Ben Hutchings ]
+  * [arm64] Update "add kernel config option to lock down when in Secure Boot
+    mode" for 4.15
+  * efi: Enable LOCK_DOWN_IN_EFI_SECURE_BOOT, replacing
+    EFI_SECURE_BOOT_LOCK_DOWN
+  * iio: Enable AD5446 as module, replacing TI_DAC7512
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 15 Jan 2018 04:43:14 +0000
+
+linux (4.15~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Riku Voipio ]
+  * [arm64] udeb: add multifunction devices
+  * [arm64] udeb: add mvebu comphy for armada 8K
+
+  [ Ben Hutchings ]
+  * aufs: Update support patchset to aufs4.x-rcN-20171218
+  * lockdown: Update patchset to 2017-11-10 version
+  * lockdown: Update calls to kernel_is_locked_down() in "mtd: Disable slram and
+    phram when locked down"
+  * cpupower: Move library to multiarch directory
+  * [rt] Disable until it is updated for 4.15 or later
+  * linux-kbuild: Add objtool
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 27 Dec 2017 02:48:14 +0000
+
+linux (4.14.17-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.14
+    - dm bufio: fix shrinker scans when (nr_to_scan < retain_target)
+    - can: gs_usb: fix return value of the "set_bittiming" callback
+    - IB/srpt: Disable RDMA access by the initiator
+    - IB/srpt: Fix ACL lookup during login
+    - [mips*] Validate PR_SET_FP_MODE prctl(2) requests against the ABI of the
+      task
+    - [mips*] Factor out NT_PRFPREG regset access helpers
+    - [mips*] Guard against any partial write attempt with PTRACE_SETREGSET
+    - [mips*] Consistently handle buffer counter with PTRACE_SETREGSET
+    - [mips*] Fix an FCSR access API regression with NT_PRFPREG and MSA
+    - [mips*] Also verify sizeof `elf_fpreg_t' with PTRACE_SETREGSET
+    - [mips*] Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accesses
+    - cgroup: fix css_task_iter crash on CSS_TASK_ITER_PROC (Closes: #888954)
+    - [x86] kvm: vmx: Scrub hardware GPRs at VM-exit (partial mitigation of
+      CVE-2017-5715, CVE-2017-5753)
+    - [x86] platform: wmi: Call acpi_wmi_init() later
+    - iw_cxgb4: only call the cq comp_handler when the cq is armed
+    - iw_cxgb4: atomically flush the qp
+    - iw_cxgb4: only clear the ARMED bit if a notification is needed
+    - iw_cxgb4: reflect the original WR opcode in drain cqes
+    - iw_cxgb4: when flushing, complete all wrs in a chain
+    - [x86] acpi: Handle SCI interrupts above legacy space gracefully
+    - ALSA: pcm: Remove incorrect snd_BUG_ON() usages
+    - ALSA: pcm: Workaround for weird PulseAudio behavior on rewind error
+    - ALSA: pcm: Add missing error checks in OSS emulation plugin builder
+    - ALSA: pcm: Abort properly at pending signal in OSS read/write loops
+    - ALSA: pcm: Allow aborting mutex lock at OSS read/write loops
+    - ALSA: aloop: Release cable upon open error path
+    - ALSA: aloop: Fix inconsistent format due to incomplete rule
+    - ALSA: aloop: Fix racy hw constraints adjustment
+    - [x86] acpi: Reduce code duplication in mp_override_legacy_irq()
+    - 8021q: fix a memory leak for VLAN 0 device
+    - ip6_tunnel: disable dst caching if tunnel is dual-stack
+    - net: core: fix module type in sock_diag_bind
+    - RDS: Heap OOB write in rds_message_alloc_sgs() (CVE-2018-5332)
+    - RDS: null pointer dereference in rds_atomic_free_op (CVE-2018-5333)
+    - net: fec: restore dev_id in the cases of probe error
+    - net: fec: defer probe if regulator is not ready
+    - net: fec: free/restore resource in related probe error pathes
+    - sctp: do not retransmit upon FragNeeded if PMTU discovery is disabled
+    - sctp: fix the handling of ICMP Frag Needed for too small MTUs
+    - [arm64, armhf] net: stmmac: enable EEE in MII, GMII or RGMII only
+    - ipv6: fix possible mem leaks in ipv6_make_skb()
+    - net/sched: Fix update of lastuse in act modules implementing
+      stats_update
+    - ipv6: sr: fix TLVs not being copied using setsockopt
+    - sfp: fix sfp-bus oops when removing socket/upstream
+    - membarrier: Disable preemption when calling smp_call_function_many()
+    - crypto: algapi - fix NULL dereference in crypto_remove_spawns()
+    - rbd: reacquire lock should update lock owner client id
+    - rbd: set max_segments to USHRT_MAX
+    - iwlwifi: pcie: fix DMA memory mapping / unmapping
+    - [x86] microcode/intel: Extend BDW late-loading with a revision check
+    - [x86] KVM: Add memory barrier on vmcs field lookup
+    - [powerpc*] KVM: Book3S PR: Fix WIMG handling under pHyp
+    - [powerpc*] KVM: Book3S HV: Drop prepare_done from struct kvm_resize_hpt
+    - [powerpc*] KVM: Book3S HV: Fix use after free in case of multiple resize
+      requests
+    - [powerpc*] KVM: Book3S HV: Always flush TLB in kvmppc_alloc_reset_hpt()
+    - [x86] drm/vmwgfx: Don't cache framebuffer maps
+    - [x86] drm/vmwgfx: Potential off by one in vmw_view_add()
+    - [x86] drm/i915/gvt: Clear the shadow page table entry after post-sync
+    - [x86] drm/i915: Whitelist SLICE_COMMON_ECO_CHICKEN1 on Geminilake.
+    - [x86] drm/i915: Move init_clock_gating() back to where it was
+    - [x86] drm/i915: Fix init_clock_gating for resume
+    - bpf: prevent out-of-bounds speculation (partial mitigation of
+      CVE-2017-5753)
+    - bpf, array: fix overflow in max_entries and undefined behavior in
+      index_mask
+    - bpf: arsh is not supported in 32 bit alu thus reject it
+    - [arm64, armhf] usb: misc: usb3503: make sure reset is low for at least
+      100us
+    - USB: fix usbmon BUG trigger
+    - USB: UDC core: fix double-free in usb_add_gadget_udc_release
+    - usbip: remove kernel addresses from usb device and urb debug msgs
+    - usbip: fix vudc_rx: harden CMD_SUBMIT path to handle malicious input
+    - usbip: vudc_tx: fix v_send_ret_submit() vulnerability to null xfer
+      buffer
+    - staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl
+      (CVE-2017-13216)
+    - mux: core: fix double get_device()
+    - kdump: write correct address of mem_section into vmcoreinfo
+    - apparmor: fix ptrace label match when matching stacked labels
+    - [x86] pti: Unbreak EFI old_memmap
+    - [x86] Documentation: Add PTI description
+    - [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12]
+    - sysfs/cpu: Add vulnerability folder
+    - [x86] cpu: Implement CPU vulnerabilites sysfs functions
+    - [x86] tboot: Unbreak tboot with PTI enabled
+    - [x86] mm/pti: Remove dead logic in pti_user_pagetable_walk*()
+    - [x86] cpu/AMD: Make LFENCE a serializing instruction
+    - [x86] cpu/AMD: Use LFENCE_RDTSC in preference to MFENCE_RDTSC
+    - [x86] alternatives: Fix optimize_nops() checking
+    - [x86] pti: Make unpoison of pgd for trusted boot work for real
+    - [x86] retpoline: Add initial retpoline support (partial mitigation of
+      CVE-2017-5715)
+    - [x86] spectre: Add boot time option to select Spectre v2 mitigation
+    - [x86] retpoline/crypto: Convert crypto assembler indirect jumps
+    - [x86] retpoline/entry: Convert entry assembler indirect jumps
+    - [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps
+    - [x86] retpoline/hyperv: Convert assembler indirect jumps
+    - [x86] retpoline/xen: Convert Xen hypercall indirect jumps
+    - [x86] retpoline/checksum32: Convert assembler indirect jumps
+    - [x86] retpoline/irq32: Convert assembler indirect jumps
+    - [x86] retpoline: Fill return stack buffer on vmexit
+    - [x86] pti: Fix !PCID and sanitize defines
+    - [x86] perf: Disable intel_bts when PTI
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.15
+    - tools/objtool/Makefile: don't assume sync-check.sh is executable
+    - objtool: Fix seg fault with clang-compiled objects
+    - objtool: Fix Clang enum conversion warning
+    - objtool: Fix seg fault caused by missing parameter
+    - [powerpc*] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper
+    - [powerpc*] 64: Add macros for annotating the destination of rfid/hrfid
+    - [powerpc*] 64s: Simple RFI macro conversions
+    - [powerpc*] 64: Convert the syscall exit path to use RFI_TO_USER/KERNEL
+    - [powerpc*] 64: Convert fast_exception_return to use RFI_TO_USER/KERNEL
+    - [powerpc*] 64s: Convert slb_miss_common to use RFI_TO_USER/KERNEL
+    - [powerpc*] 64s: Add support for RFI flush of L1-D cache
+    - [powerpc*] 64s: Support disabling RFI flush with no_rfi_flush and nopti
+    - [powerpc*] pseries: Query hypervisor for RFI flush settings
+    - [powerpc*] powernv: Check device-tree for RFI flush settings
+    - futex: Avoid violating the 10th rule of futex
+    - futex: Prevent overflow by strengthen input validation (CVE-2018-6927)
+    - ALSA: seq: Make ioctls race-free (CVE-2018-1000004)
+    - ALSA: pcm: Remove yet superfluous WARN_ON()
+    - ALSA: hda - Apply headphone noise quirk for another Dell XPS 13 variant
+    - ALSA: hda - Apply the existing quirk to iMac 14,1
+    - IB/hfi1: Prevent a NULL dereference
+    - RDMA/mlx5: Fix out-of-bound access while querying AH
+    - timers: Unconditionally check deferrable base
+    - af_key: fix buffer overread in verify_address_len()
+    - af_key: fix buffer overread in parse_exthdrs()
+    - iser-target: Fix possible use-after-free in connection establishment
+      error
+    - delayacct: Account blkio completion on the correct task
+    - objtool: Fix seg fault with gold linker
+    - [armhf] mmc: sdhci-esdhc-imx: Fix i.MX53 eSDHCv3 clock
+    - [x86] kasan: Panic if there is not enough memory to boot
+    - [x86] retpoline: Fill RSB on context switch for affected CPUs
+    - [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros
+    - objtool: Improve error message for bad file argument
+    - [x86] cpufeature: Move processor tracing out of scattered features
+    - [x86] intel_rdt/cqm: Prevent use after free
+    - [x86] mm/pkeys: Fix fill_sig_info_pkey
+    - [x86] idt: Mark IDT tables __initconst
+    - [x86] tsc: Future-proof native_calibrate_tsc()
+    - [x86] tsc: Fix erroneous TSC rate on Skylake Xeon
+    - pipe: avoid round_pipe_size() nr_pages overflow on 32-bit
+    - [x86] apic/vector: Fix off by one in error path
+    - [x86] mm: Clean up register saving in the __enc_copy() assembly code
+    - [x86] mm: Use a struct to reduce parameters for SME PGD mapping
+    - [x86] mm: Centralize PMD flags in sme_encrypt_kernel()
+    - [x86] mm: Prepare sme_encrypt_kernel() for PAGE aligned encryption
+    - [armhf] OMAP3: hwmod_data: add missing module_offs for MMC3
+    - [x86] mm: Encrypt the initrd earlier for BSP microcode update
+    - Input: ALPS - fix multi-touch decoding on SS4 plus touchpads
+    - Input: synaptics-rmi4 - prevent UAF reported by KASAN
+    - [armhf] Input: twl6040-vibra - fix child-node lookup
+    - [armhf] Input: twl4030-vibra - fix sibling-node lookup
+    - tracing: Fix converting enum's from the map in trace_event_eval_update()
+    - phy: work around 'phys' references to usb-nop-xceiv devices
+    - [arm64] dts: marvell: armada-cp110: Fix clock resources for various node
+    - [armhf] sunxi_defconfig: Enable CMA
+    - [armel] dts: kirkwood: fix pin-muxing of MPP7 on OpenBlocks A7
+    - can: peak: fix potential bug in packet fragmentation
+    - can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once
+    - can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once
+    - i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA
+    - proc: fix coredump vs read /proc/*/stat race
+    - libata: apply MAX_SEC_1024 to all LITEON EP1 series devices
+    - workqueue: avoid hard lockups in show_workqueue_state()
+    - [x86] drm/vmwgfx: fix memory corruption with legacy/sou connectors
+    - dm btree: fix serious bug in btree_split_beneath()
+    - dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6
+    - dm integrity: don't store cipher request on the stack
+    - dm crypt: fix crash by adding missing check for auth key size
+    - dm crypt: wipe kernel key copy after IV initialization
+    - dm crypt: fix error return code in crypt_ctr()
+    - [x86] x86: Use __nostackprotect for sme_encrypt_kernel
+    - [alpha] PCI: Fix noname IRQ level detection
+    - [mips*] CM: Drop WARN_ON(vp != 0)
+    - [arm*] KVM: Check pagesize when allocating a hugepage at Stage 2
+    - [arm64] KVM: Fix SMCCC handling of unimplemented SMC/HVC calls
+    - [x86] mce: Make machine check speculation protected
+    - retpoline: Introduce start/end markers of indirect thunk
+    - [x86] kprobes: Blacklist indirect thunk functions for kprobes
+    - [x86] kprobes: Disable optimizing on the function jumps to indirect
+      thunk
+    - [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB
+    - [x86] mm: Rework wbinvd, hlt operation in stop_this_cpu()
+    - mm, page_vma_mapped: Drop faulty pointer arithmetics in check_pte()
+    - [arm64, armhf] net: mvpp2: do not disable GMAC padding
+    - [mips]: AR7: ensure the port type's FCR value is used
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.16
+    - mm, page_alloc: fix potential false positive in __zone_watermark_ok
+    - xfrm: Fix a race in the xdst pcpu cache.
+    - Input: xpad - add support for PDP Xbox One controllers
+    - Input: trackpoint - force 3 buttons if 0 button is reported
+    - Input: trackpoint - only expose supported controls for Elan, ALPS and
+      NXP
+    - Btrfs: fix stale entries in readdir
+    - [s390x] KVM: add proper locking for CMMA migration bitmap
+    - [arm*] net: bpf: avoid 'bx' instruction on non-Thumb capable CPUs
+    - [arm*] net: bpf: fix tail call jumps
+    - [arm*] net: bpf: fix stack alignment
+    - [arm*] net: bpf: move stack documentation
+    - [arm*] net: bpf: correct stack layout documentation
+    - [arm*] net: bpf: fix register saving
+    - [arm*] net: bpf: fix LDX instructions
+    - [arm*] net: bpf: clarify tail_call index
+    - [arm64,armhf] drm/vc4: Fix NULL pointer dereference in
+      vc4_save_hang_state()
+    - net: Allow neigh contructor functions ability to modify the primary_key
+    - ipv4: Make neigh lookup keys for loopback/point-to-point devices be
+      INADDR_ANY
+    - dccp: don't restart ccid2_hc_tx_rto_expire() if sk in closed state
+    - ipv6: Fix getsockopt() for sockets with default IPV6_AUTOFLOWLABEL
+    - ipv6: fix udpv6 sendmsg crash caused by too small MTU
+    - ipv6: ip6_make_skb() needs to clear cork.base.dst
+    - lan78xx: Fix failure in USB Full Speed
+    - net: igmp: fix source address check for IGMPv3 reports
+    - net: qdisc_pkt_len_init() should be more robust
+    - net: tcp: close sock if net namespace is exiting
+    - net/tls: Fix inverted error codes to avoid endless loop
+    - net: vrf: Add support for sends to local broadcast address
+    - pppoe: take ->needed_headroom of lower device into account on xmit
+    - r8169: fix memory corruption on retrieval of hardware statistics.
+    - sctp: do not allow the v4 socket to bind a v4mapped v6 address
+    - sctp: return error if the asoc has been peeled off in
+      sctp_wait_for_sndbuf
+    - tipc: fix a memory leak in tipc_nl_node_get_link()
+    - {net,ib}/mlx5: Don't disable local loopback multicast traffic when
+      needed
+    - net/mlx5: Fix get vector affinity helper function
+    - ppp: unlock all_ppp_mutex before registering device
+    - be2net: restore properly promisc mode after queues reconfiguration
+    - ip6_gre: init dev->mtu and dev->hard_header_len correctly
+    - gso: validate gso_type in GSO handlers
+    - tun: fix a memory leak for tfile->tx_array
+    - flow_dissector: properly cap thoff field
+    - sctp: reinit stream if stream outcnt has been change by sinit in sendmsg
+    - netlink: extack needs to be reset each time through loop
+    - net/mlx5e: Fix fixpoint divide exception in mlx5e_am_stats_compare
+    - nfp: use the correct index for link speed table
+    - netlink: reset extack earlier in netlink_rcv_skb
+    - net/tls: Only attach to sockets in ESTABLISHED state
+    - tls: fix sw_ctx leak
+    - tls: return -EBUSY if crypto_info is already set
+    - tls: reset crypto_info when do_tls_setsockopt_tx fails
+    - net: ipv4: Make "ip route get" match iif lo rules again.
+    - vmxnet3: repair memory leak
+    - perf/x86/amd/power: Do not load AMD power module on !AMD platforms
+    - [x86] microcode/intel: Extend BDW late-loading further with LLC size
+      check
+    - [x86] microcode: Fix again accessing initrd after having been freed
+    - [x86] mm/64: Fix vmapped stack syncing on very-large-memory 4-level
+      systems
+    - hrtimer: Reset hrtimer cpu base proper on CPU hotplug
+    - bpf: introduce BPF_JIT_ALWAYS_ON config
+    - bpf: fix divides by zero
+    - bpf: fix 32-bit divide by zero
+    - bpf: reject stores into ctx via st and xadd
+    - [arm64] bpf: fix stack_depth tracking in combination with tail calls
+    - cpufreq: governor: Ensure sufficiently large sampling intervals
+    - nfsd: auth: Fix gid sorting when rootsquash enabled (CVE-2018-1000028)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.17
+    - futex: Fix OWNER_DEAD fixup
+    - loop: fix concurrent lo_open/lo_release (CVE-2018-5344)
+    - [x86] KVM: Fix CPUID function for word 6 (80000001_ECX)
+    - gpio: Fix kernel stack leak to userspace
+    - ALSA: hda - Reduce the suspend time consumption for ALC256
+    - crypto: ecdh - fix typo in KPP dependency of CRYPTO_ECDH
+    - [x86] crypto: aesni - handle zero length dst buffer
+    - [x86] crypto: aesni - fix typo in generic_gcmaes_decrypt
+    - crypto: gcm - add GCM IV size constant
+    - [x86] crypto: aesni - Use GCM IV size constant
+    - [x86] crypto: aesni - add wrapper for generic gcm(aes)
+    - [x86] crypto: aesni - Fix out-of-bounds access of the data buffer in
+      generic-gcm-aesni
+    - [x86] crypto: aesni - Fix out-of-bounds access of the AAD buffer in
+      generic-gcm-aesni
+    - [arm64] crypto: inside-secure - fix hash when length is a multiple of a
+      block
+    - [arm64] crypto: inside-secure - avoid unmapping DMA memory that was not
+      mapped
+    - crypto: sha3-generic - fixes for alignment and big endian operation
+    - crypto: af_alg - whitelist mask and type
+    - HID: wacom: EKR: ensure devres groups at higher indexes are released
+    - HID: wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE)
+      events
+    - igb: Free IRQs when device is hotplugged
+    - ima/policy: fix parsing of fsuuid
+    - scsi: aacraid: Fix udev inquiry race condition
+    - scsi: aacraid: Fix hang in kdump
+    - VFS: Handle lazytime in do_mount()
+    - [arm64,armhf] drm/vc4: Account for interrupts in flight
+    - btrfs: Fix transaction abort during failure in btrfs_rm_dev_item
+    - Btrfs: bail out gracefully rather than BUG_ON
+    - cpupowerutils: bench - Fix cpu online check
+    - cpupower : Fix cpupower working when cpu0 is offline
+    - [x86] KVM: nVMX/nSVM: Don't intercept #UD when running L2
+    - [x86] KVM: emulator: Return to user-mode on L1 CPL=0 emulation failure
+    - [x86] KVM: Don't re-execute instruction when not passing CR2 value
+    - [x86] KVM: Fix operand/address-size during instruction decoding
+    - [x86] KVM: nVMX: Fix mmu context after VMLAUNCH/VMRESUME failure
+    - [x86] KVM: fix em_fxstor() sleeping while in atomic
+    - [x86] KVM: ioapic: Fix level-triggered EOI and IOAPIC reconfigure race
+    - [x86] KVM: ioapic: Clear Remote IRR when entry is switched to
+      edge-triggered
+    - [x86] KVM: ioapic: Preserve read-only values in the redirection table
+    - [x86] KVM: nVMX: Fix vmx_check_nested_events() return value in case an
+      event was reinjected to L2
+    - nvme-fabrics: introduce init command check for a queue that is not alive
+    - nvme-fc: check if queue is ready in queue_rq
+    - nvme-loop: check if queue is ready in queue_rq
+    - nvme-pci: disable APST on Samsung SSD 960 EVO + ASUS PRIME B350M-A
+    - nvme-pci: avoid hmb desc array idx out-of-bound when hmmaxd set.
+    - nvmet-fc: correct ref counting error when deferred rcv used
+    - [s390x] topology: fix compile error in file arch/s390/kernel/smp.c
+    - [s390x] zcrypt: Fix wrong comparison leading to strange load balancing
+    - ACPI / bus: Leave modalias empty for devices which are not present
+    - null_blk: fix dev->badblocks leak
+    - [s390x] fix alloc_pgste check in init_new_context again
+    - rxrpc: The mutex lock returned by rxrpc_accept_call() needs releasing
+    - rxrpc: Provide a different lockdep key for call->user_mutex for kernel
+      calls
+    - rxrpc: Fix service endpoint expiry
+    - bcache: check return value of register_shrinker
+    - drm/amdgpu: Fix SDMA load/unload sequence on HWS disabled mode
+    - [x86] drm/amdkfd: Fix SDMA ring buffer size calculation
+    - [x86] drm/amdkfd: Fix SDMA oversubsription handling
+    - uapi: fix linux/kfd_ioctl.h userspace compilation errors
+    - nvme-rdma: don't complete requests before a send work request has
+      completed
+    - openvswitch: fix the incorrect flow action alloc size
+    - [armhf] drm/rockchip: dw-mipi-dsi: fix possible un-balanced runtime PM
+      enable
+    - mac80211: use QoS NDP for AP probing
+    - mac80211: fix the update of path metric for RANN frame
+    - btrfs: fix deadlock when writing out space cache
+    - sctp: only allow the asoc reset when the asoc outq is empty
+    - sctp: avoid flushing unsent queue when doing asoc reset
+    - sctp: set sender next_tsn for the old result with ctsn_ack_point plus 1
+    - reiserfs: remove unneeded i_version bump
+    - [x86] KVM: Fix softlockup when get the current kvmclock
+    - [x86] KVM: VMX: Fix rflags cache during vCPU reset
+    - Btrfs: fix list_add corruption and soft lockups in fsync
+    - KVM: Let KVM_SET_SIGNAL_MASK work as advertised
+    - xfs: always free inline data before resetting inode fork during ifree
+    - xfs: log recovery should replay deferred ops in order
+    - xen-netfront: remove warning when unloading module
+    - nfsd: CLOSE SHOULD return the invalid special stateid for NFSv4.x (x>0)
+    - nfsd: Ensure we check stateid validity in the seqid operation checks
+    - grace: replace BUG_ON by WARN_ONCE in exit_net hook
+    - nfsd: check for use of the closed special stateid
+    - race of lockd inetaddr notifiers vs nlmsvc_rqst change
+    - lockd: fix "list_add double add" caused by legacy signal interface
+    - quota: propagate error from __dquot_initialize
+    - [arm64,armhf] net: mvpp2: fix the txq_init error path
+    - [arm64] net: phy: marvell10g: fix the PHY id mask
+    - bnxt_en: Fix an error handling path in 'bnxt_get_module_eeprom()'
+    - Btrfs: incremental send, fix wrong unlink path after renaming file
+    - nvme-pci: fix NULL pointer dereference in nvme_free_host_mem()
+    - xfs: fortify xfs_alloc_buftarg error handling
+    - drm/amdgpu: don't try to move pinned BOs
+    - quota: Check for register_shrinker() failure.
+    - SUNRPC: Allow connect to return EHOSTUNREACH
+    - kmemleak: add scheduling point to kmemleak_scan()
+    - [armhf] drm/omap: Fix error handling path in 'omap_dmm_probe()'
+    - [armhf] drm/omap: displays: panel-dpi: add backlight dependency
+    - xfs: ubsan fixes
+    - xfs: Properly retry failed dquot items in case of error during buffer
+      writeback
+    - perf/core: Fix memory leak triggered by perf --namespace
+    - scsi: aacraid: Prevent crash in case of free interrupt during scsi EH
+      path
+    - scsi: ufs: ufshcd: fix potential NULL pointer dereference in
+      ufshcd_config_vreg
+    - iwlwifi: mvm: fix the TX queue hang timeout for MONITOR vif type
+    - iwlwifi: fix access to prph when transport is stopped
+    - [arm*] dts: NSP: Disable AHCI controller for HR NSP boards
+    - [arm*] ARM: dts: NSP: Fix PPI interrupt types
+    - media: usbtv: add a new usbid
+    - [x86] xen: Support early interrupts in xen pv guests
+    - usb: gadget: don't dereference g until after it has been null checked
+    - staging: rtl8188eu: Fix incorrect response to SIOCGIWESSID
+    - [arm64,armhf] drm/vc4: Move IRQ enable to PM path
+    - [x86] KVM: emulate #UD while in guest mode
+    - [x86] staging: lustre: separate a connection destroy from free struct
+      kib_conn
+    - tty: fix data race between tty_init_dev and flush of buf
+    - USB: serial: pl2303: new device id for Chilitag
+    - USB: cdc-acm: Do not log urb submission errors on disconnect
+    - CDC-ACM: apply quirk for card reader
+    - USB: serial: io_edgeport: fix possible sleep-in-atomic
+    - usbip: prevent bind loops on devices attached to vhci_hcd
+    - usbip: list: don't list devices attached to vhci_hcd
+    - USB: serial: simple: add Motorola Tetra driver
+    - usb: f_fs: Prevent gadget unbind if it is already unbound
+    - usb: uas: unconditionally bring back host after reset
+    - usb/gadget: Fix "high bandwidth" check in usb_gadget_ep_match_desc()
+    - [x86] mei: me: allow runtime pm for platform with D0i3
+    - serial: 8250_of: fix return code when probe function fails to get reset
+    - serial: 8250_uniphier: fix error return code in uniphier_uart_probe()
+    - [armhf] serial: imx: Only wakeup via RTSDEN bit if the system has
+      RTS/CTS
+    - [armhf] spi: imx: do not access registers while clocks disabled
+    - iio: adc: stm32: fix scan of multiple channels with DMA
+    - iio: chemical: ccs811: Fix output of IIO_CONCENTRATION channels
+    - test_firmware: fix missing unlock on error in
+      config_num_requests_store()
+    - Input: synaptics-rmi4 - unmask F03 interrupts when port is opened
+    - Input: synaptics-rmi4 - do not delete interrupt memory too early
+    - [x86] efi: Clarify that reset attack mitigation needs appropriate
+      userspace
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 4.14.15-rt11
+  * [rt] Update to 4.14.15-rt13
+  * crypto: ecc - Fix NULL pointer deref. on no default_rng (Closes: #886556)
+  * mac80211: Avoid ABI change in 4.14.17
+  * rxrpc: Avoid ABI change in 4.14.17
+
+  [ Ben Hutchings ]
+  * bpf: Avoid ABI change in 4.14.14
+  * usbip: Reduce USBIP_VHCI_HC_PORTS to 15, the maximum allowed for SuperSpeed
+    hubs (Closes: #878866)
+  * [x86] Add versioned build-dependency on gcc-7 for retpoline support
+  * [x86] linux-compiler-gcc-7-x86: Add versioned dependency on gcc-7 for
+    retpoline support
+  * linux-compiler-gcc-7-{arm,s390,x86}: Remove specific (and wrong) compiler
+    version from description (Closes: #883363)
+  * [x86] linux-headers: Depend on updated linux-compiler-gcc-7-x86
+
+  [ Riku Voipio ]
+  * [arm64] build in reset drivers
+  * [arm64] enable COMMON_CLK_HI655X so wifi and bluetooth work on Hikey
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 14 Feb 2018 06:56:06 +0100
+
+linux (4.14.13-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.13
+    - [x86] mm: Set MODULES_END to 0xffffffffff000000
+    - [x86] mm: Map cpu_entry_area at the same place on 4/5 level
+    - [x86] kaslr: Fix the vaddr_end mess
+    - [x86] events/intel/ds: Use the proper cache flush method for mapping ds
+      buffers
+    - [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm
+    - [x86] pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN
+    - kernel/acct.c: fix the acct->needcheck check in check_free_space()
+    - mm/mprotect: add a cond_resched() inside change_pmd_range()
+    - mm/sparse.c: wrong allocation for mem_section
+    - userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
+    - btrfs: fix refcount_t usage when deleting btrfs_delayed_nodes
+    - efi/capsule-loader: Reinstate virtual capsule mapping
+    - [sparc*] crypto: n2 - cure use after free
+    - crypto: chacha20poly1305 - validate the digest size
+    - crypto: pcrypt - fix freeing pcrypt instances
+    - crypto: chelsio - select CRYPTO_GF128MUL
+    - [x86] drm/i915: Disable DC states around GMBUS on GLK
+    - [x86] drm/i915: Apply Display WA #1183 on skl, kbl, and cfl
+    - fscache: Fix the default for fscache_maybe_release_page()
+    - [x86] CPU: Avoid unnecessary IPIs in arch_freq_get_on_cpu()
+    - [x86] CPU: Always show current CPU frequency in /proc/cpuinfo
+    - kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL
+    - kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from
+      !sig_kernel_only() signals
+    - kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in
+      complete_signal()
+    - [arm64] iommu/arm-smmu-v3: Don't free page table ops twice
+    - [arm64] iommu/arm-smmu-v3: Cope with duplicated Stream IDs
+    - [powerpc* ]mm: Fix SEGV on mapped region to return SEGV_ACCERR
+    - Input: elantech - add new icbody type 15
+    - [x86] microcode/AMD: Add support for fam17h microcode loading
+    - apparmor: fix regression in mount mediation when feature set is pinned
+    - [hppa/parisc] Fix alignment of pa_tlb_lock in assembly on 32-bit SMP
+      kernel
+    - [hppa/parisc] qemu idle sleep support
+    - mtd: nand: pxa3xx: Fix READOOB implementation
+    - [s390x] KVM: fix cmma migration for multiple memory slots
+    - [s390x] KVM: prevent buffer overrun on memory hotplug during migration
+
+  [ Salvatore Bonaccorso ]
+  * libsas: Disable asynchronous aborts for SATA devices
+  * drm/nouveau/disp/gf119: add missing drive vfunc ptr (Closes: #880660)
+
+  [ Riku Voipio ]
+  * [arm64] disable CONFIG_HW_RANDOM_OMAP until the IRQ storm bug is fixed
+
+  [ Ben Hutchings ]
+  * abiupdate.py: Add support for security mirrors
+  * Fix dependencies related to objtool (Closes: #886474):
+    - linux-headers: Add versioned dependency on linux-kbuild
+    - Revert "objtool: Fix CONFIG_STACK_VALIDATION=y warning for out-of-tree
+      modules"
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 14 Jan 2018 19:45:05 +0000
+
+linux (4.14.12-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * linux-kbuild: Add objtool
+  * linux-headers: Add symlink to linux-kbuild tools directory for objtool
+
+  [ Salvatore Bonaccorso ]
+  * linux-headers: Add symlink to linux-kbuild tools directory for objtool in
+    architecture-specific headers package.
+    Thanks to Luca Boccassi (Closes: #886366)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 06 Jan 2018 09:08:42 +0100
+
+linux (4.14.12-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.9
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.10
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11
+    - x86/cpufeatures: Add X86_BUG_CPU_INSECURE
+    - x86/mm/pti: Disable global pages if PAGE_TABLE_ISOLATION=y
+    - x86/mm/pti: Prepare the x86/entry assembly code for entry/exit CR3
+      switching
+    - x86/mm/pti: Add infrastructure for page table isolation
+    - x86/pti: Add the pti= cmdline option and documentation
+    - x86/mm/pti: Add mapping helper functions
+    - x86/mm/pti: Allow NX poison to be set in p4d/pgd
+    - x86/mm/pti: Allocate a separate user PGD
+    - x86/mm/pti: Populate user PGD
+    - x86/mm/pti: Add functions to clone kernel PMDs
+    - x86/mm/pti: Force entry through trampoline when PTI active
+    - x86/mm/pti: Share cpu_entry_area with user space page tables
+    - x86/entry: Align entry text section to PMD boundary
+    - x86/mm/pti: Share entry text PMD
+    - x86/mm/pti: Map ESPFIX into user space
+    - x86/cpu_entry_area: Add debugstore entries to cpu_entry_area
+    - x86/events/intel/ds: Map debug buffers in cpu_entry_area
+    - x86/mm/64: Make a full PGD-entry size hole in the memory map
+    - x86/pti: Put the LDT in its own PGD if PTI is on
+    - x86/pti: Map the vsyscall page if needed
+    - x86/mm: Allow flushing for future ASID switches
+    - x86/mm: Abstract switching CR3
+    - x86/mm: Use/Fix PCID to optimize user/kernel switches
+    - x86/mm: Optimize RESTORE_CR3
+    - x86/mm: Use INVPCID for __native_flush_tlb_single()
+    - x86/mm: Clarify the whole ASID/kernel PCID/user PCID naming
+    - x86/dumpstack: Indicate in Oops whether PTI is configured and enabled
+    - x86/mm/pti: Add Kconfig
+    - net: Fix double free and memory corruption in get_net_ns_by_id()
+      (CVE-2017-15129)
+  * [amd64] Implement Kernel Page Table Isolation (KPTI, aka KAISER)
+    (CVE-2017-5754)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.12
+    - exec: Weaken dumpability for secureexec
+    - capabilities: fix buffer overread on very short xattr
+    - x86/cpu, x86/pti: Do not enable PTI on AMD processors
+    - x86/pti: Make sure the user/kernel PTEs match
+    - x86/dumpstack: Fix partial register dumps
+    - x86/dumpstack: Print registers for first stack frame
+    - x86/pti: Switch to kernel CR3 at early in entry_SYSCALL_compat()
+    - x86/process: Define cpu_tss_rw in same section as declaration
+
+  [ Ben Hutchings ]
+  * e1000e: Fix e1000_check_for_copper_link_ich8lan return value.
+    (Closes: #885348)
+
+  [ Vagrant Cascadian ]
+  * [arm64] Backport patch from linux-next to support SMP on tegra210
+    systems.
+
+  [ Salvatore Bonaccorso ]
+  * [rt] Update to 4.14.8-rt9
+  * Bump ABI to 3
+  * Revert "scsi: libsas: allow async aborts"
+    Fixes "Oops: NULL pointer dereference - RIP:
+    isci_task_abort_task+0x30/0x3e0 [isci]" (Closes: #882414)
+  * x86/tlb: Drop the _GPL from the cpu_tlbstate export
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 05 Jan 2018 21:20:26 +0100
+
+linux (4.14.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3
+    - [s390x] fix transactional execution control register handling
+    - [s390x] noexec: execute kexec datamover without DAT
+    - [s390x] runtime instrumention: fix possible memory corruption
+    - [s390x] guarded storage: fix possible memory corruption
+    - [s390x] disassembler: add missing end marker for e7 table
+    - [s390x] disassembler: increase show_code buffer size
+    - ACPI / PM: Fix acpi_pm_notifier_lock vs flush_workqueue() deadlock
+    - ACPI / EC: Fix regression related to triggering source of EC event
+      handling
+    - cpufreq: schedutil: Reset cached_raw_freq when not in sync with next_freq
+    - serdev: fix registration of second slave
+    - sched: Make resched_cpu() unconditional
+    - lib/mpi: call cond_resched() from mpi_powm() loop
+    - [x86] boot: Fix boot failure when SMP MP-table is based at 0
+    - [x86] decoder: Add new TEST instruction pattern
+    - [amd64] entry: Fix entry_SYSCALL_64_after_hwframe() IRQ tracing
+    - [x86] perf: intel: Hide TSX events when RTM is not supported
+    - [arm64] Implement arch-specific pte_access_permitted()
+    - [armhf/armmp-lpae] 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
+    - [armhf/armmp-lpae] 8721/1: mm: dump: check hardware RO bit for LPAE
+    - uapi: fix linux/tls.h userspace compilation error
+    - uapi: fix linux/rxrpc.h userspace compilation errors
+    - [mips*/4kc-malta] cmpxchg64() and HAVE_VIRT_CPU_ACCOUNTING_GEN don't work
+      for 32-bit SMP
+    - [armhf,arm64] net: mvneta: fix handling of the Tx descriptor counter
+    - nbd: wait uninterruptible for the dead timeout
+    - nbd: don't start req until after the dead connection logic
+    - PM / OPP: Add missing of_node_put(np)
+    - PCI/ASPM: Account for downstream device's Port Common_Mode_Restore_Time
+    - PCI/ASPM: Use correct capability pointer to program LTR_L1.2_THRESHOLD
+    - [x86] PCI: hv: Use effective affinity mask
+    - [arm64] PCI: Set Cavium ACS capability quirk flags to assert RR/CR/SV/UF
+    - [arm64] PCI: Apply Cavium ThunderX ACS quirk to more Root Ports
+    - dm integrity: allow unaligned bv_offset
+    - dm cache: fix race condition in the writeback mode overwrite_bio
+      optimisation
+    - dm crypt: allow unaligned bv_offset
+    - dm zoned: ignore last smaller runt zone
+    - dm mpath: remove annoying message of 'blk_get_request() returned -11'
+    - dm bufio: fix integer overflow when limiting maximum cache size
+    - ovl: Put upperdentry if ovl_check_origin() fails
+    - dm: allocate struct mapped_device with kvzalloc
+    - sched/rt: Simplify the IPI based RT balancing logic
+    - dm: fix race between dm_get_from_kobject() and __dm_destroy()
+    - dm: discard support requires all targets in a table support discards
+    - [mips*] Fix odd fp register warnings with MIPS64r2
+    - [mips*/4kc-malta] Fix MIPS64 FP save/restore on 32-bit kernels
+    - [mips*] dts: remove bogus bcm96358nb4ser.dtb from dtb-y entry
+    - [mips*] Fix an n32 core file generation regset support regression
+    - [mips*] math-emu: Fix final emulation phase for certain instructions
+    - rt2x00usb: mark device removed when get ENOENT usb error
+    - mm/z3fold.c: use kref to prevent page free/compact race
+    - autofs: don't fail mount for transient error
+    - nilfs2: fix race condition that causes file system corruption
+    - fscrypt: lock mutex before checking for bounce page pool
+    - eCryptfs: use after free in ecryptfs_release_messaging()
+    - libceph: don't WARN() if user tries to add invalid key
+    - bcache: check ca->alloc_thread initialized before wake up it
+    - fs: guard_bio_eod() needs to consider partitions
+    - fanotify: fix fsnotify_prepare_user_wait() failure
+    - isofs: fix timestamps beyond 2027
+    - btrfs: change how we decide to commit transactions during flushing
+    - f2fs: expose some sectors to user in inline data or dentry case
+    - NFS: Fix typo in nomigration mount option
+    - NFS: Revert "NFS: Move the flock open mode check into nfs_flock()"
+    - nfs: Fix ugly referral attributes
+    - NFS: Avoid RCU usage in tracepoints
+    - NFS: revalidate "." etc correctly on "open".
+    - nfsd: deal with revoked delegations appropriately
+    - rtlwifi: rtl8192ee: Fix memory leak when loading firmware
+    - rtlwifi: fix uninitialized rtlhal->last_suspend_sec time
+    - iwlwifi: fix firmware names for 9000 and A000 series hw
+    - md: fix deadlock error in recent patch.
+    - md: don't check MD_SB_CHANGE_CLEAN in md_allow_write
+    - Bluetooth: btqcomsmd: Add support for BD address setup
+    - md/bitmap: revert a patch
+    - fsnotify: clean up fsnotify_prepare/finish_user_wait()
+    - fsnotify: pin both inode and vfsmount mark
+    - fsnotify: fix pinning group in fsnotify_prepare_user_wait()
+    - ata: fixes kernel crash while tracing ata_eh_link_autopsy event
+    - ext4: fix interaction between i_size, fallocate, and delalloc after a
+      crash
+    - ext4: prevent data corruption with inline data + DAX
+    - ext4: prevent data corruption with journaling + DAX
+    - ALSA: pcm: update tstamp only if audio_tstamp changed
+    - ALSA: usb-audio: Add sanity checks to FE parser
+    - ALSA: usb-audio: Fix potential out-of-bound access at parsing SU
+    - ALSA: usb-audio: Add sanity checks in v2 clock parsers
+    - ALSA: timer: Remove kernel warning at compat ioctl error paths
+    - ALSA: hda/realtek - Fix ALC275 no sound issue
+    - ALSA: hda: Fix too short HDMI/DP chmap reporting
+    - ALSA: hda - Fix yet remaining issue with vmaster 0dB initialization
+    - ALSA: hda/realtek - Fix ALC700 family no sound issue
+    - [x86] mfd: lpc_ich: Avoton/Rangeley uses SPI_BYT method
+    - fix a page leak in vhost_scsi_iov_to_sgl() error recovery
+    - 9p: Fix missing commas in mount options
+    - fs/9p: Compare qid.path in v9fs_test_inode
+    - net/9p: Switch to wait_event_killable()
+    - scsi: qla2xxx: Suppress a kernel complaint in qla_init_base_qpair()
+    - scsi: sd_zbc: Fix sd_zbc_read_zoned_characteristics()
+    - scsi: lpfc: fix pci hot plug crash in timer management routines
+    - scsi: lpfc: fix pci hot plug crash in list_add call
+    - scsi: lpfc: Fix crash receiving ELS while detaching driver
+    - scsi: lpfc: Fix FCP hba_wqidx assignment
+    - scsi: lpfc: Fix oops if nvmet_fc_register_targetport fails
+    - iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref
+    - iscsi-target: Fix non-immediate TMR reference leak
+    - target: fix null pointer regression in core_tmr_drain_tmr_list
+    - target: fix buffer offset in core_scsi3_pri_read_full_status
+    - target: Fix QUEUE_FULL + SCSI task attribute handling
+    - target: Fix caw_sem leak in transport_generic_request_failure
+    - target: Fix quiese during transport_write_pending_qf endless loop
+    - target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK
+    - mtd: Avoid probe failures when mtd->dbg.dfs_dir is invalid
+    - mtd: nand: atmel: Actually use the PM ops
+    - mtd: nand: omap2: Fix subpage write
+    - mtd: nand: Fix writing mtdoops to nand flash.
+    - mtd: nand: mtk: fix infinite ECC decode IRQ issue
+    - p54: don't unregister leds when they are not initialized
+    - block: Fix a race between blk_cleanup_queue() and timeout handling
+    - raid1: prevent freeze_array/wait_all_barriers deadlock
+    - genirq: Track whether the trigger type has been set
+    - [armhf,arm64] irqchip/gic-v3: Fix ppi-partitions lookup
+    - lockd: double unregister of inetaddr notifiers
+    - [powerpc*] KVM: Book3S HV: Don't call real-mode XICS hypercall handlers
+      if not enabled
+    - [x86] KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
+    - [x86] KVM: SVM: obey guest PAT
+    - [x86] kvm: vmx: Reinstate support for CPUs without virtual NMI
+      (Closes: #884482)
+    - dax: fix PMD faults on zero-length files
+    - dax: fix general protection fault in dax_alloc_inode
+    - SUNRPC: Fix tracepoint storage issues with svc_recv and svc_rqst_status
+    - [armhf] clk: ti: dra7-atl-clock: fix child-node lookups
+    - libnvdimm, dimm: clear 'locked' status on successful DIMM enable
+    - libnvdimm, pfn: make 'resource' attribute only readable by root
+    - libnvdimm, namespace: fix label initialization to use valid seq numbers
+    - libnvdimm, region : make 'resource' attribute only readable by root
+    - libnvdimm, namespace: make 'resource' attribute only readable by root
+    - svcrdma: Preserve CB send buffer across retransmits
+    - IB/srpt: Do not accept invalid initiator port names
+    - IB/cm: Fix memory corruption in handling CM request
+    - IB/hfi1: Fix incorrect available receive user context count
+    - IB/srp: Avoid that a cable pull can trigger a kernel crash
+    - IB/core: Avoid crash on pkey enforcement failed in received MADs
+    - IB/core: Only maintain real QPs in the security lists
+    - NFC: fix device-allocation error return
+    - spi-nor: intel-spi: Fix broken software sequencing codes
+    - fm10k,i40e,i40evf,igb,igbvf,ixgbe,ixgbevf: Use smp_rmb rather than
+      read_barrier_depends
+    - [hppa] Fix validity check of pointer size argument in new CAS
+      implementation
+    - [powerpc*] Fix boot on BOOK3S_32 with CONFIG_STRICT_KERNEL_RWX
+    - [powerpc*] mm/radix: Fix crashes on Power9 DD1 with radix MMU and
+      STRICT_RWX
+    - [powerpc*] perf/imc: Use cpu_to_node() not topology_physical_package_id()
+    - [powerpc*] signal: Properly handle return value from uprobe_deny_signal()
+    - [powerpc*] 64s: Fix masking of SRR1 bits on instruction fault
+    - [powerpc*] 64s/radix: Fix 128TB-512TB virtual address boundary case
+      allocation
+    - [powerpc*] 64s/hash: Fix 512T hint detection to use >= 128T
+    - [powerpc*] 64s/hash: Fix 128TB-512TB virtual address boundary case
+      allocation
+    - [powerpc*] 64s/hash: Fix fork() with 512TB process address space
+    - [powerpc*] 64s/hash: Allow MAP_FIXED allocations to cross 128TB boundary
+    - media: Don't do DMA on stack for firmware upload in the AS102 driver
+    - media: rc: check for integer overflow
+    - media: rc: nec decoder should not send both repeat and keycode
+    - media: v4l2-ctrl: Fix flags field on Control events
+    - [arm64] media: venus: fix wrong size on dma_free
+    - [arm64] media: venus: venc: fix bytesused v4l2_plane field
+    - [arm64] media: venus: reimplement decoder stop command
+    - [arm64] dts: meson-gxl: Add alternate ARM Trusted Firmware reserved
+      memory zone
+    - iwlwifi: fix wrong struct for a000 device
+    - iwlwifi: fix PCI IDs and configuration mapping for 9000 series
+    - iwlwifi: mvm: support version 7 of the SCAN_REQ_UMAC FW command
+    - e1000e: Fix error path in link detection
+    - e1000e: Fix return value test
+    - e1000e: Separate signaling for link check/link up
+    - e1000e: Avoid receiver overrun interrupt bursts
+    - e1000e: fix buffer overrun while the I219 is processing DMA transactions
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4
+    - [x86]: platform: hp-wmi: Fix tablet mode detection for convertibles
+    - mm, memory_hotplug: do not back off draining pcp free pages from kworker
+      context
+    - mm, oom_reaper: gather each vma to prevent leaking TLB entry
+    - [armhf,arm64] mm/cma: fix alloc_contig_range ret code/potential leak
+    - mm: fix device-dax pud write-faults triggered by get_user_pages()
+    - mm, hugetlbfs: introduce ->split() to vm_operations_struct
+    - device-dax: implement ->split() to catch invalid munmap attempts
+    - mm: introduce get_user_pages_longterm
+    - mm: fail get_vaddr_frames() for filesystem-dax mappings
+    - v4l2: disable filesystem-dax mapping support
+    - IB/core: disable memory registration of filesystem-dax vmas
+    - exec: avoid RLIMIT_STACK races with prlimit()
+    - mm/madvise.c: fix madvise() infinite loop under special circumstances
+    - mm: migrate: fix an incorrect call of prep_transhuge_page()
+    - mm, memcg: fix mem_cgroup_swapout() for THPs
+    - fs/fat/inode.c: fix sb_rdonly() change
+    - autofs: revert "autofs: take more care to not update last_used on path
+      walk"
+    - autofs: revert "autofs: fix AT_NO_AUTOMOUNT not being honored"
+    - mm/hugetlb: fix NULL-pointer dereference on 5-level paging machine
+    - btrfs: clear space cache inode generation always
+    - nfsd: Fix stateid races between OPEN and CLOSE
+    - nfsd: Fix another OPEN stateid race
+    - nfsd: fix panic in posix_unblock_lock called from nfs4_laundromat
+    - crypto: algif_aead - skip SGL entries with NULL page
+    - crypto: af_alg - remove locking in async callback
+    - crypto: skcipher - Fix skcipher_walk_aead_common
+    - lockd: lost rollback of set_grace_period() in lockd_down_net()
+    - [s390x] revert ELF_ET_DYN_BASE base changes
+    - [armhf] drm: omapdrm: Fix DPI on platforms using the DSI VDDS
+    - [armhf] omapdrm: hdmi4: Correct the SoC revision matching
+    - [arm64] module-plts: factor out PLT generation code for ftrace
+    - [arm64] ftrace: emit ftrace-mod.o contents through code
+    - [powerpc*] powernv: Fix kexec crashes caused by tlbie tracing
+    - [powerpc*] kexec: Fix kexec/kdump in P9 guest kernels
+    - [x86] KVM: pvclock: Handle first-time write to pvclock-page contains
+      random junk
+    - [x86] KVM: Exit to user-mode on #UD intercept when emulator requires
+    - [x86] KVM: inject exceptions produced by x86_decode_insn
+    - [x86] KVM: lapic: Split out x2apic ldr calculation
+    - [x86] KVM: lapic: Fixup LDR on load in x2apic
+    - mmc: sdhci: Avoid swiotlb buffer being full
+    - mmc: block: Fix missing blk_put_request()
+    - mmc: block: Check return value of blk_get_request()
+    - mmc: core: Do not leave the block driver in a suspended state
+    - mmc: block: Ensure that debugfs files are removed
+    - mmc: core: prepend 0x to pre_eol_info entry in sysfs
+    - mmc: core: prepend 0x to OCR entry in sysfs
+    - ACPI / EC: Fix regression related to PM ops support in ECDT device
+    - eeprom: at24: fix reading from 24MAC402/24MAC602
+    - eeprom: at24: correctly set the size for at24mac402
+    - eeprom: at24: check at24_read/write arguments
+    - [alpha,x86] i2c: i801: Fix Failed to allocate irq -2147483648 error
+    - bcache: Fix building error on MIPS
+    - bcache: only permit to recovery read error when cache device is clean
+    - bcache: recover data from backing when data is clean
+    - hwmon: (jc42) optionally try to disable the SMBUS timeout
+    - nvme-pci: add quirk for delay before CHK RDY for WDC SN200
+    - Revert "drm/radeon: dont switch vt on suspend"
+    - drm/amdgpu: potential uninitialized variable in amdgpu_vce_ring_parse_cs()
+    - drm/amdgpu: Potential uninitialized variable in
+      amdgpu_vm_update_directories()
+    - drm/amdgpu: correct reference clock value on vega10
+    - drm/amdgpu: fix error handling in amdgpu_bo_do_create
+    - drm/amdgpu: Properly allocate VM invalidate eng v2
+    - drm/amdgpu: Remove check which is not valid for certain VBIOS
+    - drm/ttm: fix ttm_bo_cleanup_refs_or_queue once more
+    - dma-buf: make reservation_object_copy_fences rcu save
+    - drm/amdgpu: reserve root PD while releasing it
+    - drm/ttm: Always and only destroy bo->ttm_resv in ttm_bo_release_list
+    - drm/vblank: Fix flip event vblank count
+    - drm/vblank: Tune drm_crtc_accurate_vblank_count() WARN down to a debug
+    - drm/tilcdc: Precalculate total frametime in tilcdc_crtc_set_mode()
+    - drm/radeon: fix atombios on big endian
+    - drm/panel: simple: Add missing panel_simple_unprepare() calls
+    - [arm64] drm/hisilicon: Ensure LDI regs are properly configured.
+    - drm/ttm: once more fix ttm_buffer_object_transfer
+    - drm/amd/pp: fix typecast error in powerplay.
+    - drm/fb_helper: Disable all crtc's when initial setup fails.
+    - drm/edid: Don't send non-zero YQ in AVI infoframe for HDMI 1.x sinks
+    - drm/amdgpu: move UVD/VCE and VCN structure out from union
+    - drm/amdgpu: Set adev->vcn.irq.num_types for VCN
+    - IB/core: Do not warn on lid conversions for OPA
+    - IB/hfi1: Do not warn on lid conversions for OPA
+    - e1000e: fix the use of magic numbers for buffer overrun issue
+    - md: forbid a RAID5 from having both a bitmap and a journal.
+    - [x86] drm/i915: Fix false-positive assert_rpm_wakelock_held in
+      i915_pmic_bus_access_notifier v2
+    - [x86] drm/i915: Re-register PMIC bus access notifier on runtime resume
+    - [x86] drm/i915/fbdev: Serialise early hotplug events with async fbdev
+      config
+    - [x86] drm/i915/gvt: Correct ADDR_4K/2M/1G_MASK definition
+    - [x86] drm/i915: Don't try indexed reads to alternate slave addresses
+    - [x86] drm/i915: Prevent zero length "index" write
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.5
+    - drm/amdgpu: Use unsigned ring indices in amdgpu_queue_mgr_map
+    - [s390x] runtime instrumentation: simplify task exit handling
+    - usbip: fix usbip attach to find a port that matches the requested speed
+    - usbip: Fix USB device hang due to wrong enabling of scatter-gather
+    - uas: Always apply US_FL_NO_ATA_1X quirk to Seagate devices
+    - usb: quirks: Add no-lpm quirk for KY-688 USB 3.1 Type-C Hub
+    - serial: 8250_early: Only set divisor if valid clk & baud
+    - [mips*] Add custom serial.h with BASE_BAUD override for generic kernel
+    - ima: fix hash algorithm initialization
+    - [s390x] vfio-ccw: Do not attempt to free no-op, test and tic cda.
+    - PM / Domains: Fix genpd to deal with drivers returning 1 from ->prepare()
+    - [s390x] pci: do not require AIS facility
+    - serial: 8250_fintek: Fix rs485 disablement on invalid ioctl()
+    - staging: rtl8188eu: avoid a null dereference on pmlmepriv
+    - [arm64] mmc: sdhci-msm: fix issue with power irq
+    - hwmon: (pmbus/core) Prevent unintentional setting of page to 0xFF
+    - perf/core: Fix __perf_read_group_add() locking
+    - [armhf] PCI: dra7xx: Create functional dependency between PCIe and PHY
+    - [x86] intel_rdt: Initialize bitmask of shareable resource if CDP enabled
+    - [x86] intel_rdt: Fix potential deadlock during resctrl mount
+    - serial: 8250: Preserve DLD[7:4] for PORT_XR17V35X
+    - kprobes: Use synchronize_rcu_tasks() for optprobe with CONFIG_PREEMPT=y
+    - [x86] entry: Use SYSCALL_DEFINE() macros for sys_modify_ldt()
+    - [armhf,arm64] clocksource/drivers/arm_arch_timer: Validate CNTFRQ after
+      enabling frame
+    - [x86] EDAC, sb_edac: Fix missing break in switch
+    - [arm64] cpuidle: Correct driver unregistration if init fails
+    - usb: xhci: Return error when host is dead in xhci_disable_slot()
+    - [armel,armhf] sysrq : fix Show Regs call trace on ARM
+    - [sh4] serial: sh-sci: suppress warning for ports without dma channels
+    - [armhf] serial: imx: Update cached mctrl value when changing RTS
+    - [x86] kprobes: Disable preemption in ftrace-based jprobes
+    - [x86] locking/refcounts, asm: Use unique .text section for refcount
+      exceptions
+    - [s390x] ptrace: fix guarded storage regset handling
+    - perf tools: Fix leaking rec_argv in error cases
+    - mm, x86/mm: Fix performance regression in get_user_pages_fast()
+    - iio: adc: ti-ads1015: add 10% to conversion wait time
+    - iio: multiplexer: add NULL check on devm_kzalloc() and devm_kmemdup()
+      return values
+    - [x86] locking/refcounts, asm: Enable CONFIG_ARCH_HAS_REFCOUNT
+    - [powerpc*] jprobes: Disable preemption when triggered through ftrace
+    - [powerpc*] kprobes: Disable preemption before invoking probe handler for
+      optprobes
+    - usb: hub: Cycle HUB power when initialization fails
+    - [armhf,arm64] USB: ulpi: fix bus-node lookup
+    - xhci: Don't show incorrect WARN message about events for empty rings
+    - usb: xhci: fix panic in xhci_free_virt_devices_depth_first
+    - USB: core: Add type-specific length check of BOS descriptors
+    - USB: usbfs: Filter flags passed in from user space
+    - usb: host: fix incorrect updating of offset
+    - locking/refcounts: Do not force refcount_t usage as GPL-only export
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.6
+    - usb: gadget: core: Fix ->udc_set_speed() speed handling
+    - serdev: ttyport: add missing receive_buf sanity checks
+    - serdev: ttyport: fix NULL-deref on hangup
+    - serdev: ttyport: fix tty locking in close
+    - usb: f_fs: Force Reserved1=1 in OS_DESC_EXT_COMPAT
+    - can: peak/pci: fix potential bug when probe() fails
+    - can: kvaser_usb: free buf in error paths
+    - can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()
+    - can: kvaser_usb: ratelimit errors if incomplete messages are received
+    - can: kvaser_usb: cancel urb on -EPIPE and -EPROTO
+    - can: ems_usb: cancel urb on -EPIPE and -EPROTO
+    - can: esd_usb2: cancel urb on -EPIPE and -EPROTO
+    - can: usb_8dev: cancel urb on -EPIPE and -EPROTO
+    - can: peak/pcie_fd: fix potential bug in restarting tx queue
+    - virtio: release virtio index when fail to device_register
+    - [arm64] pinctrl: armada-37xx: Fix direction_output() callback behavior
+    - [x86] Drivers: hv: vmbus: Fix a rescind issue
+    - [x86] hv: kvp: Avoid reading past allocated blocks from KVP file
+    - firmware: vpd: Destroy vpd sections in remove function
+    - firmware: vpd: Tie firmware kobject to device lifetime
+    - firmware: vpd: Fix platform driver and device registration/unregistration
+    - scsi: dma-mapping: always provide dma_get_cache_alignment
+    - scsi: use dma_get_cache_alignment() as minimum DMA alignment
+    - scsi: libsas: align sata_device's rps_resp on a cacheline
+    - efi: Move some sysfs files to be read-only by root
+    - efi/esrt: Use memunmap() instead of kfree() to free the remapping
+    - ASN.1: fix out-of-bounds read when parsing indefinite length item
+    - ASN.1: check for error from ASN1_OP_END__ACT actions
+    - KEYS: add missing permission check for request_key() destination
+      (CVE-2017-17807)
+    - KEYS: reject NULL restriction string when type is specified
+    - X.509: reject invalid BIT STRING for subjectPublicKey
+    - X.509: fix comparisons of ->pkey_algo
+    - [x86] idt: Load idt early in start_secondary
+    - [x86] PCI: Make broadcom_postcore_init() check acpi_disabled
+    - [x86] KVM: fix APIC page invalidation
+    - btrfs: fix missing error return in btrfs_drop_snapshot
+    - btrfs: handle errors while updating refcounts in update_ref_for_cow
+    - ALSA: pcm: prevent UAF in snd_pcm_info
+    - ALSA: seq: Remove spurious WARN_ON() at timer check
+    - ALSA: usb-audio: Fix out-of-bound error
+    - ALSA: usb-audio: Add check return value for usb_string()
+    - [x86] iommu/vt-d: Fix scatterlist offset handling
+    - smp/hotplug: Move step CPUHP_AP_SMPCFD_DYING to the correct place
+    - [s390x] always save and restore all registers on context switch
+    - [s390x] mm: fix off-by-one bug in 5-level page table handling
+    - [s390x] fix compat system call table
+    - [s390x] KVM: Fix skey emulation permission check
+    - [powerpc*] Revert "powerpc: Do not call ppc_md.panic in fadump panic
+      notifier"
+    - [powerpc*] 64s: Initialize ISAv3 MMU registers before setting partition
+      table
+    - iwlwifi: mvm: mark MIC stripped MPDUs
+    - iwlwifi: mvm: don't use transmit queue hang detection when it is not
+      possible
+    - iwlwifi: mvm: flush queue before deleting ROC
+    - iwlwifi: mvm: fix packet injection
+    - iwlwifi: mvm: enable RX offloading with TKIP and WEP
+    - brcmfmac: change driver unbind order of the sdio function devices
+    - md/r5cache: move mddev_lock() out of r5c_journal_mode_set()
+    - [armhf] drm/bridge: analogix dp: Fix runtime PM state in get_modes()
+      callback
+    - [armhf] drm/exynos: gem: Drop NONCONTIG flag for buffers allocated
+      without IOMMU
+    - [x86] drm/i915: Fix vblank timestamp/frame counter jumps on gen2
+    - media: dvb: i2c transfers over usb cannot be done from stack
+    - media: rc: sir_ir: detect presence of port
+    - media: rc: partial revert of "media: rc: per-protocol repeat period"
+    - [arm64] KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
+    - [armhf] KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one
+    - [x86] KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
+      (CVE-2017-1000407)
+    - [armhf,arm64] KVM: Fix broken GICH_ELRSR big endian conversion
+    - [armhf,arm64] KVM: vgic-irqfd: Fix MSI entry allocation
+    - [armhf,arm64] KVM: vgic: Preserve the revious read from the pending table
+    - [armhf,arm64] KVM: vgic-its: Check result of allocation before use
+    - [arm64] fpsimd: Prevent registers leaking from dead tasks
+    - [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to
+      init_mm
+    - [arm64] SW PAN: Update saved ttbr0 value on enter_lazy_tlb
+    - [armhf] Revert "ARM: dts: imx53: add srtc node"
+    - [armhf] bus: arm-cci: Fix use of smp_processor_id() in preemptible context
+    - IB/core: Only enforce security for InfiniBand
+    - [armel,armhf] BUG if jumping to usermode address in kernel mode
+    - [armel,armhf] avoid faulting on qemu
+    - [arm64] irqchip/qcom: Fix u32 comparison with value less than zero
+    - [powerpc*] perf: Fix pmu_count to count only nest imc pmus
+    - apparmor: fix leak of null profile name if profile allocation fails
+    - mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl()
+    - gre6: use log_ecn_error module parameter in ip6_tnl_rcv()
+    - route: also update fnhe_genid when updating a route cache
+    - route: update fnhe_expires for redirect when the fnhe exists
+    - rsi: fix memory leak on buf and usb_reg_buf
+    - pipe: match pipe_max_size data type with procfs
+    - lib/genalloc.c: make the avail variable an atomic_long_t
+    - NFS: Fix a typo in nfs_rename()
+    - sunrpc: Fix rpc_task_begin trace point
+    - nfp: inherit the max_mtu from the PF netdev
+    - nfp: fix flower offload metadata flag usage
+    - xfs: fix forgotten rcu read unlock when skipping inode reclaim
+    - block: wake up all tasks blocked in get_request()
+    - [sparc64] mm: set fields in deferred pages
+    - zsmalloc: calling zs_map_object() from irq is a bug
+    - slub: fix sysfs duplicate filename creation when slub_debug=O
+    - sctp: do not free asoc when it is already dead in sctp_sendmsg
+    - sctp: use the right sk after waking up from wait_buf sleep
+    - fcntl: don't leak fd reference when fixup_compat_flock fails
+    - geneve: fix fill_info when link down
+    - bpf: fix lockdep splat
+    - [arm64] clk: qcom: common: fix legacy board-clock registration
+    - [arm64] clk: hi3660: fix incorrect uart3 clock freqency
+    - atm: horizon: Fix irq release error
+    - xfrm: Copy policy family in clone_policy
+    - f2fs: fix to clear FI_NO_PREALLOC
+    - bnxt_re: changing the ip address shouldn't affect new connections
+    - IB/mlx4: Increase maximal message size under UD QP
+    - IB/mlx5: Assign send CQ and recv CQ of UMR QP
+    - afs: Fix total-length calculation for multiple-page send
+    - afs: Connect up the CB.ProbeUuid
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.7
+    - net: realtek: r8169: implement set_link_ksettings()
+    - [s390x] qeth: fix early exit from error path
+    - tipc: fix memory leak in tipc_accept_from_sock()
+    - vhost: fix skb leak in handle_rx()
+    - rds: Fix NULL pointer dereference in __rds_rdma_map
+    - sit: update frag_off info
+    - tcp: add tcp_v4_fill_cb()/tcp_v4_restore_cb()
+    - packet: fix crash in fanout_demux_rollover()
+    - net/packet: fix a race in packet_bind() and packet_notifier()
+    - tcp: remove buggy call to tcp_v6_restore_cb()
+    - usbnet: fix alignment for frames with no ethernet header
+    - net: remove hlist_nulls_add_tail_rcu()
+    - stmmac: reset last TSO segment size after device open
+    - tcp/dccp: block bh before arming time_wait timer
+    - [s390x] qeth: build max size GSO skbs on L2 devices
+    - [s390x] qeth: fix thinko in IPv4 multicast address tracking
+    - [s390x] qeth: fix GSO throughput regression
+    - tcp: use IPCB instead of TCP_SKB_CB in inet_exact_dif_match()
+    - tipc: call tipc_rcv() only if bearer is up in tipc_udp_recv()
+    - tcp: use current time in tcp_rcv_space_adjust()
+    - net: sched: cbq: create block for q->link.block
+    - tap: free skb if flags error
+    - tcp: when scheduling TLP, time of RTO should account for current ACK
+    - tun: free skb in early errors
+    - net: ipv6: Fixup device for anycast routes during copy
+    - tun: fix rcu_read_lock imbalance in tun_build_skb
+    - net: accept UFO datagrams from tuntap and packet
+    - net: openvswitch: datapath: fix data type in queue_gso_packets
+    - cls_bpf: don't decrement net's refcount when offload fails
+    - sctp: use right member as the param of list_for_each_entry
+    - ipmi: Stop timers before cleaning up the module
+    - usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping
+    - fcntl: don't cap l_start and l_end values for F_GETLK64 in compat syscall
+    - fix kcm_clone()
+    - [armhf,arm64] KVM: vgic-its: Preserve the revious read from the pending
+      table
+    - kbuild: do not call cc-option before KBUILD_CFLAGS initialization
+    - [powerpc*] powernv/idle: Round up latency and residency values
+    - ipvlan: fix ipv6 outbound device
+    - blk-mq: Avoid that request queue removal can trigger list corruption
+    - nvmet-rdma: update queue list during ib_device removal
+    - audit: Allow auditd to set pid to 0 to end auditing
+    - audit: ensure that 'audit=1' actually enables audit for PID 1
+    - dm raid: fix panic when attempting to force a raid to sync
+    - md: free unused memory after bitmap resize
+    - RDMA/cxgb4: Annotate r2 and stag as __be32
+    - [x86] intel_rdt: Fix potential deadlock during resctrl unmount
+
+  [ Salvatore Bonaccorso ]
+  * Add ABI reference for 4.14.0-1
+  * xen/time: do not decrease steal time after live migration on xen
+    (Closes: #871608)
+  * crypto: salsa20 - fix blkcipher_walk API usage (CVE-2017-17805)
+  * crypto: hmac - require that the underlying hash algorithm is unkeyed
+    (CVE-2017-17806)
+
+  [ Vagrant Cascadian ]
+  * [armhf, arm64] Backport patches from 4.15.x to support dwmac-sun8i.
+
+  [ Ben Hutchings ]
+  * [rt] Update to 4.14.6-rt7:
+    - hrtimer: account for migrated timers
+    - crypto: mcryptd: protect the per-CPU queue with a lock
+    - tracing: Update inter-event hist trigger support to v7:
+      + Rename virtual "$common_timestamp" field to "common_timestamp"
+      + Fix use-after-free in trigger removal
+    - mm/slub: close possible memory-leak in kmem_cache_alloc_bulk()
+    - crypto: limit more FPU-enabled sections
+  * dccp: CVE-2017-8824: use-after-free in DCCP code
+  * netfilter: nfnetlink_cthelper: Add missing permission checks
+    (CVE-2017-17448)
+  * netlink: Add netns check on taps (CVE-2017-17449)
+  * netfilter: xt_osf: Add missing permission checks (CVE-2017-17450)
+  * USB: core: prevent malicious bNumInterfaces overflow (CVE-2017-17558)
+  * net: ipv4: fix for a race condition in raw_sendmsg (CVE-2017-17712)
+  * media: dvb-usb-v2: lmedm04: Improve logic checking of warm start
+    (CVE-2017-16538)
+  * media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner
+    (CVE-2017-16538)
+  * media: hdpvr: Fix an error handling path in hdpvr_probe() (CVE-2017-16644)
+  * [armhf,arm64,x86] KVM: Fix stack-out-of-bounds read in write_mmio
+    (CVE-2017-17741)
+  * bluetooth: Prevent stack info leak from the EFS element.
+    (CVE-2017-1000410)
+  * bpf/verifier: Fix multiple security issues (Closes: #883558):
+    - encapsulate verifier log state into a structure
+    - move global verifier log into verifier environment
+    - fix branch pruning logic
+    - fix bounds calculation on BPF_RSH
+    - fix incorrect sign extension in check_alu_op() (CVE-2017-16995)
+    - fix incorrect tracking of register size truncation (CVE-2017-16996)
+    - fix 32-bit ALU op verification
+    - fix missing error return in check_stack_boundary()
+    - force strict alignment checks for stack pointers
+    - don't prune branches when a scalar is replaced with a pointer
+    - fix integer overflows
+  * Bump ABI to 2
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 22 Dec 2017 14:12:23 +0000
+
+linux (4.14.2-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.1
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2
+    - mm/pagewalk.c: report holes in hugetlb ranges (CVE-2017-16994)
+
+  [ Ben Hutchings ]
+  * [rt] Update to 4.14-rt1 and reenable (Closes: #882192)
+  * i40e: Build for 32-bit targets again
+    - i40e/i40evf: organize and re-number feature flags
+    - i40e: fix flags declaration
+    - Revert "i40e: Build for 64-bit targets only"
+  * aufs: Update support patchset to aufs4.14-20171120
+  * [armel] Change configuration to reduce image size (fixes FTBFS):
+    - Change CONNECTOR from built-in to module, and disable PROC_EVENTS
+    - Disable INTEGRITY and dependent options
+    - video: Disable USB_APPLEDISPLAY, BACKLIGHT_CLASS_DEVICE
+  * apparmor: fix oops in audit_signal_cb hook (regression in 4.14)
+  * leds: Enable LEDS_BRIGHTNESS_HW_CHANGED (Closes: #872862)
+  * [rt] Add new signing subkey for Steven Rostedt
+  * [rt] Update to 4.14.1-rt3
+  * Set ABI to 1
+  * mmap: Remember the MAP_FIXED flag as VM_FIXED
+  * [x86] mmap: Add an exception to the stack gap for Hotspot JVM compatibility
+    (Closes: #865303)
+
+  [ Salvatore Bonaccorso ]
+  * mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d()
+    (CVE-2017-1000405)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 30 Nov 2017 12:33:47 +0000
+
+linux (4.14-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.14
+
+  [ Ben Hutchings ]
+  * debian/control: Set Rules-Requires-Root to no
+  * [armhf] drm: Enable DRM_SUN4I, DRM_SUN4I_HDMI, DRM_SUN4I_BACKEND,
+    DRM_SUN8I_MIXER as modules; and DRM_SUN4I_HDMI_CEC (Closes: #881570)
+  * media: dvb-core: always call invoke_release() in fe_free()
+  * dvb_frontend: don't use-after-free the frontend struct (CVE-2017-16648)
+  * Set ABI name to trunk
+
+  [ Bastian Blank ]
+  * Enable CRYPTO_SHA3.
+
+  [ Riku Voipio ]
+  * [arm64] enable generic server options.
+    - NUMA, ACPI_NUMA, CRASH_DUMP, VFIO, HOTPLUG_PCI, ACPI_CPPC_CPUFREQ,
+      MMC_SDHCI_ACPI, PL330_DMA
+  * [arm64] enable various server platform drivers
+    - NET_XGENE_V2, EDAC_THUNDERX, MMC_CAVIUM_THUNDER,
+      GPIO_XLP, I2C_XLP9XX, SPI_XLP, DRM_HISI_HIBMC, HISI_SAS_PCI,
+      GPIO_WATCHDOG, ARM_SP805_WATCHDOG, ARM_SBSA_WATCHDOG, DW_WATCHDOG
+  * [arm64] enable support for Marvell arm64 boards
+    - CRYPTO_DEV_MARVELL_CESA, MARVELL_PHY, MARVELL_10G_PHY,
+      PHY_MVEBU_CP110_COMPHY, RTC_DRV_MV, RTC_DRV_ARMADA38X, SPI_ARMADA_3700
+      ARMADA_THERMAL, HW_RANDOM_OMAP, CRYPTO_DEV_SAFEXCE
+  * [arm64] 96boards Hikey and Dragonboard support
+    - PCIE_KIRIN, TEE, OPTEE, SND_I2S_HI6210_I2S, DRM_I2C_ADV7511_AUDIO,
+      CMA, USB_ISP176, USB_CHIPIDEA_ULPI, USB_DWC3_ULPI, NOP_USB_XCEIV
+      USB_ULPI, RPMSG_QCOM*, PHY_QCOM*, QCOM_IOMMU, QCOM_CLK*, etc
+    - SERIAL_DEV_BUS for HiKey bluetooth
+  * All options as modules when possible
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 17 Nov 2017 00:16:15 +0000
+
+linux (4.14~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [mips*] Increase RELOCATION_TABLE_SIZE to 0x00120000 (fixes FTBFS)
+  * debian/bin/gencontrol.py: Set encoding to UTF-8 globally
+  * [alpha] udeb: Remove empty fb-modules package (fixes FTBFS)
+  * [armel] udeb: Remove fbcon from fb-modules package
+
+  [ Uwe Kleine-König ]
+  * [arm64] add BRCMFMAC_SDIO for wifi on Raspberry Pi 3 (Closes: #877911)
+
+  [ Vagrant Cascadian ]
+  * Enable SQUASHFS_LZ4 in default config.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 30 Oct 2017 18:31:38 +0000
+
+linux (4.14~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * Update kconfig for 4.14:
+    - [alpha] fbdev: Re-enable FRAMEBUFFER_CONSOLE as built-in
+    - [armel] fbdev: Explicitly disable FRAMEBUFFER_CONSOLE, as it can no
+      longer be a module
+    - [arm64] Re-enable MMC_QCOM_DML
+    - Change RC_CORE back to being a module
+    - power/supply: Enable BATTERY_BQ27XXX and BATTERY_BQ27XXX_HDQ as modules,
+      replacing W1_SLAVE_BQ27000
+  * net: Disable IRDA, which will soon be deleted upstream
+  * [mips*] Increase RELOCATION_TABLE_SIZE to 0x00110000 for all flavours
+    (fixes FTBFS)
+  * i40e: Build for 64-bit targets only (fixes FTBFS on hppa)
+  * Compile with gcc-7 on all architectures
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] udeb: Build ata-modules package, include libata
+  * [m68k] udeb: Add ide-cd_mod to cdrom-core-modules
+  * [m68k] udeb: Build ide-core-modules package, include ide-core
+  * [m68k] udeb: Build ide-modules package, include ide-gd_mod
+  * [m68k] udeb: Move old IDE drivers from pata-modules to ide-modules:
+    - buddha, falconide, gayle, macide, q40ide
+  * [m68k] udeb: Add missing SCSI drivers to scsi-modules:
+    - a2091, a3000, a4000t, bvme6000_scsi, gvp11, mvme16x_scsi, zorro7xx
+  * [m68k] Build uncompressed kernel image by default.
+
+  [ Uwe Kleine-König ]
+  * media: drop explicit setting of DVB_MAX_ADAPTERS to follow upstream default
+    (Closes: #878846)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 17 Oct 2017 23:37:52 +0100
+
+linux (4.14~rc3-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update support patchset to aufs4.x-rcN-20171002
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 02 Oct 2017 04:47:08 +0100
+
+linux (4.13.13-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11
+    - workqueue: replace pool->manager_arb mutex with a flag
+    - [x86] ALSA: hda/realtek - Add support for ALC236/ALC3204
+    - [x86] ALSA: hda - fix headset mic problem for Dell machines with alc236
+    - ceph: unlock dangling spinlock in try_flush_caps()
+    - [powerpc*] KVM: PPC: Fix oops when checking KVM_CAP_PPC_HTM
+      (CVE-2017-15306)
+    - [powerpc*] KVM: PPC: Book3S HV: POWER9 more doorbell fixes
+    - [powerpc*] KVM: PPC: Book3S: Protect kvmppc_gpa_to_ua() with SRCU
+    - [s390x] kvm: fix detection of guest machine checks
+    - nbd: handle interrupted sendmsg with a sndtimeo set
+    - spi: uapi: spidev: add missing ioctl header
+    - spi: a3700: Return correct value on timeout detection
+    - spi: bcm-qspi: Fix use after free in bcm_qspi_probe() in error path
+    - spi: armada-3700: Fix failing commands with quad-SPI
+    - ovl: add NULL check in ovl_alloc_inode
+    - ovl: fix EIO from lookup of non-indexed upper
+    - ovl: handle ENOENT on index lookup
+    - ovl: do not cleanup unsupported index entries
+    - fuse: fix READDIRPLUS skipping an entry
+    - xen/gntdev: avoid out of bounds access in case of partial gntdev_mmap()
+    - xen: fix booting ballooned down hvm guest
+    - cifs: Select all required crypto modules
+    - CIFS: Fix NULL pointer deref on SMB2_tcon() failure
+    - Input: elan_i2c - add ELAN0611 to the ACPI table
+    - Input: gtco - fix potential out-of-bound access (CVE-2017-16643)
+    - Fix encryption labels and lengths for SMB3.1.1
+    - SMB3: Validate negotiate request must always be signed
+    - assoc_array: Fix a buggy node-splitting case (CVE-2017-12193)
+    - [s390x] scsi: zfcp: fix erp_action use-before-initialize in REC action
+      trace
+    - scsi: aacraid: Fix controller initialization failure
+    - scsi: qla2xxx: Initialize Work element before requesting IRQs
+    - scsi: sg: Re-fix off by one in sg_fill_request_table()
+    - [x86] cpu/AMD: Apply the Erratum 688 fix when the BIOS doesn't
+    - [x86] drm/amd/powerplay: fix uninitialized variable
+    - [x86] drm/i915/perf: fix perf enable/disable ioctls with 32bits
+      userspace
+    - [armhf] can: sun4i: fix loopback mode
+    - can: kvaser_usb: Correct return value in printout
+    - can: kvaser_usb: Ignore CMD_FLUSH_QUEUE_REPLY messages
+    - cfg80211: fix connect/disconnect edge cases
+    - ipsec: Fix aborted xfrm policy dump crash
+    - [armhf] regulator: fan53555: fix I2C device ids (Closes: #879768)
+    - [powerpc*] xive: Fix the size of the cpumask used in
+      xive_find_target_in_mask()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.12
+    - ALSA: timer: Add missing mutex lock for compat ioctls
+    - ALSA: seq: Fix nested rwsem annotation for lockdep splat
+    - cifs: check MaxPathNameComponentLength != 0 before using it
+      (Closes: #880504)
+    - KEYS: return full count in keyring_read() if buffer is too small
+    - KEYS: trusted: fix writing past end of buffer in trusted_read()
+    - KEYS: fix out-of-bounds read during ASN.1 parsing
+    - ASoC: adau17x1: Workaround for noise bug in ADC
+    - virtio_blk: Fix an SG_IO regression
+    - [arm64] ensure __dump_instr() checks addr_limit
+    - [arm64] KVM: its: Fix missing dynamic allocation check in scan_its_table
+    - [armhf, arm64] KVM: set right LR register value for 32 bit guest when
+      inject abort
+    - [armhf,arm64] kvm: Disable branch profiling in HYP code
+    - [armhf] dts: mvebu: pl310-cache disable double-linefill
+    - drm/amdgpu: return -ENOENT from uvd 6.0 early init for harvesting
+    - drm/amdgpu: allow harvesting check for Polaris VCE
+    - userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of
+      i_size
+    - ocfs2: fstrim: Fix start offset of first cluster group during fstrim
+    - fs/hugetlbfs/inode.c: fix hwpoison reserve accounting
+    - mm, swap: fix race between swap count continuation operations
+    - [x86] drm/i915: Do not rely on wm preservation for ILK watermarks
+    - [x86] drm/i915/edp: read edp display control registers unconditionally
+    - [mips*] bpf: Fix a typo in build_one_insn()
+    - [mips*] smp-cmp: Use right include for task_struct
+    - [mips*] SMP: Fix deadlock & online race
+    - Revert "x86: do not use cpufreq_quick_get() for /proc/cpuinfo "cpu MHz""
+    - [powerpc*] kprobes: Dereference function pointers only if the address
+      does not belong to kernel text
+    - futex: Fix more put_pi_state() vs. exit_pi_state_list() races
+    - perf/cgroup: Fix perf cgroup hierarchy support
+    - [x86] mcelog: Get rid of RCU remnants
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.13
+    - netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to
+      rhashtable"
+    - netfilter: nft_set_hash: disable fast_ops for 2-len keys (Closes: #880145)
+    - workqueue: Fix NULL pointer dereference
+    - crypto: ccm - preserve the IV buffer
+    - [x86] crypto: sha1-mb - fix panic due to unaligned access
+    - [x86] crypto: sha256-mb - fix panic due to unaligned access
+    - KEYS: fix NULL pointer dereference during ASN.1 parsing [ver #2]
+    - [x86] ACPI / PM: Blacklist Low Power S0 Idle _DSM for Dell XPS13 9360
+    - ACPICA: Dispatch active GPEs at init time
+    - ACPICA: Make it possible to enable runtime GPEs earlier
+    - ACPI / scan: Enable GPEs before scanning the namespace
+    - [armel,armhf] 8720/1: ensure dump_instr() checks addr_limit
+    - ALSA: timer: Limit max instances per timer
+    - ALSA: usb-audio: support new Amanero Combo384 firmware version
+    - [x86] ALSA: hda - fix headset mic problem for Dell machines with alc274
+    - ALSA: seq: Fix OSS sysex delivery in OSS emulation
+    - ALSA: seq: Avoid invalid lockdep class warning
+    - [mips*] Fix CM region target definitions
+    - [powerpc*] KVM: Book3S HV: Fix exclusion between HPT resizing and other
+      HPT updates
+    - Input: elan_i2c - add ELAN060C to the ACPI table
+    - rbd: use GFP_NOIO for parent stat and data requests
+    - [x86] drm/vmwgfx: Fix Ubuntu 17.10 Wayland black screen issue
+    - [armhf] can: sun4i: handle overrun in RX FIFO
+    - can: peak: Add support for new PCIe/M2 CAN FD interfaces
+    - [x86] debug: Handle warnings before the notifier chain, to fix KGDB crash
+    - [x86] smpboot: Make optimization of delay calibration work correctly
+    - [x86] oprofile/ppro: Do not use __this_cpu*() in preemptible context
+
+  [ Salvatore Bonaccorso ]
+  * mac80211: accept key reinstall without changing anything (CVE-2017-13080)
+  * sctp: do not peel off an assoc from one netns to another one
+    (CVE-2017-15115)
+
+  [ Ben Hutchings ]
+  * linux-image: Recommend apparmor, as systemd units with an AppArmor
+    profile will fail without it (Closes: #880441)
+  * [powerpc*] kvm: Ignore ABI change in 4.13.6 (fixes FTBFS)
+  * swap: Avoid ABI change in 4.13.12
+  * mac80211: use constant time comparison with keys
+  * mac80211: don't compare TKIP TX MIC key in reinstall prevention
+  * usb: usbtest: fix NULL pointer dereference (CVE-2017-16532)
+  * media: cx231xx-cards: fix NULL-deref on missing association descriptor
+    (CVE-2017-16536)
+  * media: imon: Fix null-ptr-deref in imon_probe (CVE-2017-16537)
+  * media: dib0700: fix invalid dvb_detach argument (CVE-2017-16646)
+  * net: usb: asix: fill null-ptr-deref in asix_suspend (CVE-2017-16647)
+  * net: cdc_ether: fix divide by 0 on bad descriptors (CVE-2017-16649)
+  * net: qmi_wwan: fix divide by 0 on bad descriptors (CVE-2017-16650)
+  * nftables: Enable NFT_RT, NFT_SET_BITMAP, NFT_OBJREF as modules
+    (Closes: #881931)
+  * [powerpc*/*64*] drm: Enable DRM_AMDGPU as module (Closes: #881593)
+  * amdgpu: Enable DRM_AMDGPU_USERPTR on all architectures
+  * amdgpu: Enable DRM_AMDGPU_SI, CONFIG_DRM_AMDGPU_CIK (Closes: #847570)
+  * [arm64,x86] net/wireless: Enable RTL8723BS as module (Closes: #881568)
+  * [arm64] nvmem: Enable NVMEM_SUNXI_SID as module (Closes: #881567)
+  * [x86] rmi4: Disable RMI4_SMB (Closes: #880471)
+  * ALSA: timer: Avoid ABI change in 4.13.13
+  * netfilter: nat: Avoid ABI change in 4.13.13
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 16 Nov 2017 21:04:10 +0000
+
+linux (4.13.10-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5
+    - cifs: check rsp for NULL before dereferencing in SMB2_open
+    - cifs: release cifs root_cred after exit_cifs
+    - cifs: release auth_key.response for reconnect.
+    - nvme-pci: fix host memory buffer allocation fallback
+    - nvme-pci: use appropriate initial chunk size for HMB allocation
+    - nvme-pci: propagate (some) errors from host memory buffer setup
+    - dax: remove the pmem_dax_ops->flush abstraction
+    - dm integrity: do not check integrity for failed read operations
+    - mmc: block: Fix incorrectly initialized requests
+    - fs/proc: Report eip/esp in /prod/PID/stat for coredumping
+    - scsi: scsi_transport_fc: fix NULL pointer dereference in
+      fc_bsg_job_timeout
+    - cifs: SMB3: Add support for multidialect negotiate (SMB2.1 and later)
+    - mac80211: fix VLAN handling with TXQs
+    - mac80211_hwsim: Use proper TX power
+    - mac80211: flush hw_roc_start work before cancelling the ROC
+    - genirq: Make sparse_irq_lock protect what it should protect
+    - genirq/msi: Fix populating multiple interrupts
+    - genirq: Fix cpumask check in __irq_startup_managed()
+    - [powerpc*] KVM: Book3S HV: Hold kvm->lock around call to
+      kvmppc_update_lpcr
+    - [powerpc*] KVM: Book3S HV: Fix bug causing host SLB to be restored
+      incorrectly
+    - [powerpc*] KVM: PPC: Book3S HV: Don't access XIVE PIPR register using
+      byte accesses
+    - tracing: Fix trace_pipe behavior for instance traces
+    - tracing: Erase irqsoff trace with empty write
+    - tracing: Remove RCU work arounds from stack tracer
+    - md/raid5: fix a race condition in stripe batch
+    - md/raid5: preserve STRIPE_ON_UNPLUG_LIST in break_stripe_batch_list
+    - scsi: aacraid: Fix 2T+ drives on SmartIOC-2000
+    - scsi: aacraid: Add a small delay after IOP reset
+    - [armhf] drm/exynos: Fix locking in the suspend/resume paths
+    - [x86] drm/i915/gvt: Fix incorrect PCI BARs reporting
+    - Revert "drm/i915/bxt: Disable device ready before shutdown command"
+    - drm/amdgpu: revert tile table update for oland
+    - drm/radeon: disable hard reset in hibernate for APUs
+    - crypto: drbg - fix freeing of resources
+    - security/keys: properly zero out sensitive key material in big_key
+    - security/keys: rewrite all of big_key crypto
+    - KEYS: fix writing past end of user-supplied buffer in keyring_read()
+    - KEYS: prevent creating a different user's keyrings
+    - [x86] libnvdimm, namespace: fix btt claim class crash
+    - [powerpc*] eeh: Create PHB PEs after EEH is initialized
+    - [powerpc*] pseries: Fix parent_dn reference leak in add_dt_node()
+    - [powerpc*] tm: Flush TM only if CPU has TM feature
+    - [mips*] Fix perf event init
+    - [s390x] perf: fix bug when creating per-thread event
+    - [s390x] mm: make pmdp_invalidate() do invalidation only
+    - [s390x] mm: fix write access check in gup_huge_pmd()
+    - PM: core: Fix device_pm_check_callbacks()
+    - Revert "IB/ipoib: Update broadcast object if PKey value was changed in
+      index 0"
+    - cifs: Fix SMB3.1.1 guest authentication to Samba
+    - cifs: SMB3: Fix endian warning
+    - cifs: SMB3: Warn user if trying to sign connection that authenticated as
+      guest
+    - cifs: SMB: Validate negotiate (to protect against downgrade) even if
+      signing off
+    - cifs: SMB3: handle new statx fields
+    - cifs: SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
+    - vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
+    - libceph: don't allow bidirectional swap of pg-upmap-items
+    - brd: fix overflow in __brd_direct_access
+    - gfs2: Fix debugfs glocks dump
+    - bsg-lib: don't free job in bsg_prepare_job
+    - iw_cxgb4: drop listen destroy replies if no ep found
+    - iw_cxgb4: remove the stid on listen create failure
+    - iw_cxgb4: put ep reference in pass_accept_req()
+    - rcu: Allow for page faults in NMI handlers
+    - mmc: sdhci-pci: Fix voltage switch for some Intel host controllers
+    - extable: Consolidate *kernel_text_address() functions
+    - extable: Enable RCU if it is not watching in kernel_text_address()
+    - seccomp: fix the usage of get/put_seccomp_filter() in seccomp_get_filter()
+    - [arm64] Make sure SPsel is always set
+    - [arm64] mm: Use READ_ONCE when dereferencing pointer to pte table
+    - [arm64] fault: Route pte translation faults via do_translation_fault
+    - [x86] KVM: VMX: extract __pi_post_block
+    - [x86] KVM: VMX: avoid double list add with VT-d posted interrupts
+    - [x86] KVM: VMX: simplify and fix vmx_vcpu_pi_load
+    - [x86] KVM: nVMX: fix HOST_CR3/HOST_CR4 cache
+    - [x86] kvm: Handle async PF in RCU read-side critical sections
+    - xfs: validate bdev support for DAX inode flag
+    - sched/sysctl: Check user input value of sysctl_sched_time_avg
+    - irq/generic-chip: Don't replace domain's name
+    - mtd: Fix partition alignment check on multi-erasesize devices
+    - [armhf] etnaviv: fix submit error path
+    - [armhf] etnaviv: fix gem object list corruption
+    - futex: Fix pi_state->owner serialization
+    - md: fix a race condition for flush request handling
+    - md: separate request handling
+    - PCI: Fix race condition with driver_override
+    - btrfs: fix NULL pointer dereference from free_reloc_roots()
+    - btrfs: clear ordered flag on cleaning up ordered extents
+    - btrfs: finish ordered extent cleaning if no progress is found
+    - btrfs: propagate error to btrfs_cmp_data_prepare caller
+    - btrfs: prevent to set invalid default subvolid
+    - [x86] platform: fujitsu-laptop: Don't oops when FUJ02E3 is not presnt
+    - PM / OPP: Call notifier without holding opp_table->lock
+    - [x86] mm: Fix fault error path using unsafe vma pointer
+    - [x86] fpu: Don't let userspace set bogus xcomp_bv (CVE-2017-15537)
+    - [x86] KVM: VMX: do not change SN bit in vmx_update_pi_irte()
+    - [x86] KVM: VMX: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt
+    - [x86] KVM: VMX: use cmpxchg64
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6
+    - [armhf,arm64] usb: dwc3: ep0: fix DMA starvation by assigning req->trb on
+      ep0
+    - mlxsw: spectrum: Fix EEPROM access in case of SFP/SFP+
+    - net: bonding: Fix transmit load balancing in balance-alb mode if
+      specified by sysfs
+    - openvswitch: Fix an error handling path in
+      'ovs_nla_init_match_and_action()'
+    - net: bonding: fix tlb_dynamic_lb default value
+    - net_sched: gen_estimator: fix scaling error in bytes/packets samples
+    - net: sched: fix use-after-free in tcf_action_destroy and tcf_del_walker
+    - sctp: potential read out of bounds in sctp_ulpevent_type_enabled()
+    - tcp: update skb->skb_mstamp more carefully
+    - bpf/verifier: reject BPF_ALU64|BPF_END
+    - tcp: fix data delivery rate
+    - udpv6: Fix the checksum computation when HW checksum does not apply
+    - ip6_gre: skb_push ipv6hdr before packing the header in ip6gre_header
+    - net: phy: Fix mask value write on gmii2rgmii converter speed register
+    - ip6_tunnel: do not allow loading ip6_tunnel if ipv6 is disabled in cmdline
+    - net/sched: cls_matchall: fix crash when used with classful qdisc
+    - 8139too: revisit napi_complete_done() usage
+    - bpf: do not disable/enable BH in bpf_map_free_id()
+    - tcp: fastopen: fix on syn-data transmit failure
+    - [powerpc*] net: emac: Fix napi poll list corruption
+    - net: ipv6: fix regression of no RTM_DELADDR sent after DAD failure
+    - packet: hold bind lock when rebinding to fanout hook (CVE-2017-15649)
+    - net: change skb->mac_header when Generic XDP calls adjust_head
+    - net_sched: always reset qdisc backlog in qdisc_reset()
+    - [armhf,arm64] net: stmmac: Cocci spatch "of_table"
+    - [arm64] net: qcom/emac: specify the correct size when mapping a DMA buffer
+    - vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit
+    - l2tp: fix race condition in l2tp_tunnel_delete
+    - tun: bail out from tun_get_user() if the skb is empty
+    - [armhf,arm64] net: dsa: mv88e6xxx: Allow dsa and cpu ports in multiple
+      vlans
+    - [armhf,arm64] net: dsa: Fix network device registration order
+    - packet: in packet_do_bind, test fanout with bind_lock held (CVE-2017-15649)
+    - packet: only test po->has_vnet_hdr once in packet_snd
+    - [armhf,arm64] net: dsa: mv88e6xxx: lock mutex when freeing IRQs
+    - net: Set sk_prot_creator when cloning sockets to the right proto
+    - net/mlx5e: IPoIB, Fix access to invalid memory address
+    - netlink: do not proceed if dump's start() errs
+    - ip6_gre: ip6gre_tap device should keep dst
+    - ip6_tunnel: update mtu properly for ARPHRD_ETHER tunnel device in tx path
+    - IPv4: early demux can return an error code
+    - tipc: use only positive error codes in messages
+    - l2tp: fix l2tp_eth module loading
+    - socket, bpf: fix possible use after free
+    - net: rtnetlink: fix info leak in RTM_GETSTATS call
+    - [amd64] bpf: fix bpf_tail_call() x64 JIT
+    - usb: gadget: core: fix ->udc_set_speed() logic
+    - USB: gadgetfs: Fix crash caused by inadequate synchronization
+    - USB: gadgetfs: fix copy_to_user while holding spinlock
+    - usb: gadget: udc: atmel: set vbus irqflags explicitly
+    - usb-storage: unusual_devs entry to fix write-access regression for
+      Seagate external drives
+    - usb-storage: fix bogus hardware error messages for ATA pass-thru devices
+    - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor
+    - usb: pci-quirks.c: Corrected timeout values used in handshake
+    - USB: cdc-wdm: ignore -EPIPE from GetEncapsulatedResponse
+    - USB: dummy-hcd: fix connection failures (wrong speed)
+    - USB: dummy-hcd: fix infinite-loop resubmission bug
+    - USB: dummy-hcd: Fix erroneous synchronization change
+    - USB: devio: Prevent integer overflow in proc_do_submiturb()
+    - USB: g_mass_storage: Fix deadlock when driver is unbound
+    - USB: uas: fix bug in handling of alternate settings
+    - USB: core: harden cdc_parse_cdc_header
+    - usb: Increase quirk delay for USB devices
+    - USB: fix out-of-bounds in usb_set_configuration
+    - usb: xhci: Free the right ring in xhci_add_endpoint()
+    - xhci: fix finding correct bus_state structure for USB 3.1 hosts
+    - xhci: fix wrong endpoint ESIT value shown in tracing
+    - usb: host: xhci-plat: allow sysdev to inherit from ACPI
+    - xhci: Fix sleeping with spin_lock_irq() held in ASmedia 1042A workaround
+    - xhci: set missing SuperSpeedPlus Link Protocol bit in roothub descriptor
+    - [x86] Revert "xhci: Limit USB2 port wake support for AMD Promontory hosts"
+    - [armhf] iio: adc: twl4030: Fix an error handling path in
+      'twl4030_madc_probe()'
+    - [armhf] iio: adc: twl4030: Disable the vusb3v1 rugulator in the error
+      handling path of 'twl4030_madc_probe()'
+    - iio: core: Return error for failed read_reg
+    - uwb: properly check kthread_run return value
+    - uwb: ensure that endpoint is interrupt
+    - ksm: fix unlocked iteration over vmas in cmp_and_merge_page()
+    - mm, hugetlb, soft_offline: save compound page order before page migration
+    - mm, oom_reaper: skip mm structs with mmu notifiers
+    - mm: fix RODATA_TEST failure "rodata_test: test data was not read only"
+    - mm: avoid marking swap cached page as lazyfree
+    - mm: fix data corruption caused by lazyfree page
+    - userfaultfd: non-cooperative: fix fork use after free
+    - ALSA: compress: Remove unused variable
+    - Revert "ALSA: echoaudio: purge contradictions between dimension matrix
+      members and total number of members"
+    - ALSA: usx2y: Suppress kernel warning at page allocation failures
+    - [powerpc*] powernv: Increase memory block size to 1GB on radix
+    - [powerpc*] Fix action argument for cpufeatures-based TLB flush
+    - percpu: make this_cpu_generic_read() atomic w.r.t. interrupts
+    - [x86] intel_th: pci: Add Lewisburg PCH support
+    - driver core: platform: Don't read past the end of "driver_override" buffer
+    - cgroup: Reinit cgroup_taskset structure before cgroup_migrate_execute()
+      returns
+    - [x86] Drivers: hv: fcopy: restore correct transfer length
+    - [x86] vmbus: don't acquire the mutex in vmbus_hvsock_device_unregister()
+    - ftrace: Fix kmemleak in unregister_ftrace_graph
+    - ovl: fix error value printed in ovl_lookup_index()
+    - ovl: fix dput() of ERR_PTR in ovl_cleanup_index()
+    - ovl: fix dentry leak in ovl_indexdir_cleanup()
+    - ovl: fix missing unlock_rename() in ovl_do_copy_up()
+    - ovl: fix regression caused by exclusive upper/work dir protection
+    - [arm64] dt marvell: Fix AP806 system controller size
+    - [arm64] Ensure the instruction emulation is ready for userspace
+    - HID: rmi: Make sure the HID device is opened on resume
+    - HID: i2c-hid: allocate hid buffers for real worst case
+    - HID: wacom: leds: Don't try to control the EKR's read-only LEDs
+    - HID: wacom: Properly report negative values from Intuos Pro 2 Bluetooth
+    - HID: wacom: Correct coordinate system of touchring and pen twist
+    - HID: wacom: generic: Send MSC_SERIAL and ABS_MISC when leaving prox
+    - HID: wacom: generic: Clear ABS_MISC when tool leaves proximity
+    - HID: wacom: Always increment hdev refcount within wacom_get_hdev_data
+    - HID: wacom: bits shifted too much for 9th and 10th buttons
+    - btrfs: avoid overflow when sector_t is 32 bit
+    - Btrfs: fix overlap of fs_info::flags values
+    - dm crypt: reject sector_size feature if device length is not aligned to it
+    - dm ioctl: fix alignment of event number in the device list
+    - dm crypt: fix memory leak in crypt_ctr_cipher_old()
+    - [powerpc*] KVM: Book3S: Fix server always zero from kvmppc_xive_get_xive()
+    - [x86] kvm: Avoid async PF preempting the kernel incorrectly
+    - iwlwifi: mvm: use IWL_HCMD_NOCOPY for MCAST_FILTER_CMD
+    - scsi: sd: Implement blacklist option for WRITE SAME w/ UNMAP
+    - scsi: sd: Do not override max_sectors_kb sysfs setting
+    - brcmfmac: setup passive scan if requested by user-space
+    - [x86] drm/i915: always update ELD connector type after get modes
+    - [x86] drm/i915/bios: ignore HDMI on port A
+    - bsg-lib: fix use-after-free under memory-pressure
+    - nvme-pci: Use PCI bus address for data/queues in CMB
+    - mmc: core: add driver strength selection when selecting hs400es
+    - nl80211: Define policy for packet pattern attributes
+    - [armhf] clk: samsung: exynos4: Enable VPLL and EPLL clocks for
+      suspend/resume cycle
+    - udp: perform source validation for mcast early demux
+    - udp: fix bcast packet reception
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.7
+    - watchdog: Revert "iTCO_wdt: all versions count down twice"
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8
+    - USB: dummy-hcd: Fix deadlock caused by disconnect detection
+    - [mips*] math-emu: Remove pr_err() calls from fpu_emu()
+    - [mips*] bpf: Fix uninitialised target compiler error
+    - [x86] mei: always use domain runtime pm callbacks.
+    - [armhf] dmaengine: edma: Align the memcpy acnt array size with the
+      transfer
+    - [armhf] dmaengine: ti-dma-crossbar: Fix possible race condition with
+      dma_inuse
+    - NFS: Fix uninitialized rpc_wait_queue
+    - nfs/filelayout: fix oops when freeing filelayout segment
+    - HID: usbhid: fix out-of-bounds bug
+    - crypto: skcipher - Fix crash on zero-length input
+    - crypto: shash - Fix zero-length shash ahash digest crash
+    - [x86] KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
+    - [x86] pinctrl/amd: Fix build dependency on pinmux code
+    - [x86] iommu/amd: Finish TLB flush in amd_iommu_unmap()
+    - device property: Track owner device of device property
+    - Revert "vmalloc: back off when the current task is killed"
+    - fs/mpage.c: fix mpage_writepage() for pages with buffers
+    - ALSA: usb-audio: Kill stray URB at exiting
+    - ALSA: seq: Fix copy_from_user() call inside lock
+    - ALSA: caiaq: Fix stray URB at probe error path
+    - ALSA: line6: Fix NULL dereference at podhd_disconnect()
+    - ALSA: line6: Fix missing initialization before error path
+    - ALSA: line6: Fix leftover URB at error-path during probe
+    - drm/atomic: Unref duplicated drm_atomic_state in
+      drm_atomic_helper_resume()
+    - [x86] drm/i915/edp: Get the Panel Power Off timestamp after panel is off
+    - [x86] drm/i915: Read timings from the correct transcoder in
+      intel_crtc_mode_get()
+    - [x86] drm/i915/bios: parse DDI ports also for CHV for HDMI DDC pin and DP
+      AUX channel
+    - [x86] drm/i915: Use crtc_state_is_legacy_gamma in intel_color_check
+    - usb: gadget: configfs: Fix memory leak of interface directory data
+    - usb: gadget: composite: Fix use-after-free in
+      usb_composite_overwrite_options
+    - [arm64] PCI: aardvark: Move to struct pci_host_bridge IRQ mapping
+      functions
+    - [armhf,armhf] Revert "PCI: tegra: Do not allocate MSI target memory"
+    - direct-io: Prevent NULL pointer access in submit_page_section
+    - fix unbalanced page refcounting in bio_map_user_iov (CVE-2017-12190)
+    - more bio_map_user_iov() leak fixes
+    - bio_copy_user_iov(): don't ignore ->iov_offset
+    - perf script: Add missing separator for "-F ip,brstack" (and brstackoff)
+    - genirq/cpuhotplug: Enforce affinity setting on startup of managed irqs
+    - genirq/cpuhotplug: Add sanity check for effective affinity mask
+    - USB: serial: cp210x: fix partnum regression
+    - USB: serial: console: fix use-after-free on disconnect
+    - USB: serial: console: fix use-after-free after failed setup
+    - RAS/CEC: Use the right length for "cec_disable"
+    - [x86] alternatives: Fix alt_max_short macro to really be a max()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.9
+    - [x86] apic: Silence "FW_BUG TSC_DEADLINE disabled due to Errata" on CPUs
+      without the feature
+    - [x86] apic: Silence "FW_BUG TSC_DEADLINE disabled due to Errata" on
+      hypervisors
+    - [armhf,arm64] perf pmu: Unbreak perf record for arm/arm64 with events
+      with explicit PMU
+    - mm: page_vma_mapped: ensure pmd is loaded with READ_ONCE outside of lock
+    - HID: hid-elecom: extend to fix descriptor for HUGE trackball
+    - [x86] Drivers: hv: vmbus: Fix rescind handling issues
+    - [x86] Drivers: hv: vmbus: Fix bugs in rescind handling
+    - [x86] vmbus: simplify hv_ringbuffer_read
+    - [x86] vmbus: refactor hv_signal_on_read
+    - [x86] vmbus: eliminate duplicate cached index
+    - [x86] vmbus: more host signalling avoidance
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10
+    - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
+    - usb: hub: Allow reset retry for USB2 devices on connect bounce
+    - ALSA: usb-audio: Add native DSD support for Pro-Ject Pre Box S2 Digital
+    - can: gs_usb: fix busy loop if no more TX context is available
+    - scsi: qla2xxx: Fix uninitialized work element
+    - nbd: don't set the device size until we're connected
+    - [s390x] cputime: fix guest/irq/softirq times after CPU hotplug
+    - [hppa/parisc] Fix double-word compare and exchange in LWS code on 32-bit
+      kernels
+    - [hppa] Fix detection of nonsynchronous cr16 cycle counters
+    - iio: dummy: events: Add missing break
+    - [armhf] usb: musb: sunxi: Explicitly release USB PHY on exit
+    - [armhf] USB: musb: fix session-bit runtime-PM quirk
+    - [armhf] USB: musb: fix late external abort on suspend
+    - [armhf] usb: musb: musb_cppi41: Fix the address of teardown and autoreq
+      registers
+    - [armhf] usb: musb: musb_cppi41: Fix cppi41_set_dma_mode() for DA8xx
+    - [armhf] usb: musb: musb_cppi41: Configure the number of channels for DA8xx
+    - [armhf] usb: musb: Check for host-mode using is_host_active() on reset
+      interrupt
+    - xhci: Identify USB 3.1 capable hosts by their port protocol capability
+    - xhci: Cleanup current_cmd in xhci_cleanup_command_queue()
+    - usb: xhci: Reset halted endpoint if trb is noop
+    - usb: xhci: Handle error condition in xhci_stop_device()
+    - can: esd_usb2: Fix can_dlc value for received RTR, frames
+    - can: af_can: can_pernet_init(): add missing error handling for kzalloc
+      returning NULL
+    - KEYS: encrypted: fix dereference of NULL user_key_payload
+    - mmc: sdhci-pci: Fix default d3_retune for Intel host controllers
+    - [x86] drm/i915: Use bdw_ddi_translations_fdi for Broadwell
+    - drm/nouveau/kms/nv50: fix oops during DP IRQ handling on non-MST boards
+    - drm/nouveau/bsp/g92: disable by default
+    - drm/nouveau/mmu: flush tlbs before deleting page tables
+    - media: cec: Respond to unregistered initiators, when applicable
+    - media: dvb: i2c transfers over usb cannot be done from stack
+    - ALSA: seq: Enable 'use' locking in all configurations
+    - ALSA: hda: Remove superfluous '-' added by printk conversion
+    - ALSA: hda: Abort capability probe at invalid register read
+    - [x86] i2c: ismt: Separate I2C block read from SMBus block read
+    - [x86] i2c: piix4: Fix SMBus port selection for AMD Family 17h chips
+    - Revert "tools/power turbostat: stop migrating, unless '-m'"
+    - brcmfmac: Add check for short event packets
+    - brcmsmac: make some local variables 'static const' to reduce stack size
+    - [armhf] dts: sun6i: Fix endpoint IDs in second display pipeline
+    - [i386] clockevents/drivers/cs5535: Improve resilience to spurious
+      interrupts
+    - rtlwifi: rtl8821ae: Fix connection lost problem
+    - [x86] microcode/intel: Disable late loading on model 79
+    - lib/digsig: fix dereference of NULL user_key_payload
+    - fscrypt: fix dereference of NULL user_key_payload
+    - ecryptfs: fix dereference of NULL user_key_payload
+    - KEYS: Fix race between updating and finding a negative key
+      (CVE-2017-15951)
+    - FS-Cache: fix dereference of NULL user_key_payload
+    - KEYS: don't let add_key() update an uninstantiated key (CVE-2017-15299)
+    - pkcs7: Prevent NULL pointer dereference, since sinfo is not always set.
+    - [arm64] dts: rockchip: correct vqmmc voltage for rk3399 platforms
+    - ALSA: hda - Fix incorrect TLV callback check introduced during set_fs()
+      removal
+    - iomap_dio_rw: Allocate AIO completion queue before submitting dio
+    - xfs: don't unconditionally clear the reflink flag on zero-block files
+    - xfs: evict CoW fork extents when performing finsert/fcollapse
+    - fs/xfs: Use %pS printk format for direct addresses
+    - xfs: report zeroed or not correctly in xfs_zero_range()
+    - xfs: update i_size after unwritten conversion in dio completion
+    - xfs: perag initialization should only touch m_ag_max_usable for AG 0
+    - xfs: Capture state of the right inode in xfs_iflush_done
+    - xfs: always swap the cow forks when swapping extents
+    - xfs: handle racy AIO in xfs_reflink_end_cow
+    - xfs: Don't log uninitialised fields in inode structures
+    - xfs: move more RT specific code under CONFIG_XFS_RT
+    - xfs: don't change inode mode if ACL update fails
+    - xfs: reinit btree pointer on attr tree inactivation walk
+    - xfs: handle error if xfs_btree_get_bufs fails
+    - xfs: cancel dirty pages on invalidation
+    - xfs: trim writepage mapping to within eof
+    - xfs: move two more RT specific functions into CONFIG_XFS_RT
+
+  [ Ben Hutchings ]
+  * [arm64] brcmfmac: Enable BRCMFMAC_SDIO (Closes: #877911)
+  * Update build dependencies on libbabeltrace[,-ctf}-dev
+  * linux-kbuild: Include scripts/ld-version.sh, needed for powerpc 64-bit
+    modules
+  * dax: Avoid most ABI changes in 4.13.5
+  * SCSI: Avoid ABI change in 4.13.6
+  * [x86] kvm: Ignore ABI change in 4.13.6
+  * inet, l2tp, snd-seq, usb/gadget: Ignore ABI changes
+  * [armel,armhf] mbus: Ignore ABI change in 4.13.10
+  * Revert "bpf: one perf event close won't free bpf program attached ..."
+    to avoid an ABI change
+  * [armel] security: Enable SECURITY_APPARMOR and disable SECURITY_SELINUX
+  * security: Enable DEFAULT_SECURITY_APPARMOR
+  * mac80211: Avoid ABI change in 4.13.5
+  * [x86] rmi4: Enable RMI4_SMB as module (Closes: #875621)
+  * KEYS: Limit ABI change in 4.13.10
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 30 Oct 2017 15:32:11 +0000
+
+linux (4.13.4-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [armhf,arm64] thermal: Enable BCM2835_THERMAL as module (Closes: #877699)
+
+  [ Salvatore Bonaccorso ]
+  * brcmfmac: add length check in brcmf_cfg80211_escan_handler()
+    (CVE-2017-0786)
+  * [powerpc*] Use emergency stack for kernel TM Bad Thing program
+    (CVE-2017-1000255)
+  * [powerpc*] Fix illegal TM state in signal handler
+  * mac80211: fix deadlock in driver-managed RX BA session start.
+    Thanks to Eric Côté (Closes: #878092)
+  * KEYS: prevent KEYCTL_READ on negative key (CVE-2017-12192)
+  * waitid(): Add missing access_ok() checks (CVE-2017-5123)
+  * ALSA: seq: Fix use-after-free at creating a port (CVE-2017-15265)
+  * [x86] KVM: nVMX: update last_nonleaf_level when initializing nested EPT
+    (CVE-2017-12188)
+  * [x86] KVM: MMU: always terminate page walks at level 1 (CVE-2017-12188)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 15 Oct 2017 08:57:36 +0200
+
+linux (4.13.4-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.3
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.4
+
+  [ Ben Hutchings ]
+  * [armhf,arm64] mmc: Enable MMC_BCM2835 (Closes: #845422)
+  * [arm64ilp32] Build a linux-libc-dev package (Closes: #874536)
+  * [mips*r6*] Re-enable these architectures, now that dak knows about them
+    (Closes: #825024)
+  * [x86] Enable INTEL_CHT_INT33FE as module (Closes: #873164)
+  * [armhf] Enable AXP20X_ADC, CHARGER_AXP20X, BATTERY_AXP20X, GPIO_AXP209,
+    AXP288_CHARGER, AXP288_FUEL_GAUGE, EXTCON_AXP288, AXP288_ADC as modules
+    (Closes: #873038)
+  * thp: Enable TRANSPARENT_HUGEPAGE_ALWAYS instead of
+    TRANSPARENT_HUGEPAGE_MADVISE
+  * ALSA: Enable SND_OSSEMUL, a new dependency of SND_{MIXER,PCM}_OSS
+  * [armel] rtc: Disable RTC_NVMEM
+  * [x86] hyperv-daemons: Use pid file name in init script status operation
+  * Update policy version to 4.1.1:
+    - linux-doc: Build an empty package when the nodoc profile is used
+    - [x86] hyperv-daemons: Create pid files under /run, not /var/run
+    - Change all binary packages with priority: extra to priority: optional
+    - Install copyright file (and some other documentation) when the nodoc
+      profile is used
+  * debian/control: Move many build dependencies to Build-Depends-Arch field
+  * debian/control: Remove obsolete workarounds and alternate build deps
+  * usbip: Stop building broken libusbip-dev package
+  * Rename lintian-overrides template files to be consistent
+  * linux-image-dbg: Override lintian errors binary-from-other-architecture and
+    shlib-without-PT_GNU_STACK-section for vDSOs
+  * [armhf] dts: exynos: Add dwc3 SUSPHY quirk (Closes: #843448)
+  * liblockdep: Make missing function declarations fatal errors, to catch use
+    of missing kernel APIs
+  * liblockdep: Define pr_cont()
+  * Set ABI to 1
+
+  [ Uwe Kleine-König ]
+  * [arm64] really enable NET_DSA_MV88E6XXX for Espressobin
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] Enable CONFIG_PATA_FALCON as module.
+
+  [ Salvatore Bonaccorso ]
+  * fix infoleak in waitid(2) (CVE-2017-14954)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 01 Oct 2017 15:52:09 +0100
+
+linux (4.13.2-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2
+
+  [ Uwe Kleine-König ]
+  * USB/misc: reenable UCSI which got lost due to upstream changes
+  * update kernel config templates for upstream changes
+  * [amd64] enable CONFIG_SPI_PXA2XX for Apple MacBook Pro (Closes: #872004)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 19 Sep 2017 18:35:42 +0100
+
+linux (4.13.1-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.13
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.1
+
+  [ Roger Shimizu ]
+  * debian/bin/buildcheck.py:
+    Add check for uncompressed Image size, which is necessary for
+    armel/marvell flavour currently.
+
+  [ Ben Hutchings ]
+  * [mips*/octeon] mmc: Enable MMC_CAVIUM_OCTEON as module (Closes: #800594)
+
+  [ Uwe Kleine-König ]
+  * [arm64] enable NET_DSA_MV88E6XXX for Espressobin.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 11 Sep 2017 05:40:04 +0100
+
+linux (4.13~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [sh4] Do not use hyphen in exported variable names (fixes FTBFS)
+  * aufs: Update support patchset to aufs4.x-rcN-20170828
+
+  [ Roger Shimizu ]
+  * [armel] Disable CONFIG_STRICT_KERNEL_RWX, which will save about 3MB
+    on linux Image (before compression). (Closes: #870185)
+  * [armel] Change MTD_OF_PARTS, MTD_BLOCK, and MTD_PHYSMAP_OF from
+    built-in to modules.
+    Also change all RTC related except RTC_DRV_MV, which includes
+    RTC_DRV_DS1307, RTC_DRV_RS5C372, RTC_DRV_PCF8563, RTC_DRV_M41T80,
+    and RTC_DRV_S35390A, to modules. Because most marvell boards use
+    RTC_DRV_MV. (above two fix FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 30 Aug 2017 20:39:57 +0100
+
+linux (4.13~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * cpupower: Add/update definition of MSRHEADER macro for turbostat and
+    x86_energy_perf_policy
+  * Remove support for upstream DocBook-based documentation, including the
+    linux-manual package
+  * liblockdep: Re-enable liblockdep packages following upstream fixes
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 14 Aug 2017 23:20:50 +0100
+
+linux (4.12.13-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.13
+    - mtd: nand: make Samsung SLC NAND usable again
+    - mtd: nand: hynix: add support for 20nm NAND chips
+    - [armhf] mtd: nand: mxc: Fix mxc_v1 ooblayout
+    - nvme-fabrics: generate spec-compliant UUID NQNs
+    - btrfs: resume qgroup rescan on rw remount
+    - rtlwifi: btcoexist: Fix breakage of ant_sel for rtl8723be
+    - radix-tree: must check __radix_tree_preload() return value
+    - mm: kvfree the swap cluster info if the swap file is unsatisfactory
+    - mm/swapfile.c: fix swapon frontswap_map memory leak on error
+    - mm/memory.c: fix mem_cgroup_oom_disable() call missing
+    - [i386] ALSA: msnd: Optimize / harden DSP and MIDI loops
+    - [x86] KVM: SVM: Limit PFERR_NESTED_GUEST_PAGE error_code check to L1 guest
+    - rt2800: fix TX_PIN_CFG setting for non MT7620 chips
+    - Bluetooth: Properly check L2CAP config option output buffer length
+      (CVE-2017-1000251) (Closes: #875881)
+    - [arm64] dts: marvell: armada-37xx: Fix GIC maintenance interrupt
+    - [armel,armhf] 8692/1: mm: abort uaccess retries upon fatal signal
+    - NFS: Fix 2 use after free issues in the I/O code
+    - NFS: Sync the correct byte range during synchronous writes
+    - NFSv4: Fix up mirror allocation
+    - xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present
+      (CVE-2017-14340)
+
+  [ Salvatore Bonaccorso ]
+  * sctp: Avoid out-of-bounds reads from address storage (CVE-2017-7558)
+  * scsi: qla2xxx: Fix an integer overflow in sysfs code (CVE-2017-14051)
+  * Add ABI reference for 4.12.0-2
+
+  [ Ben Hutchings ]
+  * nl80211: check for the required netlink attributes presence (CVE-2017-12153)
+  * [x86] kvm: nVMX: Don't allow L2 to access the hardware CR8 (CVE-2017-12154)
+  * video: fbdev: aty: do not leak uninitialized padding in clk to userspace
+    (CVE-2017-14156)
+  * scsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly
+    (CVE-2017-14489)
+  * packet: Don't write vnet header beyond end of buffer (CVE-2017-14497)
+  * [x86] KVM: VMX: Do not BUG() on out-of-bounds guest IRQ (CVE-2017-1000252)
+  * nfs: Ignore ABI change
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 19 Sep 2017 01:59:17 +0100
+
+linux (4.12.12-2) unstable; urgency=medium
+
+  * debian/source/lintian-overrides: Override license-problem-gfdl-invariants
+    error triggered by a ReSTified copy of the GFDL
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 11 Sep 2017 04:35:28 +0100
+
+linux (4.12.12-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.7
+    - ppp: Fix false xmit recursion detect with two ppp devices
+    - ppp: fix xmit recursion detection on ppp channels
+    - tcp: avoid setting cwnd to invalid ssthresh after cwnd reduction states
+    - net: fix keepalive code vs TCP_FASTOPEN_CONNECT
+    - ipv6: set rt6i_protocol properly in the route when it is installed
+    - [s390x] bpf: fix jit branch offset related to ldimm64
+    - net/mlx4_en: don't set CHECKSUM_COMPLETE on SCTP packets
+    - net: sched: set xt_tgchk_param par.net properly in ipt_init_target
+    - net: sched: set xt_tgchk_param par.nft_compat as 0 in ipt_init_target
+    - tcp: fastopen: tcp_connect() must refresh the route
+    - qmi_wwan: fix NULL deref on disconnect
+    - net: avoid skb_warn_bad_offload false positives on UFO
+    - igmp: Fix regression caused by igmp sysctl namespace code.
+    - scsi: sg: only check for dxfer_len greater than 256M
+    - btrfs: Remove false alert when fiemap range is smaller than on-disk
+      extent
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.8
+    - mm: ratelimit PFNs busy info message
+    - mm: fix list corruptions on shmem shrinklist
+    - futex: Remove unnecessary warning from get_futex_key
+    - xfs: Fix leak of discard bio
+    - [armhf] pinctrl: armada-37xx: Fix number of pin in south bridge
+    - mtd: nand: Fix timing setup for NANDs that do not support SET FEATURES
+    - mtd: nand: Declare tBERS, tR and tPROG as u64 to avoid integer overflow
+    - iscsi-target: fix memory leak in iscsit_setup_text_cmd()
+    - iscsi-target: Fix iscsi_np reset hung task during parallel delete
+    - usb-storage: fix deadlock involving host lock and scsi_done
+    - target: Fix node_acl demo-mode + uncached dynamic shutdown regression
+    - fuse: initialize the flock flag in fuse_file on allocation
+    - i2c: designware: Some broken DSTDs use 1MiHz instead of 1MHz
+    - nand: fix wrong default oob layout for small pages using soft ecc
+    - mmc: mmc: correct the logic for setting HS400ES signal voltage
+    - nfs/flexfiles: fix leak of nfs4_ff_ds_version arrays
+    - [armhf] drm/etnaviv: Fix off-by-one error in reloc checking
+    - [x86] drm/i915: Fix out-of-bounds array access in bdw_load_gamma_lut
+    - [armhf] usb: musb: fix tx fifo flush handling again
+    - USB: hcd: Mark secondary HCD as dead if the primary one died
+    - [armhf] iio: accel: st_accel: add SPI-3wire support
+    - [x86] iio: accel: bmc150: Always restore device to normal mode after
+      suspend-resume
+    - iio: light: tsl2563: use correct event code
+    - staging: comedi: comedi_fops: do not call blocking ops when !TASK_RUNNING
+    - uas: Add US_FL_IGNORE_RESIDUE for Initio Corporation INIC-3069
+    - firmware: fix batched requests - wake all waiters
+    - firmware: fix batched requests - send wake up on failure on direct lookups
+    - firmware: avoid invalid fallback aborts by using killable wait
+    - block: Make blk_mq_delay_kick_requeue_list() rerun the queue at a quiet
+      time
+    - USB: Check for dropped connection before switching to full speed
+    - usb: core: unlink urbs from the tail of the endpoint's urb_list
+    - usb: quirks: Add no-lpm quirk for Moshi USB to Ethernet Adapter
+    - usb:xhci:Add quirk for Certain failing HP keyboard on reset after resume
+    - PCI: Protect pci_error_handlers->reset_notify() usage with device_lock()
+    - xhci: Reset Renesas uPD72020x USB controller for 32-bit DMA issue
+    - pnfs/blocklayout: require 64-bit sector_t
+    - [x86] pinctrl: cherryview: Add Setzer models to the Chromebook DMI quirk
+    - [armhf] pinctrl: sunxi: add a missing function of A10/A20 pinctrl driver
+    - [x86] pinctrl: intel: merrifield: Correct UART pin lists
+    - [armhf] pinctrl: samsung: Remove bogus irq_[un]mask from resource
+      management
+    - [arm64] pinctrl: meson-gxbb: Add missing GPIODV_18 pin entry
+    - [arm64] pinctrl: meson-gxl: Add missing GPIODV_18 pin entry
+    - [mips*] Revert "MIPS: Don't unnecessarily include kmalloc.h into
+      <asm/cache.h>."
+    - [mips*/octeon] Fix broken EDAC driver.
+    - [ppc64el] Fix /proc/cpuinfo revision for POWER9 DD2
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9
+    - audit: Fix use after free in audit_remove_watch_rule()
+    - [hppa] pci memory bar assignment fails with 64bit kernels on dino/cujo
+    - [x86] crypto: sha1 - Fix reads beyond the number of blocks passed
+    - [x86] drm/i915: Perform an invalidate prior to executing golden
+      renderstate
+    - drm/amdgpu: save list length when fence is signaled
+    - md: fix test in md_write_start()
+    - md: always clear ->safemode when md_check_recovery gets the mddev lock.
+    - MD: not clear ->safemode for external metadata array
+    - ALSA: seq: 2nd attempt at fixing race creating a queue
+    - ALSA: usb-audio: Apply sample rate quirk to Sennheiser headset
+    - ALSA: usb-audio: Add mute TLV for playback volumes on C-Media devices
+    - ALSA: usb-audio: add DSD support for new Amanero PID
+    - mm: discard memblock data later
+    - slub: fix per memcg cache leak on css offline
+    - mm: fix double mmap_sem unlock on MMF_UNSTABLE enforced SIGBUS
+    - mm/cma_debug.c: fix stack corruption due to sprintf usage
+    - mm/mempolicy: fix use after free when calling get_mempolicy
+    - mm/vmalloc.c: don't unconditonally use __GFP_HIGHMEM
+    - [amd64,arm64] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes
+    - xen: fix bio vec merging (CVE-2017-12134) (Closes: #866511)
+    - [armhf] ARM: dts: imx6qdl-nitrogen6_som2: fix PCIe reset
+    - blk-mq-pci: add a fallback when pci_irq_get_affinity returns NULL
+    - [powerpc*] Fix VSX enabling/flushing to also test MSR_FP and MSR_VEC
+    - xen-blkfront: use a right index when checking requests
+    - [x86] perf: Fix RDPMC vs. mm_struct tracking
+    - [amd64] asm: Clear AC on NMI entries
+    - [x86] Fix norandmaps/ADDR_NO_RANDOMIZE
+    - [x86] elf: Remove the unnecessary ADDR_NO_RANDOMIZE checks
+    - genirq: Restore trigger settings in irq_modify_status()
+    - genirq/ipi: Fixup checks against nr_cpu_ids
+    - kernel/watchdog: Prevent false positives with turbo modes
+    - Sanitize 'move_pages()' permission checks (CVE-2017-14140)
+    - pids: make task_tgid_nr_ns() safe
+    - debug: Fix WARN_ON_ONCE() for modules
+    - usb: optimize acpi companion search for usb port devices
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.10
+    - [sparc64] remove unnecessary log message
+    - bonding: require speed/duplex only for 802.3ad, alb and tlb
+    - bonding: ratelimit failed speed/duplex update warning
+    - af_key: do not use GFP_KERNEL in atomic contexts
+    - dccp: purge write queue in dccp_destroy_sock()
+    - dccp: defer ccid_hc_tx_delete() at dismantle time
+    - ipv4: fix NULL dereference in free_fib_info_rcu()
+    - net_sched/sfq: update hierarchical backlog when drop packet
+    - net_sched: remove warning from qdisc_hash_add
+    - bpf: fix bpf_trace_printk on 32 bit archs
+    - net: igmp: Use ingress interface rather than vrf device
+    - openvswitch: fix skb_panic due to the incorrect actions attrlen
+    - ptr_ring: use kmalloc_array()
+    - ipv4: better IP_MAX_MTU enforcement
+    - nfp: fix infinite loop on umapping cleanup
+    - tun: handle register_netdevice() failures properly
+    - sctp: fully initialize the IPv6 address in sctp_v6_to_addr()
+    - tipc: fix use-after-free
+    - ipv6: reset fn->rr_ptr when replacing route
+    - ipv6: repair fib6 tree in failure case
+    - tcp: when rearming RTO, if RTO time is in past then fire RTO ASAP
+    - net/mlx4_core: Enable 4K UAR if SRIOV module parameter is not enabled
+    - irda: do not leak initialized list.dev to userspace
+    - net: sched: fix NULL pointer dereference when action calls some targets
+    - net_sched: fix order of queue length updates in qdisc_replace()
+    - bpf, verifier: add additional patterns to evaluate_reg_imm_alu
+    - bpf: fix mixed signed/unsigned derived min/max value bounds
+    - bpf/verifier: fix min/max handling in BPF_SUB
+    - Input: ALPS - fix two-finger scroll breakage in right side on ALPS
+      touchpad
+    - [s390x] KVM: sthyi: fix sthyi inline assembly
+    - [s390x] KVM: sthyi: fix specification exception detection
+    - [x86] KVM: simplify handling of PKRU
+    - [x86] KVM, pkeys: do not use PKRU value in vcpu->arch.guest_fpu.state
+    - [x86] KVM: block guest protection keys unless the host has them enabled
+    - ALSA: core: Fix unexpected error at replacing user TLV
+    - ALSA: firewire: fix NULL pointer dereference when releasing
+      uninitialized data of iso-resource
+    - ALSA: firewire-motu: destroy stream data surely at failure of card
+      initialization
+    - PM/hibernate: touch NMI watchdog when creating snapshot
+    - mm, shmem: fix handling /sys/kernel/mm/transparent_hugepage/shmem_enabled
+    - dax: fix deadlock due to misaligned PMD faults
+    - i2c: designware: Fix system suspend
+    - mm/madvise.c: fix freeing of locked page with MADV_FREE
+    - fork: fix incorrect fput of ->exe_file causing use-after-free
+    - mm/memblock.c: reversed logic in memblock_discard()
+    - [arm64] fpsimd: Prevent registers leaking across exec
+    - drm: Fix framebuffer leak
+    - drm: Release driver tracking before making the object available again
+    - [armhf] drm/sun4i: Implement drm_driver lastclose to restore fbdev
+      console
+    - drm/atomic: Handle -EDEADLK with out-fences correctly
+    - drm/atomic: If the atomic check fails, return its value first
+    - [x86] drm/i915/vbt: ignore extraneous child devices for a port
+    - [x86] drm/i915/gvt: Fix the kernel null pointer error
+    - Revert "drm/amdgpu: fix vblank_time when displays are off"
+    - ACPI: device property: Fix node lookup in
+      acpi_graph_get_child_prop_value()
+    - tracing: Call clear_boot_tracer() at lateinit_sync
+    - tracing: Missing error code in tracer_alloc_buffers()
+    - tracing: Fix kmemleak in tracing_map_array_free()
+    - tracing: Fix freeing of filter in create_filter() when set_str is false
+    - RDMA/uverbs: Initialize cq_context appropriately
+    - cifs: Fix df output for users with quota limits
+    - cifs: return ENAMETOOLONG for overlong names in
+      cifs_open()/cifs_lookup()
+    - nfsd: Limit end of page list when decoding NFSv4 WRITE
+    - ring-buffer: Have ring_buffer_alloc_read_page() return error on offline
+      CPU
+    - virtio_pci: fix cpu affinity support
+    - ftrace: Check for null ret_stack on profile function graph entry
+      function
+    - perf/core: Fix group {cpu,task} validation
+    - timers: Fix excessive granularity of new timers after a nohz idle
+    - [x86] mm: Fix use-after-free of ldt_struct
+    - net: sunrpc: svcsock: fix NULL-pointer exception
+    - netfilter: expect: fix crash when putting uninited expectation
+    - netfilter: nat: fix src map lookup
+    - netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv
+    - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread
+    - Bluetooth: cmtp: fix possible might sleep error in cmtp_session
+    - Bluetooth: bnep: fix possible might sleep error in bnep_session
+    - iio: hid-sensor-trigger: Fix the race with user space powering up
+      sensors
+    - iommu: Fix wrong freeing of iommu_device->dev
+    - Clarify (and fix) MAX_LFS_FILESIZE macros
+    - ACPI: EC: Fix regression related to wrong ECDT initialization order
+    - [powerpc*] mm: Ensure cpumask update is ordered
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.11
+    - [arm64] mm: abort uaccess retries upon fatal signal
+    - [x86] io: Add "memory" clobber to insb/insw/insl/outsb/outsw/outsl
+    - [mips*] irqchip: mips-gic: SYNC after enabling GIC region
+    - Input: synaptics - fix device info appearing different on reconnect
+    - Input: xpad - fix PowerA init quirk for some gamepad models
+    - crypto: chacha20 - fix handling of chunked input
+    - [x86] i2c: ismt: Don't duplicate the receive length for block reads
+    - [x86] i2c: ismt: Return EMSGSIZE for block reads with bogus length
+    - crypto: algif_skcipher - only call put_page on referenced and used pages
+    - mm, uprobes: fix multiple free of ->uprobes_state.xol_area
+    - mm, madvise: ensure poisoned pages are removed from per-cpu lists
+    - ceph: fix readpage from fscache
+    - cpumask: fix spurious cpumask_of_node() on non-NUMA multi-node configs
+    - cpuset: Fix incorrect memory_pressure control file mapping
+    - CIFS: Fix maximum SMB2 header size
+    - CIFS: remove endian related sparse warning
+    - dm mpath: do not lock up a CPU with requeuing activity
+    - [x86] drm/vmwgfx: Fix F26 Wayland screen update issue
+    - [arm64, armhf] wl1251: add a missing spin_lock_init()
+    - [arm64] mmc: sdhci-xenon: add set_power callback
+    - lib/mpi: kunmap after finishing accessing buffer
+    - xfrm: policy: check policy direction value
+    - drm/ttm: Fix accounting error when fail to get pages for pool
+    - nvme: fix the definition of the doorbell buffer config support bit
+    - drm/nouveau/i2c/gf119-: add support for address-only transactions
+    - epoll: fix race between ep_poll_callback(POLLFREE) and
+      ep_free()/ep_remove()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.12
+    - usb: quirks: add delay init quirk for Corsair Strafe RGB keyboard
+    - USB: serial: option: add support for D-Link DWM-157 C1
+    - usb: Add device quirk for Logitech HD Pro Webcam C920-C
+    - usb:xhci:Fix regression when ATI chipsets detected
+    - [armhf] USB: musb: fix external abort on suspend
+    - USB: core: Avoid race of async_completed() w/ usbdev_release()
+    - [x86] staging/rts5208: fix incorrect shift to extract upper nybble
+    - iio: adc: ti-ads1015: fix incorrect data rate setting update
+    - iio: adc: ti-ads1015: fix scale information for ADS1115
+    - iio: adc: ti-ads1015: enable conversion when CONFIG_PM is not set
+    - iio: adc: ti-ads1015: avoid getting stale result after runtime resume
+    - iio: adc: ti-ads1015: don't return invalid value from buffer setup
+      callbacks
+    - iio: adc: ti-ads1015: add adequate wait time to get correct conversion
+    - driver core: bus: Fix a potential double free
+    - HID: wacom: Do not completely map WACOM_HID_WD_TOUCHRINGSTATUS usage
+    - [x86] intel_th: pci: Add Cannon Lake PCH-H support
+    - [x86] intel_th: pci: Add Cannon Lake PCH-LP support
+    - ath10k: fix memory leak in rx ring buffer allocation
+    - Input: trackpoint - assume 3 buttons when buttons detection fails
+    - rtlwifi: rtl_pci_probe: Fix fail path of _rtl_pci_find_adapter
+    - Bluetooth: Add support of 13d3:3494 RTL8723BE device
+    - iwlwifi: pci: add new PCI ID for 7265D
+    - dlm: avoid double-free on error path in dlm_device_{register,unregister}
+    - mwifiex: correct channel stat buffer overflows
+    - [s390x] mm: avoid empty zero pages for KVM guests to avoid postcopy
+      hangs
+    - [s390x] mm: fix BUG_ON in crst_table_upgrade
+    - drm/nouveau/pci/msi: disable MSI on big-endian platforms by default
+    - drm/nouveau: Fix error handling in nv50_disp_atomic_commit
+    - workqueue: Fix flag collision
+    - ahci: don't use MSI for devices with the silly Intel NVMe remapping
+      scheme
+    - cs5536: add support for IDE controller variant
+    - scsi: sg: protect against races between mmap() and SG_SET_RESERVED_SIZE
+    - scsi: sg: recheck MMAP_IO request length with lock held
+    - of/device: Prevent buffer overflow in of_device_modalias()
+    - rtlwifi: Fix memory leak when firmware request fails
+    - rtlwifi: Fix fallback firmware loading
+
+  [ Ben Hutchings ]
+  * [alpha] udeb: Add i2c-modules (fixes FTBFS)
+  * cpupower: Add/update definition of MSRHEADER macro for turbostat and
+    x86_energy_perf_policy (Closes: #872414)
+  * Bump ABI to 2
+
+  [ Roger Shimizu ]
+  * [armel] Disable CONFIG_STRICT_KERNEL_RWX, which will save about 3MB
+    on linux Image (before compression). (Closes: #870185)
+
+  [ Uwe Kleine-König ]
+  * mtd: nandsim: remove debugfs entries in error path
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 10 Sep 2017 19:42:51 +0100
+
+linux (4.12.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.3
+    -  brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()
+       (CVE-2017-7541)
+    - [sparc64] Adding asm-prototypes.h for genksyms to generate crc
+    - [sparc64] sed regex in Makefile.build requires line break between
+      exported symbols
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4
+    - f2fs: sanity check checkpoint segno and blkoff (CVE-2017-10663)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.5
+    - dentry name snapshots (CVE-2017-7533)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.6
+    - saa7164: fix double fetch PCIe access condition (CVE-2017-8831)
+    - ipv6: avoid overflow of offset in ip6_find_1stfragopt (CVE-2017-7542)
+
+  [ Ben Hutchings ]
+  * media: Enable USB_RAINSHADOW_CEC as module (see #868511)
+  * Clean up symbol version fixes for symbols exported from asm
+    (fixes FTBFS on sparc64):
+    - [alpha] Un-revert "alpha: move exports to actual definitions"
+    - [alpha] Restore symbol versions for symbols exported from assembly
+    - [m68k] Un-revert "m68k: move exports to definitions"
+    - [sparc64] Un-revert "sparc: move exports to definitions"
+  * [mips*/octeon] Fix broken EDAC driver (fixes FTBFS)
+  * [armhf] Revert "gpu: host1x: Add IOMMU support"
+  * [armhf] udeb: Replace imx-ipuv3-crtc with imxdrm in fb-modules
+  * [i386] perf tools: Fix unwind build (fixes FTBFS)
+  * debian/control: Fix version in dependencies on arch-independent
+    linux-headers-*-common* (Closes: #869511)
+  * xfrm: policy: check policy direction value (CVE-2017-11600)
+  * rtlwifi: Fix memory leak when firmware request fails
+  * rtlwifi: Fix fallback firmware loading (Closes: #869084)
+  * [arm64] video: Enable FRAMEBUFFER_CONSOLE (Closes: #870071)
+  * integrity: Enable INTEGRITY_SIGNATURE, INTEGRITY_ASYMMETRIC_KEYS
+    (Closes: #869565)
+  * [x86] sound: Enable SND_X86; enable HDMI_LPE_AUDIO as module
+    (Closes: #869372)
+  * blk-mq: Change MQ_IOSCHED_KYBER from built-in to module
+  * blk-mq: Enable IOSCHED_BFQ as module (Closes: #869028); enable
+    BFQ_GROUP_IOSCHED
+  * bfq: Enable auto-loading when built as a module
+  * netfilter: Enable NFT_FIB_IPV4, NFT_FIB_IPV6, NFT_FIB_INET as modules
+    (Closes: #868803)
+  * [amd64,arm64] mm: Revert x86_64 and arm64 ELF_ET_DYN_BASE base
+    (Closes: #869090)
+
+  [ Salvatore Bonaccorso ]
+  * packet: fix tp_reserve race in packet_set_ring (CVE-2017-1000111)
+  * udp: consistently apply ufo or fragmentation (CVE-2017-1000112)
+  * Set ABI to 1
+
+  [ Uwe Kleine-König ]
+  * [arm64] enable MMC_SDHCI_XENON and MVNETA for Espressobin and enable
+    respective device in its device tree (Closes: #871049)
+
+  [ Roger Shimizu ]
+  * [armel] Change NAND related stuff to modules (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 12 Aug 2017 23:09:26 +0100
+
+linux (4.12.2-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.12
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.1
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.2
+
+  [ Ben Hutchings ]
+  * Add script to regenerate lockdown patch series from git
+  * [rt] Disable until it is updated for 4.12 or later
+  * scripts/mod: Update modpost wrapper for 4.12
+  * Set ABI name to trunk
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 18 Jul 2017 12:19:38 +0100
+
+linux (4.11.11-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.7
+    - fs: pass on flags in compat_writev
+    - configfs: Fix race between create_link and configfs_rmdir
+    - can: gs_usb: fix memory leak in gs_cmd_reset()
+    - ila_xlat: add missing hash secret initialization
+    - cpufreq: conservative: Allow down_threshold to take values from 1 to 10
+    - vb2: Fix an off by one error in 'vb2_plane_vaddr'
+    - cec: race fix: don't return -ENONET in cec_receive()
+    - selinux: fix double free in selinux_parse_opts_str()
+    - mac80211: don't look at the PM bit of BAR frames
+    - mac80211/wpa: use constant time memory comparison for MACs
+    - [x86] drm/amdgpu: Fix overflow of watermark calcs at > 4k resolutions.
+    - [x86] drm/i915: Fix GVT-g PVINFO version compatibility check
+    - [x86] drm/i915: Fix scaling check for 90/270 degree plane rotation
+    - [x86] drm/i915: Do not sync RCU during shrinking
+    - mac80211: fix IBSS presp allocation size
+    - mac80211: strictly check mesh address extension mode
+    - mac80211: fix dropped counter in multiqueue RX
+    - mac80211: don't send SMPS action frame in AP mode when not needed
+    - [arm64, armhf] drm/vc4: Fix OOPSes from trying to cache a partially
+      constructed BO.
+    - serial: 8250_lpss: Unconditionally set PCI master for Quark
+    - [sh4] serial: sh-sci: Fix (AUTO)RTS in sci_init_pins()
+    - [sh4] serial: sh-sci: Fix late enablement of AUTORTS
+    - [x86] mm/32: Set the '__vmalloc_start_set' flag in initmem_init()
+    - [armhf] mfd: axp20x: Add support for dts property "xpowers,master-mode"
+    - [armhf] dt-bindings: mfd: axp20x: Add "xpowers,master-mode" property for
+      AXP806 PMICs
+    - [powerpc] mm: Add physical address to Linux page table dump
+    - staging: rtl8188eu: prevent an underflow in rtw_check_beacon_data()
+    - [armhf] iio: adc: ti_am335x_adc: allocating too much in probe
+    - [x86] ALSA: hda: Add Geminilake id to SKL_PLUS
+    - ALSA: usb-audio: fix Amanero Combo384 quirk on big-endian hosts
+    - USB: hub: fix SS max number of ports
+    - usb: core: fix potential memory leak in error path during hcd creation
+    - [x86] USB: usbip: fix nonconforming hub descriptor
+    - [arm64, armhf] usb: dwc3: gadget: Fix ISO transfer performance
+    - pvrusb2: reduce stack usage pvr2_eeprom_analyze()
+    - USB: gadget: dummy_hcd: fix hub-descriptor removable fields
+    - coda: restore original firmware locations
+    - usb: xhci: Fix USB 3.1 supported protocol parsing
+    - usb: xhci: ASMedia ASM1042A chipset need shorts TX quirk
+    - USB: gadget: fix GPF in gadgetfs
+    - USB: gadgetfs, dummy-hcd, net2280: fix locking for callbacks
+    - mm/memory-failure.c: use compound_head() flags for huge pages
+    - swap: cond_resched in swap_cgroup_prepare()
+    - mm: numa: avoid waiting on freed migrated pages
+    - userfaultfd: shmem: handle coredumping in handle_userfault()
+    - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off()
+    - genirq: Release resources in __setup_irq() error path
+    - alarmtimer: Prevent overflow of relative timers
+    - alarmtimer: Rate limit periodic intervals
+    - virtio_balloon: disable VIOMMU support
+    - [mips*] Fix bnezc/jialc return address calculation
+    - [mips*] .its targets depend on vmlinux
+    - [sparc*] crypto: Work around deallocated stack frame reference gcc bug
+      on sparc.
+    - [armhf] dts: am335x-sl50: Fix card detect pin for mmc1
+    - [armhf] dts: am335x-sl50: Fix cannot claim requested pins for spi0
+    - mm: larger stack guard gap, between vmas
+    - Allow stack to grow up to address space limit
+    - mm: fix new crash in unmapped_area_topdown()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.8
+    - [armhf] clk: sunxi-ng: a31: Correct lcd1-ch1 clock register offset
+    - [armhf] clk: sunxi-ng: v3s: Fix usb otg device reset bit
+    - [armhf] clk: sunxi-ng: sun5i: Fix ahb_bist_clk definition
+    - xen/blkback: fix disconnect while I/Os in flight
+    - xen-blkback: don't leak stack data via response ring (XSA-216,
+      CVE-2017-10911)
+    - ALSA: firewire-lib: Fix stall of process context at packet error
+    - ALSA: pcm: Don't treat NULL chmap as a fatal error
+    - ALSA: hda - Add Coffelake PCI ID
+    - ALSA: hda - Apply quirks to Broxton-T, too
+    - fs/exec.c: account for argv/envp pointers (CVE-2017-1000365)
+    - [powerpc] perf: Fix oops when kthread execs user process
+    - autofs: sanity check status reported with AUTOFS_DEV_IOCTL_FAIL
+    - fs/dax.c: fix inefficiency in dax_writeback_mapping_range()
+    - lib/cmdline.c: fix get_options() overflow while parsing ranges
+    - [x86] perf/x86/intel: Add 1G DTLB load/store miss support for SKL
+    - perf probe: Fix probe definition for inlined functions
+    - [x86] KVM: fix singlestepping over syscall (CVE-2017-7518)
+    - [s390x] KVM gaccess: fix real-space designation asce handling for gmap
+      shadows
+    - [powerpc*] KVM: Book3S HV: Cope with host using large decrementer mode
+    - [powerpc*] KVM: Book3S HV: Preserve userspace HTM state properly
+    - [powerpc*] KVM: Book3S HV: Ignore timebase offset on POWER9 DD1
+    - [powerpc*] KVM: Book3S HV: Context-switch EBB registers properly
+    - [powerpc*] KVM: Book3S HV: Restore critical SPRs to host values on guest
+      exit
+    - [powerpc*] KVM: Book3S HV: Save/restore host values of debug registers
+    - CIFS: Improve readdir verbosity
+    - CIFS: Fix some return values in case of error in 'crypt_message'
+    - cxgb4: notify uP to route ctrlq compl to rdma rspq
+    - HID: Add quirk for Dell PIXART OEM mouse
+    - random: silence compiler warnings and fix race
+    - signal: Only reschedule timers on signals timers have sent
+    - [powerpc] kprobes: Pause function_graph tracing during jprobes handling
+    - ]powerpc*] 64s: Handle data breakpoints in Radix mode
+    - Input: i8042 - add Fujitsu Lifebook AH544 to notimeout list
+    - brcmfmac: add parameter to pass error code in firmware callback
+    - brcmfmac: use firmware callback upon failure to load
+    - brcmfmac: unbind all devices upon failure in firmware callback
+    - time: Fix clock->read(clock) race around clocksource changes
+    - time: Fix CLOCK_MONOTONIC_RAW sub-nanosecond accounting
+    - [arm64] vdso: Fix nsec handling for CLOCK_MONOTONIC_RAW
+    - target: Fix kref->refcount underflow in transport_cmd_finish_abort
+    - iscsi-target: Fix delayed logout processing greater than
+      SECONDS_FOR_LOGOUT_COMP
+    - iscsi-target: Reject immediate data underflow larger than SCSI transfer
+      length
+    - drm/radeon: add a PX quirk for another K53TK variant
+    - drm/radeon: add a quirk for Toshiba Satellite L20-183
+    - [x86] drm/amdgpu/atom: fix ps allocation size for EnableDispPowerGating
+    - [x86] drm/amdgpu: adjust default display clock
+    - [x86] drm/amdgpu: add Polaris12 DID
+    - ACPI / scan: Apply default enumeration to devices with ACPI drivers
+    - ACPI / scan: Fix enumeration for special SPI and I2C devices
+    - rxrpc: Fix several cases where a padded len isn't checked in ticket
+      decode (CVE-2017-7482)
+    - drm: Fix GETCONNECTOR regression
+    - usb: gadget: f_fs: avoid out of bounds access on comp_desc
+    - spi: double time out tolerance
+    - net: phy: fix marvell phy status reading
+    - netfilter: xtables: zero padding in data_to_user
+    - netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside
+      CONFIG_COMPAT
+    - brcmfmac: fix uninitialized warning in brcmf_usb_probe_phase2()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.9
+    - net: don't call strlen on non-terminated string in dev_set_alias()
+    - net: Fix inconsistent teardown and release of private netdev state.
+    - [s390x] net: fix up for "Fix inconsistent teardown and release of
+      private netdev state"
+    - mac80211: free netdev on dev_alloc_name() error
+    - decnet: dn_rtmsg: Improve input length sanitization in
+      dnrmg_receive_user_skb
+    - net: Zero ifla_vf_info in rtnl_fill_vfinfo()
+    - net: ipv6: Release route when device is unregistering
+    - net: vrf: Make add_fib_rules per network namespace flag
+    - af_unix: Add sockaddr length checks before accessing sa_family in bind
+      and connect handlers
+    - Fix an intermittent pr_emerg warning about lo becoming free.
+    - sctp: disable BH in sctp_for_each_endpoint
+    - net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx
+    - net: tipc: Fix a sleep-in-atomic bug in tipc_msg_reverse
+    - net/mlx5: Remove several module events out of ethtool stats
+    - net/mlx5e: Added BW check for DIM decision mechanism
+    - net/mlx5e: Fix wrong indications in DIM due to counter wraparound
+    - net/mlx5: Enable 4K UAR only when page size is bigger than 4K
+    - proc: snmp6: Use correct type in memset
+    - igmp: acquire pmc lock for ip_mc_clear_src()
+    - igmp: add a missing spin_lock_init()
+    - qmi_wwan: new Telewell and Sierra device IDs
+    - net: don't global ICMP rate limit packets originating from loopback
+    - ipv6: fix calling in6_ifa_hold incorrectly for dad work
+    - sctp: return next obj by passing pos + 1 into sctp_transport_get_idx
+    - net/mlx5e: Fix min inline value for VF rep SQs
+    - net/mlx5e: Avoid doing a cleanup call if the profile doesn't have it
+    - net/mlx5: Wait for FW readiness before initializing command interface
+    - net/mlx5e: Fix timestamping capabilities reporting
+    - decnet: always not take dst->__refcnt when inserting dst into hash table
+    - net: 8021q: Fix one possible panic caused by BUG_ON in free_netdev
+    - ipv6: Do not leak throw route references
+    - rtnetlink: add IFLA_GROUP to ifla_policy
+    - netfilter: synproxy: fix conntrackd interaction
+    - NFSv4.x/callback: Create the callback service through svc_create_pooled
+    - xen/blkback: don't use xen_blkif_get() in xen-blkback kthread
+    - [mips*] head: Reorder instructions missing a delay slot
+    - [mips*] Avoid accidental raw backtrace
+    - [mips*] pm-cps: Drop manual cache-line alignment of ready_count
+    - [mips*] Fix IRQ tracing & lockdep when rescheduling
+    - ALSA: hda - Fix endless loop of codec configure
+    - ALSA: hda - set input_path bitmap to zero after moving it to new place
+    - NFSv4.2: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask
+    - NFSv4.1: Fix a race in nfs4_proc_layoutget
+    - Revert "NFS: nfs_rename() handle -ERESTARTSYS dentry left behind"
+    - ovl: copy-up: don't unlock between lookup and link
+    - gpiolib: fix filtering out unwanted events
+    - [x86] intel_rdt: Fix memory leak on mount failure
+    - [x86] perf/x86/intel/uncore: Fix wrong box pointer check
+    - [x86] drm/vmwgfx: Free hash table allocated by cmdbuf managed res mgr
+    - dm thin: do not queue freed thin mapping for next stage processing
+    - [x86] mm: Fix boot crash caused by incorrect loop count calculation in
+      sync_global_pgds()
+    - [arm64] pinctrl/amd: Use regular interrupt instead of chained
+    - mm/vmalloc.c: huge-vmap: fail gracefully on unexpected huge vmap
+      mappings
+    - xen/blkback: don't free be structure too early
+    - xfrm6: Fix IPv6 payload_len in xfrm6_transport_finish
+    - xfrm: move xfrm_garbage_collect out of xfrm_policy_flush
+    - xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY
+    - xfrm: NULL dereference on allocation failure
+    - xfrm: Oops on error in pfkey_msg2xfrm_state()
+    - [arm64] PCI: Fix struct acpi_pci_root_ops allocation failure path
+    - [arm64] ACPI: Fix BAD_MADT_GICC_ENTRY() macro implementation
+    - [arm*] 8685/1: ensure memblock-limit is pmd-aligned
+    - [arm*] davinci: PM: Free resources in error handling path in
+      'davinci_pm_init'
+    - [arm*] davinci: PM: Do not free useful resources in normal path in
+      'davinci_pm_init'
+    - Revert "x86/entry: Fix the end of the stack for newly forked tasks"
+    - [x86] boot/KASLR: Fix kexec crash due to 'virt_addr' calculation bug
+    - [x86] perf: Fix spurious NMI with PEBS Load Latency event
+    - [x86] mpx: Correctly report do_mpx_bt_fault() failures to user-space
+    - [x86] mm: Fix flush_tlb_page() on Xen
+    - ocfs2: o2hb: revert hb threshold to keep compatible
+    - ocfs2: fix deadlock caused by recursive locking in xattr
+    - iommu/dma: Don't reserve PCI I/O windows
+    - [amd64] iommu/amd: Fix incorrect error handling in
+      amd_iommu_bind_pasid()
+    - [amd64] iommu/amd: Fix interrupt remapping when disable guest_mode
+    - mtd: nand: brcmnand: Check flash #WP pin status before nand
+      erase/program
+    - mtd: nand: fsmc: fix NAND width handling
+    - [x86] KVM: fix emulation of RSM and IRET instructions
+    - [x86] KVM: vPMU: fix undefined shift in intel_pmu_refresh()
+    - [x86] KVM: zero base3 of unusable segments
+    - KVM: nVMX: Fix exception injection
+    - esp4: Fix udpencap for local TCP packets.
+    - [armhf] hsi: Fix build regression due to netdev destructor fix.
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.10
+    - fs: completely ignore unknown open flags
+    - driver core: platform: fix race condition with driver_override
+    - RDMA/uverbs: Check port number supplied by user verbs cmds
+    - ceph: choose readdir frag based on previous readdir reply
+    - tracing/kprobes: Allow to create probe with a module name starting with a
+      digit
+    - drm/virtio: don't leak bo on drm_gem_object_init failure (CVE-2017-10810)
+    - usb: dwc3: replace %p with %pK
+    - Add USB quirk for HVR-950q to avoid intermittent device resets
+    - usb: usbip: set buffer pointers to NULL after free
+    - usb: Fix typo in the definition of Endpoint[out]Request
+    - USB: core: fix device node leak
+    - [armhf] pinctrl: meson: meson8b: fix the NAND DQS pins
+    - [armhf,arm64] pinctrl: sunxi: Fix SPDIF function name for A83T
+    - pinctrl: core: Fix warning by removing bogus code
+    - [x86] xhci: Limit USB2 port wake support for AMD Promontory hosts
+    - gfs2: Fix glock rhashtable rcu bug
+    - Add "shutdown" to "struct class".
+    - tpm: Issue a TPM2_Shutdown for TPM2 devices.
+    - tpm: fix a kernel memory leak in tpm-sysfs.c
+    - [x86] uaccess: Optimize copy_user_enhanced_fast_string() for short strings
+    - xen: avoid deadlock in xenbus driver
+    - crypto: drbg - Fixes panic in wait_for_completion call
+    - [x86] rt286: add Thinkpad Helix 2 to force_combo_jack_table
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.11
+    - mqueue: fix a use-after-free in sys_mq_notify() (CVE-2017-11176)
+    - proc: Fix proc_sys_prune_dcache to hold a sb reference
+    - locking/rwsem-spinlock: Fix EINTR branch in __down_write_common()
+    - [x86] staging: comedi: fix clean-up of comedi_class in comedi_init()
+    - crypto: rsa-pkcs1pad - use constant time memory comparison for MACs
+    - ext4: check return value of kstrtoull correctly in reserved_clusters_store
+    - [x86] mm/pat: Don't report PAT on CPUs that don't support it
+
+  [ Ben Hutchings ]
+  * [m68k] udeb: Use only the common module list for nic-shared-modules
+    (fixes FTBFS)
+  * [sparc64] Update "Revert "sparc: move exports to definitions"" for the
+    addition of __multi3 (fixes FTBFS)
+  * binfmt_elf: use ELF_ET_DYN_BASE only for PIE (CVE-2017-1000370,
+    CVE-2017-1000371)
+  * [rt] Update to 4.11.9-rt7:
+    - smp/hotplug: Move unparking of percpu threads to the control CPU
+    - cpu_pm: replace raw_notifier to atomic_notifier
+  * media: Enable MEDIA_CEC_SUPPORT, VIDEO_VIVID_CEC; USB_PULSE8_CEC as module
+    (Closes: #868511)
+  * [armhf] udeb: Add sunxi_wdt to kernel-image (Closes: #866130)
+  * crypto: Enable CRYPTO_USER, CRYPTO_USER_API_RNG as modules (Closes: #868291)
+  * udeb: Add dm-raid to md-modules (Closes: #868251)
+  * [arm64] sound: Enable SND_HDA_INTEL as module (Closes: #867611)
+  * aufs: Update support patchset to aufs4.11.7+-20170703 (Closes: #867257)
+  * [x86] ideapad-laptop: Add various IdeaPad models to no_hw_rfkill list
+    (Closes: #866706)
+  * firmware: dmi: Add DMI_PRODUCT_FAMILY identification string
+  * [x86] pinctrl: cherryview: Extend the Chromebook DMI quirk to Intel_Strago
+    systems (Closes: #862723)
+  * [armhf] Add ARM Mali Midgard device tree bindings and gpu node for rk3288
+    (thanks to Guillaume Tucker) (Closes: #865646)
+
+  [ Uwe Kleine-König ]
+  * [arm64] enable FB_SIMPLE
+
+  [ Vagrant Cascadian ]
+  * [arm64] Enable support for Rockchip systems (Closes: #860976).
+
+  [ Salvatore Bonaccorso ]
+  * Bump ABI to 2
+  * [rt] Update to 4.11.8-rt5
+
+  [ Cyril Brulebois ]
+  * [arm64,armhf] udeb: Ship usb3503 module in usb-modules, needed for
+    e.g. Arndale development boards, thanks to Wei Liu (Closes: #865645).
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 17 Jul 2017 03:01:21 +0100
+
+linux (4.11.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.4
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.5
+    - [x86] drm/vmwgfx: limit the number of mip levels in
+      vmw_gb_surface_define_ioctl() (CVE-2017-7346)
+    - [x86] drm/vmwgfx: Make sure backup_handle is always valid (CVE-2017-9605)
+    - ALSA: timer: Fix race between read and ioctl (CVE-2017-1000380)
+    - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
+      (CVE-2017-1000380)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.6
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] udeb: Build affs-modules package
+  * [m68k] udeb: Build hfs-modules package
+  * [m68k] udeb: Build nic-modules package
+  * [m68k] udeb: Build pata-modules package
+  * [m68k] udeb: Build scsi-core-modules package
+  * [m68k] udeb: Move non-shared modules from nic-shared-modules to nic-modules
+  * [m68k] udeb: Add buddha, falconide, gayle, macide, q40ide to pata-modules
+  * [m68k] udeb: Add atari_scsi, mac_esp, mac_scsi to scsi-modules
+
+  [ Ben Hutchings ]
+  * [x86] Enable SERIAL_8250_MID as built-in (Closes: #864368)
+  * Set ABI to 1
+  * debian/rules.real: Include rules.defs before using architecture variables
+    (Closes: #862842)
+  * [rt] Update to 4.11.5-rt1 and reenable
+  * fs: Reenable HPFS_FS as module (Closes: #864878)
+  * USB: serial: option: add two Longcheer device ids (Closes: #864604)
+  * [armhf] PCI: Enable PCI_HOST_GENERIC (Closes: #864726)
+  * mm: larger stack guard gap, between vmas (CVE-2017-1000364)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 20 Jun 2017 00:25:45 +0100
+
+linux (4.11.3-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.1
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.2
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3
+
+  [ Ben Hutchings ]
+  * [armel] udeb: Add af_packet. firmware_class, nls_base to kernel-image
+    (fixes FTBFS)
+  * [m68k] Update 'Revert "m68k: move exports to definitions"' for 4.11
+    (fixes FTBFS) (Closes: #862393)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 05 Jun 2017 14:13:41 +0100
+
+linux (4.11-1~exp2) experimental; urgency=medium
+
+  * [armel/marvell] Change MQ_IOSCHED_DEADLINE, FW_LOADER, HWMON,
+    INPUT_MOUSEDEV, THERMAL, SERIAL_8250_PCI, SERIAL_8250_EXAR, NLS, PACKET
+    from built-in to modules (fixes FTBFS)
+  * usbip: Fix potential format overflow in userspace tools (fixes FTBFS on
+    64-bit architectures with gcc-7)
+  * [mips*/octeon] Increase RELOCATION_TABLE_SIZE to 0x00110000 (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 05 May 2017 04:35:12 +0100
+
+linux (4.11-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.11
+    (thanks to Lukas Wunner for rebasing up to 4.11-rc6)
+
+  [ Ben Hutchings ]
+  * aufs: Update support patchset to aufs4.x-rcN-20170410
+  * [arm64,x86] Replace securelevel patch set with lockdown patch set
+  * [x86] Make hyperv-modules depends on nic-shared-modules, as hv_utils now
+    implements PTP clock
+  * [arm64] Enable ARCH_SUNXI, RTC_DRV_SUN6I as built-in,
+    MMC_SUNXI and PHY_SUN4I_USB as modules (Closes: #860855)
+  * [arm64] Enable REGULATOR_GPIO as module (Closes: #860222)
+  * block: Enable BLK_WBT, BLK_WBT_MQ (Closes: #859570)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 02 May 2017 20:57:50 +0100
+
+linux (4.10.7-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.1
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.3
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.5
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.6
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7
+
+  [ Ben Hutchings ]
+  * netfilter: Enable NF_SOCKET_IPV4, NF_SOCKET_IPV6 as modules
+    (Closes: #858897)
+  * [s390x] Set NR_CPUS=256 (Closes: #858731)
+  * Enable BUG_ON_DATA_CORRUPTION
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 31 Mar 2017 00:41:15 +0100
+
+linux (4.10-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.10
+
+  [ Ben Hutchings ]
+  * aufs: Update support patchset to aufs4.x-rcN-20170206
+  * Set ABI to trunk
+
+  [ Roger Shimizu ]
+  * debian/copyright & debian/README.source:
+    - Prefer https URL than http for security merit.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 22 Feb 2017 20:58:19 +0000
+
+linux (4.10~rc6-1~exp2) experimental; urgency=medium
+
+  * [s390x] Un-revert upstream change moving exports to assembly sources
+    (fixes FTBFS)
+  * [sparc64] topology_64.h: Fix condition for including cpudata.h
+    (might fix FTBFS)
+  * [powerpc*] Fix various build failures:
+    - Revert the initial stack protector support
+    - Fix missing CRC for _mcount
+    - [ppc64el] udeb: Exclude ehea from nic-modules
+  * debian/control: Fix compiler build-dependencies for cross-building
+  * [armel] Adjust configuration to reduce image size (fixes FTBFS):
+    - PCI: Disable PCIEAER, PCIEASPM
+    - net: Disable LWTUNNEL, IPV6_ILA
+    - trace: Disable UPROBE_EVENT
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 02 Feb 2017 03:44:51 +0000
+
+linux (4.10~rc6-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [rt] Disable until it is updated for 4.10 or later
+  * [amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE
+    (Closes: #852620).  This breaks (e)glibc versions < 2.14 and dietlibc
+    versions < 0.33.  It can be reverted using the kernel parameter:
+    vsyscall=emulate
+  * [arm64] Enable DRM_MESON, MMC_MESON_GX, DWMAC_MESON, MESON_GXL_PHY,
+    PHY_MESON8B_USB2, MESON_WATCHDOG as modules
+  * net: Enable SFC_FALCON as module; SFC_FALCON_MTD
+  * cpupower: Fix compiler options for turbostat on 4.10
+  * linux-doc: Update documentation file list for 4.10
+  * linux-doc: Fix up symlinks to gzipped docs
+  * debian/control: Add build-dependency on graphviz for documentation
+  * linux-doc: Copy source to build directory, to avoid creating files in
+    source directory
+
+  [ Roger Shimizu ]
+  * debian/copyright: Add GPL/X11 Dual License
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 31 Jan 2017 15:33:20 +0000
+
+linux (4.9.30-2) unstable; urgency=high
+
+  * [x86] Enable SERIAL_8250_MID as built-in (Closes: #864368)
+  * Fix bugs introduced by original fix for CVE-2017-9074:
+    - ipv6: Check ip6_find_1stfragopt() return value properly.
+    - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()
+    - ipv6: Fix leak in ipv6_gso_segment().
+  * Revert "uapi: fix linux/if.h userspace compilation errors" (see #864269)
+  * [armhf] udeb: Add axp20x_usb_power to kernel-image; add i2c-modules
+    package including i2c-mv64xxx and i2c-rk3x (thanks to Karsten Merker)
+    (Closes: #856111)
+  * NFSv4.x/callback: Create the callback service through svc_create_pooled
+    (Closes: #862357)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 12 Jun 2017 16:24:30 +0100
+
+linux (4.9.30-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.26
+    - [arm64] Revert "mmc: sdhci-msm: Enable few quirks"
+    - ping: implement proper locking
+    - [sparc64] kern_addr_valid regression
+    - [sparc64] Fix kernel panic due to erroneous #ifdef surrounding
+      pmd_write()
+    - net: neigh: guard against NULL solicit() method
+    - net: phy: handle state correctly in phy_stop_machine
+    - bpf: improve verifier packet range checks
+    - net/mlx5: Avoid dereferencing uninitialized pointer
+    - l2tp: hold tunnel socket when handling control frames in l2tp_ip
+      and l2tp_ip6
+    - l2tp: purge socket queues in the .destruct() callback
+    - net/packet: fix overflow in check for tp_frame_nr
+    - net/packet: fix overflow in check for tp_reserve
+    - l2tp: take reference on sessions being dumped
+    - l2tp: fix PPP pseudo-wire auto-loading
+    - net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given
+    - sctp: listen on the sock only when it's state is listening or
+      closed
+    - tcp: clear saved_syn in tcp_disconnect()
+    - ipv6: Fix idev->addr_list corruption
+    - net-timestamp: avoid use-after-free in ip_recv_error
+    - net: vrf: Fix setting NLM_F_EXCL flag when adding l3mdev rule
+    - dp83640: don't recieve time stamps twice
+    - gso: Validate assumption of frag_list segementation
+    - net: ipv6: RTF_PCPU should not be settable from userspace
+    - netpoll: Check for skb->queue_mapping
+    - ip6mr: fix notification device destruction
+    - net/mlx5: Fix driver load bad flow when having fw
+      initializing timeout
+    - net/mlx5e: Fix small packet threshold
+    - net/mlx5e: Fix ETHTOOL_GRXCLSRLALL handling
+    - macvlan: Fix device ref leak when purging bc_queue
+    - net: ipv6: regenerate host route if moved to gc list
+    - net: phy: fix auto-negotiation stall due to unavailable interrupt
+    - ipv6: check skb->protocol before lookup for nexthop
+    - tcp: memset ca_priv data to 0 properly
+    - ipv6: check raw payload size correctly in ioctl
+    - ALSA: oxfw: fix regression to handle Stanton SCS.1m/1d
+    - ALSA: firewire-lib: fix inappropriate assignment between
+      signed/unsigned type
+    - ALSA: seq: Don't break snd_use_lock_sync() loop by timeout
+    - [mips*] KGDB: Use kernel context for sleeping threads
+    - [mips*] Avoid BUG warning in arch_check_elf
+    - p9_client_readdir() fix
+    - [x86] ASoC: intel: Fix PM and non-atomic crash in bytcr drivers
+    - Input: i8042 - add Clevo P650RS to the i8042 reset list
+    - nfsd: check for oversized NFSv2/v3 arguments
+    - nfsd4: minor NFSv2/v3 write decoding cleanup
+    - nfsd: stricter decoding of write-like NFSv2/v3 ops
+    - ceph: fix recursion between ceph_set_acl() and __ceph_setattr()
+    - macsec: avoid heap overflow in skb_to_sgvec
+    - net: can: usb: gs_usb: Fix buffer on stack
+    - [x86] ftrace: Fix triple fault with graph tracing and suspend-to-ram
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.27
+    - timerfd: Protect the might cancel mechanism proper
+    - Handle mismatched open calls
+    - [x86] tpm_tis: use default timeout value if chip reports it as zero
+    - scsi: storvsc: Workaround for virtual DVD SCSI version
+    - [powerpc, x86] hwmon: (it87) Avoid registering the same chip on both SIO
+      addresses
+    - 8250_pci: Fix potential use-after-free in error path
+    - ceph: try getting buffer capability for readahead/fadvise
+    - cpu/hotplug: Serialize callback invocations proper
+    - dm ioctl: prevent stack leak in dm ioctl call
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.28
+    - 9p: fix a potential acl leak
+    - hwmon: (it87) Fix pwm4 detection for IT8620 and IT8628
+    - [x86] tpm: fix RC value check in tpm2_seal_trusted
+    - [x86] tmp: use pdev for parent device in tpm_chip_alloc
+    - cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
+    - [powerpc*] mm: Fixup wrong LPCR_VRMASD value
+    - [powerpc*] powernv: Fix opal_exit tracepoint opcode
+    - [powerpc*] Correctly disable latent entropy GCC plugin on
+      prom_init.o
+    - [x86] perf/x86/intel/pt: Add format strings for PTWRITE and power
+      event tracing
+    - [arm64] dts: r8a7795: Mark EthernetAVB device node disabled
+    - [arm64] dts: qcom: Fix ipq board clock rates
+    - [arm64] Improve detection of user/non-user mappings in
+      set_pte(_at)
+    - [armhf] OMAP5 / DRA7: Fix HYP mode boot for thumb2 build
+    - [armhf] dts: sun7i: lamobo-r1: Fix CPU port RGMII settings
+    - mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
+    - mwifiex: remove redundant dma padding in AMSDU
+    - mwifiex: Avoid skipping WEP key deletion for AP
+    - iwlwifi: fix MODULE_FIRMWARE for 6030
+    - iwlwifi: mvm: don't restart HW if suspend fails with unified image
+    - iwlwifi: mvm: overwrite skb info later
+    - iwlwifi: pcie: don't increment / decrement a bool
+    - iwlwifi: pcie: trans: Remove unused 'shift_param'
+    - iwlwifi: pcie: fix the set of DMA memory mask
+    - iwlwifi: mvm: fix reorder timer re-arming
+    - iwlwifi: mvm: Use aux queue for offchannel frames in dqa
+    - iwlwifi: mvm/pcie: adjust A-MSDU tx_cmd length in PCIe
+    - iwlwifi: mvm: fix pending frame counter calculation
+    - iwlwifi: mvm: fix references to first_agg_queue in DQA mode
+    - iwlwifi: mvm: synchronize firmware DMA paging memory
+    - iwlwifi: mvm: writing zero bytes to debugfs causes a crash
+    - [x86] ioapic: Restore IO-APIC irq_chip retrigger callback
+    - [amd64] x86/pci-calgary: Fix iommu_free() comparison of unsigned
+      expression >= 0
+    - [x86] kprobes/x86: Fix kernel panic when certain exception-
+      handling addresses are probed
+    - [x86] platform/intel-mid: Correct MSI IRQ line for watchdog device
+    - [x86] KVM: nVMX: initialize PML fields in vmcs02
+    - [x86] KVM: nVMX: do not leak PML full vmexit to L1
+    - [arm64, armhf] usb: dwc2: host: use msleep() for long delay
+    - [armhf] usb: host: ehci-exynos: Decrese node refcount on
+      exynos_ehci_get_phy() error paths
+    - [armhf] usb: host: ohci-exynos: Decrese node refcount on
+      exynos_ehci_get_phy() error paths
+    - [arm64, armhf] usb: chipidea: Only read/write OTGSC from one place
+    - [arm64, armhf] usb: chipidea: Handle extcon events properly
+    - USB: serial: keyspan_pda: fix receive sanity checks
+    - USB: serial: digi_acceleport: fix incomplete rx sanity check
+    - USB: serial: ssu100: fix control-message error handling
+    - USB: serial: io_edgeport: fix epic-descriptor handling
+    - USB: serial: ti_usb_3410_5052: fix control-message error handling
+    - USB: serial: ark3116: fix open error handling
+    - USB: serial: ftdi_sio: fix latency-timer error handling
+    - USB: serial: quatech2: fix control-message error handling
+    - USB: serial: mct_u232: fix modem-status error handling
+    - USB: serial: io_edgeport: fix descriptor error handling
+    - [armhf] clk: rockchip: add "," to
+      mux_pll_src_apll_dpll_gpll_usb480m_p on rk3036
+    - phy: qcom-usb-hs: Add depends on EXTCON
+    - scsi: qla2xxx: Fix crash in qla2xxx_eh_abort on bad ptr
+    - scsi: mac_scsi: Fix MAC_SCSI=m option when SCSI=m
+    - scsi: smartpqi: fix time handling
+    - [mips*] R2-on-R6 MULTU/MADDU/MSUBU emulation bugfix
+    - brcmfmac: Ensure pointer correctly set if skb data location
+      changes
+    - brcmfmac: Make skb header writable before use
+    - [x86] staging/lustre/llite: move root_squash from sysfs to debugfs
+    - [x86] staging: wlan-ng: add missing byte order conversion
+    - ALSA: hda - Fix deadlock of controller device lock at unbinding
+    - [sparc64] fix fault handling in NGbzero.S and GENbzero.S
+    - macsec: dynamically allocate space for sglist
+    - tcp: do not underestimate skb->truesize in tcp_trim_head()
+    - bpf: enhance verifier to understand stack pointer arithmetic
+    - [arm64] bpf: fix jit branch offset related to ldimm64
+    - tcp: fix wraparound issue in tcp_lp
+    - net: ipv6: Do not duplicate DAD on link up
+    - net: usb: qmi_wwan: add Telit ME910 support
+    - tcp: do not inherit fastopen_req from parent
+    - ipv4, ipv6: ensure raw socket message is big enough to hold
+      an IP header
+    - rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string
+    - ipv6: initialize route null entry in addrconf_init()
+    - ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
+    - bnxt_en: allocate enough space for ->ntp_fltr_bmap
+    - bpf: don't let ldimm64 leak map addresses on unprivileged
+      (CVE-2017-9150)
+    - f2fs: sanity check segment count
+    - xen: Revert commits da72ff5bfcb0 and 72a9b186292d
+    - [arm64, armhf] wlcore: Pass win_size taken from
+      ieee80211_sta to FW
+    - [arm64, armhf] wlcore: Add RX_BA_WIN_SIZE_CHANGE_EVENT event
+    - drm/ttm: fix use-after-free races in vm fault handling
+    - block: get rid of blk_integrity_revalidate()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.29
+    - [x86] xen: adjust early dom0 p2m handling to xen hypervisor behavior
+    - target: Fix compare_and_write_callback handling for non GOOD status
+    - target/fileio: Fix zero-length READ and WRITE handling
+    - iscsi-target: Set session_fall_back_to_erl0 when forcing reinstatement
+    - usb: xhci: bInterval quirk for TI TUSB73x0
+    - usb: host: xhci: print correct command ring address
+    - USB: Proper handling of Race Condition when two USB class drivers try to
+      call init_usb_class simultaneously
+    - USB: Revert "cdc-wdm: fix "out-of-sync" due to missing notifications"
+    - [x86] staging: vt6656: use off stack for in buffer USB transfers.
+    - [x86] staging: vt6656: use off stack for out buffer USB transfers.
+    - [x86] staging: comedi: jr3_pci: fix possible null pointer dereference
+    - [x86] staging: comedi: jr3_pci: cope with jiffies wraparound
+    - usb: misc: add missing continue in switch
+    - usb: gadget: legacy gadgets are optional
+    - usb: Make sure usb/phy/of gets built-in
+    - usb: hub: Fix error loop seen after hub communication errors
+    - usb: hub: Do not attempt to autosuspend disconnected devices
+    - [x86] boot: Fix BSS corruption/overwrite bug in early x86 kernel startup
+    - [amd64] pmem: Fix cache flushing for iovec write < 8 bytes
+    - [x86] perf: Fix Broadwell-EP DRAM RAPL events
+    - [x86] KVM: fix user triggerable warning in kvm_apic_accept_events()
+    - [armhf,arm64] KVM: fix races in kvm_psci_vcpu_on
+    - [arm64] KVM: Fix decoding of Rt/Rt2 when trapping AArch32 CP accesses
+    - block: fix blk_integrity_register to use template's interval_exp if not 0
+    - crypto: algif_aead - Require setkey before accept(2)
+    - [x86] crypto: ccp - Use only the relevant interrupt bits
+    - [x86] crypto: ccp - Disable interrupts early on unload
+    - [x86] crypto: ccp - Change ISR handler method for a v3 CCP
+    - [x86] crypto: ccp - Change ISR handler method for a v5 CCP
+    - dm era: save spacemap metadata root after the pre-commit
+    - dm rq: check blk_mq_register_dev() return value in
+      dm_mq_init_request_queue()
+    - dm thin: fix a memory leak when passing discard bio down
+    - vfio/type1: Remove locked page accounting workqueue
+    - iov_iter: don't revert iov buffer if csum error
+    - IB/core: Fix sysfs registration error flow
+    - IB/core: For multicast functions, verify that LIDs are multicast LIDs
+    - IB/IPoIB: ibX: failed to create mcg debug file
+    - IB/mlx4: Fix ib device initialization error flow
+    - IB/mlx4: Reduce SRIOV multicast cleanup warning message to debug level
+    - IB/hfi1: Prevent kernel QP post send hard lockups
+    - perf auxtrace: Fix no_size logic in addr_filter__resolve_kernel_syms()
+    - ext4: evict inline data when writing to memory map
+    - fs/xattr.c: zero out memory copied to userspace in getxattr
+    - ceph: fix memory leak in __ceph_setxattr()
+    - fs/block_dev: always invalidate cleancache in invalidate_bdev()
+    - mm: prevent potential recursive reclaim due to clearing PF_MEMALLOC
+    - Fix match_prepath()
+    - Set unicode flag on cifs echo request to avoid Mac error
+    - SMB3: Work around mount failure when using SMB3 dialect to Macs
+    - CIFS: fix mapping of SFM_SPACE and SFM_PERIOD
+    - cifs: fix leak in FSCTL_ENUM_SNAPS response handling
+    - cifs: fix CIFS_ENUMERATE_SNAPSHOTS oops
+    - CIFS: fix oplock break deadlocks
+    - cifs: fix CIFS_IOC_GET_MNT_INFO oops
+    - CIFS: add misssing SFM mapping for doublequote
+    - padata: free correct variable
+    - device-dax: fix cdev leak
+    - fscrypt: fix context consistency check when key(s) unavailable
+    - [armhf] serial: samsung: Use right device for DMA-mapping calls
+    - [armhf] serial: omap: fix runtime-pm handling on unbind
+    - [armhf] serial: omap: suspend device on probe errors
+    - tty: pty: Fix ldisc flush after userspace become aware of the data already
+    - Bluetooth: Fix user channel for 32bit userspace on 64bit kernel
+    - Bluetooth: hci_bcm: add missing tty-device sanity check
+    - Bluetooth: hci_intel: add missing tty-device sanity check
+    - ipmi: Fix kernel panic at ipmi_ssif_thread()
+    - libnvdimm, region: fix flush hint detection crash
+    - libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify
+    - libnvdimm, pfn: fix 'npfns' vs section alignment
+    - [powerpc*/*64*] pstore: Fix flags to enable dumps on powerpc
+    - pstore: Shut down worker when unregistering
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.30
+    - usb: misc: legousbtower: Fix buffers on stack
+    - usb: misc: legousbtower: Fix memory leak
+    - USB: ene_usb6250: fix DMA to the stack
+    - watchdog: pcwd_usb: fix NULL-deref at probe
+    - char: lp: fix possible integer overflow in lp_setup() (CVE-2017-1000363)
+    - USB: core: replace %p with %pK
+    - tpm_tis_core: Choose appropriate timeout for reading burstcount
+    - ALSA: hda: Fix cpu lockup when stopping the cmd dmas
+    - [armhf] tegra: paz00: Mark panel regulator as enabled on boot
+    - fanotify: don't expose EOPENSTALE to userspace
+    - tpm_tis_spi: Use single function to transfer data
+    - tpm_tis_spi: Abort transfer when too many wait states are signaled
+    - tpm_tis_spi: Check correct byte for wait state indicator
+    - tpm_tis_spi: Remove limitation of transfers to MAX_SPI_FRAMESIZE bytes
+    - tpm_tis_spi: Add small delay after last transfer
+    - tpm: msleep() delays - replace with usleep_range() in i2c nuvoton driver
+    - tpm: add sleep only for retry in i2c_nuvoton_write_status()
+    - tpm_crb: check for bad response size
+    - mlx5: Fix mlx5_ib_map_mr_sg mr length
+    - infiniband: call ipv6 route lookup via the stub interface
+    - dm btree: fix for dm_btree_find_lowest_key()
+    - dm raid: select the Kconfig option CONFIG_MD_RAID0
+    - dm bufio: avoid a possible ABBA deadlock
+    - dm bufio: check new buffer allocation watermark every 30 seconds
+    - dm mpath: split and rename activate_path() to prepare for its expanded use
+    - dm cache metadata: fail operations if fail_io mode has been established
+    - dm bufio: make the parameter "retain_bytes" unsigned long
+    - dm thin metadata: call precommit before saving the roots
+    - dm space map disk: fix some book keeping in the disk space map
+    - md: update slab_cache before releasing new stripes when stripes resizing
+    - md: MD_CLOSING needs to be cleared after called md_set_readonly or
+      do_md_stop
+    - rtlwifi: rtl8821ae: setup 8812ae RFE according to device type
+    - mwifiex: MAC randomization should not be persistent
+    - mwifiex: pcie: fix cmd_buf use-after-free in remove/reset
+    - ima: accept previously set IMA_NEW_FILE
+    - [x86] KVM: Fix load damaged SSEx MXCSR register
+    - [x86] KVM: Fix potential preemption when get the current kvmclock
+      timestamp
+    - [x86] KVM: Fix read out-of-bounds vulnerability in kvm pio emulation
+    - [i386] fix 32-bit case of __get_user_asm_u64()
+    - [armhf] regulator: rk808: Fix RK818 LDO2
+    - [s390x] kdump: Add final note
+    - [s390x] cputime: fix incorrect system time
+    - ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device
+    - ath9k_htc: fix NULL-deref at probe
+    - [x86] drm/amdgpu: Make display watermark calculations more accurate
+    - [x86] drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark
+      calculations.
+    - [x86] drm/amdgpu: Add missing lb_vblank_lead_lines setup to DCE-6 path.
+    - drm/nouveau/therm: remove ineffective workarounds for alarm bugs
+    - drm/nouveau/tmr: ack interrupt before processing alarms
+    - drm/nouveau/tmr: fix corruption of the pending list when rescheduling an
+      alarm
+    - drm/nouveau/tmr: avoid processing completed alarms when adding a new one
+    - drm/nouveau/tmr: handle races with hw when updating the next alarm time
+    - [armhf] gpio: omap: return error if requested debounce time is not
+      possible
+    - cdc-acm: fix possible invalid access when processing notification
+    - ohci-pci: add qemu quirk
+    - [powerpc*] cxl: Force context lock during EEH flow
+    - [powerpc*] cxl: Route eeh events to all drivers in
+      cxl_pci_error_detected()
+    - proc: Fix unbalanced hard link numbers
+    - of: fix sparse warning in of_pci_range_parser_one
+    - of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes()
+    - of: fdt: add missing allocation-failure check
+    - [powerpc*/*64*] ibmvscsis: Do not send aborted task response
+    - [x86] IIO: bmp280-core.c: fix error in humidity calculation
+    - IB/hfi1: Return an error on memory allocation failure
+    - IB/hfi1: Fix a subcontext memory leak
+    - pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes
+    - pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()
+    - USB: serial: ftdi_sio: fix setting latency for unprivileged users
+    - USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs
+    - USB: chaoskey: fix Alea quirk on big-endian hosts
+    - f2fs: check entire encrypted bigname when finding a dentry
+    - fscrypt: avoid collisions when presenting long encrypted filenames
+    - libnvdimm: fix clear length of nvdimm_forget_poison()
+    - xhci: remove GFP_DMA flag from allocation
+    - usb: host: xhci-plat: propagate return value of platform_get_irq()
+    - xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
+    - usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
+    - net: irda: irda-usb: fix firmware name on big-endian hosts
+    - usbvision: fix NULL-deref at probe
+    - mceusb: fix NULL-deref at probe
+    - ttusb2: limit messages to buffer size
+    - [armhf,arm64] usb: dwc3: gadget: Prevent losing events in event cache
+    - [armhf] usb: musb: tusb6010_omap: Do not reset the other direction's
+      packet size
+    - [armhf] usb: musb: Fix trying to suspend while active for OTG
+      configurations
+    - USB: iowarrior: fix info ioctl on big-endian hosts
+    - usb: serial: option: add Telit ME910 support
+    - USB: serial: qcserial: add more Lenovo EM74xx device IDs
+    - USB: serial: mct_u232: fix big-endian baud-rate handling
+    - USB: serial: io_ti: fix div-by-zero in set_termios
+    - USB: hub: fix SS hub-descriptor handling
+    - USB: hub: fix non-SS hub-descriptor handling
+    - ipx: call ipxitf_put() in ioctl error path (CVE-2017-7487)
+    - iio: hid-sensor: Store restore poll and hysteresis on S3
+    - gspca: konica: add missing endpoint sanity check
+    - dib0700: fix NULL-deref at probe
+    - zr364xx: enforce minimum size when reading header
+    - dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops
+    - digitv: limit messages to buffer size
+    - dw2102: limit messages to buffer size
+    - cx231xx-audio: fix init error path
+    - cx231xx-audio: fix NULL-deref at probe
+    - cx231xx-cards: fix NULL-deref at probe
+    - [powerpc*] mm: Ensure IRQs are off in switch_mm()
+    - [powerpc*] eeh: Avoid use after free in eeh_handle_special_event()
+    - [powerpc*] book3s/mce: Move add_taint() later in virtual mode
+    - [powerpc*] pseries: Fix of_node_put() underflow during DLPAR remove
+    - [powerpc*] iommu: Do not call PageTransHuge() on tail pages
+    - [powerpc*] tm: Fix FP and VMX register corruption
+    - [arm64] KVM: Do not use stack-protector to compile EL2 code
+    - [armhf] KVM: Do not use stack-protector to compile HYP code
+    - [armhf] KVM: plug potential guest hardware debug leakage
+    - [armel,armhf] 8662/1: module: split core and init PLT sections
+    - [armhf] dts: imx6sx-sdb: Remove OPP override
+    - [arm64] dts: hi6220: Reset the mmc hosts
+    - [arm64] xchg: hazard against entire exchange variable
+    - [arm64] ensure extension of smp_store_release value
+    - [arm64] armv8_deprecated: ensure extension of addr
+    - [arm64] uaccess: ensure extension of access_ok() addr
+    - [arm64] documentation: document tagged pointer stack constraints
+    - [x86] staging: rtl8192e: rtl92e_fill_tx_desc fix write to mapped out
+      memory.
+    - [x86] staging: rtl8192e: fix 2 byte alignment of register BSSIDR.
+    - [x86] staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of
+      EPROM_CMD.
+    - [x86] staging: rtl8192e: GetTs Fix invalid TID 7 warning.
+    - [x86] iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings
+    - stackprotector: Increase the per-task stack canary's random range from 32
+      bits to 64 bits on 64-bit platforms
+    - uwb: fix device quirk on big-endian hosts
+    - genirq: Fix chained interrupt data ordering
+    - nvme: unmap CMB and remove sysfs file in reset path
+    - [alpha] osf_wait4(): fix infoleak
+    - tracing/kprobes: Enforce kprobes teardown after testing
+    - [x86] PCI: hv: Allocate interrupt descriptors with GFP_ATOMIC
+    - [x86] PCI: hv: Specify CPU_AFFINITY_ALL for MSI affinity when >= 32 CPUs
+    - PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms
+    - PCI: Fix another sanity check bug in /proc/pci mmap
+    - PCI: Only allow WC mmap on prefetchable resources
+    - PCI: Freeze PME scan before suspending devices
+    - [armel,armhf] mtd: nand: orion: fix clk handling
+    - [armhf] mtd: nand: omap2: Fix partition creation via cmdline mtdparts
+    - mtd: nand: add ooblayout for old hamming layout
+    - [x86] drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2
+    - NFSv4: Fix a hang in OPEN related to server reboot
+    - NFS: Fix use after free in write error path
+    - NFS: Use GFP_NOIO for two allocations in writeback
+    - nfsd: fix undefined behavior in nfsd4_layout_verify
+    - nfsd: encoders mustn't use unitialized values in error cases
+    - drivers: char: mem: Check for address space wraparound with mmap()
+    - [x86] drm/i915/gvt: Disable access to stolen memory as a guest
+
+  [ Aurelien Jarno ]
+  * [mips*/*-malta] Enable POWER_RESET and POWER_RESET_SYSCON.
+
+  [ Uwe Kleine-König ]
+  * [arm64] Enable DRM modules (Closes: #863344)
+  * Ignore ABI changes in chipidea driver
+
+  [ Ben Hutchings ]
+  * Ignore ABI changes in ccp and hid-sensors
+  * [mips*el/loongson-3] Revert "MIPS: Loongson-3: Select
+    MIPS_L1_CACHE_SHIFT_6" to avoid ABI change
+  * SUNRPC: Refactor svc_set_num_threads()
+  * NFSv4: Fix callback server shutdown (CVE-2017-9059) (Closes: #862357)
+  * uapi: fix linux/if.h userspace compilation errors (see #822393, #824442)
+  * debian/control: Fix compiler build-dependencies for cross-building
+    (Closes: #863907)
+  * Add Debian package version to "hung task" log messages
+  * btrfs: warn about RAID5/6 being experimental at mount time (Closes: #863290)
+  * [x86] pinctrl: cherryview: Add a quirk to make Acer Chromebook keyboard
+    work again (Closes: #862723)
+  * [arm64] serial: pl011: add console matching function (Closes: #861898)
+  * [rt] Add new GPG subkeys for Sebastian Andrzej Siewior
+  * [rt] Update to 4.9.30-rt20:
+    - rtmutex: Deboost before waking up the top waiter
+    - sched/rtmutex/deadline: Fix a PI crash for deadline tasks
+    - sched/deadline/rtmutex: Dont miss the dl_runtime/dl_period update
+    - rtmutex: Clean up
+    - sched/rtmutex: Refactor rt_mutex_setprio()
+    - sched,tracing: Update trace_sched_pi_setprio()
+    - rtmutex: Fix PI chain order integrity
+    - rtmutex: Fix more prio comparisons
+    - rtmutex: Plug preempt count leak in rt_mutex_futex_unlock()
+    - futex: Avoid freeing an active timer
+    - futex: Fix small (and harmless looking) inconsistencies
+    - futex,rt_mutex: Fix rt_mutex_cleanup_proxy_lock()
+    - Revert "timers: Don't wake ktimersoftd on every tick"
+    - futex/rtmutex: Cure RT double blocking issue
+    - random: avoid preempt_disable()ed section
+
+  [ Salvatore Bonaccorso ]
+  * tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()
+    (CVE-2017-0605)
+  * dccp/tcp: do not inherit mc_list from parent (CVE-2017-8890)
+  * ipv6: Prevent overrun when parsing v6 header options (CVE-2017-9074)
+  * sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (CVE-2017-9075)
+  * ipv6/dccp: do not inherit ipv6_mc_list from parent (CVE-2017-9076,
+    CVE-2017-9077)
+  * crypto: skcipher - Add missing API setkey checks (CVE-2017-9211)
+  * ipv6: fix out of bound writes in __ip6_append_data() (CVE-2017-9242)
+
+  [ Cyril Brulebois ]
+  * udeb: Add efivarfs to efi-modules, which can be needed to retrieve
+    firmware or configuration bits from d-i. (Closes: #862555)
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] udeb: Build loop-modules package (Closes: #862813)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 04 Jun 2017 03:03:01 +0100
+
+linux (4.9.25-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.19
+    - net/openvswitch: Set the ipv6 source tunnel key address attribute
+      correctly
+    - net: properly release sk_frag.page
+    - [arm64] amd-xgbe: Fix jumbo MTU processing on newer hardware
+    - openvswitch: Add missing case OVS_TUNNEL_KEY_ATTR_PAD
+    - net: unix: properly re-increment inflight counter of GC discarded
+      candidates
+    - net: vrf: Reset rt6i_idev in local dst after put
+    - net/mlx5: Add missing entries for set/query rate limit commands
+    - net/mlx5e: Use the proper UAPI values when offloading TC vlan actions
+    - net/mlx5: Increase number of max QPs in default profile
+    - net/mlx5e: Count GSO/LRO packets correctly
+    - ipv6: make sure to initialize sockc.tsflags before first use
+    - ipv4: provide stronger user input validation in nl_fib_input()
+    - socket, bpf: fix sk_filter use after free in sk_clone_lock
+    - tcp: initialize icsk_ack.lrcvtime at session start time
+    - Input: iforce,ims-pcu,hanwang,yealink,cm109,kbtab,sur40 - validate
+      number of endpoints before using them
+    - ALSA: seq: Fix racy cell insertions during snd_seq_pool_done()
+    - ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call
+    - ALSA: hda - Adding a group of pin definition to fix headset problem
+    - ACM gadget: fix endianness in notifications
+    - usb: gadget: f_uvc: Fix SuperSpeed companion descriptor's
+      wBytesPerInterval
+    - USB: uss720,idmouse,wusbcore: fix NULL-deref at probe
+    - usb: musb: cppi41: don't check early-TX-interrupt for Isoch transfer
+    - usb: hub: Fix crash after failure to read BOS descriptor
+    - USB: usbtmc: add missing endpoint sanity check
+    - USB: usbtmc: fix probe error path
+    - uwb: i1480-dfu: fix NULL-deref at probe
+    - mmc: ushc: fix NULL-deref at probe
+    - [armhf[ iio: adc: ti_am335x_adc: fix fifo overrun recovery
+    - iio: sw-device: Fix config group initialization
+    - iio: hid-sensor-trigger: Change get poll value function order to avoid
+      sensor properties losing after resume from S3
+    - parport: fix attempt to write duplicate procfiles
+    - ext4: mark inode dirty after converting inline directory
+    - ext4: lock the xattr block before checksuming it
+    - [powerpc*/*64*] Fix idle wakeup potential to clobber registers
+    - mmc: sdhci: Do not disable interrupts while waiting for clock
+    - mmc: sdhci-pci: Do not disable interrupts in sdhci_intel_set_power
+    - [x86] hwrng: amd - Revert managed API changes
+    - [x86] hwrng: geode - Revert managed API changes
+    - [armhf] clk: sunxi-ng: sun6i: Fix enable bit offset for hdmi-ddc module
+      clock
+    - [armhf] clk: sunxi-ng: mp: Adjust parent rate for pre-dividers
+    - mwifiex: pcie: don't leak DMA buffers when removing
+    - [x86] crypto: ccp - Assign DMA commands to the channel's CCP
+    - xen/acpi: upload PM state from init-domain to Xen
+    - [x86] iommu/vt-d: Fix NULL pointer dereference in device_to_iommu
+    - [arm64] kaslr: Fix up the kernel image alignment
+    - cpufreq: Restore policy min/max limits on CPU online
+    - cgroup, net_cls: iterate the fds of only the tasks which are being
+      migrated
+    - blk-mq: don't complete un-started request in timeout handler
+    - [x86] drm/amdgpu: reinstate oland workaround for sclk
+    - jbd2: don't leak memory if setting up journal fails
+    - [x86] intel_th: Don't leak module refcount on failure to activate
+    - [x86] Drivers: hv: vmbus: Don't leak channel ids
+    - [x86] Drivers: hv: vmbus: Don't leak memory when a channel is rescinded
+    - libceph: don't set weight to IN when OSD is destroyed
+    - [x86] device-dax: fix pmd/pte fault fallback handling
+    - [armhf] drm/bridge: analogix dp: Fix runtime PM state on driver bind
+    - nl80211: fix dumpit error path RTNL deadlocks
+    - drm: reference count event->completion
+    - fbcon: Fix vc attr at deinit
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.20
+    - xfrm: policy: init locks early
+    - [x86] KVM: cleanup the page tracking SRCU instance
+    - virtio_balloon: init 1st buffer in stats vq
+    - [mips*] ptrace: Preserve previous registers for short regset write
+    - [sparc64] ptrace: Preserve previous registers for short regset write
+    - fscrypt: remove broken support for detecting keyring key revocation
+      (CVE-2017-7374)
+    - sched/rt: Add a missing rescheduling point
+    - [armhf] usb: musb: fix possible spinlock deadlock
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.21
+    - libceph: force GFP_NOIO for socket allocations
+    - xen/setup: Don't relocate p2m over existing one
+    - xfs: only update mount/resv fields on success in __xfs_ag_resv_init
+    - xfs: use per-AG reservations for the finobt
+    - xfs: pull up iolock from xfs_free_eofblocks()
+    - xfs: sync eofblocks scans under iolock are livelock prone
+    - xfs: fix eofblocks race with file extending async dio writes
+    - xfs: fix toctou race when locking an inode to access the data map
+    - xfs: fail _dir_open when readahead fails
+    - xfs: filter out obviously bad btree pointers
+    - xfs: check for obviously bad level values in the bmbt root
+    - xfs: verify free block header fields
+    - xfs: allow unwritten extents in the CoW fork
+    - xfs: mark speculative prealloc CoW fork extents unwritten
+    - xfs: reset b_first_retry_time when clear the retry status of xfs_buf_t
+    - xfs: update ctime and mtime on clone destinatation inodes
+    - xfs: reject all unaligned direct writes to reflinked files
+    - xfs: don't fail xfs_extent_busy allocation
+    - xfs: handle indlen shortage on delalloc extent merge
+    - xfs: split indlen reservations fairly when under reserved
+    - xfs: fix uninitialized variable in _reflink_convert_cow
+    - xfs: don't reserve blocks for right shift transactions
+    - xfs: Use xfs_icluster_size_fsb() to calculate inode chunk alignment
+    - xfs: tune down agno asserts in the bmap code
+    - xfs: only reclaim unwritten COW extents periodically
+    - xfs: fix and streamline error handling in xfs_end_io
+    - xfs: Use xfs_icluster_size_fsb() to calculate inode alignment mask
+    - xfs: use iomap new flag for newly allocated delalloc blocks
+    - xfs: try any AG when allocating the first btree block when reflinking
+    - scsi: libsas: fix ata xfer length
+    - scsi: scsi_dh_alua: Check scsi_device_get() return value
+    - scsi: scsi_dh_alua: Ensure that alua_activate() calls the completion
+      function
+    - ALSA: seq: Fix race during FIFO resize
+    - ALSA: hda - fix a problem for lineout on a Dell AIO machine
+    - [x86] ASoC: Intel: Skylake: fix invalid memory access due to wrong
+      reference of pointer
+    - HID: wacom: Don't add ghost interface as shared data
+    - mmc: sdhci: Disable runtime pm when the sdio_irq is enabled
+    - NFSv4.1 fix infinite loop on IO BAD_STATEID error
+    - nfsd: map the ENOKEY to nfserr_perm for avoiding warning
+    - [hppa] Clean up fixup routines for get_user()/put_user()
+    - [hppa] Avoid stalled CPU warnings after system shutdown
+    - [hppa] Fix access fault handling in pa_memcpy()
+    - ACPI: Fix incompatibility with mcount-based function graph tracing
+    - ACPI: Do not create a platform_device for IOAPIC/IOxAPIC
+    - USB: fix linked-list corruption in rh_call_control()
+    - [x86] KVM: clear bus pointer when destroyed
+    - KVM: kvm_io_bus_unregister_dev() should never fail
+    - drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
+    - [armhf,arm64] drm/vc4: Allocate the right amount of space for boot-time
+      CRTC state.
+    - [armhf] drm/etnaviv: (re-)protect fence allocation with GPU mutex
+    - [x86] mm/KASLR: Exclude EFI region from KASLR VA space randomization
+    - [x86] mce: Fix copy/paste error in exception table entries
+    - lib/syscall: Clear return values when no stack
+    - mm: rmap: fix huge file mmap accounting in the memcg stats
+    - mm, hugetlb: use pte_present() instead of pmd_present() in
+      follow_huge_pmd()
+    - qla2xxx: Allow vref count to timeout on vport delete.
+    - mm: workingset: fix premature shadow node shrinking with cgroups
+    - blk: improve order of bio handling in generic_make_request()
+    - blk: Ensure users for current->bio_list can see the full list.
+    - padata: avoid race in reordering
+    - nvme/core: Fix race kicking freed request_queue
+    - nvme/pci: Disable on removal when disconnected
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.22
+    - ppdev: check before attaching port
+    - ppdev: fix registering same device name
+    - [x86] drm/vmwgfx: Type-check lookups of fence objects
+    - [x86] drm/vmwgfx: avoid calling vzalloc with a 0 size in
+      vmw_get_cap_3d_ioctl()
+    - drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces
+    - [x86] drm/vmwgfx: Remove getparam error message
+    - sysfs: be careful of error returns from ops->show()
+    - [armhf,arm64] KVM: Take mmap_sem in stage2_unmap_vm
+    - [armhf,arm64] KVM: Take mmap_sem in kvm_arch_prepare_memory_region
+    - [armhf,arm64] kvm: Fix locking for kvm_free_stage2_pgd
+    - [x86] iio: bmg160: reset chip when probing
+    - [arm64] mm: unaligned access by user-land should be received as SIGBUS
+    - cfg80211: check rdev resume callback only for registered wiphy
+    - CIFS: Reset TreeId to zero on SMB2 TREE_CONNECT
+    - mm/page_alloc.c: fix print order in show_free_areas()
+    - ptrace: fix PTRACE_LISTEN race corrupting task->state
+    - dm verity fec: limit error correction recursion
+    - dm verity fec: fix bufio leaks
+    - ACPI / gpio: do not fall back to parsing _CRS when we get a deferral
+    - xfs: Honor FALLOC_FL_KEEP_SIZE when punching ends of files
+    - ring-buffer: Fix return value check in test_ringbuffer()
+    - mac80211: unconditionally start new netdev queues with iTXQ support
+    - brcmfmac: use local iftype avoiding use-after-free of virtual interface
+    - [powerpc*] Disable HFSCR[TM] if TM is not supported
+    - [powerpc*] mm: Add missing global TLB invalidate if cxl is active
+    - [powerpc*/*64*]: Fix flush_(d|i)cache_range() called from modules
+    - [powerpc*] Don't try to fix up misaligned load-with-reservation
+      instructions
+    - [powerpc*] crypto/crc32c-vpmsum: Fix missing preempt_disable()
+    - dm raid: fix NULL pointer dereference for raid1 without bitmap
+    - [s390x] decompressor: fix initrd corruption caused by bss clear
+    - [s390x] uaccess: get_user() should zero on failure (again)
+    - [mips*el/loongson-3] Check TLB before handle_ri_rdhwr() for Loongson-3
+    - [mips*el/loongson-3] Add MIPS_CPU_FTLB for Loongson-3A R2
+    - [mips*el/loongson-3] Flush wrong invalid FTLB entry for huge page
+    - [mips*el/loongson-3] c-r4k: Fix Loongson-3's vcache/scache waysize
+      calculation
+    - mm/mempolicy.c: fix error handling in set_mempolicy and mbind
+      (CVE-2017-7616)
+    - random: use chacha20 for get_random_int/long
+    - [armhf] drm/sun4i: tcon: Move SoC specific quirks to a DT matched data
+      structure
+    - [armhf] drm/sun4i: Add compatible strings for A31/A31s display pipelines
+    - [armhf] drm/sun4i: Add compatible string for A31/A31s TCON (timing
+      controller)
+    - HID: i2c-hid: add a simple quirk to fix device defects
+    - usb: dwc3: gadget: delay unmap of bounced requests
+    - [x86] ASoC: Intel: bytct_rt5640: change default capture settings
+    - [armhf,arm64] clocksource/drivers/arm_arch_timer: Don't assume clock runs
+      in suspend
+    - scsi: ufs: introduce UFSHCD_QUIRK_PRDT_BYTE_GRAN quirk
+    - HID: multitouch: do not retrieve all reports for all devices
+    - [arm64] mmc: sdhci-msm: Enable few quirks
+    - scsi: ufs: ensure that host pa_tactivate is higher than device
+    - svcauth_gss: Close connection when dropping an incoming message
+    - scsi: ufs: add quirk to increase host PA_SaveConfigTime
+    - [x86] platform: acer-wmi: Only supports AMW0_GUID1 on acer family
+    - nvme: simplify stripe quirk
+    - ACPI / sysfs: Provide quirk mechanism to prevent GPE flooding
+    - HID: usbhid: Add quirk for the Futaba TOSD-5711BB VFD
+    - [x86] drm/i915: actually drive the BDW reserved IDs
+    - scsi: ufs: issue link starup 2 times if device isn't active
+    - [armhf] serial: 8250_omap: Add OMAP_DMA_TX_KICK quirk for AM437x
+    - ACPI / button: Change default behavior to lid_init_state=open
+    - [x86] ACPI: save NVS memory for Lenovo G50-45
+    - HID: wacom: don't apply generic settings to old devices
+    - [arm64] firmware: qcom: scm: Fix interrupted SCM calls
+    - [armhf] watchdog: s3c2410: Fix infinite interrupt in soft mode
+    - [x86] platform: asus-wmi: Set specified XUSB2PR value for X550LB
+    - [x86] platform: asus-wmi: Detect quirk_no_rfkill from the DSDT
+    - [x86] reboot/quirks: Add ASUS EeeBook X205TA reboot quirk
+    - [x86] reboot/quirks: Add ASUS EeeBook X205TA/W reboot quirk
+    - usb-storage: Add ignore-residue quirk for Initio INIC-3619
+    - [x86] reboot/quirks: Fix typo in ASUS EeeBook X205TA reboot quirk
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.23
+    - [x86] drm/i915/gen9: Increase PCODE request timeout to 50ms
+    - [x86] drm/i915: Nuke debug messages from the pipe update critical section
+    - [x86] drm/i915: Avoid tweaking evaluation thresholds on Baytrail v3
+    - [x86] drm/i915: Only enable hotplug interrupts if the display interrupts
+      are enabled
+    - [x86] drm/i915: Drop support for I915_EXEC_CONSTANTS_* execbuf parameters.
+    - [x86] drm/i915: Stop using RP_DOWN_EI on Baytrail
+    - [x86] drm/i915: Avoid rcu_barrier() from reclaim paths (shrinker)
+    - [armhf,arm64] i2c: bcm2835: Fix hang for writing messages larger than 16
+      bytes
+    - rt2x00usb: fix anchor initialization
+    - rt2x00usb: do not anchor rx and tx urb's
+    - [mips*] Introduce irq_stack
+    - [mips*] Stack unwinding while on IRQ stack
+    - [mips*] Only change $28 to thread_info if coming from user mode
+    - [mips*] Switch to the irq_stack in interrupts
+    - [mips*] Select HAVE_IRQ_EXIT_ON_IRQ_STACK
+    - [mips*] IRQ Stack: Fix erroneous jal to plat_irq_dispatch
+    - [x86] Revert "drm/i915/execlists: Reset RING registers upon resume"
+    - blk-mq: Avoid memory reclaim when remapping queues
+    - usb: hub: Wait for connection to be reestablished after port reset
+    - net/mlx4_en: Fix bad WQE issue
+    - net/mlx4_core: Fix racy CQ (Completion Queue) free
+    - net/mlx4_core: Fix when to save some qp context flags for dynamic VST to
+      VGT transitions
+    - dma-buf: add support for compat ioctl
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.24
+    - cgroup, kthread: close race window where new kthreads can be migrated to
+      non-root cgroups
+    - thp: fix MADV_DONTNEED vs. MADV_FREE race
+    - thp: fix MADV_DONTNEED vs clear soft dirty race
+    - zsmalloc: expand class bit
+    - drm/nouveau/mpeg: mthd returns true on success now
+    - drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
+    - [armhf] drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
+    - CIFS: reconnect thread reschedule itself
+    - CIFS: store results of cifs_reopen_file to avoid infinite wait
+    - Input: xpad - add support for Razer Wildcat gamepad
+    - [x86] perf: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32()
+    - [x86] efi: Don't try to reserve runtime regions
+    - [x86] signals: Fix lower/upper bound reporting in compat siginfo
+    - [x86] pmem: fix broken __copy_user_nocache cache-bypass assumptions
+    - [x86] vdso: Ensure vdso32_enabled gets set to valid values only
+    - [x86] vdso: Plug race between mapping and ELF header setup
+    - [x86] acpi, nfit, libnvdimm: fix interleave set cookie calculation
+      (64-bit comparison)
+    - ACPI / scan: Set the visited flag for all enumerated devices
+    - [hppa] fix bugs in pa_memcpy
+    - efi/libstub: Skip GOP with PIXEL_BLT_ONLY format
+    - efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
+    - iscsi-target: Fix TMR reference leak during session shutdown
+    - iscsi-target: Drop work-around for legacy GlobalSAN initiator
+    - scsi: sr: Sanity check returned mode data
+    - scsi: sd: Consider max_xfer_blocks if opt_xfer_blocks is unusable
+    - scsi: qla2xxx: Add fix to read correct register value for ISP82xx.
+    - scsi: sd: Fix capacity calculation with 32-bit sector_t
+    - target: Avoid mappedlun symlink creation during lun shutdown
+    - xen, fbfront: fix connecting to backend
+    - new privimitive: iov_iter_revert()
+    - make skb_copy_datagram_msg() et.al. preserve ->msg_iter on error
+    - [x86] libnvdimm: fix blk free space accounting
+    - [x86] libnvdimm: fix reconfig_mutex, mmap_sem, and jbd2_handle lockdep
+      splat
+    - [armhf] pwm: rockchip: State of PWM clock should synchronize with PWM
+      enabled state
+    - cpufreq: Bring CPUs up even if cpufreq_online() failed
+    - [armhf] irqchip/irq-imx-gpcv2: Fix spinlock initialization
+    - ftrace: Fix removing of second function probe
+    - zram: do not use copy_page with non-page aligned address
+    - ftrace: Fix function pid filter on instances
+    - crypto: algif_aead - Fix bogus request dereference in completion function
+    - crypto: ahash - Fix EINPROGRESS notification callback (CVE-2017-7618)
+    - [hppa] Fix get_user() for 64-bit value on 32-bit kernel
+    - dvb-usb-v2: avoid use-after-free (CVE-2017-8064)
+    - drm/nouveau/disp/mcp7x: disable dptmds workaround (Closes: #850219)
+    - [x86] mm: Tighten x86 /dev/mem with zeroing reads (CVE-2017-7889)
+    - dvb-usb-firmware: don't do DMA on stack (CVE-2017-8061)
+    - cxusb: Use a dma capable buffer also for reading (CVE-2017-8063)
+    - virtio-console: avoid DMA from stack (CVE-2017-8067)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.25
+    - KEYS: Disallow keyrings beginning with '.' to be joined as session
+      keyrings (CVE-2016-9604)
+    - KEYS: Change the name of the dead type to ".dead" to prevent user access
+      (CVE-2017-6951)
+    - KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
+      (CVE-2017-7472)
+    - tracing: Allocate the snapshot buffer before enabling probe
+    - ring-buffer: Have ring_buffer_iter_empty() return true when empty
+    - mm: prevent NR_ISOLATE_* stats from going negative
+    - cifs: Do not send echoes before Negotiate is complete (Closes: #856843)
+    - CIFS: remove bad_network_name flag
+    - [s390x] mm: fix CMMA vs KSM vs others
+    - Input: elantech - add Fujitsu Lifebook E547 to force crc_enabled
+    - ACPI / power: Avoid maybe-uninitialized warning
+    - [armhf] mmc: sdhci-esdhc-imx: increase the pad I/O drive strength for
+      DDR50 card
+    - ubifs: Fix RENAME_WHITEOUT support
+    - ubifs: Fix O_TMPFILE corner case in ubifs_link()
+    - mac80211: reject ToDS broadcast data frames
+    - mac80211: fix MU-MIMO follow-MAC mode
+    - ubi/upd: Always flush after prepared for an update
+    - [powerpc*] kprobe: Fix oops when kprobed on 'stdu' instruction
+    - [x86] mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs
+    - [x86] mce: Make the MCE notifier a blocking one
+    - device-dax: switch to srcu, fix rcu_read_lock() vs pte allocation
+
+  [ Ben Hutchings ]
+  * w1: Really enable W1_MASTER_GPIO as module (Closes: #858975)
+  * debian/rules.real: Undefine $LANGUAGE, which can break debug symbols for
+    vDSOs (Closes: #859807)
+  * Bump ABI to 3
+  * [s390x] Set NR_CPUS=256 (Closes: #858731)
+  * [x86] usbip: Increase USBIP_VHCI_NR_HCS to 8 and USBIP_VHCI_HC_PORTS to 31
+    (Closes: #859641)
+  * [powerpc/powerpc64,ppc64*] target: Enable SCSI_IBMVSCSIS as module
+  * cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
+    (Closes: #859978)
+  * udeb: Include all AHCI drivers in sata-modules (Closes: #860335)
+  * [powerpc/powerpc64,ppc64] Set NR_CPUS=2048, matching ppc64el
+  * [powerpc*/*64*] Enable CPUMASK_OFFSTACK to reduce stack usage
+  * [mips*el/loongson-3] Set NR_CPUS=16 to allow for Loongson 3B2000
+  * [mips*/octeon] Set NR_CPUS=64 to allow for Cavium CN7890
+  * [arm64] Set NR_CPUS=256 to allow for multi-SoC systems (Closes: #861209)
+  * [powerpc/powerpc-smp,powerpcspe] Explicitly set NR_CPUS=4
+  * Move debug symbols back to the main archive, to avoid problems with the
+    current handling in dak
+  * linux-image: Disable signing until it's supported in dak
+  * [rt] Update to 4.9.20-rt16:
+    - rtmutex: Make lock_killable work
+    - rtmutex: Provide rt_mutex_lock_state()
+    - rtmutex: Provide locked slowpath
+    - rwsem/rt: Lift single reader restriction
+  * PCI: Enable PCIE_PTM (except on armel/marvell)
+  * 6lowpan: Enable Generic Header Compression modules
+  * net/sched: Enable NET_ACT_SKBMOD as module
+  * ethernet: Enable NFP_NETVF as module
+  * net/phy: Enable MICROSEMI_PHY as module
+  * input/tablet: Enable TABLET_USB_PEGASUS as module
+  * [x86] input/touchscreen: Enable TOUCHSCREEN_SURFACE3_SPI as module
+  * serial/8250: Enable SERIAL_8250_MOXA as module
+  * [x86] gpio: Enable GPIO_AMDPT as module
+  * [x86] thermal: Enable INT3406_THERMAL as module
+  * watchdog: Enable WATCHDOG_SYSFS
+  * integrity: Enable IMA, IMA_DEFAULT_HASH_SHA256, IMA_APPRAISE,
+    IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY, IMA_BLACKLIST_KEYRING
+    (except on armel/marvell) (Closes: #788290)
+  * media: Enable VIDEO_TW5864, VIDEO_TW686X as modules
+  * [x86] amdgpu,sound/soc: Enable DRM_AMD_ACP; enable SND_SOC_AMD_ACP as module
+  * hda: Set SND_HDA_PREALLOC_SIZE=2048 as recommended for PulseAudio
+  * HID: Enable HID_SENSOR_CUSTOM_SENSOR as module
+  * leds,USB: Enable USB_LEDS_TRIGGER_USBPORT as module
+  * usbip: Enable USBIP_VUDC as module
+  * USB/misc: Enable UCSI as module
+  * leds: Enable LEDS_TRIGGER_DISK, LEDS_TRIGGER_MTD, LEDS_TRIGGER_PANIC
+  * IB: Enable INFINIBAND_HFI1, INFINIBAND_I40IW, INFINIBAND_QEDR, RDMA_RXE
+    as modules
+  * [amd64] EDAC: Enable EDAC_SKX as module
+  * [x86] comedi: Enable COMEDI_ADV_PCI1720, COMEDI_ADV_PCI1760 as modules
+  * [x86] platform: Enable INTEL_HID_EVENT as module
+  * [x86] hwtracing: Enable INTEL_TH, INTEL_TH_PCI, INTEL_TH_GTH, INTEL_TH_MSU,
+    INTEL_TH_PTI as modules
+  * [rt] tracing: Enable HWLAT_TRACER
+  * [x86] crypto: Enable CRYPTO_DEV_QAT_C3XXX, CRYPTO_DEV_QAT_C62X,
+    CRYPTO_DEV_QAT_C3XXXVF, CRYPTO_DEV_QAT_C62XVF as modules
+  * crypto: Enable CRYPTO_DEV_CHELSIO as module
+  * [arm64] Enable ARMV8_DEPRECATED, SWP_EMULATION, CP15_BARRIER_EMULATION,
+    SETEND_EMULATION (Closes: #861384)
+  * udeb: Add tifm_7xx1 to mmc-modules (Closes: #861195)
+  * leds: Enable LEDS_GPIO as module for all configurations with GPIOs
+    (Closes: #860569)
+  * selinux: Set SECURITY_SELINUX_CHECKREQPROT_VALUE=0, per default.
+    This may break some old applications if SELinux is enabled, and can be
+    reverted using the kernel parameter: checkreqprot=1
+  * udeb: Move mfd-core to kernel-image, as both input-modules and
+    mmc-modules need it
+  * crypto: Change CRYPTO_SHA256 from module to built-in, as required by IMA
+
+  [ Salvatore Bonaccorso ]
+  * ping: implement proper locking (CVE-2017-2671)
+  * macsec: avoid heap overflow in skb_to_sgvec (CVE-2017-7477)
+  * macsec: dynamically allocate space for sglist
+  * nfsd: check for oversized NFSv2/v3 arguments (CVE-2017-7645)
+  * nfsd4: minor NFSv2/v3 write decoding cleanup
+  * nfsd: stricter decoding of write-like NFSv2/v3 ops (CVE-2017-7895)
+
+  [ Aurelien Jarno ]
+  * [mips*/octeon] Drop obsolete patch adding support for the UBNT E200
+    board.
+  * [mips*el/loongson-3] Disable PAGE_EXTENSION and PAGE_POISONING.
+
+  [ John Paul Adrian Glaubitz ]
+  * [m68k] udeb: Enable suffix for kernel-image (Closes: #859366)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 02 May 2017 16:21:44 +0100
+
+linux (4.9.18-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.17
+    - net/mlx5e: Register/unregister vport representors on interface
+      attach/detach
+    - net/mlx5e: Do not reduce LRO WQE size when not using build_skb
+    - net/mlx5e: Fix wrong CQE decompression
+    - vxlan: correctly validate VXLAN ID against VXLAN_N_VID
+    - vti6: return GRE_KEY for vti6
+    - vxlan: don't allow overwrite of config src addr
+    - ipv4: mask tos for input route
+    - net sched actions: decrement module reference count after table flush.
+    - l2tp: avoid use-after-free caused by l2tp_ip_backlog_recv
+    - net: phy: Avoid deadlock during phy_error()
+    - vxlan: lock RCU on TX path
+    - geneve: lock RCU on TX path
+    - tcp/dccp: block BH for SYN processing
+    - net: bridge: allow IPv6 when multicast flood is disabled
+    - net: don't call strlen() on the user buffer in packet_bind_spkt()
+    - net: net_enable_timestamp() can be called from irq contexts
+    - ipv6: orphan skbs in reassembly unit
+    - dccp: Unlock sock before calling sk_free()
+    - strparser: destroy workqueue on module exit
+    - tcp: fix various issues for sockets morphing to listen state
+    - net: fix socket refcounting in skb_complete_wifi_ack()
+    - net: fix socket refcounting in skb_complete_tx_timestamp()
+    - net/sched: act_skbmod: remove unneeded rcu_read_unlock in tcf_skbmod_dump
+    - dccp: fix use-after-free in dccp_feat_activate_values
+    - vrf: Fix use-after-free in vrf_xmit
+    - net/tunnel: set inner protocol in network gro hooks
+    - act_connmark: avoid crashing on malformed nlattrs with null parms
+    - mpls: Send route delete notifications when router module is unloaded
+    - mpls: Do not decrement alive counter for unregister events
+    - ipv6: make ECMP route replacement less greedy
+    - ipv6: avoid write to a possibly cloned skb
+    - bridge: drop netfilter fake rtable unconditionally
+    - dccp/tcp: fix routing redirect race
+    - tun: fix premature POLLOUT notification on tun devices
+    - dccp: fix memory leak during tear-down of unsuccessful connection request
+    - bpf: Detect identical PTR_TO_MAP_VALUE_OR_NULL registers
+    - bpf: fix state equivalence
+    - bpf: fix regression on verifier pruning wrt map lookups
+    - bpf: fix mark_reg_unknown_value for spilled regs on map value marking
+    - dmaengine: iota: ioat_alloc_chan_resources should not perform sleeping
+      allocations.
+    - xen: do not re-use pirq number cached in pci device msi msg data
+    - igb: Workaround for igb i210 firmware issue
+    - igb: add i211 to i210 PHY workaround
+    - [x86] hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic
+    - PCI: Separate VF BAR updates from standard BAR updates
+    - PCI: Remove pci_resource_bar() and pci_iov_resource_bar()
+    - PCI: Decouple IORESOURCE_ROM_ENABLE and PCI_ROM_ADDRESS_ENABLE
+    - PCI: Don't update VF BARs while VF memory space is enabled
+    - PCI: Update BARs using property bits appropriate for type
+    - PCI: Ignore BAR updates on virtual functions
+    - PCI: Do any VF BAR updates before enabling the BARs
+    - [powerpc*] ibmveth: calculate gso_segs for large packets
+    - [x86] Drivers: hv: ring_buffer: count on wrap around mappings in
+      get_next_pkt_raw() (v2)
+    - vfio/spapr: Postpone allocation of userspace version of TCE table
+    - [powerpc*] iommu: Stop using @current in mm_iommu_xxx
+    - [powerpc*] vfio/spapr: Reference mm in tce_container
+    - [powerpc*] mm/iommu, vfio/spapr: Put pages on VFIO container shutdown
+    - [powerpc*] vfio/spapr: Add a helper to create default DMA window
+    - [powerpc*] vfio/spapr: Postpone default window creation
+    - drm/nouveau/disp/gp102: fix cursor/overlay immediate channel indices
+    - drm/nouveau/disp/nv50-: split chid into chid.ctrl and chid.user
+    - drm/nouveau/disp/nv50-: specify ctrl/user separately when constructing
+      classes
+    - block: allow WRITE_SAME commands with the SG_IO ioctl
+    - [s390x] zcrypt: Introduce CEX6 toleration
+    - uvcvideo: uvc_scan_fallback() for webcams with broken chain
+    - [x86] ACPI / blacklist: add _REV quirks for Dell Precision 5520 and 3520
+    - [x86] ACPI / blacklist: Make Dell Latitude 3350 ethernet work
+    - serial: 8250_pci: Detach low-level driver during PCI error recovery
+    - [armhf] clk: bcm2835: Fix ->fixed_divider of pllh_aux
+    - [armhf] drm/vc4: Fix race between page flip completion event and clean-up
+    - [armhf] drm/vc4: Fix ->clock_select setting for the VEC encoder
+    - [arm64] KVM: VHE: Clear HCR_TGE when invalidating guest TLBs
+    - [armhf,arm64] irqchip/gicv3-its: Add workaround for QDF2400 ITS erratum
+      0065
+    - [x86] tsc: Fix ART for TSC_KNOWN_FREQ
+    - [x86] perf: Fix CR4.PCE propagation to use active_mm instead of mm
+    - futex: Fix potential use-after-free in FUTEX_REQUEUE_PI
+    - futex: Add missing error handling to FUTEX_REQUEUE_PI
+    - locking/rwsem: Fix down_write_killable() for
+      CONFIG_RWSEM_GENERIC_SPINLOCK=y
+    - [powerpc*] crypto: Fix initialisation of crc32c context
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.18
+    - [armhf] drm/vc4: Fix termination of the initial scan for branch targets.
+    - [armhf] drm/vc4: Use runtime autosuspend to avoid thrashing V3D power
+      state.
+    - qla2xxx: Fix memory leak for abts processing
+    - qla2xxx: Fix request queue corruption.
+    - [hppa] Optimize flush_kernel_vmap_range and invalidate_kernel_vmap_range
+    - [hppa] Fix system shutdown halt
+    - perf/core: Fix use-after-free in perf_release()
+    - perf/core: Fix event inheritance on fork()
+    - NFS prevent double free in async nfs4_exchange_id
+    - cpufreq: Fix and clean up show_cpuinfo_cur_freq()
+    - [powerpc*] boot: Fix zImage TOC alignment
+    - md/raid1/10: fix potential deadlock
+    - target/pscsi: Fix TYPE_TAPE + TYPE_MEDIMUM_CHANGER export
+    - scsi: lpfc: Add shutdown method for kexec
+    - scsi: libiscsi: add lock around task lists to fix list corruption
+      regression
+    - target: Fix VERIFY_16 handling in sbc_parse_cdb
+    - isdn/gigaset: fix NULL-deref at probe
+    - gfs2: Avoid alignment hole in struct lm_lockname
+    - percpu: acquire pcpu_lock when updating pcpu_nr_empty_pop_pages
+    - cgroup/pids: remove spurious suspicious RCU usage warning
+    - [x86] drm/amdgpu/si: add dpm quirk for Oland
+    - ext4: fix fencepost in s_first_meta_bg validation (Closes: #856808)
+
+  [ Ben Hutchings ]
+  * [powerpc*] Ignore ABI changes in cxl (fixes FTBFS) (Closes: #858530)
+    and IOMMU setup
+  * Ignore ABI changes in bpf, dccp, libiscsi
+  * [x86] Ignore ABI changes in kvm
+  * [rt] Update to 4.9.18-rt14:
+    - lockdep: Fix per-cpu static objects
+    - futex: Cleanup variable names for futex_top_waiter()
+    - futex: Use smp_store_release() in mark_wake_futex()
+    - futex: Remove rt_mutex_deadlock_account_*()
+    - futex,rt_mutex: Provide futex specific rt_mutex API
+    - futex: Change locking rules
+    - futex: Cleanup refcounting
+    - futex: Rework inconsistent rt_mutex/futex_q state
+    - futex: Pull rt_mutex_futex_unlock() out from under hb->lock
+    - futex,rt_mutex: Introduce rt_mutex_init_waiter()
+    - futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock()
+    - futex: Rework futex_lock_pi() to use rt_mutex_*_proxy_lock()
+    - futex: Futex_unlock_pi() determinism
+    - futex: Drop hb->lock before enqueueing on the rtmutex
+    - futex: workaround migrate_disable/enable in different context
+    - Revert "kernel/futex: don't deboost too early"
+  * xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
+    (CVE-2017-7184)
+  * xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (CVE-2017-7184)
+  * scsi: sg: check length passed to SG_NEXT_CMD_LEN (CVE-2017-7187)
+  * [x86] vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
+    (CVE-2017-7261)
+  * [x86] drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
+    (CVE-2017-7294)
+  * net/packet: Fix integer overflow in various range checks (CVE-2017-7308)
+  * [arm64] rtc: tegra: Implement clock handling (Closes: #858514)
+  * [armhf] sound/soc: Enable SND_SUN4I_SPDIF as module (Closes: #857410)
+  * [arm64,x86] Enable CROS_KBD_LED_BACKLIGHT as module (Closes: #856906)
+  * netfilter: nft_ct: add notrack support (Closes: #845500)
+  * w1: Enable W1_MASTER_GPIO as module (Closes: #858975)
+
+  [ James Clarke ]
+  * [sparc64] udeb: Re-add ufs-modules (Closes: #858049)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 30 Mar 2017 02:16:33 +0100
+
+linux (4.9.16-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.14
+    - [mips*] Fix special case in 64 bit IP checksumming.
+    - [mips*/octeon] Fix copy_from_user fault handling for large buffers
+    - mmc: sdhci-acpi: support deferred probe
+    - uvcvideo: Fix a wrong macro
+    - media: fix dm1105.c build error
+    - lirc_dev: LIRC_{G,S}ET_REC_MODE do not work
+    - media: Properly pass through media entity types in entity enumeration
+    - ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()
+    - [x86] ALSA: hda/realtek - Cannot adjust speaker's volume on a Dell AIO
+    - [x86] ALSA: hda - fix Lewisburg audio issue
+    - ALSA: timer: Reject user params with too small ticks
+    - ALSA: ctxfi: Fallback DMA mask to 32bit
+    - ALSA: seq: Fix link corruption by event error handling
+    - [x86] ALSA: hda - Add subwoofer support for Dell Inspiron 17 7000 Gaming
+    - [x86] ALSA: hda - Fix micmute hotkey problem for a lenovo AIO machine
+    - hwmon: (it87) Do not overwrite bit 2..6 of pwm control registers
+    - hwmon: (it87) Ensure that pwm control cache is current before updating
+      values
+    - [x86] staging/lustre/lnet: Fix allocation size for sv_cpt_data
+    - staging: rtl: fix possible NULL pointer dereference
+    - regulator: Fix regulator_summary for deviceless consumers
+    - tpm_tis: fix the error handling of init_tis()
+    - [x86] iommu/vt-d: Fix some macros that are incorrectly specified in
+      intel-iommu
+    - [x86] iommu/vt-d: Tylersburg isoch identity map check is done too late.
+    - CIFS: Fix splice read for non-cached files
+    - [x86] mm, devm_memremap_pages: hold device_hotplug lock over
+      mem_hotplug_{begin, done}
+    - mm/page_alloc: fix nodes for reclaim in fast path
+    - mm: vmpressure: fix sending wrong events on underflow
+    - mm: do not access page->mapping directly on page_endio
+    - mm balloon: umount balloon_mnt when removing vb device
+    - mm, vmscan: cleanup lru size claculations
+    - mm, vmscan: consider eligible zones in get_scan_count
+    - sigaltstack: support SS_AUTODISARM for CONFIG_COMPAT
+    - PM / devfreq: Fix available_governor sysfs
+    - PM / devfreq: Fix wrong trans_stat of passive devfreq device
+    - dm cache: fix corruption seen when using cache > 2TB
+    - dm stats: fix a leaked s->histogram_boundaries array
+    - dm round robin: revert "use percpu 'repeat_count' and 'current_path'"
+    - dm raid: fix data corruption on reshape request
+    - [x86] scsi: storvsc: use tagged SRB requests if supported by the device
+    - [x86] scsi: storvsc: properly handle SRB_ERROR when sense message is
+      present
+    - [x86] scsi: storvsc: properly set residual data length on errors
+    - scsi: aacraid: Reorder Adapter status check
+    - scsi: use 'scsi_device_from_queue()' for scsi_dh
+    - Fix: Disable sys_membarrier when nohz_full is enabled
+    - jbd2: don't leak modified metadata buffers on an aborted journal
+    - block/loop: fix race between I/O and set_status
+    - loop: fix LO_FLAGS_PARTSCAN hang
+    - ext4: Include forgotten start block on fallocate insert range
+    - ext4: do not polute the extents cache while shifting extents
+    - ext4: trim allocation requests to group size
+    - ext4: fix data corruption in data=journal mode
+    - ext4: fix use-after-iput when fscrypt contexts are inconsistent
+    - ext4: fix inline data error paths
+    - ext4: preserve the needs_recovery flag when the journal is aborted
+    - ext4: return EROFS if device is r/o and journal replay is needed
+    - mei: remove support for broken parallel read
+    - ath10k: fix boot failure in UTF mode/testmode
+    - ath5k: drop bogus warning on drv_set_key with unsupported cipher
+    - ath9k: fix race condition in enabling/disabling IRQs
+    - ath9k: use correct OTP register offsets for the AR9340 and AR9550
+    - [x86] PCI: hv: Fix wslot_to_devfn() to fix warnings on device removal
+    - [x86] Drivers: hv: vmbus: Raise retry/wait limits in vmbus_post_msg()
+    - perf callchain: Reference count maps
+    - crypto: testmgr - Pad aes_ccm_enc_tv_template vector
+    - fuse: add missing FR_FORCE
+    - [x86] pkeys: Check against max pkey to avoid overflows
+    - [armhf,arm64] KVM: Enforce unconditional flush to PoC when mapping to
+      stage-2
+    - [arm64] dma-mapping: Fix dma_mapping_error() when bypassing SWIOTLB
+    - [arm64] fix erroneous __raw_read_system_reg() cases
+    - [armhf,arm64] KVM: vgic: Stop injecting the MSI occurrence twice
+    - can: gs_usb: Don't use stack memory for USB transfers
+    - can: usb_8dev: Fix memory leak of priv->cmd_msg_buffer
+    - w1: don't leak refcount on slave attach failure in
+      w1_attach_slave_device()
+    - w1: ds2490: USB transfer buffers need to be DMAable
+    - usb: dwc3: gadget: skip Set/Clear Halt when invalid
+    - usb: host: xhci: plat: check hcc_params after add hcd
+    - usb: gadget: udc-core: Rescan pending list on driver unbind
+    - usb: gadget: f_hid: fix: Free out requests
+    - usb: gadget: f_hid: fix: Prevent accessing released memory
+    - usb: gadget: f_hid: Use spinlock instead of mutex
+    - [x86] hv: allocate synic pages for all present CPUs
+    - [x86] hv: init percpu_list in hv_synic_alloc()
+    - [x86] hv: don't reset hv_context.tsc_page on crash
+    - [x86] Drivers: hv: vmbus: Prevent sending data on a rescinded channel
+    - [x86] Drivers: hv: vmbus: Fix a rescind handling bug
+    - [x86] Drivers: hv: util: kvp: Fix a rescind processing issue
+    - [x86] Drivers: hv: util: Fcopy: Fix a rescind processing issue
+    - [x86] Drivers: hv: util: Backup: Fix a rescind processing issue
+    - RDMA/core: Fix incorrect structure packing for booleans
+    - rdma_cm: fail iwarp accepts w/o connection params
+    - gfs2: Add missing rcu locking for glock lookup
+    - [arm64] remoteproc: qcom: mdt_loader: Don't overwrite firmware object
+    - rtlwifi: Fix alignment issues
+    - rtlwifi: rtl8192c-common: Fix "BUG: KASAN:
+    - [m68k] VME: restore bus_remove function causing incomplete module unload
+    - nfsd: minor nfsd_setattr cleanup
+    - nfsd: special case truncates some more
+    - NFSv4: Fix memory and state leak in _nfs4_open_and_get_state
+    - NFSv4: Fix reboot recovery in copy offload
+    - pNFS/flexfiles: If the layout is invalid, it must be updated before
+      retrying
+    - NFSv4: fix getacl head length estimation
+    - NFSv4: fix getacl ERANGE for some ACL buffer sizes
+    - f2fs: fix a problem of using memory after free
+    - f2fs: fix multiple f2fs_add_link() calls having same name
+    - f2fs: add ovp valid_blocks check for bg gc victim to fg_gc
+    - f2fs: avoid to issue redundant discard commands
+    - [armhf] rtc: sun6i: Disable the build as a module
+    - [armhf] rtc: sun6i: Add some locking
+    - [armhf] rtc: sun6i: Switch to the external oscillator
+    - md linear: fix a race between linear_add() and linear_congested()
+    - bcma: use (get|put)_device when probing/removing device driver
+    - [armhf] dmaengine: ipu: Make sure the interrupt routine checks all
+      interrupts.
+    - xprtrdma: Fix Read chunk padding
+    - xprtrdma: Per-connection pad optimization
+    - xprtrdma: Disable pad optimization by default
+    - xprtrdma: Reduce required number of send SGEs
+    - [powerpc*] xmon: Fix data-breakpoint
+    - [powerpc*] mm: Add MMU_FTR_KERNEL_RO to possible feature mask
+    - [powerpc*] mm/hash: Always clear UPRT and Host Radix bits when setting up
+      CPU
+    - scsi: lpfc: Correct WQ creation for pagesize
+    - ceph: update readpages osd request according to size of pages
+    - netfilter: conntrack: remove GC_MAX_EVICTS break
+    - netfilter: conntrack: refine gc worker heuristics, redux
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.15
+    - tty: n_hdlc: get rid of racy n_hdlc.tbuf (CVE-2017-2636)
+      (Closes: #858122)
+    - serial: 8250_pci: Add MKS Tenta SCOM-0800 and SCOM-0801 cards
+    - [s390x] KVM: Disable dirty log retrieval for UCONTROL guests
+    - [x86] KVM: VMX: use correct vmcs_read/write for guest segment
+      selector/base
+    - Bluetooth: Add another AR3012 04ca:3018 device
+    - [s390x] qdio: clear DSCI prior to scanning multiple input queues
+    - [s390x] dcssblk: fix device size calculation in dcssblk_direct_access()
+    - [s390x] kdump: Use "LINUX" ELF note name instead of "CORE"
+    - [s390x] chsc: Add exception handler for CHSC instruction
+    - [s390x] TASK_SIZE for kernel threads
+    - [s390x] make setup_randomness work
+    - [s390x] use correct input data address for setup_randomness
+    - [armhf] net: mvpp2: fix DMA address calculation in mvpp2_txq_inc_put()
+    - [powerpc*] cxl: Prevent read/write to AFU config space while AFU not
+      configured
+    - [powerpc*] cxl: fix nested locking hang during EEH hotplug
+    - brcmfmac: fix incorrect event channel deduction
+    - mnt: Tuck mounts under others instead of creating shadow/side mounts.
+    - IB/ipoib: Fix deadlock between rmmod and set_mode
+    - IB/IPoIB: Add destination address when re-queue packet
+    - IB/mlx5: Fix out-of-bound access
+    - IB/SRP: Avoid using IB_MR_TYPE_SG_GAPS
+    - IB/srp: Avoid that duplicate responses trigger a kernel bug
+    - IB/srp: Fix race conditions related to task management
+    - fs: Better permission checking for submounts
+    - ceph: remove req from unsafe list when unregistering it
+    - [powerpc*] pci/hotplug/pnv-php: Remove WARN_ON() in pnv_php_put_slot()
+    - [powerpc*] pci/hotplug/pnv-php: Disable surprise hotplug capability on
+      conflicts
+    - target: Fix NULL dereference during LUN lookup + active I/O shutdown
+    - [powerpc*] drivers/pci/hotplug: Handle presence detection change
+      properly
+    - [powerpc*] drivers/pci/hotplug: Fix initial state for empty slot
+    - nlm: Ensure callback code also checks that the files match
+    - nfit, libnvdimm: fix interleave set cookie calculation
+    - mac80211: flush delayed work when entering suspend
+    - mac80211: don't reorder frames with SN smaller than SSN
+    - mac80211: don't handle filtered frames within a BA session
+    - mac80211: use driver-indicated transmitter STA only for data frames
+    - [x86] drm/amdgpu: add more cases to DCE11 possible crtc mask setup
+    - [arm64,powerpc*,x86] drm/ast: Fix test for VGA enabled
+    - [arm64,powerpc*,x86] drm/ast: Call open_key before enable_mmio in POST
+      code
+    - [arm64,powerpc*,x86] drm/ast: Fix AST2400 POST failure without BMC FW or
+      VBIOS
+    - drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
+    - [x86] drm/vmwgfx: Work around drm removal of control nodes
+    - [armhf] dmaengine: imx-sdma - correct the dma transfer residue
+      calculation
+    - drm/atomic: fix an error code in mode_fixup()
+    - [x86] drm/i915/gvt: Disable access to stolen memory as a guest
+    - drm: Cancel drm_fb_helper_dirty_work on unload
+    - drm: Cancel drm_fb_helper_resume_work on unload
+    - [x86] drm/i915: Avoid spurious WARNs about the wrong pipe in the PPS
+      code
+    - [x86] drm/i915: Fix not finding the VBT when it overlaps with
+      OPREGION_ASLE_EXT
+    - libceph: use BUG() instead of BUG_ON(1)
+    - [x86] mm: fix gup_pte_range() vs DAX mappings
+    - [x86] tlb: Fix tlb flushing when lguest clears PGE
+    - thp: fix another corner case of munlock() vs. THPs
+    - mm: do not call mem_cgroup_free() from within mem_cgroup_alloc()
+    - fat: fix using uninitialized fields of fat_inode/fsinfo_inode
+    - [x86] drivers: hv: Turn off write permission on the hypercall page
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.16
+    - USB: serial: digi_acceleport: fix OOB data sanity check
+    - USB: serial: digi_acceleport: fix OOB-event processing
+    - crypto: improve gcc optimization flags for serpent and wp512
+    - ucount: Remove the atomicity from ucount->count (CVE-2017-6874)
+    - dw2102: don't do DMA on stack
+    - i2c: add missing of_node_put in i2c_mux_del_adapters
+    - [ppc64el] Emulation support for load/store instructions on LE
+    - [powerpc*] xics: Work around limitations of OPAL XICS priority handling
+    - PCI: Prevent VPD access for QLogic ISP2722
+    - usb: gadget: dummy_hcd: clear usb_gadget region before registration
+    - usb: dwc3: gadget: make Set Endpoint Configuration macros safe
+    - [armhf] usb: dwc3-omap: Fix missing break in dwc3_omap_set_mailbox()
+    - usb: gadget: function: f_fs: pass companion descriptor along
+    - Revert "usb: gadget: uvc: Add missing call for additional setup data"
+    - usb: host: xhci-plat: Fix timeout on removal of hot pluggable xhci
+      controllers
+    - USB: serial: safe_serial: fix information leak in completion handler
+    - USB: serial: omninet: fix reference leaks at open
+    - USB: iowarrior: fix NULL-deref at probe (CVE-2016-2188)
+    - USB: iowarrior: fix NULL-deref in write
+    - USB: serial: io_ti: fix NULL-deref in interrupt callback
+    - USB: serial: io_ti: fix information leak in completion handler
+    - [armhf] serial: samsung: Continue to work if DMA request fails
+    - [s390x] KVM: Fix guest migration for huge guests resulting in panic
+    - [armhf.arm64] KVM: Let vcpu thread modify its own active state
+    - dm: flush queued bios when process blocks to avoid deadlock
+    - rc: raw decoder for keymap protocol is not loaded on register
+    - ext4: don't BUG when truncating encrypted inodes on the orphan list
+    - IB/mlx5: Verify that Q counters are supported
+
+  [ Ben Hutchings ]
+  * [media] dvb-usb: don't use stack for firmware load or reset
+    (Closes: #853894)
+  * Kbuild.include: addtree: Remove quotes before matching path
+    (regression in 4.8) (Closes: #856474)
+  * [rt] Update to 4.9.13-rt12:
+    - timer/hrtimer: check properly for a running timer
+  * [rt] Refresh one patch that had a textual conflict with 4.9.14
+  * Ignore various ABI changes that shouldn't affect OOT modules
+  * userns: Avoid ABI change for CVE-2017-6874 fix
+  * [amd64] Don't WARN about expected W+X pages on Xen (see #852324)
+  * fjes: Disable auto-loading, as this driver matches a very common ACPI ID
+    (Closes: #853976)
+
+  [ Salvatore Bonaccorso ]
+  * ACPI / EC: Use busy polling mode when GPE is not enabled.
+    Thanks to Jakobus Schurz <jakobus.schurz@gmail.com> (Closes: #846792)
+  * Ignore ABI changes for acpi_ec_{add,remove}_query_handler
+  * Ignore ABI change for first_ec (not declared in public header)
+
+  [ Helge Deller ]
+  * [hppa] Switch to debian default config option for bonding, irda and atalk
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 22 Mar 2017 17:01:40 +0100
+
+linux (4.9.13-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11
+    - can: Fix kernel panic at security_sock_rcv_skb
+    - net/mlx5e: Fix update of hash function/key via ethtool
+    - net/sched: matchall: Fix configuration race
+    - ipv6: fix ip6_tnl_parse_tlv_enc_lim()
+    - ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim()
+    - tcp: fix 0 divide in __tcp_select_window()
+    - stmmac: Discard masked flags in interrupt status register
+    - net: use a work queue to defer net_disable_timestamp() work
+    - netlabel: out of bound access in cipso_v4_validate()
+    - ip6_gre: fix ip6gre_err() invalid reads (CVE-2017-5897)
+    - ipv6: tcp: add a missing tcp_v6_restore_cb()
+    - tcp: avoid infinite loop in tcp_splice_read() (CVE-2017-6214)
+    - tun: read vnet_hdr_sz once
+    - macvtap: read vnet_hdr_size once
+    - rtl8150: Use heap buffers for all register access
+    - catc: Combine failure cleanup code in catc_probe()
+    - catc: Use heap buffer for memory size test
+    - mlx4: Invoke softirqs after napi_reschedule
+    - lwtunnel: valid encap attr check should return 0 when lwtunnel
+      is disabled
+    - sit: fix a double free on error path
+    - net: introduce device min_header_len
+    - packet: round up linear to header len
+    - ping: fix a null pointer dereference
+    - net: dsa: Do not destroy invalid network devices
+    - l2tp: do not use udp_ioctl()
+    - mld: do not remove mld souce list info when set link down
+    - igmp, mld: Fix memory leak in igmpv3/mld_del_delrec()
+    - tcp: fix mark propagation with fwmark_reflect enabled
+    - net/mlx5: Don't unlock fte while still using it
+    - tcp: don't annotate mark on control socket from
+      tcp_v6_send_response()
+    - [x86] fpu/xstate: Fix xcomp_bv in XSAVES header
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.12
+    - vfs: fix uninitialized flags in splice_to_pipe()
+    - siano: make it work again with CONFIG_VMAP_STACK
+    - fuse: fix use after free issue in fuse_dev_do_read()
+    - fuse: fix uninitialized flags in pipe_buffer
+    - mmc: core: fix multi-bit bus width without high-speed mode
+    - [powerpc*/*64*] Disable use of radix under a hypervisor
+    - scsi: don't BUG_ON() empty DMA transfers
+    - Fix missing sanity check in /dev/sg
+    - [x86] Input: elan_i2c - add ELAN0605 to the ACPI table
+    - drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
+    - drm/dp/mst: fix kernel oops when turning off secondary monitor
+    - futex: Move futex_init() to core_initcall
+    - [armel,armhf] 8658/1: uaccess: fix zeroing of 64-bit get_user()
+    - Revert "i2c: designware: detect when dynamic tar update is possible"
+    - PCI/PME: Restore pcie_pme_driver.remove
+    - printk: use rcuidle console tracepoint
+    - timekeeping: Use deferred printk() in debug code
+    - bcache: Make gc wakeup sane, remove set_task_state()
+    - videodev2.h: go back to limited range Y'CbCr for SRGB and, ADOBERGB
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13
+    - net/mlx5e: Disable preemption when doing TC statistics upcall
+    - net/llc: avoid BUG_ON() in skb_orphan() (CVE-2017-6345)
+    - net: ethernet: ti: cpsw: fix cpsw assignment in resume
+      (regression in 4.9)
+    - packet: fix races in fanout_add() (CVE-2017-6346)
+    - packet: Do not call fanout_release from atomic contexts
+      (regression in 4.9)
+    - net: neigh: Fix netevent NETEVENT_DELAY_PROBE_TIME_UPDATE notification
+    - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (CVE-2017-6074)
+    - vxlan: fix oops in dev_fill_metadata_dst (regression in 4.6)
+    - irda: Fix lockdep annotations in hashbin_delete(). (CVE-2017-6348)
+    - ptr_ring: fix race conditions when resizing
+    - ip: fix IP_CHECKSUM handling (regression in 4.0) (CVE-2017-6347)
+    - net: socket: fix recvmmsg not returning error from sock_error
+      (regression in 4.6)
+    - USB: serial: mos7840: fix another NULL-deref at open
+    - USB: serial: ftdi_sio: fix modem-status error handling
+    - USB: serial: ftdi_sio: fix extreme low-latency setting
+    - USB: serial: ftdi_sio: fix line-status over-reporting
+    - USB: serial: spcp8x5: fix modem-status handling
+    - USB: serial: opticon: fix CTS retrieval at open
+    - USB: serial: ark3116: fix register-accessor error handling
+    - netfilter: nf_ct_helper: warn when not applying default helper assignment
+    - block: fix double-free in the failure path of cgwb_bdi_init()
+    - rtlwifi: rtl_usb: Fix for URB leaking when doing ifconfig up/down
+    - xfs: clear delalloc and cache on buffered write failure
+
+  [ Ben Hutchings ]
+  * [armel] dts: kirkwood: Fix SATA pinmux-ing for TS419 (Closes: #855017)
+  * [armhf] Enable DRM_OMAP_PANEL_TPO_TD028TTEC1, PWM_OMAP_DMTIMER as modules
+    (Closes: #855472)
+  * net: Ignore ABI changes to can_rx_register(), ip6_xmit()
+  * net: Avoid ABI change for min_header_len
+  * udeb: Add more USB host and dual-role drivers to usb-modules
+    (Closes: #856111)
+  * [x86] kvm: fix page struct leak in handle_vmon (CVE-2017-2596)
+  * ipc/shm: Fix shmat mmap nil-page protection (CVE-2017-5669)
+  * time: Disable TIMER_STATS (CVE-2017-5967)
+  * sctp: deny peeloff operation on asocs with threads sleeping on it
+    (CVE-2017-6353)
+  * [rt] Update to 4.9.13-rt10:
+    - sched/rt: Add a missing rescheduling point
+    - lockdep: Handle statically initialized PER_CPU locks proper
+    - Change export of rt_mutex_destroy() back to GPL-only
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 27 Feb 2017 15:58:07 +0000
+
+linux (4.9.10-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7
+    - drm: Schedule the output_poll_work with 1s delay if we have delayed event
+    - drm: Fix broken VT switch with video=1366x768 option
+    - [x86] drm/i915: Ignore bogus plane coordinates on SKL when the plane is
+      not visible
+    - [armhf,arm64] drm/vc4: Fix memory leak of the CRTC state.
+    - [armhf,arm64] drm/vc4: fix a bounds check
+    - Revert "drm/radeon: always apply pci shutdown callbacks"
+    - drm/atomic: clear out fence when duplicating state
+    - mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp
+    - mm/mempolicy.c: do not put mempolicy before using its nodemask
+    - mm, page_alloc: fix check for NULL preferred_zone
+    - mm, page_alloc: fix fast-path race with cpuset update or removal
+    - mm, page_alloc: move cpuset seqcount checking to slowpath
+    - mm, page_alloc: fix premature OOM when racing with cpuset mems update
+    - userns: Make ucounts lock irq-safe
+    - sysctl: fix proc_doulongvec_ms_jiffies_minmax()
+    - xfs: prevent quotacheck from overloading inode lru
+    - ISDN: eicon: silence misleading array-bounds warning
+    - Btrfs: remove old tree_root case in btrfs_read_locked_inode()
+    - Btrfs: disable xattr operations on subvolume directories
+    - Btrfs: remove ->{get, set}_acl() from btrfs_dir_ro_inode_operations
+    - RDMA/cma: Fix unknown symbol when CONFIG_IPV6 is not enabled
+    - [s390x] mm: Fix cmma unused transfer from pgste into pte
+    - [s390x] ptrace: Preserve previous registers for short regset write
+    - IB/cxgb3: fix misspelling in header guard
+    - IB/iser: Fix sg_tablesize calculation
+    - IB/srp: fix mr allocation when the device supports sg gaps
+    - IB/srp: fix invalid indirect_sg_entries parameter value
+    - can: c_can_pci: fix null-pointer-deref in c_can_start() - set device
+      pointer
+    - can: ti_hecc: add missing prepare and unprepare of the clock
+    - [hppa] Don't use BITS_PER_LONG in userspace-exported swab.h header
+    - nfs: Don't increment lock sequence ID after NFS4ERR_MOVED
+    - NFSv4.1: Fix a deadlock in layoutget
+    - NFSv4.0: always send mode in SETATTR after EXCLUSIVE4
+    - SUNRPC: cleanup ida information when removing sunrpc module
+    - iw_cxgb4: free EQ queue memory on last deref
+    - pctv452e: move buffer to heap, no mutex
+    - v4l: tvp5150: Reset device at probe time, not in get/set format handlers
+    - v4l: tvp5150: Fix comment regarding output pin muxing
+    - v4l: tvp5150: Don't override output pinmuxing at stream on/off time
+    - [x86] drm/i915: Clear ret before unbinding in i915_gem_evict_something()
+    - [x86] drm/i915: prevent crash with .disable_display parameter
+    - [x86] drm/i915: Don't leak edid in intel_crt_detect_ddc()
+    - [x86] drm/i915: Don't init hpd polling for vlv and chv from
+      runtime_suspend()
+    - [x86] drm/i915: Fix calculation of rotated x and y offsets for planar
+      formats
+    - [x86] drm/i915: Check for NULL atomic state in
+      intel_crtc_disable_noatomic()
+    - IB/umem: Release pid in error and ODP flow
+    - [x86] pinctrl: baytrail: Rectify debounce support
+    - memory_hotplug: make zone_can_shift() return a boolean value
+    - virtio_mmio: Set DMA masks appropriately
+    - mm, memcg: do not retry precharge charges
+    - perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race
+      (CVE-2017-6001)
+    - [x86] drm/i915: Remove WaDisableLSQCROPERFforOCL KBL workaround.
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.8
+    - r8152: fix the sw rx checksum is unavailable
+    - [x86] netvsc: add rcu_read locking to netvsc callback
+    - net: lwtunnel: Handle lwtunnel_fill_encap failure
+    - net: ipv4: fix table id in getroute response
+    - tcp: fix tcp_fastopen unaligned access complaints on sparc
+    - openvswitch: maintain correct checksum state in conntrack actions
+    - mlx4: do not call napi_schedule() without care
+    - ip6_tunnel: Account for tunnel header in tunnel MTU
+    - ax25: Fix segfault after sock connection timeout
+    - net sched actions: fix refcnt when GETing of action after bind
+    - virtio: don't set VIRTIO_NET_HDR_F_DATA_VALID on xmit
+    - virtio-net: restore VIRTIO_HDR_F_DATA_VALID on receiving
+    - vxlan: fix byte order of vxlan-gpe port number
+    - net: fix harmonize_features() vs NETIF_F_HIGHDMA
+    - lwtunnel: fix autoload of lwt modules
+    - ipv6: addrconf: Avoid addrconf_disable_change() using RCU read-side lock
+    - tcp: initialize max window for a new fastopen socket
+    - net/mlx5e: Do not recycle pages from emergency reserve
+    - bridge: netlink: call br_changelink() during br_dev_newlink()
+    - net: mpls: Fix multipath selection for LSR use case
+    - r8152: don't execute runtime suspend if the tx is not empty
+    - af_unix: move unix_mknod() out of bindlock
+    - net: Specify the owning module for lwtunnel ops
+    - lwtunnel: Fix oops on state free after encap module unload
+    - [armhf] net: dsa: Bring back device detaching in dsa_slave_suspend()
+    - xfs: bump up reserved blocks in xfs_alloc_set_aside
+    - xfs: fix bogus minleft manipulations
+    - xfs: adjust allocation length in xfs_alloc_space_available
+    - xfs: don't rely on ->total in xfs_alloc_space_available
+    - xfs: don't print warnings when xfs_log_force fails
+    - xfs: make the ASSERT() condition likely
+    - xfs: sanity check directory inode di_size
+    - xfs: add missing include dependencies to xfs_dir2.h
+    - xfs: replace xfs_mode_to_ftype table with switch statement
+    - xfs: sanity check inode mode when creating new dentry
+    - xfs: sanity check inode di_mode
+    - xfs: don't wrap ID in xfs_dq_get_next_id
+    - xfs: fix xfs_mode_to_ftype() prototype
+    - xfs: fix COW writeback race
+    - xfs: verify dirblocklog correctly
+    - xfs: remove racy hasattr check from attr ops
+    - xfs: extsize hints are not unlikely in xfs_bmap_btalloc
+    - xfs: clear _XBF_PAGES from buffers when readahead page
+    - xfs: fix bmv_count confusion w/ shared extents
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9
+    - PCI/ASPM: Handle PCI-to-PCIe bridges as roots of PCIe hierarchies
+    - ext4: validate s_first_meta_bg at mount time (CVE-2016-10208)
+    - [x86] efi: Always map the first physical page into the EFI pagetables
+    - [arm64] efi/fdt: Avoid FDT manipulation after ExitBootServices()
+      (Closes: #853170)
+    - HID: cp2112: fix sleep-while-atomic
+    - HID: cp2112: fix gpio-callback error handling
+    - [x86] pinctrl: baytrail: Add missing spinlock usage in
+      byt_gpio_irq_handler
+    - [x86] drm/amdgpu/si: fix crash on headless asics
+    - drm/nouveau/disp/gt215: Fix HDA ELD handling (thus, HDMI audio) on gt215
+    - drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval
+    - crypto: api - Clear CRYPTO_ALG_DEAD bit before registering an alg
+    - crypto: arm64/aes-blk - honour iv_out requirement in CBC and CTR modes
+    - perf/core: Fix use-after-free bug
+    - perf/core: Fix PERF_RECORD_MMAP2 prot/flags for anonymous memory
+    - ata: sata_mv:- Handle return value of devm_ioremap.
+    - libata: apply MAX_SEC_1024 to all CX1-JB*-HP devices
+    - libata: Fix ATA request sense
+    - [powerpc*] eeh: Fix wrong flag passed to eeh_unfreeze_pe()
+    - [powerpc*] Add missing error check to prom_find_boot_cpu()
+    - [powerpc*] mm: Use the correct pointer when setting a 2MB pte
+    - NFSD: Fix a null reference case in find_or_create_lock_stateid()
+    - svcrpc: fix oops in absence of krb5 module
+    - zswap: disable changing params if init fails
+    - cifs: initialize file_info_lock
+    - mm/memory_hotplug.c: check start_pfn in test_pages_in_a_zone()
+    - base/memory, hotplug: fix a kernel oops in show_valid_zones()
+    - mm, fs: check for fatal signals in do_generic_file_read()
+    - tracing: Fix hwlat kthread migration
+    - can: bcm: fix hrtimer/tasklet termination in bcm op removal
+    - cgroup: don't online subsystems before cgroup_name/path() are operational
+    - mmc: sdhci: Ignore unexpected CARD_INT interrupts
+    - vhost: fix initialization for vq->is_le
+    - [armhf] regulator: axp20x: AXP806: Fix dcdcb being set instead of dcdce
+    - percpu-refcount: fix reference leak during percpu-atomic transition
+    - [x86] pinctrl: baytrail: Debounce register is one per community
+    - [x86] pinctrl: intel: merrifield: Add missed check in mrfld_config_set()
+    - iwlwifi: fix double hyphen in MODULE_FIRMWARE for 8000
+    - iwlwifi: mvm: avoid crash on restart w/o reserved queues
+    - HID: usbhid: Quirk a AMI virtual mouse and keyboard with ALWAYS_POLL
+    - HID: hid-lg: Fix immediate disconnection of Logitech Rumblepad 2
+    - HID: wacom: Fix poor prox handling in 'wacom_pl_irq'
+    - [x86] perf/intel/uncore: Clean up hotplug conversion fallout
+    - [armhf] dmaengine: cppi41: Fix runtime PM timeouts with USB mass storage
+    - [armhf] dmaengine: cppi41: Fix oops in cppi41_runtime_resume
+    - [x86] KVM: do not save guest-unsupported XSAVE state
+    - USB: Add quirk for WORLDE easykey.25 MIDI keyboard
+    - usb: musb: Fix host mode error -71 regression
+    - usb: gadget: f_fs: Assorted buffer overflow checks.
+    - irqdomain: Avoid activating interrupts more than once
+    - [x86] irq: Make irq activate operations symmetric
+    - iw_cxgb4: set correct FetchBurstMax for QPs
+    - fs: break out of iomap_file_buffered_write on fatal signals
+    - [x86] drm/i915/execlists: Reset RING registers upon resume
+      (Closes: #855055)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.10
+    - [x86] cpufreq: intel_pstate: Disable energy efficiency optimization
+    - acpi, nfit: fix acpi_nfit_flush_probe() crash
+    - [x86] libnvdimm, namespace: do not delete namespace-id 0
+    - [x86] libnvdimm, pfn: fix memmap reservation size versus 4K alignment
+    - dm rq: cope with DM device destruction while in dm_old_request_fn()
+    - crypto: algif_aead - Fix kernel panic on list_del
+    - [x86] crypto: qat - fix bar discovery for c62x
+    - [x86] crypto: qat - zero esram only for DH85x devices
+    - [x86] crypto: ccp - Fix DMA operations when IOMMU is enabled
+    - [x86] crypto: ccp - Fix double add when creating new DMA command
+    - Input: uinput - fix crash when mixing old and new init style
+    - selinux: fix off-by-one in setprocattr (CVE-2017-2618)
+    - [x86] Revert "x86/ioapic: Restore IO-APIC irq_chip retrigger callback"
+    - rtlwifi: rtl8192ce: Fix loading of incorrect firmware (Closes: #853073)
+    - cpumask: use nr_cpumask_bits for parsing functions (Closes: #848682)
+    - [armel,armhf] 8643/3: arm/ptrace: Preserve previous registers for short
+      regset write
+    - [x86] drm/i915: fix use-after-free in page_flip_completed()
+    - [x86] drm/i915/bxt: Add MST support when do DPLL calculation
+    - drm/atomic: Fix double free in drm_atomic_state_default_clear
+    - target: Don't BUG_ON during NodeACL dynamic -> explicit conversion
+    - target: Use correct SCSI status during EXTENDED_COPY exception
+    - target: Fix early transport_generic_handle_tmr abort scenario
+    - target: Fix multi-session dynamic se_node_acl double free OOPs
+    - target: Fix COMPARE_AND_WRITE ref leak for non GOOD status
+    - [armhf] dts: imx6dl: fix GPIO4 range
+    - [armhf] 8642/1: LPAE: catch pending imprecise abort on unmask
+    - [x86] drm/i915: Always convert incoming exec offsets to non-canonical
+    - nl80211: Fix mesh HT operation check
+    - mac80211: Fix adding of mesh vendor IEs
+    - net/mlx5e: Modify TIRs hash only when it's needed
+    - [x86] Drivers: hv: vmbus: Base host signaling strictly on the ring state
+    - [x86] Drivers: hv: vmbus: On write cleanup the logic to interrupt the host
+    - [x86] Drivers: hv: vmbus: On the read path cleanup the logic to interrupt
+      the host
+    - [x86] Drivers: hv: vmbus: finally fix hv_need_to_signal_on_read()
+    - [s390x] scsi: zfcp: fix use-after-free by not tracing WKA port open/close
+      on failed send
+    - scsi: aacraid: Fix INTx/MSI-x issue with older controllers
+    - scsi: mpt3sas: disable ASPM for MPI2 controllers
+    - scsi: qla2xxx: Avoid that issuing a LIP triggers a kernel crash
+    - btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls
+    - [powerpc*] mm/radix: Update ERAT flushes when invalidating TLB
+    - [powerpc*] powernv: Fix CPU hotplug to handle waking on HVI
+    - xen-netfront: Delete rx_refill_timer in xennet_disconnect_backend()
+    - ALSA: hda - adding a new NV HDMI/DP codec ID in the driver
+    - ALSA: seq: Fix race at creating a queue
+    - ALSA: seq: Don't handle loop timeout at snd_seq_pool_done()
+    - Revert "ALSA: line6: Only determine control port properties if needed"
+    - [x86] mm/ptdump: Fix soft lockup in page table walker
+    - [x86] CPU/AMD: Bring back Compute Unit ID
+    - [x86] CPU/AMD: Fix Zen SMT topology
+    - IB/rxe: Fix resid update
+    - IB/rxe: Fix mem_check_range integer overflow (CVE-2016-8636)
+    - stacktrace, lockdep: Fix address, newline ugliness
+    - perf diff: Fix -o/--order option behavior (again)
+    - perf diff: Fix segfault on 'perf diff -o N' option
+    - perf/core: Fix crash in perf_event_read()
+
+  [ Ben Hutchings ]
+  * Bump ABI to 2
+  * [or1k] Remove configuration, as the port has been abandoned
+  * [arm64] Enable KEXEC (Closes: #852747)
+  * [arm64,armhf,x86] usb: gadget: Enable USB_CONFIGFS, USB_ETH, USB_GADGETFS,
+    USB_FUNCTIONFS, USB_G_SERIAL as modules;
+    USB_CONFIGFS_{SERIAL,ACM,OBEX,NCM,ECM,ECM_SUBSET,RNDIS,EEM,PHONET,MASS_STORAGE},
+    USB_CONFIGFS_F_{LB_SS,LS,UAC1,UAC2,MIDI,HID,UVC,PRINTER}, USB_ETH_RNDIS,
+    USB_FUNCTIONFS_{ETH,RNDIS,GENERIC} (thanks to Riku Voipio)
+  * [ppc64el] Disable IBMEBUS; this bus does not exist on POWER8 systems
+  * aufs: Update support patchset to aufs4.9-20170206
+  * [rt] Update to 4.9.9-rt6:
+    - Revert "btrfs: swap free() and trace point in run_ordered_work()"
+    - pinctrl: qcom: Use raw spinlock variants
+    - x86/mm/cpa: avoid wbinvd() for PREEMPT
+    - Revert "radix-tree: Make RT aware"
+    - radix-tree: use local locks
+    - softirq: wake the timer softirq if needed
+    - timers: Don't wake ktimersoftd on every tick
+    - rt: Drop mutex_disable() on !DEBUG configs and the GPL suffix from export
+      symbol
+    - cpuset: Convert callback_lock to raw_spinlock_t
+  * pegasus: Use heap buffers for all register access (Closes: #852556)
+  * test-patches: Use the pkg.linux.notools build profile
+  * test-patches: Set default number of jobs to number of available processors
+  * dccp: Disable auto-loading as mitigation against local exploits
+  * net: ipv6: check route protocol when deleting routes (Closes: #855153)
+  * [arm64] drm: Enable DRM_AST as module (Closes: #820168)
+    - udeb: Add ast to fb-modules
+  * [armel/marvell] hwmon: Enable SENSORS_G762 as module (Closes: #854662)
+  * [m68k] Change MAC8390, MAC_SCSI from built-in to modules (Closes: #826614)
+    - udeb: Add mac8390 to nic-shared-modules
+  * udeb: Add bcache to md-modules (Closes: #718548)
+  * [x86] platform: acer-wmi: setup accelerometer when machine has appropriate
+    notify event (Closes: #853067)
+  * [x86] xen: Fix APIC id mismatch warning on Intel (Closes: #853193)
+  * media: dvb-usb-dibusb-mc-common: Add MODULE_LICENSE (Closes: #853110)
+
+  [ Roger Shimizu ]
+  * [armel] ARM: dts: orion5x-lschl: Fix model name
+  * [armel] ARM: dts: orion5x-lschl: More consistent naming on linkstation
+    series
+  * [armel] ARM: orion5x: fix Makefile for linkstation-lschl.dtb
+
+  [ Salvatore Bonaccorso ]
+  * ipv4: keep skb->dst around in presence of IP options (CVE-2017-5970)
+  * sctp: avoid BUG_ON on sctp_wait_for_sndbuf (CVE-2017-5986)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 17 Feb 2017 13:18:17 +0000
+
+linux (4.9.6-3) unstable; urgency=medium
+
+  * btree,musb,st_sensors: Ignore ABI changes (fixes FTBFS on armel,armhf)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 28 Jan 2017 16:11:16 +0000
+
+linux (4.9.6-2) unstable; urgency=medium
+
+  * linux-cpupower: Use dh-exec architecture filtering for x86-specific files
+    (fixes FTBFS on !x86)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 27 Jan 2017 22:09:50 +0000
+
+linux (4.9.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.3
+    - iio: common: st_sensors: fix channel data parsing
+    - [mips] staging: octeon: Call SET_NETDEV_DEV()
+    - ALSA: hda - Fix up GPIO for ASUS ROG Ranger
+    - ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
+    - ALSA: usb-audio: Fix irq/process data synchronization
+    - fscrypt: fix renaming and linking special files
+    - [hppa/parisc] Add line-break when printing segfault info
+    - [hppa/parisc] Mark cr16 clocksource unstable on SMP systems
+    - HID: sensor-hub: Move the memset to sensor_hub_get_feature()
+    - mac80211: initialize fast-xmit 'info' later
+    - asm-prototypes: Clear any CPP defines before declaring the functions
+    - [x86] drm/i915: Fix oopses in the overlay code due to i915_gem_active
+      stuff
+    - [x86] drm/i915: Fix oops in overlay due to frontbuffer tracking
+    - [x86] drm/i915: Force VDD off on the new power seqeuencer before
+      starting to use it
+    - [x86] drm/i915: Initialize overlay->last_flip properly
+    - [x86] KVM: reset MMU on KVM_SET_VCPU_EVENTS
+    - [armhf] usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
+    - [armhf] usb: musb: dsps: implement clear_ep_rxintr() callback
+    - usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
+    - usb: gadgetfs: restrict upper bound on device configuration size
+    - USB: gadgetfs: fix unbounded memory allocation bug
+    - USB: gadgetfs: fix use-after-free bug
+    - USB: gadgetfs: fix checks of wTotalLength in config descriptors
+    - USB: fix problems with duplicate endpoint addresses
+    - usb: gadget: composite: Test get_alt() presence instead of set_alt()
+    - [arm64, armhf] usb: dwc3: core: avoid Overflow events
+    - usb: xhci: fix possible wild pointer
+    - [x86] usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
+    - xhci: free xhci virtual devices with leaf nodes first
+    - usb: xhci: fix return value of xhci_setup_device()
+    - usb: host: xhci: Fix possible wild pointer when handling abort command
+    - xhci: Handle command completion and timeout race
+    - usb: xhci: hold lock over xhci_abort_cmd_ring()
+    - USB: serial: omninet: fix NULL-derefs at open and disconnect
+    - USB: serial: quatech2: fix sleep-while-atomic in close
+    - USB: serial: pl2303: fix NULL-deref at open
+    - USB: serial: keyspan_pda: verify endpoints at probe
+    - USB: serial: spcp8x5: fix NULL-deref at open
+    - USB: serial: io_ti: fix NULL-deref at open
+    - USB: serial: io_ti: fix another NULL-deref at open
+    - USB: serial: io_ti: fix I/O after disconnect
+    - USB: serial: iuu_phoenix: fix NULL-deref at open
+    - USB: serial: garmin_gps: fix memory leak on failed URB submit
+    - USB: serial: ti_usb_3410_5052: fix NULL-deref at open
+    - USB: serial: io_edgeport: fix NULL-deref at open
+    - USB: serial: oti6858: fix NULL-deref at open
+    - USB: serial: cyberjack: fix NULL-deref at open
+    - USB: serial: kobil_sct: fix NULL-deref in write
+    - USB: serial: mos7840: fix NULL-deref at open
+    - USB: serial: mos7720: fix NULL-deref at open
+    - USB: serial: mos7720: fix use-after-free on probe errors
+    - USB: serial: mos7720: fix parport use-after-free on probe errors
+    - USB: serial: mos7720: fix parallel probe
+    - usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
+    - xhci: Use delayed_work instead of timer for command timeout
+    - xhci: Fix race related to abort operation
+    - [armhf] usb: musb: Fix trying to free already-free IRQ 4
+    - usb: hub: Move hub_port_disable() to fix warning if PM is disabled
+    - usb: gadget: udc: core: fix return code of usb_gadget_probe_driver()
+    - ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
+    - USB: serial: kl5kusb105: abort on open exception path
+    - usb: gadget: Fix second argument of percpu_ida_alloc()
+    - usb: gadget: fix request length error for isoc transfer
+    - [armhf] dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host
+      support
+    - dibusb: fix possible memory leak in dibusb_rc_query()
+    - USB: serial: io_ti: bind to interface after fw download
+    - [x86] mei: move write cb to completion on credentials failures
+    - iio: accel: st_accel: fix LIS3LV02 reading and scaling
+    - [arm64, armhf] usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
+    - [arm64, armhf] usb: dwc3: ep0: explicitly call
+      dwc3_ep0_prepare_one_trb()
+    - [arm64, armhf] usb: dwc3: gadget: always unmap EP0 requests
+    - [x86] drm/i915/dp: add lane_count check in intel_dp_check_link_status
+    - [x86] drm/i915: tune down the fast link training vs boot fail
+    - mac80211: fix tid_agg_rx NULL dereference
+    - nl80211: Use different attrs for BSSID and random MAC addr in scan req
+    - ath10k: fix failure to send NULL func frame for 10.4
+    - ath10k: use the right length of "background"
+    - efi/efivar_ssdt_load: Don't return success on allocation failure
+    - debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS
+    - [x86] prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE
+    - [x86] cpu: Probe CPUID leaf 6 even when cpuid_level == 6
+    - [x86] platform/x86: fujitsu-laptop: use brightness_set_blocking for
+      LED-setting callbacks
+    - hwmon: (amc6821) sign extension temperature
+    - hwmon: (ds620) Fix overflows seen when writing temperature limits
+    - [armhf] hwmon: (g762) Fix overflows and crash seen when writing limit
+      attributes
+    - hwmon: (lm90) fix temp1_max_alarm attribute
+    - Input: synaptics-rmi4 - unlock on error
+    - [armhf] clk: ti: dra7: fix "failed to lookup clock node
+      gmac_gmii_ref_clk_div" boot message
+    - [amd64] iommu/amd: Missing error code in amd_iommu_init_device()
+    - [amd64] iommu/amd: Fix the left value check of cmd buffer
+    - [x86] iommu/vt-d: Fix pasid table size encoding
+    - [x86] iommu/vt-d: Flush old iommu caches for kdump when the device gets
+      context mapped
+    - [x86] ASoC: cht_bsw_rt5645: Fix leftover kmalloc
+    - [x86] ASoC: Intel: Skylake: Fix a shift wrapping bug
+    - scsi: mvsas: fix command_active typo
+    - target/iscsi: Fix double free in lio_target_tiqn_addtpg()
+    - sbp-target: Fix second argument of percpu_ida_alloc()
+    - relay: check array offset before using it
+    - PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity()
+    - PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
+    - genirq/affinity: Fix node generation from cpumask
+    - mm/hugetlb.c: use the right pte val for compare in hugetlb_cow
+    - docs-rst: fix LaTeX \DURole renewcommand with Sphinx 1.3+
+    - mm: khugepaged: close use-after-free race during shmem collapsing
+    - mm: khugepaged: fix radix tree node leak in shmem collapse error path
+    - mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
+    - [s390x] crypto: unlock on error in prng_tdes_read()
+    - [arm64] crypto: sha2-ce - fix for big endian
+    - [arm64] crypto: ghash-ce - fix for big endian
+    - [arm64] crypto: aes-ccm-ce: fix for big endian
+    - [arm64] crypto: sha1-ce - fix for big endian
+    - [arm64] crypto: aes-xts-ce: fix for big endian
+    - [arm64] crypto: aes-ce - fix for big endian
+    - md: MD_RECOVERY_NEEDED is set for mddev->recovery
+    - md: fix refcount problem on mddev when stopping array.
+    - f2fs: remove percpu_count due to performance regression
+    - f2fs: hide a maybe-uninitialized warning
+    - PCI: Add Mellanox device IDs
+    - PCI: Convert broken INTx masking quirks from HEADER to FINAL
+    - PCI: Convert Mellanox broken INTx quirks to be for listed devices only
+    - PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
+    - PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3)
+    - [powerpc/powerpc64,ppc64*] pci/rpadlpar: Fix device reference leaks
+    - [s390x] topology: always use s390 specific sched_domain_topology_level
+    - [s390x] pci: fix dma address calculation in map_sg
+    - drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
+    - [x86] drm/i915: disable PSR by default on HSW/BDW
+    - [x86] drm/i915/gen9: unconditionally apply the memory bandwidth WA
+    - [x86] drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
+    - xfs: don't call xfs_sb_quota_from_disk twice
+    - xfs: check return value of _trans_reserve_quota_nblks
+    - xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan
+    - xfs: don't BUG() on mixed direct and mapped I/O
+    - xfs: provide helper for counting extents from if_bytes
+    - xfs: check minimum block size for CRC filesystems
+    - xfs: fix unbalanced inode reclaim flush locking
+    - xfs: new inode extent list lookup helpers
+    - xfs: factor rmap btree size into the indlen calculations
+    - xfs: always succeed when deduping zero bytes
+    - xfs: remove prev argument to xfs_bmapi_reserve_delalloc
+    - xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
+    - xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow
+    - xfs: clean up cow fork reservation and tag inodes correctly
+    - xfs: use new extent lookup helpers xfs_file_iomap_begin_delay
+    - xfs: pass post-eof speculative prealloc blocks to bmapi
+    - xfs: Move AGI buffer type setting to xfs_read_agi
+    - xfs: pass state not whichfork to trace_xfs_extlist
+    - xfs: handle cow fork in xfs_bmap_trace_exlist
+    - xfs: forbid AG btrees with level == 0
+    - xfs: check for bogus values in btree block headers
+    - xfs: complain if we don't get nextents bmap records
+    - xfs: don't crash if reading a directory results in an unexpected hole
+    - xfs: error out if trying to add attrs and anextents > 0
+    - xfs: don't allow di_size with high bit set
+    - xfs: don't cap maximum dedupe request length
+    - xfs: ignore leaf attr ichdr.count in verifier during log replay
+    - xfs: use GPF_NOFS when allocating btree cursors
+    - xfs: fix double-cleanup when CUI recovery fails
+    - xfs: use the actual AG length when reserving blocks
+    - xfs: fix crash and data corruption due to removal of busy COW extents
+    - xfs: fix max_retries _show and _store functions
+    - clocksource/dummy_timer: Move hotplug callback after the real timers
+    - tick/broadcast: Prevent NULL pointer dereference
+    - Revert "rtlwifi: Fix enter/exit power_save"
+    - Revert "usb: gadget: composite: always set ep->mult to a sensible value"
+    - usb: gadget: composite: always set ep->mult to a sensible value
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.4
+    - net: vrf: Fix NAT within a VRF
+    - net: vrf: Drop conntrack data after pass through VRF device on Tx
+    - sctp: sctp_transport_lookup_process should rcu_read_unlock when transport
+      is null
+    - inet: fix IP(V6)_RECVORIGDSTADDR for udp sockets
+    - ipv6: handle -EFAULT from skb_copy_bits
+    - net, sched: fix soft lockup in tc_classify
+    - [arm64, armhf] net: stmmac: Fix race between stmmac_drv_probe and
+      stmmac_open
+    - net/sched: cls_flower: Fix missing addr_type in classify
+    - net/mlx5: Check FW limitations on log_max_qp before setting it
+    - net/mlx5: Cancel recovery work in remove flow
+    - net/mlx5: Avoid shadowing numa_node
+    - net/mlx5: Mask destination mac value in ethtool steering rules
+    - net/mlx5: Prevent setting multicast macs for VFs
+    - net/mlx5e: Don't sync netdev state when not registered
+    - net/mlx5e: Disable netdev after close
+    - rtnl: stats - add missing netlink message size checks
+    - net: fix incorrect original ingress device index in PKTINFO
+    - net: ipv4: dst for local input routes should use l3mdev if relevant
+    - drop_monitor: add missing call to genlmsg_end
+    - drop_monitor: consider inserted data in genlmsg_end
+    - flow_dissector: Update pptp handling to avoid null pointer deref.
+    - igmp: Make igmp group member RFC 3376 compliant
+    - ipv4: Do not allow MAIN to be alias for new LOCAL w/ custom rules
+    - net: vrf: Add missing Rx counters
+    - [x86] bpf: change back to orig prog on too many passes
+    - [armhf] net: dsa: bcm_sf2: Do not clobber b53_switch_ops
+    - [armhf] net: dsa: bcm_sf2: Utilize nested MDIO read/write
+    - r8152: split rtl8152_suspend function
+    - r8152: fix rx issue for runtime suspend
+    - [armhf] net: dsa: Ensure validity of dst->ds[0]
+    - net: add the AF_QIPCRTR entries to family name tables
+    - gro: Enter slow-path if there is no tailroom
+    - gro: use min_t() in skb_gro_reset_offset()
+    - gro: Disable frag0 optimization on IPv6 ext headers
+    - net/mlx5e: Remove WARN_ONCE from adaptive moderation code
+    - net: ipv4: Fix multipath selection with vrf
+    - net: vrf: do not allow table id 0
+    - HID: hid-cypress: validate length of report
+    - ALSA: firewire-tascam: Fix to handle error from initialization of stream
+      data
+    - [powerpc] Fix build warning on 32-bit PPC
+    - [arm64] dts: mt8173: Fix auxadc node
+    - [arm64] dts: bcm2837-rpi-3-b: remove incorrect pwr LED
+    - [arm64] dts: bcm2835: Fix bcm2837 compatible string
+    - svcrdma: Clear xpt_bc_xps in xprt_setup_rdma_bc() error exit arm
+    - [armhf] OMAP5: Fix mpuss_early_init
+    - [armhf] OMAP5: Fix build for PM code
+    - [armhf] OMAP4+: Fix bad fallthrough for cpuidle
+    - [armhf] omap2+: am437x: rollback to use omap3_gptimer_timer_init()
+    - [armel/marvell, armhf] spi: mvebu: fix baudrate calculation for armada
+      variant
+    - ALSA: usb-audio: Add a quirk for Plantronics BT600
+    - [x86] drm/i915/gen9: Fix PCODE polling during CDCLK change notification
+    - rtlwifi: Fix enter/exit power_save
+    - rtlwifi: rtl_usb: Fix missing entry in USB driver's private data
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5
+    - Input: xpad - use correct product id for x360w controllers
+    - Input: i8042 - add Pegatron touchpad to noloop table
+    - [armhf] regulator: axp20x: Fix axp809 ldo_io registration error on cold
+      boot
+    - [arm64, armhf] drm/tegra: dpaux: Fix error handling
+    - [arm64, armhf] drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
+    - drm/savage: dereferencing an error pointer
+    - zram: revalidate disk under init_lock
+    - zram: support BDI_CAP_STABLE_WRITES
+    - dax: fix deadlock with DAX 4k holes
+    - mm: pmd dirty emulation in page fault handler
+    - mm: fix devm_memremap_pages crash, use mem_hotplug_{begin, done}
+    - ocfs2: fix crash caused by stale lvb with fsdlm plugin
+    - mm, memcg: fix the active list aging for lowmem requests when memcg is
+      enabled
+    - mm: support anonymous stable page
+    - mm/slab.c: fix SLAB freelist randomization duplicate entries
+      (CVE-2017-5546)
+    - mm/hugetlb.c: fix reservation race when freeing surplus pages
+    - [x86] KVM: fix emulation of "MOV SS, null selector" (CVE-2017-2583)
+    - KVM: eventfd: fix NULL deref irqbypass consumer
+    - jump_labels: API for flushing deferred jump label updates
+    - [x86] KVM: flush pending lapic jump label updates on module unload
+    - [x86] KVM: fix NULL deref in vcpu_scan_ioapic
+    - [x86] KVM: add Align16 instruction flag
+    - [x86] KVM: add asm_safe wrapper
+    - [x86] KVM: emulate FXSAVE and FXRSTOR
+    - [x86] KVM: Introduce segmented_write_std (CVE-2017-2584)
+    - efi/libstub/arm*: Pass latest memory map to the kernel
+    - [x86] efi: Prune invalid memory map entries and fix boot regression
+    - [x86] efi: Don't allocate memmap through memblock after mm_init()
+      (Closes: #851928)
+    - nl80211: fix sched scan netlink socket owner destruction
+    - gpio: Move freeing of GPIO hogs before numbing of the device
+    - xfs: Timely free truncated dirty pages
+    - bridge: netfilter: Fix dropping packets that moving through bridge
+      interface
+    - [x86] cpu/AMD: Clean up cpu_llc_id assignment per topology feature
+    - [x86] bugs: Separate AMD E400 erratum and C1E bug
+    - [x86] CPU/AMD: Fix Bulldozer topology
+    - wusbcore: Fix one more crypto-on-the-stack bug
+    - [armhf] usb: musb: fix runtime PM in debugfs
+    - USB: serial: kl5kusb105: fix line-state error handling (CVE-2017-5549)
+    - USB: serial: ch341: fix initial modem-control state
+    - USB: serial: ch341: fix resume after reset
+    - USB: serial: ch341: fix open error handling
+    - USB: serial: ch341: fix control-message error handling
+    - USB: serial: ch341: fix open and resume after B0
+    - i2c: print correct device invalid address
+    - i2c: fix kernel memory disclosure in dev interface
+    - fix a fencepost error in pipe_advance() (CVE-2017-5550)
+    - xhci: fix deadlock at host remove by running watchdog correctly
+    - btrfs: fix crash when tracepoint arguments are freed by wq callbacks
+    - ASoC: hdmi-codec: use unsigned type to structure members with bit-field
+    - Revert "tty: serial: 8250: add CON_CONSDEV to flags"
+    - pid: fix lockdep deadlock warning due to ucount_lock
+    - mnt: Protect the mountpoint hashtable with mount_lock
+    - drivers: char: mem: Fix thinkos in kmem address checks
+    - [armhf] dmaengine: omap-dma: Fix dynamic lch_map allocation
+    - virtio_blk: avoid DMA to stack for the sense buffer
+    - orinoco: Use shash instead of ahash for MIC calculations
+    - sysrq: attach sysrq handler correctly for 32-bit kernel
+    - [arm64, armhf] extcon: return error code on failure
+    - Clearing FIFOs in RS485 emulation mode causes subsequent transmits to
+      break
+    - sysctl: Drop reference added by grab_header in proc_sys_readdir
+      (CVE-2016-9191)
+    - [s390x] net/af_iucv: don't use paged skbs for TX on HiperSockets
+    - [x86] drm/i915/gen9: Fix PCODE polling timeout in stable backport
+    - drm: Clean up planes in atomic commit helper failure path
+    - drm/radeon: update smc firmware selection for SI
+    - drm/radeon: drop verde dpm quirks
+    - [x86] drm/amdgpu: update si kicker smc firmware
+    - [x86] drm/amdgpu: drop verde dpm quirks
+    - USB: serial: ch341: fix modem-control and B0 handling
+    - net/mlx5: Only cancel recovery work when cleaning up device
+    - i2c: piix4: Avoid race conditions with IMC
+    - [x86] cpu: Fix bootup crashes by sanitizing the argument of the
+      'clearcpuid=' command-line option
+    - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too
+    - btrfs: fix locking when we put back a delayed ref that's too new
+    - btrfs: fix error handling when run_delayed_extent_op fails
+    - NFS: fix typo in parameter description
+    - pNFS: Fix race in pnfs_wait_on_layoutreturn
+    - NFS: Fix a performance regression in readdir
+    - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success.
+    - [armhf] i2c: mux: pca954x: fix i2c mux selection caching
+    - [x86] drm/i915/gen9: Fix PCODE polling during SAGV disabling
+    - drm: avoid uninitialized timestamp use in wait_vblank
+    - [arm64, armhf] drm/panel: simple: Check against num_timings when setting
+      preferred for timing
+    - [x86] drm/i915: Move the min_pixclk[] handling to the end of readout
+    - drm: Initialise drm_mm.head_node.allocated
+    - block: Change extern inline to static inline
+    - block: cfq_cpd_alloc() should use @gfp
+    - [x86] ACPI / APEI: Fix NMI notification handling
+    - [x86] powercap/intel_rapl: fix and tidy up error handling
+    - iw_cxgb4: Fix error return code in c4iw_rdev_open()
+    - [arm64, armhf] power: supply: bq27xxx_battery: Fix register map for
+      BQ27510 and BQ27520
+    - blk-mq: Always schedule hctx->next_cpu
+    - [powerpc] mm: Correct process and partition table max size
+    - [powerpc*] ibmebus: Fix further device reference leaks
+    - [powerpc*] ibmebus: Fix device reference leaks in sysfs interface
+    - [powerpc*] powernv: Don't warn on PE init if unfreeze is unsupported
+    - [arm64] hugetlb: fix the wrong address for several functions
+    - [arm64] hugetlb: remove the wrong pmd check in find_num_contig()
+    - [arm64] hugetlb: fix the wrong return value for
+      huge_ptep_set_access_flags
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6
+    - IB/core: Release allocated memory in cache setup failure
+    - IB/rxe: Increase max number of completions to 32k
+    - IB/rxe: avoid putting a large struct rxe_qp on stack
+    - IB/mlx5: Avoid system crash when enabling many VFs
+    - IB/mlx5: Fix reported max SGE calculation
+    - IB/mlx5: Assign SRQ type earlier
+    - IB/mlx5: Wait for all async command completions to complete
+    - IB/mlx4: Set traffic class in AH
+    - IB/mlx4: Fix out-of-range array index in destroy qp flow
+    - IB/mlx4: Handle well-known-gid in mad_demux processing
+    - IB/mlx4: Fix port query for 56Gb Ethernet links
+    - IB/mlx4: When no DMFS for IPoIB, don't allow NET_IF QPs
+    - IB/mlx4: Check if GRH is available before using it
+    - IB/IPoIB: Remove can't use GFP_NOIO warning
+    - perf trace: Use the syscall raw_syscalls:sys_enter timestamp
+    - perf mem: Fix --all-user/--all-kernel options
+    - perf trace: Check if MAP_32BIT is defined (again)
+    - perf diff: Do not overwrite valid build id
+    - perf callchain: Fixup help/config for no-unwinding
+    - perf scripting: Avoid leaking the scripting_context variable
+    - perf jit: Enable jitdump support without dwarf
+    - [armhf] dts: bcm283x: fix typo in mailbox address
+    - [armhf] dts: imx6q-cm-fx6: fix fec pinctrl
+    - [armhf] dts: omap3: Add DTS for Logic PD SOM-LV 37xx Dev Kit
+    - tmpfs: clear S_ISGID when setting posix ACLs (CVE-2017-5551)
+    - [x86] PCI: Ignore _CRS on Supermicro X8DTH-i/6/iF/6F
+    - rcu: Narrow early boot window of illegal synchronous grace periods
+    - sunrpc: don't call sleeping functions from the notifier block callbacks
+    - svcrpc: don't leak contexts on PROC_DESTROY
+    - libnvdimm, namespace: fix pmem namespace leak, delete when size set to
+      zero
+    - fuse: clear FR_PENDING flag when moving requests out of pending queue
+    - fuse: fix time_to_jiffies nsec sanity check
+    - PCI: Enumerate switches below PCI-to-PCIe bridges
+    - HID: corsair: fix DMA buffers on stack (CVE-2017-5547)
+    - HID: corsair: fix control-transfer error handling
+    - mmc: sdhci-acpi: Only powered up enabled acpi child devices
+    - ieee802154: atusb: do not use the stack for buffers to make them DMA able
+      (CVE-2017-5548)
+    - [s390x] KVM: do not expose random data via facility bitmap
+    - [armhf,arm64] KVM: vgic: Fix deadlock on error handling
+    - [powerpc*] icp-opal: Fix missing KVM case and harden replay
+    - [powerpc*] perf: Fix PM_BRU_CMPL event code for power9
+    - [powerpc*] ptrace: Preserve previous fprs/vsrs on short regset write
+    - [powerpc*] ptrace: Preserve previous TM fprs/vsrs on short regset write
+    - [powerpc*] Ignore reserved field in DCSR and PVR reads and writes
+    - [x86] ioapic: Restore IO-APIC irq_chip retrigger callback
+    - qla2xxx: Fix crash due to null pointer access
+    - mac80211: implement multicast forwarding on fast-RX path
+    - ubifs: Fix journal replay wrt. xattr nodes
+    - [armhf] clocksource/exynos_mct: Clear interrupt when cpu is shut down
+    - svcrdma: avoid duplicate dma unmapping during error recovery
+    - ceph: fix bad endianness handling in parse_reply_info_extra
+    - [armhf] dts: OMAP5 / DRA7: indicate that SATA port 0 is available.
+    - [arm64] avoid returning from bad_mode
+    - [arm64] ptrace: Preserve previous registers for short regset write
+    - [arm64] ptrace: Avoid uninitialised struct padding in fpr_set()
+    - [arm64] ptrace: Reject attempts to set incomplete hardware breakpoint
+      fields
+    - Input: ALPS - fix TrackStick support for SS5 hardware
+    - libceph: ceph_x_encrypt_buflen() takes in_len
+    - libceph: old_key in process_one_ticket() is redundant
+    - libceph: introduce ceph_x_encrypt_offset()
+    - libceph: introduce ceph_crypt() for in-place en/decryption
+      (CVE-2016-10153)
+    - libceph: rename and align ceph_x_authorizer::reply_buf
+    - libceph: tweak calcu_signature() a little
+    - libceph: switch ceph_x_encrypt() to ceph_crypt()
+    - libceph: switch ceph_x_decrypt() to ceph_crypt()
+    - libceph: remove now unused ceph_*{en,de}crypt*() functions
+    - [armhf] dts: Add an empty chosen node to top level DTSI
+    - [armel,armhf] 8613/1: Fix the uaccess crash on PB11MPCore
+    - ceph: fix scheduler warning due to nested blocking
+    - ceph: fix ceph_get_caps() interruption
+    - ceph: fix endianness of getattr mask in ceph_d_revalidate
+    - ceph: fix endianness bug in frag_tree_split_cmp
+    - libceph: make sure ceph_aes_crypt() IV is aligned
+    - xprtrdma: Make FRWR send queue entry accounting more accurate
+    - xprtrdma: Squelch "max send, max recv" messages at connect time
+    - [arm64] mm: avoid name clash in __page_to_voff()
+    - [arm64] Fix swiotlb fallback allocation
+    - swiotlb: Convert swiotlb_force from int to enum
+    - swiotlb: Add swiotlb=noforce debug option
+    - scsi: ses: Fix SAS device detection in enclosure
+    - scsi: mpt3sas: fix hang on ata passthrough commands
+    - [armhf] PM / devfreq: exynos-bus: Fix the wrong return value
+    - PM / devfreq: Fix the bug of devfreq_add_device when governor is NULL
+    - mtd: spi-nor: Off by one in cqspi_setup_flash()
+    - mtd: spi-nor: Fix some error codes in cqspi_setup_flash()
+    - [x86] ite-cir: initialize use_demodulator before using it
+    - [armhf] dmaengine: pl330: Fix runtime PM support for terminated transfers
+    - [armhf] soc: ti: wkup_m3_ipc: Fix error return code in wkup_m3_ipc_probe()
+    - libceph: uninline ceph_crypto_key_destroy()
+    - libceph: stop allocating a new cipher on every crypto request
+
+  [ Ben Hutchings ]
+  * [armel,armhf,s390x,x86] linux-headers: Fix regression of multilib compiler
+    support (Closes: #851481)
+  * nbd: use loff_t for blocksize and nbd_set_size args (Closes: #851533)
+  * ath9k: fix NULL pointer dereference (Closes: #851621)
+  * cfg80211,memcg,power: Avoid ABI changes
+  * bq27xxx_battery,cpuhp,libceph,orinoco,xhci: Ignore ABI changes
+  * linux-image: Increase minimum version of initramfs-tools (Closes: #808038)
+  * [x86] linux-cpupower: Add turbostat and x86_energy_perf_policy commands
+    (Closes: #778249)
+  * [arm64] Enable ARCH_MESON and related drivers (Closes: #852132)
+  * [arm64] dts: meson-gx: Add firmware reserved memory zones
+  * [x86] ASoC: Intel: select DW_DMAC_CORE since it's mandatory
+  * [x86] sound/soc/intel: Enable SND_SOC_INTEL_BDW_RT5677_MACH as module
+    (Closes: #851916)
+  * [arm64] video/fbdev: Change FB from module to built-in
+  * [arm64,armhf] video/fbdev: Enable FB_EFI (Closes: #851778)
+  * fs: Disable LOGFS, as it is unmaintained and will be removed in 4.10
+  * [rt] genpatch.py: Verify tag and tarball signatures
+  * fbdev: color map copying bounds checking (CVE-2016-8405)
+  * [armhf,arm64] drm/vc4: Fix an integer overflow in temporary allocation
+    layout. (CVE-2017-5576)
+  * [armhf,arm64] drm/vc4: Return -EINVAL on the overflow checks failing.
+    (CVE-2017-5577)
+  * [arm64] ptrace: Avoid ABI change in 4.9.6
+  * [arm64] Enable ARM64_ACPI_PARKING_PROTOCOL, ARCH_THUNDER, GPIO_PL061,
+    GPIO_XGENE, ARM_SMMU, ARM_SMMU_V3, PCI_HOST_THUNDER_PEM, and
+    PCI_HOST_THUNDER_ECAM; PINCTRL_AMD as built-in; SATA_AHCI_SEATTLE,
+    HW_RANDOM_XGENE, HW_RANDOM_CAVIUM, CPUFREQ_DT, K3_DMA, GPIO_XGENE_SB,
+    SENSORS_XGENE, I2C_THUNDERX, KEYBOARD_GPIO, TI_ST, THUNDER_NIC_PF,
+    THUNDER_NIC_VF (Closes: #852493), THUNDER_NIC_BGX, THUNDER_NIC_RGX,
+    MDIO_THUNDER, MDIO_XGENE, SPI_THUNDERX, and SND_SOC_APQ8016_SBC as
+    modules (thanks to Riku Voipio)
+
+  [ Roger Shimizu ]
+  * [armel] Add DT support of Buffalo Linkstation Live v3 (LS-CHL)
+  * drivers/input: Enable TOUCHSCREEN_GOODIX as module (Closes: #851821).
+  * [mips/octeon] hwmon: Enable SENSORS_ADM1031 as module (Closes: #851963).
+    Thanks to James Cowgill.
+  * nbd: fix 64-bit division.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 27 Jan 2017 07:44:54 +0000
+
+linux (4.9.2-2) unstable; urgency=medium
+
+  * [sparc64] Export memcpy and memset to modules again (fixes FTBFS)
+  * Revert "Remove debug symbol packages from debian/control to work around dak
+    bug", which caused most binary uploads to be rejected
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 12 Jan 2017 15:52:37 +0000
+
+linux (4.9.2-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.2
+
+  [ Ben Hutchings ]
+  * abiupdate.py: Use current config instead of downloading previous config
+  * abiupdate.py: Update base URLs
+  * abiupdate.py: Add support for incoming.ports.debian.org
+  * Make the pickled config (config.defines.dump) reproducible
+  * Remove debug symbol packages from debian/control to work around dak bug
+  * udeb: Add switch (DSA) drivers to nic-modules (Closes: #845075)
+  * netfilter: Enable NFT_NUMGEN, NFT_QUOTA as modules
+  * net/sched: Enable NET_ACT_TUNNEL_KEY, NET_IFE_SKBTCINDEX as modules
+  * vsock: Enable VSOCKETS, VHOST_VSOCK, VIRTIO_VSOCKETS as modules
+  * hci_uart: Enable BT_HCIUART_MRVL
+  * rxrpc: Enable AF_RXRPC_IPV6
+  * net: Enable NET_DEVLINK, MACSEC as modules
+  * SCSI: Enable SCSI_SMARTPQI as module
+  * target: Enable ISCSI_TARGET_CXGB4 as module
+  * cxgb4: Enable CHELSIO_T4_FCOE
+  * drm: Enable DRM_LEGACY; re-enable DRM_TDFX, DRM_R128, DRM_MGA, DRM_SIS,
+    DRM_VIA, DRM_SAVAGE as modules for some architectures
+  * 8250: Disable SERIAL_8250_LPSS, since it causes DW_DMAC_CORE to be built-in
+  * Partially revert "usb: Kconfig: using select for USB_COMMON dependency",
+    since it causes USB_COMMON to be built-in
+  * Set ABI to 1
+
+  [ John Paul Adrian Glaubitz ]
+  * [sh3] Build a linux-libc-dev package (Closes: #850732)
+
+  [ Martin Michlmayr ]
+  * [arm64] Enable MV_XOR and MV_XOR_V2.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 11 Jan 2017 04:41:33 +0000
+
+linux (4.9.1-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.9
+    - Revert "default exported asm symbols to zero"
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.1
+
+  [ Ben Hutchings ]
+  * Set ABI to trunk
+  * Enable USERFAULTFD (except on armel/marvell)
+  * [x86] PCI: Enable VMD as module
+  * mm: Enable PAGE_POISONING (Closes: #849450), PAGE_POISONING_NO_SANITY
+    (except on armel/marvell)
+  * ieee802154: Enable IEEE802154_FAKELB as module
+  * [armhf] leds,gpio: Enable LEDS_TCA6507 as module (Closes: #847770)
+  * [x86] iio,HID: Enable INTEL_ISH_HID as module
+  * hwmon,watchdog: Enable SENSORS_FTSTEUTATES as module (together with the
+    previous, Closes: #847017)
+  * net: Enable GTP as module (Closes: #846913)
+  * [armhf] gpio: Enable GPIO_MCP23S08 as module (Closes: #845064)
+  * aufs: Update support patchset to aufs4.9-20161219
+  * Use debhelper compatibility level 9
+  * [arm64] Revert "arm64/mm: Limit TASK_SIZE_64 ..." and add breaks on
+    incompatible mozjs
+  * genorig.py: Verify tag signatures (based on work by Yves-Alexis Perez)
+
+  [ Uwe Kleine-König ]
+  * enable `perf data' support; patch by Sebastian Andrzej Siewior
+    (Closes: #846597)
+  * [rt] Update to 4.9-rt1 and reenable
+  * [armhf] Add support for switch hardware on Turris Omnia
+
+  [ Aurelien Jarno ]
+  * [arm64] Enable RTC_DRV_DS1307.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 07 Jan 2017 03:44:26 +0000
+
+linux (4.9~rc8-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * radeon: Update package name in error message for missing firmware
+  * [amd64] Remove xen-linux-system-<version> package
+  * debian/control: Fix build-dependency on flex to work with new versions
+    that have M-A: allowed
+  * Revert "default exported asm symbols to zero"
+  * [arm64] remoteproc: Disable QCOM_WCNSS_PIL (fixes FTBFS)
+  * [sparc64] Don't re-add exports of string functions that are now only
+    defined as macros (fixes FTBFS, after other fixes)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 05 Dec 2016 05:02:30 +0000
+
+linux (4.9~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate:
+    - [armhf,armel] Revert "arm: move exports to definitions" (Closes: #844530)
+
+  [ Martin Michlmayr ]
+  * [arm64] Enable more QCOM options: BT_QCOMSMD, QCOM_EBI2, QCOM_TSENS,
+    QCOM_WCNSS_PIL and EXTCON_QCOM_SPMI_MISC.
+  * [arm64] Enable ARCH_MVEBU and related options.
+
+  [ Ben Hutchings ]
+  * linux-headers-common: Make these packages architecture-independent by
+    including headers for all architectures that we build a kernel for
+  * Fix exported symbol versions:
+    - Revert upstream changes moving exports to assembly sources
+    - [x86] kbuild: enable modversions for symbols exported from assembly
+    - [powerpc] Remove Mac-on-Linux hooks
+    - [powerpc*] Fix missing CRCs, add yet more asm-prototypes.h declarations
+    - Re-enable CONFIG_MODVERSIONS in a slightly weaker form
+    - module: Disable matching missing version CRC
+  * debian/bin/buildcheck.py: Add check for symbols with version CRC of 0
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 03 Dec 2016 01:46:12 +0000
+
+linux (4.9~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Aurelien Jarno ]
+  * Enable MAC802154, IEEE802154_ADF7242, IEEE802154_AT86RF230,
+    IEEE802154_ATUSB, IEEE802154_CC2520 and IEEE802154_MRF24J40.
+  * [arm64] Enable VIRTUALIZATION and KVM.
+
+  [ Ben Hutchings ]
+  * [hppa] Update build-dependencies for 64-bit kernel (fixes FTBFS)
+  * linux-perf: Exclude perf-read-vdso* from shared library dependency
+    check (fixes FTBFS on sparc64)
+  * [x86] kexec: add -fno-PIE
+  * wireless: Enable RTL8XXXU as module, replacement for R8723AU
+  * netfilter: Enable NFT_SET_RBTREE and NFT_SET_HASH as modules,
+    renamed from NFT_RBTREE and NFT_HASH
+  * tcp: Enable TCP_CONG_BBR as module
+  * [armel] Drop versatile flavour, which has been broken since version
+    4.5~rc4-1~exp1
+  * [x86] ethernet: Enable ENA_ETHERNET as module
+  * [x86] efi: Prevent mixed mode boot corruption with CONFIG_VMAP_STACK=y
+  * w1: Disable W1_MASTER_MATROX
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 14 Nov 2016 05:19:31 +0000
+
+linux (4.9~rc3-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [rt] Disable until it is updated for 4.9 or later
+  * kbuild: add -fno-PIE (Closes: #841368)
+  * Compile with gcc-6 on all architectures
+  * debian/control: Fix build-dependency on openssl to work with new
+    versions that have M-A: allowed (Closes: #839145)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 03 Nov 2016 16:51:55 -0600
+
+linux (4.8.15-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [x86] Enable INTEL_VBTN as module (Closes: #848967)
+  * debian/control: Change build-dependency on asciidoc to prefer the new
+    asciidoc-base, so we don't pull in LaTeX unnecessarily
+  * [x86] Enable LEDS_DELL_NETBOOKS and DELL_SMBIOS as modules; re-enable
+    DELL_LAPTOP and DELL_WMI as modules (Closes: #849674)
+  * [powerpc*] boot: Request no dynamic linker for boot wrapper
+    (Closes: #848851, FTBFS on ppc6el)
+  * cpufreq: Enable CPU_FREQ_GOV_SCHEDUTIL as module
+  * [x86] ACPI: Enable DPTF_POWER as module
+  * [x86] perf: Enable PERF_EVENTS_AMD_POWER as module
+  * [x86] perf: Change PERF_EVENTS_INTEL_{CSTATE,RAPL,UNCORE} from built-in
+    to modules
+  * PCI: Enable PCIE_DPC (except for armel/versatile)
+  * [amd64] PCI: Enable PCI_HYPERV as module
+  * inet: Enable INET_DIAG_DESTROY
+  * tcp: Enable TCP_CONG_NV as module
+  * ipv6: Enable IPV6_ILA as module
+  * net/sched: Enable NET_CLS_MATCHALL, NET_ACT_IFE, NET_IFE_SKBMARK,
+    NET_IFE_SKBPRIO as modules
+  * hci_uart: Enable BT_HCIUART_AG6XX
+  * nvme: Enable NVME_RDMA, NVME_TARGET, NVME_TARGET_RDMA as modules
+  * [amd64] mic: Enable VOP_BUS and VOP as modules; re-enable INTEL_MIC_HOST as
+    module
+  * debian/control: Add Salvatore Bonaccorso to Uploaders
+  * [rt] Update to 4.8.15-rt10 (no functional change)
+
+  [ Salvatore Bonaccorso ]
+  * sg_write()/bsg_write() is not fit to be called under KERNEL_DS
+    (CVE-2016-10088)
+  * kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF)
+    (CVE-2016-9588)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 04 Jan 2017 19:39:36 +0000
+
+linux (4.8.15-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.12
+    - [x86] iommu/vt-d: Fix PASID table allocation
+    - [x86] iommu/vt-d: Fix IOMMU lookup for SR-IOV Virtual Functions
+    - [x86] KVM: fix out-of-bounds access in lapic
+    - [x86] KVM: x86: drop error recovery in em_jmp_far and em_ret_far
+      (CVE-2016-9756)
+    - [x86] KVM: fix out-of-bounds accesses of rtc_eoi map (CVE-2016-9777)
+    - [x86] KVM: check for pic and ioapic presence before use
+    - [arm64, armhf] usb: chipidea: move the lock initialization to core file
+    - USB: serial: cp210x: add ID for the Zone DPMX
+    - USB: serial: ftdi_sio: add support for TI CC3200 LaunchPad
+    - scsi: mpt3sas: Fix secure erase premature termination
+    - cfg80211: limit scan results cache size
+    - apparmor: fix change_hat not finding hat after policy replacement
+    - NFSv4.x: hide array-bounds warning
+    - [x86] fpu: Fix invalid FPU ptrace state after execve()
+    - [x86] traps: Ignore high word of regs->cs in early_fixup_exception()
+    - perf/core: Fix address filter parser
+    - perf/x86/intel: Cure bogus unwind from PEBS entries
+    - [x86] thermal/powerclamp: add back module device table
+    - [hppa/parisc] Fix races in parisc_setup_cache_timing()
+    - [hppa/parisc] Switch to generic sched_clock implementation
+    - [hppa/parisc] Fix race in pci-dma.c
+    - [hppa/parisc] Also flush data TLB in flush_icache_page_asm
+    - mpi: Fix NULL ptr dereference in mpi_powm()
+    - X.509: Fix double free in x509_cert_parse()
+    - xc2028: Fix use-after-free bug properly
+    - [powerpc] Set missing wakeup bit in LPCR on POWER9
+    - [powerpc] mm: Fixup kernel read only mapping
+    - [powerpc] boot: Fix the early OPAL console wrappers
+    - can: bcm: fix support for CAN FD frames
+    - mm, oom: stop pre-mature high-order OOM killer invocations
+    - flow_dissect: call init_default_flow_dissectors() earlier
+    - scsi: mpt3sas: Unblock device after controller reset
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.13
+    - libata-scsi: Fixup ata_gen_passthru_sense()
+    - scsi: hpsa: use bus '3' for legacy HBA devices
+    - scsi: libfc: fix seconds_since_last_reset miscalculation
+    - mm, thp: propagation of conditional compilation in khugepaged.c
+    - thp: fix corner case of munlock() of PTE-mapped THPs
+    - zram: fix unbalanced idr management at hot removal
+    - mm: fix false-positive WARN_ON() in truncate/invalidate for hugetlb
+    - ovl: fix d_real() for stacked fs
+    - Input: change KEY_DATA from 0x275 to 0x277
+    - Input: psmouse - disable automatic probing of BYD touchpads
+    - rcu: Fix soft lockup for rcu_nocb_kthread
+    - mm: workingset: fix NULL ptr in count_shadow_nodes
+    - PCI: Export pcie_find_root_port
+    - PCI: Set Read Completion Boundary to 128 iff Root Port supports it
+      (_HPX)
+    - mwifiex: printk() overflow with 32-byte SSIDs
+    - [arm64] KVM: vgic: Don't notify EOI for non-SPIs
+    - [x86] drm/i915: Don't touch NULL sg on i915_gem_object_get_pages_gtt()
+      error
+    - [x86] drm/i915: drop the struct_mutex when wedged or trying to reset
+    - [x86] drm/amdgpu: fix power state when port pm is unavailable
+    - drm/radeon: fix power state when port pm is unavailable
+    - [x86] drm/amdgpu: fix check for port PM availability
+    - drm/radeon: fix check for port PM availability
+    - [arm64] dts: juno: fix cluster sleep state entry latency on all SoC
+      versions
+    - KVM: use after free in kvm_ioctl_create_device()
+    - pwm: Fix device reference leak
+    - [x86] perf: Restore TASK_SIZE check on frame pointer
+    - [armhf] clk: sunxi: Fix M factor computation for APB1
+    - batman-adv: Detect missing primaryif during tp_send as error
+    - [arm64] cpufeature: Schedule enable() calls instead of calling them via
+      IPI
+    - [arm64] mm: Set PSTATE.PAN from the cpu_enable_pan() call
+    - [arm64] suspend: Reconfigure PSTATE after resume from idle
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14
+    - gro_cells: mark napi struct as not busy poll candidates
+    - virtio-net: add a missing synchronize_net()
+    - [armhf] net: dsa: b53: Fix VLAN usage and how we treat CPU port
+    - net: check dead netns for peernet2id_alloc()
+    - ip6_tunnel: disable caching when the traffic class is inherited
+    - net: sky2: Fix shutdown crash
+    - af_unix: conditionally use freezable blocking calls in read
+    - rtnetlink: fix FDB size computation
+    - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind()
+    - rtnl: fix the loop index update error in rtnl_dump_ifinfo()
+    - ipv6: bump genid when the IFA_F_TENTATIVE flag is clear
+    - udplite: call proper backlog handlers
+    - [armhf] net: dsa: bcm_sf2: Ensure we re-negotiate EEE during after link
+      change
+    - net, sched: respect rcu grace period on cls destruction
+    - [armhf] net: dsa: fix unbalanced dsa_switch_tree reference counting
+    - net/sched: pedit: make sure that offset is valid
+    - netlink: Call cb->done from a worker thread
+    - netlink: Do not schedule work from sk_destruct
+    - net/dccp: fix use-after-free in dccp_invalid_packet
+    - GSO: Reload iph after pskb_may_pull
+    - packet: fix race condition in packet_set_ring (CVE-2016-8655)
+    - ip6_offload: check segs for NULL in ipv6_gso_segment.
+    - cdc_ether: Fix handling connection notification
+    - tipc: check minimum bearer MTU (CVE-2016-8632)
+    - geneve: avoid use-after-free of skb->data
+    - net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (CVE-2016-9793)
+    - net: ping: check minimum size on ICMP header length (CVE-2016-8399)
+    - ipv4: Restore fib_trie_flush_external function and fix call ordering
+    - ipv4: Fix memory leak in exception case for splitting tries
+    - ipv4: Drop leaf from suffix pull/push functions
+    - ipv4: Drop suffix update from resize code
+    - [sparc64] Fix find_node warning if numa node cannot be found
+    - [sparc64] fix compile warning section mismatch in find_node()
+    - [sparc] Fix inverted invalid_frame_pointer checks on sigreturns
+    - constify iov_iter_count() and iter_is_iovec()
+    - Don't feed anything but regular iovec's to blk_rq_map_user_iov
+      (CVE-2016-9576)
+    - ipv6: Set skb->protocol properly for local output
+    - ipv4: Set skb->protocol properly for local output
+    - Revert: "ip6_tunnel: Update skb->protocol to ETH_P_IPV6 in
+      ip6_tnl_xmit()"
+    - flowcache: Increase threshold for refusing new allocations
+    - esp4: Fix integrity verification when ESN are used
+    - esp6: Fix integrity verification when ESN are used
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.15
+    - [powerpc] eeh: Fix deadlock when PE frozen state can't be cleared
+    - [powerpc] mm: Fix lazy icache flush on pre-POWER5
+    - [powerpc] boot: Fix build failure in 32-bit boot wrapper
+    - fuse: fix clearing suid, sgid for chown()
+    - [hppa/parisc] Purge TLB before setting PTE
+    - [hppa/parisc] Remove unnecessary TLB purges from flush_dcache_page_asm
+      and flush_icache_page_asm
+    - [hppa/parisc] Fix TLB related boot crash on SMP machines
+    - zram: restrict add/remove attributes to root only
+    - locking/rtmutex: Prevent dequeue vs. unlock race
+    - locking/rtmutex: Use READ_ONCE() in rt_mutex_owner()
+    - device-dax: fix private mapping restriction, permit read-only
+    - scsi: lpfc: fix oops/BUG in lpfc_sli_ringtxcmpl_put()
+    - sched/autogroup: Fix 64-bit kernel nice level adjustment
+    - [x86] perf: Fix full width counter, counter overflow
+    - acpi, nfit: fix extended status translations for ACPI DSMs
+    - acpi, nfit, libnvdimm: fix / harden ars_status output length handling
+    - acpi, nfit: validate ars_status output buffer size
+    - acpi, nfit: fix bus vs dimm confusion in xlat_status
+    - [armel, armhf] crypto: marvell - Don't copy hash operation twice into
+      the SRAM
+    - crypto: caam - fix pointer size for AArch64 boot loader, AArch32 kernel
+    - [armel, armhf] crypto: marvell - Don't corrupt state of an STD req for
+      re-stepped ahash
+    - can: raw: raw_setsockopt: limit number of can_filter that can be set
+    - can: peak: fix bad memory access and free sequence
+    - [armel] dts: orion5x: fix number of sata port for linkstation ls-gl
+      (Closes: #845611)
+    - ceph: don't set req->r_locked_dir in ceph_d_revalidate
+    - [m68k] Fix ndelay() macro
+    - batman-adv: Check for alloc errors when preparing TT local data
+    - hotplug: Make register and unregister notifier API symmetric
+
+  [ Uwe Kleine-König ]
+  * [armhf] dts: armada-385: add support for Turris Omnia
+
+  [ Salvatore Bonaccorso ]
+  * Add ABI reference for 4.8.0-2
+  * Ignore ABI changes in KVM
+  * net: handle no dst on skb in icmp6_send (CVE-2016-9919)
+  * [rt] Update to 4.8.11-rt7
+  * [rt] Update to 4.8.14-rt9
+  * netfilter: ipv6: nf_defrag: drop mangled skb on ream error (CVE-2016-9755)
+  * Ignore ABI changes in libnvdimm
+  * docs: sphinx-extensions: make rstFlatTable work with docutils 0.13.
+    Thanks to Dmitry Shachnev <mitya57@debian.org> (Closes: #848349)
+
+  [ Ben Hutchings ]
+  * [amd64] Re-enable LEGACY_VSYSCALL_EMULATE instead of LEGACY_VSYSCALL_NONE.
+    There are still binaries in stable that use vsyscall (via dietlibc).
+    (Closes: #847154)
+  * debian/rules.real: Exclude *.pyc from featureset diffs
+  * debian/control: Fix build-dependency on flex to work with new versions that
+    have M-A: foreign
+  * debian/rules: Use dpkg-parsechangelog -S option to select fields
+  * debian/rules: Tighten binNMU version matching, consistent with linux-latest
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 19 Dec 2016 12:35:29 +0100
+
+linux (4.8.11-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8
+    - net: fec: set mac address unconditionally
+    - net: pktgen: fix pkt_size
+    - net/sched: act_vlan: Push skb->data to mac_header prior calling
+      skb_vlan_*() functions
+    - net: Add netdev all_adj_list refcnt propagation to fix panic
+    - packet: call fanout_release, while UNREGISTERING a netdev
+    - netlink: do not enter direct reclaim from netlink_dump()
+    - drivers/ptp: Fix kernel memory disclosure
+    - net_sched: reorder pernet ops and act ops registrations
+    - ipv6: tcp: restore IP6CB for pktoptions skbs
+    - net: phy: Trigger state machine on state change and not polling.
+    - ip6_tunnel: fix ip6_tnl_lookup
+    - ipv6: correctly add local routes when lo goes up
+    - IB/ipoib: move back IB LL address into the hard header
+    - net/mlx4_en: fixup xdp tx irq to match rx
+    - net: pktgen: remove rcu locking in pktgen_change_name()
+    - bridge: multicast: restore perm router ports on multicast enable
+    - switchdev: Execute bridge ndos only for bridge ports
+    - rtnetlink: Add rtnexthop offload flag to compare mask
+    - net: core: Correctly iterate over lower adjacency list
+    - net: add recursion limit to GRO
+    - ipv4: disable BH in set_ping_group_range()
+    - ipv4: use the right lock for ping_group_range
+    - net: fec: Call swap_buffer() prior to IP header alignment
+    - net: sctp, forbid negative length
+    - sctp: fix the panic caused by route update
+    - udp: fix IP_CHECKSUM handling
+    - [x86] netvsc: fix incorrect receive checksum offloading
+    - net: ipv6: Do not consider link state for nexthop validation
+    - net sched filters: fix notification of filter delete with proper handle
+    - sctp: validate chunk len before actually using it (CVE-2016-9555)
+    - ip6_tunnel: Update skb->protocol to ETH_P_IPV6 in ip6_tnl_xmit()
+    - packet: on direct_xmit, limit tso and csum to supported devices
+    - [powerpc] Update parameters for csum_tcpudp_magic & csum_tcpudp_nofold
+    - [arm64, armhf] usb: dwc3: gadget: properly account queued requests
+    - scsi: megaraid_sas: Fix data integrity failure for JBOD (passthrough)
+      devices
+    - scsi: megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.9
+    - ALSA: info: Return error for invalid read/write
+    - ALSA: info: Limit the proc text input size
+    - dib0700: fix nec repeat handling
+    - mm, frontswap: make sure allocated frontswap map is assigned
+    - shmem: fix pageflags after swapping DMA32 object
+    - swapfile: fix memory corruption via malformed swapfile
+    - mm: hwpoison: fix thp split handling in memory_failure()
+    - mm/hugetlb: fix huge page reservation leak in private mapping error paths
+    - coredump: fix unfreezable coredumping task
+    - [s390x] hypfs: Use get_free_page() instead of kmalloc to ensure page
+      alignment
+    - PCI: Don't attempt to claim shadow copies of ROM
+    - [x86] pinctrl: cherryview: Serialize register access in suspend/resume
+    - [x86] pinctrl: cherryview: Prevent possible interrupt storm on resume
+    - cpupower: Correct return type of cpu_power_is_cpu_online() in cpufreq-set
+    - mmc: sdhci: Fix CMD line reset interfering with ongoing data transfer
+    - mmc: sdhci: Fix unexpected data interrupt handling
+    - mmc: mmc: Use 500ms as the default generic CMD6 timeout
+    - [arm64, armhf] usb: dwc3: Fix error handling for core init
+    - USB: cdc-acm: fix TIOCMIWAIT
+    - usb: gadget: u_ether: remove interrupt throttling
+    - drbd: Fix kernel_sendmsg() usage - potential NULL deref
+    - cdc-acm: fix uninitialized variable
+    - scsi: qla2xxx: Fix scsi scan hang triggered if adapter fails during init
+    - scsi: mpt3sas: Fix for block device of raid exists even after deleting
+      raid disk
+    - scsi: scsi_dh_alua: fix missing kref_put() in alua_rtpg_work()
+    - scsi: scsi_dh_alua: Fix a reference counting bug
+    - [arm64] KVM: vgic: Prevent access to invalid SPIs
+    - drm/radeon: disable runtime pm in certain cases
+    - [x86] drm/i915: Respect alternate_ddc_pin for all DDI ports
+    - [x86] drm/i915/dp: BDW cdclk fix for DP audio
+    - [x86] drm/i915/dp: Extend BDW DP audio workaround to GEN9 platforms
+    - [x86] drm/amdgpu: disable runtime pm in certain cases
+    - xprtrdma: use complete() instead complete_all()
+    - xprtrdma: Fix DMAR failure in frwr_op_map() after reconnect
+    - [amd64] iommu/amd: Free domain id when free a domain of struct
+      dma_ops_domain
+    - [x86] iommu/vt-d: Fix dead-locks in disable_dmar_iommu() path
+    - [x86] agp/intel: Flush chipset writes after updating a single PTE
+    - watchdog: core: Fix devres_alloc() allocation size
+    - perf top: Fix refreshing hierarchy entries on TUI
+    - [x86] mei: bus: fix received data size check in NFC fixup
+    - svcrdma: Skip put_page() when send_reply() fails
+    - svcrdma: Tail iovec leaves an orphaned DMA mapping
+    - nvme: Delete created IO queues on reset
+    - [s390x] dumpstack: restore reliable indicator for call traces
+    - hwrng: core - Don't use a stack buffer in add_early_randomness()
+    - i40e: fix call of ndo_dflt_bridge_getlink()
+    - [arm64] mmc: sdhci-msm: Fix error return code in sdhci_msm_probe()
+    - [x86] ACPI / APEI: Fix incorrect return value of ghes_proc()
+    - ACPI/PCI/IRQ: assign ISA IRQ directly during early boot stages
+    - ACPI/PCI: pci_link: penalize SCI correctly
+    - ACPI/PCI: pci_link: Include PIRQ_PENALTY_PCI_USING for ISA IRQs
+    - batman-adv: Modify neigh_list only with rcu-list functions
+    - [armel, armhf] gpio/mvebu: Use irq_domain_add_linear
+    - ASoC: Intel: Skylake: Always acquire runtime pm ref on unload
+    - [armhf] ASoC: sun4i-codec: return error code instead of NULL when
+      create_card fails
+    - memcg: prevent memcg caches to be both OFF_SLAB & OBJFREELIST_SLAB
+    - libceph: fix legacy layout decode with pool 0
+    - [x86] drm/amdgpu: fix fence slab teardown
+    - [x86] drm/amdgpu: fix a vm_flush fence leak
+    - [x86] drm/i915: Fix mismatched INIT power domain disabling during
+      suspend
+    - netfilter: fix namespace handling in nf_log_proc_dostring
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.10
+    - dctcp: avoid bogus doubling of cwnd after loss
+    - net: clear sk_err_soft in sk_clone_lock()
+    - net: mangle zero checksum in skb_checksum_help()
+    - ip6_tunnel: Clear IP6CB in ip6tunnel_xmit()
+    - tcp: fix potential memory corruption
+    - ipv4: allow local fragmentation in ip_finish_output_gso()
+    - tcp: fix return value for partial writes
+    - dccp: do not release listeners too soon
+    - dccp: do not send reset to already closed sockets
+    - dccp: fix out of bound access in dccp_v4_err()
+    - ipv6: dccp: fix out of bound access in dccp_v6_err()
+    - ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped
+    - sctp: assign assoc_id earlier in __sctp_connect
+    - bpf: fix htab map destruction when extra reserve is in use
+    - net: icmp6_send should use dst dev to determine L3 domain
+    - fib_trie: Correct /proc/net/route off by one error
+    - sock: fix sendmmsg for partial sendmsg
+    - net: icmp_route_lookup should use rt dev to determine L3 domain
+    - net: __skb_flow_dissect() must cap its return value
+    - ipv4: use new_gw for redirect neigh lookup
+    - tcp: take care of truncations done by sk_filter() (CVE-2016-8645)
+    - Revert "include/uapi/linux/atm_zatm.h: include linux/time.h"
+      (Closes: #844491)
+    - Revert "bnx2: Reset device during driver initialization"
+    - bnx2: Wait for in-flight DMA to complete at probe stage
+    - sctp: change sk state only when it has assocs in sctp_shutdown
+    - [arm64, armhf] net: stmmac: Fix lack of link transition for fixed PHYs
+    - [sparc] Handle negative offsets in arch_jump_label_transform
+    - [sparc64] Handle extremely large kernel TSB range flushes sanely.
+    - [sparc64] Fix illegal relative branches in hypervisor patched TLB code.
+    - [sparc64] Fix instruction count in comment for
+      __hypervisor_flush_tlb_pending.
+    - [sparc64] Fix illegal relative branches in hypervisor patched TLB
+      cross-call code.
+    - [sparc64] Handle extremely large kernel TLB range flushes more
+      gracefully.
+    - [sparc64] Delete __ret_efault.
+    - [sparc64] Prepare to move to more saner user copy exception handling.
+    - [sparc64] Convert copy_in_user to accurate exception reporting.
+    - [sparc64] Convert GENcopy_{from,to}_user to accurate exception
+      reporting.
+    - [sparc64] Convert U1copy_{from,to}_user to accurate exception reporting.
+    - [sparc64] Convert NG4copy_{from,to}_user to accurate exception
+      reporting.
+    - [sparc64] Convert NGcopy_{from,to}_user to accurate exception reporting.
+    - [sparc64] Convert NG2copy_{from,to}_user to accurate exception
+      reporting.
+    - [sparc64] Convert U3copy_{from,to}_user to accurate exception reporting.
+    - [sparc64] Delete now unused user copy assembler helpers.
+    - [sparc64] Delete now unused user copy fixup functions.
+    - usb: gadget: f_fs: edit epfile->ep under lock
+    - usb: gadget: f_fs: stop sleeping in ffs_func_eps_disable
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.11
+    - [x86] cpu/AMD: Fix cpu_llc_id for AMD Fam17h systems
+    - [x86] KVM: fix missed SRCU usage in kvm_lapic_set_vapic_addr
+    - [x86] KVM: Disable irq while unregistering user notifier
+    - ftrace: Ignore FTRACE_FL_DISABLED while walking dyn_ftrace records
+    - ftrace: Add more checks for FTRACE_FL_DISABLED in processing ip records
+    - genirq: Use irq type from irqdata instead of irqdesc
+    - fuse: fix fuse_write_end() if zero bytes were copied
+    - IB/rdmavt: rdmavt can handle non aligned page maps
+    - IB/hfi1: Fix rnr_timer addition
+    - [x86] mfd: intel-lpss: Do not put device in reset state on suspend
+    - [armhf] mfd: stmpe: Fix RESET regression on STMPE2401
+    - can: bcm: fix warning in bcm_connect/proc_register
+    - gpio: do not double-check direction on sleeping chips
+    - [x86] ALSA: usb-audio: Fix use-after-free of usb_device at disconnect
+    - [x86] ALSA: hda - add a new condition to check if it is thinkpad
+    - ALSA: hda - Fix mic regression by ASRock mobo fixup
+    - [armhf] i2c: mux: fix up dependencies
+    - [armhf] i2c: i2c-mux-pca954x: fix deselect enabling for device-tree
+    - kbuild: add -fno-PIE
+    - scripts/has-stack-protector: add -fno-PIE
+    - x86/kexec: add -fno-PIE
+    - kbuild: Steal gcc's pie from the very beginning
+    - ext4: sanity check the block and cluster size at mount time
+    - [armhf] dts: imx53-qsb: Fix regulator constraints
+    - crypto: caam - do not register AES-XTS mode on LP units
+    - [powerpc*] Fix setting of AIL in hypervisor mode
+    - [x86] drm/amdgpu: Attach exclusive fence to prime exported bo's.
+    - [x86] drm/i915: Refresh that status of MST capable connectors in
+      ->detect()
+    - [x86] drm/i915: Assume non-DP++ port if dvo_port is HDMI and there's no
+      AUX ch specified in the VBT
+    - virtio-net: drop legacy features in virtio 1 mode
+    - [armhf] clk: imx: fix integer overflow in AV PLL round rate
+    - [armhf] rtc: omap: Fix selecting external osc
+    - iwlwifi: pcie: fix SPLC structure parsing
+    - iwlwifi: pcie: mark command queue lock with separate lockdep class
+    - iwlwifi: mvm: fix netdetect starting/stopping for unified images
+    - iwlwifi: mvm: fix d3_test with unified D0/D3 images
+    - iwlwifi: mvm: wake the wait queue when the RX sync counter is zero
+    - mfd: core: Fix device reference leak in mfd_clone_cell
+    - sunrpc: svc_age_temp_xprts_now should not call setsockopt non-tcp
+      transports
+    - uwb: fix device reference leaks
+    - PM / sleep: fix device reference leak in test_suspend
+    - PM / sleep: don't suspend parent when async child suspend_{noirq,
+      late} fails
+    - perf hists: Fix column length on --hierarchy
+    - IB/mlx4: Check gid_index return value
+    - IB/mlx4: Fix create CQ error flow
+    - IB/mlx5: Validate requested RQT size
+    - IB/mlx5: Use cache line size to select CQE stride
+    - IB/mlx5: Fix memory leak in query device
+    - IB/mlx5: Fix fatal error dispatching
+    - IB/mlx5: Fix NULL pointer dereference on debug print
+    - IB/core: Avoid unsigned int overflow in sg_alloc_table
+    - IB/hfi1: Remove incorrect IS_ERR check
+    - IB/uverbs: Fix leak of XRC target QPs
+    - IB/cm: Mark stale CM id's whenever the mad agent was unregistered
+    - netfilter: nft_dynset: fix element timeout for HZ != 1000
+    - [arm64, armhf] gpio: pca953x: Move memcpy into mutex lock for set
+      multiple
+    - [arm64, armhf] gpio: pca953x: Fix corruption of other gpios in
+      set_multiple.
+
+  [ Salvatore Bonaccorso ]
+  * Bump ABI to 2 and remove ABI reference for 4.8.0-1
+  * xfs: Propagate dentry down to inode_change_ok()
+  * ceph: Propagate dentry down to inode_change_ok()
+  * fuse: Propagate dentry down to inode_change_ok()
+  * fs: Give dentry to inode_change_ok() instead of inode
+  * fs: Avoid premature clearing of capabilities (CVE-2015-1350)
+    (Closes: #770492)
+  * mpi: Fix NULL ptr dereference in mpi_powm() (CVE-2016-8650)
+  * vfio/pci: Fix integer overflows, bitmask check (CVE-2016-9083
+    CVE-2016-9084)
+  * mnt: Add a per mount namespace limit on the number of mounts
+    (CVE-2016-6213)
+
+  [ Ben Hutchings ]
+  * [arm64] Enable more drivers for X-Gene (Really closes: #840061):
+    - DMA: Enable XGENE_DMA as module
+    - EDAC: Enable EDAC and EDAC_MM_EDAC, EDAC_XGENE as modules
+  * [x86] video: Disable X86_SYSFB, FB_SIMPLE (Closes: #822575)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 02 Dec 2016 06:35:22 +0100
+
+linux (4.8.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.6
+    - [armhf,arm64] drm/vc4: Fix races when the CS reads from render targets.
+    - [x86] drm/i915/backlight: setup and cache pwm alternate increment value
+    - [x86] drm/i915/backlight: setup backlight pwm alternate increment on
+      backlight enable
+    - [x86] drm/amdgpu: fix IB alignment for UVD
+    - [x86] drm/amdgpu/dce10: disable hpd on local panels
+    - [x86] drm/amdgpu/dce8: disable hpd on local panels
+    - [x86] drm/amdgpu/dce11: disable hpd on local panels
+    - [x86] drm/amdgpu/dce11: add missing drm_mode_config_cleanup call
+    - [x86] drm/amdgpu: initialize the context reset_counter in amdgpu_ctx_init
+    - [x86] drm/amdgpu: change vblank_time's calculation method to reduce
+      computational error.
+    - drm/radeon: narrow asic_init for virtualization
+    - drm/radeon/si/dpm: fix phase shedding setup
+    - drm/radeon: change vblank_time's calculation method to reduce
+      computational error.
+    - [x86] drm/vmwgfx: Limit the user-space command buffer size
+    - [x86] drm/amd/powerplay: fix mclk not switching back after multi-head
+      was disabled
+    - [x86] drm/i915/skl: Fix FIFO underrun (Closes: #844113)
+      + Update plane watermarks atomically during plane updates
+      + Move CRTC updating in atomic_commit into it's own hook
+      + Update DDB values atomically with wms/plane attrs
+      + Don't try to update plane watermarks if they haven't changed
+    - [x86] drm/i915/gen9: only add the planes actually affected by ddb changes
+    - [x86] drm/i915/gen9: fix the WaWmMemoryReadLatency implementation
+    - [x86] drm/i915/gen9: minimum scanlines for Y tile is not always 4
+    - [x86] drm/i915/gen9: fix plane_blocks_per_line on watermarks calculations
+    - [x86] drm/i915/gen9: fix the watermark res_blocks value
+    - [x86] drm/i915: SAGV is not SKL-only, so rename a few things
+    - [x86] drm/i915: introduce intel_has_sagv()
+    - [x86] drm/i915/kbl: KBL also needs to run the SAGV code
+    - [x86] Revert "drm/i915: Check live status before reading edid"
+    - [x86] drm/i915: Account for TSEG size when determining 865G stolen base
+    - [x86] drm/i915/skl: Ensure pipes with changed wms get added to the state
+    - [x86] drm/i915: Allow PCH DPLL sharing regardless of DPLL_SDVO_HIGH_SPEED
+    - [x86] drm/i915: Move long hpd handling into the hotplug work
+    - [x86] drm/i915: Allow DP to work w/o EDID
+    - [x86] drm/i915: Just clear the mmiodebug before a register access
+    - [x86] drm/i915: Unalias obj->phys_handle and obj->userptr
+    - rt2x00usb: Fix error return code
+    - uio: fix dmem_region_start computation
+    - i40e: remove a stray unlock
+    - i40e: fix broken i40e_config_rss_aq function
+    - mwifiex: correct aid value during tdls setup
+    - mwifiex: fix failed to reconnect after interface disabled/enabled
+    - ath10k: Add WMI_SERVICE_PERIODIC_CHAN_STAT_SUPPORT wmi service
+    - ath10k: fix sending frame in management path in push txq logic
+    - ath10k: fix reporting channel survey data
+    - ath10k: fix throughput regression in multi client mode
+    - [armel/marvell,armhf] crypto: marvell - Don't overwrite default
+      creq->state during initialization
+    - crypto: gcm - Fix IV buffer size in crypto_gcm_setkey
+    - [armel/marvell,armhf] crypto: marvell - Update transformation context for
+      each dequeued req
+    - [x86] crypto: ccp - Fix return value check in ccp_dmaengine_register()
+    - [armhf] hwrng: omap - Only fail if pm_runtime_get_sync returns < 0
+    - ASoC: topology: Fix error return code in soc_tplg_dapm_widget_create()
+    - ASoC: dapm: Fix possible uninitialized variable in
+      snd_soc_dapm_get_volsw()
+    - ASoC: dapm: Fix value setting for _ENUM_DOUBLE MUX's second channel
+    - ASoC: dapm: Fix kcontrol creation for output driver widget
+    - staging: r8188eu: Fix scheduling while atomic splat
+    - IB/qib: Remove qpt_mask global
+    - IB/mlx5: Fix steering resource leak
+    - mm/hugetlb: check for reserved hugepages during memory offline
+    - mm/hugetlb: improve locking in dissolve_free_huge_pages()
+    - [x86] drm/vmwgfx: Avoid validating views on view destruction
+    - [s390x] cio: fix accidental interrupt enabling during resume
+    - [s390x] con3270: fix use of uninitialised data
+    - [s390x] con3270: fix insufficient space padding
+    - [armhf,arm64] clk: bcm2835: Skip PLLC clocks when deciding on a new
+      clock parent
+    - [arm64] clk: gcc-msm8996: Fix pcie 2 pipe register offset
+    - [arm64] clk: qcom: select GDSC for msm8996 gcc and mmcc
+    - clk: Return errors from clk providers in __of_clk_get_from_provider()
+    - clk: core: Force setting the phase delay when no change
+    - clk: divider: Fix clk_divider_round_rate() to use clk_readl()
+    - perf hists browser: Fix event group display
+    - perf ui/tui: Reset output width for hierarchy
+    - perf ui/stdio: Always reset output width for hierarchy
+    - perf symbols: Check symbol_conf.allow_aliases for kallsyms loading too
+    - perf symbols: Fixup symbol sizes before picking best ones
+    - iwlwifi: check for valid ethernet address provided by OEM
+    - iwlwifi: mvm: fix pending frames tracking on tx resp
+    - iwlwifi: mvm: call a different txq_enable function
+    - iwlwifi: mvm: free reserved queue on STA removal
+    - iwlwifi: mvm: support BAR in reorder buffer
+    - iwlwifi: mvm: disable P2P queue on mac context release
+    - iwlwifi: mvm: bail out if CTDP start operation fails
+    - [armhf,arm64] pinctrl: qcom: fix masking of pinmux functions
+    - mpt3sas: Don't spam logs if logging level is 0
+    - [powerpc*] Always restore FPU/VEC/VSX if hardware transactional memory
+      in use
+    - [powerpc*] Add check_if_tm_restore_required() to giveup_all()
+    - [powerpc*] nvram: Fix an incorrect partition merge
+    - [powerpc*] Fix usage of _PAGE_RO in hugepage
+    - [armhf] dts: omap3: overo: add missing unit name for lcd35 display
+    - PCI: generic: Fix pci_remap_iospace() failure path
+    - [armhf] PCI: tegra: Fix pci_remap_iospace() failure path
+    - libnvdimm: clear the internal poison_list when clearing badblocks
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7
+    - [armhf] i2c: rk3x: Give the tuning value 0 during
+      rk3x_i2c_v0_calc_timings
+    - i2c: core: fix NULL pointer dereference under race condition
+    - drm/dp/mst: Clear port->pdt when tearing down the i2c adapter
+    - gpio / ACPI: fix returned error from acpi_dev_gpio_irq_get()
+    - gpio: GPIO_GET_CHIPINFO_IOCTL: Fix line offset validation
+    - gpio: GPIO_GET_CHIPINFO_IOCTL: Fix information leak
+    - gpio: GPIO_GET_LINEHANDLE_IOCTL: Validate line offset
+    - gpio: GPIOHANDLE_GET_LINE_VALUES_IOCTL: Fix information leak
+    - gpio: GPIO_GET_LINEEVENT_IOCTL: Validate line offset
+    - gpio: GPIO_GET_LINEHANDLE_IOCTL: Reject invalid line flags
+    - gpio: GPIO_GET_LINEEVENT_IOCTL: Reject invalid line and event flags
+    - gpio: GPIOHANDLE_GET_LINE_VALUES_IOCTL: Fix another information leak
+    - gpio: GPIO_GET_LINE{HANDLE,EVENT}_IOCTL: Fix file descriptor leak
+    - libxfs: clean up _calc_dquots_per_chunk
+    - mm/list_lru.c: avoid error-path NULL pointer deref
+    - mm/slab: fix kmemcg cache creation delayed issue
+    - mm: memcontrol: do not recurse in direct reclaim
+    - [x86] thermal/powerclamp: correct cpu support check
+    - KEYS: Fix short sprintf buffer in /proc/keys show function
+    - ALSA: usb-audio: Add quirk for Syntek STK1160
+    - ALSA: seq: Fix time account regression
+    - ALSA: hda - allow 40 bit DMA mask for NVidia devices
+    - ALSA: hda - Adding a new group of pin cfg into ALC295 pin quirk table
+    - ALSA: hda - Fix surround output pins for ASRock B150M mobo
+    - ALSA: hda - Fix headset mic detection problem for two Dell laptops
+    - [powerpc*] cxl: Fix leaking pid refs in some error paths
+    - btrfs: fix races on root_log_ctx lists
+    - [powerpc] Convert cmp to cmpd in idle enter sequence
+    - [powerpc] mm/radix: Use tlbiel only if we ever ran on the current cpu
+    - [powerpc] Re-fix race condition between going idle and entering guest
+    - [powerpc] Fix race condition in setting lock bit in idle/wakeup code
+    - [amd64] x86/microcode/AMD: Fix more fallout from
+      CONFIG_RANDOMIZE_MEMORY=y
+    - timers: Prevent base clock rewind when forwarding clock
+    - timers: Prevent base clock corruption when forwarding
+    - timers: Plug locking race vs. timer migration
+    - timers: Lock base for same bucket optimization
+    - mei: txe: don't clean an unprocessed interrupt cause.
+    - USB: serial: fix potential NULL-dereference at probe
+    - USB: serial: cp210x: fix tiocmget error handling
+    - USB: serial: ftdi_sio: add support for Infineon TriBoard TC2X7
+    - xhci: use default USB_RESUME_TIMEOUT when resuming ports.
+    - usb: increase ohci watchdog delay to 275 msec (Closes: #842863)
+    - [powerpc] GenWQE: Fix bad page access during abort of resource
+      allocation
+    - [x86] smpboot: Init apic mapping before usage
+    - vt: clear selection before resizing
+    - [x86] hv: do not lose pending heartbeat vmbus packets
+    - xhci: add restart quirk for Intel Wildcatpoint PCH
+    - xhci: workaround for hosts missing CAS bit
+    - tty: limit terminal size to 4M chars
+    - [arm64] dts: marvell: fix clocksource for CP110 master SPI0
+    - dm: free io_barrier after blk_cleanup_queue call
+    - [x86] KVM: fix wbinvd_dirty_mask use-after-free
+    - [s390] KVM: Fix STHYI buffer alignment for diag224
+    - [armhf]  mvebu: Select corediv clk for all mvebu v7 SoC
+    - nfsd: Fix general protection fault in release_lock_stateid()
+    - [mips*] KASLR: Fix handling of NULL FDT
+    - ovl: fix get_acl() on tmpfs
+    - ovl: update S_ISGID when setting posix ACLs
+    - ovl: fsync after copy-up
+    - virtio_ring: Make interrupt suppression spec compliant
+    - virtio_pci: Limit DMA mask to 44 bits for legacy virtio devices
+    - virtio: console: Unlock vqs while freeing buffers
+    - dm mirror: fix read error on recovery after default leg failure
+    - dm table: fix missing dm_put_target_type() in dm_table_add_target()
+    - dm rq: clear kworker_task if kthread_run() returned an error
+    - dm raid: fix compat_features validation (Closes: #843572)
+    - dm raid: fix activation of existing raid4/10 devices
+    - firewire: net: guard against rx buffer overflows (CVE-2016-8633)
+    - firewire: net: fix fragmented datagram_size off-by-one
+    - mac80211: discard multicast and 4-addr A-MSDUs
+    - ath10k: cache calibration data when the core is stopped
+    - scsi: scsi_debug: Fix memory leak if LBP enabled and module is unloaded
+    - scsi: arcmsr: Send SYNCHRONIZE_CACHE command to firmware
+    - [arm64, armhf] mmc: dw_mmc-pltfm: fix the potential NULL pointer
+      dereference
+    - RAID1: ignore discard error
+    - RAID10: ignore discard error
+    - md: be careful not lot leak internal curr_resync value into metadata.
+    - Revert "drm/radeon: fix DP link training issue with second 4K monitor"
+    - [armhf] drm/imx: ipuv3-plane: Switch EBA buffer only when we don't need
+      modeset
+    - [armhf] drm/imx: ipuv3-plane: Access old u/vbo properly in
+      ->atomic_check for YU12/YV12
+    - drm/radeon/si_dpm: Limit clocks on HD86xx part
+    - drm/radeon/si_dpm: workaround for SI kickers
+    - drm/radeon: drop register readback in cayman_cp_int_cntl_setup
+    - drm/nouveau/acpi: fix check for power resources support
+    - drm/fb-helper: Don't call dirty callback for untouched clips
+    - drm/fb-helper: Fix connector ref leak on error
+    - drm/fb-helper: Keep references for the current set of used connectors
+    - drm/i915/gen9: fix DDB partitioning for multi-screen cases
+    - drm/i915/gen9: fix watermarks when using the pipe scaler
+    - drm/dp/mst: Check peer device type before attempting EDID read
+    - drm: Release reference from blob lookup after replacing property
+    - drm/i915: Respect alternate_aux_channel for all DDI ports
+    - drm/i915: Clean up DDI DDC/AUX CH sanitation
+    - drm/i915/fbc: fix CFB size calculation for gen8+
+    - drm: i915: Wait for fences on new fb, not old
+    - i2c: mark device nodes only in case of successful instantiation
+    - netfilter: xt_NFLOG: fix unexpected truncated packet
+    - [arm64, armhf] pwm: Unexport children before chip removal
+    - [arm64, armhf] usb: dwc3: Fix size used in dma_free_coherent()
+    - [arm64, armhf] usb: chipidea: host: fix NULL ptr dereference during
+      shutdown
+    - [armhf] usb: musb: Fix hardirq-safe hardirq-unsafe lock order error
+    - tty: vt, fix bogus division in csi_J
+    - [x86] kvm: Check memopp before dereference (CVE-2016-8630)
+    - btrfs: qgroup: Prevent qgroup->reserved from going subzero
+    - [x86] cpufreq: intel_pstate: Set P-state upfront in performance mode
+    - HID: usbhid: add ATEN CS962 to list of quirky devices
+
+  [ Ben Hutchings ]
+  * debian/control: Fix build-dependency on openssl to work with new
+    versions that have M-A: allowed (Closes: #839145)
+  * [rt] Update to 4.8.6-rt5:
+    - [i386] entry: Fix preempt_lazy_count check in resume_kernel()
+    - sched: Use mmdrop_delayed() in sched_cpu_dying()
+    - Revert "mm/zsmalloc: Use get/put_cpu_light in
+      zs_map_object()/zs_unmap_object()"
+    - mm/zsmalloc: copy with get_cpu_var() and locking
+    - NFSv4: replace seqcount_t with a seqlock_t
+    - ftrace: Fix trace header alignment
+    - connector/cn_proc: Protect send_msg() with a local lock on RT
+    - drivers/zram: Don't disable preemption in zcomp_stream_get/put()
+  * HID: Enable HID_ALPS, HID_ASUS (Closes: #843085), HID_CMEDIA as modules
+  * cpupower: Fix checks for CPU existence (Closes: #843071)
+  * perf: Disable use of libcrypto (Closes: #843199)
+  * IB: Enable INFINIBAND_RDMAVT as module, re-enabling INFINIBAND_HFI1
+    and INFINIBAND_QIB (Closes: #843792)
+  * libcpupower-dev: Depend on libcpupower1 (Closes:  #840852)
+  * [arm64] Enable more drivers for X-Gene (Closes: #840061):
+    - ipmi: Enable IPMI_HANDLER, IPMI_DEVICE_INTERFACE, IPMI_SSIF as modules
+    - i2c: Enable I2C_XGENE_SLIMPRO as module
+    - mailbox: Enable XGENE_SLIMPRO_MBOX as module
+  * debian/control: Build-Depend on a recent debhelper instead of dh-systemd
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 13 Nov 2016 04:38:09 +0000
+
+linux (4.8.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.5
+    - [x86] boot/smp: Don't try to poke disabled/non-existent APIC
+      (Closes: #841850)
+    - [x86] Input: i8042 - skip selftest on ASUS laptops
+    - [x86] Input: elantech - add Fujitsu Lifebook E556 to force crc_enabled
+      (Closes: #835160)
+
+  [ Ben Hutchings ]
+  * cpufreq: Re-enable CPU_FREQ_STAT, which can no longer be modular
+  * [armhf] dts: imx53: add support for USB armory board (Closes: #840137)
+  * kconfig: Renumber SYMBOL_NEW, fixing regression of allnoconfig
+    (Closes: #841357)
+  * netfilter: xt_NFLOG: fix unexpected truncated packet (Closes: #841261)
+  * Set ABI to 1
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 28 Oct 2016 20:34:09 +0100
+
+linux (4.8.4-1~exp1) experimental; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.8
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.1
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.2
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.4
+
+  [ Ben Hutchings ]
+  * [amd64] Enable LEGACY_VSYSCALL_NONE instead of LEGACY_VSYSCALL_EMULATE.
+    This breaks (e)glibc 2.13 and earlier, and can be reverted using the kernel
+    parameter: vsyscall=emulate
+  * [arm*] Enable STRICT_DEVMEM
+  * [arm*,powerpc*,s390x,x86] Enable IO_STRICT_DEVMEM.  This breaks dosemu and
+    some old graphics drivers, and can be reverted using the kernel parameter:
+    iomem=relaxed
+  * [mips*] Enable RANDOMIZE_BASE and RELOCATABLE.
+  * Enable SLAB_FREELIST_RANDOM
+  * [arm*,powerpc*,s390x,sparc64,x86] Enable HARDENED_USERCOPY
+  * security,perf: Replace GRKERNSEC_PERF_HARDEN patch with the version
+    submitted upstream
+  * [amd64] Enable RANDOMIZE_MEMORY
+  * [powerpc*/*64*] Enable OPAL_PRD, MTD, MTD_POWERNV_FLASH as modules
+    (Closes: #838604, #838605)
+  * security,printk: Enable SECURITY_DMESG_RESTRICT, preventing non-root users
+    reading the kernel log by default (sysctl: kernel.dmesg_restrict)
+  * bug script: Optionally use sudo to read a restricted kernel log, and fall
+    back to writing a placeholder
+  * [rt] Update to 4.8.2-rt2 and re-enable
+  * aufs: Update support patchest to aufs4.8-20161010 (no functional change)
+
+  [ Aurelien Jarno ]
+  * [arm64] Enable SERIAL_8250_EXTENDED, SERIAL_8250_SHARE_IRQ and
+    SERIAL_8250_BCM2835AUX, needed for Raspberry Pi 3.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 23 Oct 2016 17:21:13 +0100
+
+linux (4.8~rc8-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Héctor Orón ]
+  * [arm64] Enable ACPI, ARM64_VA_BITS_48 (Closes: #834505)
+
+  [ Ben Hutchings ]
+  * Fix some new reproducibility issues:
+    - linux-source: Exclude Python bytecode generated when running Sphinx
+    - Set -fdebug-prefix-map=... in compiler options for kernel and userland
+    - linux-headers: Stop including unused arch/*/kernel/asm-offsets.s files
+  * linux-doc: Exclude Sphinx support code and Makefiles
+  * [arm64] mm: Limit TASK_SIZE_64 for compatibility
+  * [armhf] udeb: Replace dwmac-socfpga with dwmac-altr-socfpga in
+    nic-modules (Closes: #837110, thanks to Vagrant Cascadian)
+  * [armhf] Enable drivers for ASUS Chromebook C201 (veyron-speedy):
+    MFD_RK808, POWER_AVS, POWER_RESET_GPIO_RESTART, RTC_DRV_RK808,
+    ROCKCHIP_PM_DOMAINS as built-in; DRM_PANEL_SIMPLE, ROCKCHIP_ANALOGIX_DP,
+    ROCKCHIP_DW_MIPI_DSI, I2C_CROS_EC_TUNNEL, KEYBOARD_CROS_EC, OUSE_ELAN_I2C,
+    MFD_CROS_EC, MFD_CROS_EC_SPI, MFD_RK808, PHY_ROCKCHIP_EMMC, PHY_ROCKCHIP_DP,
+    BATTERY_SBS, CHARGER_GPIO, REGULATOR_RK808, BACKLIGHT_PWM as modules
+    (Closes: #836251, thanks to Vagrant Cascadian)
+  * [armhf] dsa: Enable drivers for Lamobo R1 (aka BPi-R1): B53,
+    B53_MDIO_DRIVER as modules (Closes: #836231, thanks to Vagrant Cascadian)
+  * [armhf] media: Enable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 as module
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 26 Sep 2016 04:27:06 +0100
+
+linux (4.8~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Martin Michlmayr ]
+  * [arm64] Enable more Tegra options: TEGRA_ACONNECT.
+  * [arm64] Enable more QCOM options: MSM_GCC_8996, MSM_MMCC_8996, QCOM_HIDMA,
+    QCOM_HIDMA_MGMT, PCIE_QCOM, PINCTRL_MSM8996, QCOM_Q6V5_PIL.
+  * [arm64] Enable support for BCM2837 (Raspberry Pi 3):
+    - Enable ARCH_BCM2835, DMA_BCM2835, BCM2835_MBOX, RASPBERRYPI_FIRMWARE,
+      RASPBERRYPI_POWER
+    - Enable DRM_VC4, I2C_BCM2835, PWM_BCM2835, SPI_BCM2835, SPI_BCM2835AUX,
+      BCM2835_WDT, SND_BCM2835_SOC_I2S, MMC_SDHCI_IPROC, HW_RANDOM_BCM2835
+      as modules
+  * [arm64] Enable USB_DWC2 and USB_DWC3.
+  * [arm64] Enable more HISI options: MFD_HI655X_PMIC, REGULATOR_HI655X,
+    STUB_CLK_HI6220, HI6220_MBOX, COMMON_RESET_HI6220, PHY_HI6220_USB,
+    HW_RANDOM_HISI, DRM_HISI_KIRIN, INPUT_HISI_POWERKEY, PCI_HISI,
+    SPI_HISI_SFC, SCSI_HISI_SAS (Closes: #821027).
+  * [arm64] Enable TI WLAN (WLAN_VENDOR_TI): WL1251, WL12XX, WL18XX
+  * [arm64] Enable Hisilicon Ethernet devices: HIX5HD2_GMAC, HISI_FEMAC,
+    HIP04_ETH, HNS_MDIO, HNS, HNS_DSAF, HNS_ENET, MDIO_HISI_FEMAC
+
+  [ Ben Hutchings ]
+  * Update config for 4.8:
+    - Enable HID_LED as module instead of USB_LED
+    - Enable BH1780 as module instead of SENSORS_BH1780
+    - [alpha] Enable RTC_CLASS and RTC_DRV_ALPHA instead of GEN_RTC
+    - [armhf] Rename omapdrm display config symbols
+    - [armhf] Enable IIO_ST_ACCEL_3AXIS as module instead of LIS3L02DQ
+    - [hppa] Enable RTC_CLASS and RTC_DRV_GENERIC instead of GEN_RTC
+  * liblockdep: Stop trying to build packages, as it failed to build again
+  * linux-doc: Build and install HTML pages from reStructuredText sources
+    - Add python-sphinx and python-sphinx-rtd-theme to Build-Depends-Indep
+    - Install files from both HTML output directories into the package
+    - Exclude RST sources from the package
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 07 Sep 2016 21:52:47 +0100
+
+linux (4.7.8-1) unstable; urgency=high
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.7
+    - cpuset: handle race between CPU hotplug and cpuset_hotplug_work
+    - cgroup: fix invalid controller enable rejections with cgroup namespace
+    - scripts/recordmcount.c: account for .softirqentry.text
+    - mm,ksm: fix endless looping in allocating memory when ksm enable
+    - can: dev: fix deadlock reported after bus-off
+    - [x86] init: Fix cr4_init_shadow() on CR4-less machines
+    - drm/udl: fix line iterator in damage handling
+    - drm/nouveau/fifo/nv04: avoid ramht race against cookie insertion
+    - drm/radeon/si/dpm: add workaround for for Jet parts
+    - [armel,armhf] 8616/1: dt: Respect property size when parsing CPUs
+    - [armel,armhf] 8617/1: dma: fix dma_max_pfn()
+    - mwifiex: illegal assignment
+    - i40e: avoid null pointer dereference
+    - pinctrl: Flag strict is a field in struct pinmux_ops
+    - i2c: mux: demux-pinctrl: run properly with multiple instances
+    - rcuperf: Don't treat gp_exp mis-setting as a WARN
+    - [armhf,arm64] drivers/perf: arm_pmu: Fix leak in error path
+    - perf/core: Use this_cpu_ptr() when stopping AUX events
+    - [armhf,arm64] mmc: tegra: Only advertise UHS modes if IO regulator is
+      present
+    - nvmem: Declare nvmem_cell_read() consistently
+    - hwmon: (adt7411) set bit 3 in CFG1 register
+    - sched/cputime: Fix prev steal time accouting during CPU hotplug
+    - iwlwifi: mvm: checksum IPv6 fragmented packet
+    - iwlwifi: mvm: fix txq aggregation bug
+    - iwlwifi: mvm: write the correct internal TXF index
+    - iwlwifi: mvm: unmap the paging memory before freeing it
+    - iwlwifi: pcie: fix access to scratch buffer
+    - iwlwifi: mvm: free RX reorder buffer on restart
+    - iwlwifi: mvm: avoid harmless -Wmaybe-uninialized warning
+    - iwlwifi: mvm: don't use ret when not initialised
+    - [armhf] usb: gadget: fsl_qe_udc: signedness bug in qe_get_frame()
+    - mac80211: check skb_linearize() return value
+    - i40iw: Protect req_resource_num update
+    - i40iw: Add missing check for interface already open
+    - i40iw: Change mem_resources pointer to a u8
+    - i40iw: Fix double free of allocated_buffer
+    - i40iw: Do not set self-referencing pointer to NULL after kfree
+    - i40iw: Avoid writing to freed memory
+    - i40iw: Add missing NULL check for MPA private data
+    - i40iw: Send last streaming mode message for loopback connections
+    - i40iw: Update hw_iwarp_state
+    - i40iw: Receive notification events correctly
+    - batman-adv: Add missing refcnt for last_candidate
+    - batman-adv: fix elp packet data reservation
+    - [armhf,arm64] irqchip/gicv3: Silence noisy DEBUG_PER_CPU_MAPS warning
+    - [armhf] 8618/1: decompressor: reset ttbcr fields to use TTBR0 on ARMv7
+    - [arm64] debug: avoid resetting stepping state machine when TIF_SINGLESTEP
+    - [mips*] uprobes: remove incorrect set_orig_insn
+    - [mips*] fix uretprobe implementation
+    - [mips*/*-malta] Fix IOCU disable switch read for MIPS64
+    - [mips*] uprobes: fix use of uninitialised variable
+    - printk: fix parsing of "brl=" option
+    - Bluetooth: split sk_filter in l2cap_sock_recv_cb
+    - tpm: fix byte-order for the value read by tpm2_get_tpm_pt
+    - regulator: pwm: Fix regulator ramp delay for continuous mode
+    - [arm64] regulator: qcom_spmi: Add support for S4 supply on pm8941
+    - [arm64] regulator: qcom_spmi: Add support for get_mode/set_mode on
+      switches
+    - [arm64] regulator: qcom_spmi: Update mvs1/mvs2 switches on pm8941
+    - [arm64] regulator: qcom_smd: Fix voltage ranges for pm8x41
+    - [arm64] regulator: qcom_smd: Fix voltage ranges for pma8084 ftsmps and
+      pldo
+    - [armhf] dts: imx6sx-sabreauto: Fix misspelled property
+    - [armhf] sun5i: Fix typo in trip point temperature
+    - pcmcia: ds: fix suspend/resume
+    - [armhf] hwrng: omap - Fix assumption that runtime_get_sync will always
+      succeed
+    - blk-mq: actually hook up defer list when running requests
+    - pstore: drop file opened reference count
+    - fm10k: fix incorrect index calculation in fm10k_write_reta
+    - iwlmvm: mvm: set correct state in smart-fifo configuration
+    - [armhf,arm64] em28xx-i2c: rt_mutex_trylock() returns zero on failure
+    - gspca: avoid unused variable warnings
+    - ath9k: Fix programming of minCCA power threshold
+    - qla2xxx: Fix BBCR offset
+    - fnic: pci_dma_mapping_error() doesn't return an error code
+    - tracing: Have HIST_TRIGGERS select TRACING
+    - NFS/pnfs: Do not clobber existing pgio_done_cb in nfs4_proc_read_setup
+    - svc: Avoid garbage replies when pc_func() returns rpc_drop_reply
+    - NFS: Don't drop CB requests with invalid principals
+    - pNFS/files: Fix layoutcommit after a commit to DS
+    - pNFS/flexfiles: Fix layoutcommit after a commit to DS
+    - watchdog: core: Clear WDOG_HW_RUNNING before calling the stop function
+    - xprtrdma: Remove FMRs from the unmap list after unmapping
+    - [x86] ASoC: Intel: Skylake: Fix error return code in skl_probe()
+    - brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain
+    - brcmsmac: Free packet if dma_mapping_error() fails in dma_rxfill
+    - brcmsmac: Initialize power in brcms_c_stf_ss_algo_channel_get()
+    - [powerpc*] prom: Fix sub-processor option passed to ibm,
+      client-architecture-support
+    - sysctl: handle error writing UINT_MAX to u32 fields
+    - IB/core: Fix possible memory leak in cma_resolve_iboe_route()
+    - kernel/fork: fix CLONE_CHILD_CLEARTID regression in nscd
+    - SUNRPC: Silence WARN_ON when NFSv4.1 over RDMA is in use
+    - pNFS/flexfiles: Fix layoutstat periodic reporting
+    - lib/test_hash.c: fix warning in preprocessor symbol evaluation
+    - [x86] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write
+    - ceph: do not modify fi->frag in need_reset_readdir()
+    - IB/ipoib: Fix memory corruption in ipoib cm mode connect flow
+    - ath10k: fix get rx_status from htt context
+    - IB/core: Fix use after free in send_leave function
+    - regmap: rbtree: Avoid overlapping nodes
+    - scsi: ses: use scsi_is_sas_rphy instead of is_sas_attached
+    - IB/ipoib: Don't allow MC joins during light MC flush
+    - IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV
+    - IB/mlx4: Fix code indentation in QP1 MAD flow
+    - IB/mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV
+    - IB/mlx5: Enable MAD_IFC commands for IB ports only
+    - IB/mlx5: Set source mac address in FTE
+    - batman-adv: remove unused callback from batadv_algo_ops struct
+    - aio: mark AIO pseudo-fs noexec
+    - dm log writes: fix bug with too large bios
+    - usb: misc: legousbtower: Fix NULL pointer deference
+    - [x86] usb: usbip: vudc: fix left shift overflow
+    - Revert "usbtmc: convert to devm_kzalloc"
+    - [x86] ALSA: hda - Adding one more ALC255 pin definition for headset
+      problem
+    - [x86] ALSA: hda - Fix headset mic detection problem for several Dell
+      laptops
+    - [x86] ALSA: hda - Add the top speaker pin config for HP Spectre x360
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.8
+    - [powerpc*] pseries: use pci_host_bridge.release_fn() to kfree(phb)
+    - [powerpc*] cxl: use pcibios_free_controller_deferred() when removing
+      vPHBs
+    - timekeeping: Fix __ktime_get_fast_ns() regression
+    - ALSA: ali5451: Fix out-of-bound position reporting
+    - ALSA: usb-audio: Extend DragonFly dB scale quirk to cover other variants
+    - mfd: rtsx_usb: Avoid setting ucr->current_sg.status
+    - [x86] xen: Update topology map for PV VCPUs
+    - [powerpc*] KVM: PPC: Book3s PR: Allow access to unprivileged MMCR2
+      register
+    - [arm64] KVM: arm64: Require in-kernel irqchip for PMU support
+    - [arm64] KVM: arm/arm64: vgic: Don't flush/sync without a working vgic
+    - [powerpc*] KVM: PPC: BookE: Fix a sanity check
+    - [arm64] fix dump_backtrace/unwind_frame with NULL tsk
+    - [x86] boot: Fix kdump, cleanup aborted E820_PRAM max_pfn manipulation
+    - [x86] irq: Prevent force migration of irqs which are not in the vector
+      domain
+    - [x86] apic: Get rid of apic_version[] array
+    - [x86] arch/x86: Handle non enumerated CPU after physical hotplug
+    - [x86] dumpstack: Fix x86_32 kernel_stack_pointer() previous stack access
+    - [armhf] dts: mvebu: armada-390: add missing compatibility string and
+      bracket
+    - [arm64] dts: MSM8064 remove flags from SPMI/MPP IRQs
+    - [arm64] cpuidle: Fix error return code
+    - [x86] tpm: fix a race condition in tpm2_unseal_trusted()
+    - [x86] tpm_crb: fix crb_req_canceled behavior
+
+  [ Ben Hutchings ]
+  * net: add recursion limit to GRO (CVE-2016-7039)
+  * posix_acl: Clear SGID bit when setting file permissions (CVE-2016-7097)
+  * scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (CVE-2016-7425)
+
+  [ Salvatore Bonaccorso ]
+  * KEYS: Fix short sprintf buffer in /proc/keys show function (CVE-2016-7042)
+  * mm: remove gup_flags FOLL_WRITE games from __get_user_pages()
+    (CVE-2016-5195)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 19 Oct 2016 17:56:57 +0200
+
+linux (4.7.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.6
+    - [arm64] crypto: arm64/aes-ctr - fix NULL dereference in tail processing
+    - [armhf] crypto: arm/aes-ctr - fix NULL dereference in tail processing
+    - crypto: skcipher - Fix blkcipher walk OOM crash
+    - crypto: echainiv - Replace chaining with multiplication
+    - ocfs2/dlm: fix race between convert and migration
+    - ocfs2: fix start offset to ocfs2_zero_range_for_truncate()
+    - Revert "ocfs2: bump up o2cb network protocol version"
+    - autofs: use dentry flags to block walks during expire
+    - xfs: prevent dropping ioend completions during buftarg wait
+    - mm: fix the page_swap_info() BUG_ON check
+    - fsnotify: add a way to stop queueing events on group shutdown
+    - fanotify: fix list corruption in fanotify_get_response()
+    - mm: memcontrol: make per-cpu charge cache IRQ-safe for socket accounting
+    - cgroup: duplicate cgroup reference when cloning sockets
+    - fix fault_in_multipages_...() on architectures with no-op access_ok()
+    - KEYS: Fix skcipher IV clobbering
+    - [arm64] Call numa_store_cpu_info() earlier.
+    - configfs: Return -EFBIG from configfs_write_bin_file.
+    - [armhf] mtd: nand: mxc: fix obiwan error in
+      mxc_nand_v[12]_ooblayout_free() functions
+    - mtd: spi-nor: fix wrong "fully unlocked" test
+    - reset: Return -ENOTSUPP when not configured
+    - rtc: ds1307: Fix relying on reset value for weekday
+    - [arm64] power: reset: hisi-reboot: Unmap region obtained by of_iomap
+    - mac80211: reject TSPEC TIDs (TSIDs) for aggregation
+    - fix memory leaks in tracing_buffers_splice_read()
+    - tracing: Move mutex to protect against resetting of seq data
+    - mm: delete unnecessary and unsafe init_tlb_ubc()
+    - iwlwifi: mvm: update TX queue before making a copy of the skb
+    - nl80211: validate number of probe response CSA counters
+    - btrfs: ensure that file descriptor used with subvol ioctls is a dir
+    - [x86] efi: Only map RAM into EFI page tables if in mixed-mode
+    - [x86] i2c-eg20t: fix race between i2c init and interrupt enable
+    - [armhf] i2c: mux: pca954x: retry updating the mux selection on failure
+    - [arm64] i2c: qup: skip qup_i2c_suspend if the device is already runtime
+      suspended
+    - [mips*] SMP: Fix possibility of deadlock when bringing CPUs online
+    - [mips*] Avoid a BUG warning during prctl(PR_SET_FP_MODE, ...)
+    - [mips*] Add a missing ".set pop" in an early commit
+    - [x86] mm/pat: Prevent hang during boot when mapping pages
+    - libceph: add an ONSTACK initializer for oids
+    - ceph: fix symbol versioning for ceph_monc_do_statfs
+    - ceph: Correctly return NXIO errors from ceph_llseek
+    - libceph: fix return value check in alloc_msg_with_page_vector()
+    - PM / hibernate: Restore processor state before using per-CPU variables
+    - PM / hibernate: Fix rtree_next_node() to avoid walking off list ends
+    - ixgbe: Force VLNCTRL.VFE to be set in all VMDq paths
+    - ixgbe: Re-enable ability to toggle VLAN filtering
+    - igb: fix adjusting PTP timestamps for Tx/Rx latency
+    - [armhf,arm64] soc/tegra: pmc: Don't probe PMC if early initialisation
+      fails
+    - qxl: check for kmap failures
+    - hostfs: Freeing an ERR_PTR in hostfs_fill_sb_common()
+    - iw_cxgb4: stop MPA_REPLY timer when disconnecting
+
+  [ Ben Hutchings ]
+  * debian/bin/gencontrol.py: Fix cross-build-dependencies if invoked under
+    dpkg-buildpackage
+  * linux-image: Exclude vmlinux from stripping by dh_strip (fixes FTBFS
+    on hppa)
+  * udeb: Fold core-modules into kernel-image
+  * udeb: Move nls_utf8 from fat-modules to kernel-image, as many other
+    filesystems need it but vfat no longer does
+  * of_mdio: Enable fixed PHY support if driver is a module
+  * of_mdio: select fixed phy support unconditionally
+  * [armhf] Enable driver for SolidRun ClearFog: USB_XHCI_MVEBU as module
+  * mm: memcontrol: use special workqueue for creating per-memcg caches
+
+  [ Cyril Brulebois ]
+  * Add nls_ascii to the fat-modules udeb, following the change of
+    iocharset default in 4.7.2-1. This fixes a regression with EFI-related
+    mounts within the Debian Installer. (Closes: #839552)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 07 Oct 2016 02:11:50 +0100
+
+linux (4.7.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.5
+    - [armhf] clocksource/drivers/sun4i: Clear interrupts after stopping timer
+      in probe function
+    - fscrypto: require write access to mount to set encryption policy
+    - [arm64] drm/msm: protect against faults from copy_from_user() in submit
+      ioctl
+    - bpf: fix method of PTR_TO_PACKET reg id generation
+    - ipv4: panic in leaf_walk_rcu due to stale node pointer
+    - vti: flush x-netns xfrm cache when vti interface is removed
+    - bpf: fix write helpers with regards to non-linear parts
+    - net/irda: handle iriap_register_lsap() allocation failure
+    - net/sctp: always initialise sctp_ht_iter::start_fail
+    - net: ipv6: Do not keep IPv6 addresses when IPv6 is disabled
+    - tipc: fix NULL pointer dereference in shutdown()
+    - net/mlx5: Fix pci error recovery flow
+    - net/mlx5: Added missing check of msg length in verifying its signature
+    - net/mlx5e: Use correct flow dissector key on flower offloading
+    - net sched: fix encoding to use real length
+    - udp: fix poll() issue with zero sized packets
+    - tcp: properly scale window in tcp_v[46]_reqsk_send_ack()
+    - sctp: fix overrun in sctp_diag_dump_one()
+    - tun: fix transmit timestamp support
+    - [armhf] net: dsa: bcm_sf2: Fix race condition while unmasking interrupts
+    - Revert "phy: IRQ cannot be shared"
+    - net: smc91x: fix SMC accesses
+    - bridge: re-introduce 'fix parsing of MLDv2 reports'
+    - bonding: Fix bonding crash
+    - Revert "af_unix: Fix splice-bind deadlock"
+    - af_unix: split 'u->readlock' into two: 'iolock' and 'bindlock'
+    - ipv6: release dst in ping_v6_sendmsg
+    - [arm64] bnxt_en: Fix TX push operation on ARM64.
+    - ipv6: addrconf: fix dev refcont leak when DAD failed
+    - tcp: fastopen: avoid negative sk_forward_alloc
+    - net/mlx5e: Fix parsing of vlan packets when updating lro header
+    - tcp: cwnd does not increase in TCP YeAH
+    - [powerpc*] tm: do not use r13 for tabort_syscall
+    - [powerpc*] powernv : Drop reference added by kset_find_obj()
+    - [powerpc*] sysdev: cpm: fix gpio save_regs functions
+    - [powerpc*] mm: Don't alias user region to other regions below PAGE_OFFSET
+    - [powerpc*] powernv: Fix corrupted PE allocation bitmap on releasing PE
+    - kernfs: don't depend on d_find_any_alias() when generating notifications
+    - pNFS/flexfiles: Fix an Oopsable condition when connection to the DS fails
+    - pNFS: The client must not do I/O to the DS if it's lease has expired
+    - NFSv4.1: Fix Oopsable condition in server callback races
+    - NFSv4.x: Fix a refcount leak in nfs_callback_up_net
+    - nfsd: Close race between nfsd4_release_lockowner and nfsd4_lock
+    - pNFS: Ensure LAYOUTGET and LAYOUTRETURN are properly serialised
+    - NFSv4.1: Fix the CREATE_SESSION slot number accounting
+    - kexec: fix double-free when failing to relocate the purgatory
+    - mm, mempolicy: task->mempolicy must be NULL before dropping final
+      reference
+    - ahci: disable correct irq for dummy ports
+    - audit: fix exe_file access in audit_exe_compare
+    - dm flakey: fix reads to be issued if drop_writes configured
+    - IB/hfi1,IB/qib: Fix qp_stats sleep with rcu read lock held
+    - IB/uverbs: Fix race between uverbs_close and remove_one
+    - IB/hfi1: Reset QSFP on every run through channel tuning
+    - [amd64] mm: fix cache mode of dax pmd mappings
+    - [x86] paravirt: Do not trace _paravirt_ident_*() functions
+    - [x86] AMD: Apply erratum 665 on machines without a BIOS fix
+    - [s390x] KVM: don't use current->thread.fpu.* when accessing registers
+    - [armhf,arm64] kvm-arm: Unmap shadow pagetables properly
+    - [x86] kvm: correctly reset dest_map->vector when restoring LAPIC state
+    - iio: sw-trigger: Fix config group initialization
+    - [armhf] iio: adc: rockchip_saradc: reset saradc controller before
+      programming it
+    - [armhf] iio: adc: ti_am335x_adc: Protect FIFO1 from concurrent access
+    - [armhf] iio: adc: ti_am335x_adc: Increase timeout value waiting for ADC
+      sample
+    - iio:ti-ads1015: fix a wrong pointer definition.
+    - [x86] iio: accel: bmc150: reset chip at init time
+    - iio: fix pressure data output unit in hid-sensor-attributes
+    - iio:core: fix IIO_VAL_FRACTIONAL sign handling
+    - iio: ensure ret is initialized to zero before entering do loop
+    - serial: 8250_mid: fix divide error bug if baud rate is 0
+    - serial: 8250: added acces i/o products quad and octal serial cards
+    - [armhf,arm64] usb: chipidea: udc: fix NULL ptr dereference in
+      isr_setup_status_phase
+    - USB: change bInterval default to 10 ms
+    - devpts: return NULL pts 'priv' entry for non-devpts nodes
+    - cpuset: make sure new tasks conform to the current config of the cpuset
+    - [armhf] dts: rockchip: add reset node for the exist saradc SoCs
+    - [armhf] imx6: add missing BM_CLPCR_BYP_MMDC_CH0_LPM_HS setting for imx6ul
+    - [armhf] imx6: add missing BM_CLPCR_BYPASS_PMIC_READY setting for imx6sx
+    - [armel] kirkwood: ib62x0: fix size of u-boot environment partition
+    - [armhf] OMAP3: hwmod data: Add sysc information for DSI
+    - [armel] dts: kirkwood: Fix PCIe label on OpenRD
+    - [armhf] dts: imx6qdl: Fix SPDIF regression
+    - [armhf] dts: armada-388-clearfog: number LAN ports properly
+    - dm log writes: fix check of kthread_run() return value
+    - dm crypt: fix free of bad values after tfm allocation failure
+    - dm log writes: move IO accounting earlier to fix error path
+    - dm crypt: fix error with too large bios
+    - [armhf] pinctrl: sunxi: fix uart1 CTS/RTS pins at PG on A23/A33
+    - [armhf] memory: omap-gpmc: allow probe of child nodes to fail
+    - [arm64] spinlocks: implement smp_mb__before_spinlock() as smp_mb()
+    - crypto: cryptd - initialize child shash_desc on import
+    - Btrfs: remove root_log_ctx from ctx list before btrfs_sync_log returns
+    - fuse: direct-io: don't dirty ITER_BVEC pages
+    - xhci: fix null pointer dereference in stop command timeout function
+    - brcmfmac: avoid potential stack overflow in brcmf_cfg80211_start_ap()
+    - md-cluster: make md-cluster also can work when compiled into kernel
+    - ath9k: fix using sta->drv_priv before initializing it
+    - ath9k: bring back direction setting in ath9k_{start_stop}
+    - [x86] perf/intel: Fix PEBSv3 record drain
+    - [x86] perf/intel/cqm: Check cqm/mbm enabled state in event init
+    - [x86] perf/amd: Make HW_CACHE_REFERENCES and HW_CACHE_MISSES measure L2
+    - [x86] perf/intel/pt: Fix an off-by-one in address filter configuration
+    - [x86] perf/intel/pt: Fix kernel address filter's offset validation
+    - [x86] perf/intel/pt: Do validate the size of a kernel address filter
+    - Revert "wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel"
+    - sched/core: Fix a race between try_to_wake_up() and a woken up task
+    - ipv6: Don't unset flowi6_proto in ipxip6_tnl_xmit()
+    - efi: Make for_each_efi_memory_desc_in_map() cope with running on Xen
+    - efi/libstub: Allocate headspace in efi_get_memory_map()
+    - efi/libstub: Introduce ExitBootServices helper
+    - efi/libstub: Use efi_exit_boot_services() in FDT
+    - [x86] efi: Use efi_exit_boot_services()
+    - [powerpc,powerpcspe] Fix csum_partial_copy_generic()
+    - [powerpc,powerpcspe] Fix again csum_partial_copy_generic()
+    - [x86] drm/i915: Ignore OpRegion panel type except on select machines
+    - [x86] drm: Only use compat ioctl for addfb2 on X86/IA64
+    - svcauth_gss: Revert 64c59a3726f2 ("Remove unnecessary allocation")
+    - genirq: Provide irq_gc_{lock_irqsave,unlock_irqrestore}() helpers
+    - fix iov_iter_fault_in_readable()
+    - [x86] fix minor infoleak in get_user_ex()
+    - [s390x] get_user() should zero on failure
+    - asm-generic: make get_user() clear the destination on errors
+    - asm-generic: make copy_from_user() zero the destination properly
+    - [alpha,hppa,mips*,powerpc,powerpcspe,sh4] make copy_from_user() zero the
+      destination properly
+
+  [ Ben Hutchings ]
+  * [hppa,mips*,powerpc*] linux-image: Strip debug symbols from vmlinux
+    (really closes: #837588)
+  * [hppa] tracing: Re-enable FTRACE
+  * [powerpc,powerpcspe,ppc64] linux-image: Suppress automatic dbgsym packages
+  * uaccess,uio: Fix ABI changes in 4.7.5
+  * ext4: Fix checksum validation for inodes with small i_extra_isize
+    (Closes: #838544, regression in 4.7.4)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 26 Sep 2016 01:48:21 +0100
+
+linux (4.7.4-2) unstable; urgency=medium
+
+  * [arm64] Revert "arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO"
+    (fixes FTBFS)
+  * [armhf] media: Disable VIDEO_V4L2_SUBDEV_API and VIDEO_OMAP3 to avoid ABI
+    change (fixes FTBFS)
+  * [hppa] Ignore ABI changes caused by disabling CONFIG_FTRACE (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 19 Sep 2016 22:09:42 +0100
+
+linux (4.7.4-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.3
+    - [x86] mm: Disable preemption during CR3 read+write
+    - [x86] uprobes: Fix RIP-relative handling of EVEX-encoded instructions
+    - [x86] platform/uv: Skip UV runtime services mapping in the
+      efi_runtime_disabled case
+    - SUNRPC: Handle EADDRNOTAVAIL on connection failures
+    - SUNRPC: allow for upcalls for same uid but different gss service
+    - [x86] ALSA: hda - Manage power well properly for resume
+    - efi/capsule: Allocate whole capsule into virtual memory
+    - virtio: fix memory leak in virtqueue_add()
+    - vfio/pci: Fix NULL pointer oops in error interrupt setup handling
+    - tracing: Fix tick_stop tracepoint symbols for user export
+    - [x86] perf intel-pt: Fix occasional decoding errors when tracing
+      system-wide
+    - [amd64] libnvdimm, nd_blk: mask off reserved status bits
+    - ACPI: CPPC: Return error if _CPC is invalid on a CPU
+    - ACPI / CPPC: Prevent cpc_desc_ptr points to the invalid data
+    - genirq/msi: Remove unused MSI_FLAG_IDENTITY_MAP
+    - genirq/msi: Make sure PCI MSIs are activated early
+    - usb: ehci: change order of register cleanup during shutdown
+    - usb: devio, do not warn when allocation fails
+    - usb: misc: usbtest: add fix for driver hang
+    - usb: misc: usbtest: usbtest_do_ioctl may return positive integer
+    - usb: dwc3: gadget: increment request->actual once
+    - usb: dwc3: gadget: fix for short pkts during chained xfers
+    - usb: dwc3: gadget: always cleanup all TRBs
+    - usb: hub: Fix unbalanced reference count/memory leak/deadlocks
+    - USB: hub: fix up early-exit pathway in hub_activate
+    - USB: hub: change the locking in hub_activate
+    - USB: validate wMaxPacketValue entries in endpoint descriptors
+    - usb/gadget: fix gadgetfs aio support.
+    - xhci: always handle "Command Ring Stopped" events
+    - usb: xhci: Fix panic if disconnect
+    - xhci: don't dereference a xhci member after removing xhci
+    - USB: serial: fix memleak in driver-registration error path
+    - uprobes: Fix the memcg accounting
+    - perf symbols: Fix annotation of objects with debuginfo files
+    - perf/core: Fix event_function_local()
+    - perf tools mem: Fix -t store option for record command
+    - iommu/dma: Don't put uninitialised IOVA domains
+    - [armhf] iommu/io-pgtable-arm-v7s: Fix attributes when splitting blocks
+    - [armhf,arm64] iommu/arm-smmu: Fix CMDQ error handling
+    - [armhf,arm64] iommu/arm-smmu: Disable stalling faults for all endpoints
+    - [armhf,arm64] iommu/arm-smmu: Don't BUG() if we find aborting STEs with
+      disable_bypass
+    - [x86] pinctrl/amd: Remove the default de-bounce time
+    - i2c: mux: demux-pinctrl: properly roll back when adding adapter fails
+    - [s390x] dasd: fix hanging device after clear subchannel
+    - mac80211: fix purging multicast PS buffer queue
+    - [arm64] kernel: avoid literal load of virtual address with MMU off
+    - [arm64] avoid TLB conflict with CONFIG_RANDOMIZE_BASE
+    - [arm64] dts: rockchip: add reset saradc node for rk3368 SoCs
+    - [arm64] kernel: Fix unmasked debug exceptions when restoring mdscr_el1
+    - of: fix reference counting in of_graph_get_endpoint_by_regs
+    - iio: fix sched WARNING "do not call blocking ops when !TASK_RUNNING"
+    - [x86] drm/amdgpu: Change GART offset to 64-bit
+    - [x86] drm/amdgpu: fix amdgpu_move_blit on 32bit systems
+    - [x86] drm/amdgpu: fix lru size grouping v2
+    - [x86] drm/amdgpu: avoid a possible array overflow
+    - [x86] drm/amdgpu: skip TV/CV in display parsing
+    - [x86] drm/amd/amdgpu: sdma resume fail during S4 on CI
+    - [x86] drm/amd/amdgpu: compute ring test fail during S4 on CI
+    - [x86] drm/amdgpu: record error code when ring test failed
+    - [x86] drm/i915: Fix iboost setting for DDI with 4 lanes on SKL
+    - [x86] drm/i915: Program iboost settings for HDMI/DVI on SKL
+    - [x86] drm/i915: Fix iboost setting for SKL Y/U DP DDI buffer translation
+      entry 2
+    - [x86] drm/i915: Acquire audio powerwell for HD-Audio registers
+    - [x86] drm/i915: fix aliasing_ppgtt leak
+    - [x86] drm/i915/vlv: Make intel_crt_reset() per-encoder
+    - [x86] drm/i915/vlv: Reset the ADPA in vlv_display_power_well_init()
+    - [x86] drm/i915/vlv: Disable HPD in valleyview_crt_detect_hotplug()
+    - [x86] drm/i915: Enable polling when we don't have hpd
+    - [arm64] mfd: cros_ec: Add cros_ec_cmd_xfer_status() helper
+    - [arm64] i2c: cros-ec-tunnel: Fix usage of cros_ec_cmd_xfer()
+    - cdc-acm: fix wrong pipe type on rx interrupt xfers
+    - mpt3sas: Fix resume on WarpDrive flash cards
+    - megaraid_sas: Fix probing cards without io port
+    - dm round robin: do not use this_cpu_ptr() without having preemption
+      disabled
+    - gpio: Fix OF build problem on UM
+    - fs/seq_file: fix out-of-bounds read
+    - soft_dirty: fix soft_dirty during THP split
+    - [amd64] dax: fix device-dax region base
+    - [amd64] mm: silently skip readahead for DAX inodes
+    - btrfs: waiting on qgroup rescan should not always be interruptible
+    - btrfs: properly track when rescan worker is running
+    - btrfs: don't create or leak aliased root while cleaning up orphans
+    - Revert "floppy: fix open(O_ACCMODE) for ioctl-only open"
+    - Input: synaptics-rmi4 - fix register descriptor subpacket map construction
+    - [x86] crypto: qat - fix aes-xts key sizes
+    - USB: avoid left shift by -1
+    - usb: chipidea: udc: don't touch DP when controller is in host mode
+    - USB: fix typo in wMaxPacketSize validation
+    - usb: gadget: udc: core: don't starve DMA resources
+    - USB: serial: mos7720: fix non-atomic allocation in write path
+    - USB: serial: mos7840: fix non-atomic allocation in write path
+    - [x86] staging/lustre/llite: Close atomic_open race with several openers
+    - [x86] staging: comedi: daqboard2000: bug fix board type matching code
+    - [x86] staging: comedi: comedi_test: fix timer race conditions
+    - [x86] staging: comedi: ni_mio_common: fix AO inttrig backwards
+      compatibility
+    - [x86] staging: comedi: ni_mio_common: fix wrong insn_write handler
+    - ACPI / drivers: fix typo in ACPI_DECLARE_PROBE_ENTRY macro
+    - ACPI / drivers: replace acpi_probe_lock spinlock with mutex
+    - ALSA: line6: Remove double line6_pcm_release() after failed acquire.
+    - ALSA: line6: Give up on the lock while URBs are released.
+    - ALSA: line6: Fix POD sysfs attributes segfault
+    - hwmon: (it87) Add missing sysfs attribute group terminator
+    - hwmon: (iio_hwmon) fix memory leak in name attribute
+    - sysfs: correctly handle read offset on PREALLOC attrs
+    - SUNRPC: Fix infinite looping in rpc_clnt_iterate_for_each_xprt
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.4
+    - Revert "floppy: refactor open() flags handling"
+    - apparmor: fix refcount race when finding a child profile
+    - fs: Check for invalid i_uid in may_follow_link()
+    - cred: Reject inodes with invalid ids in set_create_file_as()
+    - ext4: validate that metadata blocks do not overlap superblock
+    - ext4: fix xattr shifting when expanding inodes
+    - ext4: fix xattr shifting when expanding inodes part 2
+    - ext4: properly align shifted xattrs when expanding inodes
+    - ext4: avoid deadlock when expanding inode size
+    - ext4: avoid modifying checksum fields directly during checksum
+      verification
+    - block: Fix race triggered by blk_set_queue_dying()
+    - block: make sure a big bio is split into at most 256 bvecs
+    - cgroup: reduce read locked section of cgroup_threadgroup_rwsem during fork
+    - cdc-acm: added sanity checking for probe()
+    - drm/radeon: fix radeon_move_blit on 32bit systems
+    - drm/radeon: only apply the SS fractional workaround to RS[78]80
+    - drm/atomic: Don't potentially reset color_mgmt_changed on successive
+      property updates.
+    - drm: Reject page_flip for !DRIVER_MODESET
+    - [arm64] drm/msm: fix use of copy_from_user() while holding spinlock
+    - [armhf] drm/vc4: Use drm_free_large() on handles to match its allocation.
+    - [armhf] drm/vc4: Fix overflow mem unreferencing when the binner runs dry.
+    - [armhf] drm/vc4: Fix oops when userspace hands in a bad BO.
+    - xfs: fix superblock inprogress check
+    - timekeeping: Cap array access in timekeeping_debug
+    - xenbus: don't look up transaction IDs for ordinary writes
+    - ovl: proper cleanup of workdir
+    - ovl: don't copy up opaqueness
+    - ovl: remove posix_acl_default from workdir
+    - ovl: listxattr: use strnlen()
+    - ovl: fix workdir creation
+    - mei: me: disable driver on SPT SPS firmware
+    - ubifs: Fix xattr generic handler usage
+    - ubifs: Fix assertion in layout_in_gaps()
+    - bdev: fix NULL pointer dereference
+    - bcache: RESERVE_PRIO is too small by one when prio_buckets() is a power
+      of two.
+    - [mips*/*-malta] irqchip/mips-gic: Implement activate op for device domain
+    - vhost/scsi: fix reuse of &vq->iov[out] in response
+    - [x86] apic: Do not init irq remapping if ioapic is disabled
+    - xprtrdma: Create common scatterlist fields in rpcrdma_mw
+    - crypto: caam - fix IV loading for authenc (giv)decryption
+    - fscrypto: add authorization check for setting encryption policy
+    - fscrypto: only allow setting encryption policy on directories
+    - ALSA: firewire-tascam: accessing to user space outside spinlock
+    - ALSA: fireworks: accessing to user space outside spinlock
+    - ALSA: rawmidi: Fix possible deadlock with virmidi registration
+    - ALSA: timer: fix NULL pointer dereference in read()/ioctl() race
+    - ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE
+    - ALSA: timer: fix NULL pointer dereference on memory allocation failure
+    - ALSA: timer: Fix zero-division by continue of uninitialized instance
+    - scsi: fix upper bounds check of sense key in scsi_sense_key_string()
+    - cpufreq: dt: Add terminate entry for of_device_id tables
+
+  [ Ben Hutchings ]
+  * [arm64] Add cpu_to_fdt32() when setting Secure Boot flag in FDT
+  * [amd64] Enable SIGNED_PE_FILE_VERIFICATION, KEXEC_FILE,
+    KEXEC_VERIFY_SIG, KEXEC_BZIMAGE_VERIFY_SIG
+  * i8042: Revert ABI break in 4.7.3
+  * mm, oom: prevent premature OOM killer invocation for high order request
+    (regression in 4.7)
+  * [arm64] pinctrl: Enable PINCTRL_SINGLE as built-in, needed for HiKey SoCs
+  * [hppa] Disable FTRACE due to huge size cost (Closes: #837588)
+  * [powerpcspe] xmon: Don't use ld on 32-bit (Closes: #836741)
+  * liblockdep-dev: Add dependency on liblockdep<version> (Closes: #837710)
+  * xen-linux-system: Relax dependency on linux-image to allow for version
+    suffix added by linux-signed
+  * [armhf] Enable drivers for Novena: MFD_STMPE as built-in; DRM_PANEL_SIMPLE,
+    MMA8452, TOUCHSCREEN_STMPE, BATTERY_SBS, BACKLIGHT_PWM, SND_SOC_IMX_ES8328
+    as modules (Closes: #837627, thanks to Vagrant Cascadian)
+  * linux-image: postrm: Make failure of rmdir on purge non-fatal
+    (Closes: #836282)
+  * [armhf] Enable drivers and options for OpenPandora console: POWER_AVS_OMAP
+    as built-in; DISPLAY_CONNECTOR_ANALOG_TV, DISPLAY_PANEL_TPO_TD043MTEA1,
+    SENSORS_TWL4030_MADC, VIDEO_OMAP3, BATTERY_TWL4030_MADC, BACKLIGHT_PANDORA,
+    HDQ_MASTER_OMAP as modules; OMAP2_DSS_DSI (Closes: #835893, thanks to
+    Vagrant Cascadian)
+  * bug script: Stop describing TAINT_UNSIGNED_MODULE as expected
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 18 Sep 2016 14:56:01 +0100
+
+linux (4.7.2-1) unstable; urgency=medium
+
+  * New upstream release: https://kernelnewbies.org/Linux_4.7
+    - media: fix airspy usb probe error path (CVE-2016-5400)
+    - libata: LITE-ON CX1-JB256-HP needs lower max_sectors (Closes: #830971)
+    - tcp: make challenge acks less predictable (CVE-2016-5696)
+  * New stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.1
+    - vfs: ioctl: prevent double-fetch in dedupe ioctl (CVE-2016-6516)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.2
+    - [powerpc*] KVM: Book3S HV: Save/restore TM state in H_CEDE (CVE-2016-5412)
+    - audit: fix a double fetch in audit_log_single_execve_arg() (CVE-2016-6136)
+
+  [ Ben Hutchings ]
+  * sched: Enable SCHEDSTATS (Closes: #796674)
+  * Re-enable various config options disabled by name and type changes in 4.7:
+    - nfc: NFC_PN533_USB replaced NFC_PN533
+    - [armhf] dsa: NET_DSA_MV88E6XXX replaced NET_DSA_MV88E6{123,131,171}
+    - [x86] ACPI: ACPI_TABLE_UPGRADE replaced ACPI_INITRD_TABLE_OVERRIDE
+    - rxrpc: Enable RXKAD as part of af_rxrpc module
+    - [x86] 8250: Enable SERIAL_8250_FINTEK as built-in
+  * cgroups: Enable memory controller by default
+  * [armfh] udeb: Add efi-modules
+  * linux-kbuild: Include headers_install.sh and unifdef (Closes: #832359)
+  * udeb: Include cdc_ncm in nic-usb-modules (Closes: #833918)
+  * usbip: Use the locally-installed <linux/usbip.h>
+  * Exclude redundant and unreproducible files from binary packages
+    (Closes: #830268)
+    - usbip: Put all autotools-generated files in the build directory
+    - linux-headers: Exclude all .cmd files
+  * [arm*] Enable SECCOMP (Closes: #833183)
+  * [hppa] Fix automatic selection of cr16 clocksource
+  * [hppa] Fix order of EREFUSED define in errno.h
+  * aufs: Update support patches to aufs4.7-20160822 (Closes: #834764)
+  * [powerpc*] ipmi: Enable IPMI_POWERNV as module (Closes: #833861)
+  * kbuild: Do not use hyphen in exported variable name (Closes: #833561)
+  * fat: Mitigate the lack of UTF-8 case folding by enabling
+    FAT_DEFAULT_UTF8 and setting FAT_DEFAULT_IOCHARSET to "ascii"
+    (Closes: #833238)
+  * [arm64] Add support for securelevel and Secure Boot (Closes: #831827,
+    thanks to Linn Crosetto):
+    - efi: Disable secure boot if shim is in insecure mode
+    - Add kernel config option to set securelevel when in Secure Boot mode
+    - Enable EFI_SECURE_BOOT_SECURELEVEL
+  * tcp: fix use after free in tcp_xmit_retransmit_queue() (CVE-2016-6828)
+  * aacraid: Check size values after double-fetch from user (CVE-2016-6480)
+  * liblockdep: Move dummy definition of prandom_u32() to fix missing
+    declaration
+  * debian/rules.real: Avoid error message when usbip's config.h doesn't exist
+
+  [ Martin Michlmayr ]
+  * [armhf] Enable MMC_SDHCI_IPROC and HW_RANDOM_BCM2835 for BCM2835.
+  * [arm64] Add USB support for NVIDIA Jetson TX1 Developer Kit:
+    - pinctrl: max77620: add pincontrol driver for MAX77620/MAX20024
+    - gpio: max77620: add gpio driver for MAX77620/MAX20024
+    - gpio: max77620: Configure interrupt trigger level
+    - gpio: max77620: use the new open drain callback
+    - gpio: max77620: get gpio value based on direction
+    - arm64: tegra: Add PMIC support on Jetson TX1
+    - arm64: tegra: p2597: Add SDMMC power supplies
+    - arm64: tegra: Add DSI panel on Jetson TX1
+    - arm64: tegra: Add Tegra210 XUSB pad controller
+    - arm64: tegra: Add Tegra210 XUSB controller
+    - arm64: tegra: Enable debug serial on Jetson TX1
+    - arm64: tegra: Enable XUSB controller on Jetson TX1
+    - arm64: tegra: Correct Tegra210 XUSB mailbox interrupt
+  * [arm64] Enable REGULATOR_FIXED_VOLTAGE.
+  * [arm64] Enable ARM64_ERRATUM_834220.
+  * [arm64] Build in SERIAL_TEGRA.
+  * [arm64] Enable REGULATOR_PWM, DRM_PANEL_SIMPLE, BACKLIGHT_GENERIC
+    and BACKLIGHT_LP855X for Jetson TX1.
+  * [arm64] Enable BATTERY_BQ27XXX, MFD_CROS_EC_I2C, I2C_CROS_EC_TUNNEL
+    for Google Pixel C.
+  * [arm64] Enable more Qualcomm options: PINCTRL_QCOM_SPMI_PMIC,
+    SPMI_MSM_PMIC_ARB, QCOM_SPMI_IADC, QCOM_SPMI_VADC, MFD_SPMI_PMIC,
+    REGULATOR_QCOM_SPMI, QCOM_SPMI_TEMP_ALARM, CHARGER_QCOM_SMBB,
+    USB_CHIPIDEA, USB_HSIC_USB3503, RTC_DRV_PM8XXX, EXTCON_USB_GPIO,
+    QCOM_COINCELL, and INPUT_PM8941_PWRKEY.
+
+  [ Uwe Kleine-König ]
+  * Fix perf to be able to find debug info based on build-id. (Closes:
+    #833096)
+
+  [ Nicolas LE CAM ]
+  * [amd64] Suggest grub-efi-amd64 instead of grub-efi dummy transitionnal
+    package (Closes: #835459)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 28 Aug 2016 15:56:10 +0100
+
+linux (4.7~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Aurelien Jarno ]
+  * [mipsel] Remove loongson-2e and loongson-2f flavours (Closes: #827790).
+  * [mipsel/4kc-malta, mipsel/5kc-malta] Build for R2 ISA.
+
+  [ Martin Michlmayr ]
+  * [armhf, arm64] Enable DRM_TEGRA_STAGING.
+
+  [ Ben Hutchings ]
+  * [x86] KASLR, power: Remove x86 hibernation restrictions
+  * fanotify: Enable FANOTIFY_ACCESS_PERMISSIONS (Closes: #690737)
+    - Warn and taint kernel if this feature is actually used
+  * Define Auto-Built-Package field when running dpkg-gencontrol, as dpkg-source
+    doesn't like to see it in debian/control
+  * debian/lib/python/debian_linux/debian.py: Handle packages with only short
+    descriptions
+  * Change names and descriptions of linux-image debug symbol packages to match
+    debhelper
+
+  [ Bastian Blank ]
+  * Mark debug symbols packages to move them into the debug archive.
+  * Build debug symbols for all images.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 14 Jul 2016 13:35:22 +0100
+
+linux (4.7~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [armel] Disable module signing for all flavours (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 21 Jun 2016 00:41:23 +0100
+
+linux (4.7~rc3-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * bug script: Put binary package name and version in the info file so
+    linux-signed can easily replace them
+  * Move merge_packages function from debian/bin/gencontrol.py to
+    gencontrol module
+  * udeb: Drop packages for modules that will later be signed
+  * linux-image: Add '-unsigned' suffix to packages with modules that will
+    later be signed
+    - Add Conflicts and Replaces relations to signed packages (Closes: #827618)
+  * [rt] Disable until it is updated for 4.7 or later
+  * cpupower: Bump soname version and rename library package accordingly
+  * debian/rules.d/Makefile: Override architecture detection when building
+    userland headers
+  * linux-cpupower: Define PACKAGE_BUGREPORT to refer to reportbug, not upstream
+  * debian/README.source: Document the supported build profiles
+  * debian/control: Fix build-dependencies for cross-building
+    - Add workaround for libdpkg-perl bugs #827628, #827633
+  * Add support for the nopython build profile, disabling the linux-perf package
+  * Fix build rules for userland tools to support cross-building
+
+  [ Martin Michlmayr ]
+  * [armhf, arm64] Enable PHY_TEGRA_XUSB and USB_XHCI_TEGRA.
+  * [arm64] Enable MAX77620 and PCA9539 which are required by Jetson TX1.
+  * [arm64] Enable TEGRA210_ADMA.
+  * [arm64] Enable THERMAL.
+  * [armhf] Enable TEGRA_SOCTHERM.
+  * [armhf] Enable SPI_TEGRA114.
+  * [arm64] Enable more QCOM options (QCOM_SMP2P, QCOM_SMSM, QCOM_WCNSS_CTRL,
+    PHY_QCOM_UFS, QCOM_QFPROM).
+
+  [ Aurelien Jarno ]
+  * [ppc64*] Enable SPAPR_TCE_IOMMU, VFIO and VFIO_PCI (Closes: #826367).
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 18 Jun 2016 23:50:39 +0100
+
+linux (4.6.4-1) unstable; urgency=medium
+
+  * Team upload.
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.4
+    - net_sched: fix pfifo_head_drop behavior vs backlog
+    - act_ipt: fix a bind refcnt leak
+    - net: Don't forget pr_fmt on net_dbg_ratelimited for CONFIG_DYNAMIC_DEBUG
+    - sit: correct IP protocol used in ipip6_err
+    - esp: Fix ESN generation under UDP encapsulation
+    - netem: fix a use after free
+    - ipmr/ip6mr: Initialize the last assert time of mfc entries.
+    - Bridge: Fix ipv6 mc snooping if bridge has no ipv6 address
+    - sock_diag: do not broadcast raw socket destruction
+    - bpf, perf: delay release of BPF prog after grace period
+    - neigh: Explicitly declare RCU-bh read side critical section in neigh_xmit()
+    - AX.25: Close socket connection on session completion
+    - [powerpc] crypto: vmx - Increase priority of aes-cbc cipher
+    - crypto: user - re-add size check for CRYPTO_MSG_GETALG
+    - USB: uas: Fix slave queue_depth not being set
+    - usb: quirks: Fix sorting
+    - usb: quirks: Add no-lpm quirk for Acer C120 LED Projector
+    - [armhf] usb: musb: only restore devctl when session was set in backup
+    - [armhf] usb: musb: Stop bulk endpoint while queue is rotated
+    - [armhf] usb: musb: Ensure rx reinit occurs for shared_fifo endpoints
+    - [armhf] usb: musb: host: correct cppi dma channel for isoch transfer
+    - xhci: Cleanup only when releasing primary hcd
+    - usb: xhci-plat: properly handle probe deferral for devm_clk_get()
+    - USB: xhci: Add broken streams quirk for Frescologic device id 1009
+    - xhci: Fix handling timeouted commands on hosts in weird states.
+    - USB: mos7720: delete parport
+    - usb: gadget: fix spinlock dead lock in gadgetfs
+    - [arm64, armhf] usb: host: ehci-tegra: Grab the correct UTMI pads reset
+    - usb: dwc3: exynos: Fix deferred probing storm.
+
+  [ Uwe Kleine-König ]
+  * Cherry pick patches for rtc-s35390a from next. (Closes: #794266)
+
+  [ Salvatore Bonaccorso ]
+  * apparmor: fix oops, validate buffer size in apparmor_setprocattr()
+    (CVE-2016-6187)
+
+  [ Ben Hutchings ]
+  * bridge: Fix ABI change in 4.6.4
+  * [rt] Update to 4.6.4-rt6 (no functional change)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 18 Jul 2016 21:57:31 +0200
+
+linux (4.6.3-1) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3
+    - scsi_lib: correctly retry failed zero length REQ_TYPE_FS commands
+    - scsi: Add QEMU CD-ROM to VPD Inquiry Blacklist
+    - netlink: Fix dump skb leak/double free
+    - tipc: fix nametable publication field in nl compat
+    - switchdev: pass pointer to fib_info instead of copy
+    - tuntap: correctly wake up process during uninit
+    - bpf: Use mount_nodev not mount_ns to mount the bpf filesystem
+    - udp: prevent skbs lingering in tunnel socket queues
+    - uapi glibc compat: fix compilation when !__USE_MISC in glibc
+    - bpf, inode: disallow userns mounts
+    - [armhf] net: mvneta: Fix lacking spinlock initialization
+    - net: hwbm: Fix unbalanced spinlock in error case
+    - sfc: on MC reset, clear PIO buffer linkage in TXQs
+    - team: don't call netdev_change_features under team->lock
+    - net: alx: use custom skb allocator
+    - net: stmmac: Fix incorrect memcpy source memory
+    - vxlan: Accept user specified MTU value when create new vxlan link
+    - net: nps_enet: Disable interrupts before napi reschedule
+    - bpf, trace: use READ_ONCE for retrieving file ptr
+    - tcp: record TLP and ER timer stats in v6 stats
+    - bridge: Don't insert unnecessary local fdb entry on changing mac address
+    - l2tp: fix configuration passed to setup_udp_tunnel_sock()
+    - ipv6: Skip XFRM lookup if dst_entry in socket cache is valid
+    - [armhf,arm64] KVM: vgic-v2: Clear all dirty LRs
+    - [armhf,arm64] KVM: vgic-v3: Clear all dirty LRs
+    - [x86] KVM: fix OOPS after invalid KVM_SET_DEBUGREGS
+    - KVM: irqfd: fix NULL pointer dereference in kvm_irq_map_gsi
+    - [arm*] drivers/perf: arm_pmu: Defer the setting of __oprofile_cpu_pmu
+    - [x86] ALSA: hda - Add PCI ID for Kabylake
+    - [x86] ALSA: hda - Fix headset mic detection problem for Dell machine
+    - ALSA: hda/realtek - ALC256 speaker noise issue
+    - ALSA: hda/realtek - Add support for new codecs ALC700/ALC701/ALC703
+    - [x86] ALSA: hda/realtek: Add T560 docking unit fixup
+    - [armhf] fix PTRACE_SETVFPREGS on SMP systems
+    - gpio: bail out silently on NULL descriptors
+    - gpiolib: Fix NULL pointer deference
+    - gpiolib: Fix unaligned used of reference counters
+    - [s390x] bpf: fix recache skb->data/hlen for skb_vlan_push/pop
+    - [s390x] bpf: reduce maximum program size to 64 KB
+    - [armhf,arm64] irqchip/gic-v3: Fix ICC_SGI1R_EL1.INTID decoding mask
+    - [x86] crypto: ccp - Fix AES XTS error for request sizes above 4096
+    - [arm64] Provide "model name" in /proc/cpuinfo for PER_LINUX32 tasks
+    - [arm64] mm: always take dirty state from new pte in ptep_set_access_flags
+    - [powerpc*] pseries/eeh: Handle RTAS delay requests in configure_bridge
+    - [powerpc*] Fix definition of SIAR and SDAR registers
+    - [powerpc*] Use privileged SPR number for MMCR2
+    - [powerpc*] pseries: Add POWER8NVL support to
+      ibm,client-architecture-support call
+    - [powerpc*] mm/hash: Fix the reference bit update when handling hash fault
+    - [hppa] Fix pagefault crash in unaligned __get_user() call
+    - memcg: add RCU locking around css_for_each_descendant_pre() in
+      memcg_offline_kmem()
+    - wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel
+    - mm: thp: broken page count after commit aa88b68c3b1d
+    - [x86] entry/traps: Don't force in_interrupt() to return true in IST
+      handlers
+    - fix d_walk()/non-delayed __d_free() race
+    - [sparc64] Reduce TLB flushes during hugepte changes
+    - [sparc64] Take ctx_alloc_lock properly in hugetlb_setup().
+    - [sparc64] Harden signal return frame checks.
+    - [sparc64] Fix return from trap window fill crashes.
+    - drm/core: Do not preserve framebuffer on rmfb, v4.
+    - [x86] Revert "drm/i915: Exit cherryview_irq_handler() after one pass"
+    - gpio: make sure gpiod_to_irq() returns negative on NULL desc
+  * [powerpc*] tm: Always reclaim in start_thread() for exec() class syscalls
+    (CVE-2016-5828)
+
+  [ Salvatore Bonaccorso ]
+  * HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
+    (CVE-2016-5829)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 04 Jul 2016 20:10:24 +0200
+
+linux (4.6.2-2) unstable; urgency=medium
+
+  * [mips*] Fix ABI changes in 4.6.2
+  * [rt] Update to 4.6.2-rt5:
+    - mm/memcontrol: mem_cgroup_migrate() - replace another local_irq_disable()
+      w. local_lock_irq()
+  * KEYS: potential uninitialized variable (CVE-2016-4470)
+  * percpu: fix synchronization between chunk->map_extend_work and chunk
+    destruction (CVE-2016-4794)
+  * percpu: fix synchronization between synchronous map extension and
+    chunk destruction (CVE-2016-4794)
+  * netfilter: x_tables: Fix parsing of IPT_SO_SET_REPLACE blobs
+    (CVE-2016-4997, CVE-2016-4998)
+    - don't move to non-existent next rule
+    - validate targets of jumps
+    - add and use xt_check_entry_offsets
+    - kill check_entry helper
+    - assert minimum target size
+    - add compat version of xt_check_entry_offsets
+    - check standard target size too
+    - check for bogus target offset
+    - validate all offsets and sizes in a rule
+    - don't reject valid target size on some
+    - arp_tables: simplify translate_compat_table args
+    - ip_tables: simplify translate_compat_table args
+    - ip6_tables: simplify translate_compat_table args
+    - xt_compat_match_from_user doesn't need a retval
+    - do compat validation via translate_table
+    - introduce and use xt_copy_counters_from_user
+  * Ignore ABI change in x_tables
+  * nfsd: check permissions when setting ACLs (CVE-2016-1237)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 25 Jun 2016 11:22:27 +0200
+
+linux (4.6.2-1) unstable; urgency=medium
+
+  * Team upload.
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.2
+    - f2fs: fix deadlock when flush inline data
+    - [mips*] math-emu: Fix jalr emulation when rd == $0
+    - [mips*] Avoid using unwind_stack() with usermode
+    - [mips*] Fix siginfo.h to use strict posix types
+    - [mips*] Fix uapi include in exported asm/siginfo.h
+    - [mips*] Fix watchpoint restoration
+    - [mips*] Flush highmem pages in __flush_dcache_page
+    - [mips*] Handle highmem pages in __update_cache
+    - [mips*] Sync icache & dcache in set_pte_at
+    - [mips*] Reserve nosave data for hibernation
+    - [mips*el/loongson-3] Reserve 32MB for RS780E integrated GPU
+    - [mips*] Use copy_s.fmt rather than copy_u.fmt
+    - [mips*] Prevent "restoration" of MSA context in non-MSA kernels
+    - [mips*] ptrace: Fix FP context restoration FCSR regression
+    - [mips*] ptrace: Prevent writes to read-only FCSR bits
+    - [mips*] lib: Mark intrinsics notrace
+    - [mips*] VDSO: Build with `-fno-strict-aliasing'
+    - affs: fix remount failure when there are no options changed
+    - ASoC: ak4642: Enable cache usage to fix crashes on resume
+    - Input: uinput - handle compat ioctl for UI_SET_PHYS
+    - Input: xpad - move pending clear to the correct location
+    - Input: xpad - prevent spurious input from wired Xbox 360 controllers
+    - [armhf] sun4i: dt: Enable dram gate 5 (tve0 clock) for simplefb TV output
+    - [armhf] sun7i: dt: Enable dram gate 5 (tve0 clock) for simplefb TV output
+    - [armhf] mvebu: fix GPIO config on the Linksys boards
+    - [armhf] dts: exynos: Add interrupt line to MAX8997 PMIC on
+      exynos4210-trats
+    - ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
+    - ath10k: fix firmware assert in monitor mode
+    - ath10k: fix rx_channel during hw reconfigure
+    - ath10k: fix kernel panic, move arvifs list head init before htt init
+    - ath5k: Change led pin configuration for compaq c700 laptop
+    - [armhf] hwrng: exynos - Fix unbalanced PM runtime put on timeout
+      error path
+    - rtlwifi: Fix logic error in enter/exit power-save mode
+    - rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in
+      rtl_pci_reset_trx_ring
+    - Revert "lpfc: Delete unnecessary checks before the function call
+      mempool_destroy"
+    - aacraid: Start adapter after updating number of MSIX vectors
+    - aacraid: Relinquish CPU during timeout wait
+    - aacraid: Fix for aac_command_thread hang
+    - aacraid: Fix for KDUMP driver hang
+    - regulator: Try to resolve regulators supplies on registration
+    - hwmon: (ads7828) Enable internal reference
+    - [x86] mfd: intel_quark_i2c_gpio: Remove clock tree on error path
+    - [x86] mfd: intel-lpss: Save register context on suspend
+    - [x86] mfd: intel_soc_pmic_core: Terminate panel control GPIO lookup
+      table correctly
+    - PM / Runtime: Fix error path in pm_runtime_force_resume()
+    - cpuidle: Indicate when a device has been unregistered
+    - cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
+    - [armhf] clk: bcm2835: Fix PLL poweron
+    - [armhf] clk: bcm2835: pll_off should only update CM_PLL_ANARST
+    - [armhf] clk: bcm2835: divider value has to be 1 or more
+    - [armhf] clk: bcm2835: correctly enable fractional clock support
+    - [armhf] pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
+    - PCI: Disable all BAR sizing for devices with non-compliant BARs
+    - media: v4l2-compat-ioctl32: fix missing reserved field copy in
+      put_v4l2_create32
+    - PKCS#7: fix missing break on OID_sha224 case
+    - mm: use phys_addr_t for reserve_bootmem_region() arguments
+    - mm/compaction.c: fix zoneindex in kcompactd()
+    - wait/ptrace: assume __WALL if the child is traced
+    - batman-adv: Fix double neigh_node_put in batadv_v_ogm_route_update
+    - [powerpc*] book3s64: Fix branching to OOL handlers in relocatable kernel
+    - [powerpc*] eeh: Don't report error in eeh_pe_reset_and_recover()
+    - [powerpc*] Revert "powerpc/eeh: Fix crash in eeh_add_device_early()
+      on Cell"
+    - [powerpc*] eeh: Restore initial state in eeh_pe_reset_and_recover()
+    - xen/events: Don't move disabled irqs
+    - xen: use same main loop for counting and remapping pages
+    - sunrpc: fix stripping of padded MIC tokens
+    - [x86] drm/gma500: Fix possible out of bounds read
+    - [x86] drm/vmwgfx: Kill some lockdep warnings
+    - [x86] drm/amdgpu: use drm_mode_vrefresh() rather than mode->vrefresh
+    - [x86] drm/amdgpu: Fix hdmi deep color support.
+    - [x86] drm/i915/fbdev: Fix num_connector references in
+      intel_fb_initial_config()
+    - drm/fb_helper: Fix references to dev->mode_config.num_connector
+    - [x86] drm/i915: Discard previous atomic state on resume if connectors
+      change
+    - drm/atomic: Verify connector->funcs != NULL when clearing states
+    - Bluetooth: 6lowpan: Fix memory corruption of ipv6 destination address
+    - [x86] drm/i915/psr: Try to program link training times correctly
+    - [x86] drm/i915: Respect DP++ adaptor TMDS clock limit
+    - [x86] drm/i915: Enable/disable TMDS output buffers in DP++ adaptor
+      as needed
+    - [x86] drm/i915: Don't leave old junk in ilk active watermarks on readout
+    - [x86] drm/i915: Fix watermarks for VLV/CHV
+    - [armhf] drm/imx: Match imx-ipuv3-crtc components using device node in
+      platform data
+    - [x86] drm/i915: Pass the correct crtc state to .update_plane()
+    - ext4: fix data exposure after a crash
+    - ext4: fix hang when processing corrupted orphaned inode list
+    - ext4: clean up error handling when orphan list is corrupted
+    - ext4: fix check of dqget() return value in ext4_ioctl_setproject()
+    - ext4: fix oops on corrupted filesystem
+    - ext4: address UBSAN warning in mb_find_order_for_block()
+    - nfs: avoid race that crashes nfs_init_commit
+    - PM / sleep: Handle failures in device_suspend_late() consistently
+    - mm: thp: avoid false positive VM_BUG_ON_PAGE in page_move_anon_rmap()
+    - xfs: disallow rw remount on fs with unknown ro-compat features
+    - xfs: Don't wrap growfs AGFL indexes
+    - xfs: remove xfs_fs_evict_inode()
+    - xfs: xfs_iflush_cluster fails to abort on error
+    - xfs: fix inode validity check in xfs_iflush_cluster
+    - xfs: skip stale inodes in xfs_iflush_cluster
+    - [armhf] drm: msm: remove unused variable
+    - IB/hfi1: Fix hard lockup due to not using save/restore spin lock
+    - regulator: Fix deadlock during regulator registration
+
+  [ Ben Hutchings ]
+  * [armel,armhf,sh4] linux-image: Do not suggest fdutils
+  * liblockdep: Reduce MAX_LOCK_DEPTH to avoid overflowing lock_chain::depth
+  * liblockdep: Fix 'unused value' warnings
+  * liblockdep: Fix 'set but not used' warnings
+  * liblockdep: Fix 'defined but not used' warning for init_utsname()
+
+  [ Salvatore Bonaccorso ]
+  * Stack overflow via ecryptfs and /proc/$pid/environ (CVE-2016-1583)
+    - proc: prevent stacking filesystems on top
+    - ecryptfs: forbid opening files without mmap handler
+    - sched: panic on corrupted stack end
+  * tipc: fix an infoleak in tipc_nl_compat_link_dump (CVE-2016-5243)
+  * rds: fix an infoleak in rds_inc_info_copy (CVE-2016-5244)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 15 Jun 2016 21:32:54 +0200
+
+linux (4.6.1-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.1
+
+  [ Ben Hutchings ]
+  * [mips*r6*] Disable these architectures until dak recognises them as valid
+    in the control file
+  * linux-image: Rewrite maintainer scripts in shell, using the new
+    linux-update-symlinks and linux-check-removal commands
+    (Closes: #692333, #815850).  Drop support for minimal_swap, no_symlinks,
+    use_hard_links and *_hook parameters in  /etc/kernel-img.conf
+    (Closes: #730073).  Remove now-redundant debconf templates.
+  * linux-image: postrm: Update default symlinks before running hook scripts
+  * linux-image: Make a newly installed kernel the default if the package
+    was previously removed
+  * mtd: Disable slram and phram when securelevel is enabled
+  * debian/patches/features/all/rt/genpatch.py: Use Python 3
+  * debian/patches/features/all/rt/genpatch.py: Fix mapping of -rt version to
+    upstream version
+  * debian/patches/features/all/rt/genpatch.py: Use upstream tarball directly
+  * debian/patches/features/all/rt/genpatch.py: Use stable URLs in patch Origin
+    headers
+  * [rt] Update to 4.6.1-rt3:
+    - trace: correct off by one while recording the trace-event
+    - sched,preempt: Fix preempt_count manipulations
+    - kernel/rtmutex: only warn once on a try lock from bad
+    - locallock: add local_lock_on()
+    - kernel/printk: Don't try to print from IRQ/NMI region
+    - mm: perform lru_add_drain_all() remotely
+  * debian/control: Drop obsolete versioned Depends and Breaks
+  * linux-libc-dev: Drop obsolete Replaces/Conflicts with linux-kernel-headers
+  * debian/control: Update policy version to 3.9.8; no changes required
+  * Disable MODULE_SIG for architectures not supported by linux-signed
+  * Set ABI to 1
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 06 Jun 2016 18:13:57 +0100
+
+linux (4.6-1~exp2) experimental; urgency=medium
+
+  [ Ben Hutchings ]
+  * [tilegx] Build a linux-libc-dev package (Closes: #824524; thanks to
+    Helmut Grohne)
+  * [tilegx] linux-libc-dev: Install <arch/*> headers in arch-specific
+    directory (Closes: #823632; thanks to Helmut Grohne)
+  * [rt] Update to 4.6-rc7-rt1 and re-enable
+    - Override SYSTEM_TRUSTED_KEYS to work from the source_rt directory
+  * Fold debian/config/README into debian/README.source
+  * debian/README.source: Rewrite and expand explanation of kernel config file
+    construction
+  * aufs: Update support patches to aufs4.6-20160523
+    - mmap: Fix use-after-free in remap_file_pages(2)
+  * [mips*] Change NFS and various storage and network drivers from built-in
+    to modules
+  * 8139too: Use same configuration on all architectures: enable
+    8139TOO_TUNE_TWISTER, 8139TOO_8129 and disable 8139TOO_PIO
+  * [mipsn32{,r6}{,el}] Build linux-libc-dev and tools packages
+  * [mips{,64}r6{,el}] Add kernel flavours for the Malta platform; build
+    linux-libc-dev and tools packages (Closes: #825024; thanks to YunQiang Su)
+  * [mips*/*-malta] udeb: Add ata-modules package
+  * linux-image: Stop setting $STEM in environment for maintainer script hooks
+  * linux-image: Add workaround for bug #817083 in debconf
+  * linux-image: prerm: Allow removal of running kernel if we can't ask debconf
+    questions (Closes: #825423)
+  * linux-image: prerm: Ignore version of running kernel inside a container or
+    chroot
+  * [s390] udeb: Drop all packages, since s390 no longer has its own kernel
+  * udeb: Drop packages for modules that will later be signed; these packages
+    will be taken over by src:linux-signed
+
+  [ Aurelien Jarno ]
+  * [mips64{,el}] Set CPU to MIPS64 R2.
+  * [mips] Set CPU to MIPS32/64 R2.
+
+  [ Martin Michlmayr ]
+  * [armhf] Enable more NVIDIA Tegra options (TEGRA_IOMMU_SMMU,
+    ARM_TEGRA_DEVFREQ, SND_SOC_TEGRA_*).
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 30 May 2016 04:44:45 +0100
+
+linux (4.6-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_4.6
+
+  [ Ben Hutchings ]
+  * Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing",
+    reverted upstream in 4.6
+  * [arm64] Enable RANDOMIZE_BASE (kASLR)
+  * [armhf] dsa: Enable NET_DSA_MV88E6123 as module, replacing
+    NET_DSA_MV88E6123_61_65
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 17 May 2016 02:39:47 +0100
+
+linux (4.6~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [hppa] Enable MLONGCALLS (fixes FTBFS)
+  * [alpha] fs: Disable BINFMT_EM86 (obsoleted by binfmt_misc; fixes FTBFS)
+
+  [ Aurelien Jarno ]
+  * [mips*/octeon] Enable EDAC, EDAC_MM_EDAC, EDAC_OCTEON_L2C,
+    EDAC_OCTEON_LMC, EDAC_OCTEON_PC, EDAC_OCTEON_PCI.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 09 May 2016 03:39:32 +0100
+
+linux (4.6~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [armhf] Enable EFI, RTC_DRV_EFI
+  * Update config for renaming/removal/replacement/merging/splitting of various
+    symbols
+  * *lockdep*,linux-perf: Remove '-rcN' from installation paths
+
+  [ Martin Michlmayr ]
+  * [armel, armhf] Use new Marvell CESA driver.
+  * [arm64] Enable support for NVIDIA Tegra.
+  * [arm64] udeb: Create fb-modules.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 29 Apr 2016 10:40:36 +0200
+
+linux (4.6~rc3-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update support patches to aufs4.x-rcN-20160328
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 14 Apr 2016 23:55:15 +0100
+
+linux (4.5.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5
+    - decnet: Do not build routes to devices without decnet private data.
+    - route: do not cache fib route info on local routes with oif
+    - packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface
+    - net: sched: do not requeue a NULL skb
+    - bpf/verifier: reject invalid LD_ABS | BPF_DW instruction
+    - cdc_mbim: apply "NDP to end" quirk to all Huawei devices
+    - soreuseport: fix ordering for mixed v4/v6 sockets
+    - net: use skb_postpush_rcsum instead of own implementations
+    - vlan: pull on __vlan_insert_tag error path and fix csum correction
+    - openvswitch: Orphan skbs before IPv6 defrag
+    - openvswitch: use flow protocol when recalculating ipv6 checksums
+    - net/mlx5_core: Fix soft lockup in steering error flow
+    - net/mlx5e: Device's mtu field is u16 and not int
+    - net/mlx5e: Fix minimum MTU
+    - net/mlx5e: Use vport MTU rather than physical port MTU
+    - ipv4/fib: don't warn when primary address is missing if in_dev is dead
+    - net/mlx4_en: fix spurious timestamping callbacks
+    - net: Implement net_dbg_ratelimited() for CONFIG_DYNAMIC_DEBUG case
+    - gre: do not pull header in ICMP error processing
+    - net_sched: introduce qdisc_replace() helper
+    - net_sched: update hierarchical backlog too
+    - sch_htb: update backlog as well
+    - sch_dsmark: update backlog as well
+    - netem: Segment GSO packets on enqueue
+    - ipv6/ila: fix nlsize calculation for lwtunnel
+    - net/mlx4_en: Fix endianness bug in IPV6 csum calculation
+    - [x86] VSOCK: do not disconnect socket when peer has shutdown SEND only
+    - net: bridge: fix old ioctl unlocked net device walk
+    - bridge: fix igmp / mld query parsing
+    - net: fix a kernel infoleak in x25 module (CVE-2016-4580)
+    - net: thunderx: avoid exposing kernel stack
+    - tcp: refresh skb timestamp at retransmit time
+    - net/route: enforce hoplimit max value
+    - ocfs2: revert using ocfs2_acl_chmod to avoid inode cluster lock hang
+    - ocfs2: fix posix_acl_create deadlock
+    - zsmalloc: fix zs_can_compact() integer overflow
+    - mm: thp: calculate the mapcount correctly for THP pages during WP faults
+    - [x86] crypto: qat - fix invalid pf2vf_resp_wq logic
+    - crypto: testmgr - Use kmalloc memory for RSA input
+    - ALSA: usb-audio: Quirk for yet another Phoenix Audio devices (v2)
+    - ALSA: usb-audio: Yet another Phoneix Audio device quirk
+    - ALSA: hda - Fix subwoofer pin on ASUS N751 and N551
+    - ALSA: hda - Fix white noise on Asus UX501VW headset
+    - ALSA: hda - Fix broken reconfig
+    - [armhf] spi: spi-ti-qspi: Fix FLEN and WLEN settings if bits_per_word is
+      overridden
+    - [armhf] spi: spi-ti-qspi: Handle truncated frames properly
+    - perf diff: Fix duplicated output column
+    - perf/core: Disable the event on a truncated AUX record
+    - vfs: rename: check backing inode being equal
+    - workqueue: fix rebind bound workers warning
+    - [armhf] regulator: s2mps11: Fix invalid selector mask and voltages
+      for buck9
+    - [armhf] regulator: axp20x: Fix axp22x ldo_io voltage ranges
+    - atomic_open(): fix the handling of create_error
+    - qla1280: Don't allocate 512kb of host tags
+    - tools lib traceevent: Do not reassign parg after collapse_tree()
+    - [x86] drm/i915: Update CDCLK_FREQ register on BDW after changing cdclk
+      frequency
+    - drm/radeon: fix PLL sharing on DCE6.1 (v2)
+    - [x86] drm/i915: Bail out of pipe config compute loop on LPT
+    - [x86] Revert "drm/i915: start adding dp mst audio"
+    - [x86] drm/i915/bdw: Add missing delay during L3 SQC credit programming
+    - drm/radeon: fix DP link training issue with second 4K monitor
+    - drm/radeon: fix DP mode validation
+    - [x86] drm/amdgpu: fix DP mode validation
+    - btrfs: reada: Fix in-segment calculation for reada
+    - Btrfs: fix truncate_space_check
+    - btrfs: remove error message from search ioctl for nonexistent tree
+    - btrfs: change max_inline default to 2048
+    - Btrfs: fix unreplayable log after snapshot delete + parent dir fsync
+    - Btrfs: fix file loss on log replay after renaming a file and fsync
+    - Btrfs: fix extent_same allowing destination offset beyond i_size
+    - Btrfs: fix deadlock between direct IO reads and buffered writes
+    - Btrfs: fix race when checking if we can skip fsync'ing an inode
+    - Btrfs: do not collect ordered extents when logging that inode exists
+    - btrfs: csum_tree_block: return proper errno value
+    - btrfs: do not write corrupted metadata blocks to disk
+    - Btrfs: fix invalid reference in replace_path
+    - btrfs: handle non-fatal errors in btrfs_qgroup_inherit()
+    - btrfs: fallback to vmalloc in btrfs_compare_tree
+    - Btrfs: don't use src fd for printk
+    - btrfs: Reset IO error counters before start of device replacing
+
+  [ Salvatore Bonaccorso ]
+  * tipc: check nl sock before parsing nested attributes (CVE-2016-4951)
+
+  [ Ben Hutchings ]
+  * aufs: Update support patches to aufs4.5-20160523
+    - mmap: Fix use-after-free in remap_file_pages(2)
+  * Revert "stmmac: Fix 'eth0: No PHY found' regression" (Closes: #823493)
+  * [x86] kvm:vmx: more complete state update on APICv on/off (CVE-2016-4440)
+  * USB: usbfs: fix potential infoleak in devio (CVE-2016-4482)
+  * ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (CVE-2016-4569)
+  * ALSA: timer: Fix leak in events via snd_timer_user_ccallback or
+    snd_timer_user_tinterrupt (CVE-2016-4578)
+  * dwc3-exynos: Fix deferred probing storm (Closes: #823552; thanks to
+    Steinar H. Gunderson)
+  * Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing",
+    reverted upstream in 4.5.5
+
+  [ Roger Shimizu ]
+  * [armhf] Enable SENSORS_PWM_FAN / PWM_SAMSUNG as module, as recommended by
+    Steinar H. Gunderson. (Closes: #824941)
+  * [armhf] For Odroid-U3 (Exynos4) support, enable ARCH_EXYNOS4 / MFD_MAX77686
+    / RTC_DRV_MAX77686 as built-in, and COMMON_CLK_MAX77686
+    / REGULATOR_MAX77686 / MMC_SDHCI_S3C as module. Thanks to
+    Vagrant Cascadian. (Closes: #825139)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 29 May 2016 22:21:11 +0100
+
+linux (4.5.4-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.4
+    - RDMA/iw_cxgb4: Fix bar2 virt addr calculation for T4 chips
+    - net/mlx5_core: Fix caching ATOMIC endian mode capability
+    - ipvs: handle ip_vs_fill_iph_skb_off failure
+    - ipvs: correct initial offset of Call-ID header search in SIP persistence
+      engine
+    - ipvs: drop first packet to redirect conntrack
+    - rtlwifi: Fix size of wireless mode variable
+    - [x86] mfd: intel-lpss: Remove clock tree on error path
+    - nbd: ratelimit error msgs after socket close
+    - null_blk: add lightnvm null_blk device to the nullb_list
+    - [arm64] ata: ahci_xgene: dereferencing uninitialized pointer in probe
+    - [armhf] wlcore: fix error handling in wlcore_event_fw_logger
+    - ath10k: fix pktlog in QCA99X0
+    - mwifiex: fix corner case association failure
+    - clk-divider: make sure read-only dividers do not write to their register
+    - [armhf] clk: rockchip: fix wrong mmc phase shift for rk3228
+    - [armhf] clk: rockchip: free memory in error cases when registering clock
+      branches
+    - [armel/versatile] clk: versatile: sp810: support reentrance
+    - [armhf] clk: sunxi: Fix sun8i-a23-apb0-clk divider flags
+    - [arm64] clk: xgene: Add missing parenthesis when clearing divider value
+    - [armhf] clk: bcm2835: fix check of error code returned by
+      devm_ioremap_resource()
+    - [armhf] pwm: omap-dmtimer: Fix inaccurate period and duty cycle
+      calculations
+    - [armhf] pwm: omap-dmtimer: Add sanity checking for load and match values
+    - [armhf] pwm: omap-dmtimer: Round load and match values rather than
+      truncate
+    - lpfc: fix misleading indentation
+    - gpiolib-acpi: Duplicate con_id string when adding it to the crs lookup
+      list
+    - ath9k: ar5008_hw_cmn_spur_mitigate: add missing mask_m & mask_p
+      initialisation
+    - mac80211: fix statistics leak if dev_alloc_name() fails
+    - tracing: Don't display trigger file for events that can't be enabled
+    - MD: make bio mergeable
+    - Minimal fix-up of bad hashing behavior of hash_64()
+    - mm: memcontrol: let v2 cgroups follow changes in system swappiness
+    - [armhf] mm, cma: prevent nr_isolated_* counters from going negative
+    - mm/zswap: provide unique zpool name
+    - propogate_mnt: Handle the first propogated copy being a slave
+      (CVE-2016-4581)
+    - modpost: fix module autoloading for OF devices with generic compatible
+      property
+    - [armhf] EXYNOS: Properly skip unitialized parent clock in power domain on
+    - [armhf] SoCFPGA: Fix secondary CPU startup in thumb2 kernel
+    - xen: Fix page <-> pfn conversion on 32 bit systems
+    - xen/balloon: Fix crash when ballooning on x86 32 bit PAE
+    - xen/evtchn: fix ring resize when binding new events
+    - HID: wacom: Add support for DTK-1651
+    - proc: prevent accessing /proc/<PID>/environ until it's ready
+    - mm: update min_free_kbytes from khugepaged after core initialization
+    - batman-adv: fix DAT candidate selection (must use vid)
+    - batman-adv: Check skb size before using encapsulated ETH+VLAN header
+    - batman-adv: Fix broadcast/ogm queue limit on a removed interface
+    - batman-adv: Reduce refcnt of removed router when updating route
+    - [x86] libnvdimm, pfn: fix memmap reservation sizing
+    - writeback: Fix performance regression in wb_over_bg_thresh()
+    - [x86] tsc: Read all ratio bits from MSR_PLATFORM_INFO
+    - [arm64] cpuidle: Pass on arm_cpuidle_suspend()'s return value
+    - [x86] sysfb_efi: Fix valid BAR address range check
+    - [arm64] dts: apq8064: add ahci ports-implemented mask
+    - ACPICA: Dispatcher: Update thread ID for recursive method calls
+    - [powerpc*] Fix bad inline asm constraint in create_zero_mask()
+    - libahci: save port map for forced port map
+    - ata: ahci-platform: Add ports-implemented DT bindings.
+    - USB: serial: cp210x: add ID for Link ECU
+    - USB: serial: cp210x: add Straizona Focusers device ids
+    - Revert "USB / PM: Allow USB devices to remain runtime-suspended when
+      sleeping"
+    - nvmem: mxs-ocotp: fix buffer overflow in read
+    - [x86] Drivers: hv: vmbus: Fix signaling logic in
+      hv_need_to_signal_on_read()
+    - [armhf] gpu: ipu-v3: Fix imx-ipuv3-crtc module autoloading
+    - [x86] drm/amdgpu: make sure vertical front porch is at least 1
+    - [x86] drm/amdgpu: set metadata pointer to NULL after freeing.
+    - [x86] iio: ak8975: Fix NULL pointer exception on early interrupt
+    - [x86] iio: ak8975: fix maybe-uninitialized warning
+    - drm/radeon: make sure vertical front porch is at least 1
+    - [x86] drm/i915: Avoid stalling on pending flips for legacy cursor updates
+    - [x86] drm/i915/ddi: Fix eDP VDD handling during booting and suspend/resume
+    - [x86] drm/i915: Fix system resume if PCI device remained enabled
+    - [x86] drm/i915: Fix eDP low vswing for Broadwell
+    - [x86] drm/i915: Make RPS EI/thresholds multiple of 25 on SNB-BDW
+    - [x86] drm/i915: Fake HDMI live status
+    - [x86] ACPI / processor: Request native thermal interrupt handling via _OSC
+
+  [ Aurelien Jarno ]
+  * [mips*] Fix PR_SET_FPMODE issues with multi-threaded programs.
+  * [i386] Stop recommending libc6-i686.
+  * [arm,x86] Fix memory corruption in KVM with THP enabled. (Closes: #821225)
+  * [mips*/octeon] Add support for byte swapped initramfs to handle u-boot and
+    kernel running with a different endianness.
+  * [mipsel/octeon] Activate flavour on mipsel.
+
+  [ Roger Shimizu ]
+  * netfilter: Enable NF_DUP_NETDEV / NFT_DUP_NETDEV / NFT_FWD_NETDEV
+    as module, as recommended by Arturo Borrero Gonzalez. (Closes: #824162)
+
+  [ Salvatore Bonaccorso ]
+  * KEYS: Fix ASN.1 indefinite length object parsing (CVE-2016-0758)
+  * net: fix infoleak in llc (CVE-2016-4485)
+  * KVM: MTRR: remove MSR 0x2f8 (CVE-2016-3713)
+
+  [ Ben Hutchings ]
+  * gencontrol.py: Fix implementation of [packages]tools config option,
+    thanks to Yves-Alexis Perez
+  * debian/control: Exclude tools from 'stage1' build profile
+  * debian/control,debian/rules: Support a 'pkg.linux.notools' build profile
+    which does not build tools packages
+  * debian/control,debian/rules,debian/rules.d: Support the 'nodoc' build
+    profile
+  * debian/control: Remove alternate build-dependency on binutils-dev that was
+    used for backports to wheezy
+  * net: fix infoleak in rtnetlink (CVE-2016-4486)
+  * nf_conntrack: avoid kernel pointer value leak in slab name
+  * vfs: do_splice_to(): cap the size before passing to ->splice_read()
+  * crypto: hash - Fix page length clamping in hash walk
+  * isofs: get_rock_ridge_filename(): handle malformed NM entries
+  * uapi glibc compat: fix compile errors when glibc net/if.h included
+    before linux/if.h (Closes: #822393)
+  * videobuf2-core: Fix crash after fixing CVE-2016-4568
+  * [armhf] Enable more Exynos drivers (Closes: #824435):
+    - drm: Enable DRM_EXYNOS as module, DRM_EXYNOS_MIXER, DRM_EXYNOS_FIMD,
+      DRM_EXYNOS_DSI, DRM_EXYNOS_DP, DRM_EXYNOS_HDMI
+    - phy: Enable PHY_EXYNOS_MIPI_VIDEO, PHY_EXYNOS_DP_VIDEO as modules
+    - cpuidle: Enable ARM_EXYNOS_CPUIDLE
+    - iio: Enable EXYNOS_ADC as module
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 16 May 2016 19:17:22 +0100
+
+linux (4.5.3-2) unstable; urgency=medium
+
+  * [s390x] PCI: Ignore zpci ABI changes; these functions are not used by
+    modules
+  * [powerpc*] Fix sstep compile on powerpcspe (Closes: #823526; thanks to
+    Lennart Sorensen)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 08 May 2016 15:03:45 +0100
+
+linux (4.5.3-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3
+    - mmc: block: Use the mmc host device index as the mmcblk device index
+    - block: partition: initialize percpuref before sending out KOBJ_ADD
+    - block: loop: fix filesystem corruption in case of aio/dio
+    - [arm64] efi: Don't apply MEMBLOCK_NOMAP to UEFI memory map mapping
+    - [x86] mce: Avoid using object after free in genpool
+    - [x86] kvm: do not leak guest xcr0 into host interrupt handlers
+    - [arm*] KVM: Handle forward time correction gracefully
+    - [armhf] mvebu: Correct unit address for linksys
+    - [armhf] OMAP2: Fix up interconnect barrier initialization for DRA7
+    - [armhf] OMAP2+: hwmod: Fix updating of sysconfig register
+    - assoc_array: don't call compare_object() on a node
+    - [x86] usb: xhci: applying XHCI_PME_STUCK_QUIRK to Intel BXT B0 host
+    - xhci: resume USB 3 roothub first
+    - usb: host: xhci: add a new quirk XHCI_NO_64BIT_SUPPORT
+    - usb: xhci: fix wild pointers in xhci_mem_cleanup
+    - xhci: fix 10 second timeout on removal of PCI hotpluggable xhci
+      controllers
+    - usb: host: xhci-plat: Make enum xhci_plat_type start at a non zero value
+    - usb: hcd: out of bounds access in for_each_companion
+    - usb: gadget: f_fs: Fix use-after-free
+    - dm cache metadata: fix READ_LOCK macros and cleanup WRITE_LOCK macros
+    - dm cache metadata: fix cmd_read_lock() acquiring write lock
+    - lib: lz4: fixed zram with lz4 on big endian machines
+    - debugfs: Make automount point inodes permanently empty
+    - dmaengine: dw: fix master selection
+    - [armhf] dmaengine: omap-dma: Fix polled channel completion detection
+      and handling
+    - dmaengine: edma: Remove dynamic TPTC power management feature
+    - mtd: nand: pxa3xx_nand: fix dmaengine initialization
+    - sched/cgroup: Fix/cleanup cgroup teardown/init
+    - [x86] EDAC, sb_edac.c: Repair damage introduced when "fixing"
+      channel address
+    - [x86] EDAC, sb_edac.c: Take account of channel hashing when needed
+    - ALSA: hda - Don't trust the reported actual power state
+    - [x86] ALSA: hda/realtek - Add ALC3234 headset mode for Optiplex 9020m
+    - ALSA: hda - Keep powering up ADCs on Cirrus codecs
+    - [x86] ALSA: hda - add PCI ID for Intel Broxton-T
+    - ALSA: pcxhr: Fix missing mutex unlock
+    - [x86] ALSA: hda - Add dock support for ThinkPad X260
+    - [x86] ALSA: hda - Update BCLK also at hotplug for i915 HSW/BDW
+    - asm-generic/futex: Re-enable preemption in futex_atomic_cmpxchg_inatomic()
+    - futex: Handle unlock_pi race gracefully
+    - futex: Acknowledge a new waiter in counter before plist
+    - drm/nouveau/core: use vzalloc for allocating ramht
+    - drm/qxl: fix cursor position with non-zero hotspot
+    - [x86] drm/i915: Fix race condition in intel_dp_destroy_mst_connector()
+    - Revert "drm/radeon: disable runtime pm on PX laptops without dGPU
+      power control"
+    - [armhf] Revert "PCI: imx6: Add support for active-low reset GPIO"
+    - usbvision: revert commit 588afcc1
+    - [x86] Revert "drm/amdgpu: disable runtime pm on PX laptops without dGPU
+      power control"
+    - cpufreq: intel_pstate: Fix processing for turbo activation ratio
+    - [s390x] pci: add extra padding to function measurement block
+    - iwlwifi: pcie: lower the debug level for RSA semaphore access
+    - iwlwifi: mvm: fix memory leak in paging
+    - crypto: rsa-pkcs1pad - fix dst len
+    - [x86] crypto: ccp - Prevent information leakage on export
+    - crypto: sha1-mb - use corrcet pointer while completing jobs
+    - [powerpc*] scan_features() updates incorrect bits for REAL_LE
+    - [powerpc*] Update cpu_user_features2 in scan_features()
+    - [powerpc*] Update TM user feature bits in scan_features()
+    - nl80211: check netlink protocol in socket release notification
+    - netlink: don't send NETLINK_URELEASE for unbound sockets
+    - pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than ffs
+    - [x86] iommu/amd: Fix checking of pci dma aliases
+    - iommu/dma: Restore scatterlist offsets correctly
+    - [x86] drm/amdgpu: when suspending, if uvd/vce was running. need to cancel
+      delay work.
+    - [x86] drm/amdgpu: use defines for CRTCs and AMFT blocks
+    - [x86] drm/amdgpu: bump the afmt limit for CZ, ST, Polaris
+    - [x86] amdgpu/uvd: add uvd fw version for amdgpu
+    - [x86] drm/amdgpu: fix regression on CIK (v2)
+    - drm/radeon: add a quirk for a XFX R9 270X
+    - drm/radeon: fix initial connector audio value
+    - drm/radeon: forbid mapping of userptr bo through radeon device file
+    - drm/radeon: fix vertical bars appear on monitor (v2)
+    - [mips*el/loongson-3] drm: Loongson-3 doesn't fully support wc memory
+    - drm/nouveau/gr/gf100: select a stream master to fixup tfb offset queries
+    - drm/dp/mst: Validate port in drm_dp_payload_send_msg()
+    - drm/dp/mst: Restore primary hub guid on resume
+    - drm/dp/mst: Get validated port ref in drm_dp_update_payload_part1()
+    - [x86] drm/i915: Pass the correct encoder to intel_ddi_clk_select()
+      with MST
+    - [x86] drm/i915: Cleanup phys status page too
+    - [x86] drm/i915: Use the active wm config for merging on ILK-BDW
+    - [x86] drm/i915: Start WM computation from scratch on ILK-BDW
+    - [x86] drm/i915: skl_update_scaler() wants a rotation bitmask instead of
+      bit number
+    - [x86] drm/amdkfd: uninitialized variable in
+      dbgdev_wave_control_set_registers()
+    - [x86] drm/i915/skl: Fix DMC load on Skylake J0 and K0
+    - [x86] drm/i915/skl: Fix spurious gpu hang with gt3/gt4 revs
+    - [x86] drm/i915: Fixup the free space logic in ring_prepare
+    - [x86] drm/i915: Force ringbuffers to not be at offset 0
+    - [x86] drm/i915: Use fw_domains_put_with_fifo() on HSW
+    - drm/ttm: fix kref count mess in ttm_bo_move_to_lru_tail
+    - [x86] perf intel-pt: Fix segfault tracing transactions
+    - [armhf] i2c: exynos5: Fix possible ABBA deadlock by keeping I2C
+      clock prepared
+    - ACPICA / Interpreter: Fix a regression triggered because of wrong Linux
+      ECDT support
+    - [x86] mmc: sdhci-acpi: Reduce Baytrail eMMC/SD/SDIO hangs
+    - [x86] toshiba_acpi: Fix regression caused by hotkey enabling value
+    - [x86] EDAC: i7core, sb_edac: Don't return NOTIFY_BAD from mce_decoder
+      callback
+    - [x86] ASoC: ssm4567: Reset device before regcache_sync()
+    - [x86] ASoC: rt5640: Correct the digital interface data select
+    - vb2-memops: Fix over allocation of frame vectors
+    - media: vb2: Fix regression on poll() for RW mode
+    - videobuf2-core: Check user space planes array in dqbuf
+    - videobuf2-v4l2: Verify planes array in buffer dequeueing (CVE-2016-4568)
+    - v4l2-dv-timings.h: fix polarity for 4k formats
+    - IB/core: Fix oops in ib_cache_gid_set_default_gid
+    - mwifiex: fix IBSS data path issue.
+    - IB/mlx5: Expose correct max_sge_rd limit
+    - IB/security: Restrict use of the write() interface (CVE-2016-4565)
+    - efi: Fix out-of-bounds read in variable_matches()
+    - efi: Expose non-blocking set_variable() wrapper to efivars
+    - [x86] apic: Handle zero vector gracefully in clear_vector_irq()
+    - workqueue: fix ghost PENDING flag while doing MQ IO
+    - slub: clean up code for kmem cgroup support to kmem_cache_free_bulk
+    - cgroup, cpuset: replace cpuset_post_attach_flush() with
+      cgroup_subsys->post_attach callback
+    - memcg: relocate charge moving from ->attach to ->post_attach
+    - mm: exclude HugeTLB pages from THP page_mapped() logic
+    - mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check
+    - numa: fix /proc/<pid>/numa_maps for THP
+    - mm: vmscan: reclaim highmem zone if buffer_heads is over limit
+    - mm/hwpoison: fix wrong num_poisoned_pages accounting
+    - locking/mcs: Fix mcs_spin_lock() ordering
+    - [armhf] spi/rockchip: Make sure spi clk is on in rockchip_spi_set_cs
+    - [armhf] irqchip/sunxi-nmi: Fix error check of of_io_request_and_map()
+    - [armhf] regulator: s5m8767: fix get_register() error handling
+    - scsi_dh: force modular build if SCSI is a module
+    - lib/mpi: Endianness fix
+    - [x86] misc: mic/scif: fix wrap around tests
+    - PM / OPP: Initialize u_volt_min/max to a valid value
+    - PM / Domains: Fix removal of a subdomain
+    - drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors
+    - perf evlist: Reference count the cpu and thread maps at set_maps()
+    - perf tools: Fix perf script python database export crash
+    - [x86] mm/kmmio: Fix mmiotrace for hugepages
+    - ext4: fix NULL pointer dereference in ext4_mark_inode_dirty()
+    - f2fs crypto: fix corrupted symlink in encrypted case
+    - f2fs: slightly reorganize read_raw_super_block
+    - f2fs: cover large section in sanity check of super
+    - ext4/fscrypto: avoid RCU lookup in d_revalidate
+    - f2fs: do f2fs_balance_fs when block is allocated
+    - f2fs: don't need to call set_page_dirty for io error
+    - f2fs crypto: handle unexpected lack of encryption keys
+    - f2fs crypto: make sure the encryption info is initialized on opendir(2)
+    - bus: uniphier-system-bus: fix condition of overlap check
+    - mtd: spi-nor: remove micron_quad_enable()
+    - mtd: brcmnand: Fix v7.1 register offsets
+    - mtd: nand: Drop mtd.owner requirement in nand_scan
+    - perf hists browser: Only offer symbol scripting when a symbol is under
+      the cursor
+    - perf hists browser: Fix dump to show correct callchain style
+    - perf tools: handle spaces in file names obtained from /proc/pid/maps
+    - NTB: Remove _addr functions from ntb_hw_amd
+    - perf/core: Don't leak event in the syscall error path
+    - perf/core: Fix time tracking bug with multiplexing
+    - perf hists: Fix determination of a callchain node's childlessness
+    - [armhf] OMAP3: Add cpuidle parameters table for omap3430
+    - [armhf] dts: armada-375: use armada-370-sata for SATA
+    - [armhf] dts: am33xx: Fix GPMC dma properties
+    - btrfs: fix memory leak of fs_info in block group cache
+    - btrfs: cleaner_kthread() doesn't need explicit freeze
+    - [armhf] thermal: rockchip: fix a impossible condition caused by the
+      warning
+    - sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects
+      a race
+    - megaraid_sas: add missing curly braces in ioctl handler
+    - tpm: fix checks for policy digest existence in tpm2_seal_trusted()
+    - tpm: fix: set continueSession attribute for the unseal operation
+
+  [ Uwe Kleine-König ]
+  * [armhf] enable I2C_MUX_PCA954x, MMC_SDHCI_PXAV3, AHCI_MVEBU
+
+  [ Ben Hutchings ]
+  * bug control: Update list of related firmware packages
+  * Revert "sp5100_tco: fix the device check for SB800 and later chipsets"
+    (Closes: #823146; probably fixes #822651)
+  * bpf: fix double-fdput in replace_map_fd_with_map_ptr() (CVE-2016-4557)
+    (Closes: #823603)
+  * bpf: fix refcnt overflow (CVE-2016-4558)
+  * bpf: fix check_map_func_compatibility logic
+  * stable-update: Rewrite stable-update.sh in Python
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 07 May 2016 21:59:15 +0100
+
+linux (4.5.2-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2
+    - hwmon: (max1111) Return -ENODEV from max1111_read_channel if not
+      instantiated
+    - PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
+    - [hppa] Fix SIGSYS signals in compat case
+    - [hppa] Fix and enable seccomp filter support
+    - [hppa] Avoid function pointers for kernel exception routines
+    - [hppa] Fix kernel crash with reversed copy_from_user()
+    - [hppa] Unbreak handling exceptions from kernel modules
+    - ALSA: timer: Use mod_timer() for rearming the system timer
+    - mm: fix invalid node in alloc_migrate_target()
+    - [powerpc*] mm: Fixup preempt underflow with huge pages
+    - [s390x] /mm: handle PTE-mapped tail pages in fast gup
+    - [x86] libnvdimm: fix smart data retrieval
+    - [x86] libnvdimm, pfn: fix uuid validation
+    - [powerpc*] process: Fix altivec SPR not being saved
+    - compiler-gcc: disable -ftracer for __noclone functions
+    - drm/dp: move hw_mutex up the call stack
+    - drm/udl: Use unlocked gem unreferencing
+    - [x86] drm/amd/powerplay: fix segment fault issue in multi-display case.
+    - [x86] drm/amdgpu/gmc: move vram type fetching into sw_init
+    - [x86] drm/amdgpu/gmc: use proper register for vram type on Fiji
+    - xen/events: Mask a moving irq
+    - net: validate variable length ll headers
+    - ax25: add link layer header validation function
+    - packet: validate variable length ll headers
+    - bpf: avoid copying junk bytes in bpf_get_current_comm()
+    - qlcnic: Remove unnecessary usage of atomic_t
+    - qlcnic: Fix mailbox completion handling during spurious interrupt
+    - macvtap: always pass ethernet header in linear
+    - bridge: allow zero ageing time
+    - ipv4: Don't do expensive useless work during inetdev destroy.
+    - net: Fix use after free in the recvmmsg exit path
+    - mlx4: add missing braces in verify_qp_parameters
+    - farsync: fix off-by-one bug in fst_add_one
+    - ath9k: fix buffer overrun for ar9287
+    - [armhf] net: mvneta: Fix spinlock usage
+    - ppp: ensure file->private_data can't be overridden
+    - tcp/dccp: remove obsolete WARN_ON() in icmp handlers
+    - qlge: Fix receive packets drop.
+    - bonding: fix bond_get_stats()
+    - ipv4: fix broadcast packets reception
+    - ipv4: initialize flowi4_flags before calling fib_lookup()
+    - ppp: take reference on channels netns
+    - xfrm: Fix crash observed during device unregistration and decryption
+    - ipv6: udp: fix UDP_MIB_IGNOREDMULTI updates
+    - bridge: Allow set bridge ageing time when switchdev disabled
+    - rtnl: fix msg size calculation in if_nlmsg_size()
+    - tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter
+    - tuntap: restore default qdisc
+    - ipv4: l2tp: fix a potential issue in l2tp_ip_recv
+    - ipv6: l2tp: fix a potential issue in l2tp_ip6_recv
+    - ip6_tunnel: set rtnl_link_ops before calling register_netdevice
+    - ipv6: Count in extension headers in skb->network_header
+    - mpls: find_outdev: check for err ptr in addition to NULL check
+    - USB: uas: Limit qdepth at the scsi-host level
+    - USB: uas: Add a new NO_REPORT_LUNS quirk
+    - [x86] KVM: Inject pending interrupt even if pending nmi exist
+    - [x86] KVM: reduce default value of halt_poll_ns parameter
+    - pinctrl: pistachio: fix mfio84-89 function description and pinmux.
+    - pinctrl: sunxi: Fix A33 external interrupts not working
+    - pinctrl: freescale: imx: fix bogus check of of_iomap() return value
+    - au0828: fix au0828_v4l2_close() dev_state race condition
+    - au0828: Fix dev_state handling
+    - coda: fix error path in case of missing pdata on non-DT platform
+    - v4l: vsp1: Set the SRU CTRL0 register when starting the stream
+    - pcmcia: db1xxx_ss: fix last irq_to_gpio user
+    - rbd: use GFP_NOIO consistently for request allocations
+    - mac80211: properly deal with station hashtable insert errors
+    - mac80211: avoid excessive stack usage in sta_info
+    - mac80211: fix ibss scan parameters
+    - mac80211: fix unnecessary frame drops in mesh fwding
+    - mac80211: fix txq queue related crashes
+    - [armhf] gpio: pca953x: Use correct u16 value for register word write
+    - scsi: Do not attach VPD to devices that don't support it
+    - [armel,armhf]: 8550/1: protect idiv patching against undefined
+      gcc behavior
+    - iio: fix config watermark initial value
+    - iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE
+    - iio: accel: bmc150: fix endianness when reading axes
+    - iio: gyro: bmg160: fix buffer read values
+    - iio: gyro: bmg160: fix endianness when reading axes
+    - sd: Fix excessive capacity printing on devices with blocks bigger than
+      512 bytes
+    - fs: add file_dentry() (Closes: #821442)
+      + nfs: use file_dentry()
+      + ext4 crypto: use dget_parent() in ext4_d_revalidate()
+      + ext4: use dget_parent() in ext4_file_open()
+      + ext4: use file_dentry()
+    - btrfs: fix crash/invalid memory access on fsync when using overlayfs
+    - ext4: ignore quota mount options if the quota feature is enabled
+    - iommu: Don't overwrite domain pointer when there is no default_domain
+    - Btrfs: fix file/data loss caused by fsync after rename and new inode
+    - [arm64] replace read_lock to rcu lock in call_step_hook
+    - mmc: sdhci: Fix regression setting power on Trats2 board
+    - ALSA: hda - Fix regression of monitor_present flag in eld proc file
+    - [x86] ALSA: usb-audio: Skip volume controls triggers hangup on Dell
+      USB Dock
+    - HID: wacom: fix Bamboo ONE oops
+    - HID: usbhid: fix inconsistent reset/resume/reset-resume behavior
+
+  [ Salvatore Bonaccorso ]
+  * [x86] xen: suppress hugetlbfs in PV guests (CVE-2016-3961)
+  * [x86] USB: usbip: fix potential out-of-bounds write (CVE-2016-3955)
+
+  [ Ben Hutchings ]
+  * fs: Consolidate softdep declarations in each module
+  * Bump ABI to 2
+  * [armel/marvell] dts: kirkwood: fix SD slot default configuration for OpenRD
+    (Closes: #811351)
+  * atl2: Disable unimplemented scatter/gather feature (CVE-2016-2117)
+  * [x86] sound/soc/intel: Enable SND_SOC_INTEL_BYTCR_RT5640_MACH (replacing
+    SND_SOC_INTEL_BYT_RT5640_MACH; closes: #822267),
+    SND_SOC_INTEL_BYTCR_RT5651_MACH, SND_SOC_INTEL_CHT_BSW_RT5672_MACH,
+    SND_SOC_INTEL_CHT_BSW_RT5645_MACH, SND_SOC_INTEL_CHT_BSW_MAX98090_TI_MACH,
+    SND_SOC_INTEL_SKL_RT286_MACH, SND_SOC_INTEL_SKL_NAU88L25_SSM4567_MACH,
+    SND_SOC_INTEL_SKL_NAU88L25_MAX98357A_MACH as modules
+  * module: Invalidate signatures on force-loaded modules
+  * linux-source: Fix up module signing configuration in included kernel
+    config files
+  * README.Debian: Change more URLs to use https: scheme
+  * [sparc] Implement and wire up hotplug and modalias_show for vio, thanks to
+    Adrian Glaubitz (Closes: #815977)
+  * linux-headers: Avoid mixed implicit and normal rules in Makefile, thanks to
+    Thierry Herbelot (Closes: #822666)
+  * memcg: remove lru_add_drain_all() invocation from mem_cgroup_move_charge()
+    (Closes: #822084)
+  * linux-perf: Add build-time check for unversioned files that are likely to
+    result in file conflicts
+  * linux-perf: Move tips.txt to /usr/share/doc/linux-perf-<version>
+    (Closes: #821741)
+  * tools/build: Fix bpf(2) feature test (fixes FTBFS on alpha, sh4;
+    closes: #822364)
+  * [armhf] Disable FB_OMAP2; it is redundant and conflicting with DRM_OMAP
+  * [armhf] mm: Enable CMA, DMA_CMA
+  * Input: gtco - fix crash on detecting device without endpoints
+    (CVE-2016-2187)
+
+  [ Aurelien Jarno ]
+  * [mips*] Emulate unaligned LDXC1 and SDXC1 instructions.
+
+  [ Uwe Kleine-König ]
+  * [armhf] enable NET_DSA and available switch drivers as modules.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 28 Apr 2016 18:03:18 +0200
+
+linux (4.5.1-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1
+    - [x86] entry/compat: Keep TS_COMPAT set during signal delivery
+    - [x86] perf/intel: Add definition for PT PMI bit
+    - [x86] KVM: fix missed hardware breakpoints
+    - [x86] KVM: i8254: change PIT discard tick policy
+    - [x86] KVM: fix spin_lock_init order on x86
+    - [x86] KVM: VMX: avoid guest hang on invalid invept instruction
+    - [x86] KVM: VMX: avoid guest hang on invalid invvpid instruction
+    - [x86] KVM: VMX: fix nested vpid for old KVM guests
+    - perf/core: Fix perf_sched_count derailment
+    - perf tools: Fix checking asprintf return value
+    - Thermal: Ignore invalid trip points
+    - sched/cputime: Fix steal_account_process_tick() to always return jiffies
+    - sched/fair: Avoid using decay_load_missed() with a negative value
+    - [x86] EDAC/sb_edac: Fix computation of channel address
+    - [x86] EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr()
+    - [s390x] fix floating pointer register corruption (again)
+    - [s390x] cpumf: add missing lpp magic initialization
+    - [s390x] pci: enforce fmb page boundary rule
+    - [armhf] pinctrl-bcm2835: Fix cut-and-paste error in "pull" parsing
+    - [x86] irq: Cure live lock in fixup_irqs() (Closes: #817816)
+    - [x86] apic: Fix suspicious RCU usage in
+      smp_trace_call_function_interrupt()
+    - [amd64] iopl: Properly context-switch IOPL on Xen PV (CVE-2016-3157)
+    - [x86] mm: TLB_REMOTE_SEND_IPI should count pages
+    - sg: fix dxferp in from_to case
+    - aacraid: Fix RRQ overload
+    - aacraid: Fix memory leak in aac_fib_map_free
+    - aacraid: Set correct msix count for EEH recovery
+    - sd: Fix discard granularity when LBPRZ=1
+    - ncr5380: Correctly clear command pointers and lists after bus reset
+    - ncr5380: Dont release lock for PIO transfer
+    - ncr5380: Dont re-enter NCR5380_select()
+    - ncr5380: Forget aborted commands
+    - ncr5380: Fix NCR5380_select() EH checks and result handling
+    - ncr5380: Call scsi_eh_prep_cmnd() and scsi_eh_restore_cmnd() as and when
+      appropriate
+    - scsi: storvsc: fix SRB_STATUS_ABORTED handling
+    - be2iscsi: set the boot_kset pointer to NULL in case of failure
+    - aic7xxx: Fix queue depth handling
+    - libnvdimm: Fix security issue with DSM IOCTL.
+    - libnvdimm, pmem: fix kmap_atomic() leak in error path
+    - dm snapshot: disallow the COW and origin devices from being identical
+    - dm: fix excessive dm-mq context switching
+    - dm thin metadata: don't issue prefetches if a transaction abort
+      has failed
+    - dm cache: make sure every metadata function checks fail_io
+    - dm: fix rq_end_stats() NULL pointer in dm_requeue_original_request()
+    - usb: retry reset if a device times out
+    - usb: hub: fix a typo in hub_port_init() leading to wrong logic
+    - USB: cdc-acm: more sanity checking (CVE-2016-3138)
+    - USB: iowarrior: fix oops with malicious USB descriptors (incomplete fix
+      for CVE-2016-2188)
+    - USB: usb_driver_claim_interface: add sanity checking
+    - USB: mct_u232: add sanity checking in probe (CVE-2016-3136)
+    - USB: digi_acceleport: do sanity checking for the number of ports
+      (CVE-2016-3140)
+    - USB: cypress_m8: add endpoint sanity check (CVE-2016-3137)
+    - Input: powermate - fix oops with malicious USB descriptors
+      (CVE-2016-2186)
+    - ALSA: usb-audio: Fix NULL dereference in create_fixed_stream_quirk()
+      (CVE-2016-2184)
+    - ALSA: usb-audio: Add sanity checks for endpoint accesses (CVE-2016-2184)
+    - ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk()
+    - ALSA: usb-audio: Fix double-free in error paths after
+      snd_usb_add_audio_stream() call
+    - crypto: ccp - Add hash state import and export support
+    - crypto: ccp - Limit the amount of information exported
+    - crypto: ccp - Don't assume export/import areas are aligned
+    - crypto: ccp - memset request context to zero during import
+    - crypto: keywrap - memzero the correct memory
+    - [armel/marvell,armhf] crypto: marvell/cesa - forward
+      devm_ioremap_resource() error code
+    - [x86] mei: bus: check if the device is enabled before data transfer
+    - tpm: fix the rollback in tpm_chip_register()
+    - tpm_crb: tpm2_shutdown() must be called before tpm_chip_unregister()
+    - tpm_eventlog.c: fix binary_bios_measurements
+    - tpm: fix the cleanup of struct tpm_chip
+    - HID: logitech: fix Dual Action gamepad support
+    - HID: i2c-hid: fix OOB write in i2c_hid_set_or_send_report()
+    - HID: multitouch: force retrieving of Win8 signature blob
+    - HID: fix hid_ignore_special_drivers module parameter
+    - staging: comedi: ni_tiocmd: change mistaken use of start_src for start_arg
+    - staging: comedi: ni_mio_common: fix the ni_write[blw]() functions
+    - tty: Fix GPF in flush_to_ldisc(), part 2
+    - net: irda: Fix use-after-free in irtty_open()
+    - 8250: use callbacks to access UART_DLL/UART_DLM
+    - saa7134: Fix bytesperline not being set correctly for planar formats
+    - adv7511: TX_EDID_PRESENT is still 1 after a disconnect
+    - bttv: Width must be a multiple of 16 when capturing planar formats
+    - coda: fix first encoded frame payload
+    - media: v4l2-compat-ioctl32: fix missing length copy in put_v4l2_buffer32
+    - mtip32xx: Avoid issuing standby immediate cmd during FTL rebuild
+    - mtip32xx: Fix broken service thread handling
+    - mtip32xx: Remove unwanted code from taskfile error handler
+    - mtip32xx: Fix for rmmod crash when drive is in FTL rebuild
+    - mtip32xx: Handle safe removal during IO
+    - mtip32xx: Handle FTL rebuild failure state during device initialization
+    - mtip32xx: Implement timeout handler
+    - mtip32xx: Cleanup queued requests after surprise removal
+    - ALSA: hda - Fix unexpected resume through regmap code path
+    - ALSA: hda - Apply reboot D3 fix for CX20724 codec, too
+    - [x86] ALSA: intel8x0: Add clock quirk entry for AD1981B on IBM
+      ThinkPad X41.
+    - ALSA: hda - Don't handle ELD notify from invalid port
+    - [x86] ALSA: hda - fix the mic mute button and led problem for a Lenovo AIO
+    - ALSA: hda - Fix unconditional GPIO toggle via automute
+    - [x86] ALSA: hda - Limit i915 HDMI binding only for HSW and later
+    - [x86] ALSA: hda - Fix spurious kernel WARNING on Baytrail HDMI
+    - [x86] ALSA: hda - Really restrict i915 notifier to HSW+
+    - ALSA: hda - Fix forgotten HDMI monitor_present update
+    - [x86] ALSA: hda - Workaround for unbalanced i915 power refcount by
+      concurrent probe
+    - ALSA: hda - Fix missing ELD update at unplugging
+    - jbd2: fix FS corruption possibility in jbd2_journal_destroy() on
+      umount path
+    - [arm64] Update PTE_RDONLY in set_pte_at() for PROT_NONE permission
+    - brd: Fix discard request processing
+    - IB/srpt: Simplify srpt_handle_tsk_mgmt()
+    - bcache: cleaned up error handling around register_cache()
+    - bcache: fix race of writeback thread starting before complete
+      initialization
+    - bcache: fix cache_set_flush() NULL pointer dereference on OOM
+    - mm: memcontrol: reclaim when shrinking memory.high below usage
+    - mm: memcontrol: reclaim and OOM kill when shrinking memory.max below usage
+    - watchdog: don't run proc_watchdog_update if new value is same as old
+    - Bluetooth: Fix potential buffer overflow with Add Advertising
+    - cgroup: ignore css_sets associated with dead cgroups during migration
+    - [amrhf] net: mvneta: enable change MAC address when interface is up
+    - brcmfmac: Increase nr of supported flowrings.
+    - of: alloc anywhere from memblock if range not specified
+    - vfs: show_vfsstat: do not ignore errors from show_devname method
+    - splice: handle zero nr_pages in splice_to_pipe()
+    - quota: Fix possible GPF due to uninitialised pointers
+    - xfs: fix two memory leaks in xfs_attr_list.c error paths
+    - raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang
+    - md/raid5: Compare apples to apples (or sectors to sectors)
+    - RAID5: check_reshape() shouldn't call mddev_suspend
+    - RAID5: revert e9e4c377e2f563 to fix a livelock
+    - raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang
+    - md/raid5: preserve STRIPE_PREREAD_ACTIVE in break_stripe_batch_list
+    - md: multipath: don't hardcopy bio in .make_request path
+    - fuse: do not use iocb after it may have been freed
+    - fuse: Add reference counting for fuse_io_priv
+    - fs/coredump: prevent fsuid=0 dumps into user-controlled directories
+    - [armhf] drm/vc4: Return -EFAULT on copy_from_user() failure
+    - [x86] drm/radeon: disable runtime pm on PX laptops without dGPU
+      power control
+    - drm/radeon: Don't drop DP 2.7 Ghz link setup on some cards.
+    - drm/radeon: rework fbdev handling on chips with no connectors
+    - drm/radeon/mst: fix regression in lane/link handling.
+    - [x86] drm/amdgpu: disable runtime pm on PX laptops without dGPU
+      power control
+    - drm/amdgpu: include the right version of gmc header files for iceland
+    - drm/amd/powerplay: add uvd/vce dpm enabling flag to fix the performance
+      issue for CZ
+    - tracing: Have preempt(irqs)off trace preempt disabled functions
+    - tracing: Fix crash from reading trace_pipe with sendfile
+    - tracing: Fix trace_printk() to print when not using bprintk()
+    - bitops: Do not default to __clear_bit() for __clear_bit_unlock()
+    - [x86] ideapad-laptop: Add ideapad Y700 (15) to the no_hw_rfkill DMI list
+    - mmc: block: fix ABI regression of mmc_blk_ioctl
+    - mmc: mmc_spi: Add Card Detect comments and fix CD GPIO case
+    - mmc: sdhci: move initialisation of command error member
+    - mmc: sdhci: clean up command error handling
+    - mmc: sdhci: fix command response CRC error handling
+    - mmc: sdhci: further fix for DMA unmapping in sdhci_post_req()
+    - mmc: sdhci: avoid unnecessary mapping/unmapping of align buffer
+    - mmc: sdhci: plug DMA mapping leak on error
+    - mmc: sdhci: fix data timeout
+    - [armhf] mmc: tegra: Disable UHS-I modes for tegra114
+    - [armhf] mmc: tegra: properly disable card clock
+    - mmc: sdhci: Fix override of timeout clk wrt max_busy_timeout
+    - [armhf] clk: rockchip: rk3368: fix cpuclk mux bit of big cpu-cluster
+    - [armhf] clk: rockchip: rk3368: fix cpuclk core dividers
+    - [armhf] clk: rockchip: rk3368: fix parents of video encoder/decoder
+    - [armhf] clk: rockchip: rk3368: fix hdmi_cec gate-register
+    - [armhf] clk: rockchip: add hclk_cpubus to the list of rk3188
+      critical clocks
+    - [armhf] clk: bcm2835: Fix setting of PLL divider clock rates
+    - target: Fix target_release_cmd_kref shutdown comp leak
+    - iser-target: Fix identification of login rx descriptor type
+    - iser-target: Separate flows for np listeners and connections cma events
+    - iser-target: Rework connection termination
+    - nfsd4: fix bad bounds checking
+    - nfsd: fix deadlock secinfo+readdir compound
+    - ACPI / PM: Runtime resume devices when waking from hibernate
+    - writeback, cgroup: fix premature wb_put() in
+      locked_inode_to_wb_and_lock_list()
+    - writeback, cgroup: fix use of the wrong bdi_writeback which mismatches
+      the inode
+    - Input: synaptics - handle spurious release of trackstick buttons, again
+    - Input: ati_remote2 - fix crashes on detecting device with invalid
+      descriptor (CVE-2016-2185)
+    - ocfs2: o2hb: fix double free bug
+    - ocfs2/dlm: fix race between convert and recovery
+    - ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list
+    - mm/page_alloc: prevent merging between isolated and other pageblocks
+    - mtd: onenand: fix deadlock in onenand_block_markbad
+    - [x86] intel_idle: prevent SKL-H boot failure when C8+C9+C10 enabled
+    - PM / sleep: Clear pm_suspend_global_flags upon hibernate
+    - scsi_common: do not clobber fixed sense information
+    - sched/cputime: Fix steal time accounting vs. CPU hotplug
+    - [x86] perf/pebs: Add workaround for broken OVFL status on HSW+
+    - [x86] perf/intel/uncore: Remove SBOX support for BDX-DE
+    - [x86] perf/intel: Fix PEBS warning by only restoring active PMU in pmi
+    - [x86] perf/intel: Use PAGE_SIZE for PEBS buffer size on Core2
+    - [x86] perf/intel: Fix PEBS data source interpretation on Nehalem/Westmere
+
+  [ Ben Hutchings ]
+  * mm: exclude ZONE_DEVICE from GFP_ZONE_TABLE
+  * mm: ZONE_DEVICE depends on SPARSEMEM_VMEMMAP
+  * [amd64] Re-enable ZONE_DMA and sound drivers that depend on it
+    (Closes: #814855, #819385, #820890)
+  * ntfs: Disable NTFS_RW (Closes: #566356); ntfs-3g has much more complete
+    write support
+  * Merge linux-tools source package into linux
+    (Closes: #550379, #573483, #816500)
+  * Add support for securelevel and prepare for Secure Boot (Closes: #820008):
+    - Add Matthew Garrett's securelevel patchset (see
+      Documentation/security/securelevel.txt)
+    - modules: Enable MODULE_SIG and MODULE_SIG_SHA256, but not MODULE_SIG_ALL
+      as signatures will be packaged separately
+    - debian/control: Add build-dependencies on libssl-dev, openssl
+    - debian/copyright: Note that extract-cert and sign-file are under LGPL 2.1
+    - linux-kbuild: Add extract-cert and sign-file programs
+    - scripts: Fix X.509 PEM support in sign-file
+    - certs: Set SYSTEM_TRUSTED_KEYS to my own personal certificate to support
+      initial testing of signed modules
+  * Disable UNUSED_SYMBOLS; it is now itself unused
+  * linux-support: Include udeb configuration from debian/installer for use
+    by the linux-signed package
+  * Set ABI to 1
+  * netfilter: x_tables: Fix parsing of IPT_SO_SET_REPLACE blobs (CVE-2016-3134)
+    - validate e->target_offset early
+    - make sure e->next_offset covers remaining blob size
+  * ipv4: Don't do expensive useless work during inetdev destroy (CVE-2016-3156)
+  * [x86] mm/32: Enable full randomization on i386 and X86_32 (CVE-2016-3672)
+  * fs: Add MODULE_SOFTDEP declarations for hard-coded crypto drivers
+    (Closes: #819725)
+  * aufs: Update support patches to aufs4.5-20160328 (Closes: #819748)
+  * [x86] ACPI / processor: Request native thermal interrupt handling via _OSC
+    (Closes: #817016, #819336)
+  * [armhf] Add support for octa-core big.LITTLE systems including Exynos
+    (Closes: #819379)
+  * [armhf] watchdog: Enable S3C2410_WATCHDOG as module (Closes: #819377)
+  * nbd: Create size change events for userspace (Closes: #812487)
+  * [armhf] usb-modules: Add modules required for BeagleBoard-X15, thanks to
+    Vagrant Cascadian (Closes: #815848)
+
+  [ Aurelien Jarno ]
+  * [mipsel/mips/config.loongson-2f] Disable VIDEO_CX23885, VIDEO_IVTV,
+    VIDEO_CX231XX, VIDEO_PVRUSB2 (fixes FTBFS).
+  * [mips*/octeon] Backport OCTEON SATA controller support from 4.6-rc1.
+    Enable AHCI_OCTEON and SATA_AHCI_PLATFORM.
+  * [mips*/octeon] Backport Octeon III CN7xxx interface detection from
+    4.7 queue.
+  * [mips*/octeon] Enable SPI_OCTEON.
+  * [mips*/octeon] udeb: Add ahci_octeon and ahci_platform modules to
+    sata-modules.
+  * [mips*/octeon] Bump CONFIG_NR_CPUS to 32 to accomodate recent Octeon
+    III SoCs.
+  * [mips*/octeon] Enable CRYPTO_MD5_OCTEON, CRYPTO_SHA1_OCTEON, CRYPTO_SHA256
+    and CRYPTO_SHA512_OCTEON.
+
+  [ Roger Shimizu ]
+  * [armel/marvell] Change MTD_CFI_AMDSTD from module to built-in
+    because orion5x-based Buffalo Linkstation devices still need it
+    (Closes: #818598)
+  * [armel/marvell] Add DT support for "Synology DS112" and "Zyxel NSA320".
+    Thanks to Heinrich Schuchardt. (Closes: #819393)
+  * [armel/marvell] Add DT support for "Buffalo/Revogear Kurobox Pro"
+  * [armhf/armmp] Enable DW_WATCHDOG as module, used on Firefly-RK3288.
+    Patch by Vagrant Cascadian. (Closes: #820834)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 14 Apr 2016 09:49:24 +0100
+
+linux-tools (4.5-1~exp1) experimental; urgency=medium
+
+  * New upstream release
+
+  [ Ben Hutchings ]
+  * linux-perf: Fix use of uninitialized variables
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 20 Mar 2016 21:20:22 +0000
+
+linux (4.5-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_4.5
+
+  [ Martin Michlmayr ]
+  * [arm64] Enable LEDS_GPIO.
+  * [arm64] Enable more QCOM options. (Closes: #815627)
+  * [arm64] udeb: Add leds-modules package containing leds-gpio driver.
+  * [arm64] udeb: Add regulators and SoC modules to core-modules.
+
+  [ Uwe Kleine-König ]
+  * [armhf] Enable DRM_ETNAVIV.
+
+  [ Ben Hutchings ]
+  * [armel/versatile] Enable GPIOLIB, new dependency of SMC91X (fixes FTBFS)
+  * [x86] input: Enable ASUS_WIRELESS as module (Closes: #818487)
+  * [x86] amdgpu: Enable DRM_AMD_POWERPLAY (Closes: #818174)
+  * [x86] Enable RANDOMIZE_BASE (kASLR). This is incompatible with hibernation,
+    so you must use the kernel parameter "kaslr" to enable kASLR and disable
+    hibernation at boot time. (Closes: #816067)
+  * [x86] vmxnet3: fix lock imbalance in vmxnet3_tq_xmit() (regression in 4.5)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 20 Mar 2016 12:06:57 +0000
+
+linux (4.5~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 07 Mar 2016 22:20:48 +0000
+
+linux-tools (4.5~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * Makefile.inc: Add support for wildcards in $(SCRIPTS) and $(DATA)
+  * linux-kbuild: Include scripts/Makefile.* (Closes: #815593)
+  * Makefile.inc, rules.real: Fix conflation of $(DESTDIR) and $(prefix)
+  * hyperv-daemons: Fix rule redefinition that 'make' warns about
+  * debian/control: Build-Depend on dh-python, as dh_python2 warns we should
+  * lockdep: Add '+' prefix to make invocation, so it can be parallelised
+  * tools/build: Fix 'unused variable' warning in the bpf() feature check
+  * lockdep: Add more missing macros
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 07 Mar 2016 03:07:00 +0000
+
+linux-tools (4.5~rc5-1~exp3) experimental; urgency=medium
+
+  * Adjust build fix from unstable
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 21 Feb 2016 23:45:04 +0000
+
+linux-tools (4.5~rc5-1~exp2) experimental; urgency=medium
+
+  * Merge build fix from unstable
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 21 Feb 2016 17:40:52 +0000
+
+linux-tools (4.5~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * lockdep: Add missing macros
+  * Adjust VPATH to work for check-hyperv (and simplify the modpost wrapper)
+  * tools/build: Remove bpf() run-time check at build time
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 21 Feb 2016 16:45:52 +0000
+
+linux (4.5~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [armel/versatile] Enable GPIOLIB, needed to build smc91x driver with
+    OF enabled (fixes FTBFS)
+  * [powerpc] mm: Fix HAVE_ARCH_SOFT_DIRTY dependencies (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 21 Feb 2016 13:17:27 +0000
+
+linux (4.5~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Roger Shimizu ]
+  * Enable TTY_PRINTK as module (Closes: #814540).
+
+  [ Ben Hutchings ]
+  * [rt] Disable until it is updated for 4.5 or later
+  * aufs: Update support patches to aufs4.x-rcN-20160215
+  * Compile with gcc-5 on all architectures
+  * [hppa] Update build-dependencies for renaming of binutils-hppa64
+  * [x86] udeb: Move scsi_transport_fc to scsi-core-modules, since hv_storvsc
+    now depends on it
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 18 Feb 2016 01:57:20 +0000
+
+linux-tools (4.4.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    - tools lib traceevent: Fix output of %llu for 64 bit values read on
+      32 bit machines
+    - perf tools: tracepoint_error() can receive e=NULL, robustify it
+    - perf kvm record/report: 'unprocessable sample' error while
+      recording/reporting guest data
+    - tools: hv: vss: fix the write()'s argument: error -> vss_msg
+    - uapi: update install list after nvme.h rename
+    - perf stat: Do not clean event's private stats
+
+  [ Mattia Dongili ]
+  * Build linux-cpupower.
+
+  [ Ben Hutchings ]
+  * debian/control: Update policy version to 3.9.7; no changes required
+  * linux-perf: Override lintian errors for perf-read-vdso{,x}32 in
+    64-bit packages
+  * debian/copyright: Move GPL-2 boilerplate to its own paragraph
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 20 Mar 2016 16:23:48 +0000
+
+linux (4.4.6-1) unstable; urgency=medium
+
+  [ Salvatore Bonaccorso ]
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.5
+    - Btrfs: fix deadlock running delayed iputs at transaction commit time
+      (regression in 4.1)
+    - btrfs: Fix no_space in write and rm loop
+      (regression in 4.4)
+    - btrfs: async-thread: Fix a use-after-free error for trace
+    - [x86] drm/amdgpu: mask out WC from BO on unsupported arches
+    - block: Initialize max_dev_sectors to 0
+    - [hppa] Fix ptrace syscall number and return value modification
+    - [x86] kvm: Update tsc multiplier on change.
+      (regression in 4.4)
+    - fbcon: set a default value to blink interval
+    - cifs: fix out-of-bounds access in lease parsing
+    - CIFS: Fix SMB2+ interim response processing for read requests
+    - [x86] vfio: fix ioctl error handling
+    - [x86] KVM: fix root cause for missed hardware breakpoints
+    - [arm*] KVM: Fix ioctl error handling
+    - [amd64] iommu: Apply workaround for ATS write permission check
+    - [amd64] iommu: Fix boot warning when device 00:00.0 is not iommu covered
+    - [x86] iommu/vt-d: Use BUS_NOTIFY_REMOVED_DEVICE in hotplug path
+    - target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors
+    - [x86,powerpc*] drm/ast: Fix incorrect register check for DRAM width
+    - drm/radeon/pm: update current crtc info after setting the powerstate
+    - [x86] drm/amdgpu/pm: update current crtc info after setting the powerstate
+    - [x86] drm/amdgpu: apply gfx_v8 fixes to gfx_v7 as well
+    - [x86] drm/amdgpu/gfx8: specify which engine to wait before vm flush
+    - [x86] drm/amdgpu: return from atombios_dp_get_dpcd only when error
+    - libata: fix HDIO_GET_32BIT ioctl
+    - writeback: flush inode cgroup wb switches instead of pinning super_block
+    - Adding Intel Lewisburg device IDs for SATA
+    - [arm64] vmemmap: use virtual projection of linear region
+      (regression in 4.1)
+    - ata: ahci: don't mark HotPlugCapable Ports as external/removable
+    - tracing: Do not have 'comm' filter override event 'comm' field
+      (regression in 4.3)
+    - Btrfs: fix loading of orphan roots leading to BUG_ON
+    - Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"
+    - jffs2: Fix page lock / f->sem deadlock
+    - jffs2: Fix directory hardlinks from deleted directories
+    - ALSA: usb-audio: Add a quirk for Plantronics DA45
+    - [amd64] ALSA: ctl: Fix ioctls for X32 ABI
+    - [x86] ALSA: hda - Fix mic issues on Acer Aspire E1-472
+    - [amd64] ALSA: rawmidi: Fix ioctls X32 ABI
+    - [amd64] ALSA: timer: Fix ioctls for X32 ABI
+    - [amd64] ALSA: pcm: Fix ioctls for X32 ABI
+    - ALSA: seq: oss: Don't drain at closing a client
+    - ALSA: hdspm: Fix wrong boolean ctl value accesses
+    - ALSA: hdsp: Fix wrong boolean ctl value accesses
+    - ALSA: hdspm: Fix zero-division
+    - ALSA: timer: Fix broken compat timer user status ioctl
+    - [armhf] usb: chipidea: otg: change workqueue ci_otg as freezable
+    - USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder
+    - USB: qcserial: add Dell Wireless 5809e Gobi 4G HSPA+ (rev3)
+    - USB: qcserial: add Sierra Wireless EM74xx device ID
+    - USB: serial: option: add support for Telit LE922 PID 0x1045
+    - USB: serial: option: add support for Quectel UC20
+    - [mips*] scache: Fix scache init with invalid line size.
+    - [mips*] traps: Fix SIGFPE information leak from `do_ov' and
+      `do_trap_or_bp'
+    - ubi: Fix out of bounds write in volume update code
+    - thermal: cpu_cooling: fix out of bounds access in time_in_idle
+    - [x86] drm/amdgpu: Use drm_calloc_large for VM page_tables array
+    - block: check virt boundary in bio_will_gap()
+    - [x86] drm/i915: more virtual south bridge detection
+    - [x86] drm/i915: refine qemu south bridge detection
+    - modules: fix longstanding /proc/kallsyms vs module insertion race.
+    - [x86] drm/amdgpu: fix topaz/tonga gmc assignment in 4.4 stable
+
+  [ Ben Hutchings ]
+  * [x86] drm/i915: Fix oops caused by fbdev initialization failure
+  * module: Fix ABI change in 4.4.5
+  * Revert "libata: Align ata_device's id on a cacheline" to avoid ABI change
+  * [amd64] Fix more regressions due to "efi: Build our own page table
+    structure":
+    - efi: Fix boot crash by always mapping boot service regions into new EFI
+      page tables (Closes: #815125)
+    - mm/pat: Fix boot crash when 1GB pages are not supported by cpu
+  * [armhf] gpio: Enable GPIO_PCF857X as module, needed by TI DRA7xx EVMs
+    (Closes: #818386)
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.6
+    - [arm64] account for sparsemem section alignment when choosing vmemmap
+      offset
+    - [armel,armhf] mvebu: fix overlap of Crypto SRAM with PCIe memory window
+    - [armhf] dts: dra7: do not gate cpsw clock due to errata i877
+    - [armhf] OMAP2+: hwmod: Introduce ti,no-idle dt property
+    - PCI: Allow a NULL "parent" pointer in pci_bus_assign_domain_nr()
+    - kvm: cap halt polling at exactly halt_poll_ns
+    - [x86] KVM: VMX: disable PEBS before a guest entry
+    - [s390x] KVM: correct fprs on SIGP (STOP AND) STORE STATUS
+    - [powerpc*] KVM: Book3S HV: Sanitize special-purpose register values on
+      guest exit
+    - [x86] KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
+      combo
+    - [x86] KVM: MMU: fix reserved bit check for
+      ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
+    - [s390x] mm: four page table levels vs. fork (CVE-2016-2143)
+    - [s390x] dasd: fix diag 0x250 inline assembly
+    - tracing: Fix check for cpu online when event is disabled
+    - jffs2: reduce the breakage on recovery from halfway failed rename()
+    - ncpfs: fix a braino in OOM handling in ncp_fill_cache()
+    - ASoC: dapm: Fix ctl value accesses in a wrong type
+    - ovl: ignore lower entries when checking purity of non-directory entries
+    - ovl: fix working on distributed fs as lower layer
+    - wext: fix message delay/ordering
+    - cfg80211/wext: fix message ordering
+    - can: gs_usb: fixed disconnect bug by removing erroneous use of kfree()
+    - iwlwifi: mvm: inc pending frames counter also when txing non-sta
+    - mac80211: minstrel: Change expected throughput unit back to Kbps
+    - mac80211: fix use of uninitialised values in RX aggregation
+    - mac80211: minstrel_ht: set default tx aggregation timeout to 0
+    - mac80211: minstrel_ht: fix a logic error in RTS/CTS handling
+    - mac80211: check PN correctly for GCMP-encrypted fragmented MPDUs
+    - mac80211: Fix Public Action frame RX in AP mode
+    - [armhf] gpu: ipu-v3: Do not bail out on missing optional port nodes
+    - [i386/686-pae] mm: Fix slow_virt_to_phys() for X86_PAE again
+    - Revert "drm/radeon: call hpd_irq_event on resume"
+    - [x86] drm/amdgpu: Fix error handling in amdgpu_flip_work_func.
+    - drm/radeon: Fix error handling in radeon_flip_work_func.
+    - Revert "drm/radeon/pm: adjust display configuration after powerstate"
+    - [powerpc*] powernv: Add a kmsg_dumper that flushes console output on panic
+    - [powerpc*] powernv: Fix OPAL_CONSOLE_FLUSH prototype and usages
+    - userfaultfd: don't block on the last VM updates at exit time
+    - ovl: copy new uid/gid into overlayfs runtime inode
+    - ovl: fix getcwd() failure after unsuccessful rmdir
+    - [mips*] smp.c: Fix uninitialised temp_foreign_map
+    - block: don't optimize for non-cloned bio in bio_get_last_bvec()
+    - target: Drop incorrect ABORT_TASK put for completed commands
+  * netfilter: x_tables: check for size overflow (CVE-2016-3135)
+
+  [ Ian Campbell ]
+  * [arm64] Enable ARCH_HISI (Hisilicon) and the set of currently available
+    drivers (Power, Thermal, MMC) (Closes: #812540)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 17 Mar 2016 01:25:23 +0000
+
+linux (4.4.4-2) unstable; urgency=medium
+
+  * Ignore ABI changes in sdhci* modules (fixes FTBFS on armhf)
+  * udeb: Add dependency from mmc-modules to crc-modules (fixes FTBFS on arm64)
+  * [hppa] Ignore ABI changes in built-in drm_kms_helper code (fixes FTBFS)
+  * [powerpc*] Revert "powerpc: Simplify module TOC handling"; it is not needed
+    to fix #808043 and causes a regression on ppc64el
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 09 Mar 2016 02:15:48 +0000
+
+linux (4.4.4-1) unstable; urgency=medium
+
+  [ Salvatore Bonaccorso ]
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.3
+    - [x86] mm: Fix types used in pgprot cacheability flags translations
+    - [x86] mm/pat: Avoid truncation when converting cpa->numpages to address
+    - [x86] uaccess/64: Make the __copy_user_nocache() assembly code
+      more readable
+    - [x86] uaccess/64: Handle the caching of 4-byte nocache copies
+      properly in __copy_user_nocache()
+    - [x86] mm: Fix vmalloc_fault() to handle large pages properly
+    - ALSA: hda - Cancel probe work instead of flush at remove
+    - ALSA: pcm: Fix rwsem deadlock for non-atomic PCM stream
+    - ALSA: seq: Fix leak of pool buffer at concurrent writes
+    - ALSA: seq: Fix double port list deletion
+    - [armhf] phy: twl4030-usb: Relase usb phy on unload
+    - [armhf] phy: twl4030-usb: Fix unbalanced pm_runtime_enable on
+      module reload
+    - staging/speakup: Use tty_ldisc_ref() for paste kworker
+    - pty: fix possible use after free of tty->driver_data
+    - pty: make sure super_block is still valid in final /dev/tty close
+    - tty: Add support for PCIe WCH382 2S multi-IO card
+    - [x86] serial: 8250_pci: Add Intel Broadwell ports
+    - [armhf] serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485)
+    - ext4: fix scheduling in atomic on group checksum failure
+    - ext4: fix potential integer overflow
+    - ext4: don't read blocks from disk after extents being swapped
+    - btrfs: handle invalid num_stripes in sys_array
+    - Btrfs: fix fitrim discarding device area reserved for boot loader's use
+    - Revert "btrfs: clear PF_NOFREEZE in cleaner_kthread()"
+    - btrfs: properly set the termination value of ctx->pos in readdir
+    - Btrfs: fix invalid page accesses in extent_same (dedup) ioctl
+    - Btrfs: fix page reading in extent_same ioctl leading to csum errors
+    - Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl
+    - Btrfs: fix direct IO requests not reporting IO error to user space
+    - ptrace: use fsuid, fsgid, effective creds for fs access checks
+    - tracing: Fix freak link error caused by branch tracer
+    - tracepoints: Do not trace when cpu is offline
+    - klist: fix starting point removed bug in klist iterators
+    - scsi: add Synology to 1024 sector blacklist
+    - iscsi-target: Fix potential dead-lock during node acl delete
+    - SCSI: fix crashes in sd and sr runtime PM
+    - drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
+    - scsi_dh_rdac: always retry MODE SELECT on command lock violation
+    - SCSI: Add Marvell Console to VPD blacklist
+    - scsi: fix soft lockup in scsi_remove_target() on module removal
+    - iio: adis_buffer: Fix out-of-bounds memory access
+    - iio:adc:ti_am335x_adc Fix buffered mode by identifying as software buffer.
+    - iio-light: Use a signed return type for ltr501_match_samp_freq()
+    - iio: add HAS_IOMEM dependency to VF610_ADC
+    - iio: add IIO_TRIGGER dependency to STK8BA50
+    - iio: dac: mcp4725: set iio name property in sysfs
+    - iio: light: acpi-als: Report data as processed
+    - iio: pressure: mpl115: fix temperature offset sign
+    - iio: inkern: fix a NULL dereference on error
+    - cifs: Ratelimit kernel log messages
+    - cifs: fix race between call_async() and reconnect()
+    - cifs_dbg() outputs an uninitialized buffer in cifs_readdir()
+    - cifs: fix erroneous return value
+    - NFS: Fix attribute cache revalidation
+    - pNFS/flexfiles: Fix an Oopsable typo in ff_mirror_match_fh()
+    - nfs: Fix race in __update_open_stateid()
+    - pNFS/flexfiles: Fix an XDR encoding bug in layoutreturn
+    - udf: limit the maximum number of indirect extents in a row
+    - udf: Prevent buffer overrun with multi-byte characters
+    - udf: Check output buffer length when converting name to CS0
+    - SUNRPC: Fixup socket wait for memory
+    - [powerpc] eeh: Fix PE location code
+    - [powerpc] eeh: Fix stale cached primary bus
+    - [powerpc] powernv: Fix stale PE primary bus
+    - [powerpc] ioda: Set "read" permission when "write" is set
+    - [armhf] mvebu: remove duplicated regulator definition in Armada 388 GP
+    - [arm64] mm: avoid calling apply_to_page_range on empty range
+    - [armel,armhf] 8519/1: ICST: try other dividends than 1
+    - [armel,armhf] 8517/1: ICST: avoid arithmetic overflow in icst_hz()
+    - [armhf] dts: Fix wl12xx missing clocks that cause hangs
+    - [armhf] dts: Fix omap5 PMIC control lines for RTC writes
+    - [armhf] dts: omap5-board-common: enable rtc and charging of backup battery
+    - [armhf] OMAP2+: Fix wait_dll_lock_timed for rodata
+    - [armhf] OMAP2+: Fix l2_inv_api_params for rodata
+    - [armhf] OMAP2+: Fix l2dis_3630 for rodata
+    - [armhf] OMAP2+: Fix save_secure_ram_context for rodata
+    - [armhf] OMAP2+: Fix ppa_zero_params and ppa_por_params for rodata
+    - [arm64] dma-mapping: fix handling of devices registered before
+      arch_initcall
+    - [arm,arm64] KVM: Fix reference to uninitialised VGIC
+    - [powerpc*] KVM: PPC: Fix emulation of H_SET_DABR/X on POWER8
+    - [powerpc*] KVM: PPC: Fix ONE_REG AltiVec support
+    - mm: soft-offline: check return value in second __get_any_page() call
+    - libnvdimm: fix namespace object confusion in is_uuid_busy()
+    - mm: fix mlock accouting
+    - mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
+    - mm: fix regression in remap_file_pages() emulation
+    - Input: elantech - mark protocols v2 and v3 as semi-mt
+    - [x86] Input: i8042 - add Fujitsu Lifebook U745 to the nomux list
+    - string_helpers: fix precision loss for some inputs
+    - Input: vmmouse - fix absolute device registration
+    - [x86] iommu/vt-d: Don't skip PCI devices when disabling IOTLB
+    - [x86] iommu/amd: Correct the wrong setting of alias DTE in do_attach
+    - [x86] iommu/vt-d: Fix mm refcounting to hold mm_count not mm_users
+    - [x86] iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG
+    - [x86] iommu/vt-d: Clear PPR bit to ensure we get more page
+      request interrupts
+    - Revert "xhci: don't finish a TD if we get a short-transfer event mid TD"
+    - xhci: Fix list corruption in urb dequeue at host removal
+    - fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
+    - [s390x] numa: fix /proc/<pid>/numa_maps for hugetlbfs on s390
+    - memcg: only free spare array when readers are done
+    - radix-tree: fix race in gang lookup
+    - drivers/hwspinlock: fix race between radix tree insertion and lookup
+    - radix-tree: fix oops after radix_tree_iter_retry
+    - dump_stack: avoid potential deadlocks
+    - mm,thp: khugepaged: call pte flush at the time of collapse
+    - [x86] intel_scu_ipcutil: underflow in scu_reg_access()
+    - ipc/shm: handle removed segments gracefully in shm_mmap()
+    - devm_memremap_release(): fix memremap'd addr handling
+    - futex: Drop refcount if requeue_pi() acquired the rtmutex
+    - ovl: allow zero size xattr
+    - ovl: use a minimal buffer in ovl_copy_xattr
+    - ovl: check dentry positiveness in ovl_cleanup_whiteouts()
+    - ovl: root: copy attr
+    - ovl: setattr: check permissions before copy-up
+    - libxfs: pack the agfl header structure so XFS_AGFL_SIZE is correct
+    - xfs: inode recovery readahead can race with inode buffer creation
+    - Revert "xfs: clear PF_NOFREEZE for xfsaild kthread"
+    - xfs: log mount failures don't wait for buffers to be released
+    - prctl: take mmap sem for writing to protect against others
+    - timerfd: Handle relative timers with CONFIG_TIME_LOW_RES proper
+    - posix-timers: Handle relative timers with CONFIG_TIME_LOW_RES proper
+    - itimers: Handle relative timers with CONFIG_TIME_LOW_RES proper
+    - modules: fix modparam async_probe request
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.4
+    - af_iucv: Validate socket address length in iucv_sock_bind()
+    - gro: Make GRO aware of lightweight tunnels.
+    - tunnels: Allow IPv6 UDP checksums to be correctly controlled.
+    - lwt: fix rx checksum setting for lwt devices tunneling over ipv6
+    - tcp: fix NULL deref in tcp_v4_send_ack()
+    - af_unix: fix struct pid memory leak
+    - pptp: fix illegal memory access caused by multiple bind()s
+    - sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
+    - tipc: fix connection abort during subscription cancel
+    - inet: frag: Always orphan skbs inside ip_defrag()
+    - tcp: beware of alignments in tcp_get_info()
+    - ipv6: enforce flowi6_oif usage in ip6_dst_lookup_tail()
+    - ipv6/udp: use sticky pktinfo egress ifindex on connect()
+    - ipv6: addrconf: Fix recursive spin lock call
+    - ipv6: fix a lockdep splat
+    - unix: correctly track in-flight fds in sending process user_struct
+      (regression in 4.3.3-6; CVE-2016-2550)
+    - tcp: do not drop syn_recv on all icmp reports
+    - net:Add sysctl_max_skb_frags
+    - tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs
+    - enic: increment devcmd2 result ring in case of timeout
+    - sctp: translate network order to host order when users get a hmacid
+    - net: Copy inner L3 and L4 headers as unaligned on GRE TEB
+    - flow_dissector: Fix unaligned access in __skb_flow_dissector when used by
+      eth_get_headlen
+    - bpf: fix branch offset adjustment on backjumps after patching
+      ctx expansion
+    - bonding: Fix ARP monitor validation
+    - ipv4: fix memory leaks in ip_cmsg_send() callers
+    - af_unix: Don't set err in unix_stream_read_generic unless there was
+      an error
+    - af_unix: Guard against other == sk in unix_dgram_sendmsg
+    - tipc: fix premature addition of node to lookup table
+    - tcp: md5: release request socket instead of listener
+    - qmi_wwan: add "4G LTE usb-modem U901"
+    - net/mlx4_en: Count HW buffer overrun only once
+    - net/mlx4_en: Choose time-stamping shift value according to HW frequency
+    - net/mlx4_en: Avoid changing dev->features directly in run-time
+    - l2tp: Fix error creating L2TP tunnels
+    - pppoe: fix reference counting in PPPoE proxy
+    - net_sched fix: reclassification needs to consider ether protocol changes
+    - route: check and remove route cache when we get route
+    - tcp/dccp: fix another race at listener dismantle
+    - IFF_NO_QUEUE: Fix for drivers not calling ether_setup()
+    - rtnl: RTM_GETNETCONF: fix wrong return value
+    - tipc: unlock in error path
+    - unix_diag: fix incorrect sign extension in unix_lookup_by_ino
+    - sctp: Fix port hash table size computation
+    - ext4: fix bh->b_state corruption
+    - [s390x] KVM: fix guest fprs memory leak
+    - devm_memremap: Fix error value when memremap failed
+    - efi: Make efivarfs entries immutable by default
+    - efi: Add pstore variables to the deletion whitelist
+    - bcache: fix a livelock when we cause a huge number of cache misses
+    - bcache: Add a cond_resched() call to gc
+    - bcache: clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device
+    - bcache: fix a leak in bch_cached_dev_run()
+    - bcache: unregister reboot notifier if bcache fails to unregister device
+    - bcache: allows use of register in udev to avoid "device_busy" error.
+    - bcache: prevent crash on changing writeback_running
+    - bcache: Change refill_dirty() to always scan entire disk if necessary
+    - dm thin: fix race condition when destroying thin pool workqueue
+    - can: ems_usb: Fix possible tx overflow
+    - usb: dwc3: Fix assignment of EP transfer resources
+    - USB: cp210x: add IDs for GE B650V3 and B850V3 boards
+    - USB: option: add support for SIM7100E
+    - USB: option: add "4G LTE usb-modem U901"
+    - [armhf] spi: omap2-mcspi: Prevent duplicate gpio_request
+    - iw_cxgb3: Fix incorrectly returning error on success
+    - [x86] drm/i915: shut up gen8+ SDE irq dmesg noise
+    - ocfs2: unlock inode if deleting inode from orphan fails
+    - mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED
+    - mm: numa: quickly fail allocations for NUMA balancing on full nodes
+    - genirq: Validate action before dereferencing it in
+      handle_irq_event_percpu()
+    - [s390x] KVM: fix memory overwrites when vx is disabled
+    - Btrfs: add missing brelse when superblock checksum fails
+    - Btrfs: igrab inode in writepage
+    - btrfs: statfs: report zero available if metadata are exhausted
+    - Btrfs: send, don't BUG_ON() when an empty symlink is found
+    - Btrfs: fix number of transaction units required to create symlink
+    - Btrfs: fix transaction handle leak on failure to create hard link
+    - Btrfs: Initialize btrfs_root->highest_objectid when loading tree root and
+      subvolume roots
+    - btrfs: initialize the seq counter in struct btrfs_device
+    - [s390x] fix normalization bug in exception table sorting
+    - [s390x] dasd: prevent incorrect length error under z/VM after PAV changes
+    - [s390x] dasd: fix refcount for PAV reassignment
+    - [s390x] dasd: fix performance drop
+    - [s390x] compat: correct restore of high gprs on signal return
+    - [s390x] fpu: signals vs. floating point control register
+    - locks: fix unlock when fcntl_setlk races with a close
+    - rtlwifi: rtl8192cu: Add missing parameter setup
+    - rtlwifi: rtl8192ce: Fix handling of module parameters
+    - rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
+    - rtlwifi: rtl8723ae: Fix initialization of module parameters
+    - rtlwifi: rtl8192se: Fix module parameter initialization
+    - rtlwifi: rtl8188ee: Fix module parameter initialization
+    - rtlwifi: rtl8723be: Fix module parameter initialization
+    - [x86] mei: fix fasync return value on error
+    - [x86] mei: validate request value in client notify request ioctl
+    - namei: ->d_inode of a pinned dentry is stable only for positives
+    - [armhf] rc: sunxi-cir: Initialize the spinlock properly
+    - gspca: ov534/topro: prevent a division by 0
+    - vb2: fix a regression in poll() behavior for output,streams
+    - tda1004x: only update the frontend properties if locked
+    - dm snapshot: fix hung bios when copy error occurs
+    - dm: fix dm_rq_target_io leak on faults with .request_fn DM w/ blk-mq paths
+    - posix-clock: Fix return code on the poll method's error path
+    - mmc: sdhci-pci: Do not default to 33 Ohm driver strength for Intel SPT
+    - mmc: sdhci: Fix DMA descriptor with zero data length
+    - mmc: sdio: Fix invalid vdd in voltage switch power cycle
+    - mmc: mmc: Fix incorrect use of driver strength switching HS200 and HS400
+    - mmc: sdhci: Fix sdhci_runtime_pm_bus_on/off()
+    - mmc: core: Enable tuning according to the actual timing
+    - [armhf, arm64] mmc: mmci: fix an ages old detection error
+    - [x86] mmc: sdhci-acpi: Fix card detect race for Intel BXT/APL
+    - [x86] mmc: sdhci-pci: Fix card detect race for Intel BXT/APL
+    - mmc: sdhci: Allow override of mmc host operations
+    - mmc: sdhci: Allow override of get_cd() called from sdhci_request()
+    - [x86] Drivers: hv: vmbus: Fix a Host signaling bug
+    - Bluetooth: Use continuous scanning when creating LE connections
+    - Bluetooth: Add support of Toshiba Broadcom based devices
+    - Bluetooth: Fix incorrect removing of IRKs
+    - Bluetooth: 6lowpan: Fix kernel NULL pointer dereferences
+    - Bluetooth: 6lowpan: Fix handling of uncompressed IPv6 packets
+    - time: Avoid signed overflow in timekeeping_get_ns()
+    - cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
+    - [mips*] Revert "MIPS: Fix PAGE_MASK definition"
+    - [mips*el/loongson-3] Loongson-3: Fix SMP_ASK_C0COUNT IPI handler
+    - [mips*] hpet: Choose a safe value for the ETIME check
+    - [mips*] Fix buffer overflow in syscall_get_arguments()
+    - EDAC: Robustify workqueues destruction
+    - EDAC, mc_sysfs: Fix freeing bus' name
+    - [sparc64] fix incorrect sign extension in sys_sparc64_personality
+    - [armhf] clk: exynos: use irqsave version of spin_lock to avoid deadlock
+      with irqs
+    - [armhf] regulator: axp20x: Fix GPIO LDO enable value for AXP22x
+    - virtio_balloon: fix race by fill and leak
+    - virtio_balloon: fix race between migration and ballooning
+    - virtio_pci: fix use after free on release
+    - [x86] drm/vmwgfx: Fix an incorrect lock check
+    - [x86] drm/vmwgfx: Fix a width / pitch mismatch on framebuffer updates
+    - [x86] drm/vmwgfx: respect 'nomodeset'
+    - [x86] drm/amdgpu: Fix off-by-one errors in amdgpu_vm_bo_map
+    - [x86] drm/amdgpu: call hpd_irq_event on resume
+    - [x86] drm/amdgpu: fix lost sync_to if scheduler is enabled.
+    - [x86] drm/amdgpu: fix tonga smu resume
+    - [x86] drm/amdgpu: fix amdgpu_bo_pin_restricted VRAM placing v2
+    - [x86] drm/amdgpu: no need to load MC firmware on fiji
+    - [x86] drm/amdgpu: move gmc7 support out of CIK dependency
+    - [x86] drm/amdgpu: iceland use CI based MC IP
+    - [x86] drm/amdgpu: The VI specific EXE bit should only apply to GMC
+      v8.0 above
+    - [x86] drm/amdgpu: pull topaz gmc bits into gmc_v7
+    - [x86] drm/amdgpu: drop topaz support from gmc8 module
+    - [x86] drm/amdgpu: don't load MEC2 on topaz
+    - [x86] drm/amdgpu: remove exp hardware support from iceland
+    - [x86] drm/amdgpu: fix s4 resume
+    - [x86] drm/amdgpu: remove unnecessary forward declaration
+    - [x86] drm/amdgpu: hold reference to fences in amdgpu_sa_bo_new (v2)
+    - [x86] drm/amdgpu: fix issue with overlapping userptrs
+    - [x86] drm/amdgpu: use post-decrement in error handling
+    - [x86] drm/amdgpu: Don't hang in amdgpu_flip_work_func on disabled crtc.
+    - [x86] drm/amdgpu/pm: adjust display configuration after powerstate
+    - drm/nouveau/kms: take mode_config mutex in connector hotplug path
+    - drm/nouveau/display: Enable vblank irqs after display engine is on again.
+      (regression in 4.4)
+    - drm/nouveau/disp/dp: ensure sink is powered up before attempting
+      link training
+    - drm/nouveau: platform: Fix deferred probe
+    - drm/radeon: Fix off-by-one errors in radeon_vm_bo_set_addr
+    - drm/radeon: Fix "slow" audio over DP on DCE8+
+    - drm/radeon: clean up fujitsu quirks
+    - drm/radeon: properly byte swap vce firmware setup
+    - drm/radeon: cleaned up VCO output settings for DP audio
+    - drm/radeon: Add a common function for DFS handling
+    - drm/radeon: fix DP audio support for APU with DCE4.1 display engine
+    - drm/radeon: mask out WC from BO on unsupported arches
+    - drm/radeon: hold reference to fences in radeon_sa_bo_new
+    - drm: fix missing reference counting decrease
+    - [x86] drm/i915: Restore inhibiting the load of the default context
+    - [x86] drm/i915: intel_hpd_init(): Fix suspend/resume reprobing
+    - [x86] drm/i915: Init power domains early in driver load
+    - [x86] drm/i915: Make sure DC writes are coherent on flush.
+    - [x86] drm/i915/dp: fall back to 18 bpp when sink capability is unknown
+    - [x86] drm/i915: Don't reject primary plane windowing with color keying
+      enabled on SKL+
+    - [x86] drm/i915/skl: Don't skip mst encoders in skl_ddi_pll_select()
+    - [x86] drm/i915/dsi: defend gpio table against out of bounds access
+    - [x86] drm/i915/dsi: don't pass arbitrary data to sideband
+    - [x86] drm/i915: fix error path in intel_setup_gmbus()
+    - drm/qxl: use kmalloc_array to alloc reloc_info in
+      qxl_process_single_command
+    - drm/radeon: use post-decrement in error handling
+    - drm: No-Op redundant calls to drm_vblank_off() (v2)
+    - drm: Prevent vblank counter bumps > 1 with active vblank clients. (v2)
+      (regression in 4.4)
+    - drm: Fix drm_vblank_pre/post_modeset regression from Linux 4.4
+    - drm: Fix treatment of drm_vblank_offdelay in drm_vblank_on() (v2)
+    - drm/radeon: Don't hang in radeon_flip_work_func on disabled crtc. (v2)
+    - drm/radeon/pm: adjust display configuration after powerstate
+    - make sure that freeing shmem fast symlinks is RCU-delayed
+    - [x86] toshiba_acpi: Fix blank screen at boot if transflective backlight is
+      supported
+    - [x86] ideapad-laptop: Add Lenovo ideapad Y700-17ISK to no_hw_rfkill
+      dmi list
+    - [x86] ideapad-laptop: Add Lenovo Yoga 700 to no_hw_rfkill dmi list
+    - [x86] ACPI / video: Add disable_backlight_sysfs_if quirk for the Toshiba
+      Portege R700
+    - [x86] ACPI / video: Add disable_backlight_sysfs_if quirk for the Toshiba
+      Satellite R830
+    - [x86] ACPI: Revert "ACPI / video: Add Dell Inspiron 5737 to the blacklist"
+    - [x86] ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot()
+    - nfit: fix multi-interface dimm handling, acpi6.1 compatibility
+    - dmaengine: dw: fix cyclic transfer setup
+    - dmaengine: dw: fix cyclic transfer callbacks
+    - dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
+    - IB/cm: Fix a recently introduced deadlock
+    - IB/qib: fix mcast detach when qp not attached
+    - IB/qib: Support creating qps with GFP_NOIO flag
+    - IB/mlx5: Expose correct maximum number of CQE capacity
+    - Thermal: initialize thermal zone device correctly
+    - Thermal: handle thermal zone device properly during system sleep
+    - Thermal: do thermal zone update after a cooling device registered
+    - hwmon: (dell-smm) Blacklist Dell Studio XPS 8000
+    - hwmon: (gpio-fan) Remove un-necessary speed_index lookup for thermal hook
+    - hwmon: (ads1015) Handle negative conversion values correctly
+    - cpufreq: pxa2xx: fix pxa_cpufreq_change_voltage prototype
+    - cpufreq: Fix NULL reference crash while accessing policy->governor_data
+    - seccomp: always propagate NO_NEW_PRIVS on tsync
+    - libceph: fix ceph_msg_revoke()
+    - libceph: don't bail early from try_read() when skipping a message
+    - libceph: use the right footer size when skipping a message
+    - libceph: don't spam dmesg with stray reply warnings
+    - sd: Optimal I/O size is in bytes, not sectors
+    - Staging: speakup: Fix getting port information
+    - cdc-acm:exclude Samsung phone 04e8:685d
+    - tick/nohz: Set the correct expiry when switching to nohz/lowres mode
+    - rfkill: fix rfkill_fop_read wait_event usage
+    - mac80211: Requeue work after scan complete for all VIF types.
+    - workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
+    - Revert "workqueue: make sure delayed work run in local cpu"
+    - ALSA: hda - Apply clock gate workaround to Skylake, too
+    - ALSA: hda - Fixing background noise on Dell Inspiron 3162
+    - target: Fix LUN_RESET active I/O handling for ACK_KREF
+    - target: Fix LUN_RESET active TMR descriptor handling
+    - target: Fix TAS handling for multi-session se_node_acls
+    - target: Fix remote-port TMR ABORT + se_cmd fabric stop
+    - target: Fix race with SCF_SEND_DELAYED_TAS handling
+    - qla2xxx: Fix stale pointer access.
+    - libata: fix sff host state machine locking while polling
+    - PCI/AER: Flush workqueue on device remove to avoid use-after-free
+    - cpuset: make mm migration asynchronous
+    - cgroup: make sure a parent css isn't offlined before its children
+    - writeback: keep superblock pinned during cgroup writeback
+      association switches
+    - phy: core: fix wrong err handle for phy_power_on
+    - [x86] i2c: i801: Adding Intel Lewisburg support for iTCO
+    - bio: return EINTR if copying to user space got interrupted
+    - block: fix use-after-free in dio_bio_complete
+    - nfs: fix nfs_size_to_loff_t
+    - NFSv4: Fix a dentry leak on alias use
+    - KVM: async_pf: do not warn on page allocation failures
+    - [armhf,arm64] KVM: vgic: Ensure bitmaps are long enough
+    - [x86] KVM: fix missed hardware breakpoints
+    - [x86] KVM: fix conversion of addresses to linear in 32-bit protected mode
+    - [x86] KVM: MMU: fix ubsan index-out-of-range warning
+    - [powerpc] eeh: Fix partial hotplug criterion
+    - tracing: Fix showing function event in available_events
+    - sunrpc/cache: fix off-by-one in qword_get()
+    - kernel/resource.c: fix muxed resource handling in __request_region()
+    - do_last(): don't let a bogus return value from ->open() et.al. to
+      confuse us
+    - [armhf] OMAP2+: Fix onenand initialization to avoid filesystem corruption
+    - [armhf] xen: correctly handle DMA mapping of compound pages
+    - xen/scsiback: correct frontend counting
+    - xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
+    - xen/pciback: Save the number of MSI-X entries to be copied later.
+    - xen/pcifront: Fix mysterious crashes when NUMA locality information
+      was extracted.
+    - should_follow_link(): validate ->d_seq after having decided to follow
+    - do_last(): ELOOP failure exit should be done after leaving RCU mode
+    - [x86] mpx: Fix off-by-one comparison with nr_registers
+    - [x86] entry/compat: Add missing CLAC to entry_INT80_32
+    - [x86] irq: Call chip->irq_set_affinity in proper context
+    - [x86] irq: Fix a race in x86_vector_free_irqs()
+    - [x86] irq: Validate that irq descriptor is still active
+    - [x86] irq: Do not use apic_chip_data.old_domain as temporary buffer
+    - [x86] irq: Reorganize the return path in assign_irq_vector
+    - [x86] irq: Reorganize the search in assign_irq_vector
+    - [x86] irq: Check vector allocation early
+    - [x86] irq: Copy vectormask instead of an AND operation
+    - [x86] irq: Remove offline cpus from vector cleanup
+    - [x86] irq: Clear move_in_progress before sending cleanup IPI
+    - [x86] irq: Remove the cpumask allocation from send_cleanup_vector()
+    - [x86] irq: Remove outgoing CPU from vector cleanup mask
+    - [x86] irq: Call irq_force_move_complete with irq descriptor
+    - [x86] irq: Plug vector cleanup race
+    - IB/cma: Fix RDMA port validation for iWarp
+    - security: let security modules use PTRACE_MODE_* with bitmasks
+    - iwlwifi: dvm: fix WoWLAN
+    - iwlwifi: pcie: properly configure the debug buffer size for 8000
+    - iwlwifi: update and fix 7265 series PCI IDs
+    - iwlwifi: mvm: don't allow sched scans without matches to be started
+
+  [ Roger Shimizu ]
+  * [armhf] dts: imx6dlq-wandboard-revb1: use unique model id
+    (Closes: #813881).
+  * [armel] dts: Add various device-tree fixes and improvements for
+    Buffalo Linkstation devices.
+
+  [ Ben Hutchings ]
+  * udeb: Include more modules, including those needed on Firefly-RK3288,
+    thanks to Vagrant Cascadian (Closes: #815476)
+    - [armhf] core-modules: Include regulator drivers by default
+    - mmc-modules: Include MMC controller drivers by default
+    - mmc-modules: Depends on usb-modules
+    - usb-modules: Include USB PHY drivers by default
+  * uas: Fix high-order alloc
+  * Fix/ignore module ABI changes in 4.4.4 as appropriate
+  * Revert "drm/radeon: call hpd_irq_event on resume", reported to cause
+    regressions (crash/hang) on some systems
+  * [powerpc*] Fix module linking to work with binutils 2.26 (Closes: #808043):
+    - Simplify module TOC handling
+    - Fix dedotify for binutils >= 2.26
+
+  [ Ian Campbell ]
+  * [armhf] dts: Add DTB for Novena, patches from Vagrant Cascadian
+    (Closes: #815324)
+
+  [ Uwe Kleine-König ]
+  * [armhf] enable AXP20X_POWER (Closes: #815971)
+  * [rt] Update to 4.4.3-rt9
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 07 Mar 2016 19:27:18 +0000
+
+linux-tools (4.4-4) unstable; urgency=medium
+
+  * hyperv-daemons: Only build the progarams on x86 (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 21 Feb 2016 16:57:55 +0000
+
+linux-tools (4.4-3) unstable; urgency=medium
+
+  * hyperv-daemons: Add init scripts
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 21 Feb 2016 15:07:55 +0000
+
+linux (4.4.2-3) unstable; urgency=medium
+
+  * [x86] efi-bgrt: Fix kernel panic when mapping BGRT data (Closes: #815125)
+  * [x86] efi-bgrt: Replace early_memremap() with memremap()
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 21 Feb 2016 13:11:18 +0000
+
+linux-tools (4.4-2) unstable; urgency=medium
+
+  * linux-perf: Include version number in strace groups installation directory
+    (Closes: #813080)
+  * [alpha,sh4] Attempt to fix build failures
+  * Build fixdep under debian/build and clean it up properly
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 19 Feb 2016 17:11:29 +0000
+
+linux (4.4.2-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * udeb: Make DAC960 and cciss optional in scsi-modules again
+    (fixes FTBFS on armhf, arm64)
+  * [armel,armhf] net: mv643xx_eth: fix packet corruption with TSO and tiny
+    unaligned packets. (Closes: #814681)
+  * [mipsel/loongson-2f] udeb: Add i2c-modules to avoid duplicate modules
+
+  [ Martin Michlmayr ]
+  * [arm64] Create i2c-modules udeb to avoid duplicate modules.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 19 Feb 2016 14:48:52 +0000
+
+linux-tools (4.4-1) unstable; urgency=medium
+
+  * Upload to unstable
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 18 Feb 2016 01:30:50 +0000
+
+linux (4.4.2-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.2
+    - ALSA: usb-audio: avoid freeing umidi object twice (CVE-2016-2384)
+
+  [ Ben Hutchings ]
+  * Set ABI to 1
+  * iw_cxgb3: Fix incorrectly returning error on success (CVE-2015-8812)
+  * fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list() (CVE-2016-0617)
+    (regression in 4.3)
+  * af_unix: Guard against other == sk in unix_dgram_sendmsg
+    (regression in 4.2.6-2)
+  * Revert "workqueue: make sure delayed work run in local cpu"
+    (regression in 4.3)
+  * af_unix: Don't set err in unix_stream_read_generic unless there was an error
+    (regression in 4.4, 4.3.4)
+  * bpf: fix branch offset adjustment on backjumps after patching ctx expansion
+    (CVE-2016-2383)
+  * udeb: Combine scsi-{common,extra}-modules with scsi-modules
+  * udeb: Use wildcards to include entire classes of drivers:
+    - input-modules: Include HID drivers by default
+    - nic{,-pcmcia,-usb,-wireless}-modules: Include Ethernet, USB and wireless
+      drivers by default
+    - {pata,sata}-modules: Include ATA drivers by default
+    - sound-modules: Include sound drivers by default
+    - scsi-modules: Include SCSI drivers by default
+    - usb-modules: Include USB host drivers by default
+    - usb-serial-modules: Include USB serial drivers by default
+    - usb-storage-modules: Include USB storage drivers by default
+  * udeb: Remove some obsolete drivers:
+    - nic-modules: Remove FDDI and HIPPI drivers, and inet_lro module
+    - nic-pcmcia-modules: Remove Arcnet drivers
+  * udeb: Move most USB wireless drivers from nic-usb-modules to
+    nic-wireless-modules
+  * udeb: Really add virtio_input to virtio-modules (not input-modules)
+  * [x86] Fix issues resulting in W+X pages:
+    - [amd64] efi: Build our own page table structure
+    - [i386/686-pae] mm: Fix types used in pgprot cacheability flags
+      translations
+    - [i386/686-pae] PCI: Set pci=nobios by default
+  * IFF_NO_QUEUE: Fix for drivers not calling ether_setup() (regression in 4.3)
+  * udeb: Fix issues with wildcards that caused FTBFS on armhf, thanks to
+    Karsten Merker
+
+  [ Roger Shimizu ]
+  * Enable TTY_PRINTK as module (Closes: #814540).
+
+  [ Uwe Kleine-König ]
+  * [rt] Update to 4.4.1-rt6
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 17 Feb 2016 21:20:12 +0000
+
+linux (4.4.1-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1
+
+  [ Ricardo Salveti ]
+  * Extending ARM64 support:
+    - config: enabling support for the AMD Seattle platform
+    - nic-modules: adding amd-xgbe
+    - sata-modules: adding ahci_platform, required by AMD Overdrive
+    - config: enabling the cpuidle ARM driver
+    - config: enable multi-core scheduler support by default
+    - config: enable PCI generic host bridge by default
+    - config: enable CRYPTO_CRC32_ARM64 by default
+
+  [ Ian Campbell ]
+  * [arm64] Enabled support for QCOM platforms, options recommended by Martin
+    Michlmayr. (Closes: #812386)
+  * [armel/marvell] Declare breaks against flash-kernel << 3.57~ in order to
+    force a version which understands about the merge of kirkwood and orion5x
+    flavours into marvell.
+
+  [ Ben Hutchings ]
+  * linux-image: Make failure of depmod fatal, rather than asking what to do
+  * [mips*] linux-image: Remove debconf question for requirement of initramfs
+  * linux-image: Remove unnecessary debconf initialisations
+  * linux-{headers,image}: Remove support for version-specific hooks
+  * linux-headers: Make postinst script less verbose (see: #734266)
+  * [armel] Replace kirkwood and orion5x flavours with a 'marvell' flavour
+  * [armel/marvell] Adjust configuration to reduce image size:
+    - Disable support for DNS-323 as the kernel image was already too large
+      for this machine
+      + Disable MACH_DNS323
+      + Change MTD_CFI_AMDSTD from built-in to module
+    - input: Disable KEYBOARD_ATKBD
+    - mtd: Change JFFS2_FS, MTD_SPI_NOR, and M25P80 from built-in to modules
+  * [rt] Update to 4.4.1-rt5:
+    - genirq: Add default affinity mask command line option
+    - latencyhist: disable jump-labels
+    - kernel/perf: mark perf_cpu_context's timer as irqsafe
+  * bnx2x: Enable BNX2X_VXLAN
+  * cgroups: Enable CGROUP_PIDS
+  * crypto: Enable CRYPTO_CHACHA20, CRYPTO_POLY1305, CRYPTO_CHACHA20POLY1305,
+    CRYPTO_USER_API_AEAD as modules
+  * [x86] crypto: Enable CRYPTO_DEV_QAT_DH895xCC, CRYPTO_DEV_QAT_DH895xCCVF
+    as modules
+  * [amd64] crypto: Enable CRYPTO_CHACHA20_X86_64, CRYPTO_DES3_EDE_X86_64,
+    CRYPTO_POLY1305_X86_64 as modules
+  * [x86] dmaengine: Enable INTEL_IDMA64 as module
+  * debug: Enable SCHED_STACK_END_CHECK
+  * dm-cache: Enable DM_CACHE_SMQ as module
+  * ethernet: Enable BNXT, QED, QEDE as modules
+  * hci_uart: Enable BT_HCIUART_QCA
+  * HID: Enable HID_CORSAIR, HID_GEMBIRD as modules
+  * [x86] hwmon: Enable SENSORS_I5500 as module
+  * [x86] IB: Enable INFINIBAND_USNIC as module
+  * iio/light: Enable ACPI_ALS as module
+  * [x86] input: Enable SURFACE_PRO3_BUTTON as module
+  * [x86] iommu: Enable INTEL_IOMMU_SVM
+  * ipvs: Enable IP_VS_OVF as module
+  * media: Enable DVB_NETUP_UNIDVB, USB_GSPCA_TOUPTEK,_VIDEO_DT3155 as modules
+  * [x86] mfd: Enable MFD_INTEL_LPSS_ACPI, MFD_INTEL_LPSS_PCI as modules
+  * [amd64] mic: Enable INTEL_MIC_X100_DMA, MIC_COSM, SCIF, SCIF_BUS as modules
+  * [powerpc*/*64*] misc: Enable GENWQE as module
+  * net: Enable LWTUNNEL, NET_L3_MASTER_DEV; and MPLS_IPTUNNEL, NET_VRF
+    as modules
+  * [amd64] net: Enable FUJITSU_ES as module
+  * netfilter: Really enable NF_TABLES_NETDEV, NFT_REDIR_IPV4, NFT_REDIR_IPV6
+    as modules
+  * net/phy: Enable AQUANTIA_PHY, DP83848_PHY, MICROCHIP_PHY, TERANETICS_PHY
+    as modules
+  * net/sched: Really enable NET_CLS_FLOWER as module
+  * net/usb: Enable USB_LAN78XX, USB_NET_CH9200 as modules
+  * nfsd: Enable NFSD_PNFS
+  * [x86] pinctrl: Enable PINCTRL_BROXTON, PINCTRL_SUNRISEPOINT
+  * [x86] rfkill: Enable DELL_RBTN as module
+  * serial: Enable SERIAL_OF_PLATFORM as module
+  * sound/firewire: Enable SND_FIREWIRE_DIGI00X, SND_FIREWIRE_TASCAM as modules
+  * [x86] thermal: Enable INTEL_PCH_THERMAL, INTEL_SOC_DTS_THERMAL as modules;
+    disable THERMAL_OF
+  * [x86] Enable INTEL_PMC_IPC as module
+  * vfs,nvdimm: Really enable FS_DAX
+  * [amd64] mm,nvdimm: Disable ZONE_DMA; enable ZONE_DEVICE, NVDIMM_PFN
+    - This disables drivers for some AC'97 sound cards
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 10 Feb 2016 02:02:14 +0000
+
+linux (4.4-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_4.4
+
+  [ Ben Hutchings ]
+  * [armhf] Enable EXTCON_USB_GPIO, ENSORS_GPIO_FAN as modules, and
+    USB_DWC3_DUAL_ROLE instead of USB_DWC3_HOST (Closes: #810048)
+  * [rt] Update to 4.4-rt2
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 19 Jan 2016 22:25:06 +0000
+
+linux-tools (4.4-1~exp2) experimental; urgency=medium
+
+  * linux-perf: Fix FTBFS with gcc 6 (used on hppa, sparc64)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 19 Jan 2016 22:11:13 +0000
+
+linux-tools (4.4-1~exp1) experimental; urgency=medium
+
+  * New upstream release
+
+  [ Ben Hutchings ]
+  * linux-perf: Fix reading of build-id from vDSO
+  * linux-perf: Leave -rc suffix out of version in package description
+  * debian.py: Implement stable order of fields not in the predefined order
+  * genorig.py: Make orig tarballs really reproducible:
+    - Override umask while extracting/exporting files
+    - Override user and group names in tarball
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 19 Jan 2016 00:31:02 +0000
+
+linux (4.4~rc8-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [rt] Update to 4.4-rc6-rt1 and re-enable
+  * [rt] Fix build error in kernel/time/hrtimer.c
+  * [rt] latency_hist: Update sched_switch probe
+  * [armhf] Add support for BCM2836 and Raspberry Pi 2:
+    - pwm: bcm2835: Calculate scaler in ->config()
+    - pwm: bcm2835: Prevent division by zero
+    - drm: Create a driver hook for allocating GEM object structs
+    - drm/vc4: Add a BO cache
+    - drm/vc4: Add create and map BO ioctls
+    - drm/vc4: Add an API for creating GPU shaders in GEM BOs
+    - drm/vc4: Fix a typo in a V3D debug register
+    - drm/vc4: Bind and initialize the V3D engine
+    - drm/vc4: Add support for drawing 3D frames
+    - drm/vc4: Add support for async pageflips
+    - drm/vc4: Add an interface for capturing the GPU state after a hang
+    - drm/vc4: copy_to_user() returns the number of bytes remaining
+    - drm/vc4: allocate enough memory in vc4_save_hang_state()
+    - drm/vc4: fix an error code
+    - bcm2835: Add a compat string for bcm2836 machine probe
+    - bcm2835: Add Kconfig support for bcm2836
+    - bcm2835: Define two new packets from the latest firmware
+    - bcm2835: add rpi power domain driver
+    - bcm2835: Split the DT for peripherals from the DT for the CPU
+    - bcm2835: Move the CPU/peripheral include out of common RPi DT
+    - bcm2835: Add devicetree for bcm2836 and Raspberry Pi 2 B
+    - bcm2835: Add the auxiliary clocks to the device tree
+    - Enable ARCH_BCM, ARCH_BCM2835, DMA_BCM2835, BCM2835_MBOX,
+      RASPBERRYPI_FIRMWARE, RASPBERRYPI_POWER
+    - Enable DRM_VC4, I2C_BCM2835, MMC_SDHCI_BCM2835, PWM_BCM2835, SPI_BCM2835,
+      SPI_BCM2835AUX, USB_DWC2, BCM2835_WDT, SND_BCM2835_SOC_I2S as modules
+    - udeb: Add sdhci-bcm2835 to mmc-modules, dwc2 to usb-modules
+  * [armhf] Enable INPUT_AXP20X_PEK, CAN_SUN4I, SND_SUN4I_CODEC as modules
+    (Closes: #808623)
+  * [x86] nvdimm: Change X86_PMEM_LEGACY from built-in to module
+  * [x86] Enable DEBUG_WX, X86_INTEL_MPX
+
+  [ Ian Campbell ]
+  * [armel/kirkwood] Updates/clarifications to kernel size limitations from
+    Martin Michlmayr. (Closes: #809528)
+  * [armhf] Enable support for Rockchip devices. (Closes: #809083)
+  * [armhf] Enable basic support for DRA7XX systems, such as Beagle-x15.
+    (Closes: #807624)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 04 Jan 2016 17:23:28 +0000
+
+linux (4.4~rc6-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+    - include/linux/mmdebug.h: should include linux/bug.h
+      (fixes FTBFS on arm64)
+
+  [ Ben Hutchings ]
+  * [sparc64] udeb: Replace mpt2sas with mpt3sas in scsi-common-modules
+    (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 21 Dec 2015 17:30:10 +0000
+
+linux (4.4~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [arm64] Drop now-redundant patches for X-Gene (fixes FTBFS)
+  * [s390x] udeb: Add crc-modules package (fixes FTBFS)
+  * cirrus,mgag200: Drop patches for compatibility with wheezy userland
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 16 Dec 2015 17:16:09 +0000
+
+linux-tools (4.4~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 14 Dec 2015 01:28:50 +0000
+
+linux (4.4~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update support patches to aufs4.x-rcN-20151123
+  * udeb: Make md-modules depend on crc-modules (Closes: #807661)
+  * [armel/kirkwood,armhf] crypto: Enable CRYPTO_DEV_MARVELL_CESA as module
+    (Closes: #807634)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 13 Dec 2015 16:25:45 +0000
+
+linux (4.3.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4
+    - toshiba_acpi: Initialize hotkey_event_type variable (regression in 4.3)
+    - USB: add quirk for devices with broken LPM
+    - usb: core : hub: Fix BOS 'NULL pointer' kernel panic
+    - pppoe: fix memory corruption in padt work structure (regression in 4.1)
+    - ipv6: keep existing flags when setting IFA_F_OPTIMISTIC
+      (regression in 4.1)
+    - vxlan: fix incorrect RCO bit in VXLAN header (regression in 4.0)
+    - sctp: update the netstamp_needed counter when copying sockets
+    - sctp: also copy sk_tsflags when copying the socket (regression in 3.17)
+    - r8152: fix lockup when runtime PM is enabled (regression in 4.2)
+    - ipv6: sctp: clone options to avoid use after free
+    - phy: micrel: Fix finding PHY properties in MAC node. (regression in 4.2)
+    - openvswitch: Fix helper reference leak
+    - openvswitch: Respect conntrack zone even if invalid
+    - net: fix IP early demux races
+    - vlan: Fix untag operations of stacked vlans with REORDER_HEADER off
+    - skbuff: Fix offset error in skb_reorder_vlan_header
+    - net: check both type and procotol for tcp sockets
+    - net_sched: make qdisc_tree_decrease_qlen() work for non mq
+      (regression in 4.3.3)
+    - net: fix uninitialized variable issue
+    - ipv6: automatically enable stable privacy mode if stable_secret set
+    - inet: tcp: fix inetpeer_set_addr_v4() (regression in 4.3)
+    - rhashtable: Enforce minimum size on initial hash table (regression in 4.1)
+    - fou: clean up socket with kfree_rcu
+    - af_unix: Revert 'lock_interruptible' in stream receive code
+    - tcp: restore fastopen with no data in SYN packet (regression in 4.0)
+    - rhashtable: Fix walker list corruption (regression in 4.1)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5
+    - [x86] mpx: Fix instruction decoder condition
+    - [x86] signal: Fix restart_syscall number for x32 tasks
+    - [x86] paravirt: Prevent rtc_cmos platform device init on PV guests
+      (regression in 4.2)
+    - [powerpc*] KVM: Book3S HV: Don't dynamically split core when already split
+      (regression in 4.3)
+    - [powerpc*] KVM: Book3S HV: Prohibit setting illegal transaction state
+      in MSR
+    - [x86] boot: Double BOOT_HEAP_SIZE to 64KB
+    - [x86] mm: Add barriers and document switch_mm()-vs-flush synchronization
+      (CVE-2016-2069)
+    - timers: Use proper base migration in add_timer_on()
+    - ipmi: move timer init to before irq is setup
+    - ALSA: hda - Disable 64bit address for Creative HDA controllers
+    - ALSA: hda - Fix lost 4k BDL boundary workaround (regression in 4.2)
+    - [x86] ALSA: hda - Fix noise on Dell Latitude E6440 (regression in 4.1)
+    - ALSA: hda - Skip ELD notification during system suspend
+      (regression in 4.3)
+    - ALSA: seq: Fix missing NULL check at remove_events ioctl
+    - ALSA: usb-audio: Avoid calling usb_autopm_put_interface() at disconnect
+    - ALSA: seq: Fix race at timer setup and close
+    - [x86] ALSA: hda - Fix white noise on Dell Latitude E5550
+      (regression in 4.1)
+    - ALSA: usb-audio: Fix mixer ctl regression of Native Instrument devices
+      (regression in 3.19)
+    - ALSA: timer: Harden slave timer list handling
+    - ALSA: timer: Fix race among timer ioctls
+    - ALSA: timer: Fix double unlink of active_list
+    - [x86] ALSA: hda - Add fixup for Dell Latitidue E6540 (regression in 4.1)
+    - ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode
+    - ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode
+    - ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0
+    - ALSA: timer: Handle disconnection more safely
+    - ASoC: rt286: Fix run time error while modifying const data
+      (regression in 4.3)
+    - airspy: increase USB control message buffer size (regression in 3.17)
+    - USB: fix invalid memory access in hub_activate()
+    - openvswitch: correct encoding of set tunnel action attributes
+      (regression in 4.3)
+    - veth: don’t modify ip_summed; doing so treats packets with bad checksums
+      as good.
+    - ipv6/addrlabel: fix ip6addrlbl_get()
+    - addrconf: always initialize sysctl table data
+    - connector: bump skb->users before callback invocation
+    - af_unix: Fix splice-bind deadlock
+    - bridge: Only call /sbin/bridge-stp for the initial network namespace
+    - net: filter: make JITs zero A for SKF_AD_ALU_XOR_X (regression in 3.16)
+    - net: sched: fix missing free per cpu on qstats (regression in 3.18)
+    - net: possible use after free in dst_release
+    - tcp: fix zero cwnd in tcp_cwnd_reduction (CVE-2016-2070)
+      (regression in 4.3)
+    - net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
+    - ipv6: tcp: add rcu locking in tcp_v6_send_synack()
+    - tcp_yeah: don't set ssthresh below 2
+    - udp: disallow UFO for sockets with SO_NO_CHECK option (regression in 4.0)
+    - net: preserve IP control block during GSO segmentation
+    - phonet: properly unshare skbs in phonet_rcv() (regression in 4.0)
+    - net: bpf: reject invalid shifts
+    - ipv6: update skb->csum when CE mark is propagated
+    - batman-adv: Avoid recursive call_rcu for batadv_bla_claim
+    - batman-adv: Avoid recursive call_rcu for batadv_nc_node
+    - batman-adv: Drop immediate batadv_orig_ifinfo free function
+    - batman-adv: Drop immediate batadv_neigh_node free function
+    - batman-adv: Drop immediate neigh_ifinfo free function
+    - batman-adv: Drop immediate batadv_hard_iface free function
+    - batman-adv: Drop immediate orig_node free function
+    - team: Replace rcu_read_lock with a mutex in team_vlan_rx_kill_vid
+    - xfrm: dst_entries_init() per-net dst_ops
+    - [powerpc*] tm: Block signal return setting invalid MSR state
+    - [powerpc*] tm: Check for already reclaimed tasks
+    - [ppc64el] opal-irqchip: Fix double endian conversion (regression in 4.2)
+    - [powerpc*] opal-irqchip: Fix deadlock introduced by "Fix double endian
+      conversion"
+    - [powerpc*] powernv: pr_warn_once on unsupported OPAL_MSG type
+    - [powerpc*] Make value-returning atomics fully ordered
+    - [powerpc*] Make {cmp}xchg* and their atomic_ versions fully ordered
+    - [arm64] bpf: fix div-by-zero case
+    - [arm64] bpf: fix mod-by-zero case
+    - [arm64] cmpxchg_dbl: fix return value type (regression in 4.3)
+    - [arm*] KVM: test properly for a PTE's uncachedness
+    - [arm64] KVM: Fix AArch32 to AArch64 register mapping
+    - [arm*] KVM: correct PTE uncachedness check
+    - [arm64] kernel: enforce pmuserenr_el0 initialization and restore
+    - [arm*] iommu/arm-smmu: Fix error checking for ASID and VMID allocation
+    - HID: wacom: Tie cached HID_DG_CONTACTCOUNT indices to report ID
+      (regression in 4.3)
+    - HID: wacom: Expect 'touch_max' touches if HID_DG_CONTACTCOUNT not present
+      (regression in 4.3)
+    - HID: core: Avoid uninitialized buffer access
+    - staging: lustre: echo_copy.._lsm() dereferences userland pointers directly
+    - direct-io: Fix negative return from dio read beyond eof
+    - fix the regression from "direct-io: Fix negative return from dio read
+      beyond eof"
+    - [arm64] KVM: Add workaround for Cortex-A57 erratum 834220
+    - [arm64] kernel: fix architected PMU registers unconditional access
+
+  [ Ben Hutchings ]
+  * fuse: break infinite loop in fuse_fill_write_pages() (CVE-2015-8785)
+  * SCSI: fix crashes in sd and sr runtime PM (Closes: #801925)
+  * rt2x00: fix monitor mode regression (regression in 4.2)
+  * pipe: limit the per-user amount of pages allocated in pipes (CVE-2013-4312)
+    [Original reference is incorrect; should be CVE-2016-2847.]
+  * [powerpc*] Enable CRYPTO_DEV_VMX and enable CRYPTO_DEV_VMX_ENCRYPT as
+    module (Closes: #813640)
+  * debian/copyright: Add licence information for drivers/crypto/vmx/*.pl
+  * udeb: Add hid-logitech-hidpp to input-modules (Closes: #796096)
+  * hwrng: n2 - Attach on T5/M5, T7/M7 SPARC CPUs (Closes: #809815)
+
+  [ Salvatore Bonaccorso ]
+  * netfilter: nf_nat_redirect: add missing NULL pointer check (CVE-2015-8787)
+
+  [ Aurelien Jarno ]
+  * [mips*] Backport math emulation fix from 4.5.
+  * [arm64] Enable RTC_DRV_EFI.
+
+  [ Hendrik Brueckner ]
+  * [s390x] udeb: include modules to mount ISOs (loop device)
+    (Closes: #812336)
+  * [s390x] udeb: include btrfs-modules (Closes: #812340)
+
+  [ Martin Michlmayr ]
+  * Include Device Tree model in reportbug script
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 06 Feb 2016 23:25:14 +0000
+
+linux (4.3.3-7) unstable; urgency=medium
+
+  * linux-image-dbg: Don't rely on upstream makefile to make .build-id
+    links to vDSO debuginfo (fixes FTBFS on arm64, s390)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 19 Jan 2016 17:29:21 +0000
+
+linux (4.3.3-6) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * debian.py: Implement stable order of fields in debian/tests/control
+  * debian.py: Implement stable order of fields not in the predefined order
+  * genorig.py: Make orig tarballs really reproducible:
+    - Override umask while extracting/exporting files
+    - Override user and group names in tarball
+  * xen/gntdev: Grant maps should not be subject to NUMA balancing
+    (Closes: #810472)
+  * gpio: Enable GPIO_SYSFS wherever GPIOLIB is enabled (Closes: #810085)
+  * [armhf] udeb: Include usbhid in input-modules (Closes: #809521)
+  * linux-image-dbg: Include debugging symbols for VDSOs
+  * [armel/kirkwood] power/reset: Re-enable POWER_RESET, POWER_RESET_GPIO
+    (regression in 3.17~rc5-1~exp1)
+  * usb: serial: visor: fix crash on detecting device without write_urbs
+    (CVE-2015-7566)
+  * tty: Fix unsafe ldisc reference via ioctl(TIOCGETD) (CVE-2016-0723)
+  * [x86] drm/vmwgfx: Fix a width / pitch mismatch on framebuffer updates
+  * bcache: Add upstream fixes marked for stable:
+    - fix a livelock when we cause a huge number of cache misses
+    - Add a cond_resched() call to gc
+    - clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device
+    - fix a leak in bch_cached_dev_run()
+    - unregister reboot notifier if bcache fails to unregister device
+    - allows use of register in udev to avoid "device_busy" error.
+    - prevent crash on changing writeback_running
+    - Change refill_dirty() to always scan entire disk if necessary
+  * KEYS: Fix keyring ref leak in join_session_keyring() (CVE-2016-0728)
+
+  [ Salvatore Bonaccorso ]
+  * unix: properly account for FDs passed over unix sockets (CVE-2013-4312)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 19 Jan 2016 00:41:31 +0000
+
+linux (4.3.3-5) unstable; urgency=medium
+
+  * [armhf] udeb: Fix duplication and circular dependency between core-modules
+    and usb-modules (really fixes FTBFS)
+    - Add core-modules as a dependency of usb-modules
+    - Remove gpio-viperboard from core-modules as it is unlikely to be needed
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 04 Jan 2016 00:45:27 +0000
+
+linux (4.3.3-4) unstable; urgency=medium
+
+  * [armhf] udeb: Remove pbias-regulator module from mmc-modules as it's now
+    in core-modules (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 03 Jan 2016 01:50:52 +0000
+
+linux (4.3.3-3) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [ppc64*] drm: Enable DRM_AST as module (Closes: #808338)
+  * block: ensure to split after potentially bouncing a bio (Closes: #809082)
+  * pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (CVE-2015-8569)
+  * bluetooth: Validate socket address length in sco_sock_bind() (CVE-2015-8575)
+  * [xen] Fix race conditions in back-end drivers (CVE-2015-8550, XSA-155)
+  * [xen] pciback: Fix state validation in MSI control operations
+    (CVE-2015-8551, CVE-2015-8852, XSA-157)
+  * ptrace: being capable wrt a process requires mapped uids/gids
+    (CVE-2015-8709)
+  * KEYS: Fix race between read and revoke (CVE-2015-7550)
+  * [armhf] udeb: Add modular clock, GPIO, PCIe PHY and regulator drivers to
+    core-modules (Closes: #809521)
+  * [armhf] udeb: Add more USB PHY drivers to usb-modules
+  * drm/nouveau/pmu: do not assume a PMU is present (Closes: #809481)
+  * [x86] drm/i915: Don't compare has_drrs strictly in pipe config
+    (Closes: #808720)
+  * [armhf] crypto: sun4i-ss - add missing statesize (Closes: #808625)
+  * Revert "xhci: don't finish a TD if we get a short transfer event mid TD"
+    (Closes: #808602, #808953, regression in 4.3-rc7)
+  * [x86] pinctrl: Enable PINCTRL_CHERRYVIEW (Closes: #808044)
+  * [s390x] udeb: Add crc-modules package (Closes: #808051)
+
+  [ Salvatore Bonaccorso ]
+  * ovl: fix permission checking for setattr (CVE-2015-8660)
+  * [x86] kvm: Reload pit counters for all channels when restoring state
+    (CVE-2015-7513)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 02 Jan 2016 16:45:46 +0000
+
+linux-tools (4.3.1-2) unstable; urgency=medium
+
+  * Upload for Perl 5.22 transition (Closes: #808329)
+  * debian/rules: Fix check for binNMU, broken since 4.1.4-1
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 19 Dec 2015 03:47:10 +0000
+
+linux (4.3.3-2) unstable; urgency=medium
+
+  * [armhf,sparc64] Force ZONE_DMA to be enabled, reversing ABI change in
+    4.3.3 (fixes FTBFS)
+  * [sh4] Disable CC_STACKPROTECTOR_STRONG temporarily (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 17 Dec 2015 18:21:52 +0000
+
+linux (4.3.3-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.2
+    - X.509: Fix the time validation [ver #2]
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3
+    - r8169: fix kasan reported skb use-after-free. (regression in 4.3)
+    - af-unix: fix use-after-free with concurrent readers while splicing
+      (regression in 4.2)
+    - af_unix: don't append consumed skbs to sk_receive_queue
+      (regression in 4.2)
+    - af_unix: take receive queue lock while appending new skb
+      (regression in 4.2)
+    - af-unix: passcred support for sendpage (regression in 4.2)
+    - ipv6: Avoid creating RTF_CACHE from a rt that is not managed by fib6 tree
+      (regression in 4.2)
+    - ipv6: Check expire on DST_NOCACHE route
+    - ipv6: Check rt->dst.from for the DST_NOCACHE route (regression in 4.3)
+    - Revert "ipv6: ndisc: inherit metadata dst when creating ndisc requests"
+      (regression in 4.3)
+    - packet: only allow extra vlan len on ethernet devices
+    - packet: infer protocol from ethernet header if unset
+    - packet: fix tpacket_snd max frame len
+    - sctp: translate host order to network order when setting a hmacid
+    - net/mlx5e: Added self loopback prevention (regression in 4.3)
+    - net/mlx4_core: Fix sleeping while holding spinlock at rem_slave_counters
+      (regression in 4.2)
+    - ip_tunnel: disable preemption when updating per-cpu tstats
+    - net/ip6_tunnel: fix dst leak (regression in 4.3)
+    - tcp: disable Fast Open on timeouts after handshake
+    - tcp: fix potential huge kmalloc() calls in TCP_REPAIR
+    - tcp: initialize tp->copied_seq in case of cross SYN connection
+    - net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds
+    - net: ipmr: fix static mfc/dev leaks on table destruction
+    - net: ip6mr: fix static mfc/dev leaks on table destruction
+    - vrf: fix double free and memory corruption on register_netdevice failure
+    - tipc: fix error handling of expanding buffer headroom (regression in 4.3)
+    - ipv6: distinguish frag queues by device for multicast and link-local
+      packets
+    - bpf, array: fix heap out-of-bounds access when updating elements
+    - ipv6: add complete rcu protection around np->opt
+    - net/neighbour: fix crash at dumping device-agnostic proxy entries
+    - ipv6: sctp: implement sctp_v6_destroy_sock()
+    - openvswitch: fix hangup on vxlan/gre/geneve device deletion
+    - net_sched: fix qdisc_tree_decrease_qlen() races
+    - btrfs: fix resending received snapshot with parent (regression in 4.2)
+    - Btrfs: fix file corruption and data loss after cloning inline extents
+    - Btrfs: fix regression when running delayed references (regression in 4.2)
+    - Btrfs: fix race leading to incorrect item deletion when dropping extents
+    - Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow
+    - Btrfs: fix race when listing an inode's xattrs
+    - rbd: don't put snap_context twice in rbd_queue_workfn()
+    - ext4 crypto: fix memory leak in ext4_bio_write_page()
+    - ext4 crypto: fix bugs in ext4_encrypted_zeroout()
+    - ext4: fix potential use after free in __ext4_journal_stop
+      (regression in 4.2)
+    - ext4, jbd2: ensure entering into panic after recording an error in
+      superblock
+    - nfsd: serialize state seqid morphing operations
+    - nfsd: eliminate sending duplicate and repeated delegations
+    - nfs4: start callback_ident at idr 1
+    - nfs4: resend LAYOUTGET when there is a race that changes the seqid
+    - nfs: if we have no valid attrs, then don't declare the attribute cache
+      valid
+    - ocfs2: fix umask ignored issue
+    - block: fix segment split (regression in 4.3)
+    - ceph: fix message length computation
+    - Btrfs: fix regression running delayed references when using qgroups
+      (regression in 4.2)
+
+  [ Ben Hutchings ]
+  * net: add validation for the socket syscall protocol argument (CVE-2015-8543)
+  * [armel/kirkwood] udeb: Override inclusion of gpio_keys in input-modules
+    (fixes FTBFS)
+  * vrf: Fix broken backport of "vrf: fix double free and memory corruption on
+    register_netdevice failure" in 4.3.3
+  * net: Ignore ABI changes due to "ipv6: add complete rcu protection around
+    np->opt", which don't appear to affect out-of-tree modules
+  * tipc: Fix kfree_skb() of uninitialised pointer (regression in 4.3.3)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 15 Dec 2015 21:25:26 +0000
+
+linux-tools (4.3.1-1) unstable; urgency=medium
+
+  * New upstream stable update
+    - [x86] Add #AC to SVM_EXIT_REASONS
+
+  [ Ben Hutchings ]
+  * debian/bin/genorig.py: Add more files under arch/*/include/asm to file list
+    (fixes FTBFS on several architectures)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 14 Dec 2015 00:43:39 +0000
+
+linux-tools (4.3-1) unstable; urgency=medium
+
+  * New upstream release
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 13 Dec 2015 03:47:05 +0000
+
+linux (4.3.1-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.1
+
+  [ Ben Hutchings ]
+  * Set ABI to 1
+  * [armhf] rtc: Enable RTC_DRV_DS1307, RTC_DRV_PCF8563, RTC_DRV_ARMADA38X
+    (Closes: #807632)
+  * [armhf] Enable MACH_ARMADA_375, MACH_ARMADA_38X, MACH_ARMADA_39X
+    (Closes: #807633)
+  * [armhf] net: Enable MVPP2 as module
+  * [armel/kirkwood] dts: Fix QNAP TS219 power-off (Closes: #807696)
+  * [armhf] udeb: Add leds-modules package containing leds-gpio driver
+    (Closes: #807721)
+  * [x86] drm/i915: Mark uneven memory banks on gen4 desktop as unknown
+    swizzling (Closes: #780363)
+  * Enable CC_STACKPROTECTOR_STRONG (Closes: #805652)
+  * [x86] input: Enable KEYBOARD_GPIO, INPUT_SOC_BUTTON_ARRAY (Closes: #804864)
+  * [x86] nouveau: bios: return actual size of the buffer retrieved via _ROM
+    (Closes: #772716)
+  * [armhf] Add support for Odroid-XU4 (Closes: #804850)
+    - mfd: s2mps11: Add manual shutdown method for Odroid XU3
+    - dts: Fix power off method for exynos5422-odroidxu3-common
+    - dts: Split audio configuration to separate exynos5422-odroidxu3-audio
+    - dts: Add support Odroid XU4 board for exynos5422-odroidxu4
+  * udeb: Add hid-chicony to input-modules (Closes: #766570)
+  * sched: Enable CFS_BANDWIDTH (Closes: #802746)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 13 Dec 2015 00:38:54 +0000
+
+linux (4.3-1~exp2) experimental; urgency=medium
+
+  [ Ben Hutchings ]
+  * mv643xx_eth: Re-enable TSO, fixed upstream in 4.3
+  * debian/control: Move patchutils from Build-Depends to Build-Depends-Indep,
+    as we only use filterdiff when building linux-source-<version>
+  * debian/control,debian/rules: Support a 'stage1' build profile which
+    builds only linux-libc-dev (Closes: #695243)
+  * debian/control: Add ':any' to Build-Depends on python3, to support cross-
+    bootstrap
+  * [armhf] Enable new drivers for Allwinner chips (Closes: #804856)
+    - crypto: Enable CRYPTO_DEV_SUN4I_SS as module
+    - musb: Enable USB_MUSB_SUNXI as module
+  * aufs: Update support patches to aufs4.3-20151116
+  * [armhf] USB: Change USB, USB_GADGET, and various drivers from built-in to
+    modules
+    - musb: Enable USB_MUSB_DUAL_ROLE
+  * [armhf] musb: Disable MUSB_PIO_ONLY and enable USB_INVENTRA_DMA,
+    USB_TI_CPPI41_DMA, USB_TUSB_OMAP_DMA
+
+  [ Ian Campbell ]
+  * [armel/orion5x] Enable Device Tree for orion5x. Patch from Roger Shimizu
+    (Closes: #803159)
+  * [armel/orion5x] Enable CONFIG_DEBUG_LL_UART_8250.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 04 Dec 2015 19:36:10 +0000
+
+linux (4.3-1~exp1) experimental; urgency=medium
+
+  * New upstream release
+
+  [ Ben Hutchings ]
+  * netfilter: Enable NFT_DUP_IPV4, NFT_DUP_IPV6 as modules (Closes: #803370)
+  * tests: Add autopkgtest support
+  * [x86] Compile with gcc-5
+  * [x86] Enable PINCTRL_BAYTRAIL (Closes: #797949)
+
+  [ Salvatore Bonaccorso ]
+  * Fix typo in image.plain.postinst template.
+    Add missing space in warn message causing typo "dangling linkto".
+    Thanks to Jakub Wilk <jwilk@debian.org> (Closes: #803323)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 04 Nov 2015 07:45:13 +0000
+
+linux (4.3~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+    - [x86] smpboot: Fix CPU #1 boot timeout (Closes: #802464)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 28 Oct 2015 11:04:27 +0900
+
+linux-tools (4.3~rc5-1~exp2) experimental; urgency=medium
+
+  * Fix the build-indep and binary-indep targets (fixes FTBFS for arch:all)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 14 Oct 2015 02:08:09 +0100
+
+linux-tools (4.3~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+    - perf: Fix build on architectures without CONFIG_PERF_REGS
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 14 Oct 2015 00:49:38 +0100
+
+linux (4.3~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 14 Oct 2015 00:48:41 +0100
+
+linux-tools (4.3~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 07 Oct 2015 01:15:46 +0100
+
+linux (4.3~rc4-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [armhf] dts: Fix Makefile target for sun4i-a10-itead-iteaduino-plus
+    (fixes FTBFS)
+  * [mips*] io: Define ioremap_uc (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 06 Oct 2015 23:27:45 +0100
+
+linux (4.3~rc3-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * Disable CRAMFS; it was obsoleted by squashfs and initramfs
+  * [i386] Replace 586 flavour with 686
+    - Enable support for OLPC and other Geode-based systems in the 686 flavour
+    - udeb: Update kernel-versions
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 27 Sep 2015 21:02:54 +0100
+
+linux (4.2.6-3) unstable; urgency=medium
+
+  * Ignore some gpiochip ABI changes (fixes FTBFS on i386)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 06 Dec 2015 02:12:41 +0000
+
+linux (4.2.6-2) unstable; urgency=medium
+
+  [ Salvatore Bonaccorso ]
+  * [x86] KVM: svm: unconditionally intercept #DB (CVE-2015-8104)
+  * [x86] KVM: rename update_db_bp_intercept to update_bp_intercept
+
+  [ Ian Campbell ]
+  * [x86] Xen: expose a more realistic max p2m size in the shared info, fixes
+    migration (Closes: #797205)
+
+  [ Ben Hutchings ]
+  * media: usbvision: fix crash on detecting device with invalid configuration
+    (CVE-2015-7833, partly fixed in 4.2.6-1)
+  * udeb: Add dm-service-time to multipath-modules (Closes: #806131)
+  * unix: avoid use-after-free in ep_remove_wait_queue (CVE-2013-7446)
+  * isdn_ppp: Add checks for allocation failure in isdn_ppp_open()
+  * ppp, slip: Validate VJ compression slot parameters completely
+    (CVE-2015-7799)
+  * Btrfs: fix truncation of compressed and inlined extents (CVE-2015-8374)
+  * netfilter: Enable NFT_DUP_IPV4, NFT_DUP_IPV6 as modules (Closes: #803370)
+  * [x86] Enable PINCTRL_BAYTRAIL (Closes: #797949)
+  * qxl: Enable by default (Closes: #779515)
+  * [s390*] Update linux-compiler metapackage to gcc-4.9
+  * firmware_class: Fix condition in directory search loop (Closes: #804862)
+  * [x86] input: Enable MOUSE_ELAN_I2C as module, MOUSE_ELAN_I2C_I2C and
+    MOUSE_ELAN_I2C_SMBUS (Closes: #791631)
+  * [armhf] hsi: Enable CMT_SPEECH as module (Closes: #791819)
+  * [armhf] power: Enable BATTERY_RX51 as module (Closes: #791820)
+  * [x86] psmouse: Enable MOUSE_PS2_VMMOUSE (Closes: #802929)
+    - linux-image: Add versioned Breaks on xserver-xorg-input-vmmouse to
+      avoid driver conflicts
+  * [armhf] udeb: Add stmmac platform modules dwmac-generic, dwmac-socfpga
+    and dwmac-sunxi to nic-modules (Closes: #805098)
+  * wireless: Enable WL_MEDIATEK, MT7601U as module
+  * [x86] drm/i915: shut up gen8+ SDE irq dmesg noise (Closes: #806304)
+  * [armhf] regulator: Enable REGULATOR_PFUZE100 as module (Closes: #806284)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 04 Dec 2015 02:26:51 +0000
+
+linux (4.2.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.6
+    - mmc: core: Fix init_card in 52Mhz (regression in 4.2)
+    - rtlwifi: rtl8821ae: Fix system lockups on boot (regression in 4.2)
+    - iwlwifi: mvm: init card correctly on ctkill exit check
+      (regression in 3.18)
+    - iwlwifi: mvm: flush fw_dump_wk when mvm fails to start
+      (regression in 3.18)
+    - [x86] iommu/vt-d: fix range computation when making room for large pages
+    - [x86] iommu/amd: Fix BUG when faulting a PROT_NONE VMA
+    - [x86] iommu/amd: Don't clear DTE flags when modifying it
+    - drm: fix mutex leak in drm_dp_get_mst_branch_device
+    - drm: Correct arguments to list_tail_add in create blob ioctl
+    - drm: crtc: integer overflow in drm_property_create_blob()
+    - rtl28xxu: fix control message flaws (regression in 4.0)
+    - ALSA: hda - Fix deadlock at error in building PCM
+    - [x86] ioapic: Prevent NULL pointer dereference in setup_ioapic_dest()
+      (regression in 4.2.4)
+    - mm: make sendfile(2) killable
+    - drm/radeon/dpm: don't add pwm attributes if DPM is disabled
+      (regression in 4.0)
+    - [x86] drm/i915: Restore lost DPLL register write on gen2-4
+      (regression in 3.18)
+    - [x86] drm/i915: Deny wrapping an userptr into a framebuffer
+    - drm/radeon: don't try to recreate sysfs entries on resume
+      (regression in 4.2.5)
+    - drm/radeon: fix dpms when driver backlight control is disabled
+      (regression in 4.2.4)
+    - drm/radeon: move bl encoder assignment into bl init
+    - rbd: require stable pages if message data CRCs are enabled
+    - rbd: don't leak parent_spec in rbd_dev_probe_parent()
+    - rbd: prevent kernel stack blow up on rbd map
+    - [armhf] EXYNOS: Fix double of_node_put() when parsing child power domains
+      (regression in 4.2)
+    - [armhf] dts: Fix audio card detection on Peach boards (regression in 4.1)
+    - [arm64] Revert "ARM64: unwind: Fix PC calculation"
+    - block: don't release bdi while request_queue has live references
+      (regression in 4.2)
+    - dm btree remove: fix a bug when rebalancing nodes after removal
+    - dm cache: the CLEAN_SHUTDOWN flag was not being set
+    - dm btree: fix leak of bufio-backed block in btree_split_beneath error path
+    - Revert "serial: 8250_dma: don't bother DMA with small transfers"
+      (regression in 4.0)
+    - [armel] i2c: mv64xxx: really allow I2C offloading (regression in 3.19)
+    - clkdev: fix clk_add_alias() with a NULL alias device name
+      (regression in 4.2)
+    - fbcon: initialize blink interval before calling fb_set_par
+      (regression in 4.2)
+    - PCI: Prevent out of bounds access in numa_node override
+    - ovl: free stack of paths in ovl_fill_super (regression in 4.0)
+    - ovl: free lower_mnt array in ovl_put_super (regression in 4.0)
+    - ovl: fix dentry reference leak
+    - ovl: fix open in stacked overlay (regression in 4.2)
+    - [x86] Input: alps - only the Dell Latitude D420/430/620/630 have separate
+      stick button bits (regression in 4.1)
+    - crypto: api - Only abort operations on fatal signal
+    - md/raid1: submit_bio_wait() returns 0 on success (regression in 3.10)
+    - md/raid10: submit_bio_wait() returns 0 on success (regression in 3.10)
+    - md/raid5: fix locking in handle_stripe_clean_event() (regression in 3.13)
+    - Revert "md: allow a partially recovered device to be hot-added to an
+      array." (regression in 3.14)
+    - [amd64] EDAC, sb_edac: Fix TAD presence check for sbridge_mci_bind_devs()
+      (regression in 4.2)
+    - mvsas: Fix NULL pointer dereference in mvs_slot_task_free
+    - netfilter: ipset: Fix sleeping memory allocation in atomic context
+      (regression in 4.2)
+    - btrfs: fix possible leak in btrfs_ioctl_balance() (regression in 4.2.5)
+    - kvm: irqchip: fix memory leak (regression in 4.2)
+    - [armhf] thermal: exynos: Fix register read in TMU (regression in 4.2)
+    - blk-mq: fix use-after-free in blk_mq_free_tag_set() (regression in 4.2)
+    - IB/cm: Fix rb-tree duplicate free and use-after-free
+    - sched/deadline: Fix migration of SCHED_DEADLINE tasks (regression in 4.2)
+    - [arm64] compat: fix stxr failure case in SWP emulation
+    - NVMe: Fix memory leak on retried commands
+    - [x86] drm/vmwgfx: Fix up user_dmabuf refcounting
+    - thp: use is_zero_pfn() only after pte_present() check (regression in 4.1)
+    - xen: fix backport of previous kexec patch
+
+  [ Ben Hutchings ]
+  * usbvision: fix overflow of interfaces array (CVE-2015-7833)
+  * RDS: fix race condition when sending a message on unbound socket
+    (CVE-2015-7990)
+  * media/vivid-osd: fix info leak in ioctl (CVE-2015-7884)
+  * [x86] KVM: Intercept #AC to avoid guest->host denial-of-service
+    (CVE-2015-5307)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 10 Nov 2015 14:35:05 +0000
+
+linux (4.2.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.4
+    - [armhf] KVM: Fix incorrect device to IPA mapping
+    - [x86] KVM: vmx: fix VPID is 0000H in non-root operation
+    - kvm: don't try to register to KVM_FAST_MMIO_BUS for non mmio eventfd
+    - kvm: fix zero length mmio searching
+    - kvm: factor out core eventfd assign/deassign logic
+    - kvm: fix double free for fast mmio eventfd
+    - [armhf] KVM: Disable virtual timer even if the guest is not using it
+    - kvm: svm: reset mmu on VCPU reset
+    - [x86] KVM: trap AMD MSRs for the TSeg base and mask
+    - [powerpc*] KVM: Book3S: Take the kvm->srcu lock in
+      kvmppc_h_logical_ci_load/store()
+    - [powerpc*] KVM: Book3S HV: Pass the correct trap argument to
+      kvmhv_commence_exit
+    - [x86] Revert "KVM: x86: apply guest MTRR virtualization on host reserved
+      pages"
+    - [x86] Revert "KVM: SVM: use NPT page attributes"
+    - [x86] Revert "KVM: SVM: Sync g_pat with guest-written PAT value"
+    - time: Fix timekeeping_freqadjust()'s incorrect use of abs() instead of
+      abs64()
+    - target/iscsi: Fix np_ip bracket issue by removing np_ip
+    - scsi: fix scsi_error_handler vs. scsi_host_dev_release race
+    - target: Attach EXTENDED_COPY local I/O descriptors to xcopy_pt_sess
+    - target: Fix PR registration + APTPL RCU conversion regression
+    - iser-target: remove command with state ISTATE_REMOVE
+    - iser-target: Put the reference on commands waiting for unsol data
+    - toshiba_acpi: Fix hotkeys registration on some toshiba models
+    - [x86] perf/intel: Fix constraint access
+    - [x86] locking/qspinlock: Fix performance regression under unaccelerated
+      VMs
+    - [x86] locking/qspinlock: Only emit the test-and-set fallback when
+      building guest support
+    - [armhf] 8401/1: perf: Set affinity for PPI based PMUs
+    - perf hists: Update the column width for the "srcline" sort key
+    - perf stat: Get correct cpu id for print_aggr
+    - perf tools: Add missing forward declaration of struct map to probe-event.h
+    - perf tools: Add empty Build files for architectures lacking them
+    - perf tools: Fix parse_events_add_pmu caller
+    - perf header: Fixup reading of HEADER_NRCPUS feature
+    - perf probe: Use existing routine to look for a kernel module by
+      dso->short_name
+    - watchdog: sunxi: fix activation of system reset
+    - watchdog: imgpdc: Unregister restart handler on remove
+    - sched: access local runqueue directly in single_task_running
+    - hwmon: (nct6775) Swap STEP_UP_TIME and STEP_DOWN_TIME registers for most
+      chips
+    - [armhf] fix Thumb2 signal handling when ARMv6 is enabled
+    - [armel,armhf] 8429/1: disable GCC SRA optimization
+    - [powerpc*] windfarm: decrement client count when unregistering
+    - [armhf] dts: omap5-uevm.dts: fix i2c5 pinctrl offsets
+    - [armhf] dts: omap3-beagle: make i2c3, ddc and tfp410 gpio work again
+    - [armhf] EXYNOS: reset Little cores when cpu is up
+    - [armhf] dts: sunxi: Raise minimum CPU voltage for sun7i-a20 to meet SoC
+      specifications
+    - [armhf] dts: Fix wrong clock binding for sysmmu_fimd1_1 on exynos5420
+    - [armhf] dts: fix usb pin control for imx-rex dts
+    - dax: fix O_DIRECT I/O to the last block of a blockdev
+    - blockdev: don't set S_DAX for misaligned partitions
+    - block: blkg_destroy_all() should clear q->root_blkg and ->root_rl.blkg
+    - dmaengine: at_xdmac: change block increment addressing mode
+    - dmaengine: at_xdmac: clean used descriptor
+    - dmaengine: dw: properly read DWC_PARAMS register
+    - dmaengine: at_xdmac: fix bug in prep_dma_cyclic
+    - pmem: add proper fencing to pmem_rw_page()
+    - [x86] apic: Serialize LVTT and TSC_DEADLINE writes
+    - [x86] alternatives: Make optimize_nops() interrupt safe and synced
+    - [i386] platform: Fix Geode LX timekeeping in the generic x86 build
+    - [x86] ioapic: Force affinity setting in setup_ioapic_dest()
+    - [x86] pci/intel_mid_pci: Work around for IRQ0 assignment
+    - [x86] paravirt: Replace the paravirt nop with a bona fide empty function
+    - [amd64] nmi: Fix a paravirt stack-clobbering bug in the NMI code
+    - [x86] Use WARN_ON_ONCE for missing X86_FEATURE_NRIPS
+    - [x86] efi: Fix boot crash by mapping EFI memmap entries bottom-up at
+      runtime, instead of top-down
+    - [x86] kexec: Fix kexec crash in syscall kexec_file_load()
+    - [x86] process: Add proper bound checks in 64bit get_wchan()
+    - [x86] mm: Set NX on gap between __ex_table and rodata
+    - [x86] xen: Support kexec/kdump in HVM guests by doing a soft reset
+    - leds:lp55xx: Correct Kconfig dependency for f/w user helper
+    - leds/led-class: Add missing put_device()
+    - sched/core: Fix TASK_DEAD race in finish_task_switch()
+    - [s390x] compat: correct uc_sigmask of the compat signal frame
+    - [s390x] boot/decompression: disable floating point in decompressor
+    - Revert "cgroup: simplify threadgroup locking"
+    - Revert "sched, cgroup: replace signal_struct->group_rwsem with a global
+      percpu_rwsem"
+    - memcg: make mem_cgroup_read_stat() unsigned
+    - spi: Fix documentation of spi_alloc_master()
+    - spi: bcm2835: BUG: fix wrong use of PAGE_MASK
+    - spi: spidev: fix possible NULL dereference
+    - mm: migrate: hugetlb: putback destination hugepage to active list
+    - lib/iommu-common.c: do not try to deref a null iommu->lazy_flush()
+      pointer when n < pool->hint
+    - ocfs2/dlm: fix deadlock when dispatch assert master
+    - mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a
+      fault
+    - memcg: fix dirty page migration
+    - [armhf] ALSA: hda/tegra - async probe for avoiding module loading deadlock
+    - ALSA: synth: Fix conflicting OSS device registration on AWE32
+    - ALSA: hda: Add dock support for ThinkPad T550
+    - ALSA: hda - Apply SPDIF pin ctl to MacBookPro 12,1
+    - ALSA: hda - Disable power_save_node for IDT 92HD73xx chips
+    - ASoC: pxa: pxa2xx-ac97: fix dma requestor lines
+    - ASoC: dwc: correct irq clear method
+    - ASoC: db1200: Fix DAI link format for db1300 and db1550
+    - ASoC: sgtl5000: fix wrong register MIC_BIAS_VOLTAGE setup on probe
+    - ASoC: tas2552: fix dBscale-min declaration
+    - btrfs: skip waiting on ordered range for special files
+    - Btrfs: fix read corruption of compressed and shared extents
+    - Btrfs: update fix for read corruption of compressed and shared extents
+    - PCI: Fix devfn for VPD access through function 0
+    - PCI: Use function 0 VPD for identical functions, regular VPD for others
+    - PCI: Clear IORESOURCE_UNSET when clipping a bridge window
+    - dm thin: disable discard support for thin devices if pool's is disabled
+    - dm crypt: constrain crypt device's max_segment_size to PAGE_SIZE
+    - ath10k: fix dma_mapping_error() handling
+    - svcrdma: Fix send_reply() scatter/gather set-up
+    - md/raid0: update queue parameter in a safer location.
+    - md/raid0: apply base queue limits *before* disk_stack_limits
+    - dm raid: fix round up of default region size
+    - netfilter: nfnetlink: work around wrong endianess in res_id field
+    - netfilter: nf_tables: Use 32 bit addressing register from
+      nft_type_to_reg()
+    - netfilter: ipset: Out of bound access in hash:net* types fixed
+    - netfilter: ipset: Fixing unnamed union init
+    - netfilter: nf_log: wait for rcu grace after logger unregistration
+    - netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC
+    - netfilter: nf_log: don't zap all loggers on unregister
+    - regulator: core: Correct return value check in regulator_resolve_supply
+    - regulator: axp20x: Fix enable bit indexes for DCDC4 and DCDC5
+    - regulator: core: Handle probe deferral from DT when resolving supplies
+    - Bluetooth: Delay check for conn->smp in smp_conn_security()
+    - nfs: fix v4.2 SEEK on files over 2 gigs
+    - NFS: Do cleanup before resetting pageio read/write to mds
+    - NFSv4: Recovery of recalled read delegations is broken
+    - nfs: fix pg_test page count calculation
+    - NFS: Fix a write performance regression
+    - cifs: Fix sec=krb5 on smb3 mounts
+    - cifs: disabling oplocks/leases via module parm enable_oplocks broken for
+      SMB3
+    - cifs: Do not fall back to SMBWriteX in set_file_size error cases
+    - drm/qxl: only report first monitor as connected if we have no state
+    - drm/qxl: recreate the primary surface when the bo is not primary
+    - drm/amdgpu: fix overflow on 32bit systems
+    - drm/amdgpu: Disable UVD PG
+    - drm/amdgpu: fix the UVD suspend sequence order
+    - drm/amdgpu: make UVD handle checking more strict
+    - drm/amdgpu: Fix max_vblank_count value for current display engines
+    - drm/amdgpu: Restore LCD backlight level on resume
+    - [x86] drm/i915/bios: handle MIPI Sequence Block v3+ gracefully
+    - drm: Reject DRI1 hw lock ioctl functions for kms drivers
+    - drm/radeon: Restore LCD backlight level on resume (>= R5xx)
+    - drm/dp/mst: fixup handling hotplug on port removal.
+    - drm/dp/mst: drop cancel work sync in the mstb destroy path (v2)
+    - xhci: give command abortion one more chance before killing xhci
+    - xhci: Move xhci_pme_quirk() behind #ifdef CONFIG_PM
+    - usb: xhci: lock mutex on xhci_stop
+    - usb: xhci: Clear XHCI_STATE_DYING on start
+    - usb: xhci: stop everything on the first call to xhci_stop
+    - usb: xhci: exit early in xhci_setup_device() if we're halted or dying
+    - xhci: change xhci 1.0 only restrictions to support xhci 1.1
+    - xhci: init command timeout timer earlier to avoid deleting it
+      uninitialized
+    - usb: xhci: Add support for URB_ZERO_PACKET to bulk/sg transfers
+    - batman-adv: Make DAT capability changes atomic
+    - thermal: cpu_cooling: don't call kcalloc() under rcu_read_lock
+    - thermal: cpu_cooling: free power table on error or when unregistering
+    - [x86] hv: util: checking the wrong variable
+    - mmc: dw_mmc: handle data blocks > than 4kB if IDMAC is used
+    - usb: chipidea: imx: fix a typo for imx6sx
+    - cifs: use server timestamp for ntlmv2 authentication
+    - [armhf] irqchip/gic-v3-its: Add missing cache flushes
+    - docs: update HOWTO for 3.x -> 4.x versioning
+    - extcon: Fix signedness bugs about break error handling
+    - extcon: Fix attached value returned by is_extcon_changed
+    - [armhf] mtd: pxa3xx_nand: add a default chunk size
+    - mtd: nand: sunxi: fix sunxi_nand_chips_cleanup()
+    - mtd: nand: sunxi: fix OOB handling in ->write_xxx() functions
+    - hpsa: fix an sprintf() overflow in the reset handler
+    - PM / AVS: rockchip-io: depend on CONFIG_POWER_AVS
+    - device property: fix potential NULL pointer dereference
+    - ath10k: fix per-vif queue locking
+    - ath10k: reject 11b tx fragmentation configuration
+    - ath10k: fix peer limit enforcement
+    - ath10k: wake up offchannel queue properly
+    - ath10k: wake up queue upon vif creation
+    - pcmcia: sa11x0: fix missing clk_put() in sa11x0 socket drivers
+    - ipr: Enable SIS pipe commands for SIS-32 devices.
+    - regmap: debugfs: Ensure we don't underflow when printing access masks
+    - regmap: debugfs: Don't bother actually printing when calculating max
+      length
+    - security: fix typo in security_task_prctl
+    - usb: musb: dsps: fix polling in device-only mode
+    - usb: chipidea: udc: using the correct stall implementation
+    - usb: Use the USB_SS_MULT() macro to get the burst multiplier.
+    - usb: phy: phy-generic: Fix reset behaviour on legacy boot
+    - usb: musb: cppi41: allow it to work again
+    - USB: chaoskey read offset bug
+    - usb: Add device quirk for Logitech PTZ cameras
+    - USB: Add reset-resume quirk for two Plantronics usb headphones.
+    - [armel,armhf] crypto: marvell - properly handle
+      CRYPTO_TFM_REQ_MAY_BACKLOG-flagged requests
+    - cpu/cacheinfo: Fix teardown path
+    - cpufreq: dt: Tolerance applies on both sides of target voltage
+    - [mips*] Fix console output for Fulong2e system
+    - [mips*] bootmem: Fix mapstart calculation for contiguous maps
+    - [mips*] dma-default: Fix 32-bit fall back to GFP_DMA
+    - [mips*] CPS: Stop dangling delay slot from has_mt.
+    - [mips*] CPS: Don't include MT code in non-MT kernels.
+    - [mips*] CPS: #ifdef on CONFIG_MIPS_MT_SMP rather than CONFIG_MIPS_MT
+    - batman-adv: Make NC capability changes atomic
+    - batman-adv: Make TT capability changes atomic
+    - batman-adv: Make MCAST capability changes atomic
+    - batman-adv: Fix potential synchronization issues in mcast tvlv handler
+    - batman-adv: Fix potentially broken skb network header access
+    - [powerpc*] MSI: Fix race condition in tearing down MSI interrupts
+    - rsi: Fix possible leak when loading firmware
+    - UBIFS: Kill unneeded locking in ubifs_init_security
+    - UBI: Validate data_size
+    - UBI: return ENOSPC if no enough space available
+    - net: via/Kconfig: GENERIC_PCI_IOMAP required if PCI not selected
+    - iscsi-target: Avoid OFMarker + IFMarker negotiation
+    - mmc: core: Don't return an error for CD/WP GPIOs when GPIOLIB is unset
+    - mmc: core: fix dead loop of mmc_retune
+    - [arm64] efi: Fix boot crash by not padding between EFI_MEMORY_RUNTIME
+      regions
+    - [arm64] ftrace: fix function_graph tracer panic
+    - [arm64] readahead: fault retry breaks mmap file read random detection
+    - [m68k] Define asmlinkage_protect
+    - xen/blkback: free requests on disconnection
+    - net/xen-netfront: only napi_synchronize() if running
+    - igb: do not re-init SR-IOV during probe
+    - genirq: Fix race in register_irq_proc()
+    - clocksource: Fix abs() usage w/ 64bit values
+    - md/bitmap: don't pass -1 to bitmap_storage_alloc.
+    - nfs/filelayout: Fix NULL reference caused by double freeing of fh_array
+    - cpufreq: acpi_cpufreq: prevent crash on reading freqdomain_cpus
+    - [armhf] clk: ti: fix dual-registration of uart4_ick
+    - [armhf] clk: ti: clk-7xx: Remove hardwired ABE clock configuration
+    - [armhf] clk: samsung: fix cpu clock's flags checking
+    - namei: results of d_is_negative() should be checked after dentry
+      revalidation
+    - dm: fix AB-BA deadlock in __dm_destroy()
+    - dm cache: fix NULL pointer when switching from cleaner policy
+    - staging: speakup: fix speakup-r regression
+    - tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c
+    - drivers/tty: require read access for controlling terminal
+    - serial: 8250: add uart_config entry for PORT_RT2880
+    - serial: atmel: fix error path of probe function
+    - mm/slab: fix unexpected index mapping result of kmalloc_size(INDEX_NODE+1)
+    - blk-mq: avoid setting hctx->tags->cpumask before allocation
+    - sched/preempt: Fix cond_resched_lock() and cond_resched_softirq()
+    - 3w-9xxx: don't unmap bounce buffered commands
+    - sched/preempt, xen: Use need_resched() instead of should_resched()
+    - sched/preempt, powerpc, kvm: Use need_resched() instead of
+      should_resched()
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.5
+    - [powerpc*] net/ibm/emac: bump version numbers for correct work with
+      ethtool
+    - l2tp: protect tunnel->del_work by ref_count
+    - af_unix: Convert the unix_sk macro to an inline function for type safety
+    - af_unix: return data from multiple SKBs on recv() with MSG_PEEK flag
+    - net/unix: fix logic about sk_peek_offset
+    - skbuff: Fix skb checksum flag on skb pull
+    - skbuff: Fix skb checksum partial check.
+    - inet: fix races in reqsk_queue_hash_req()
+    - net: add pfmemalloc check in sk_add_backlog()
+    - ppp: don't override sk->sk_state in pppoe_flush_dev()
+    - inet: fix race in reqsk_queue_unlink()
+    - bpf: fix panic in SO_GET_FILTER with native ebpf programs
+    - ovs: do not allocate memory from offline numa node
+    - act_mirred: clear sender cpu before sending to tx
+    - bpf: clear sender_cpu before xmit
+    - ipv6: Don't call with rt6_uncached_list_flush_dev
+    - ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings
+    - tipc: move fragment importance field to new header position
+    - netlink: Trim skb to alloc size to avoid MSG_TRUNC
+    - drm: Fix locking for sysfs dpms file
+    - [sparc*] crypto: initialize blkcipher.ivsize
+    - crypto: ahash - ensure statesize is non-zero
+    - memcg: convert threshold to bytes
+    - btrfs: check unsupported filters in balance arguments
+    - btrfs: fix use after free iterating extrefs
+    - [arm64] errata: use KBUILD_CFLAGS_MODULE for erratum #843419
+    - nfsd/blocklayout: accept any minlength
+    - [armhf] i2c: s3c2410: enable RuntimePM before registering to the core
+    - i2c: designware: Do not use parameters from ACPI on Dell Inspiron 7348
+    - i2c: designware-platdrv: enable RuntimePM before registering to the core
+    - workqueue: make sure delayed work run in local cpu
+    - [x86] KVM: fix SMI to halted VCPU
+    - [x86] KVM: fix RSM into 64-bit protected mode
+    - drm/qxl: fix framebuffer dirty rectangle tracking.
+    - drm/nouveau/fbcon: take runpm reference when userspace has an open fd
+    - drm/dp/mst: make mst i2c transfer code more robust.
+    - drm/radeon: attach tile property to mst connector
+    - drm/radeon: add pm sysfs files late
+    - dm thin: fix missing pool reference count decrement in pool_ctr error
+      path
+    - rbd: fix double free on rbd_dev->header_name
+    - timekeeping: Increment clock_was_set_seq in timekeeping_init()
+    - [arm64] Fix THP protection change logic
+    - svcrdma: handle rdma read with a non-zero initial page offset
+
+  [ Salvatore Bonaccorso ]
+  * KEYS: Fix race between key destruction and finding a keyring by name
+  * KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring
+    (CVE-2015-7872)
+  * KEYS: Don't permit request_key() to construct a new keyring
+
+  [ Ben Hutchings ]
+  * [x86] drm: Enable DRM_AMDGPU and HSA_AMD as modules (Closes: #797752)
+  * media: Enable DVB_AS102, VIDEO_GO7007, VIDEO_GO7007_USB,
+    VIDEO_GO7007_LOADER, VIDEO_GO7007_USB_S2250_BOARD as modules
+  * net: Enable LIQUIDIO and MLX5_CORE as modules; enable MLX5_CORE_EN
+  * [x86] Enable X86_AMD_PLATFORM_DEVICE
+  * linux-manual: Fix regression in reproducibility in 4.2~rc8-1~exp1
+  * net: Enable GENEVE_CORE as module
+    - Re-enable GENEVE and OPENVSWITCH_GENEVE
+  * bpf: Enable BPF_SYSCALL
+  * ACPI: Enable ACPI_NFIT as module
+  * tcp: Enable TCP_CONG_CDG as module
+  * nftables: Enable NF_TABLES_NETDEV, NFT_REDIR_IPV4, NFT_REDIR_IPV6 as
+    modules
+    [This change was accidentally omitted]
+  * net/sched: Enable NET_CLS_FLOWER as module
+    [This change was accidentally omitted]
+  * SCSI: Enable SCSI_SNIC as module
+  * target: Enable TCM_USER2 as module
+  * net/phy: Enable DP83867_PHY as module
+  * drm: Enable DRM_VIRTIO_GPU as module
+  * HID: Enable HID_BETOP_FF, HID_PLANTRONICS as modules
+  * hwrng: Enable USB_CHAOSKEY as module
+  * ext4: Enable EXT4_ENCRYPTION
+  * f2fs: Enable F2FS_FS_ENCRYPTION
+  * vfs,nvdimm: Enable FS_DAX
+    [This change was accidentally omitted]
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 28 Oct 2015 05:46:49 +0900
+
+linux (4.2.3-2) unstable; urgency=medium
+
+  * nbd: Restore request timeout detection (Closes: #770479)
+  * Ignore ABI changes in all mmc host drivers (fixes FTBFS on armhf)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 14 Oct 2015 19:09:49 +0100
+
+linux (4.2.3-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.2
+    - nfc: netlink: Add check on NFC_ATTR_VENDOR_DATA
+    - nfc: nci: hci: Add check on skb nci_hci_send_cmd parameter
+    - blk-mq: fix buffer overflow when reading sysfs file of 'pending'
+    - blk-mq: fix race between timeout and freeing request
+    - mac80211: enable assoc check for mesh interfaces
+    - [powerpc*] cxl: Allow release of contexts which have been OPENED but not
+      STARTED (regression in 4.2)
+    - ext4: don't manipulate recovery flag when freezing no-journal fs
+      (regression in 3.18)
+    - Revert "ext4: remove block_device_ejected" (regression in 4.1)
+    - [arm64] kconfig: Move LIST_POISON to a safe value
+    - [arm64] entry: always restore x0 from the stack on syscall return
+    - [arm64] flush FP/SIMD state correctly after execve()
+    - [arm64] head.S: initialise mdcr_el2 in el2_setup
+    - [armhf,arm64] KVM: vgic: Check for !irqchip_in_kernel() when mapping
+      resources (regression in 4.0)
+    - [arm64] KVM: add workaround for Cortex-A57 erratum #852523
+    - [powerpc*] pseries: Fix corrupted pdn list (regression in 4.1)
+    - [powerpc*] eeh: Probe after unbalanced kref check (regression in 4.1)
+    - [powerpc*] eeh: Fix fenced PHB caused by eeh_slot_error_detail()
+      (regression in 3.18)
+    - [powerpc*] powernv/pci-ioda: fix 32-bit TCE table init in kdump kernel
+      (regression in 4.2)
+    - [powerpc*] powernv/pci-ioda: fix kdump with non-power-of-2 crashkernel=
+      (regression in 4.2)
+    - [powerpc*] pseries: Release DRC when configure_connector fails
+      (regression in 4.1)
+    - [powerpc*] mm: Recompute hash value after a failed update
+    - CIFS: fix type confusion in copy offload ioctl
+    - mm: check if section present during memory block registering
+      (regression in 3.19)
+    - [i386] mm: Initialize pmd_idx in page_table_range_init_count()
+    - [x86] i915: Set ddi_pll_sel in DP MST path (regression in 4.2)
+    - Btrfs: check if previous transaction aborted to avoid fs corruption
+    - nfsd: Fix an FS_LAYOUT_TYPES/LAYOUT_TYPES encode bug
+    - nfsd: ensure that the ol stateid hash reference is only put once
+    - nfsd: ensure that delegation stateid hash references are only put once
+    - NFSv4.1/pnfs: Fix atomicity of commit list updates (regression in 4.0)
+    - NFSv4: don't set SETATTR for O_RDONLY|O_EXCL
+    - NFSv4.1/pNFS: Fix borken function _same_data_server_addrs_locked()
+    - NFS: Fix a NULL pointer dereference of migration recovery ops for v4.2
+      client
+    - NFS: nfs_set_pgio_error sometimes misses errors
+    - NFS41/flexfiles: update inode after write finishes
+    - NFSv4: Force a post-op attribute update when holding a delegation
+    - NFS41/flexfiles: zero out DS write wcc
+    - NFSv4.1/flexfiles: Fix a protocol error in layoutreturn
+    - NFSv4.1: Fix a protocol issue with CLOSE stateids
+    - nfs: Fix truncated client owner id without proto type (regression in 4.2)
+    - Revert "NFSv4: Remove incorrect check in can_open_delegated()"
+      (regression in 3.19)
+    - svcrdma: Change maximum server payload back to RPCSVC_MAXPAYLOAD
+      (regression in 4.2)
+    - SUNRPC: Ensure that we wait for connections to complete before retrying
+      (regression in 4.0)
+    - SUNRPC: Lock the transport layer on shutdown
+    - [hppa] PCI: Enable 64-bit bus addresses on PA-RISC (regression in 4.2)
+    - [hppa] Use double word condition in 64bit CAS operation
+    - fs: if a coredump already exists, unlink and recreate with O_EXCL
+    - fs: Don't dump core if the corefile would become world-readable.
+    - mmc: sdhci-of-esdhc: add workaround for pre divider initial value
+      (regression in 4.2)
+    - mmc: sdhci: also get preset value and driver type for MMC_DDR52
+      (regression in 3.16)
+    - mmc: sdhci: fix dma memory leak in sdhci_pre_req() (regression in 4.0)
+    - mmc: core: fix race condition in mmc_wait_data_done
+    - [armhf] iommu/fsl: Really fix init section(s) content (regression in 4.0)
+    - [armhf] iommu/io-pgtable-arm: Unmap and free table when overwriting with
+      block
+    - [x86] iommu/vt-d: Really use upper context table when necessary
+      (regression in 4.1)
+    - eCryptfs: Invalidate dcache entries when lower i_nlink is zero
+    - hfs: fix B-tree corruption after insertion at position 0
+    - IB/srp: Handle partial connection success correctly
+    - IB/srp: Stop the scsi_eh_<n> and scsi_tmf_<n> threads if login fails
+      (regression in 4.2)
+    - IB/uverbs: reject invalid or unknown opcodes
+    - IB/uverbs: Fix race between ib_uverbs_open and remove_one
+    - IB/iser: Fix missing return status check in iser_send_data_out
+      (regression in 3.19)
+    - IB/iser: Fix possible bogus DMA unmapping (regression in 3.19)
+    - IB/mlx5: avoid destroying a NULL mr in reg_user_mr error flow
+      (regression in 3.19)
+    - IB/mlx4: Fix incorrect cq flushing in error state (regression in 4.0)
+    - hfs,hfsplus: cache pages correctly between bnode_create and bnode_free
+    - jbd2: avoid infinite loop when destroying aborted journal
+      (regression in 4.2)
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.3
+    - phylib: fix device deletion order in mdiobus_unregister()
+      (regression in 4.2)
+    - sock, diag: fix panic in sock_diag_put_filterinfo
+      (regression in 3.19)
+    - net/ipv6: Correct PIM6 mrt_lock handling
+    - ipv6: fix multipath route replace error recovery (regression in 4.1)
+    - netlink, mmap: transform mmap skb into full skb on taps
+    - bridge: fix igmpv3 / mldv2 report parsing (regression in 4.2)
+    - [armhf] net: mvneta: fix DMA buffer unmapping in mvneta_rx()
+      (regression in 4.2)
+    - rtnetlink: catch -EOPNOTSUPP errors from ndo_bridge_getlink
+      (regression in 4.2)
+    - macvtap: fix TUNSETSNDBUF values > 64k (regression in 3.19)
+    - netlink: Fix autobind race condition that leads to zero port ID
+      (regression in 4.1)
+    - netlink: Replace rhash_portid with bound
+    - openvswitch: Zero flows on allocation.
+    - tcp: add proper TS val into RST packets (regression in 3.18)
+    - packet: Fix AF_PACKET ABI breakage in 4.2
+    - net: revert "net_sched: move tp->root allocation into fw_init()"
+      (regression in 4.1)
+    - fib_rules: fix fib rule dumps across multiple skbs
+    - ppp: fix lockdep splat in ppp_dev_uninit() (regression in 4.2)
+    - [armhf] mvneta: use inband status only when explicitly enabled
+      (regression in 4.1)
+    - net/mlx4_core: Capping number of requested MSIXs to MAX_MSIX
+    - zram: fix possible use after free in zcomp_create()
+    - [x86] hp-wmi: limit hotkey enable
+
+  [ Ben Hutchings ]
+  * ovl: conditionally use O_LARGEFILE in ovl_copy_up() (Closes: #800724)
+  * [x86] ALSA: hda - Disable power_save_node for Thinkpads (Closes: #800694)
+  * i2c: Enable I2C_CHARDEV as a module in all configurations with I2C
+    support (Closes: #800597)
+  * [mips*/octeon] Enable CAVIUM_CN63XXP1 (Closes: #800595)
+  * [mips*/octeon] Enable MMC, MMC_BLOCK, OCTEON_MMC and other drivers as
+    modules (Closes: #800594)
+  * ath10k: add qca6164 support (Closes: #800703)
+  * [!x86] net: Disable VMXNET3, only useful in VMware x86 virtual machines
+  * netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths
+    (Closes: #800445)
+  * [arm64] Defer workaround for erratum #843419
+  * [x86] crypto camellia_aesni_avx: Fix CPU feature checks (Closes: #800934)
+
+  [ Salvatore Bonaccorso ]
+  * ipc: Initialize msg/shm IPC objects before doing ipc_addid()
+    (CVE-2015-7613)
+
+  [ Ian Campbell ]
+  * [armel] Update breaks on flash-kernel to anything earlier than 3.37 since
+    that version adds the knowledge that various additional kirkwood systems
+    need a DTB appending as of v3.17-rc1. (Closes: #797878)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 06 Oct 2015 17:44:55 +0100
+
+linux-tools (4.2-2) unstable; urgency=medium
+
+  * [x32] Don't attempt to build linux-perf (fixes FTBFS)
+  * [x32] Build hyperv-daemons package
+  * [alpha] uapi: Add support for __SANE_USERSPACE_TYPES__(fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 02 Oct 2015 18:41:22 +0100
+
+linux (4.2.1-2) unstable; urgency=medium
+
+  * media: uvcvideo: Disable hardware timestamps by default (Closes: #794327)
+  * [mips*] udeb: Remove 'Provides: ata-modules' from kernel-image
+  * [hppa/parisc64-smp,mips*el/loongson-3] udeb: Remove i2c-modules again, as
+    the drivers that belong in it are actually built-in (fixes FTBFS)
+  * sctp: fix race on protocol/netns initialization (CVE-2015-5283)
+  * [mips*] pgtable-bits.h: Correct _PAGE_GLOBAL_SHIFT build failure
+    (regression in 4.0, but not a build failure for us)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 27 Sep 2015 14:17:34 +0100
+
+linux-tools (4.2-1) unstable; urgency=medium
+
+  * New upstream release
+
+  [ Ben Hutchings ]
+  * debian/bin,debian/control,debian/lib/python,debian/rules: Use Python 3
+    - debian/lib/python: Sync with linux package
+  * debian/bin/genorig.py: Make orig tarballs reproducible
+  * linux-perf: Fix installation directory for bash completions
+  * linux-perf: Remove shebang lines from perf scripts
+  * Set compiler flags according to dpkg-buildflags
+  * hyperv-daemons: Fix fortify format warning
+  * debian/rules: Add support for DEB_BUILD_OPTIONS=parallel=N
+  * debian/control: Update policy version to 3.9.6; no changes required
+  * linux-perf: Revert "perf build: Fix libunwind feature detection on 32-bit
+    x86", which was a regression for us
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 25 Sep 2015 22:55:41 +0100
+
+linux (4.2.1-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.1
+
+  [ Ben Hutchings ]
+  * [mips*el/loongson-3] udeb: Add fb-modules containing radeon driver
+    (Closes: #776274)
+  * [hppa/parisc64-smp,[mips*el/loongson-3] udeb: Add i2c-modules and
+    make fb-modules depend on it rather than including I2C modules
+    directly
+  * workqueue: Make flush_workqueue() available again to non GPL modules
+    (Closes: #798311)
+  * vfs: Fix possible escape from mount namespace (CVE-2015-2925):
+    - dcache: Handle escaped paths in prepend_path
+    - dcache: Reduce the scope of i_lock in d_splice_alias
+    - vfs: Test for and handle paths that are unreachable from their mnt_root
+  * aufs: Update support patches to aufs4.x-rcN-20150921
+    - mmap: Fix races in madvise_remove() and sys_msync() (Closes: #796036)
+  * RDS: verify the underlying transport exists before creating a connection
+    (CVE-2015-6937)
+  * Set ABI to 1
+  * e1000e: Fix tight loop implementation of systime read algorithm
+  * mmc: Drop "eMMC: Don't initialize partitions on RPMB flagged areas", as
+    upstream commit 4e93b9a6abc0 ("mmc: card: Don't access RPMB partitions for
+    normal read/write") looks like a cleaner solution
+  * mm: Change ZBUD back to built-in, as it's not really useful as a module
+  * USB: whiteheat: fix potential null-deref at probe (CVE-2015-5257)
+
+  [ Aurelien Jarno ]
+  * [mips*el] Fix BPF assembly code for pre-R2 CPUs. (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 25 Sep 2015 18:18:01 +0100
+
+linux (4.2-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_4.2
+
+  [ Ben Hutchings ]
+  * Remove all support for ia64 (Closes: #679545, #691576, #728706)
+  * [s390x] Compile with gcc-4.9 (Closes: #796845)
+  * linux-source: Depend on xz-utils, not bzip2 (Closes: #796940)
+  * gfs2: Make statistics unsigned, suitable for use with do_div()
+    (fixes FTBFS on mipsel,m68k)
+  * [amd64] Enable KALLSYMS_ALL (Closes: #660288), LIVEPATCH
+  * Re-enable various config options disabled by name changes in 4.2:
+    - SUNRPC_XPRT_RDMA replaced SUNRPC_XPRT_RDMA_{CLIENT,SERVER}
+    - [mips*el/loongson*] LOONGSON64 replaced LOONGSON
+    - [x86] COMEDI_8255_SA replaced COMEDI_8255
+  * [sparc] Remove linux-image, linux-header and udeb packages, as they
+    are redundant with sparc64 and neither is an official port
+  * Fix last issue that prevents a reproducible build (Closes: #769844):
+    - DocBook: Use a fixed encoding for output
+  * debian/bin,debian/control,debian/lib/python,debian/rules.real,
+    linux-support: Use Python 3
+  * debian/bin/genorig.py: Make orig tarballs reproducible
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 31 Aug 2015 02:08:19 +0100
+
+linux (4.2~rc8-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Aurelien Jarno ]
+  * [mips*] Build ext4 as module. Add core-modules and ext4-modules udeb.
+    Fixes FTBFS.
+  * [mips,mips64] Remove r4k-ip22, r5k-ip32 and sb1-bcm91250a flavours.
+  * [mipsel,mips64el] Remove sb1-bcm91250a flavour.
+
+  [ Ben Hutchings ]
+  * debian/control: Correct build-dependency on xz-utils, needed on all arches
+  * Fix more issues that prevent a reproducible build:
+    - Set LC_ALL=C.UTF-8
+    - Avoid creating man pages in source tree
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 24 Aug 2015 12:00:54 +0100
+
+linux-tools (4.2~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * genorig: Include more mips makefiles (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 17 Aug 2015 10:42:08 +0200
+
+linux-tools (4.2~rc6-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * Adjust for migration to git:
+    - Update .gitignore files
+    - debian/control: Update Vcs-* fields
+    - debian/rules: Exclude .git from maintainerclean rule
+  * Add packages of liblockdep (lockdep, liblockdep<version>, liblockdep-dev)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 14 Aug 2015 14:58:57 +0200
+
+linux (4.2~rc6-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * Adjust for migration to git:
+    - Update .gitignore files
+    - debian/control: Update Vcs-* fields
+    - README.Debian, README.source: Update references to svn
+  * [rt] Disable until it is updated for 4.2 or later
+  * debian/control: Drop Frederik Schüler from Uploaders
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 12 Aug 2015 20:48:00 +0200
+
+linux (4.1.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6
+    - [mips*/*-malta] Don't reinitialise RTC (regression in 3.14)
+    - [mips*] Make set_pte() SMP safe.
+    - fsnotify: fix oops in fsnotify_clear_marks_by_group_flags()
+    - [x86] drm/i915: Declare the swizzling unknown for L-shaped configurations
+    - [x86] drm/i915: Replace WARN inside I915_READ64_2x32 with retry loop
+    - drm/radeon: rework audio detect (v4) (regression in 4.0)
+    - drm/radeon/combios: add some validation of lvds values
+      (regression in 4.0)
+    - ipr: Fix incorrect trace indexing
+    - ipr: Fix invalid array indexing for HRRQ
+    - Bluetooth: Fix NULL pointer dereference in smp_conn_security
+    - [armhf] dmaengine: pl330: Fix overflow when reporting residue in memcpy
+      (regression in 4.0)
+    - [armhf] dmaengine: pl330: Really fix choppy sound because of wrong residue
+      calculation (regression in 4.0)
+    - xhci: fix off by one error in TRB DMA address boundary check
+    - ath10k: fix qca61x4 hw2.1 support
+    - [sparc*] Fix userspace FPU register corruptions. (Closes: #789180)
+    - ASoC: dapm: Lock during userspace access
+    - ASoC: dapm: Don't add prefix to widget stream name (regression in 4.1)
+    - [x86] xen: Probe target addresses in set_aliased_prot() before the
+      hypercall
+    - xen/gntdevt: Fix race condition in gntdev_release()
+    - hwrng: core - correct error check of kthread_run call
+    - [x86] crypto: qat - Fix invalid synchronization between
+      register/unregister sym algs
+    - rbd: fix copyup completion race
+    - [armhf] OMAP2+: hwmod: Fix _wait_target_ready() for hwmods without sysc
+    - [x86] hwmon: (dell-smm) Blacklist Dell Studio XPS 8100
+    - ocfs2: fix BUG in ocfs2_downconvert_thread_do_work()
+    - ocfs2: fix shift left overflow
+    - nfsd: Drop BUG_ON and ignore SECLABEL on absent filesystem
+    - md/raid1: extend spinlock to protect raid1_end_read_request against
+      inconsistencies
+    - dm: fix dm_merge_bvec regression on 32 bit systems (regression in 3.19
+    - [x86] Input: alps - only Dell laptops have separate button bits for v2
+      dualpoint sticks (regression in 4.1)
+    - mm, vmscan: Do not wait for page writeback for GFP_NOFS allocations
+    - signalfd: fix information leak in signalfd_copyinfo
+    - signal: fix information leak in copy_siginfo_to_user
+    - signal: fix information leak in copy_siginfo_from_user32
+    - nfsd: do nfs4_check_fh in nfs4_check_file instead of nfs4_check_olstateid
+
+  [ Aurelien Jarno ]
+  * [mips*] Build ext4 as module. Add core-modules and ext4-modules udeb.
+    Fixes FTBFS.
+
+  [ Ben Hutchings ]
+  * [i386] udeb: Make gpio_keys_polled and leds-gpio optional in input-modules
+    as they are not built for the 686-pae flavour (fixes FTBFS)
+  * perf: Fix AUX buffer refcounting
+  * ovl: Revert changes in 4.1.5-1 due to regression (Reopens: #786925)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 23 Aug 2015 12:19:22 +0200
+
+linux (4.1.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4
+    - Bluetooth: btbcm: allow btbcm_read_verbose_config to fail on Apple
+      (regression in 4.1)
+    - ath9k_htc: memory corruption calling set_bit()
+    - ieee802154: Fix sockaddr_ieee802154 implicit padding information leak.
+    - staging: vt6656: check ieee80211_bss_conf bssid not NULL
+    - staging: vt6655: check ieee80211_bss_conf bssid not NULL
+    - staging: vt6655: device_rx_srv check sk_buff is NULL
+    - staging: rtl8712: prevent buffer overrun in recvbuf2recvframe
+    - hid-sensor: Fix suspend/resume delay (regression in 4.0)
+    - ext4: fix race between truncate and __ext4_journalled_writepage()
+    - ext4: call sync_blockdev() before invalidate_bdev() in put_super()
+    - ext4: don't retry file block mapping on bigalloc fs with non-extent file
+    - ext4: fix fencepost error in lazytime optimization
+    - ext4: avoid deadlocks in the writeback path by using sb_getblk_gfp
+    - ext4: fix reservation release on invalidatepage for delalloc fs
+    - ext4: be more strict when migrating to non-extent based file
+    - ext4: correctly migrate a file with a hole at the beginning
+    - jbd2: use GFP_NOFS in jbd2_cleanup_journal_tail()
+    - jbd2: fix ocfs2 corrupt when updating journal superblock fails
+    - [armhf] rtc: snvs: fix wakealarm by call enable_irq_wake earlier
+      (regression in 3.19)
+    - i2c: mux: Use __i2c_transfer() instead of calling parent's master_xfer()
+      (regression in 4.1)
+    - i2c: use parent adapter quirks in mux (regression in 4.1)
+    - vb2: Don't WARN when v4l2_buffer.bytesused is 0 for multiplanar buffers
+      (regression in 4.1)
+    - media: Fix regression in some more dib0700 based devices
+      (regression in 3.17)
+    - rc-core: fix dib0700 scancode generation for RC5 (regression in 3.17)
+    - cx24117: fix a buffer overflow when checking userspace params
+    - af9013: Don't accept invalid bandwidth
+    - s5h1420: fix a buffer overflow when checking userspace params
+    - cx24116: fix a buffer overflow when checking userspace params
+    - libata: Fall back to unqueued READ LOG EXT if the DMA variant fails
+      (regression in 4.1)
+    - libata: Expose TRIM capability in sysfs
+    - libata: add ATA_HORKAGE_NOTRIM
+    - libata: add ATA_HORKAGE_MAX_SEC_1024 to revert back to previous
+      max_sectors limit (regression in 3.19)
+    - libata: force disable trim for SuperSSpeed S238
+    - [armhf] usb: dwc3: gadget: don't clear EP_BUSY too early
+      (regression in 3.15)
+    - USB: devio: fix a condition in async_completed()
+    - [armhf] phy: twl4030-usb: remove incorrect pm_runtime_get_sync() in
+      probe function. (regression in 3.17)
+    - usb: gadget: composite: Fix NULL pointer dereference (regression in 4.1)
+    - usb: gadget: f_fs: do not set cancel function on synchronous {read,write}
+      (regression in 4.0)
+    - USB: OHCI: Fix race between ED unlink and URB submission
+      (regression in 3.17)
+    - usb: core: lpm: set lpm_capable for root hub device (regression in 3.15)
+    - usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init()
+      function
+    - dm cache: fix race when issuing a POLICY_REPLACE operation
+    - dm btree remove: fix bug in redistribute3
+    - block: loop: convert to per-device workqueue (regression in 4.0)
+    - block: loop: avoiding too many pending per work I/O (regression in 4.0)
+    - block: Do a full clone when splitting discard bios (Closes: #793326)
+      (regression in 3.14)
+    - [armhf] drm/tegra: dpaux: Fix transfers larger than 4 bytes
+      (regression in 3.15)
+    - drm/qxl: Do not cause spice-server to clean our objects
+    - drm/atomic: fix out of bounds read in for_each_*_in_state helpers
+      (regression in 4.1)
+    - drm/radeon: take the mode_config mutex when dealing with hpds (v2)
+    - [x86] drm/i915/ppgtt: Break loop in gen8_ppgtt_clear_range failure path
+      (regression in 4.1)
+    - [x86] drm/i915: fix backlight after resume on 855gm (regression in 3.19)
+    - [x86] drm/i915: Snapshot seqno of most recently submitted request.
+      (regression in 4.0)
+    - Revert "drm/radeon: dont switch vt on suspend" (regression in 4.1)
+    - drm/radeon: unpin cursor BOs on suspend and pin them again on resume (v2)
+      (regression in 4.1)
+    - drm/radeon: fix user ptr race condition
+    - drm/radeon/ci: silence a harmless PCC warning
+    - drm: add a check for x/y in drm_mode_setcrtc
+    - drm: Stop resetting connector state to unknown (regression in 4.1)
+    - libata: Fix regression when the NCQ Send and Receive log page is absent
+    - xfs: fix remote symlinks on V5/CRC filesystems
+    - xfs: don't truncate attribute extents if no extents exist
+      (regression in 4.1)
+    - tpm: Fix initialization of the cdev (regression in 4.0)
+    - tpm, tpm_crb: fail when TPM2 ACPI table contents look corrupted
+      (regression in 4.1)
+    - [armel,armhf] dmaengine: mv_xor: bug fix for racing condition in
+      descriptors cleanup
+    - md: clear mddev->private when it has been freed. (regression in 4.0)
+    - md: unlock mddev_lock on an error path. (regression in 4.0)
+    - md: Skip cluster setup for dm-raid (regression in 4.1)
+    - Btrfs: don't invalidate root dentry when subvolume deletion fails
+      (regression in 3.18)
+    - Btrfs: use kmem_cache_free when freeing entry in inode cache
+    - Btrfs: fix race between caching kthread and returning inode to inode
+      cache (regression in 3.15)
+    - Btrfs: fix fsync data loss after append write
+    - Btrfs: fix list transaction->pending_ordered corruption
+      (regression in 3.19)
+    - Btrfs: fix file corruption after cloning inline extents
+    - selinux: fix mprotect PROT_EXEC regression caused by mm change
+      (regression in 4.1)
+    - ceph/crush: fix a bug in tree bucket decode
+    - ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage
+      (regression in 4.1)
+    - ACPI / LPSS: Fix up acpi_lpss_create_device() (regression in 4.0)
+    - ACPICA: Tables: Enable both 32-bit and 64-bit FACS (regression in 3.14)
+    - ACPICA: Tables: Enable default 64-bit FADT addresses favor
+    - ACPI / PCI: Fix regressions caused by resource_size_t overflow with
+      32-bit kernel (regression in 4.0)
+    - mmc: sdhci: Restore behavior while creating OCR mask (regression in 3.17)
+    - PM / clk: Fix clock error check in __pm_clk_add() (regression in 3.19)
+    - RDMA/ocrdma: fix double free on pd (regression in 4.0)
+    - mm/hugetlb: introduce minimum hugepage order (regression in 3.12)
+    - PM / sleep: Increase default DPM watchdog timeout to 60
+      (regression in 3.13)
+    - firmware: dmi_scan: Only honor end-of-table for 64-bit tables
+      (regression in 3.19)
+    - mac80211: fix the beacon csa counter for mesh and ibss
+      (regression in 3.17)
+    - iwlwifi: mvm: fix ROC reference accounting (regression in 3.17)
+    - cfg80211: ignore netif running state when changing iftype
+    - e1000e: Cleanup handling of VLAN_HLEN as a part of max frame size
+      (regression in 3.15)
+    - ovl: lookup whiteouts outside iterate_dir() (regression in 4.0)
+    - pNFS: Fix a memory leak when attempted pnfs fails
+    - pNFS/flexfiles: Fix the reset of struct pgio_header when resending
+    - nfs: fixing infinite OPEN loop in 4.0 stateid recovery
+    - NFS: Ensure we set NFS_CONTEXT_RESEND_WRITES when requeuing writes
+    - nfs: fix potential credential leak in ff_layout_update_mirror_cred
+    - nfs: always update creds in mirror, even when we have an already
+      connected ds
+    - 9p: forgetting to cancel request on interrupted zero-copy RPC
+    - 9p: don't leave a half-initialized inode sitting around
+    - p9_client_write(): avoid double p9_free_req()
+    - [arm64] bpf: fix out-of-bounds read in bpf2a64_offset()
+    - [arm64] bpf: fix endianness conversion bugs
+    - [arm64] Don't report clear pmds and puds as huge
+    - mm: avoid setting up anonymous pages into file mapping
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.5
+    - [powerpc*] powernv: Fix race in updating core_idle_state
+      (regression in 3.19)
+    - Revert "Input: synaptics - allocate 3 slots to keep stability in image
+      sensors" (regression in 4.1)
+    - [hppa] Fix some PTE/TLB race conditions and optimize __flush_tlb_range
+      based on timing results
+    - [hppa] mm: Fix a memory leak related to pmd not attached to the pgd
+      (regression in 4.0)
+    - [armel,armhf] 8404/1: dma-mapping: fix off-by-one error in bitmap size
+      check (regression in 3.15)
+    - [mips*] c-r4k: Fix cache flushing for MT cores
+    - can: replace timestamp as unique skb attribute (regression in 4.1)
+    - vfs: freeing unlinked file indefinitely delayed
+    - [armhf] crypto: omap-des - Fix unmapping of dma channels
+    - [s390x] nmi: fix vector register corruption
+    - [s390x] bpf: clear correct BPF accumulator register
+    - genirq: Prevent resend to interrupts marked IRQ_NESTED_THREAD
+    - [x86] perf: Fix static_key bug in load_mm_cr4() (regression in 4.0)
+    - Revert "dm: only run the queue on completion if congested or no requests
+      pending" (regression in 4.1)
+    - scsi: fix host max depth checking for the 'queue_depth' sysfs interface
+      (regression in 3.19)
+    - scsi: fix memory leak with scsi-mq (regression in 3.17)
+    - mnt: Clarify and correct the disconnect logic in umount_tree
+      (regressions in 4.0.2, 4.1)
+    - mnt: In detach_mounts detach the appropriate unmounted mount
+      (regression in 4.1)
+    - ftrace: Fix breakage of set_ftrace_pid (regression in 3.16)
+    - [x86] iommu/vt-d: Fix VM domain ID leak (regression in 3.17)
+    - mmc: sdhci check parameters before call dma_free_coherent
+      (regression in 3.16)
+    - iwlwifi: mvm: fix antenna selection when BT is active
+      (regression in 3.17)
+    - md/raid1: fix test for 'was read error from last working device'.
+    - [armhf] spi: imx: Fix small DMA transfers (regression in 3.18)
+    - [armhf] regulator: s2mps11: Fix GPIO suspend enable shift wrapping bug
+    - usb-storage: ignore ZTE MF 823 card reader in mode 0x1225
+    - [armhf] Revert "serial: imx: initialized DMA w/o HW flow enabled"
+      (regression in 4.0)
+    - serial: core: Fix crashes while echoing when closing (regression in 3.19)
+    - efi: Handle memory error structures produced based on old versions of
+      standard (regression in 3.13)
+    - [x86] efi: Use all 64 bit of efi_memmap in setup_e820()
+    - rds: rds_ib_device.refcount overflow
+    - n_tty: signal and flush atomically (regression in 4.0)
+    - [x86] perf/intel/cqm: Return cached counter value from IRQ context
+      (regression in 4.1)f
+    - NFS: Don't revalidate the mapping if both size and change attr are up to
+      date (regression in 3.16)
+    - NFSv4: We must set NFS_OPEN_STATE flag in nfs_resync_open_stateid_locked
+      (regression in 4.0)
+    - NFS: Fix a memory leak in nfs_do_recoalesce (regression in 4.0)
+    - iscsi-target: Fix use-after-free during TPG session shutdown
+    - iscsi-target: Fix iscsit_start_kthreads failure OOPs (regression in 4.0)
+    - iscsi-target: Fix iser explicit logout TX kthread leak
+      (regression in 4.0)
+    - qla2xxx: Fix hardware lock/unlock issue causing kernel panic.
+      (regression in 3.18)
+    - qla2xxx: release request queue reservation. (regression in 3.18)
+    - qla2xxx: Remove msleep in qlt_send_term_exchange (regression in 3.18)
+    - qla2xxx: fix command initialization in target mode. (regression in 3.18)
+    - qla2xxx: kill sessions/log out initiator on RSCN and port down efvents
+      (regression in 3.18)
+    - drm/nouveau/fbcon/nv11-: correctly account for ring space usage
+    - drm/nouveau/kms/nv50-: guard against enabling cursor on disabled heads
+    - drm/nouveau: hold mutex when calling nouveau_abi16_fini()
+    - drm/nouveau/drm/nv04-nv40/instmem: protect access to priv->heap by mutex
+    - xfs: remote attribute headers contain an invalid LSN
+    - xfs: remote attributes need to be considered data
+
+  [ Ian Campbell ]
+  * [armhf] Enable cpufreq on some sunxi platforms (Closes: #793185)
+    - Enable autoloading of the cpufreq-dt driver.
+    - Enable autoloading of AXP20x regulator driver.
+
+  [ Ben Hutchings ]
+  * [x86] iio: Enable drivers for ACPI-discoverable devices as modules:
+    AK8975, BMC150_ACCEL, BMG160, BMP280, INV_MPU6050_IIO, JSA1212, KMX61,
+    KXCJK1013, MMA9551, MMA9553, SX9500
+  * Adjust for migration to git:
+    - Update .gitignore files
+    - debian/control: Update Vcs-* fields
+    - README.Debian, README.source: Update references to svn
+  * Bump ABI to 2
+  * virtio-net: drop NETIF_F_FRAGLIST (CVE-2015-5156)
+  * ovl: Add support for NFS as lower filesystem (Closes: #786925)
+  * perf: Fix double-free of the AUX buffer
+  * linux-source: Fix compression of the source tarball (Closes: #795199)
+  * udeb: Add newly enabled drivers:
+    - [i386] Add gpio_keys_polled, leds-gpio to input-modules
+    - Add virtio-input to input-modules
+    - Add toshsd to mmc-modules
+    - Add wd719x to scsi-extra-modules
+    - Move eeprom_93cx6 to core-modules; make scsi-extra-modules depend on it
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 15 Aug 2015 23:37:20 +0200
+
+linux-tools (4.1.4-2) unstable; urgency=medium
+
+  * [mips*,alpha,hppa] linux-perf: Add empty Build files for these architectures
+    (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 04 Aug 2015 17:11:46 +0100
+
+linux-tools (4.1.4-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.4
+    - perf bench numa: Fix to show proper convergence stats
+
+  [ Ben Hutchings ]
+  * linux-tools: Set $KBUILD_BUILD_TIMESTAMP from changelog and use it as man
+    page date
+  * hyperv-daemons: Only attempt to build package on i386, amd64
+    (fixes FTBFS on other architectures)
+  * linux-tools: Rename to linux-perf-<version>, since other tools are
+    in other binary packages
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 04 Aug 2015 00:47:58 +0100
+
+linux (4.1.3-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.3
+
+  [ Ben Hutchings ]
+  * [armel/kirkwood] ubi: Change UBIFS_FS and MTD_UBI from built-in to
+    modules, to reduce kernel image size (fixes FTBFS)
+  * debian/rules.real: Use dpkg-parsechangelog -S
+  * [rt] Update to 4.1.3-rt3 and re-enable
+  * KEYS: ensure we free the assoc array edit if edit is valid (CVE-2015-1333)
+  * [armel,sh4] linux-image: Recommend u-boot-tools rather than the obsolete
+    uboot-mkimage package (Closes: #793608)
+  * [i386/586] Enable KEYBOARD_GPIO_POLLED and LEDS_GPIO as modules, and
+    ALIX, NET5501, GEOS (Closes: #734204)
+  * [s390x] cachinfo: add missing facility check to init_cache_level()
+    (Closes: #793929)
+  * md: use kzalloc() when bitmap is disabled (CVE-2015-5697)
+  * inet: Enable IPVLAN, NET_FOU as modules; enable NET_FOU_IP_TUNNELS
+  * netfilter: Enable NFT_REDIR as module
+  * net/sched: Enable NET_ACT_VLAN, NET_ACT_BPF, NET_ACT_CONNMARK as modules
+  * mpls: Enable MPLS_ROUTING as module
+  * hci_uart: Enable BT_HCIUART_INTEL, BT_HCIUART_BCM
+  * SCSI: Enable SCSI_WD719X as module
+  * dm: Enable DM_LOG_WRITES as module
+  * cxgb4: Enable CHELSIO_T4_DCB
+  * ixgbe: Enable IXGBE_VXLAN
+  * i40e: Enable I40E_FCOE
+  * drm: Enable DRM_VGEM as module
+  * virtio: Enable VIRTIO_INPUT as module
+  * mmc: Enable MMC_TOSHIBA_PCI as module
+  * [x86] block: Enable BLK_DEV_PMEM as module; enable X86_PMEM_LEGACY
+  * [x86] tpm: Enable TCG_CRB as module
+  * debug: Enable DEBUG_LIST
+  * security: Apply and enable GRKERNSEC_PERF_HARDEN feature from Grsecurity,
+    disabling use of perf_event_open() by unprivileged users by default
+    (sysctl: kernel.perf_event_paranoid)
+  * Set ABI to 1
+
+  [ Ian Campbell ]
+  * [armhf] Set CONFIG_ARM_TEGRA_CPUFREQ as builtin.
+  * [armhf] Enable new drivers for sunxi platforms (Closes: #792388)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 03 Aug 2015 22:17:15 +0100
+
+linux-tools (4.1.2-1~exp1) experimental; urgency=medium
+
+  * New upstream release
+
+  [ Bastian Blank ]
+  * Add hyperv-daemons package, thanks to Hideki Yamane (closes: #782761)
+
+  [ Ben Hutchings ]
+  * hyperv-daemons: Rewrite description
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 13 Jul 2015 01:33:27 +0100
+
+linux (4.1.2-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.2
+
+  [ Ben Hutchings ]
+  * Fix more issues that prevent a reproducible build:
+    - linux-doc: DocBook: generate consistent IDs
+    - linux-manual: DocBook: Fix duplicate man pages
+    - linux-manual: kernel-doc: Use $KBUILD_BUILD_TIMESTAMP as man page date
+  * [i386] Disable VM86 (Closes: #792003)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 11 Jul 2015 18:01:42 +0100
+
+linux (4.1.1-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_4.1
+    - i40e: start up in VEPA mode by default (Closes: #790953)
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.1
+
+  [ Ben Hutchings ]
+  * Fix some issues that prevent a reproducible build (thanks to
+    Jérémy Bobbio):
+    - linux-image: Fix timestamps in the built-in initramfs
+    - linux-source: Fix timestamps and sort files in the tarball
+    - linux-doc,linux-manual: Drop original timestamp (and name) when
+      compressing
+    - linux-doc: Parse kernel-doc deterministically
+  * aufs: Apply patches to enable building aufs out-of-tree
+  * [x86] Enable MMIOTRACE (Closes: #790808)
+
+  [ maximilian attems ]
+  * [x86] Enable SND_SOC_INTEL_BROADWELL_MACH. (closes: #785422)
+
+  [ Ian Campbell ]
+  * [arm64+armhf] Enable SYSCON poweroff driver.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 07 Jul 2015 09:15:45 +0100
+
+linux (4.0.8-2) unstable; urgency=high
+
+  [ Uwe Kleine-König ]
+  * [rt] Update to 4.0.8-rt6
+
+  [ Ben Hutchings ]
+  * [amd64] Fix nested NMI handling (CVE-2015-3290, CVE-2015-3291,
+    CVE-2015-5157)
+    - Enable nested do_nmi handling for 64-bit kernels
+    - Remove asm code that saves cr2
+    - Switch stacks on userspace NMI entry
+    - Reorder nested NMI checks
+    - Use DF to avoid userspace RSP confusing nested NMI detection
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 22 Jul 2015 21:45:07 +0100
+
+linux (4.0.8-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.8
+    - netfilter: nft_rbtree: fix locking
+    - [armhf] clk-imx6q: refine sata's parent
+    - KVM: nSVM: Check for NRIPS support before updating control field
+    - [sparc*] Use GFP_ATOMIC in ldc_alloc_exp_dring() as it can be called in
+      softirq context
+    - bridge: fix multicast router rlist endless loop
+    - net: igb: fix the start time for periodic output signals
+    - net: don't wait for order-3 page allocation
+    - sctp: fix ASCONF list handling (CVE-2015-3212)
+    - bridge: fix br_stp_set_bridge_priority race conditions
+    - packet: read num_members once in packet_rcv_fanout()
+    - packet: avoid out of bounds read in round robin fanout
+    - neigh: do not modify unlinked entries
+    - tcp: Do not call tcp_fastopen_reset_cipher from interrupt context
+    - ip: report the original address of ICMP messages
+    - net/mlx4_en: Release TX QP when destroying TX ring
+    - net/mlx4_en: Wake TX queues only when there's enough room
+    - net/mlx4_en: Fix wrong csum complete report when rxvlan offload is
+      disabled
+    - mlx4: Disable HA for SRIOV PF RoCE devices
+    - net: phy: fix phy link up when limiting speed via device tree
+    - bnx2x: fix lockdep splat
+    - sctp: Fix race between OOTB responce and route removal
+    - [armhf] net: mvneta: introduce compatible string "marvell, armada-xp-neta"
+    - [armhf] mvebu: update Ethernet compatible string for Armada XP
+    - [armhf] net: mvneta: disable IP checksum with jumbo frames for Armada 370
+    - usb: gadget: f_fs: fix check in read operation
+    - usb: gadget: f_fs: add extra check before unregister_gadget_item
+    - crypto: talitos - avoid memleak in talitos_alg_alloc()
+    - Revert "crypto: talitos - convert to use be16_add_cpu()"
+    - [armhf/armmp-lpae] iommu/arm-smmu: Fix broken ATOS check
+    - [x86] iommu/amd: Handle large pages correctly in free_pagetable
+    - mmc: sdhci: fix low memory corruption
+    - [x86] intel_pstate: set BYT MSR with wrmsrl_on_cpu()
+    - selinux: fix setting of security labels on NFS
+    - [armhf] KVM: force execution of HCPTR access on VM exit
+    - [armhf] kvm: psci: fix handling of unimplemented functions
+    - [armhf] tegra20: Store CPU "resettable" status in IRAM
+    - [powerpc*] tick/idle: Do not register idle states with
+      CPUIDLE_FLAG_TIMER_STOP set in periodic mode
+    - [powerpc*] perf: Fix book3s kernel to userspace backtraces
+    - [x86] PCI: Use host bridge _CRS info on systems with >32 bit addressing
+    - [x86] PCI: Use host bridge _CRS info on Foxconn K8M890-8237A
+    - [s390x] KVM: fix external call injection without sigp interpretation
+    - [s390x] kdump: fix REGSET_VX_LOW vector register ELF notes
+    - [s390x] KVM: virtio-ccw: don't overwrite config space values
+    - [x86] KVM: properly restore LVT0
+    - [x86] KVM: make vapics_in_nmi_mode atomic
+    - fs: Fix S_NOSEC handling
+    - fs/ufs: revert "ufs: fix deadlocks introduced by sb mutex merge"
+    - fs/ufs: restore s_lock mutex
+    - vfs: Remove incorrect debugging WARN in prepend_path
+    - vfs: Ignore unlocked mounts in fs_fully_visible
+    - ufs: Fix warning from unlock_new_inode()
+    - ufs: Fix possible deadlock when looking up directories
+    - fs/ufs: restore s_lock mutex_init()
+
+  [ Ben Hutchings ]
+  * [ppc64el] Ignore ABI changes due to disabling HIBERNATION (fixes FTBFS)
+  * [x86] kvm: fix kvm_apic_has_events to check for NULL pointer (CVE-2015-4692)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 11 Jul 2015 04:58:05 +0100
+
+linux (4.0.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.6
+    - crush: ensuring at most num-rep osds are selected
+    - aio: fix serial draining in exit_aio()
+    - net: core: Correct an over-stringent device loop detection.
+    - [x86] bpf_jit: fix FROM_BE16 and FROM_LE16/32 instructions
+    - [x86] bpf_jit: fix compilation of large bpf programs
+    - net: phy: Allow EEE for all RGMII variants
+    - netlink: Reset portid after netlink_insert failure
+    - rtnl/bond: don't send rtnl msg for unregistered iface
+    - tcp/ipv6: fix flow label setting in TIME_WAIT state
+    - net/ipv6/udp: Fix ipv6 multicast socket filter regression
+    - net: sched: fix call_rcu() race on classifier module unloads
+    - ipv4: Avoid crashing in ip_error
+    - cdc_ncm: Fix tx_bytes statistics
+    - bridge: fix parsing of MLDv2 reports
+    - net: dp83640: fix broken calibration routine.
+    - net: dp83640: reinforce locking rules.
+    - net: dp83640: fix improper double spin locking.
+    - unix/caif: sk_socket can disappear when state is unlocked
+    - xen/netback: Properly initialize credit_bytes
+    - net_sched: invoke ->attach() after setting dev->qdisc
+    - sctp: Fix mangled IPv4 addresses on a IPv6 listening socket
+    - bridge: fix br_multicast_query_expired() bug
+    - udp: fix behavior of wrong checksums (CVE-2015-5364)
+    - tcp: fix child sockets to use system default congestion control if not set
+    - xen: netback: read hotplug script once at start of day.
+    - ipv4/udp: Verify multicast group is ours in upd_v4_early_demux()
+    - be2net: Replace dma/pci_alloc_coherent() calls with dma_zalloc_coherent()
+    - bridge: disable softirqs around br_fdb_update to avoid lockup
+    - netlink: Disable insertions/removals during rehash
+    - drivers/base: cacheinfo: handle absence of caches
+    - n_tty: Fix auditing support for cannonical mode
+    - [x86] iommu/vt-d: Allow RMRR on graphics devices too
+    - [x86] iommu/vt-d: Fix passthrough mode with translation-disabled devices
+    - ALSA: hda/realtek - Add a fixup for another Acer Aspire 9420
+    - ALSA: usb-audio: Add mic volume fix quirk for Logitech Quickcam Fusion
+    - ALSA: usb-audio: don't try to get Outlaw RR2150 sample rate
+    - ALSA: usb-audio: add MAYA44 USB+ mixer control names
+    - ALSA: usb-audio: fix missing input volume controls in MAYA44 USB(+)
+    - ALSA: usb-audio: add native DSD support for JLsounds I2SoverUSB
+    - [armhf] dmaengine: pl330: Fix hang on dmaengine_terminate_all on certain
+      boards
+    - dmaengine: Fix choppy sound because of unimplemented resume
+    - Input: alps - do not reduce trackpoint speed by half
+    - Input: synaptics - add min/max quirk for Lenovo S540
+    - Input: elantech - fix detection of touchpads where the revision matches
+      a known rate
+    - Input: elantech - add new icbody type
+    - block: fix ext_dev_lock lockdep report
+    - block: discard bdi_unregister() in favour of bdi_destroy()
+    - USB: cp210x: add ID for HubZ dual ZigBee and Z-Wave dongle
+    - USB: serial: ftdi_sio: Add support for a Motion Tracker Development Board
+    - usb: host: xhci: add mutex for non-thread-safe data
+    - usb: make module xhci_hcd removable
+    - [x86] asm/irq: Stop relying on magic JMP behavior for early_idt_handlers
+    - [armhf] dts: am335x-boneblack: disable RTC-only sleep to avoid hardware
+      damage
+    - [x86] drm/amdkfd: fix topology bug with capability attr.
+    - drm/radeon: use proper ACR regisiter for DCE3.2
+    - [x86] drm/i915/hsw: Fix workaround for server AUX channel clock divisor
+    - [x86] drm/i915: Don't skip request retirement if the active list is empty
+    - [x86] drm/i915: Fix DDC probe for passive adapters
+    - drm/radeon: fix freeze for laptop with Turks/Thames GPU.
+    - Revert "drm/radeon: don't share plls if monitors differ in audio support"
+    - Revert "drm/radeon: adjust pll when audio is not enabled"
+    - drm/radeon: Make sure radeon_vm_bo_set_addr always unreserves the BO
+    - serial: imx: Fix DMA handling for IDLE condition aborts
+    - [powerpc*] of/dynamic: Fix test for PPC_PSERIES
+    - virtio_pci: Clear stale cpumask when setting irq affinity
+    - [armel,armhf] bus: mvebu-mbus: do not set WIN_CTRL_SYNCBARRIER on non
+      io-coherent platforms.
+    - [armel,armhf] Revert "bus: mvebu-mbus: make sure SDRAM CS for DMA don't
+      overlap the MBus bridge window"
+    - [arm64] dts: mt8173-evb: fix model name
+    - mm/memory_hotplug.c: set zone->wait_table to null after freeing it
+    - md: Close race when setting 'action' to 'idle'.
+    - md: don't return 0 from array_state_store
+    - sched, numa: do not hint for NUMA balancing on VM_MIXEDMAP mappings
+    - blk-mq: free hctx->ctxs in queue's release handler
+    - cfg80211: wext: clear sinfo struct before calling driver
+    - [armhf] irqchip: sunxi-nmi: Fix off-by-one error in irq iterator
+    - Btrfs: send, add missing check for dead clone root
+    - Btrfs: send, don't leave without decrementing clone root's send_progress
+    - btrfs: incorrect handling for fiemap_fill_next_extent return
+    - btrfs: cleanup orphans while looking up default subvolume
+    - Btrfs: fix range cloning when same inode used as source and destination
+    - Btrfs: fix uninit variable in clone ioctl
+    - Btrfs: fix regression in raid level conversion
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.7
+    - crypto: caam - improve initalization for context state saves
+    - crypto: caam - fix RNG buffer cache alignment
+    - [x86] KVM: fix lapic.timer_mode on restore
+    - ALSA: hda - adding a DAC/pin preference map for a HP Envy TS machine
+    - tracing: Have filter check for balanced ops
+    - iser-target: Fix variable-length response error completion
+    - iser-target: Fix possible use-after-free
+    - drm/mgag200: Reject non-character-cell-aligned mode widths
+    - [x86] drm/i915: Always reset vma->ggtt_view.pages cache on unbinding
+    - [x86] Revert "drm/i915: Don't skip request retirement if the active list
+      is empty"
+    - drm/radeon: Add RADEON_INFO_VA_UNMAP_WORKING query
+    - ath3k: Add support of 0489:e076 AR3012 device
+    - ath3k: add support of 13d3:3474 AR3012 device
+    - b43: fix support for 14e4:4321 PCI dev with BCM4321 chipset
+    - cdc-acm: Add support of ATOL FPrint fiscal printers
+    - [armhf] EXYNOS: Fix failed second suspend on Exynos4
+    - [x86] kprobes: Return correct length in __copy_instruction()
+    - dm: fix NULL pointer when clone_and_map_rq returns !DM_MAPIO_REMAPPED
+    - [x86] drm/i915: Avoid GPU hang when coming out of s3 or s4
+    - [powerpc*] powernv: Restore non-volatile CRs after nap
+
+  [ Ben Hutchings ]
+  * mm: Re-enable ZBUD as module (Closes: #789094)
+  * mm: Change ZSMALLOC from built-in to module
+  * Revert "tcp: fix child sockets to use system default congestion control if
+    not set" to avoid ABI change
+  * [ppc64el] Disable HIBERNATION (Closes: #789070)
+  * [mips*] Correct FP ISA requirements (Closes: #781892)
+  * udeb: Add more drivers to sound-modules, thanks to Samuel Thibault
+    (Closes: #782495)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 06 Jul 2015 02:57:42 +0100
+
+linux (4.0.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.5
+    - [x86] iommu/amd: Fix bug in put_pasid_state_wait (regression in 4.0)
+    - [x86] fpu: Disable XSAVES* support for now (regression in 3.17)
+    - [x86] KVM: MMU: fix smap permission check
+    - [x86] kvm: fix crash in kvm_vcpu_reload_apic_access_page
+    - [x86] KVM: MMU: fix SMAP virtualization
+    - ktime: Fix ktime_divns to do signed division (regression in 3.17)
+    - omfs: fix sign confusion for bitmap loop counter (regression in 3.18)
+    - xfs: xfs_attr_inactive leaves inconsistent attr fork state behind
+    - xfs: xfs_iozero can return positive errno (regression in 3.17)
+    - ovl: don't remove non-empty opaque directory (regression in 4.0)
+    - [armhf] mfd: da9052: Fix broken regulator probe (regression in 3.19)
+    - libceph: request a new osdmap if lingering request maps to no osd
+    - Revert "libceph: clear r_req_lru_item in __unregister_linger_request()"
+      (regression in 3.18)
+    - Btrfs: fix racy system chunk allocation when setting block group ro
+      (regression in 4.0)
+    - xen/events: don't bind non-percpu VIRQs with percpu chip
+    - hwmon: (tmp401) Do not auto-detect chip on I2C address 0x37
+    - clk: add missing lock when call clk_core_enable in clk_set_parent
+      (regression in 4.0)
+    - brcmfmac: avoid null pointer access when brcmf_msgbuf_get_pktid() fails
+    - lib: Fix strnlen_user() to not touch memory after specified maximum
+    - vfs: d_walk() might skip too much
+    - module: Call module notifier on failure after complete_formation()
+      (regression in 3.16)
+    - Revert "ALSA: hda - Add mute-LED mode control to Thinkpad"
+      (regression in 4.0.3)
+    - xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256
+    - [powerpc*] mce: fix off by one errors in mce event handling
+      (regression in 3.19)
+    - pty: Fix input race when closing (regression in 3.19)
+    - ext4: fix lazytime optimization
+    - ext4: fix NULL pointer dereference when journal restart fails
+    - ext4: check for zero length extent explicitly
+    - jbd2: fix r_count overflows leading to buffer overflow in journal recovery
+    - libata: Ignore spurious PHY event on LPM policy change
+    - libata: Blacklist queued TRIM on all Samsung 800-series
+    - [arm64] bpf: fix signedness bug in loading 64-bit immediate
+      (regression in 3.18)
+    - [x86] gpio: gpio-kempld: Fix get_direction return value
+    - [s390x] crypto: ghash - Fix incorrect ghash icv buffer handling.
+    - mac80211: move WEP tailroom size check
+    - mac80211: don't use napi_gro_receive() outside NAPI context
+    - [s390x] mm: correct return value of pmd_pfn (regression in 3.17)
+    - [armhf] EXYNOS: Fix dereference of ERR_PTR returned by
+      of_genpd_get_from_provider (regression in 4.0)
+    - [arm*] fix missing syscall trace exit
+    - [hppa] Fix crashes due to stack randomization on stack-grows-upwards
+      architectures
+    - kernfs: do not account ino_ida allocations to memcg
+    - nfsd: fix the check for confirmed openowner in nfs4_preprocess_stateid_op
+    - md/raid5: don't record new size if resize_stripes fails.
+    - Revert "HID: logitech-hidpp: support combo keyboard touchpad TK820"
+      (regression in 3.19)
+    - [mips*] fix FP mode selection in lieu of .MIPS.abiflags data
+      (regression in 4.0)
+    - ACPI / init: Fix the ordering of acpi_reserve_resources()
+    - iwlwifi: mvm: Free fw_status after use to avoid memory leak
+      (regression in 3.19)
+    - iwlwifi: pcie: prevent using unmapped memory in fw monitor
+    - drm/plane-helper: Adapt cursor hack to transitional helpers
+      (regression in 4.0)
+    - drm/radeon/audio: make sure connector is valid in hotplug case
+    - Revert "drm/radeon: only mark audio as connected if the monitor supports
+      it (v3)" (regression in 4.0.3)
+    - dm: fix casting bug in dm_merge_bvec() (regression in 3.19)
+    - dm: fix reload failure of 0 path multipath mapping on blk-mq devices
+      (regression in 4.0)
+    - UBI: block: Add missing cache flushes
+    - md: fix race when unfreezing sync_action (regression in 4.0)
+    - fs/binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings
+      (regression in 4.0.2)
+
+  [ Ben Hutchings ]
+  * udeb: Remove i2o modules (fixes FTBFS on amd64) (Closes: #787004)
+  * Revert "libata: Ignore spurious PHY event on LPM policy change" to avoid
+    ABI change
+
+  [ Ian Campbell ]
+  * [armhf] Enable PCIe support for IMX6 boards. Patch from Vagrant
+    Cascadian (Closes: #787029)
+  * [armhf] Add stmmac-platform module to nic-modules udeb. (Closes: #786716)
+  * [arm] Fix mvebu-mbus for non-io-coherent platforms. In particular
+    armel/{orion5x,kirkwood}.
+  * [armel/kirkwood]: Enable CONFIG_ARM_KIRKWOOD_CPUIDLE. (Closes: #787716)
+
+  [ Uwe Kleine-König ]
+  * [rt] Update to 4.0.5-rt3
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 16 Jun 2015 15:40:49 +0100
+
+linux (4.0.4-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3
+    - bpf: fix 64-bit divide
+    - route: Use ipv4_mtu instead of raw rt_pmtu (regression in 3.19)
+    - cxgb4: Fix MC1 memory offset calculation (regression in 3.19)
+    - [mips*] Revert "MIPS: Remove race window in page fault handling"
+      (regression in 3.17)
+    - [mips*] Fix race condition in lazy cache flushing.
+    - [mips*/octeon] Remove udelay() causing huge IRQ latency
+    - [mips*] Fix cpu_has_mips_r2_exec_hazard.
+    - [mips*] asm: elf: Set O32 default FPU flags (regression in 4.0)
+    - ALSA: emux: Fix mutex deadlock in OSS emulation
+    - cdc-acm: prevent infinite loop when parsing CDC headers.
+      (regression in 4.0)
+    - [arm64] dma-mapping: always clear allocated buffers
+    - [arm64] add missing PAGE_ALIGN() to __dma_free()
+    - [armhf] usb: chipidea: otg: remove mutex unlock and lock while stop and
+      start role (regression in 3.16)
+    - btrfs: unlock i_mutex after attempting to delete subvolume during send
+      (regression in 3.16)
+    - [x86] ACPI / SBS: Enable battery manager when present (regression in 3.18)
+    - rbd: end I/O the entire obj_request on error
+    - ext4: fix data corruption caused by unwritten and delayed extents
+      (Closes: #785672)
+    - ext4: move check under lock scope to close a race.
+    - SCSI: add 1024 max sectors black list flag (regression in 3.19)
+    - 3w-xxxx: fix command completion race
+    - 3w-9xxx: fix command completion race
+    - 3w-sas: fix command completion race
+    - drm/radeon: fix lockup when BOs aren't part of the VM on release
+    - drm/radeon: reset BOs address after clearing it.
+    - drm/radeon: check new address before removing old one
+    - hfsplus: don't store special "osx" xattr prefix on-disk
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.4
+    - [x86] spinlocks: Fix regression in spinlock contention detection
+      (regression in 4.0)
+    - [x86] ACPI / SBS: Add 5 us delay to fix SBS hangs on MacBook
+      (regression in 3.18)
+    - [x86] PCI/ACPI: Make all resources except [io 0xcf8-0xcff] available on
+      PCI bus (regression in 4.0)
+    - ACPI / PNP: add two IDs to list for PNPACPI device enumeration
+      (regression in 3.16)
+    - ocfs2: dlm: fix race between purge and get lock resource
+    - nilfs2: fix sanity check of btree level in nilfs_btree_root_broken()
+    - mnt: Fix fs_fully_visible to verify the root directory is visible
+    - mm/memory-failure: call shake_page() when error hits thp tail page
+    - vfio: Fix runaway interruptible timeout (regression in 4.0)
+    - Revert "dm crypt: fix deadlock when async crypto algorithm returns -EBUSY"
+      (regression in 4.0.2)
+    - block: destroy bdi before blockdev is unregistered. (regression in 4.0)
+    - blk-mq: fix race between timeout and CPU hotplug
+    - blk-mq: fix CPU hotplug handling
+    - [armhf] dts: imx6: phyFLEX: USB VBUS control is active-high
+      (regression in 3.16)
+    - [armhf] mvebu: armada-xp-openblocks-ax3-4: Disable internal RTC
+    - [armhf] OMAP2+: Fix omap off idle power consumption creeping up
+      (regression in 3.16)
+    - [armel,armhf] net fix emit_udiv() for BPF_ALU | BPF_DIV | BPF_K
+      intruction.
+    - drm: Zero out invalid vblank timestamp in drm_update_vblank_count.
+      (regression in 3.17)
+    - [x86] drm/i915/dp: there is no audio on port A
+    - [x86] drm/amdkfd: allow unregister process with queues
+    - drm/radeon: disable semaphores for UVD V1 (v2)
+    - drm/radeon: don't setup audio on asics that don't support it
+    - drm/radeon: fix userptr BO unpin bug v3
+    - drm/radeon: make VCE handle check more strict
+    - drm/radeon: make UVD handle checking more strict
+    - drm/radeon: more strictly validate the UVD codec
+    - pinctrl: Don't just pretend to protect pinctrl_maps, do it for real
+    - mmc: card: Don't access RPMB partitions for normal read/write
+
+  [ Ben Hutchings ]
+  * Fix error messages at boot on systems without an RTC (Closes: #784146):
+    - rtc: hctosys: do not treat lack of RTC device as error
+    - rtc: hctosys: use function name in the error log
+  * [rt] Update to 4.0.4-rt1 and re-enable
+  * linux-image: Depend on kmod without an alternative of module-init-tools
+  * linux-image: Add versioned Breaks on udev (<< 208-8~) due to #752742 and
+    #756312
+  * [i386] pnp: Disable PNPBIOS_PROC_FS
+  * [arm64] USB: Add support for XHCI on APM Mustang (Closes: #785707)
+    - Change USB_XHCI_HCD to built-in and enable USB_XHCI_PLATFORM as built-in
+    - Make xhci platform driver use 64 bit or 32 bit DMA
+    - Add support for ACPI identification to xhci-platform
+  * md/raid0: fix restore to sector variable in raid0_make_request
+    (Closes: #786372) (regression in 4.0.2)
+  * [x86] e1000e: Add support for Sunrise Point (i219) (Closes: #784546)
+  * [x86] config: Enable NEED_DMA_MAP_STATE by default when SWIOTLB is selected
+    (Closes: #786551)
+  * cdc_ncm: Fix tx_bytes statistics (regression in 4.0)
+  * [armhf] USB: musb: Fix order of conditions for assigning end point
+    operations (regression in 3.19)
+  * [armel/{kirkwood,orion5x}] Disable PM again to reduce kernel image size
+  * [armel/kirkwood] Enable DEBUG_MVEBU_UART0_ALTERNATE, replacing
+    DEBUG_MVEBU_UART_ALTERNATE
+  * i2o: Disable I2O
+  * [x86] vmwgfx: Enable DRM_VMWGFX_FBCON (Closes: #714929)
+  * media: Enable DVB_SMIPCIE as module (Closes: #785153)
+  * Bump ABI to 2
+  * [x86] i2c: Change I2C to built-in and enable ACPI_I2C_OPREGION
+    (Closes: #778896)
+  * usb-storage: Enable USB_UAS for the third time, hoping that it's finally
+    robust enough (Closes: #749014)
+  * zram: Enable ZRAM_LZ4_COMPRESS (Closes: #770958)
+  * HID: Enable HID_BATTERY_STRENGTH (Closes: #783214)
+  * [x86] ALSA: Enable SND_SOC_INTEL_BROADWELL_MACH as module (Closes: #785422)
+
+  [ Ian Campbell ]
+  * [armhf+arm64] Enabled generic SYSCON regmap reset driver
+  * [arm64] Enable PCI support and related modules, adjusting udeb module lists
+    for new modules.
+  * [arm64] Build XHCI platform drivers as a module.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 26 May 2015 02:30:06 +0100
+
+linux (4.0.2-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.1
+    - udptunnels: Call handle_offloads after inserting vlan tag.
+    - tcp: tcp_make_synack() should clear skb->tstamp
+    - bnx2x: Fix busy_poll vs netpoll
+    - bpf: fix verifier memory corruption
+    - Revert "net: Reset secmark when scrubbing packet"
+    - skbuff: Do not scrub skb mark within the same name space
+    - fs: take i_mutex during prepare_binprm for set[ug]id executables
+      (CVE-2015-3339)
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2
+    - tcp: fix possible deadlock in tcp_send_fin()
+    - tcp: avoid looping in tcp_send_fin() (regression in 4.0)
+    - net: do not deplete pfmemalloc reserve
+    - net: fix crash in build_skb()
+    - net: rfs: fix crash in get_rps_cpus() (regression in 4.0)
+    - md: fix md io stats accounting broken (regression in 3.19)
+    - [x86] perf/intel: Fix Core2,Atom,NHM,WSM cycles:pp events
+      (regression in 3.19)
+    - [x86] fix special __probe_kernel_write() tail zeroing case
+      (regression in 4.0)
+    - Btrfs: fix log tree corruption when fs mounted with -o discard
+    - btrfs: don't accept bare namespace as a valid xattr
+    - Btrfs: fix inode eviction infinite loop after cloning into it
+    - Btrfs: fix inode eviction infinite loop after extent_same ioctl
+    - mm/hugetlb: use pmd_page() in follow_huge_pmd() (regression in 4.0)
+    - [powerpc] hugetlb: Call mm_dec_nr_pmds() in hugetlb_free_pmd_range()
+      (regression in 4.0)
+    - [s390x] KVM: fix handling of write errors in the tpi handler
+    - [s390x] KVM: reinjection of irqs can fail in the tpi handler
+    - [s390x] KVM: fix get_all_floating_irqs (regression in 3.15)
+    - [s390x] hibernate: fix save and restore of kernel text section
+    - KVM: use slowpath for cross page cached accesses
+    - [arm*] KVM: check IRQ number on userland injection
+    - [x86] KVM: VMX: Preserve host CR4.MCE value while in guest mode.
+    - [mips*el] Loongson-3: Add IRQF_NO_SUSPEND to Cascade irqaction
+      (regression in 3.19)
+    - [mips*] Hibernate: flush TLB entries earlier
+    - md/raid0: fix bug with chunksize not a power of 2.
+    - [armhf] spi: imx: read back the RX/TX watermark levels earlier
+      (regression in 3.18)
+    - ring-buffer: Replace this_cpu_*() with __this_cpu_*()
+    - NFS: fix BUG() crash in notify_change() with patch to chown_common()
+    - [armhf] fix broken hibernation (regression in 3.16)
+    - [armel,armhf] 8320/1: fix integer overflow in ELF_ET_DYN_BASE
+    - ALSA: emu10k1: don't deadlock in proc-functions
+    - Input: alps - fix touchpad buttons getting stuck when used with trackpoint
+      (regression in 4.0)
+    - mfd: core: Fix platform-device name collisions (regression in 3.19)
+    - fs/binfmt_elf.c: fix bug in loading of PIE binaries
+    - ptrace: fix race between ptrace_resume() and wait_task_stopped()
+    - ext4: make fsync to sync parent dir in no-journal for real this time
+    - mnt: Prevent circumvention of locked mounts using umount(MNT_DETACH)
+      (CVE-2014-9717)
+    - tpm: fix: sanitized code paths in tpm_chip_register() (regression in 4.0)
+    - [powerpc/powerpc64,ppc64*] perf: Cap 64bit userspace backtraces to
+      PERF_MAX_STACK_DEPTH (Closes: #784278)
+    - UBI: account for bitflips in both the VID header and data
+    - UBI: fix out of bounds write
+    - UBI: fix check for "too many bytes"
+    - target: Fix COMPARE_AND_WRITE with SG_TO_MEM_NOALLOC handling
+    - target/file: Fix SG table for prot_buf initialization
+    - [arm64] head.S: ensure visibility of page tables (regression in 3.15)
+    - [arm64] errata: add workaround for cortex-a53 erratum #845719
+    - [powerpc/powerpc64,ppc64*] powernv: Don't map M64 segments using M32DT
+      (regression in 3.17)
+    - [powerpc/powerpc64,ppc64] cell: Fix crash in iic_setup_cpu() after per_cpu
+      changes (regression in 3.19)
+    - [powerpc/powerpc64,ppc64] cell: Fix cell iommu after it_page_shift changes
+    - [i386/686-pae] ACPICA: Utilities: split IO address types from data type
+      models.
+    - ACPICA: Store GPE register enable masks upfront (regression in 3.19)
+    - [armhf] clk: samsung: exynos4: Disable ARMCLK down feature on Exynos4210
+      SoC (regression in 3.17)
+    - [armhf] clk: tegra: Use the proper parent for plld_dsi (regression in 4.0)
+    - [armhf] serial: imx: Fix clearing of receiver overrun flag
+    - serial: 8250: Check UART_SCR is writable (regression in 4.0)
+    - sd: Unregister integrity profile (regression in 3.18)
+    - sd: Fix missing ATO tag check (regression in 3.18)
+    - [x86] Drivers: hv: vmbus: Fix a bug in the error path in vmbus_open()
+    - IB/core: disallow registering 0-sized memory region
+    - IB/iser: Fix wrong calculation of protection buffer length
+      (regression in 3.16)
+    - i2c: Mark adapter devices with pm_runtime_no_callbacks (regression in 4.0)
+    - [armhf] drm/exynos: Enable DP clock to fix display on Exynos5250 and other
+      (regression in 4.0)
+    - [x86] drm/i915: vlv: fix save/restore of GFX_MAX_REQ_COUNT reg
+      (regression in 3.16)
+    - [x86] drm/i915: cope with large i2c transfers
+    - vfs: RCU pathwalk breakage when running into a symlink overmounting
+      something
+    - Revert "nfs: replace nfs_add_stats with nfs_inc_stats when add one"
+      (regression in 3.19)
+    - nfsd4: disallow ALLOCATE with special stateids (regression in 3.19)
+    - nfsd4: fix READ permission checking (regression in 3.16)
+    - nfsd4: disallow SEEK with special stateids (regression in 3.18)
+    - nfsd: eliminate NFSD_DEBUG (regression of linux-libc-dev in 3.19)
+    - nfs: fix high load average due to callback thread sleeping
+      (regression in 4.0)
+    - nfs: fix DIO good bytes calculation (regression in 4.0)
+    - nfs: remove WARN_ON_ONCE from nfs_direct_good_bytes
+    - NFS: Add a stub for GETDEVICELIST (regression in 3.18)
+    - sched/deadline: Always enqueue on previous rq when dl_task_timer() fires
+      (regression in 4.0)
+    - mac80211: send AP probe as unicast again (regression in 3.19)
+    - lib: memzero_explicit: use barrier instead of OPTIMIZER_HIDE_VAR
+    - [armhf] crypto: omap-aes - Fix support for unequal lengths
+    - memstick: mspro_block: add missing curly braces
+    - drivers: platform: parse IRQ flags from resources (regression in 3.18)
+
+  [ Ben Hutchings ]
+  * debian.py,gencontrol.py: Fix the version sanity checks for backports and
+    security/LTS uploads
+  * ipv4: Missing sk_nulls_node_init() in ping_unhash() (CVE-2015-3636)
+  * [armel/orion5x] Increase maximum kernel image size to ~2 MB, removing
+    support for DNS-323 (fixes FTBFS)
+    - Re-enable BLK_DEV_INTEGRITY, SCSI_UFSHCD, TCM_IBLOCK, AUDIT, USER_NS,
+      PCI_QUIRKS, FTRACE, DEBUG_BUGVERBOSE, SECURITY
+    - Enable DYNAMIC_DEBUG, FRONTSWAP
+  * [arm64,armhf,powerpcspe,x86] gpio: Explicitly enable GPIOLIB, as some
+    drivers now depend on rather than selecting it (fixes FTBFS on i386)
+  * [x86] thermal: Enable INT340X_THERMAL as module, replacing
+    ACPI_INT3403_THERMAL
+  * [x86] Re-enable IOSF_MBI and INTEL_RAPL as modules
+  * sound: Enable SND_USB_POD, SND_USB_PODHD, SND_USB_TONEPORT,
+    SND_USB_VARIAX as modules, replacing LINE6_USB
+  * media/rc: Enable IR_IGORPLUGUSB as module, replacing LIRC_IGORPLUGUSB
+  * [amd64] misc: Enable INTEL_MIC_BUS and re-enable INTEL_MIC_HOST as modules
+  * sound/firewire: Enable SND_OXFW as module, replacing SND_FIREWIRE_SPEAKERS
+  * [x86] Enable DW_DMAC and re-enable SND_SOC_INTEL_HASWELL_MACH,
+    SND_SOC_INTEL_BYT_RT5640_MACH, SND_SOC_INTEL_BYT_MAX98090_MACH as modules
+  * [x86] tpm: Enable TCG_TIS_I2C_ST33 as module, replacing TCG_ST33_I2C
+  * [armel/kirkwood] regulator: Re-enable REGULATOR, REGULATOR_FIXED_VOLTAGE
+  * [armel/kirkwood] sound: Enable SND_SIMPLE_CARD as module, replacing
+    SND_KIRKWOOD_SOC_OPENRD, SND_KIRKWOOD_SOC_T5325; re-enable
+    SND_SOC_ALC5623, SND_SOC_CS42L51_I2C as modules
+  * [alpha,armel/kirkwood,hppa,ia64,mips*/{octeon,sb1-bcm91250a}] Re-enable PM
+  * [armel/orion5x] Enable PM
+  * [armhf] sound: Enable SND_SIMPLE_CARD as module
+  * path_openat(): fix double fput()
+  * [x86] serial: Enable SERIAL_8250_DW as built-in
+  * [armhf] Enable ARM_ERRATA_430973 (Closes: #768890), ARM_ERRATA_643719,
+    ARM_ERRATA_754327, ARM_ERRATA_773022
+  * [x86] nfc: Enable NFC_HCI, NFC_MEI_PHY, NFC_PN544, NFC_PN544_MEI as
+    modules (Closes: #770323)
+  * Set ABI to 1
+  * mnt: Add missing pieces of fix for CVE-2014-9717:
+    - mnt: Fail collect_mounts when applied to unmounted mounts
+    - fs_pin: Allow for the possibility that m_list or s_list go unused.
+
+  [ Ian Campbell ]
+  * [armhf] Enable support for Freescale SNVS RTC. (Closes: #782364)
+  * [armhf] Add ehci-orion module to usb-modules udeb. (Closes: #783324)
+  * [armhf] imx-hdmi module is now called dw_hdmi-imx, so update fb-modules
+    udeb. Patches from both Vagrant Cascadian and Wookey. (Closes: #783275)
+  * [arm*] Install DTBS using dtbs_install target. (Closes: #784761)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 11 May 2015 04:29:06 +0100
+
+linux-tools (4.0.2-1) unstable; urgency=medium
+
+  * New upstream release
+  * Thanks to Luca Boccassi and Lukas Wunner for some hints on upgrading
+    to 4.0 (Closes: #778588)
+  * debian/control: Add gcc-multilib to Build-Depends in order to build
+    perf-read-vdso{,x}32
+  * linux-tools: Install perf-read-vdso{,x}32 in versioned directory
+    under /usr/lib
+  * linux-tools: Set ARCH=x86 when building perf for amd64, i386 or x32
+  * linux-kbuild: Include Makefile.kasan (Closes: #783681)
+  * linux-kbuild: Enable Large File Support (Closes: #778942)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 11 May 2015 03:53:12 +0100
+
+linux (4.0-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_4.0
+
+  [ Ben Hutchings ]
+  * [i386,s390] Remove 64-bit kernel flavours, which are also available
+    through multiarch
+  * [x86] Enable PARAVIRT_SPINLOCKS
+
+ -- maximilian attems <maks@debian.org>  Tue, 21 Apr 2015 21:46:47 +0200
+
+linux (3.19.3-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.2
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3
+
+ -- maximilian attems <maks@debian.org>  Sun, 29 Mar 2015 20:14:33 +0200
+
+linux (3.19.1-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.1
+    - Bluetooth: ath3k: workaround the compatibility issue with xHCI controller
+      (Closes: #778463)
+    - random: Fix fast_mix() function (regression in 3.17)
+    - xfs: inode unlink does not set AGI buffer type
+    - xfs: set buf types when converting extent formats
+    - xfs: set superblock buffer type correctly
+    - iwlwifi: mvm: validate tid and sta_id in ba_notif
+    - iwlwifi: mvm: fix failure path when power_update fails in add_interface
+      (regression in 3.15)
+    - HID: i2c-hid: Limit reads to wMaxInputLength bytes for input events
+      (regression in 3.19)
+    - cpufreq: Set cpufreq_cpu_data to NULL before putting kobject
+    - [xen] manage: Fix USB interaction issues when resuming (regression in
+      3.17)
+    - [xen] xen-scsiback: mark pvscsi frontend request consumed only after last
+      read
+    - megaraid_sas: endianness related bug fixes and code optimization
+    - rc-main: Re-apply filter for no-op protocol change (regression in 3.17)
+    - proc/pagemap: walk page tables under pte lock
+    - NFS: struct nfs_commit_info.lock must always point to inode->i_lock
+      (regression in 3.17)
+    - [mips*] asm: asmmacro: Replace "add" instructions with "addu"
+    - mm/hugetlb: pmd_huge() returns true for non-present hugepage
+    - blk-mq: fix double-free in error path
+    - nfs41: .init_read and .init_write can be called with valid pg_lseg
+      (regression in 3.15)
+    - SUNRPC: NULL utsname dereference on NFS umount during namespace cleanup
+    - NFSv4: Ensure we reference the inode for return-on-close in delegreturn
+    - NFSv4.1: Fix a kfree() of uninitialised pointers in
+      decode_cb_sequence_args
+    - sg: fix unkillable I/O wait deadlock with scsi-mq
+    - sg: fix EWOULDBLOCK errors with scsi-mq
+    - iscsi-target: Drop problematic active_ts_list usage
+    - cipso: don't use IPCB() to locate the CIPSO IP option (regression in 3.18)
+    - ring-buffer: Do not wake up a splice waiter when page is not full
+      (regression in 3.18)
+    - tty: Remove warning in tty_lock_slave() (regression in 3.19)
+    - tty: Prevent untrappable signals from malicious program
+    - USB: fix use-after-free bug in usb_hcd_unlink_urb()
+    - [armhf] usb: dwc3: gadget: add missing spin_lock() (regression in 3.19)
+    - usb: core: buffer: smallest buffer should start at ARCH_DMA_MINALIGN
+    - cdc-acm: add sanity checks
+    - ntp: Fixup adjtimex freq validation on 32-bit systems (regression in 3.19)
+    - udf: Check length of extended attributes and allocation descriptors
+    - [s390*] KVM: forward hrtimer if guest ckc not pending yet
+      (regression in 3.17)
+    - [s390*] KVM: base hrtimer on a monotonic clock
+    - [s390*] KVM: floating irqs: fix user triggerable endless loop
+    - [s390*] KVM: avoid memory leaks if __inject_vm() fails
+    - gpiolib: of: allow of_gpiochip_find_and_xlate to find more than one chip
+      per node (regression in 3.19)
+    - sb_edac: Fix detection on SNB machines (regression in 3.18)
+    - jffs2: fix handling of corrupted summary length
+    - samsung-laptop: Add use_native_backlight quirk, and enable it on some
+      models (regression in 3.16)
+    - libceph: fix double __remove_osd() problem
+    - btrfs: fix leak of path in btrfs_find_item
+    - Btrfs: fix fsync data loss after adding hard link to inode
+    - blk-throttle: check stats_cpu before reading it from sysfs
+    - [x86] efi: Avoid triple faults during EFI mixed mode calls
+    - [x86][xen] irq: Fix regression in 3.19
+    - Replace ACCESS_ONCE of non-scalar types with READ_ONCE
+    - kernel: tighten rules for ACCESS_ONCE
+    - [x86] spinlocks/paravirt: Fix memory corruption on unlock
+    - quota: Store maximum space limit in bytes
+
+  [ Ben Hutchings ]
+  * [armhf] Drop sun7i device tree patches which are included in 3.19
+    (fixes FTBFS) (Closes: #779799)
+  * nfsd: Enable NFSD_V4_SECURITY_LABEL
+
+  [ Helge Deller ]
+  * [hppa] Add virtio udeb modules
+  * [alpha] Add debian-installer udeb packages
+  * [alpha] Drop alpha-legacy kernel image
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 08 Mar 2015 15:29:45 +0000
+
+linux (3.19-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.19
+  * Enable SCSI_AM53C974 where tmscim was enabled.
+
+ -- maximilian attems <maks@debian.org>  Thu, 12 Feb 2015 23:41:05 +0100
+
+linux (3.18.6-1~exp1) experimental; urgency=medium
+
+  [ Ben Hutchings ]
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.6
+
+ -- maximilian attems <maks@debian.org>  Sat, 07 Feb 2015 22:38:37 +0100
+
+linux-tools (3.18.5-1~exp1) experimental; urgency=medium
+
+  * New upstream release
+  * linux-tools: Fix build configuration to avoid linking perf with libbfd
+    (Closes: #763002)
+  * linux-tools: Add a check that perf is not linked with libbfd
+  * [arm64] Enable building linux-tools, thanks to Steve Capper
+    (Closes: #771340)
+  * [armel,armhf] linux-tools: Enable use of libunwind
+  * [hppa,sparc] linux-tools: Enable use of libnuma
+  * [mips*,powerpcspe,x32] Enable building linux-tools
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 01 Feb 2015 02:53:07 +0100
+
+linux (3.18.5-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.4
+    - [hppa] fix out-of-register compiler error in ldcw inline assembler
+      function
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5
+
+  [ Helge Deller ]
+  * [hppa] Enable CONFIG_PPDEV to avoid CUPS complaining with systemd
+
+ -- maximilian attems <maks@debian.org>  Sat, 31 Jan 2015 22:20:40 +0100
+
+linux (3.18.3-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.1
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.2
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.3
+
+  [ Ian Campbell ]
+  * [armel/kirkwood]: Enable DEBUG_MVEBU_UART_ALTERNATE to match the behaviour
+    of previous boardfile based kirkwood kernels. Otherwise the kernel silently
+    crashes during boot.
+  * [armel/kirkwood]: Add versioned breaks on flash-kernel << 3.30~, versions
+    before this do not append a DTB on all platforms. This is required now that
+    board file support is removed.
+  * Add xhci-pci and xhci-plat-hcd to usb-modules udeb. (Inspired by #770912).
+  * [armhf/armmp]: Enable support for Tegra124 based platforms.
+
+  [ Helge Deller ]
+  * [hppa] udeb: Fix duplicate modules in ata-modules, pata-modules
+    (Closes: #770102)
+  * [hppa] Create build-dependencies on binutils-hppa64 and gcc-4.9-hppa64
+
+  [ Ben Hutchings ]
+  * [sh4] ftrace: Remove -m32 option from recordmcount.pl (Closes: #775611)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 18 Jan 2015 20:48:06 +0000
+
+linux (3.18-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.18
+
+  [ Ben Hutchings ]
+  * Remove aufs
+  * vfs: Enable OVERLAY_FS as module
+  * drivers/base: Disable UEVENT_HELPER, only needed for compatibility
+    with wheezy's udev package
+  * net: Enable 6LOWPAN as module; re-enable BT_6LOWPAN and
+    IEEE802154_6LOWPAN as modules
+  * net: Enable GENEVE as module; enable OPENVSWITCH_GENEVE
+  * ipv4: Enable TCP_CONG_DCTCP as module
+  * netfilter: Enable IP6_NF_NAT, IP_SET_HASH_MAC, IP_VS_FO, NF_LOG_ARP,
+    NF_LOG_BRIDGE, NFT_BRIDGE_REJECT, NFT_MASQ, NFT_MASQ_IPV4, NFT_MASQ_IPV6
+    as modules
+  * SCSI,xen: Enable XEN_SCSI_FRONTEND, XEN_SCSI_BACKEND as modules
+  * SCSI: Re-enable LIBFCOE, FCOE, FCOE_FNIC, SCSI_BNX2X_FCOE as modules
+  * drivers/net: Enable ET131X as module for all architectures
+  * wireless: Enable BRCMFMAC as module for all architectures;
+    enable BRCMFMAC_USB and BRCMFMAC_PCIE
+  * wireless: Enable RTL8192EE, RTL8821AE as modules for all architectures
+    (replacing R8192EE, R8821AE for x86 only)
+  * media: Enable VIDEO_VIVID as module (replacing VIDEO_VIVI)
+  * [armel/kirkwood] Enable ARCH_MULTI_V5, ARCH_MVEBU, MACH_KIRKWOOD and
+    MACH_NETXBIG, replacing ARCH_KIRKWOOD etc.
+  * [powerpc/powerpc64,ppc64*] Enable SCSI_IBMVFC as module, replacing
+    SCSI_IBMVSCSIS
+  * input/tablet: Enable TABLET_SERIAL_WACOM4 as module
+  * media: Enable MEDIA_SDR_SUPPORT; enable DVB_PT3, DVB_USB_DVBSKY,
+    USB_AIRSPY, USB_HACKRF, VIDEO_TW68 as modules; enable VIDEO_SOLO6X10 as
+    module on all architectures (replacing SOLO6X10 on x86);
+    enable USB_MSI2500 on all architectures (replacing USB_MSI3101 on x86)
+  * au0828: Enable VIDEO_AU0828_RC
+  * HID,gpio,i2c: Enable HID_CP2112 as module
+  * HID: Enable HID_PENMOUNT as module
+  * USB,leds: Enable USB_LED_TRIG
+  * leds: Disable LEDS_PCA9532, apparently only needed on armel/iop32x
+  * [x86] platform: Enable TOSHIBA_HAPS as module
+  * [x86] serial: Enable SERIAL_8250_FINTEK as module
+  * [x86] Enable MFD_MENF21BMC, LEDS_MENF21BMC, SENSORS_MENF21BMC_HWMON,
+    MENF21BMC_WATCHDOG as modules
+  * [x86] edac: Enable EDAC_IE31200 as module
+  * [x86] drivers/crypto: Enable CRYPTO_DEV_QAT_DH895xCC as module
+  * [x86] comedi: Enable COMEDI_NI_USB6501 as module
+  * [armel] Change configuration to reduce kernel image size (fixes FTBFS)
+    - [/kirkwood] netlink: Disable NETLINK_MMAP
+    - [/kirkwood] cgroups: Disable MEMCG
+    - [/kirkwood] Disable CHECKPOINT_RESTORE
+    - [/kirkwood] mm: Disable COMPACTION, KSM
+    - [/kirkwood] crypto: Disable CRYPTO_FIPS
+    - [/kirkwood] power: Disable HIBERNATION, PM_RUNTIME
+    - [/orion5x] mm: Disable COMPACTION, MIGRATION
+    - [/orion5x] block: Disable BLK_DEV_INTEGRITY
+    - [/orion5x] SCSI: Disable SCSI_UFSHCD
+    - [/orion5x] target: Disable TCM_IBLOCK
+    - [/orion5x] Disable AUDIT, DEBUG_BUGVERBOSE, PROFILING, OPROFILE, RD_LZO
+  * [armel] Include size of appended DTBs in image size check
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 11 Dec 2014 00:43:21 +0000
+
+linux (3.17.4-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.1
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.3
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.4
+
+  [ Ben Hutchings ]
+  * Set ABI to trunk
+  * aufs: Update to aufs3.17-20141020:
+    - support for AT_EMPTY_PATH/LOOKUP_EMPTY
+    - Show union filesystem paths in /proc/*/map_files/*
+    - bugfix, fix the returning size of the branch attr
+  * Compile with gcc-4.9 (except for ia64,m68k,s390*,sh4)
+
+ -- maximilian attems <maks@debian.org>  Mon, 24 Nov 2014 00:00:27 +0100
+
+linux-tools (3.17-1~exp1) experimental; urgency=medium
+
+  * New upstream release
+    - usbip userspace moved to tools/usb/usbip
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 17 Oct 2014 14:58:51 +0200
+
+linux (3.17-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.17
+
+  * armel: Drop ixp4xx image.
+  * topconfig: Reenable renamed IP_NF_NAT. (closes #762458)
+  * udeb: refix renamed i2c-core.
+
+ -- maximilian attems <maks@debian.org>  Tue, 14 Oct 2014 23:01:39 +0200
+
+linux (3.17~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20140908
+
+  [ maximilian attems ]
+  * udeb: fix renamed i2ccore.
+
+ -- maximilian attems <maks@debian.org>  Thu, 18 Sep 2014 23:50:00 +0200
+
+linux (3.16.7-ckt9-3) unstable; urgency=high
+
+  [ Ben Hutchings ]
+  * [x86] crypto: aesni - fix memory usage in GCM decryption (Closes: #782561)
+    (CVE-2015-3331)
+  * tcp: Fix crash in TCP Fast Open (Closes: #782515) (CVE-2015-3332)
+  * kernel: Provide READ_ONCE and ASSIGN_ONCE
+  * Replace use of ACCESS_ONCE on non-scalar types with READ_ONCE or barriers
+    as appropriate
+  * kernel: tighten rules for ACCESS ONCE
+  * kernel: Change ASSIGN_ONCE(val, x) to WRITE_ONCE(x, val)
+  * fs: take i_mutex during prepare_binprm for set[ug]id executables
+    (CVE-2015-3339)
+
+  [ Ian Campbell ]
+  * [xen] release per-queue Tx and Rx resource when disconnecting, fixing
+    network after save/restore or migration. (Closes: #782698)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 23 Apr 2015 16:41:27 +0100
+
+linux (3.16.7-ckt9-2) unstable; urgency=medium
+
+  * btrfs: simplify insert_orphan_item (Closes: #782362)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 13 Apr 2015 02:01:54 +0100
+
+linux (3.16.7-ckt9-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt8
+    - usb: core: buffer: smallest buffer should start at ARCH_DMA_MINALIGN
+    - btrfs: fix leak of path in btrfs_find_item
+    - tpm_tis: verify interrupt during init
+    - xfs: ensure buffer types are set correctly
+    - xfs: inode unlink does not set AGI buffer type
+    - xfs: set buf types when converting extent formats
+    - xfs: set superblock buffer type correctly
+    - [s390*] KVM: avoid memory leaks if __inject_vm() fails
+    - samsung-laptop: Add use_native_backlight quirk, and enable it on some
+      models (regression in 3.14)
+    - staging: comedi: comedi_compat32.c: fix COMEDI_CMD copy back
+    - nfs: don't call blocking operations while !TASK_RUNNING
+    - cdc-acm: add sanity checks
+    - USB: fix use-after-free bug in usb_hcd_unlink_urb()
+    - iwlwifi: mvm: fix failure path when power_update fails in add_interface
+    - tty: Prevent untrappable signals from malicious program
+    - cpufreq: Set cpufreq_cpu_data to NULL before putting kobject
+    - nfs41: .init_read and .init_write can be called with valid pg_lseg
+      (regression in 3.15)
+    - mei: mask interrupt set bit on clean reset bit (regression in
+      3.16.7-ckt5)
+    - [s390*] KVM: floating irqs: fix user triggerable endless loop
+    - cfq-iosched: handle failure of cfq group allocation
+    - tracing: Fix unmapping loop in tracing_mark_write
+    - fsnotify: fix handling of renames in audit
+    - blk-mq: fix double-free in error path
+    - NFSv4.1: Fix a kfree() of uninitialised pointers in
+      decode_cb_sequence_args
+    - mm/hugetlb: pmd_huge() returns true for non-present hugepage
+    - mm/hugetlb: take page table lock in follow_huge_pmd()
+    - mm/hugetlb: fix getting refcount 0 page in hugetlb_fault()
+    - mm/hugetlb: add migration/hwpoisoned entry check in
+      hugetlb_change_protection
+    - mm/hugetlb: add migration entry check in __unmap_hugepage_range
+    - iscsi-target: Drop problematic active_ts_list usage
+    - mm/memory.c: actually remap enough memory
+    - mm: hwpoison: drop lru_add_drain_all() in __soft_offline_page()
+      (regression in 3.11)
+    - jffs2: fix handling of corrupted summary length
+    - dm mirror: do not degrade the mirror on discard error
+    - dm io: reject unsupported DISCARD requests with EOPNOTSUPP
+    - NFS: struct nfs_commit_info.lock must always point to inode->i_lock
+      (regression in 3.16.4)
+    - target: Add missing WRITE_SAME end-of-device sanity check
+    - target: Check for LBA + sectors wrap-around in sbc_parse_cdb
+    - Btrfs: fix fsync data loss after adding hard link to inode
+    - sg: fix read() error reporting
+    - IB/qib: Do not write EEPROM
+    - [amd64] EDAC, amd64_edac: Prevent OOPS with >16 memory controllers
+      (regression in 3.11)
+    - md/raid5: Fix livelock when array is both resyncing and degraded.
+    - locking/rtmutex: Avoid a NULL pointer dereference on deadlock
+      (regression in 3.16)
+    - time: adjtimex: Validate the ADJ_FREQUENCY values
+    - ntp: Fixup adjtimex freq validation on 32-bit systems
+    - dm: fix a race condition in dm_get_md
+    - dm snapshot: fix a possible invalid memory access on unload
+    - libceph: fix double __remove_osd() problem
+    - blk-throttle: check stats_cpu before reading it from sysfs
+    - debugfs: leave freeing a symlink body until inode eviction
+    - procfs: fix race between symlink removals and traversals
+    - autofs4 copy_dev_ioctl(): keep the value of ->size we'd used for
+      allocation
+    - clk-gate: fix bit # check in clk_register_gate() (regression in 3.11)
+    - [powerpc*] kernel: Avoid memory corruption at early stage
+      (regression in 3.14)
+    - GFS2: Fix crash during ACL deletion in acl max entry check in
+      gfs2_set_acl() (regression in 3.14)
+    - net: llc: use correct size for sysctl timeout entries (CVE-2015-2041)
+    - net: rds: use correct size for max unacked packets and bytes
+      (CVE-2015-2042)
+    - HID: i2c-hid: Limit reads to wMaxInputLength bytes for input events
+      (regression in 3.16.7-ckt4)
+    - net: sctp: fix race for one-to-many sockets in sendmsg's auto associate
+    - ipv6: mld: fix add_grhead skb_over_panic for devs with large MTUs
+    - IB/core: When marshaling ucma path from user-space, clear unused fields
+      (regression in 3.14)
+    - IB/core: Fix deadlock on uverbs modify_qp error flow (regression in 3.14)
+    - IB/mlx4: Fix wrong usage of IPv4 protocol for multicast attach/detach
+      (regression in 3.14)
+    - IB/iser: Use correct dma direction when unmapping SGs
+      (regression in 3.15)
+    - staging: comedi: cb_pcidas64: fix incorrect AI range code handling
+    - target: Fix R_HOLDER bit usage for AllRegistrants
+    - target: Avoid dropping AllRegistrants reservation during unregister
+    - target: Allow AllRegistrants to re-RESERVE existing reservation
+    - target: Allow Write Exclusive non-reservation holders to READ
+    - vhost/scsi: potential memory corruption
+    - mm: softdirty: unmapped addresses between VMAs are clean
+    - proc/pagemap: walk page tables under pte lock
+    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt9
+    - netfilter: nft_compat: fix module refcount underflow
+    - netfilter: xt_socket: fix a stack corruption bug
+    - ipvs: add missing ip_vs_pe_put in sync code
+    - flowcache: Fix kernel panic in flow_cache_flush_task (regression in 3.15)
+    - tcp: make sure skb is not shared before using skb_get()
+      (regression in 3.16)
+    - gen_stats.c: Duplicate xstats buffer for later use
+    - ematch: Fix auto-loading of ematch modules.
+    - openvswitch: Fix net exit.
+    - net: reject creation of netdev names with colons
+    - macvtap: make sure neighbour code can push ethernet header
+    - udp: only allow UFO for packets from SOCK_DGRAM sockets
+    - gpiolib: of: allow of_gpiochip_find_and_xlate to find more than one chip
+      per node (regression in 3.16.7-ckt6)
+    - [x86] drm/i915: Check obj->vma_list under the struct_mutex
+      (regression in 3.15)
+    - ALSA: hda - Disable runtime PM for Panther Point again
+      (regression in 3.14)
+    - nilfs2: fix potential memory overrun on inode
+    - [armhf] usb: dwc3: dwc3-omap: Fix disable IRQ
+    - [i386] KVM: emulate: fix CMPXCHG8B on 32-bit hosts
+    - xhci: Allocate correct amount of scratchpad buffers
+    - USB: usbfs: don't leak kernel data in siginfo
+    - efi/libstub: Fix boundary checking in efi_high_alloc()
+    - USB: serial: fix potential use-after-free after failed probe
+    - USB: serial: fix tty-device error handling at probe
+    - staging: comedi: adv_pci1710: fix AI INSN_READ for non-zero channel
+    - mei: make device disabled on stop unconditionally
+    - NFSv4: Don't call put_rpccred() under the rcu_read_lock()
+    - btrfs: fix lost return value due to variable shadowing
+    - eCryptfs: don't pass fs-specific ioctl commands through
+    - drm/radeon: fix DRM_IOCTL_RADEON_CS oops
+    - [armhf] ASoC: omap-pcm: Correct dma mask
+    - [amd64] x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimization
+      (CVE-2015-2830)
+    - Btrfs: fix data loss in the fast fsync path
+    - Btrfs:__add_inode_ref: out of bounds memory read when looking for
+      extended ref.
+    - svcrpc: fix memory leak in gssp_accept_sec_context_upcall
+      (regression in 3.12)
+    - SUNRPC: Always manipulate rpc_rqst::rq_bc_pa_list under xprt->bc_pa_lock
+      (regression in 3.15)
+    - net: cls_bpf: fix size mismatch on filter preparation
+    - net: cls_bpf: fix auto generation of per list handles
+    - qlge: Fix qlge_update_hw_vlan_features to handle if interface is down
+      (regression in 3.13)
+    - libsas: Fix Kernel Crash in smp_execute_task
+    - ALSA: hda - Fix regression of HD-audio controller fallback modes
+      (regression in 3.11)
+    - can: add missing initialisations in CAN related skbuffs
+    - ftrace: Fix en(dis)able graph caller when en(dis)abling record via sysctl
+    - ftrace: Fix ftrace enable ordering of sysctl ftrace_enabled
+    - [armhf] imx6qdl-sabresd: set swbst_reg as vbus's parent reg
+    - [armhf] imx6sl-evk: set swbst_reg as vbus's parent reg
+    - xen-pciback: limit guest control of command register (CVE-2015-2150)
+    - drm/vmwgfx: Reorder device takedown somewhat
+    - ALSA: control: Add sanity checks for user ctl id name string
+    - Revert "i2c: core: Dispose OF IRQ mapping at client removal time"
+      (regression in 3.16.7-ckt2)
+    - nilfs2: fix deadlock of segment constructor during recovery
+      (regression in 3.16.7-ckt7)
+    - clk: divider: fix calculation of maximal parent rate for a given divider
+      (regression in 3.15)
+    - [sparc*] Fix several bugs in memmove().
+    - net: sysctl_net_core: check SNDBUF and RCVBUF for min length
+    - inet_diag: fix possible overflow in inet_diag_dump_one_icsk()
+    - caif: fix MSG_OOB test in caif_seqpkt_recvmsg()
+    - rxrpc: bogus MSG_PEEK test in rxrpc_recvmsg()
+    - tcp: fix tcp fin memory accounting
+    - net: compat: Update get_compat_msghdr() to match copy_msghdr_from_user()
+      behaviour (regression in 3.13)
+    - tcp: make connect() mem charging friendly
+
+  [ Ian Campbell ]
+  * Initialise framebuffer console earlier. (Closes: #779935)
+  * [xen] Enable Xen MCE log support. (Closes: #779698)
+  * [armhf] mvebu: do not register custom DMA operations when coherency is
+    disabled (Closes: #780858)
+  * [armhf] Enable power control on various sunxi platforms, enable MFD_AXP20X
+    and REGULATOR_AXP20X and adding the necessary DTB nodes. (Closes: #781576)
+
+  [ Ben Hutchings ]
+  * [armel/kirkwood] linux-image: Add versioned Breaks against flash-kernel,
+    to ensure that an FDT is appended to the image if needed (Closes: #781193)
+  * Revert "quota: Store maximum space limit in bytes" to avoid ABI change
+  * IB/core: Prevent integer overflow in ib_umem_get address arithmetic
+    (CVE-2014-8159)
+  * Btrfs: make xattr replace operations atomic (CVE-2014-9710)
+  * ext4: fix ZERO_RANGE bug hidden by flag aliasing
+  * ext4: fix accidental flag aliasing in ext4_map_blocks flags
+  * ext4: allocate entire range in zero range (CVE-2015-0275)
+  * [x86] microcode/intel: Guard against stack overflow in the loader
+    (CVE-2015-2666)
+  * ipv6: Don't reduce hop limit for an interface (CVE-2015-2922)
+  * [powerpc/powerpc64,ppc64] Disable THERM_PM72 and enable its replacements
+    WINDFARM_PM72 and WINDFARM_RM31 as modules. Update the udeb config
+    accordingly. Thanks to Milan Kupcevic. (Closes: #781934)
+  * psmouse: Add support for FocalTech touchpads, thanks to Rafal Ramocki
+    (Closes: #780971)
+  * [x86] drm/i915: Add limited color range readout for HDMI/DP ports on
+    g4x/vlv/chv (Closes: #775217)
+  * HID: thingm: fix workqueue race on remove (Closes: #780055)
+  * [x86] Disable X86_VERBOSE_BOOTUP (Closes: #781953)
+  * eMMC: Don't initialize partitions on RPMB flagged areas (Closes: #782038)
+  * [x86] powercap / RAPL: change domain detection message (Closes: #781418)
+  * procfs: Avoid ABI change in 3.16.7-ckt8
+  * [powerpc/powerpc] udeb: Add fb-modules package containing radeonfb driver
+    (Closes: #782058)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 08 Apr 2015 01:03:08 +0100
+
+linux (3.16.7-ckt7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt5
+    - [x86] vdso: Use asm volatile in __getcpu
+    - SCSI: fix regression in scsi_send_eh_cmnd() (regression in 3.16)
+    - Btrfs: don't delay inode ref updates during log replay
+      (regression in 3.16.7)
+    - mm: propagate error from stack expansion even for guard page
+    - vfio-pci: Fix the check on pci device type in vfio_pci_probe()
+    - rpc: fix xdr_truncate_encode to handle buffer ending on page boundary
+      (regression in 3.16)
+    - [arm64] efi: add missing call to early_ioremap_reset()
+      (regression in 3.16)
+    - exit: fix race between wait_consider_task() and wait_task_zombie()
+      (regression in 3.15)
+    - mm: prevent endless growth of anon_vma hierarchy
+    - mm: protect set_page_dirty() from ongoing truncation
+    - mm, vmscan: prevent kswapd livelock due to pfmemalloc-throttled process
+      being killed
+    - sched/deadline: Fix migration of SCHED_DEADLINE tasks
+    - HID: roccat: potential out of bounds in pyra_sysfs_write_settings()
+    - mm: Don't count the stack guard page towards RLIMIT_STACK
+    - mm: fix corner case in anon_vma endless growing prevention
+    - [arm*][xen] introduce xen_arch_need_swiotlb
+    - fsnotify: next_i is freed during fsnotify_unmount_inodes.
+    - [armhf] ASoC: eukrea-tlv320: Fix of_node_put() call with uninitialized
+      object (regression in 3.15)
+    - HID: i2c-hid: Do not free buffers in i2c_hid_stop() (regression in 3.15)
+    - ALSA: fireworks: fix an endianness bug for transaction length
+      (regression in 3.16)
+    - [armhf] mtd: nand: omap: Fix NAND enumeration on 3430 LDP
+      (regression in 3.13)
+    - ocfs2: fix the wrong directory passed to ocfs2_lookup_ino_from_name()
+      when link file (regression in 3.14)
+    - [powerpc*] Fix bad NULL pointer check in udbg_uart_getc_poll()
+      (regression in 3.12)
+    - nilfs2: fix the nilfs_iget() vs. nilfs_new_inode() races
+    - [armhf] OMAP4: PM: Only do static dependency configuration in
+      omap4_init_static_deps (regression in 3.11)
+    - [armel,armhf] Revert "ARM: 7830/1: delay: don't bother reporting bogomips
+      in /proc/cpuinfo" (regression in 3.12)
+    - gre: fix the inner mac header in nbma tunnel xmit path
+      (regression in 3.16.7-ckt3)
+    - netlink: Always copy on mmap TX.
+    - netlink: Don't reorder loads/stores before marking mmap netlink frame as
+      available
+    - batman-adv: Unify fragment size calculation (regression in 3.13)
+    - batman-adv: avoid NULL dereferences and fix if check (regression in 3.13)
+    - net: Fix stacked vlan offload features computation
+    - net: Reset secmark when scrubbing packet
+    - xen-netback: fixing the propagation of the transmit shaper timeout
+      (regression in 3.16)
+    - team: avoid possible underflow of count_pending value for notify_peers
+      and mcast_rejoin (regression in 3.12)
+    - usb: gadget: gadgetfs: Free memory allocated by memdup_user()
+      (regression in 3.15)
+    - iwlwifi: mvm: fix Rx with both chains (regression in 3.16)
+    - LOCKD: Fix a race when initialising nlmsvc_timeout (regression in 3.11)
+    - NFSv4.1: Fix client id trunking on Linux
+    - vhost-scsi: Add missing virtio-scsi -> TCM attribute conversion
+    - xhci: Check if slot is already in default state before moving it there
+      (regression in 3.14)
+    - USB: console: fix uninitialised ldisc semaphore (regression in 3.12)
+    - USB: console: fix potential use after free
+    - [armhf] usb: dwc3: gadget: Fix TRB preparation during SG
+    - [x86] ftrace/jprobes: Fix conflict between jprobes and function graph
+      tracing
+    - clk: Don't try to use a struct clk* after it could have been freed
+    - [x86] drm/i915: Evict CS TLBs between batches
+    - [xen] Revert "swiotlb-xen: pass dev_addr to swiotlb_tbl_unmap_single"
+      (regression in 3.16.7-ckt4)
+    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt6
+    - ipvs: uninitialized data with IP_VS_IPV6
+    - netfilter: nfnetlink: validate nfnetlink header from batch
+    - time: settimeofday: Validate the values of tv from user
+    - drm/radeon: fix VM flush on cayman/aruba (v3)
+    - drm/radeon: fix VM flush on SI (v3)
+    - drm/radeon: fix VM flush on CIK (v3)
+    - drm/radeon: add a dpm quirk list (regression around 3.14)
+    - can: dev: fix crtlmode_supported check
+    - can: kvaser_usb: Don't free packets when tight on URBs
+    - drm/radeon: use rv515_ring_start on r5xx (regression in 3.12)
+    - PCI: Mark Atheros AR93xx to avoid bus reset (regression in 3.14)
+    - [x86] PCI: Clip bridge windows to fit in upstream windows
+      (regression in 3.16)
+    - [armhf] mvebu: completely disable hardware I/O coherency
+    - cifs: fix deadlock in cifs_ioctl_clone()
+    - ipr: wait for aborted command responses
+    - libata: allow sata_sil24 to opt-out of tag ordered submission
+      (regression in 3.14.4, 3.15)
+    - [media] vb2: fix vb2_thread_stop race conditions
+    - [i386/586] apic: Re-enable PCI_MSI support for non-SMP X86_32
+      (regression in 3.12)
+    - dm cache: share cache-metadata object across inactive and active DM
+      tables
+    - dm cache: fix problematic dual use of a single migration count variable
+    - Input: evdev - fix EVIOCG{type} ioctl
+    - tty: Fix pty master poll() after slave closes v2 (regression in 3.12)
+    - [armhf] bus: omap_l3_noc: Add resume hook to restore context
+      (regression in 3.16)
+    - decompress_bunzip2: off by one in get_next_block()
+    - kbuild: Fix removal of the debian/ directory (regression in 3.16)
+    - mm: get rid of radix tree gfp mask for pagecache_get_page
+      (regression in 3.16)
+    - regulator: core: fix race condition in regulator_put()
+    - ASoC: simple-card: Fix crash in asoc_simple_card_unref()
+      (regression in 3.15)
+    - [ppc64el] xmon: Fix another endiannes issue in RTAS call from xmon
+    - nfs: fix dio deadlock when O_DIRECT flag is flipped
+    - mac80211: properly set CCK flag in radiotap (regression in 3.12)
+    - [x86] drm/i915: Only fence tiled region of object.
+    - can: kvaser_usb: Do not sleep in atomic context
+    - can: kvaser_usb: Send correct context to URB completion
+    - rbd: fix rbd_dev_parent_get() when parent_overlap == 0
+    - rbd: drop parent_ref in rbd_dev_unprobe() unconditionally
+    - dm cache: fix missing ERR_PTR returns and handling
+    - dm thin: don't allow messages to be sent to a pool target in READ_ONLY
+      or FAIL mode
+    - [armhf] mvebu: don't set the PL310 in I/O coherency mode when I/O
+      coherency is disabled
+    - vm: add VM_FAULT_SIGSEGV handling support
+    - vm: make stack guard page errors return VM_FAULT_SIGSEGV rather than
+      SIGBUS
+    - perf: Tighten (and fix) the grouping condition
+    - iwlwifi: mvm: drop non VO frames when flushing (regression in 3.16)
+    - memcg: remove extra newlines from memcg oom kill log (regression in 3.15)
+    - ipv4: try to cache dst_entries which would cause a redirect
+      (regression in 3.16) (CVE-2015-1465)
+    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt7
+    - [ppc64el] powerpc: add little endian flag to syscall_get_arch()
+    - [arm64] Fix up /proc/cpuinfo
+    - cifs: Complete oplock break jobs before closing file handle
+      (regression in 3.15)
+    - [arm64,or1k] lib/checksum.c: fix carry in csum_tcpudp_nofold
+    - [mips*] Fix kernel lockup or crash after CPU offline/online
+    - md/raid5: fix another livelock caused by non-aligned writes.
+      (regression in 3.16)
+    - drm/radeon: fix PLLs on RS880 and older v2 (regression in 3.15)
+      (Closes: #770790)
+    - [armhf/armmp-lpae] 8299/1: mm: ensure local active ASID is marked as
+      allocated on rollover
+    - PCI: Handle read-only BARs on AMD CS553x devices
+      (regression in 3.16.7-ckt4)
+    - mm: pagewalk: call pte_hole() for VM_PFNMAP during walk_page_range
+    - nilfs2: fix deadlock of segment constructor over I_SYNC flag
+    - ip: zero sockaddr returned on error queue
+    - net: rps: fix cpu unplug
+    - ipv6: stop sending PTB packets for MTU < 1280
+    - udp_diag: Fix socket skipping within chain
+    - ping: Fix race in free in receive path
+    - net: don't OOPS on socket aio
+    - ipv4: tcp: get rid of ugly unicast_sock
+    - ppp: deflate: never return len larger than output buffer
+    - [x86] hyperv: Fix the error processing in netvsc_send()
+    - Bluetooth: ath3k: workaround the compatibility issue with xHCI controller
+    - ceph: introduce global empty snap context
+    - drm/vmwgfx: Don't use memory accounting for kernel-side fence objects
+    - net:socket: set msg_namelen to 0 if msg_name is passed as NULL in msghdr
+      struct from userland.
+    - virtio_pci: defer kfree until release callback
+
+  [ Ian Campbell ]
+  * [armhf] Add DTB for Olimex A20-OLinuXino-LIME2. (Closes: #777455)
+  * [armhf] Enable CONFIG_BACKLIGHT_GPIO as a module. (Closes: #778783)
+  * [armhf] Enable FB_SIMPLE on sunxi platform, backporting fixes and DTS
+    entries.
+
+  [ Ben Hutchings ]
+  * shm: add memfd.h to UAPI export list, so kdbus will build
+  * [x86] HPET force enable for e6xx based systems (Closes: #772951)
+  * vfs: read file_handle only once in handle_to_path (CVE-2015-1420)
+  * ASLR: fix stack randomization on 64-bit systems (CVE-2015-1593)
+  * Revert "quota: Switch ->get_dqblk() and ->set_dqblk() to use bytes as
+    space units" to avoid ABI change
+  * rmap: Fix ABI change in 3.16.7-ckt5
+  * perf: Fix ABI change in 3.16.7-ckt6
+  * mm: Fix pagecache_get_page() ABI change in 3.16.7-ckt6
+  * tcp: Fix ABI change in 3.16.7-ckt7
+  * [x86] ACPI / video: Add disable_native_backlight quirk for various
+    Samsung models and Dell XPS15 L521X (Closes: #772440)
+  * [x86] ALSA: Enable SND_SOC, SND_SOC_INTEL_SST, SND_SOC_INTEL_HASWELL_MACH,
+    SND_SOC_INTEL_BYT_RT5640_MACH, SND_SOC_INTEL_BYT_MAX98090_MACH as modules
+    (Closes: #773835)
+  * arcmsr: Backport changes up to Linux 3.18 (Closes: #698821)
+  * [x86] drm/i915: Quietly reject attempts to create non-pagealigned stolen
+    objects (Closes: #763155)
+  * KEYS: request_key() should reget expired keys rather than give EKEYEXPIRED
+    (Closes: #758870)
+  * drm: Enable DRM_BOCHS, DRM_QXL as modules
+    - qxl: Disable by default, as it is incompatible with wheezy's
+      xserver-xorg-video-qxl. It can be forced to load with module
+      parameter modeset=1.
+  * of.h: Keep extern declaration of of_* variables when !CONFIG_OF
+    (for simplefb)
+
+  [ Helge Deller ]
+  * [alpha] build debian-installer udeb packages
+  * [hppa] build virtio udeb packages
+
+  [ Uwe Kleine-König ]
+  * Add support for Bananapro board, thanks Karsten Merker for the patch.
+    (Closes: 779311)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 01 Mar 2015 15:13:40 +0000
+
+linux (3.16.7-ckt4-3) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [sh4] ftrace: Remove -m32 option from recordmcount.pl (Closes: #775611)
+  * [x86] Revert "KVM: Fix of previously incomplete fix for CVE-2014-8480"
+    as that issue does not affect 3.16
+  * [amd64] tls, ldt: Stop checking lm in LDT_empty (regression in 3.16.7-ckt4)
+  * [x86] tls: Interpret an all-zero struct user_desc as "no segment"
+    (regression in 3.16.7-ckt4)
+  * net: sctp: fix slab corruption from use after free on INIT collisions
+    (CVE-2015-1421)
+
+  [ Ian Campbell ]
+  * [xen] cancel ballooning if adding new memory failed (Closes: #776448)
+  * [arm64] Only use the virtual counter (CNTVCT) on arm64. (Closes: #776957)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 03 Feb 2015 20:07:06 +0000
+
+linux-tools (3.16-3) unstable; urgency=medium
+
+  * linux-tools: Fix build configuration to avoid linking perf with libbfd
+    (Closes: #763002)
+  * linux-tools: Add a check that perf is not linked with libbfd
+  * [arm64] Enable building linux-tools, thanks to Steve Capper
+    (Closes: #771340)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 02 Feb 2015 22:05:59 +0000
+
+linux (3.16.7-ckt4-2) unstable; urgency=medium
+
+  [ Ian Campbell ]
+  * [arm64] udeb: Remove zlib-modules, as ZLIB_DEFLATE is now
+    built-in (fixes FTBFS)
+  * [xen] Revert "swiotlb-xen: pass dev_addr to swiotlb_tbl_unmap_single"
+    (Closes: #776237)
+
+  [ Helge Deller ]
+  * [hppa] udeb: Fix duplicate modules in ata-modules, pata-modules
+    (Closes: #770102)
+  * [hppa] Enable CONFIG_PPDEV to avoid CUPS complaining with systemd
+
+  [ Ben Hutchings ]
+  * crypto: Fix unprivileged arbitrary module loading (CVE-2013-7421,
+    CVE-2014-9644)
+    - prefix module autoloading with "crypto-"
+    - include crypto- module prefix in template
+    - add missing crypto module aliases
+  * [x86] KVM: Fix of previously incomplete fix for CVE-2014-8480
+  * [x86] KVM: SYSENTER emulation is broken (CVE-2015-0239)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 27 Jan 2015 03:57:26 +0000
+
+linux (3.16.7-ckt4-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt3
+    - [x86] kvm: use alternatives for VMCALL vs. VMMCALL if kernel text is
+      read-only
+    - [sparc*] Fix constraints on swab helpers.
+    - inetdevice: fixed signed integer overflow
+    - ieee802154: fix error handling in ieee802154fake_probe()
+    - bonding: fix curr_active_slave/carrier with loadbalance arp monitoring
+      (regression in 3.14)
+    - pptp: fix stack info leak in pptp_getname()
+    - ipx: fix locking regression in ipx_sendmsg and ipx_recvmsg
+    - net/mlx4_en: Add VXLAN ndo calls to the PF net device ops too
+      (regression in 3.15)
+    - net/mlx4_en: Advertize encapsulation offloads features only when VXLAN
+      tunnel is set (regression in 3.15)
+    - target: Don't call TFO->write_pending if data_length == 0
+    - vhost-scsi: Take configfs group dependency during VHOST_SCSI_SET_ENDPOINT
+    - iser-target: Handle DEVICE_REMOVAL event on network portal listener
+      correctly
+    - ASoC: dpcm: Fix race between FE/BE updates and trigger
+    - mac80211: Fix regression that triggers a kernel BUG with CCMP
+      (regression in 3.13)
+    - rt2x00: do not align payload on modern H/W
+    - bitops: Fix shift overflow in GENMASK macros
+    - [x86] Require exact match for 'noxsave' command line option
+    - [x86] drm/i915: Kick fbdev before vgacon (regression in 3.16)
+    - can: dev: avoid calling kfree_skb() from interrupt context
+    - [x86] mm: Set NX across entire PMD at boot
+    - of: Fix crash if an earlycon driver is not found
+    - btrfs: fix lockups from btrfs_clear_path_blocking
+    - [i386/686-pae,armhf/armmp-lpae] PCI: Support 64-bit bridge windows if we
+      have 64-bit dma_addr_t (regression in 3.14)
+    - ACPI / PM: Ignore wakeup setting if the ACPI companion can't wake up
+      (regression in 3.13)
+    - drm/radeon: fix endian swapping in vbios fetch for tdp table
+    - Bluetooth: Fix endian and alignment issue with ath3k version handling
+    - nfs: Don't busy-wait on SIGKILL in __nfs_iocounter_wait
+    - [armhf] 8109/1: mm: Modify pte_write and pmd_write logic for LPAE
+    - aio: fix incorrect dirty pages accouting when truncating AIO ring buffer
+      (regression in 3.12)
+    - [armel,armhf] mvebu: add missing of_node_put() call in coherency.c
+      (regression in 3.16)
+    - iio: Fix IIO_EVENT_CODE_EXTRACT_DIR bit mask
+    - spi: Fix mapping from vmalloc-ed buffer to scatter list
+    - SUNRPC: Fix locking around callback channel reply receive
+    - nfsd: Fix slot wake up race in the nfsv4.1 callback code
+    - bnx2fc: do not add shared skbs to the fcoe_rx_list
+    - Revert "xhci: clear root port wake on bits if controller isn't wake-up
+      capable" (regression in 3.16)
+    - usb: xhci: rework root port wake bits if controller isn't allowed to
+      wakeup
+    - ixgbe: Correctly disable VLAN filter in promiscuous mode
+      (regression in 3.16)
+    - ixgbe: fix use after free adapter->state test in ixgbe_remove/ixgbe_probe
+      (regression in 3.15)
+    - ALSA: hda - Limit 40bit DMA for AMD HDMI controllers
+    - PCI/MSI: Add device flag indicating that 64-bit MSIs don't work
+    - gpu/radeon: Set flag to indicate broken 64-bit MSI
+    - sound/radeon: Move 64-bit MSI quirk from arch to driver
+    - [powerpc*] pseries: Honor the generic "no_64bit_msi" flag
+    - [mips*] fix EVA & non-SMP non-FPU FP context signal handling
+      (regression in 3.15)
+    - [x86] drm/i915: Ignore SURFLIVE and flip counter when the GPU gets reset
+      (regression in 3.16)
+    - [powerpc*] 32 bit getcpu VDSO function uses 64 bit instructions
+    - [armhf] 8222/1: mvebu: enable strex backoff delay
+    - [armel,armhf] 8226/1: cacheflush: get rid of restarting block
+    - btrfs: zero out left over bytes after processing compression streams
+    - [armhf] net: sun4i-emac: fix memory leak on bad packet
+    - [armhf] i2c: omap: fix NACK and Arbitration Lost irq handling
+    - [media] s2255drv: fix payload size for JPG, MJPEG (regression in 3.15)
+    - nouveau: move the hotplug ignore to correct place. (regression in 3.16.4)
+    - mm: frontswap: invalidate expired data on a dup-store failure
+    - mm/vmpressure.c: fix race in vmpressure_work_fn()
+    - xen-netfront: Remove BUGs on paged skb data which crosses a page boundary
+    - drivers/input/evdev.c: don't kfree() a vmalloc address
+      (regression in 3.13)
+    - mm: fix anon_vma_clone() error treatment (regression in 3.12)
+    - ip_tunnel: the lack of vti_link_ops' dellink() cause kernel panic
+    - vxlan: Fix race condition between vxlan_sock_add and vxlan_sock_release
+    - bond: Check length of IFLA_BOND_ARP_IP_TARGET attributes
+    - gre: Set inner mac header in gro complete (regression in 3.16.7-ckt1)
+    - [mips*] bpf: Fix broken BPF_MOD
+    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt4
+    - [x86] drm/i915: don't warn if backlight unexpectedly enabled
+      (Closes: #757805)
+    - [x86] drm/i915/dp: only use training pattern 3 on platforms that
+      support it (regression in 3.15)
+    - btrfs: don't go readonly on existing qgroup items
+    - writeback: fix a subtle race condition in I_DIRTY clearing
+    - [s390*] KVM: flush CPU on load control
+    - UBI: Fix double free after do_sync_erase()
+    - [x86] Drivers: hv: util: make struct hv_do_fcopy match Hyper-V host
+      messages (regression for amd64 in 3.16.7)
+    - Drivers: hv: vmbus: Fix a race condition when unregistering a device
+    - misc: genwqe: check for error from get_user_pages_fast()
+    - drbd: merge_bvec_fn: properly remap bvm->bi_bdev
+    - PCI: Restore detection of read-only BARs
+    - scsi: correct return values for .eh_abort_handler implementations
+    - genhd: check for int overflow in disk_expand_part_tbl()
+    - Btrfs: make sure we wait on logged extents when fsycning two subvols
+    - Btrfs: make sure logged extents complete in the current transaction V3
+    - Btrfs: do not move em to modified list when unpinning
+    - [armhf] mvebu: disable I/O coherency on non-SMP situations on
+      Armada 370/375/38x/XP
+    - nfs41: fix nfs4_proc_layoutget error handling
+    - USB: cdc-acm: check for valid interfaces
+    - HID: i2c-hid: fix race condition reading reports
+    - [armhf] mfd: twl4030-power: Fix regression with missing compatible flag
+      (regression in 3.16)
+    - [armhf] serial: samsung: wait for transfer completion before clock
+      disable
+    - n_tty: Fix read_buf race condition, increment read_head after pushing
+      data (regression in 3.12)
+    - dm cache: only use overwrite optimisation for promotion when in
+      writeback mode
+    - dm cache: dirty flag was mistakenly being cleared when promoting via
+      overwrite
+    - dm bufio: fix memleak when using a dm_buffer's inline bio
+    - iwlwifi: dvm: fix flush support for old firmware (regression in
+      3.16.7-ckt1)
+    - iwlwifi: mvm: update values for Smart Fifo (regression in 3.14)
+    - iommu/vt-d: Fix an off-by-one bug in __domain_mapping()
+    - dm crypt: use memzero_explicit for on-stack buffer
+    - mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by
+      mount (regression in 3.16.3)
+    - umount: Disallow unprivileged mount force
+    - md/raid5: fetch_block must fetch all the blocks handle_stripe_dirtying
+      wants.
+    - [x86] drm/i915: Only warn the first time we attempt to mmio whilst
+      suspended (regression in 3.15)
+    - drm/vmwgfx: Fix error printout on signals pending
+    - drm/radeon: check the right ring in radeon_evict_flags()
+    - swiotlb-xen: pass dev_addr to xen_dma_unmap_page and
+      xen_dma_sync_single_for_cpu
+    - [armhf/armmp] swiotlb-xen: remove BUG_ON in xen_bus_to_phys
+    - swiotlb-xen: call xen_dma_sync_single_for_device when appropriate
+    - swiotlb-xen: pass dev_addr to swiotlb_tbl_unmap_single
+    - [powerpc] book3s: Fix partial invalidation of TLBs in MCE code.
+    - [armhf] clocksource: arch_timer: Fix code to use physical timers when
+      requested (regression in 3.11)
+    - userns: Prevent evasion of group negative permissions through a userns
+      (CVE-2014-8989):
+      + Don't allow setgroups until a gid mapping has been setablished
+      + Don't allow unprivileged creation of gid mappings
+      + Add a knob to disable setgroups on a per user namespace basis
+      + Allow setting gid_maps without privilege when setgroups is disabled
+    - KEYS: Fix stale key registration at error path
+    - blk-mq: Fix a use-after-free
+    - blk-mq: Fix a race between bt_clear_tag() and bt_get()
+    - nfsd4: fix xdr4 count of server in fs_location4 (regression in 3.16)
+    - [x86] drm/i915: Don't complain about stolen conflicts on gen3
+      (regression in 3.12)
+    - [x86] kvm: Clear paravirt_enabled on KVM guests for espfix32's benefit
+      (CVE-2014-8134)
+    - blk-mq: Fix uninitialized kobject at CPU hotplugging
+    - ncpfs: return proper error from NCP_IOC_SETROOT ioctl
+    - [armhf] rtc: omap: fix clock-source configuration (regression in 3.16)
+    - exit: pidns: alloc_pid() leaks pid_namespace if child_reaper is exiting
+    - [amd64] switch_to(): Load TLS descriptors before switching DS and ES
+      (CVE-2014-9419)
+    - [x86] KVM: nVMX: Disable unrestricted mode if ept=0 (regression in 3.13)
+    - [x86] KVM: em_ret_far overrides cpl (follow-up to CVE-2014-3647 fix)
+    - pstore-ram: Fix hangs by using write-combine mappings
+    - HID: i2c-hid: prevent buffer overflow in early IRQ
+    - mac80211: fix multicast LED blinking and counter (regression in
+      3.16.7-ckt2)
+    - cfg80211: avoid mem leak on driver hint set
+    - nl80211: check matches array length before acessing it
+    - cfg80211: don't WARN about two consecutive Country IE hint
+      (regression in 3.14)
+    - tracing/sched: Check preempt_count() for current when reading task->state
+      (regression in 3.13)
+    - [x86] tls: Validate TLS entries to protect espfix (CVE-2014-8133)
+    - [x86] tls: Disallow unusual TLS segments
+    - isofs: Fix infinite looping over CE entries (CVE-2014-9420)
+    - mac80211: free management frame keys when removing station
+    - ceph: do_sync is never initialized (regression in 3.12)
+    - mnt: Fix a memory stomp in umount (regression in 3.14)
+    - ocfs2: fix journal commit deadlock
+    - md/bitmap: always wait for writes on unplug.
+    - [armhf] mmc: omap_hsmmc: Fix UHS card with DDR50 support (regression in
+      3.16)
+    - [x86] mmc: sdhci-pci-o2micro: Fix Dell E5440 issue (regression in 3.14)
+    - dm space map metadata: fix sm_bootstrap_get_nr_blocks()
+    - dm thin: fix a race in thin_dtr
+    - eCryptfs: Force RO mount when encrypted view is enabled
+    - eCryptfs: Remove buggy and unnecessary write in file name decode routine
+    - tcm_loop: Fix wrong I_T nexus association
+    - Btrfs: fix fs corruption on transaction abort if device supports discard
+    - [x86] perf/intel/uncore: Make sure only uncore events are collected
+    - perf: Fix events installation during moving group
+    - iscsi,iser-target: Initiate termination only once (regression in 3.16.4)
+    - iser-target: Fix flush + disconnect completion handling
+    - iser-target: Parallelize CM connection establishment
+    - iser-target: Fix connected_handler + teardown flow race
+    - iser-target: Handle ADDR_CHANGE event for listener cm_id
+    - iser-target: Fix implicit termination of connections
+    - iser-target: Allocate PI contexts dynamically
+    - iser-target: Fix NULL dereference in SW mode DIF
+    - iscsi,iser-target: Expose supported protection ops according to t10_pi
+    - genirq: Prevent proc race against freeing of irq descriptors
+    - [powerpc] powernv: Switch off MMU before entering nap/sleep/rvwinkle mode
+    - [x86] storvsc: ring buffer failures may result in I/O freeze
+    - iscsi-target: Fail connection on short sendmsg writes
+    - [x86] drm/i915: Invalidate media caches on gen7
+    - [x86] drm/i915: Force the CS stall for invalidate flushes
+    - dm thin: fix inability to discard blocks when in out-of-data-space mode
+    - dm thin: fix missing out-of-data-space to write mode transition if blocks
+      are released
+    - dm: fix missed error code if .end_io isn't implemented by target_type
+    - [armhf] i2c: mv64xxx: rework offload support to fix several problems
+      (regression in 3.12)
+    - [x86] tls: Don't validate lm in set_thread_area() after all
+    - ALSA: usb-audio: extend KEF X300A FU 10 tweak to Arcam rPAC
+    - tick/powerclamp: Remove tick_nohz_idle abuse
+    - audit: don't attempt to lookup PIDs when changing PID filtering audit
+      rules (regression in 3.15)
+    - audit: use supplied gfp_mask from audit_buffer in
+      kauditd_send_multicast_skb (regression in 3.16)
+    - [arm64] kernel: fix __cpu_suspend mm switch on warm-boot
+    - audit: restore AUDIT_LOGINUID unset ABI (regression in 3.10)
+    - Btrfs: fix loop writing of async reclaim
+    - isofs: Fix unchecked printing of ER records (CVE-2014-9584)
+    - crypto: af_alg - fix backlog handling
+    - udf: Check path length when reading symlink
+    - udf: Verify i_size when loading inode
+    - udf: Verify symlink size before loading it
+    - udf: Check component length before reading it
+    - [x86] platform/chrome: chromeos_laptop - Add support for Acer C720
+      (Closes: #774209)
+    - batman-adv: Calculate extra tail size based on queued fragments
+      (Closes: #774155) (CVE-2014-9428)
+    - vfs: move d_rcu from overlapping d_child to overlapping d_alias
+    - vfs: deal with deadlock in d_walk() (CVE-2014-8559)
+    - KEYS: close race between key lookup and freeing (CVE-2014-9529)
+
+  [ Ben Hutchings ]
+  * [sh4] Build with gcc-4.8 (Closes: #772602)
+  * Fix inconsistent ABI name generation in
+    debian/bin/{abiupdate,buildcheck,gencontrol}.py (Closes: #773233)
+  * iov: Revert unwanted ABI 'fix' in 3.16.7-ckt2-1
+  * [armel,armhf] thread_info: Fix ABI change in 3.16.7-ckt3
+  * PCI: Fix ABI change in 3.16.7-ckt3
+  * Ignore some ABI changes that don't appear to affect OOT modules:
+    - Removal of __add_pages(), __remove_pages(), of_device_is_stdout_path(),
+      clk_divider_ro_ops, tick_nohz_idle_enter, tick_nohz_idle_exit
+    - Changes to ASoC functions
+  * [arm64] Enable PSTORE as built-in and EFI_VARS_PSTORE as module;
+    ensure efivars and efi-pstore are loaded on EFI systems (Closes: #773309)
+  * hwmon: Enable SENSORS_NCT6683 as module (Closes: #774372)
+  * udeb: Add i2c-designware-{core,platform} to i2c-modules and i2c-hid to
+    input-modules (Closes: #772578)
+  * [x86] ACPI / video: Run _BCL before deciding registering backlight
+    (regression in 3.16) (Closes: #762285)
+  * [amd64] Enable EFI_MIXED to support Bay Trail systems
+  * efi: Expose underlying UEFI firmware platform size to userland, to
+    support installation on Bay Trail systems (Closes: #775191)
+  * vfs: Changes for compatibility with CVE-2014-8559 fix:
+    - aufs: move d_rcu from overlapping d_child to overlapping d_alias
+    - vfs: Avoid ABI change for dentry union changes
+  * [powerpc/powerpc{,-smp}] video/fb: Change FB_RADEON back to module
+    (Closes: #748398) (thanks to John Paul Adrian Glaubitz for thoroughly
+    testing this change)
+  * userns: Fix ABI change in 3.16.7-ckt4
+  * netfilter: conntrack: disable generic tracking for known protocols
+    (CVE-2014-8160)
+  * [amd64] vdso: Fix the vdso address randomization algorithm (CVE-2014-9585)
+
+  [ Ian Campbell ]
+  * [armhf] Enable support for support OMAP5432 uEVM by enabling:
+    TI_SOC_THERMAL, MFD_PALMAS, REGULATOR_PALMAS, REGULATOR_PBIAS,
+    REGULATOR_TI_ABB, PINCTRL_PALMAS, GPIO_PALMAS, RTC_DRV_PALMAS,
+    OMAP5_DSS_HDMI, DISPLAY_ENCODER_TPD12S015, DISPLAY_CONNECTOR_HDMI,
+    USB_DWC3_OMAP, EXTCON_PALMAS, TI_EMIF and DDR.
+    Based on a patch from Chen Baozi (Closes: #772953)
+  * [armel] Change configuration to reduce kernel image size
+    - Warn if image size leaves less than 1% spare capacity in the flash. This
+      allows some slack for growth over the lifetime of a stable release.
+    - [/kirkwood] Disable RD_LZO and RD_LZ4
+    - [/kirkwood] mm: Disable KSM
+    - [/kirkwood] Disable CHECKPOINT_RESTORE
+    - [/kirkwood] Disable ZSMALLOC
+    - [/kirkwood] Disable CRYPTO_FIPS
+    - [/kirkwood] Disable NET_MPLS_GSO
+    - [/kirkwood] Disable NETLINK_MMAP
+    - [/kirkwood] Disable PROFILING
+    - [/kirkwood] Disable BPF_JIT
+    - [/kirkwood] Disable KPROBES
+    - [/ixp4xx,orion5x]: Disable RD_LZO
+    - [/ixp4xx,orion5x]: Disable PROFILING
+    - [/orion5x]: Make SERIO and dependants modular
+  * [arhmf] Add device-tree for LinkSprite pcDuino V3. Patch from Karsten
+    Merker (Closes: #774067)
+  * [xen] More netback fixes (including reintroducing support for
+    feature-rx-notify, which was regressed by the fix to #767261).
+  * Disable TSO in mv643xx_eth driver by default again, since previous fix
+    appears to not work on all platforms (Closes: #764162).
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 16 Jan 2015 00:15:12 +0000
+
+linux (3.16.7-ckt2-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt1
+    - drm/tilcdc: Fix the error path in tilcdc_load()
+    - usb: phy: return -ENODEV on failure of try_module_get
+    - PM / clk: Fix crash in clocks management code if !CONFIG_PM_RUNTIME
+    - rt2x00: support Ralink 5362.
+    - wireless: rt2x00: add new rt2800usb devices
+    - NFS: Fix /proc/fs/nfsfs/servers and /proc/fs/nfsfs/volumes
+    - nfs: fix duplicate proc entries
+    - mm: page_alloc: fix zone allocation fairness on UP
+    - ext4: check EA value offset when loading
+    - jbd2: free bh when descriptor block checksum fails
+    - ext4: don't check quota format when there are no quota files
+    - target: Fix queue full status NULL pointer for SCF_TRANSPORT_TASK_SENSE
+    - vfs: fix data corruption when blocksize < pagesize for mmaped data
+    - ext4: fix mmap data corruption when blocksize < pagesize
+    - ext4: grab missed write_count for EXT4_IOC_SWAP_BOOT
+    - qla_target: don't delete changed nacls
+    - target: Fix APTPL metadata handling for dynamic MappedLUNs
+    - iser-target: Disable TX completion interrupt coalescing
+    - ext4: don't orphan or truncate the boot loader inode
+    - ext4: add ext4_iget_normal() which is to be used for dir tree lookups
+    - ext4: fix reservation overflow in ext4_da_write_begin
+    - ext4: Replace open coded mdata csum feature to helper function
+    - ext4: move error report out of atomic context in ext4_init_block_bitmap()
+    - ext4: check s_chksum_driver when looking for bg csum presence
+    - drm/radeon: fix speaker allocation setup
+    - drm/radeon: use gart memory for DMA ring tests
+    - random: add and use memzero_explicit() for clearing data
+    - freezer: Do not freeze tasks killed by OOM killer
+    - OOM, PM: OOM killed task shouldn't escape PM suspend
+    - [mips*/loongson-2f] loongson2_cpufreq: Fix CPU clock rate setting mismerge
+    - drm/cirrus: bind also to qemu-xen-traditional
+    - cpufreq: intel_pstate: Fix setting max_perf_pct in performance policy
+    - cpufreq: expose scaling_cur_freq sysfs file for set_policy() drivers
+    - cpufreq: intel_pstate: Reflect current no_turbo state correctly
+    - [x86] intel_pstate: Don't lose sysfs settings during cpu offline
+    - [x86] intel_pstate: Fix BYT frequency reporting
+    - [x86] intel_pstate: Correct BYT VID values.
+    - [x86] kvm: don't kill guest on unknown exit reason
+    - kvm: fix excessive pages un-pinning in kvm_iommu_map error path.
+      (CVE-2014-8369)
+    - vfs: be careful with nd->inode in path_init() and follow_dotdot_rcu()
+    - pstore: Fix duplicate {console,ftrace}-efi entries
+    - [x86] bpf_jit: fix two bugs in eBPF JIT compiler (regression in 3.16)
+    - vxlan: fix a use after free in vxlan_encap_bypass
+    - vxlan: using pskb_may_pull as early as possible
+    - vxlan: fix a free after use
+    - ipv4: dst_entry leak in ip_send_unicast_reply()
+    - ipv4: fix a potential use after free in ip_tunnel_core.c
+      (regression in 3.11)
+    - net: tso: fix unaligned access to crafted TCP header in helper API
+    - [x86] hyperv: Fix the total_data_buflen in send path
+    - tcp: md5: do not use alloc_percpu()
+    - macvlan: fix a race on port dismantle and possible skb leaks
+      (regression in 3.16)
+    - net/mlx4_en: Don't attempt to TX offload the outer UDP checksum for VXLAN
+      (regression in 3.14)
+    - gre: Use inner mac length when computing tunnel length
+      (regression in 3.14)
+    - [armhf] spi: pl022: Fix incorrect dma_unmap_sg
+    - mac80211: fix typo in starting baserate for rts_cts_rate_idx
+    - staging: comedi: (regression) channel list must be set for COMEDI_CMD
+      ioctl (regression in 3.15)
+    - nfsd4: fix response size estimation for OP_SEQUENCE (regression in 3.16)
+    - quota: Properly return errors from dquot_writeback_dquots()
+    - i3200_edac: Report CE events properly
+    - i82860_edac: Report CE events properly
+    - cpc925_edac: Report UE events properly
+    - e7xxx_edac: Report CE events properly
+    - scsi: Fix error handling in SCSI_IOCTL_SEND_COMMAND
+    - usb: serial: ftdi_sio: add "bricked" FTDI device PID
+    - [armhf] Revert "usb: dwc3: dwc3-omap: Disable/Enable only wrapper
+      interrupts in prepare/complete" (regression in 3.16)
+    - usb: gadget: f_fs: remove redundant ffs_data_get() (regression in 3.14)
+    - [armhf] usb: ffs: fix regression when quirk_ep_out_aligned_size flag is
+      set (regression in 3.15)
+    - [armhf] usb: musb: dsps: start OTG timer on resume again
+      (regression in 3.16.6)
+    - usb: gadget: udc: core: fix kernel oops with soft-connect
+    - nfsd4: fix crash on unknown operation number
+    - Revert "iwlwifi: mvm: treat EAPOLs like mgmt frames wrt rate"
+      (regression in 3.16.4)
+    - [armhf] usb: dwc3: gadget: Properly initialize LINK TRB
+    - posix-timers: Fix stack info leak in timer_create()
+    - futex: Fix a race condition between REQUEUE_PI and task death
+    - ALSA: bebob: Uninitialized id returned by saffirepro_both_clk_src_get
+    - PM / Sleep: fix async suspend_late/freeze_late error handling
+      (regression in 3.15)
+    - Revert "block: all blk-mq requests are tagged" (regression in 3.16)
+    - ALSA: pcm: Zero-clear reserved fields of PCM status ioctl in compat mode
+    - zap_pte_range: update addr when forcing flush after TLB batching faiure
+    - staging: comedi: fix memory leak / bad pointer freeing for chanlist
+      (regression in 3.15)
+    - [x86] drm/i915: Ignore VBT backlight check on Macbook 2, 1
+      (regression in 3.15)
+    - [i386/686-pae] pageattr: Prevent overflow in slow_virt_to_phys() for
+      X86_PAE
+    - [x86] ACPI / EC: Fix regression due to conflicting firmware behavior
+      between Samsung and Acer. (regression in 3.16.3)
+    - mm: free compound page with correct order
+    - lib/bitmap.c: fix undefined shift in __bitmap_shift_{left|right}()
+    - ext4: fix overflow when updating superblock backups after resize
+    - ext4: fix oops when loading block bitmap failed
+    - ext4: enable journal checksum when metadata checksum feature enabled
+    - ext4: prevent bugon on race between write/fcntl
+    - ext4: bail out from make_indexed_dir() on first error
+    - PCI: Rename sysfs 'enabled' file back to 'enable' (regression in 3.13)
+    - fs: allow open(dir, O_TMPFILE|..., 0) with mode 0
+    - [arm*] tracing/syscalls: Ignore numbers outside NR_syscalls' range
+    - nfs: fix kernel warning when removing proc entry
+    http://kernel.ubuntu.com/stable/ChangeLog-3.16.7-ckt2
+    - rbd: Fix error recovery in rbd_obj_read_sync()
+    - regulator: max77693: Fix use of uninitialized regulator config
+    - xhci: no switching back on non-ULT Haswell (regression in 3.12)
+    - Btrfs: fix kfree on list_head in btrfs_lookup_csums_range error cleanup
+    - ocfs2: fix breakage in o2net_send_tcp_msg() (regression in 3.15)
+    - [armhf] phy: omap-usb2: Enable runtime PM of omap-usb2 phy properly
+      (regression in 3.16)
+    - USB: cdc-acm: add quirk for control-line state requests
+      (regression in 3.16)
+    - sysfs: driver core: Fix glue dir race condition by gdp_mutex
+    - drm/nouveau: make sure display hardware is reinitialised on runtime
+      resume (regression in 3.15)
+    - drm/nv50/disp: fix dpms regression on certain boards
+    - drm/nouveau/bios: memset dcb struct to zero before parsing
+    - GFS2: Make rename not save dirent location (regression in 3.14)
+    - netfilter: ipset: off by one in ip_set_nfnl_get_byindex()
+    - netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats
+      allocation (regression in 3.16)
+    - netfilter: nfnetlink_log: fix maximum packet length logged to userspace
+    - netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops()
+    - mmc: core: sdio: Fix unconditional wake_up_process() on sdio thread
+      (regression in 3.16)
+    - mmc: don't request CD IRQ until mmc_start_host()
+    - fs: make cont_expand_zero interruptible
+    - UBIFS: fix a race condition
+    - [x86] fpu: __restore_xstate_sig()->math_state_restore() needs
+      preempt_disable()
+    - [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to
+      handle_signal()
+    - perf: Fix unclone_ctx() vs. locking
+    - evm: properly handle INTEGRITY_NOXATTRS EVM status
+    - [alpha] vfs: missing data dependency barrier in prepend_name()
+    - jffs2: kill wbuf_queued/wbuf_dwork_lock
+    - fix misuses of f_count() in ppp and netlink
+    - sched: Use dl_bw_of() under RCU read lock
+    - [s390*] topology: call set_sched_topology early
+    - [armhf] mfd: ti_am335x_tscadc: Fix TSC operation after ADC continouous
+      mode (regression in 3.14)
+    - [armhf] mfd: ti_am335x_tscadc: Fix TSC resume (regression in 3.14)
+    - selinux: fix inode security list corruption
+    - blk-mq: fix potential hang if rolling wakeup depth is too high
+      (regression in 3.16)
+    - block: fix alignment_offset math that assumes io_min is a power-of-2
+    - drm/nouveau/gpio: rename g92 class to g94 (regression in 3.16)
+    - [x86] drm/i915: Do not leak pages when freeing userptr objects
+    - media: v4l2-common: fix overflow in v4l_bound_align_image()
+    - sched: Use rq->rd in sched_setaffinity() under RCU read lock
+    - [powerpc*] use device_online/offline() instead of cpu_up/down()
+      (regression in 3.11)
+    - xen-blkback: fix leak on grant map error path
+    - net: skb_fclone_busy() needs to detect orphaned skb (regression in 3.16)
+    - rbd: avoid format-security warning inside alloc_workqueue()
+    - rbd: fix error return code in rbd_dev_device_setup()
+    - media: ttusb-dec: buffer overflow in ioctl (CVE-2014-8884)
+    - dm raid: ensure superblock's size matches device's logical block size
+    - ahci: disable MSI instead of NCQ on Samsung pci-e SSDs on macbooks
+      (Closes: #772435)
+    - mac80211: properly flush delayed scan work on interface removal
+    - [i386] microcode, AMD: Fix early ucode loading on 32-bit
+      (regression in 3.14)
+    - [armhf] mvebu: armada xp: Generalize use of i2c quirk
+      (regression in 3.12)
+    - mac80211: fix use-after-free in defragmentation
+    - iwlwifi: fix RFkill while calibrating (regression in 3.16)
+    - tun: Fix csum_start with VLAN acceleration (regression in 3.12)
+    - macvtap: Fix csum_start when VLAN tags are present
+    - dm thin: grab a virtual cell before looking up the mapping
+    - [x86] KVM: Fix uninitialized op->type for some immediate values
+    - [powerpc*] hwrng: pseries - port to new read API and fix stack corruption
+    - drm/radeon: set correct CE ram size for CIK
+    - drm/radeon: make sure mode init is complete in bandwidth_update
+    - cpufreq: Avoid crash in resume on SMP without OPP (regresion in 3.12)
+    - [i386] microcode, AMD: Fix ucode patch stashing on 32-bit
+      (regression in 3.14)
+    - [armhf] mfd: twl4030-power: Fix poweroff with PM configuration enabled
+      (regression in 3.16)
+    - [hppa] Use compat layer for msgctl, shmat, shmctl and semtimedop syscalls
+    - tracing: Do not busy wait in buffer splice (regresion in 3.16)
+    - param: fix crash on bad kernel arguments (regression in 3.16)
+    - audit: keep inode pinned
+    - drm/radeon: add locking around atombios scratch space usage
+    - nfs: fix pnfs direct write memory leak
+    - nfs: Fix use of uninitialized variable in nfs_getattr()
+    - NFSv4: Ensure that we remove NFSv4.0 delegations when state has expired
+    - NFSv4.1: nfs41_clear_delegation_stateid shouldn't trust
+      NFS_DELEGATED_STATE
+    - NFSv4: Fix races between nfs_remove_bad_delegation() and delegation
+      return
+    - NFSv4: Ensure that we call FREE_STATEID when NFSv4.x stateids are revoked
+    - NFS: Don't try to reclaim delegation open state if recovery failed
+    - [arm64] efi: Fix stub cache maintenance
+    - [arm64] __clear_user: handle exceptions on strb (CVE-2014-7843)
+    - [arm64] Correct the race condition in aarch64_insn_patch_text_sync()
+    - Fix thinko in iov_iter_single_seg_count
+    - libceph: do not crash on large auth tickets
+    - [armel,armhf] 8191/1: decompressor: ensure I-side picks up relocated code
+    - zram: avoid kunmap_atomic() of a NULL pointer
+    - firewire: cdev: prevent kernel stack leaking into ioctl arguments
+    - md: Always set RECOVERY_NEEDED when clearing RECOVERY_FROZEN
+      (regression in 3.13)
+    - vxlan: Do not reuse sockets for a different address family
+    - net: sctp: fix NULL pointer dereference in af->from_addr_param on
+      malformed packet (CVE-2014-7841)
+    - net: sctp: fix memory leak in auth key management
+    - [armel,m68k] ipv6: fix IPV6_PKTINFO with v4 mapped (regression in 3.15)
+    - netlink: Properly unbind in error conditions. (regression in 3.16)
+    - smsc911x: power-up phydev before doing a software reset.
+      (regression in 3.14)
+    - [sparc*] sunvdc: limit each sg segment to a page
+    - [sparc*] vio: fix reuse of vio_dring slot
+    - drm/radeon: initialize sadb to NULL in the audio code
+    - [x86] KVM: Don't report guest userspace emulation error to userspace
+    - crypto: caam - remove duplicated sg copy functions
+    - audit: correct AUDIT_GET_FEATURE return message type
+    - memory-hotplug: Remove "weak" from memory_block_size_bytes() declaration
+      (regression in 3.14)
+    - [s390*] vmcore: Remove "weak" from function declarations
+    - [s390*] clocksource: Remove "weak" from clocksource_default_clock()
+      declaration
+    - IB/core: Clear AH attr variable to prevent garbage data
+    - [amd64] x32, audit: Fix x32's AUDIT_ARCH wrt audit
+    - [armhf] dts: am335x-evm: Fix 5th NAND partition's name
+      (regression in 3.15)
+    - dell-wmi: Fix access out of memory
+
+  [ Ben Hutchings ]
+  * [x86] Complete Thunderbolt support on Apple computers (Closes: #768653)
+    - PCI: Add pci_fixup_suspend_late quirk pass
+    - PCI: Suspend/resume quirks for Apple thunderbolt
+    - Enable THUNDERBOLT as module
+  * [amd64] traps: Stop using IST for #SS (CVE-2014-9090)
+  * [amd64] traps: Fix the espfix64 #DF fixup and rewrite it in C
+  * [amd64] traps: Rework bad_iret
+  * [amd64] asm/traps: Disable tracing and kprobes in fixup_bad_iret and
+    sync_regs
+  * Fix ABI changes in iovec, of, perf and truncate
+  * Ignore ABI changes in iwlwifi, KVM and spi-nor
+  * Revert "drivers/net: Disable UFO through virtio" in macvtap and tun.
+    This removes the need to shut down VMs if migrating to a patched
+    host.
+
+  [ Ian Campbell ]
+  * [xen] Backport various netback fixes (Closes: #767261).
+  * Backport fix for TSO with mv643xx_eth driver, replacing previous workaround
+    (#764162)
+  * [armhf] Increase Ethernet phy startup delay on Banana-Pi. Patch from
+    Karsten Merker (Closes: #767042)
+  * [armhf] Enable FB_SIMPLE, used on some Exynos platforms and elsewhere.
+  * [arm64] Backport various upstream fixes and improvements to the APM X-gene
+    Ethernet driver.
+  * Honour stdout-path from Device Tree, along with supporting any supplied
+    options. (Closes: #770212)
+  * [armhf] Add udeb modules to support video and keyboard for imx6. Patch from
+    Vagrant Cascadian (Closes: #770635)
+  * [device-tree] Reserve memreserve regions even if they partially overlap
+    with an existing reservation. Fixes boot on Midway.
+  * [arm64] Enable reboot on the Xgene platform.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 08 Dec 2014 20:03:18 +0000
+
+linux (3.16.7-2) unstable; urgency=medium
+
+  [ Ian Campbell ]
+  * Disable TSO in mv643xx_eth driver by default (Closes: #764162).
+
+  [ Aurelien Jarno ]
+  * [i386] Rename 486 flavour to 586 for udebs. (Closes: #768288)
+
+  [ Ben Hutchings ]
+  * [hppa] udeb: Fix modules in multiple packages (Closes: 768297)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 06 Nov 2014 17:42:26 +0000
+
+linux (3.16.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.6
+    - rtnetlink: fix VF info size (regression in 3.11)
+    - myri10ge: check for DMA mapping errors
+    - Revert "macvlan: simplify the structure port" (regression in 3.16)
+    - tcp: don't use timestamp from repaired skb-s to calculate RTT (v2)
+      (regression in 3.15)
+    - tcp: fix tcp_release_cb() to dispatch via address family for
+      mtu_reduced()
+    - tipc: fix message importance range check (regression in 3.15)
+    - packet: handle too big packets for PACKET_V3
+    - bnx2x: Revert UNDI flushing mechanism (regression in 3.14)
+    - net: ipv6: fib: don't sleep inside atomic lock (regression in 3.15)
+    - openvswitch: fix panic with multiple vlan headers
+    - ipv6: fix rtnl locking in setsockopt for anycast and multicast
+    - l2tp: fix race while getting PMTU on PPP pseudo-wire (regression in 3.15)
+    - ipv6: restore the behavior of ipv6_sock_ac_drop()
+    - bonding: fix div by zero while enslaving and transmitting
+      (regression in 3.12)
+    - net: filter: fix possible use after free (regression in 3.15)
+    - net: allow macvlans to move to net namespace (regression in 3.13)
+    - macvlan: allow to enqueue broadcast pkt on virtual device
+      (regression in 3.16)
+    - xfrm: Generate blackhole routes only from route lookup functions
+    - xfrm: Generate queueing routes only from route lookup functions
+    - macvtap: Fix race between device delete and open.
+    - net/mlx4_core: Allow not to specify probe_vf in SRIOV IB mode
+      (regression in 3.15)
+    - net/mlx4: Correctly configure single ported VFs from the host
+      (regression in 3.15)
+    - gro: fix aggregation for skb using frag_list (regression in 3.13)
+    - hyperv: Fix bug in netvsc_start_xmit() (potential use-after-free)
+    - team: avoid race condition in scheduling delayed work
+    - hyperv: Fix bug in netvsc_send() (potential use-after-free)
+    - sctp: handle association restarts when the socket is closed.
+    - net_sched: copy exts->type in tcf_exts_change() (regression in 3.14)
+    - crypto: caam - fix addressing of struct member
+    - driver/base/node: remove unnecessary kfree of node struct from
+      unregister_one_node (regression in 3.15)
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.7
+    - btrfs: wake up transaction thread from SYNC_FS ioctl
+    - Btrfs: fix up bounds checking in lseek
+    - Btrfs: don't do async reclaim during log replay
+    - Btrfs: cleanup error handling in build_backref_tree
+    - Btrfs: fix build_backref_tree issue with multiple shared blocks
+    - Btrfs: fix race in WAIT_SYNC ioctl
+    - fs: Add a missing permission check to do_umount (CVE-2014-7975)
+    - kvm: fix potentially corrupt mmio cache
+    - [x86] kvm,vmx: Preserve CR4 across VM entry (CVE-2014-3690)
+    - be2iscsi: check ip buffer before copying (stack buffer overflow)
+    - mptfusion: enable no_write_same for vmware scsi disks
+    - qla2xxx: fix kernel NULL pointer access (regression in 3.16)
+      (Closes: #764804)
+    - qla2xxx: Fix shost use-after-free on device removal (regression in 3.14)
+    - dmaengine: fix xor sources continuation
+    - [arm64] debug: don't re-enable debug exceptions on return from el1_dbg
+    - mei: bus: fix possible boundaries violation
+    - nfsv4: Fixing lease renewal (regression in 3.13)
+    - lzo: check for length overrun in variable length encoding.
+    - [armhf] tty: omap-serial: fix division by zero
+    - NFSv4: Fix lock recovery when CREATE_SESSION/SETCLIENTID_CONFIRM fails
+    - NFSv4: fix open/lock state recovery error handling
+    - NFSv4.1: Fix an NFSv4.1 state renewal regression
+    - nfsd4: reserve adequate space for LOCK op (regression in 3.16)
+    - NFS: Fix an uninitialised pointer Oops in the writeback error path
+    - NFS: Fix a bogus warning in nfs_generic_pgio (regression in 3.16.4)
+    - iwlwifi: mvm: disable BT Co-running by default
+    - [armel,armhf] PCI: mvebu: Fix uninitialized variable in
+      mvebu_get_tgt_attr()
+    - Revert "ath9k_hw: reduce ANI firstep range for older chips"
+      (regression in 3.15)
+    - fanotify: enable close-on-exec on events' fd when requested in
+      fanotify_init()
+    - futex: Ensure get_futex_key_refs() always implies a barrier
+      (regression in 3.14)
+    - [ppc64el] iommu/ddw: Fix endianness
+    - [arm64] compat: fix compat types affecting struct compat_elf_prpsinfo
+    - ALSA: emu10k1: Fix deadlock in synth voice lookup
+    - ALSA: hda - Add missing terminating entry to SND_HDA_PIN_QUIRK macro
+    - [armhf] mvebu: Netgear RN104: Use Hardware BCH ECC
+    - [armhf] mvebu: Netgear RN2120: Use Hardware BCH ECC
+    - [armhf] mvebu: Netgear RN102: Use Hardware BCH ECC
+    - ecryptfs: avoid to access NULL pointer when write metadata in xattr
+    - xfs: ensure WB_SYNC_ALL writeback handles partial pages correctly
+    - [sparc*] Do not disable interrupts in nmi_cpu_busy()
+    - [sparc*] Fix pcr_ops initialization and usage bugs.
+    - [sparc*] sun4v TLB error power off events
+    - [sparc*] Fix corrupted thread fault code.
+    - [sparc*] find_node adjustment
+    - [sparc*] Let memset return the address argument
+    - [sparc*] bpf_jit: fix support for ldx/stx mem and SKF_AD_VLAN_TAG
+    - [sparc*] bpf_jit: fix loads from negative offsets
+    - [sparc*] Fix FPU register corruption with AES crypto offload.
+    - [sparc*] Do not define thread fpregs save area as zero-length array.
+    - [sparc*] Fix hibernation code refrence to PAGE_OFFSET.
+    - [sparc*] correctly recognise M6 and M7 cpu type
+    - [sparc*] T5 PMU
+    - [sparc*] Switch to 4-level page tables.
+    - [sparc*] Adjust KTSB assembler to support larger physical addresses.
+    - [sparc*] Fix physical memory management regressions with large
+      max_phys_bits.
+    - [sparc*] Use kernel page tables for vmemmap.
+    - [sparc*] Increase MAX_PHYS_ADDRESS_BITS to 53.
+    - [sparc*] sparse irq
+    - [sparc*] Fix register corruption in top-most kernel stack frame during
+      boot.
+    - [sparc*] Implement __get_user_pages_fast().
+
+  [ Ben Hutchings ]
+  * [i386] Rename 486 flavour to 586, as it has not worked on 486 processors
+    since we enabled CC_STACKPROTECTOR (Closes: #766105)
+    - Select M586TSC instead of M486
+  * [x86] r8723au: Backport changes up to Linux 3.17 (Closes: #765685)
+  * mmc_block: Increase max_devices and set MMC_BLOCK_MINORS to 256
+    (Closes: #765621)
+  * [x86] drm/i915: Initialise userptr mmu_notifier serial to 1
+    (Closes: #765590)
+  * rtsx_usb_ms: Use msleep_interruptible() in polling loop (Closes: #765717)
+  * Bump ABI to 4
+  * Add '.0' to the kernel version string (Closes: #742226, #745984)
+  * vfs,fuse: Change iov_iter_get_pages() to take both maxsize and maxpages
+    parameters (Closes: #764285)
+  * lockd: Try to reconnect if statd has moved (Closes: #767219)
+  * m25p80: Fix module device ID table
+  * HID: i2c-hid: call the hid driver's suspend and resume callbacks
+    (Closes: #767204)
+  * [x86] drm/i915: Add some L3 registers to the parser whitelist
+    (Closes: #767148)
+  * wireless: rt2x00: add new rt2800usb device (thanks to Cyril Brulebois)
+    (Closes: #766802)
+  * drivers/net,ipv6: Fix virtio/IPv6 regression in 3.16:
+    - drivers/net: Disable UFO through virtio
+    - drivers/net,ipv6: Select IPv6 fragment idents for virtio UFO packets
+  * [x86] KVM: Check non-canonical addresses upon WRMSR (CVE-2014-3610)
+  * [x86] KVM: Prevent host from panicking on shared MSR writes.
+    (CVE-2014-3610)
+  * [x86] KVM: Improve thread safety in pit (CVE-2014-3611)
+  * [x86] kvm: vmx: handle invvpid vm exit gracefully (CVE-2014-3646)
+  * [x86] KVM: Fix wrong masking on relative jump/call
+  * [x86] KVM: Emulator fixes for eip canonical checks on near branches
+    (CVE-2014-3647)
+  * [x86] KVM: Handle errors when RIP is set during far jumps (CVE-2014-3647)
+  * [x86] KVM: Fix far-jump to non-canonical check
+  * net: sctp: fix skb_over_panic when receiving malformed ASCONF chunks
+    (CVE-2014-3673)
+  * net: sctp: fix panic on duplicate ASCONF chunks (CVE-2014-3687)
+  * net: sctp: fix remote memory pressure from excessive queueing
+    (CVE-2014-3688)
+  * mnt: Prevent pivot_root from creating a loop in the mount tree
+    (CVE-2014-7970)
+  * linux-image: Recommend irqbalance if CONFIG_SMP is enabled
+    (Closes: #577788)
+  * [armhf] leds: Enable LEDS_PWM as module (for Cubox-i)
+  * [x86] Backport Thunderbolt support on Apple computers from 3.17
+  * [x86] linux-image: Remove lilo from suggested boot loaders
+  * [amd64] linux-image: Add grub-efi to suggested boot loaders
+  * [hppa] Reduce SIGRTMIN from 37 to 32 to behave like other Linux
+    architectures (Closes: #766635)
+  * [hppa] udeb: Add many more module packages (Closes: #766793)
+  * iwlwifi: Backport firmware monitor from 3.17 (Closes: #767088)
+  * bug script: Warn if the running kernel matches the ABI name of the
+    package but is not the installed version
+
+  [ Mauricio Faria de Oliveira ]
+  * [ppc64el] Disable CONFIG_CMDLINE{,_BOOL} usage for setting consoles
+    (Closes: #764745)
+
+  [ Uwe Kleine-König ]
+  * [armhf] enable rtc driver for i.MX6 
+  * [armhf] add chipidea usb host driver to usb-modules-$version-armmmp-di
+    for i.MX6 
+  * [armhf] enable PCI and NAND driver for Armada 370
+  * [armhf] enable RTC, GPIO_PCA953X, SENSORS_G762 and watchdog driver for
+    Netgear ReadyNAS 102/104
+
+  [ Ian Campbell ]
+  * [armhf] Build i2c-s3c2410 statically, it is used by the arndale power
+    controller.
+  * [armhf] Backport device tree file for Olimex A20-OLinuXino-LIME. (Closes: #764967)
+  * [armhf] Enable various drivers for the Nokia N900. Patch from Sebastian
+    Reichel. (Closes: #766070)
+  * [arm64] Enable EHCI and OHCI platform USB HCD drivers.
+  * Enable MTD and MTDBLOCK in top-level config.
+  * [armhf] Add mtd-modules udeb. Patch from Uwe Kleine-Koenig.
+
+  [ Aurelien Jarno ]
+  * [mips*] Backport a hugetlb fix for Octeon from 3.18.
+  * [mips*] Backport math emulation fix for MIPS32r2 from 3.18.
+  * [mips*] Only define MAX_PHYSMEM_BITS on Loongson-3, until a better fix
+    is committed upstream. Fixes Loongson-2 kernel and maybe more. Closes:
+    #764223.
+  * [mips*/octeon] Add support for the UBNT E200 board (EdgeRouter/EdgeRouter
+    Pro 8 port).
+  * [mips*/octeon] Enable SERIAL_8250_DW. Disable KEYBOARD_ATKBD, MOUSE_PS2,
+    SERIO_I8042.
+  * [mips*/octeon] Really enable USB_OCTEON_EHCI and USB_OCTEON_OHCI. Closes: 
+    Closes: #762066.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 04 Nov 2014 09:47:27 +0000
+
+linux (3.16.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.4
+    - module: Clean up ro/nx after early module load failures
+      (regression in 3.16)
+    - [armhf] cpufreq: OPP: Avoid sleeping while atomic
+    - [armhf] drm/tilcdc: Fix various bugs in removal path
+    - drm/ttm: Fix possible stack overflow by recursive shrinker calls.
+    - [x86] drm/i915: Fix crash when failing to parse MIPI VBT
+      (regression in 3.16)
+    - [x86] drm/i915: read HEAD register back in init_ring_common() to enforce
+      ordering (Closes: #763583)
+    - libata: widen Crucial M550 blacklist matching
+    - pata_scc: propagate return value of scc_wait_after_reset
+    - pwm: Fix period and polarity in pwm_get() for non-perfect matches
+    - aio: add missing smp_rmb() in read_events_ring
+    - [arm64] flush TLS registers during exec
+    - [arm64] use irq_set_affinity with force=false when migrating irqs
+      (regression in 3.15)
+    - [arm*] KVM: Nuke Hyp-mode tlbs before enabling MMU
+    - [x86] i2c: ismt: use correct length when copy buffer
+    - ftrace: Use current addr when converting to nop in
+      __ftrace_replace_code() (regression in 3.16)
+    - ALSA: core: fix buffer overflow in snd_info_get_line()
+    - ALSA: firewire-lib/dice: add arrangements of PCM pointer and interrupts
+      for Dice quirk (regression in 3.16)
+    - HID: picolcd: sanity check report size in raw_event() callback
+      (CVE-2014-3186)
+    - HID: magicmouse: sanity check report size in raw_event() callback
+      (CVE-2014-3181)
+    - HID: logitech-dj: prevent false errors to be shown (regression in 3.16.2)
+    - [x86] drm/i915: Skip load detect when intel_crtc->new_enable==true
+      (regression in 3.16)
+    - [x86] drm/i915: fix plane/cursor handling when runtime suspended
+      (regression in 3.14)
+    - [x86] drm/i915: Ignore VBT backlight presence check on Acer C720 (4005U)
+      (regression in 3.15)
+    - [x86] drm/i915: Wait for vblank before enabling the TV encoder
+      (regression in 3.16)
+    - [x86] drm/i915/hdmi: fix hdmi audio state readout (regression in 3.16)
+    - drm/radeon: Add ability to get and change dpm state when radeon PX card
+      is turned off (regression in 3.15)
+    - locks: pass correct "before" pointer to locks_unlink_lock in
+      generic_add_lease
+    - ufs: fix deadlocks introduced by sb mutex merge (regression in 3.16)
+    - USB: serial: fix potential stack buffer overflow
+    - USB: serial: fix potential heap buffer overflow
+    - USB: option: reduce interrupt-urb logging verbosity (regression in 3.16)
+    - [armhf] usb: phy: twl4030-usb: Fix lost interrupts after ID pin goes down
+      (regression in 3.13)
+    - [armhf] usb: phy: twl4030-usb: Fix regressions to runtime PM on omaps
+      (regressions in 3.14, 3.15)
+    - uwb: init beacon cache entry before registering uwb device
+    - usb: hub: take hub->hdev reference when processing from eventlist
+    - USB: EHCI: unlink QHs even after the controller has stopped
+    - Revert "ACPI / battery: fix wrong value of capacity_now reported when
+      fully charged" (regression in 3.16)
+    - [x86] iommu/vt-d: Check return value of acpi_bus_get_device()
+      (regression in 3.15)
+    - [armhf/armmp-lpae] iommu/arm-smmu: fix programming of SMMU_CBn_TCR for
+      stage 1
+    - cgroup: check cgroup liveliness before unbreaking kernfs
+      (regression in 3.15)
+    - NFSv4: Fix another bug in the close/open_downgrade code
+      (regression in 3.16.2)
+    - nfsd4: fix corruption of NFSv4 read data (regression in 3.16)
+    - nfs: check wait_on_bit_lock err in page_group_lock
+    - nfs: clear_request_commit while holding i_lock
+    - nfs: fix nonblocking calls to nfs_page_group_lock
+    - nfs: use blocking page_group_lock in add_request
+    - nfs: fix error handling in lock_and_join_requests
+    - nfs: don't sleep with inode lock in lock_and_join_requests
+    - nfs: disallow duplicate pages in pgio page vectors
+    - nfs: can_coalesce_requests must enforce contiguity
+    - [armhf] 8129/1: errata: work around Cortex-A15 erratum 830321 using dummy
+      strex
+    - [armhf] 8133/1: use irq_set_affinity with force=false when migrating irqs
+      (regression in 3.15)
+    - [armel,armhf] 8148/1: flush TLS and thumbee register state during exec
+    - [armel,armhf] 8149/1: perf: Don't sleep while atomic when enabling
+      per-cpu interrupts (regression in 3.15)
+    - [armhf] imx: fix .is_enabled() of shared gate clock (regression in 3.16)
+    - [armhf] 8165/1: alignment: don't break misaligned NEON load/store
+    - [mips*] Fix MFC1 & MFHC1 emulation for 64-bit MIPS systems
+      (regression in 3.15)
+    - ACPICA: Update to GPIO region handler interface.
+    - gpio / ACPI: Use pin index and bit length
+    - ACPI / platform / LPSS: disable async suspend/resume of LPSS devices
+      (regression in 3.16)
+    - ACPI / hotplug: Generate online uevents for ACPI containers
+      (regression in 3.14)
+    - ACPI / video: disable native backlight for ThinkPad X201s
+      (regression in 3.16)
+    - regmap: Fix regcache debugfs initialization (regression in 3.15)
+    - regmap: Fix handling of volatile registers for format_write() chips
+    - regmap: Don't attempt block writes when syncing cache on single_rw
+      devices
+    - cgroup: reject cgroup names with '\n'
+    - cgroup: delay the clearing of cgrp->kn->priv
+    - cgroup: fix unbalanced locking (regression in 3.14)
+    - [s390*] KVM: Fix user triggerable bug in dead code
+    - [s390*] KVM: mm: try a cow on read only pages for key ops
+    - [s390*] KVM: mm: Fix storage key corruption during swapping
+    - [s390*] KVM: mm: Fix guest storage key corruption in
+      ptep_set_access_flags
+    - [x86] xen: don't copy bogus duplicate entries into kernel page tables
+    - [x86] early_ioremap: Increase FIX_BTMAPS_SLOTS to 8 (regression in 3.16)
+    - shmem: fix nlink for rename overwrite directory
+    - SMB3: Fix oops when creating symlinks on smb3
+    - iio: Fix indio_dev->trig assignment in several drivers
+    - Target/iser: Don't put isert_conn inside disconnected handler
+    - target: Fix inverted logic in SE_DEV_ALUA_SUPPORT_STATE_STORE
+      (regression in 3.13)
+    - iscsi-target: Fix memory corruption in iscsit_logout_post_handler_diffcid
+    - SCSI: libiscsi: fix potential buffer overrun in __iscsi_conn_send_pdu
+    - Revert "iwlwifi: dvm: don't enable CTS to self" (regression in 3.16)
+    - iwlwifi: mvm: fix endianity issues with Smart Fifo commands
+      (regression in 3.14)
+    - iwlwifi: mvm: set MAC_FILTER_IN_BEACON correctly for STA/P2P client
+      (regression in 3.16)
+    - workqueue: apply __WQ_ORDERED to create_singlethread_workqueue()
+      (regression in 3.10)
+    - futex: Unlock hb->lock in futex_wait_requeue_pi() error path
+    - block: Fix dev_t minor allocation lifetime
+    - dm cache: fix race causing dirty blocks to be marked as clean
+    - percpu: fix pcpu_alloc_pages() failure path
+    - percpu: perform tlb flush after pcpu_map_pages() failure
+    - regulatory: add NUL to alpha2
+    - lockd: fix rpcbind crash on lockd startup failure (regression in 3.15)
+    - genhd: fix leftover might_sleep() in blk_free_devt()
+    - eventpoll: fix uninitialized variable in epoll_ctl
+    - kcmp: fix standard comparison bug
+    - fs/notify: don't show f_handle if exportfs_encode_inode_fh failed
+    - nilfs2: fix data loss with mmap()
+    - mm, slab: initialize object alignment on cache creation
+    - fs/cachefiles: add missing \n to kerror conversions (regression in 3.16)
+    - mm: softdirty: keep bit when zapping file pte
+    - sched: Fix unreleased llc_shared_mask bit during CPU hotplug
+    - brcmfmac: handle IF event for P2P_DEVICE interface (regression in 3.12)
+    - ath9k_htc: fix random decryption failure (regression in 3.15)
+    - [powerpc,ppc*] Add smp_mb() to arch_spin_is_locked()
+    - [powerpc,ppc*] Add smp_mb()s to arch_spin_unlock_wait()
+    - [hppa] Implement new LWS CAS supporting 64 bit operations.
+    - alarmtimer: Return relative times in timer_gettime
+    - alarmtimer: Do not signal SIGEV_NONE timers
+    - alarmtimer: Lock k_itimer during timer callback
+    - GFS2: fix d_splice_alias() misuses
+    - IB/qib: Correct reference counting in debugfs qp_stats
+    - IB/mlx4: Avoid null pointer dereference in mlx4_ib_scan_netdevs()
+      (regression in 3.14)
+    - IB/mlx4: Don't duplicate the default RoCE GID (regression in 3.14)
+    - IB/core: When marshaling uverbs path, clear unused fields
+      (regression in 3.14)
+    - mm: Fix unbalanced mutex in dma_pool_create(). (regression in 3.16)
+    - PCI: Add pci_ignore_hotplug() to ignore hotplug events for a device
+      (regression in 3.15)
+    - Revert "PCI: Don't scan random busses in pci_scan_bridge()"
+      (regression in 3.15)
+    - drm/nouveau/runpm: fix module unload
+    - drm/radeon/px: fix module unload
+    - fs: Fix nasty 32-bit overflow bug in buffer i/o code.
+    - blk-mq: Avoid race condition with uninitialized requests
+    - [x86] crypto: ccp - Check for CCP before registering crypto algs
+    - nl80211: clear skb cb before passing to netlink
+    - Revert "PCI: Make sure bus number resources stay within their parents
+      bounds" (regression in 3.15)
+    - cpufreq: release policy->rwsem on error (regression in 3.14)
+    - cpufreq: fix cpufreq suspend/resume for intel_pstate (regression in 3.15)
+    - media: it913x: init tuner on attach (regression in 3.15)
+    - media: videobuf2-dma-sg: fix for wrong GFP mask to
+      sg_alloc_table_from_pages (regression in 3.13)
+    - media: vb2: fix vb2 state check when start_streaming fails
+      (regression in 3.16.3)
+    - media: vb2: fix plane index sanity check in vb2_plane_cookie()
+    - md/raid1: clean up request counts properly in close_sync()
+      (regression in 3.13)
+    - md/raid1: be more cautious where we read-balance during resync.
+      (regression in 3.13)
+    - md/raid1: make sure resync waits for conflicting writes to complete.
+      (regression in 3.13)
+    - md/raid1: Don't use next_resync to determine how far resync has
+      progressed (regression in 3.13)
+    - md/raid1: update next_resync under resync_lock. (regression in 3.13)
+    - md/raid1: count resync requests in nr_pending. (regression in 3.13)
+    - md/raid1: fix_read_error should act on all non-faulty devices.
+    - md/raid1: intialise start_next_window for READ case to avoid hang
+      (regression in 3.13)
+    - netfilter: xt_hashlimit: perform garbage collection from process context
+    - mmc: mmci: Reverse IRQ handling for the arm_variant (regression in 3.15)
+    - partitions: aix.c: off by one bug (regression in 3.11)
+    - cpufreq: update 'cpufreq_suspended' after stopping governors
+    - aio: block exit_aio() until all context requests are completed
+    - ext4: propagate errors up to ext4_find_entry()'s callers
+    - ext4: avoid trying to kfree an ERR_PTR pointer
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.5
+    - udf: Avoid infinite loop when processing indirect ICBs (CVE-2014-6410)
+    - ASoC: core: fix possible ZERO_SIZE_PTR pointer dereferencing error.
+    - perf: fix perf bug in fork()
+    - mm: memcontrol: do not iterate uninitialized memcgs (regression in 3.14)
+    - mm: migrate: Close race between migration completion and mprotect
+    - [x86] ACPI / i915: Update the condition to ignore firmware backlight
+      change request (regression in 3.16)
+    - [x86] cpufreq: pcc-cpufreq: Fix wait_event() under spinlock
+      (regression in 3.15)
+    - md/raid5: disable 'DISCARD' by default due to safety concerns.
+    - [x86] drm/i915: Flush the PTEs after updating them before suspend
+      (regression in 3.12)
+    - cifs: Fix problem recognizing symlinks (regression in 3.13)
+    - ring-buffer: Fix infinite spin in reading buffer (regression in 3.16.3)
+    - mm: numa: Do not mark PTEs pte_numa when splitting huge pages
+    - media: vb2: fix VBI/poll regression
+
+  [ Ian Campbell ]
+  * [armhf] Add Exynos5 disk/usb/nic modules to udebs.
+  * [armhf] Backport BananaPi device tree files. Patch from Karsten
+    Merker (Closes: #763897).
+
+  [ Ben Hutchings ]
+  * [hppa/parisc64-smp] Work around gcc 4.8 miscompilation (Closes: #762390)
+  * [powerpc/powerpc64,ppc64*] video/fb: Change FB_MATROX, FB_RADEON, FB_ATY,
+    FB_SIS, FB_3DFX, FB_VOODOO1 back to modules (Closes: #748398)
+  * udeb: Add pata_rdc to pata-modules (Closes: #633128)
+  * [s390*] 3215: fix tty output containing tabs (Closes: #758264)
+  * radeon: Don't check for installed firmware if driver is built-in
+    (Closes: #763305)
+  * Bump ABI to 3
+  * vfs: fold swapping ->d_name.hash into switch_names()
+  * vfs: Don't exchange "short" filenames unconditionally. (Closes: #763700)
+  * [hppa,m68k,mips/r4k-ip22,sparc*] bluetooth: Enable BT as module
+    (Closes: #764524)
+
+  [ Aurelien Jarno ]
+  * [arm64] Change RTC_DRV_PL031 and RTC_DRV_XGENE from modules to built-ins
+    as the kernel isn't able to initialize the system clock from a hardware
+    clock whose driver is a module, and as there is no initramfs mechanism
+    to do that.
+  * [armhf] Change RTC_DRV_DA9052, RTC_DRV_IMXDI, RTC_DRV_MC13XXX,
+    RTC_DRV_MV, RTC_DRV_MXC, RTC_DRV_OMAP, RTC_DRV_PL030, RTC_DRV_PL031,
+    RTC_DRV_S5M, RTC_DRV_SUNXI, RTC_DRV_VT8500 from modules to built-ins for
+    the same reason as above.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 10 Oct 2014 09:15:17 +0100
+
+linux (3.16.3-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [s390*] syscall: Fix unimplented-syscall entries added before
+    memfd_create() (fixes FTBFS) (Closes: #762221)
+  * [armel/kirkwood] Change configuration to reduce kernel image size
+    (fixes FTBFS) (Closes: #762219)
+    - block: Change IOSCHED_DEADLINE to module
+    - gpu: Disable VGA_ARB
+
+  [ Aurelien Jarno ]
+  * [mips*/octeon] Enable OCTEON_USB, USB_EHCI_HCD, USB_OHCI_HCD,
+    and USB_OCTEON_EHCI, USB_OCTEON_OHCI (Closes: #762066).
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 20 Sep 2014 11:43:05 +0200
+
+linux (3.16.3-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3
+    - reiserfs: fix corruption introduced by balance_leaf refactor
+      (regression in 3.16) (Closes: #761457)
+    - reiserfs: Fix use after free in journal teardown
+    - media: v4l: vb2: Fix stream start and buffer completion race
+    - [x86] iommu/vt-d: Exclude devices using RMRRs from IOMMU API domains
+    - [powerpc*] powerpc/powernv: Fix IOMMU group lost (regression in 3.15)
+    - [x86] iommu/vt-d: Defer domain removal if device is assigned to a driver
+    - [x86] iommu/amd: Fix cleanup_domain for mass device removal
+    - [s390*] locking: Reenable optimistic spinning
+    - firmware: Do not use WARN_ON(!spin_is_locked())
+    - CAPABILITIES: remove undefined caps from all processes
+    - fanotify: fix double free of pending permission events
+    - ocfs2: do not write error flag to user structure we cannot copy from/to
+    - [powerpc*] mm: fix potential infinite loop in dissolve_free_huge_pages()
+    - drivers/mfd/rtsx_usb.c: export device table (Closes: #761428)
+    - [powerpc*] mm: Use read barrier when creating real_pte
+    - [powerpc*] thp: Add write barrier after updating the valid bit
+    - [powerpc*] thp: Invalidate old 64K based hash page mapping before insert
+      of 4k pte
+    - [powerpc*] thp: Handle combo pages in invalidate
+    - [powerpc*] thp: Invalidate with vpn in loop
+    - [powerpc*] thp: Use ACCESS_ONCE when loading pmdp
+    - SCSI: save command pool address of Scsi_Host (regression in 3.15)
+    - fix regression in SCSI_IOCTL_SEND_COMMAND (regression in 3.16)
+    - [mips*] GIC: Prevent array overrun
+    - [mips*] ptrace: Test correct task's flags in task_user_regset_view()
+    - [mips*] ptrace: Change GP regset to use correct core dump register layout
+    - [mips*] ptrace: Avoid smp_processor_id() when retrieving FPU IR
+    - [mips*] syscall: Fix AUDIT value for O32 processes on MIPS64
+    - [mips*] scall64-o32: Fix indirect syscall detection
+    - [mips,powerpc] bfa: Fix undefined bit shift on big-endian architectures
+      with 32-bit DMA address
+    - ACPI / hotplug: Check scan handlers in acpi_scan_hot_remove()
+      (regression in 3.14)
+    - ACPI: Run fixed event device notifications in process context
+      (regression in 3.15)
+    - ACPI / scan: Allow ACPI drivers to bind to PNP device objects
+      (regression in 3.16)
+    - ACPI / EC: Add support to disallow QR_EC to be issued when SCI_EVT isn't
+      set (regression in 3.14.13, 3.16)
+    - ACPI / EC: Add support to disallow QR_EC to be issued before completing
+      previous QR_EC (regression in 3.14.13, 3.16)
+    - ACPI / scan: not cache _SUN value in struct acpi_device_pnp
+      (regression in 3.14)
+    - ACPI / video: Add a disable_native_backlight quirk
+    - ACPI / video: Disable native_backlight on HP ENVY 15 Notebook PC
+    - ring-buffer: Always reset iterator to reader page
+    - ring-buffer: Up rb_iter_peek() loop count to 3
+    - vfs: get rid of propagate_umount() mistakenly treating slaves as busy.
+      (regression in 3.15)
+    - Bluetooth: Fix tracking local SSP authentication requirement
+    - Bluetooth: Avoid use of session socket after the session gets freed
+    - vfs: __generic_file_write_iter(): fix handling of sync error after DIO
+      (regression in 3.16)
+    - rbd: rework rbd_request_fn() (regression in 3.15)
+    - vfs: fix copy_tree() regression (regression in 3.14)
+    - md/raid1,raid10: always abort recover on write error.
+    - md/raid5: avoid livelock caused by non-aligned writes.
+      (regression in 3.16)
+    - md/raid6: avoid data corruption during recovery of double-degraded RAID6
+    - md/raid10: fix memory leak when reshaping a RAID10.
+    - xfs: ensure verifiers are attached to recovered buffers
+    - xfs: quotacheck leaves dquot buffers without verifiers
+    - xfs: don't dirty buffers beyond EOF
+    - xfs: don't zero partial page cache pages during O_DIRECT writes
+    - xfs: don't zero partial page cache pages during O_DIRECT reads
+    - libceph: set last_piece in ceph_msg_data_pages_cursor_init() correctly
+    - libceph: gracefully handle large reply messages from the mon
+    - libceph: do not hard code max auth ticket len (CVE-2014-6416,
+      CVE-2014-6417, CVE-2014-6418)
+    - CIFS: Fix async reading on reconnects
+    - CIFS: Possible null ptr deref in SMB2_tcon
+    - CIFS: Fix wrong directory attributes after rename
+    - mtd/ftl: fix the double free of the buffers allocated in build_maps()
+    - mtd: nand: omap: Fix 1-bit Hamming code scheme, omap_calculate_ecc()
+    - dm table: propagate QUEUE_FLAG_NO_SG_MERGE (regression in 3.16)
+    - KEYS: Fix use-after-free in assoc_array_gc()
+    - KEYS: Fix termination condition in assoc array garbage collection
+      (CVE-2014-3631)
+
+  [ Ben Hutchings ]
+  * sfc: Adding PCI ID for Solarflare 7000 series 40G network adapter.
+  * sfc: Add 40G link capability decoding
+  * Bump ABI to 2 (Closes: #761874)
+  * ata: Enable SATA_ZPODD
+  * tracing: Enable TRACER_SNAPSHOT
+  * Add memfd_create() and shared memory sealing (Closes: #760702):
+    - mm: allow drivers to prevent new writable mappings
+    - shm: add sealing API
+    - shm: add memfd_create() syscall
+    - shm: wait for pins to be released when sealing
+    - mm: Add memfd_create() system call
+    - [arm*,m68k,mips*,powerpc*,s390*,sparc*] Wire up memfd_create()
+  * udeb: Add ccm, ctr to crypto-modules (Closes: #761902)
+  * [armhf] udeb: Add ehci-platform, ohci-platform and phy-sun4i-usb to
+    usb-modules (Closes: #761591)
+
+  [ Ian Campbell ]
+  * [armhf] Enable support for Exynos5 systems. (Closes: #759291)
+  * [arm64] Enable crypto accelerator modules
+  * [arm64] Add cdrom-core-modules udeb
+
+  [ Aurelien Jarno ]
+  * [powerpc/powerpc64,ppc64el] Backport more KVM patches from 3.17. Enable
+    KVM_BOOK3S_64, KVM_BOOK3S_64_HV, KVM_BOOK3S_64_PR and KVM_XICS.  (Closes:
+    #761656).
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 18 Sep 2014 03:32:47 +0100
+
+linux (3.16.2-3) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [armhf] udeb: Remove efi-modules, as EFI is not yet supported on ARM!
+  * [arm64] ata: Enable PHY_XYGENE, AHCI_XGENE as modules
+    - udeb: Add ahci_xgene to sata-modules (fixes FTBFS)
+  * [arm64] rtc: Enable RTC_DRV_XGENE as module
+  * mfd,mmc,memstick: Enable MFD_RTSX_USB, MMC_REALTEK_USB,
+    MEMSTICK_REALTEK_USB as modules (Closes: #761099)
+  * [mips64,mips64el] Properly add the 5kc-malta flavour (should fix FTBFS)
+  * batman-adv: Enable BATMAN_ADV_MCAST
+  * can: Enable CAN_GS_USB as module
+  * bluetooth: Enable BT_6LOWPAN
+  * ubi: Enable MTD_UBI_BLOCK
+  * md: Enable DM_ERA as module
+  * qlcnic: Enable QLCNIC_VXLAN
+  * net/wireless: Enable RSI_91X, RSI_USB as modules
+    - udeb: Add rsi_usb to nic-wireless-modules
+  * i2c: Enable I2C_ROBOTFUZZ_OSIF as module
+  * mfd,gpio,i2c,iio: Enable MFD_VIPERBOARD, GPIO_VIPERBOARD, I2C_VIPERBOARD,
+    VIPERBOARD_ADC as modules
+  * media/usb/gspca: Enable USB_GSPCA_DTCS033 as module
+  * media/pci/cx23885: Enable MEDIA_ALTERA_CI as module
+  * sound/usb: Enable SND_USB_HIFACE, SND_BCD2000 as modules
+  * usb/misc: Enable USB_EHSET_TEST_FIXTURE as module
+  * usb/gadget: Enable USB_NET2280 as module
+  * leds: Enable LEDS_TRIGGER_CPU as built-in and LEDS_TRIGGER_ONESHOT,
+    LEDS_TRIGGER_GPIO, LEDS_TRIGGER_TRANSIENT, LEDS_TRIGGER_CAMERA as modules
+  * uio: Enable UIO_MF624 as module
+  * iio: Enable HID_SENSOR_PROX, HID_SENSOR_DEVICE_ROTATION, HID_SENSOR_PRESS
+    as modules
+  * ecryptfs: Enable ECRYPT_FS_MESSAGING
+  * ceph: Enable CEPH_FSCACHE
+  * crypto: Enable CRYPTO_LZ4, CRYPTO_LZ4HC as modules
+  * [x86] mfd,gpio,i2c,watchdog: Enable KEMPLD_MFD, GPIO_KEMPLD, I2C_KEMPLD,
+    KEMPLD_WDT as modules
+  * [x86] staging: Enable R8723AU as module
+  * [x86] staging: Enable WIMAX_GDM72XX as modules
+    - gdmwm: Enable WIMAX_GDM72XX_USB, WIMAX_GDM72XX_USB_PM
+  * [x86] staging/media: Enable DVB_AS102, USB_MSI3101, MEDIA_TUNER_MSI001,
+    SOLO6X10 as modules
+  * [x86] dvb-usb-rtl28xxu: Enable DVB_RTL2832_SDR
+  * [x86] platform: Enable ALIENWARE_WMI, DELL_SMO8800, IBM_RTL,
+    SAMSUNG_Q10, INTEL_RST, INTEL_SMARTCONNECT (Closes: #749273), PVPANIC
+    as modules
+  * [x86] sony-laptop: Enable SONYPI_COMPAT
+  * [x86,ia64] firmware: Enable DMI_SYSFS
+  * [x86] Disable USB_SN9C102; this driver is deprecated in favour of the
+    gspca drivers
+  * [i386] usb/gadget: Enable USB_AMD5536UDC as module
+  * [i386] comedi: Enable COMEDI_AMPLC_DIO200_ISA, COMEDI_AMPLC_PC236_ISA,
+    COMEDI_AMPLC_PC263_ISA, COMEDI_DAS08_ISA, COMEDI_NI_LABPC_ISA as modules
+  * [i386] speakup: Enable SPEAKUP_SYNTH_DECPC as module
+  * [!x86] staging: Enable R8712U, R8188EU as modules (Closes: #742055, #760859)
+  * i2o: Disable I2O_EXT_ADAPTEC on 64-bit, as it assumes 32-bit virtual
+    addresses
+  * SCSI: aic94xx: Remove broken fallback for missing 'Ctrl-A' user settings
+  * udeb: Add ath6kl_sdio, libertas_cs, libertas_sdio, mwifiex_sdio,
+    r8192u_usb, r8723au, rtl8188eu, rtl818x_pci, rtl8723be, rtl8821ae,
+    spectrum_cs to nic-wireless-modules
+  * builddeb: put the dbg files into the correct directory
+  * [ppc64el] deb-pkg: Add support for powerpc little endian
+  * [armhf] deb-pkg: Add automatic support for armhf architecture
+  * debian/rules.real: Never make kernel-wedge errors non-fatal, as in
+    practice this meant we didn't see them until they appeared in unstable
+  * udeb: Fix typo in dependencies of speakup-modules (fixes FTBFS on
+    mips64el due to interaction with another bug in kernel-wedge)
+  * libceph: Apply critical fixes:
+    - set last_piece in ceph_msg_data_pages_cursor_init() correctly
+    - gracefully handle large reply messages from the mon
+    - add process_one_ticket() helper
+    - do not hard code max auth ticket len
+
+  [ Ian Campbell ]
+  * [armel/orion5x] udeb: Include mvmdio in nic-modules udeb.
+  * [arm64] Backport X-GENE Ethernet driver from v3.17-rcs
+  * [arm64] Including phy-xgene in sata-modules udeb since it is needed by
+    ahci_xgene.
+
+  [ Aurelien Jarno ]
+  * [mips64el] Drop loongson-2e and loongson-2f flavour as the minimum
+    supported ISA will be at least MIPS64.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 13 Sep 2014 03:49:53 +0100
+
+linux-tools (3.16-2) unstable; urgency=medium
+
+  * linux-kbuild: Change the type headers used for devicetable-offsets.c
+    to avoid depending on UAPI headers or <linux/types.h>.  This really
+    closes: #754213.  It also fixes modpost handling of input device IDs
+    when host and target have differing word size.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 09 Sep 2014 13:21:05 +0100
+
+linux-tools (3.16-1) unstable; urgency=medium
+
+  * New upstream release
+
+  [ Mauricio Faria de Oliveira ]
+  * [ppc64el] Build linux-tools binary package (Closes: #754213)
+
+  [ Ben Hutchings ]
+  * linux-kbuild: Build and install recordmcount and recordmcount.pl,
+    needed for kernels with DYNAMIC_FTRACE enabled
+  * linux-kbuild: Fix recordmcount dependency for OOT modules
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 08 Sep 2014 18:45:06 +0100
+
+linux (3.16.2-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [armel,mips*] udeb: Remove lzo-modules, as LZO_COMPRESS is now built-in
+    (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 08 Sep 2014 18:39:25 +0100
+
+linux (3.16.2-1) unstable; urgency=medium
+
+  * New upstream stable update (closes: #748615):
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.1
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.2
+    - isofs: Fix unbounded recursion when processing relocated directories
+      (CVE-2014-5471, CVE-2014-5472)
+    - kvm: iommu: fix the third parameter of kvm_iommu_put_pages
+      (CVE-2014-3601)
+
+  [ Ben Hutchings ]
+  * HID: Enable HID_RMI as module (Closes: #754519)
+  * Set ABI to 1
+  * [armhf,arm64] udeb: Add efi-modules
+  * ftrace: Enable more tracers (Closes: #563847, #758469):
+    - Enable FUNCTION_TRACER and DYNAMIC_FTRACE
+    - Enable FUNCTION_GRAPH_TRACER, FTRACE_SYSCALLS and STACK_TRACER 
+      (except on armel/kirkwood)
+  * [powerpc] drm: Disable DRM_RADEON_UMS, as radeon X driver now requires KMS
+  * aio: fix reqs_available handling (regression in 3.14.10)
+  * mm: Enable FRONTSWAP, ZSWAP (except armel/{ixp4xx,orion5x})
+    (Closes: #725703)
+  * [x86] mgag200: Enable auto-loading, but require mode-setting to be
+    explicitly enabled (as xserver-xorg-video-modesetting does)
+  * [armel] Remove obsolete mv78xx0 flavour
+  * virtio-scsi: Implement change_queue_depth for virtscsi targets
+    (Closes: #760324)
+  * sound/firewire: Enable SND_DICE, SND_FIREWORKS, SND_BEBOB as modules
+    (Closes: #756842)
+  * hid-sony: Enable SONY_FF (Closes: #760684)
+  * mtd: Enable MTD_SPI_NOR as module, since M25P80 now depends on it
+  * [m68k] Enable CGROUPS, required by systemd
+  * [armhf] Re-enable SPI_IMX as module
+  * [i386] comedi: Enable COMEDI_DAC02 as module, replacing COMEDI_POC
+  * sound: Disable SND_CS5535AUDIO on all but i386 and mips*/loongson-2f
+  * [mips*/loongson-2f] video: Re-add and enable sm7xxfb driver, removed
+    upstream in 3.15
+  * mnt: Fix flag handling on remount (CVE-2014-5206, CVE-2014-5207)
+    - mnt: Only change user settable mount flags in remount
+    - mnt: Move the test for MNT_LOCK_READONLY from change_mount_flags into
+      do_remount
+    - mnt: Correct permission checks in do_remount
+    - mnt: Change the default remount atime from relatime to the existing value
+    - mnt: Add tests for unprivileged remount cases that have found to be
+      faulty
+  * [armel/kirkwood] mm: Enable HIGHMEM (Closes: #760786)
+  * aufs: Update to aufs3.16-20140908:
+    - bugfix, missing mnt_want_write in moo
+    - new ioctl BRINFO
+    - bugfix, restore the lost unlock in an error path
+    - allow deleting a branch who has an opened dir
+    - bugfix, stop passing an error code to dput()
+    - possible bugfix, ptr in an array
+    - implement fhsm (not enabled)
+    - si_files has all opened files
+    - bugfix, use id instead of index to identify a branch
+    - new move-down flag AUFS_MVDOWN_FHSM_LOWER
+    - branch attr 'fhsm' is independent from rw/ro attrib
+    - support for a branch ro+fhsm
+    - fhsm notify after fixing inode attrib
+    - bugfix, hfile test in br_del_file()
+    - bugfix, pinning in mvdown
+    - bugfix, instantiate-revalidate race
+    - possible bugfix, temporary d_inode
+    - fhsm and br_del, allow the root dir only
+    - bugfix, get a removed dentry from an inode
+  * MAINTAINERS: Change aufs entry to say it's not upstream
+
+  [ Vagrant Cascadian ]
+  * [armmp] Enable IMX_IPUV3_CORE (closes: #756810).
+
+  [ Aurelien Jarno ]
+  * [mips*] Fix FP emulation for unaligned accesses.
+  * Update Spanish debconf template translations (Matias A. Bellone)
+    (Closes: #758591).
+  * [mips*/loongson3] Backport Loongson 3B support from 3.17.
+  * [powerpc,ppc64el] Backport KVM little endian support from 3.17.
+
+  [ maximilian attems ]
+  * Redisable UAS due to trouble with Seagate expansion drives
+    (closes: #755995, #759662), (reopen: #749014).
+
+  [ Ian Campbell ]
+  * [armhf] Remove incomplete list of hardware from image description. See
+    https://wiki.debian.org/DebianKernel/ARMMP for details.
+  * [armel/kirkwood] Enable CONFIG_MTD_SPI_NOR for flash access.
+
+  * [ppc64el] debian/patches/debian/ppc64el-disable-zImage.patch: remove patch.
+    The 'powerpc/boot: 64bit little endian wrapper' patch-set is in linux 3.16,
+    thus the default make/image-y target is OK now.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 08 Sep 2014 03:17:11 +0100
+
+linux (3.16-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.16
+
+  [ Aurelien Jarno ]
+  * [x86] vfio: Enable VFIO_PCI_VGA.
+  * udeb: rename crc32c.ko into crc32c_generic.ko in crc-modules.
+  * [mips*] Fix FP emulation.
+  * [mips*/loongson3] Enable TRANSPARENT_HUGEPAGE.
+
+  [ Bastian Blank ]
+  * [x86] Enable Xen PVH support.
+  * Enable more Nftables modules.
+  * [x86] Enable EARLY_PRINTK_EFI.
+  * Enable stack protector on all supported architectures. (closes: #756898)
+  * [powerpc64, s390x] Enable PCI hotplug.
+  * Enable RTL8723BE.
+  * Enable OPROFILE.
+  * [ppc64] Enable 64KiB pages.
+
+  [ Ben Hutchings ]
+  * udeb: Add new sound drivers to sound-modules (thanks to Samuel Thibault)
+    (Closes: #756998)
+  * [armhf] touchscreen: Enable TOUCHSCREEN_SUN4I as module (Closes: #757086)
+  * [!alpha,m68k,x86] Disable USELIB, only needed by libc5
+  * [arm*,ia64,ppc64el,s390*,sh4] Disable SYSFS_SYSCALL, only needed for
+    SVR4 compatibility
+  * [armel] Disable BINFMT_AOUT
+  * [armel] Re-enable ixp4xx flavour
+  * [armel] Change configuration to reduce kernel image size
+    - [/kirkwood] Change IPV6 to module
+    - [/ixp4xx,orion5x] Change IOSCHED_DEADLINE to module
+    - [/ixp4xx,orion5x] Disable SECURITY (i.e. Linux Security Modules,
+      including SELinux)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 09 Aug 2014 21:58:12 +0100
+
+linux-tools (3.16~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * genorig: Include new directory for usbip UAPI header
+  * debian/control: Update Build-Depends for usbip switching from
+    libsysfs to libudev
+  * perf: Build with V=1 as V=2 no longer works
+  * perf: Change build command to avoid a rebuild during 'make install'
+  * linux-tools: Install traceevent plugins in
+    /usr/lib/traceevent_<version>/plugins (Closes: #756429)
+  * linux-kbuild: Install scripts/Makefile.extrawarn
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 29 Jul 2014 21:11:10 +0100
+
+linux (3.16~rc6-1~exp1) experimental; urgency=medium
+
+  * New upstream rc
+
+  [ Aurelien Jarno ]
+  * [mipsel/loongson3] Enable SND_HDA_INTEL.
+  * [mips/4kc-malta, mips/5kc-malta] Cleanup configuration file.
+  * [mips/sb1-bcm91250a] Cleanup configuration file.
+  * [mips/r4k-ip22] Cleanup configuration file.
+  * [mips/r5k-ip32] Cleanup configuration file.
+  * [mips64,mips64el] Add a 5kc-malta flavour.
+
+  [ Ben Hutchings ]
+  * [x86] wireless: Enable R8192EE as module (Closes: #755310)
+  * net: Re-enable CGROUP_NET_PRIO as builtin
+
+ -- maximilian attems <maks@debian.org>  Mon, 21 Jul 2014 21:51:45 +0200
+
+linux (3.16~rc5-1~exp1) experimental; urgency=medium
+
+  [ maximilian attems ]
+  * New upstream rc
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20140714:
+    - tiny, no msg in spinlock regeion
+    - minor bugfix, correct error value in link(2)
+    - O_TMPFILE support
+    - bugfix, handling an error in opening a FIFO
+    - propagate aufs file references to new vmas created by remap_file_pages()
+    - begin supporting fallocate(2)
+    - linux-3.16, convert iovec into iov_iter
+    - allow an unprivileged mount under user_ns (enabled by module parameter)
+    - simply handing attribute string
+    - add mount option for copy-up on open
+    - add mount option for move-up on open
+    - add dirperm1 mount option
+    - mvdown, return a subset of statfs(2) optionally
+    - mvdown, tell about the branch is at the bottom
+
+ -- maximilian attems <maks@debian.org>  Tue, 15 Jul 2014 22:57:31 +0200
+
+linux (3.15.5-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.4
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.5
+
+ -- maximilian attems <maks@debian.org>  Thu, 10 Jul 2014 16:02:29 +0200
+
+linux (3.15.3-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.3
+
+  [ Yunqiang Su ]
+  * [mips,mipsel] Move common MIPS kernel config files to kernelarch-mips.
+  * [mips,mipsel] Clean mipsel installer by using symlinks to the mips
+    versions.
+  * [mips,mipsel] Add mips64 and mips64el support (Closes: #749688).
+
+ -- maximilian attems <maks@debian.org>  Wed, 02 Jul 2014 20:30:41 +0200
+
+linux (3.15.1-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.15
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.1
+
+  [ maximilian attems ]
+  * Update policy version to 3.9.5 without changes
+
+  [ Ian Campbell ]
+  * [armhf] Enable HDMI on imx6qdl-wandboard, SolidRun HummingBoard and
+    Cubox -i. (Closes: #750406)
+
+  [ Ben Hutchings ]
+  * [powerpc] Build-depend on gcc-4.8 (>= 4.8.2-1) to ensure that
+    JUMP_LABEL works
+
+ -- maximilian attems <maks@debian.org>  Fri, 20 Jun 2014 23:13:13 +0200
+
+linux (3.15~rc8-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ian Campbell ]
+  * [armhf] Enable Broadcom IEEE802.11n embedded FullMAC WLAN driver
+    (Closes: #734430)
+  * [armhf] Backport and enable sunxi MMC driver (Closes: #749484)
+
+ -- maximilian attems <maks@debian.org>  Tue, 03 Jun 2014 11:43:26 +0200
+
+linux (3.15~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ maximilian attems ]
+  * Enable USB_UAS in topconfig (closes: #749014)
+
+  [ Ian Campbell ]
+  * [armhf] Enable SERIAL_OF_PLATFORM.
+  * [armhf] Enable DRM drivers DRM_IMX_* for IMX platform (Closes: #748406)
+  * [armhf] Enable SND_SOC_IMX_SPDIF (Closes: #748890)
+
+ -- maximilian attems <maks@debian.org>  Tue, 27 May 2014 10:55:32 +0200
+
+linux (3.15~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20140421
+  * [rt] Disable until it is updated for 3.15 or later
+
+  [ Aurelien Jarno ]
+  * [mipsel] Add a loongson-3 flavour to support Loongson 3A/3B machines.
+  * [mips/mipsel] Remove the sb1a-bcm91480b flavour.
+
+  [ Ian Campbell ]
+  * [armel/orion5x] Disable BPF_JIT, MEMCG, USER_NS to reduce kernel
+    size.
+  * [armel/kirkwood] Enable PCI_MVEBU for PCI support when booted via Device
+    Tree.
+
+ -- maximilian attems <maks@debian.org>  Fri, 16 May 2014 14:33:57 +0200
+
+linux (3.14.15-2) unstable; urgency=medium
+
+  [ Aurelien Jarno ]
+  * [mips*/4kc-malta] Remove ABI reference as previous kernels were not
+    really usable, and the fix changes the ABI.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 09 Aug 2014 01:09:38 +0100
+
+linux (3.14.15-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.14
+    - Bluetooth: Ignore H5 non-link packets in non-active state
+    - fuse: timeout comparison fix
+    - tracing: instance_rmdir() leaks ftrace_event_file->filter
+      (regression in 3.11)
+    - xen/balloon: set ballooned out pages as invalid in p2m
+      (regression in 3.12)
+    - quota: missing lock in dqcache_shrink_scan() (regression in 3.12)
+    - shmem: fix faulting into a hole, not taking i_mutex (CVE-2014-4171)
+    - shmem: fix splicing from a hole while it's punched (CVE-2014-4171)
+    - e1000e: Fix SHRA register access for 82579 (regression in 3.12)
+    - ip_tunnel: fix ip_tunnel_lookup
+    - net: sctp: check proc_dointvec result in proc_sctp_do_auth
+    - 8021q: fix a potential memory leak
+    - net: fix UDP tunnel GSO of frag_list GRO packets
+    - ipv4: fix dst race in sk_dst_get()
+    - ipv4: irq safe sk_dst_[re]set() and ipv4_sk_update_pmtu() fix
+    - bnx2x: fix possible panic under memory stress
+    - tcp: Fix divide by zero when pushing during tcp-repair
+    - ipv4: icmp: Fix pMTU handling for rare case
+    - net: Fix NETDEV_CHANGE notifier usage causing spurious arp flush
+      (regression in 3.11)
+    - igmp: fix the problem when mc leave group
+    - appletalk: Fix socket referencing in skb
+    - netlink: Fix handling of error from netlink_dump().
+    - tipc: clear 'next'-pointer of message fragments before reassembly
+      (regression in 3.13)
+    - net: sctp: fix information leaks in ulpevent layer
+    - bonding: fix ad_select module param check (regression in 3.14)
+    - net-gre-gro: Fix a bug that breaks the forwarding path
+      (regression in 3.14)
+    - perf/x86/intel: ignore CondChgd bit to avoid false NMI handling
+    - mwifiex: fix Tx timeout issue
+    - [x86] tsc: Fix cpufreq lockup (regression in 3.14)
+    - dm thin metadata: do not allow the data block size to change
+    - dm cache metadata: do not allow the data block size to change
+    - locking/mutex: Disable optimistic spinning on some architectures
+    - sched: Fix possible divide by zero in avg_atom() calculation
+    - aio: protect reqs_available updates from changes in interrupt handlers
+      (regression in 3.14.10)
+    - Don't trigger congestion wait on dirty-but-not-writeout pages
+      (regression in 3.11)
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.15
+    - nfs: only show Posix ACLs in listxattr if actually present
+      (regression in 3.14)
+    - block: don't assume last put of shared tags is for the host
+    - libata: support the ata host which implements a queue depth less than 32
+      (regression in 3.14.4)
+    - libata: introduce ata_host->n_tags to avoid oops on SAS controllers
+    - blkcg: don't call into policy draining if root_blkg is already gone
+    - coredump: fix the setting of PF_DUMPCORE
+    - [hppa] Remove SA_RESTORER define
+    - hwmon: (smsc47m192) Fix temperature limit and vrm write operations
+    - fs: umount on symlink leaks mnt count (CVE-2014-5045)
+    - [x86] x86_32, entry: Store badsys error code in %eax
+      (regression in 3.14.10)
+    - drm/radeon: fix irq ring buffer overflow handling (regression in 3.14)
+    - mm: hugetlb: fix copy_hugetlb_page_range() (regression in 3.14.12)
+    - [x86] efi: Include a .bss section within the PE/COFF headers
+    - nl80211: move set_qos_map command into split state (regression in 3.14)
+    - platform_get_irq: Revert to platform_get_resource if of_irq_get fails
+      (regression in 3.14.6)
+
+  [ Aurelien Jarno ]
+  * Update German debconf template translations (Holger Wansing) (Closes:
+    #756049).
+  * Update French debconf template translations (David Prévot) (Closes:
+    #756134).
+  * Rewrite postinst to not require File::stat perl module (Closes: #756207).
+  * [mips*] Avoid smp_processor_id() in preemptible code.
+  * [mips*/octeon] Fix /proc/cpuinfo issues.
+  * [mips,mipsel/4kc-malta] Fix bug which can cause incorrect system call
+    restarts (fix hang on boot).
+  * [mips*] Fix hugepage support on machines with R4K like TLB.
+  * [mips*] Prevent user from setting FCSR cause bits and cause possible
+    kernel oops.
+  * Update Japanese debconf template translations (Victory).
+
+  [ Ben Hutchings ]
+  * [amd64] Reject x32 executables if x32 ABI not supported
+  * [amd64] Make x32 syscall support conditional on a kernel parameter
+  * [amd64] Enable X86_X32 (Closes: #708070) and X86_X32_DISABLED.
+    Use the kernel parameter "syscall.x32=y" to enable support for x32.
+  * [s390,s390x] 3215: fix hanging console issue (Closes: #747922)
+  * [armhf] Enable BRCMFMAC, BRCMFMAC_SDIO as modules (Closes: #734430)
+  * net: sctp: inherit auth_capable on INIT collisions (CVE-2014-5077)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 07 Aug 2014 16:47:21 +0100
+
+linux (3.14.13-2) unstable; urgency=medium
+
+  [ Aurelien Jarno ]
+  * [mips64,mips64el] Really enable mips64 and mips64el architectures.
+  * [mips64,mips64el] Build udebs for 5kc-malta flavour. 
+  * [mipsel,mips64el/loongson-3] Disable not built modules in nic-modules,
+    scsi-common-modules, scsi-extra-modules, scsi-modules (fixes FTBFS).
+  * Add scsi_transport_sas and scsi_transport_spi to scsi-core-modules udeb
+    as optional so that these modules do not end up in two different udebs
+    as dependencies. Remove them from the i386, ia64, powerpc and sparc
+    definition.
+  * [mipsel,mips64el/loongson-2e,2f] Enable CONFIG_RTC_DRV_CMOS as built-in.
+  * [mips*] Add few new udebs and use standard udebs configuration when
+    possible.
+  * [s390,s390x] ptrace: fix PSW mask check (CVE-2014-3534).
+  * [mipsel,mips64el/loongson-3] Enable PREEMPT instead of PREEMPT_VOLUNTARY
+    as it workarounds SMP issues.
+
+ -- Aurelien Jarno <aurel32@debian.org>  Thu, 24 Jul 2014 21:05:08 +0200
+
+linux (3.14.13-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.13
+    - iio: ti_am335x_adc: Fix: Use same step id at FIFOs both ends
+      (regression in 3.11)
+    - [hppa] Do not hardcode maximum userspace stack size (regression in 3.14)
+    - workqueue: fix dev_set_uevent_suppress() imbalance (regression in 3.10)
+    - workqueue: zero cpumask of wq_numa_possible_cpumask on init
+      (regression in 3.10)
+    - i8k: Fix non-SMP operation (regression in 3.14)
+    - Revert "ACPI / AC: Remove AC's proc directory." (regression in 3.13)
+    - ACPI / resources: only reject zero length resources based at address zero
+      (regression in 3.14)
+    - ACPI / EC: Avoid race condition related to advance_transaction()
+    - ACPI / EC: Fix race condition in ec_transaction_completed()
+    - [x86] crypto: sha512_ssse3 - fix byte count to bit count conversion
+    - [arm64] implement TASK_SIZE_OF
+    - phy: core: Fix error path in phy_create()
+    - dm io: fix a race condition in the wake up code for sync_io
+    - [x86] intel_pstate: Fix setting VID (regression in 3.14.6)
+    - PCI: Fix unaligned access in AF transaction pending test
+      (regression in 3.14)
+    - ext4: fix unjournalled bg descriptor while initializing inode bitmap
+    - ext4: fix a potential deadlock in __ext4_es_shrink()
+    - drm/radeon: stop poisoning the GART TLB
+    - [x86] drm/i915: Don't clobber the GTT when it's within stolen memory
+
+  [ Ian Campbell ]
+  * [armel] Remove drivers/net/phy configs which are redundant with toplevel.
+  * [armhf] Add MMC and NIC modules for BeagleBone Black to udebs.
+    (Closes: #754491)
+  * [arm64] Add xfs-modules udeb and add xen-netfront to nic-modules udeb.
+  * aufs: Fix build on arm64.
+
+  [ Aurelien Jarno ]
+  * [mips,mipsel] Add a debconf note to warn users that they have to
+    configure the system bootloader to load initramfs.
+  * Update Polish debconf template translations (Łukasz Dulny).
+  * Update Czech debconf template translations (Michal Simunek) (Closes:
+    #755060).
+  * Update Russian debconf template translations (Yuri Kozlov) (Closes:
+    #755085).
+  * Update Portuguese debconf template translations (Américo Monteiro)
+    (Closes: #755100).
+  * Update Swedish debconf template translations (Martin Bagge) (Closes:
+    #755145).
+  * Update Slovak debconf template translation (Slavko) (Closes: #755152).
+  * Update Turkish debconf template translation (Mert Dirik) (Closes:
+    #755223).
+  * Update Danish debconf template translation (Joe Dalton) (Closes:
+    #755400).
+  * [mips,mipsel] Cleanup configuration files.
+  * [mips,mipsel] Move common MIPS kernel config files to kernelarch-mips.
+  * [mips,mipsel] Clean mipsel installer by using symlinks to the mips
+    versions.
+  * [mipsel] Backport Loongson 3A/3B support from 3.15 and add the
+    corresponding flavour.
+  * [mips,mipsel] Remove the sb1a-bcm91480b flavour.
+  * [mips,mipsel] Add mips64 and mips64el support (Closes: #749688).
+  * [mips/octeon] Backport from upstream PCIe2 support and interface
+    mode detection for Octeon.
+  * [mips/sb1-91250a] Backport from upstream additional build flags
+    to fix excessive kernel warnings.
+  * [mips/malta] Backport from upstream power management support for
+    Malta.
+  * [mipsel/loongson3] Add support for Loongson 3 LS3A RS780E 1-way
+    boards.
+
+  [ Ben Hutchings ]
+  * net/l2tp: don't fall back on UDP [get|set]sockopt (CVE-2014-4943)
+  * Bump ABI to 2 (Closes: #754902)
+  * [powerpc/powerpc64] Re-enable JUMP_LABEL
+  * [powerpc/powerpc64,ppc64] Enable PPC_TRANSACTIONAL_MEM
+  * Enable DYNAMIC_DEBUG (except for armel/orion5x) (Closes: #694884)
+  * [rt] Update to 3.14.12-rt9 (no functional changes)
+  * udeb: Add sdhci-acpi to mmc-modules (Closes: #747284)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 21 Jul 2014 14:02:14 +0100
+
+linux (3.14.12-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.11
+    - iscsi-target: Avoid rejecting incorrect ITT for Data-Out
+    - iscsi-target: Explicily clear login response PDU in exception path
+      (regression in 3.10)
+    - iscsi-target: fix iscsit_del_np deadlock on unload (regression in 3.13)
+    - Input: synaptics - fix resolution for manually provided min/max
+      (regression in 3.14)
+    - [mips] MSC: Prevent out-of-bounds writes to MIPS SC ioremap'd region
+    - UBIFS: fix an mmap and fsync race condition
+    - UBIFS: Remove incorrect assertion in shrink_tnc()
+    - IB/ipath: Translate legacy diagpkt into newer extended diagpkt
+    - IB/srp: Fix a sporadic crash triggered by cable pulling
+    - IB/umad: Fix error handling
+    - IB/umad: Fix use-after-free on close
+    - nfsd4: fix FREE_STATEID lockowner leak (regression in 3.14.6)
+    - nfsd: getattr for FATTR4_WORD0_FILES_AVAIL needs the statfs buffer
+    - NFS: Don't declare inode uptodate unless all attributes were checked
+    - nfs: Fix cache_validity check in nfs_write_pageuptodate()
+    - [powerpc] mm: Check paca psize is up to date for huge mappings
+    - [powerpc] perf: Ensure all EBB register state is cleared on fork()
+    - xfs: xfs_readsb needs to check for magic numbers (regression in 3.14)
+    - reiserfs: call truncate_setsize under tailpack mutex
+    - ipvs: Fix panic due to non-linear skb
+    - tracing: Fix syscall_*regfunc() vs copy_process() race
+    - ALSA: usb-audio: Fix races at disconnection and PCM closing
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.12
+    - [powerpc] ibmvscsi: Abort init sequence during error recovery
+    - [powerpc] ibmvscsi: Add memory barriers for send / receive
+    - virtio-scsi: avoid cancelling uninitialized work items
+    - scsi_error: fix invalid setting of host byte
+    - virtio-scsi: fix various bad behavior on aborted requests
+    - xhci: Use correct SLOT ID when handling a reset device command
+      (regression in 3.13)
+    - usb: chipidea: udc: delete td from req's td list at ep_dequeue
+    - mtd: eLBC NAND: fix subpage write support (regression in 3.10)
+    - mtd: nand: omap: fix BCHx ecc.correct to return detected bit-flips in
+      erased-page
+    - [x86] drm/i915: Avoid div-by-zero when pixel_multiplier is zero
+      (regression in 3.13)
+    - [x86] drm/i915: set backlight duty cycle after backlight enable for gen4
+      (regression in 3.14)
+    - Bluetooth: Fix SSP acceptor just-works confirmation without MITM
+    - Bluetooth: Fix check for connection encryption
+    - rbd: use reference counts for image requests
+    - rbd: handle parent_overlap on writes correctly
+    - mac80211: fix a memory leak on sta rate selection table
+      (regression in 3.10)
+    - hugetlb: fix copy_hugetlb_page_range() to handle migration/hwpoisoned
+      entry
+    - [arm64] mm: Make icache synchronisation logic huge page aware
+    - [arm64] Bug fix in stack alignment exception
+    - fs/cifs: fix regression in cifs_create_mf_symlink() (regression in 3.14)
+    - blkcg: fix use-after-free in __blkg_release_rcu() by making
+      blkcg_gq refcnt an atomic_t
+    - ext4: Fix buffer double free in ext4_alloc_branch()
+    - ext4: Fix hole punching for files with indirect blocks
+    - [x86] KVM: preserve the high 32-bits of the PAT register
+    - [x86] kvm: fix wrong address when writing Hyper-V tsc page
+    - nfsd: fix rare symlink decoding bug
+    - tracing: Remove ftrace_stop/start() from reading the trace file
+    - md: flush writes before starting a recovery.
+    - mlx4_core: Fix incorrect FLAGS1 bitmap test in mlx4_QUERY_FUNC_CAP
+      (regression in 3.14)
+    - netfilter: nf_nat: fix oops on netns removal
+    - brcmfmac: Fix brcmf_chip_ai_coredisable not applying reset bits to
+      BCMA_IOCTL (regression in 3.14)
+    - mmc: rtsx: add R1-no-CRC mmc command type handle (regression in 3.13)
+    - aio: block io_destroy() until all context requests are completed
+      (regression in 3.11)
+    - audit: remove superfluous new- prefix in AUDIT_LOGIN messages
+      (regression in 3.14)
+    - mm/numa: Remove BUG_ON() in __handle_mm_fault() (regression in 3.13)
+    - slab: fix oops when reading /proc/slab_allocators
+    - sym53c8xx_2: Set DID_REQUEUE return code when aborting squeue
+    - mm: fix crashes from mbind() merging vmas
+
+  [ Ben Hutchings ]
+  * [rt] Update to 3.14.10-rt7:
+    - rtmutex: Resolve conflicts with changes in 3.14.10
+    - sched: Do not clear PF_NO_SETAFFINITY flag in select_fallback_rq()
+    - workqueue: Prevent deadlock/stall on RT
+  * [rt] random: Restore interrupt randomness dropped in 3.14.10-rt6
+  * [s390,s390x] Ignore ABI change in lowcore structure (fixes FTBFS)
+  * [m68k] block: Change IOSCHED_CFQ to built-in and make it the default
+    I/O scheduler, consistent with other architectures
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 11 Jul 2014 17:56:20 +0100
+
+linux (3.14.10-1) unstable; urgency=high
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.10
+    - [s390] af_iucv: wrong mapping of sent and confirmed skbs
+    - Staging: rtl8188eu: overflow in update_sta_support_rate()
+    - USB: option: fix runtime PM handling
+    - hugetlb: restrict hugepage_migration_support() to x86_64
+    - kthread: fix return value of kthread_create() upon SIGKILL.
+    - mm/memory-failure.c-failure: send right signal code to correct thread
+    - mm/memory-failure.c: don't let collect_procs() skip over processes for
+      MF_ACTION_REQUIRED
+    - ptrace: fix fork event messages across pid namespaces
+    - idr: fix overflow bug during maximum ID calculation at maximum height
+    - [s390] time: cast tv_nsec to u64 prior to shift in update_vsyscall
+      (regression in 3.13)
+    - [s390] lowcore: reserve 96 bytes for IRB in lowcore
+    - ext4: fix data integrity sync in ordered mode
+    - ext4: fix zeroing of page during writeback
+    - ext4: fix wrong assert in ext4_mb_normalize_request()
+    - USB: usb_wwan: fix race between write and resume
+    - USB: usb_wwan: fix write and suspend race
+    - USB: usb_wwan: fix urb leak at shutdown
+    - USB: sierra: fix use after free at suspend/resume
+    - USB: sierra: fix remote wakeup
+    - USB: serial: fix potential runtime pm imbalance at device remove
+    - media: stk1160: Avoid stack-allocated buffer for control URBs
+    - rtmutex: Detect changes in the pi lock chain
+    - rtmutex: Handle deadlock detection smarter
+    - rtmutex: Plug slow unlock race
+    - media: uvcvideo: Fix clock param realtime setting
+    - media: saa7134: fix regression with tvtime (regression in 3.14)
+    - Bluetooth: Fix L2CAP deadlock
+    - Target/iser: Wait for proper cleanup before unloading
+    - target: Set CMD_T_ACTIVE bit for Task Management Requests
+    - target: Use complete_all for se_cmd->t_transport_stop_comp
+    - iscsi-target: Fix ABORT_TASK + connection reset iscsi_queue_req memory
+      leak
+    - target: Explicitly clear ramdisk_mcp backend pages
+    - [x86] x86-32, espfix: Remove filter for espfix32 due to race
+    - aio: fix aio request leak when events are reaped by userspace
+    - aio: fix kernel memory disclosure in io_getevents() introduced in v3.10
+      (CVE-2014-0206)
+    - CIFS: Fix memory leaks in SMB2_open
+    - Btrfs: fix double free in find_lock_delalloc_range
+    - Btrfs: make sure there are not any read requests before stopping workers
+    - Btrfs: mark mapping with error flag to report errors to userspace
+    - Btrfs: set right total device count for seeding support
+    - fs: btrfs: volumes.c: Fix for possible null pointer dereference
+    - Btrfs: don't check nodes for extent items
+    - Btrfs: fix scrub_print_warning to handle skinny metadata extents
+    - btrfs: fix use of uninit "ret" in end_extent_writepage()
+    - btrfs: allocate raid type kobjects dynamically
+    - lz4: fix another possible overrun
+    - epoll: fix use-after-free in eventpoll_release_file
+    - builddeb: use $OBJCOPY variable instead of objcopy (regression in 3.12)
+    - [i386] efi-pstore: Fix an overflow on 32-bit builds
+
+  [ Ben Hutchings ]
+  * [amd64] ptrace,x86: force IRET path after a ptrace_stop() (CVE-2014-4699)
+  * shmem: fix faulting into a hole while it's punched (CVE-2014-4171)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 07 Jul 2014 09:54:10 +0100
+
+linux (3.14.9-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.8
+    - Target/iscsi,iser: Avoid accepting transport connections during stop
+      stage
+    - iser-target: Fix multi network portal shutdown regression
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.9
+    - target: Fix NULL pointer dereference for XCOPY in target_put_sess_cmd
+      (regression in 3.14.6)
+    - iscsi-target: Reject mutual authentication with reflected CHAP_C
+    - ima: audit log files opened with O_DIRECT flag
+    - ima: introduce ima_kernel_read() (regression in 3.10)
+    - evm: prohibit userspace writing 'security.evm' HMAC value
+    - net: Use netlink_ns_capable to verify the permisions of netlink messages
+      (CVE-2014-0181)
+    - netlink: Only check file credentials for implicit destinations
+    - qlcnic: info leak in qlcnic_dcb_peer_app_info()
+    - ipv6: Fix regression caused by efe4208 in udp_v6_mcast_next()
+      (regression in 3.13)
+    - netlink: rate-limit leftover bytes warning and print process name
+    - bridge: Prevent insertion of FDB entry with disallowed vlan
+    - net: tunnels - enable module autoloading
+    - [sparc] net: filter: fix typo in sparc BPF JIT
+    - sfc: PIO:Restrict to 64bit arch and use 64-bit writes.
+      (regression in 3.13)
+    - ipv4: fix a race in ip4_datagram_release_cb()
+    - sctp: Fix sk_ack_backlog wrap-around problem
+    - udp: ipv4: do not waste time in __udp4_lib_mcast_demux_lookup
+      (regression in 3.13)
+    - USB: cdc-acm: Fix various bugs in power management
+    - USB: cdc-acm: fix I/O after failed open
+    - [x86] hv: use correct order when freeing monitor_pages
+    - ASoC: dapm: Make sure to always update the DAPM graph in _put_volsw()
+      (regression in 3.12)
+    - lzo: properly check for overruns (CVE-2014-4608)
+    - lz4: ensure length does not wrap (CVE-2014-4608)
+    - ALSA: compress: Cancel the optimization of compiler and fix the size of
+      struct for all platform.
+    - ALSA: control: Protect user controls against concurrent access
+      (CVE-2014-4652)
+    - ALSA: control: Fix replacing user controls (CVE-2014-4654, CVE-2014-4655)
+    - ALSA: control: Don't access controls outside of protected regions
+      (CVE-2014-4653)
+    - ALSA: control: Make sure that id->index does not overflow;
+      Handle numid overflow (CVE-2014-4656)
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.14-20140616:
+    - tiny, no msg in spinlock regeion
+    - minor bugfix, correct error value in link(2)
+    - O_TMPFILE support
+    - bugfix, handling an error in opening a FIFO
+    - propagate aufs file references to new vmas created by remap_file_pages()
+  * linux-image: Make initramfs support unconditional
+  * [x86] x86_32, entry: Do syscall exit work on badsys (CVE-2014-4508)
+  * [rt] Fix latency histogram after "hrtimer: Set expiry time before
+    switch_hrtimer_base()" in 3.14.6
+
+  [ Aurelien Jarno ]
+  * [arm64] Enable COMPAT to support 32-bit binaries.
+  * [mips,mipsel] Enable initramfs for all flavours, but keep the disk
+    related drivers built-in for now.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 30 Jun 2014 13:57:11 +0100
+
+linux (3.14.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.6
+    - [mipsel] loongson2_cpufreq: Fix CPU clock rate setting
+      (regression in 3.14)
+    - rtmutex: Fix deadlock detector for real
+    - kernfs: add back missing error check in kernfs_fop_mmap()
+      (regression in 3.14)
+    - coredump: fix va_list corruption (regression in 3.11)
+    - mm: make fixup_user_fault() check the vma access rights too
+    - serial: 8250: Fix thread unsafe __dma_tx_complete function
+    - 8250_core: Fix unwanted TX chars write
+    - iwlwifi: 7000: bump API to 9
+    - timer: Prevent overflow in apply_slack
+    - cfg80211: free sme on connection failures (regression in 3.11)
+    - cfg80211: add cfg80211_sched_scan_stopped_rtnl (regression in 3.14)
+    - mac80211: fix nested rtnl locking on ieee80211_reconfig
+      (regression in 3.14)
+    - mm, thp: close race between mremap() and split_huge_page()
+    - [x86] mm, hugetlb: Add missing TLB page invalidation for hugetlb_cow()
+    - hwpoison, hugetlb: lock_page/unlock_page does not match for handling a
+      free hugepage
+    - iwlwifi: mvm: delay enabling smart FIFO until after beacon RX
+      (regression in 3.14)
+    - aio: fix potential leak in aio_run_iocb().
+    - Revert "hwmon: (coretemp) Refine TjMax detection"
+    - hrtimer: Prevent remote enqueue of leftmost timers
+    - hrtimer: Set expiry time before switch_hrtimer_base()
+    - dm verity: fix biovecs hash calculation regression (regression in 3.14)
+    - dm cache: fix writethrough mode quiescing in cache_map
+      (regression in 3.13)
+    - md/raid10: call wait_barrier() for each request submitted.
+      (regression in 3.14)
+    - PNP / ACPI: Do not return errors if _DIS or _SRS are not present
+      (regression in 3.14)
+    - ACPI / EC: Process rather than discard events in acpi_ec_clear
+      (regression in 3.13.7, 3.14)
+    - irqchip: armada-370-xp: fix invalid cast of signed value into unsigned
+      variable (regression in 3.13)
+    - irqchip: armada-370-xp: implement the ->check_device() msi_chip
+      operation (regression in 3.13)
+    - irqchip: armada-370-xp: Fix releasing of MSIs (regression in 3.13)
+    - [x86] drm/i915: Allow user modes to exceed DVI 165MHz limit
+      (regression in 3.14)
+    - [x86] drm/i915: Don't check gmch state on inherited configs
+      (regression in 3.13?)
+    - [x86] drm/i915: Don't WARN nor handle unexpected hpd interrupts on gmch
+      platforms (regression in 3.13)
+    - [x86] drm/radeon: fix runpm handling on APUs (v4) (regression in 3.13)
+    - drm/radeon: disable mclk dpm on R7 260X (regression in 3.14)
+    - drm/radeon: add support for newer mc ucode on SI (v2)
+    - drm/radeon: add support for newer mc ucode on CI (v2)
+    - drm/radeon: re-enable mclk dpm on R7 260X asics
+    - drm/radeon/uvd: use lower clocks on old UVD to boot v2
+      (regression in 3.13)
+    - drm/radeon: check buffer relocation offset
+    - USB: Nokia 305 should be treated as unusual dev
+    - USB: Nokia 5300 should be treated as unusual dev
+    - Revert "Bluetooth: Enable autosuspend for Intel Bluetooth device"
+      (regression in 3.14)
+    - posix_acl: handle NULL ACL in posix_acl_equiv_mode
+    - fs/affs/super.c: bugfix / double free (regression in 3.14)
+    - [armel/orion5x] fix target ID for crypto SRAM window
+      (regression in 3.12)
+    - [armel/kirkwood]: dts: fix mislocated pcie-controller nodes
+      (regression in 3.12)
+    - [armhf/armmp-lpae] 8012/1: kdump: Avoid overflow when converting pfn to
+      physaddr
+    - drm/nouveau: fix another lock unbalance in nouveau_crtc_page_flip
+      (regression in 3.11)
+    - drm/i915/vlv: reset VLV media force wake request register
+      (regression in 3.14?)
+    - i40e: potential array underflow in i40e_vc_process_vf_msg()
+    - igb: Fix Null-pointer dereference in igb_reset_q_vector
+      (regression in 3.14)
+    - igb: Unset IGB_FLAG_HAS_MSIX-flag when falling back to msi-only
+      (regression in 3.14)
+    - leds: leds-pwm: properly clean up after probe failure
+    - device_cgroup: rework device access check and exception checking
+    - device_cgroup: check if exception removal is allowed
+    - media: media-device: fix infoleak in ioctl media_enum_entities()
+      (CVE-2014-1739)
+    - Input: Add INPUT_PROP_TOPBUTTONPAD device property
+    - Input: synaptics - report INPUT_PROP_TOPBUTTONPAD property
+    - e1000e: Fix no connectivity when driver loaded with cable out
+      (regression in 3.12)
+    - autofs: fix lockref lookup
+    - vfs: fix races between __d_instantiate() and checks of dentry flags
+    - ALSA: hda - hdmi: Set converter channel count even without sink
+      (regression in 3.13)
+    - NFSd: Move default initialisers from create_client() to alloc_client()
+    - NFSd: call rpc_destroy_wait_queue() from free_client()
+    - NFSD: Call ->set_acl with a NULL ACL structure if no entries
+    - nfsd4: remove lockowner when removing lock stateid
+    - workqueue: fix bugs in wq_update_unbound_numa() failure path
+    - workqueue: fix a possible race condition between rescuer and pwq-release
+    - [arm] mvebu: mvebu-soc-id: add missing clk_put() call
+      (regression in 3.14)
+    - [arm] mvebu: mvebu-soc-id: keep clock enabled if PCIe unit is enabled
+      (regression in 3.14)
+    - ASoC: dapm: Skip CODEC<->CODEC links in connect_dai_link_widgets()
+      (regression in 3.14)
+    - [hppa] ratelimit userspace segfault printing
+    - [amd64] modify_ldt: Make support for 16-bit segments a runtime option
+    - sysfs: make sure read buffer is zeroed (possible regression in 3.13)
+    - Target/iser: Fix wrong connection requests list addition
+    - Target/iser: Fix iscsit_accept_np and rdma_cm racy flow
+    - iscsi-target: Change BUG_ON to REJECT in iscsit_process_nop_out
+      (regression in 3.11)
+    - target: fix memory leak on XCOPY
+    - [x86] drm/i915: Disable self-refresh for untiled fbs on i915gm
+      (regression in 3.14)
+    - [x86] drm/i915: move power domain init earlier during system resume
+      (regression in 3.14?)
+    - [x86] drm/i915: Fix unsafe loop iteration over vma whilst unbinding them
+      (regression in 3.12)
+    - iwlwifi: mvm: BT Coex - fix Look Up Table (regression in 3.13)
+    - PCI: Wrong register used to check pending traffic (regression in 3.14)
+    - dm crypt: fix cpu hotplug crash by removing per-cpu structure
+    - dm thin: allow metadata commit if pool is in PM_OUT_OF_DATA_SPACE mode
+      (regression in 3.14)
+    - dm thin: add timeout to stop out-of-data-space mode holding IO forever
+    - dmaengine: fix dmaengine_unmap failure
+    - dma: mv_xor: Flush descriptors before activating a channel
+    - tcm_fc: Fix free-after-use regression in ft_free_cmd
+      (regression in 3.13)
+    - ACPICA: Tables: Restore old behavor to favor 32-bit FADT addresses.
+      (regression in 3.14)
+    - ACPI: Revert "ACPI: Remove CONFIG_ACPI_PROCFS_POWER and cm_sbsc.c"
+      (regression in 3.13)
+    - ACPI: Revert "ACPI / Battery: Remove battery's proc directory"
+      (regression in 3.13)
+    - [x86] ACPI / video: Add use_native_backlight quirks for more systems
+    - ACPI: Revert "ACPI / AC: convert ACPI ac driver to platform bus"
+      (regression in 3.13)
+    - [x86] ACPI / TPM: Fix resume regression on Chromebooks
+      (regression in 3.14)
+    - i2c: s3c2410: resume race fix
+    - [x86] intel_pstate: Set turbo VID for BayTrail
+    - [s390] crypto: fix aes,des ctr mode concurrency finding.
+    - clk: Fix double free due to devm_clk_register()
+    - clk: Fix slab corruption in clk_unregister()
+    - [powerpc] powernv: Reset root port in firmware (regression in 3.14)
+    - [powerpc] irq work racing with timer interrupt can result in timer
+      interrupt hang (regression in 3.14)
+    - [powerpc] kexec: Fix "Processor X is stuck" issue during kexec from ST
+      mode (regression in 3.13)
+    - spi: core: Ignore unsupported Dual/Quad Transfer Mode bits
+      (regression in 3.12)
+    - libceph: fix corruption when using page_count 0 page in rbd
+    - media: V4L2: ov7670: fix a wrong index, potentially Oopsing the kernel
+      from user-space
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.7
+    - perf: Limit perf_event_attr::sample_period to 63 bits
+    - perf: Fix race in removing an event
+    - SCSI: scsi_transport_sas: move bsg destructor into sas_rphy_remove
+      (regression in 3.13)
+    - [arm] 8051/1: put_user: fix possible data corruption in put_user
+    - [arm] 8064/1: fix v7-M signal return (regression in 3.11)
+    - cpufreq: remove race while accessing cur_policy
+    - firewire: revert to 4 GB RDMA, fix protocols using Memory Space
+      (regression in 3.14)
+    - [mips] Fix typo when reporting cache and ftlb errors for ImgTec cores
+      (regression in 3.14)
+    - dm cache: always split discards on cache block boundaries
+    - virtio_blk: fix race between start and stop queue
+    - sched/deadline: Restrict user params max value to 2^63 ns
+    - sched/dl: Fix race in dl_task_timer()
+    - drm/radeon: avoid crash if VM command submission isn't available
+    - [x86] drm/i915: Only copy back the modified fields to userspace from
+      execbuffer
+    - drm/radeon/dpm: resume fixes for some systems (regression in 3.14)
+    - libata: Blacklist queued trim for Crucial M500 (regression in 3.14.4)
+    - md: always set MD_RECOVERY_INTR when aborting a reshape or other
+      "resync".
+    - md: always set MD_RECOVERY_INTR when interrupting a reshape thread.
+      (regression in 3.12.9, 3.13)
+    - xhci: delete endpoints from bandwidth list before freeing whole device
+    - staging: comedi: ni_daq_700: add mux settling delay
+    - staging: r8192e_pci: fix htons error (regression in 3.14)
+    - ALSA: hda/analog - Fix silent output on ASUS A8JN (regression in 3.12)
+    - USB: io_ti: fix firmware download on big-endian machines (part 2)
+    - usb: pci-quirks: Prevent Sony VAIO t-series from switching usb ports
+      (regression in 3.12)
+    - percpu-refcount: fix usage of this_cpu_ops
+    - [x86] intel_pstate: Remove C0 tracking (regression in 3.14)
+    - [x86] intel_pstate: Correct rounding in busy calculation
+      (regression in 3.14)
+    - [x86] intel_pstate: add sample time scaling
+    - [x86] intel_pstate: Improve initial busy calculation
+    - mm: add !pte_present() check on existing hugetlb_entry callbacks
+      (CVE-2014-3940)
+    - mm: rmap: fix use-after-free in __put_anon_vma
+    - iser-target: Add missing target_put_sess_cmd for ImmedateData failure
+    - iscsi-target: Fix wrong buffer / buffer overrun in
+      iscsi_change_param_value()
+    - target: Fix alua_access_state attribute OOPs for un-configured devices
+    - netfilter: Fix potential use after free in ip6_route_me_harder()
+    - netfilter: nfnetlink: Fix use after free when it fails to process batch
+    - [x86] iommu/vt-d: Fix missing IOTLB flush in intel_iommu_unmap()
+
+  [ Ian Campbell ]
+  * [armhf] Enable VIRTIO_BALLOON and VIRTIO_PCI (Closes: #750742)
+  * [arm64] Update modules included in installer udebs.
+  * Include virtio_mmio in virtio-modules udeb when available.
+
+  [ Aurelien Jarno ]
+  * topconfig: Enable modular HW_RANDOM.
+  * [kernelarch-powerpc] Remove HW_RANDOM.
+  * [kernelarch-x86] Remove HW_RANDOM.
+  * [mips/4kc-malta] Remove HW_RANDOM.
+  * [mips/5kc-malta] Remove HW_RANDOM.
+  * [mips/octeon] Remove HW_RANDOM.
+  * [arm64] Enable modular RTC_DRV_PL031. 
+
+  [ Ben Hutchings ]
+  * [ppc64el] Add kernel image, thanks to Mauricio Faria de Oliveira:
+    - Split common/big-endian powerpc64 options
+    - Add little-endian powerpc64 options
+    - Temporarily disable zImage
+    - powerpc/powernv: Add calls to support little endian host
+    - Add 'ppc64le' (uname output) to bug/include-model script
+    - udeb: Add packages based on ppc64 configuration
+  * netfilter: ipv4: defrag: set local_df flag on defragmented skb
+    (regression in 3.14.5)
+  * [mips] seccomp: Check system calls whenever seccomp is enabled,
+    even if audit and trace are disabled (Closes: #751417)
+  * auditsc: audit_krule mask accesses need bounds checking (CVE-2014-3917)
+  * fs,userns: Change inode_capable to capable_wrt_inode_uidgid
+    (CVE-2014-4014)
+  * SCSI: Fix spurious request sense in error handling (regression in 3.14)
+  * PCI/MSI: Fix memory leak in free_msi_irqs() (regression in 3.14)
+  * [rt] hrtimer: Disable MISSED_TIMER_OFFSETS_HIST as it will currently
+    result in a panic
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 16 Jun 2014 09:51:49 +0100
+
+linux (3.14.5-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.5
+    - SCSI: dual scan thread bug fix
+    - SCSI: megaraid: missing bounds check in mimd_to_kioc()
+    - [x86] KVM: remove WARN_ON from get_kernel_ns()
+    - audit: convert PPIDs to the inital PID namespace.
+    - netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4
+    - netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len
+      (Closes: #741667)
+    - netfilter: Can't fail and free after table replacement
+    - [i386] x86,preempt: Fix preemption for i386
+    - rbd: fix error paths in rbd_img_request_fill()
+    - [x86] drm/i915: restore QUIRK_NO_PCH_PWM_ENABLE (regression in 3.14)
+    - tick-sched: Don't call update_wall_time() when delta is lesser than
+      tick_period (regression in 3.14)
+    - tick-sched: Check tick_nohz_enabled in tick_nohz_switch_to_nohz()
+      (regression in 3.13)
+    - [hppa] change value of SHMLBA from 0x00400000 to PAGE_SIZE
+    - [hppa] fix epoll_pwait syscall on compat kernel
+    - [hppa] remove _STK_LIM_MAX override
+    - vfs: don't bother with {get,put}_write_access() on non-regular files
+    - cifs: Wait for writebacks to complete before attempting write.
+    - xen/spinlock: Don't enable them unconditionally. (regression in 3.12)
+    - thp: close race between split and zap huge pages (regression in 3.13)
+    - mm/hugetlb.c: add cond_resched_lock() in return_unused_surplus_pages()
+    - mm: use paravirt friendly ops for NUMA hinting ptes
+    - USB: io_ti: fix firmware download on big-endian machines
+    - fs: Don't return 0 from get_anon_bdev (regression in 3.14)
+    - [x86] drm/vmwgfx: Make sure user-space can't DMA across buffer object
+      boundaries v2
+    - [x86] drm/i915: Do not dereference pointers from ring buffer in evict
+      event (regression in 3.13)  
+    - net: core: don't account for udp header size when computing seglen
+      (regression in 3.14)
+    - bridge: Fix double free and memory leak around br_allowed_ingress
+    - filter: prevent nla extensions to peek beyond the end of the message
+      (CVE-2014-3144, CVE-2014-3145)
+    - Revert "net: sctp: Fix a_rwnd/rwnd management to reflect real state of
+      the receiver's buffer" (regression in 3.14)
+    - ip6_gre: don't allow to remove the fb_tunnel_dev
+    - net: sctp: cache auth_enable per endpoint
+    - net: Fix ns_capable check in sock_diag_put_filterinfo
+    - rtnetlink: Warn when interface's information won't fit in our packet
+    - rtnetlink: Only supply IFLA_VF_PORTS information when RTEXT_FILTER_VF
+      is set
+    - tcp_cubic: fix the range of delayed_ack
+    - net: cdc_ncm: fix buffer overflow (regression in 3.13)
+    - ip_tunnel: Set network header properly for IP_ECN_decapsulate()
+      (regression in 3.11)
+    - ipv4: ip_tunnels: disable cache for nbma gre tunnels (regression in 3.14)
+    - net: cdc_mbim: __vlan_find_dev_deep need rcu_read_lock
+      (regression in 3.13)
+    - net: ipv4: ip_forward: fix inverted local_df test (regression in 3.14)
+    - net: ipv6: send pkttoobig immediately if orig frag size > mtu
+      (regression in 3.14)
+    - ip6_tunnel: fix potential NULL pointer dereference
+    - neigh: set nud_state to NUD_INCOMPLETE when probing router reachability
+      (regression in 3.14)
+    - batman-adv: fix neigh_ifinfo imbalance (regression in 3.14)
+    - batman-adv: fix neigh reference imbalance (regression in 3.14)
+    - batman-adv: always run purge_orig_neighbors (regression in 3.14)
+    - batman-adv: fix removing neigh_ifinfo (regression in 3.14)
+    - [s390,x86] net: filter: fix JIT address randomization
+    - net: avoid dependency of net_get_random_once on nop patching
+      (regression in 3.13)
+    - ipv6: fix calculation of option len in ip6_append_data
+      (regression in 3.13)
+    - rtnetlink: wait for unregistering devices in rtnl_link_unregister()
+    - bonding: fix out of range parameters for bond_intmax_tbl
+      (regression in 3.14)
+    - net: gro: make sure skb->cb[] initial content has not to be zero
+      (regression in 3.13)
+    - batman-adv: fix indirect hard_iface NULL dereference (regression in 3.14)
+    - batman-adv: fix reference counting imbalance while sending fragment
+      (regression in 3.14)
+    - batman-adv: increase orig refcount when storing ref in gw_node
+    - batman-adv: fix local TT check for outgoing arp requests in DAT
+      (regression in 3.13)
+    - net_sched: fix an oops in tcindex filter (regression in 3.14)
+    - ipv6: gro: fix CHECKSUM_COMPLETE support (regression in 3.14)
+    - ipv4: initialise the itag variable in __mkroute_input
+    - net-gro: reset skb->truesize in napi_reuse_skb()
+
+  [ Ben Hutchings ]
+  * [x86] ACPICA: Tables: Fix invalid pointer accesses in
+    acpi_tb_parse_root_table(). (Closes: #748574)
+  * net: Revert lockdep changes in 3.14.5 to avoid an ABI change
+  * futex: Add another early deadlock detection check
+  * futex: Prevent attaching to kernel threads
+  * futex: Forbid uaddr == uaddr2 in futex_requeue(..., requeue_pi=1)
+    (CVE-2014-3153)
+  * futex: Validate atomic acquisition in futex_lock_pi_atomic()
+  * futex: Always cleanup owner tid in unlock_pi
+  * futex: Make lookup_pi_state more robust
+
+  [ Ian Campbell ]
+  * [arm64] Initial kernel configuration and packaging (Closes: #745349).
+  * [armhf] Add virtio-modules udeb.
+
+  [ Aurelien Jarno ]
+  * [mips,mipsel] Fix branch emulation of branch likely instructions. 
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 05 Jun 2014 13:49:15 +0100
+
+linux (3.14.4-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.3
+    - ASoC: pcm: Drop incorrect double/extra frees
+    - [s390] KVM: Optimize ucontrol path (regression in 3.11)
+    - [s390] bitops,atomic: add missing memory barriers
+    - [s390] fix control register update (regression in 3.14)
+    - mei: me: do not load the driver if the FW doesn't support MEI interface
+    - staging: comedi: usbdux: bug fix for accessing 'ao_chanlist' in private
+      data
+    - [x86] AVX-512: AVX-512 Feature Detection
+    - [x86] AVX-512: Enable AVX-512 States Context Switch
+    - [x86] ftrace: One more missing sync after fixup of function modification
+      failure
+    - [amd64] modify_ldt: Ban 16-bit segments on 64-bit kernels
+    - [armhf] PCI: imx6: Wait for retraining (regression in 3.14)
+    - [arm] PCI: mvebu: Fix potential issue in range parsing
+      (regression in 3.12)
+    - NFSv4: Fix a use-after-free problem in open()
+    - nfsd: revert v2 half of "nfsd: don't return high mode bits"
+      (regression in 3.14)
+    - nfsd4: buffer-length check for SUPPATTR_EXCLCREAT
+    - nfsd4: fix test_stateid error reply encoding
+    - nfsd: notify_change needs elevated write count
+    - nfsd: check passed socket's net matches NFSd superblock's one
+    - nfsd4: fix memory leak in nfsd4_encode_fattr()
+    - nfsd4: fix setclientid encode size
+    - NFSD: Traverse unconfirmed client through hash-table
+    - IB/ipath: Fix potential buffer overrun in sending diag packet routine
+    - IB/nes: Return an error on ib_copy_from_udata() failure instead of NULL
+    - IB/mthca: Return an error on ib_copy_to_udata() failure
+    - IB/ehca: Returns an error on ib_copy_to_udata() failure
+    - IB/core: Don't resolve passive side RoCE L2 address in CMA REQ handler
+      (regression in 3.14)
+    - ib_srpt: Use correct ib_sg_dma primitives
+    - SCSI: arcmsr: upper 32 of dma address lost
+    - iscsi-target: Fix ERL=2 ASYNC_EVENT connection pointer bug
+    - target/iblock: Fix double bioset_integrity_free bug
+    - target/tcm_fc: Fix use-after-free of ft_tpg
+    - [x86] efi: Correct EFI boot stub use of code32_start
+    - efi: Pass correct file handle to efi_file_{read,close}
+    - reiserfs: fix race in readdir
+    - media: v4l2-dv-timings: add module name, description, license
+    - media: em28xx-audio: fix user counting in snd_em28xx_capture_open()
+    - [armhf] usb: musb: fix PHY power on/off (regression in 3.14)
+    - mtip32xx: Unmap the DMA segments before completing the IO request
+    - mtip32xx: mtip_async_complete() bug fixes
+    - iser-target: Match FRMR descriptors to available session tags
+    - iser-target: Add missing se_cmd put for WRITE_PENDING in tx_comp_err
+    - [sh] fix format string bug in stack tracer
+    - mm: page_alloc: spill to remote nodes before waking kswapd
+      (regression in 3.12/3.13)
+    - mm: try_to_unmap_cluster() should lock_page() before mlocking
+      (CVE-2014-3122) (Closes: #747326)
+    - xattr: guard against simultaneous glibc header inclusion
+    - ocfs2: do not put bh when buffer_uptodate failed
+    - ocfs2: fix panic on kfree(xattr->name)
+    - vfs: smarter propagate_mnt()
+    - block: Fix for_each_bvec()
+    - ext4: FIBMAP ioctl causes BUG_ON due to handle EXT_MAX_BLOCKS
+    - ext4: note the error in ext4_end_bio()
+    - ext4: move ext4_update_i_disksize() into mpage_map_and_submit_extent()
+    - ext4: use i_size_read in ext4_unaligned_aio()
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.4
+    - tty: Fix lockless tty buffer race
+    - n_tty: Fix n_tty_write crash when echoing in raw mode (CVE-2014-0196)
+      (Closes: #747166)
+    - floppy: ignore kernel-only members in FDRAWCMD ioctl input (CVE-2014-1737)
+    - floppy: don't write kernel-only members to FDRAWCMD ioctl output
+      (CVE-2014-1738)
+    - KVM: async_pf: mm->mm_users can not pin apf->mm
+    - KVM: ioapic: fix assignment of ioapic->rtc_status.pending_eoi
+      (CVE-2014-0155)
+    - [powerpc] KVM: Book3S HV: Fix KVM hang with CONFIG_KVM_XICS=n
+      (regression in 3.14)
+    - [mips] Hibernate: Flush TLB entries in swsusp_arch_resume()
+    - [powerpc] Fix Oops in rtas_stop_self() (regression in 3.14)
+    - [s390] bpf,jit: initialize A register if 1st insn is BPF_S_LDX_B_MSH
+    - SUNRPC: Ensure that call_connect times out correctly (regression in 3.13)
+    - SUNRPC: Ensure call_connect_status() deals correctly with SOFTCONN tasks
+      (regression in 3.13)
+    - Revert "net: mvneta: fix usage as a module on RGMII configurations"
+      (regression in 3.14)
+    - iwlwifi: dvm: take mutex when sending SYNC BT config command
+    - mac80211: fix potential use-after-free
+    - mac80211: fix WPA with VLAN on AP side with ps-sta again
+    - locks: allow __break_lease to sleep even when break_time is 0
+    - rtlwifi: rtl8192se: Fix regression due to commit 1bf4bbb
+      (regression in 3.13)
+    - dm cache: prevent corruption caused by discard_block_size >
+      cache_block_size
+    - dm transaction manager: fix corruption due to non-atomic transaction
+      commit
+    - dm: take care to copy the space map roots before locking the superblock
+    - dm thin: fix dangling bio in process_deferred_bios error path
+    - aio: v4 ensure access to ctx->ring_pages is correctly serialised for
+      migration
+    - cpufreq: loongson2_cpufreq: don't declare local variable as static
+      (regression in 3.14)
+
+  [ Ben Hutchings ]
+  * [or1k] Build a linux-libc-dev package (Closes: #746309)
+  * net: Start with correct mac_len in skb_network_protocol (Closes: #746453)
+  * [x86] ACPI/Processor: Fix failure of loading acpi-cpufreq driver
+    (Closes: #746448)
+  * [armhf] ARM: sun4i: dt: Add bindings for USB clocks (fixes FTBFS,
+    Closes: #746420)
+  * [x86] udeb: Add hyperv-keyboard to hyperv-modules
+  * drm: Enable auto-loading of ast, udl
+  * [ppc64el] Build a linux-libc-dev package (Closes: #747367)
+  * net: ipv4: current group_info should be put after using. (CVE-2014-2851)
+  * filter: prevent nla extensions to peek beyond the end of the message
+    (CVE-2014-3144, CVE-2014-3145)
+  * [powerpc,ppc64] Add versioned build-dependency on gcc-4.8, as compiler
+    changes have resulted in a different kernel module ABI
+    - [powerpc] Bump ABI to 1a as 3.14.2-1 was built with an older compiler
+  * [armhf] Enable IR_GPIO_CIR as module (Closes: #747762)
+  * [hppa/parisc64-smp] ipmi: Enable IPMI_HANDLER, IPMI_DEVICE_INTERFACE,
+    IPMI_SI, IPMI_WATCHDOG, IPMI_POWEROFF as modules (Closes: #747482)
+  * [armhf] Enable various drivers to support BeagleBone Black
+    (Closes: #747364)
+  * [hppa] udeb: Add xfs-modules (Closes: #746506)
+  * udeb: Add mtip32xx, nvme to sata-modules
+  * [rt] Update to 3.14.3-rt5:
+    - tracing: use migrate_disable() to prevent beeing pushed off the cpu
+    - rwsem-rt: Do not allow readers to nest
+    - Revert "migrate_disable pushd down in atomic_dec_and_spin_lock"
+    - rwlock: disable migration before taking a lock
+    - timer: do not spin_trylock() on UP
+    - stomp-machine: Fix wait for completion
+    - stomp-machine: create lg_global_trylock_relax() primitive
+    - stomp-machine: use lg_global_trylock_relax() to dead with
+      stop_cpus_lock lglock
+    - blk-mq: revert raw locks, post pone notifier to POST_DEAD
+    - use EXPORT_SYMBOL() on __rt_mutex_init() and rt_down_write_nested_lock()
+    - netconsole: Allow use with PREEMPT_RT_FULL
+  * aufs: Update to aufs3.14-20140512:
+    - bugfix, stop calling security_mmap_file() again
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 14 May 2014 00:46:05 +0100
+
+linux-tools (3.14-1) unstable; urgency=medium
+
+  * New upstream release
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 28 Apr 2014 17:46:24 +0100
+
+linux (3.14.2-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.2
+
+  [ Ian Campbell ]
+  * [armhf] Drop suffix from kernel udeb.
+  * [armhf] Backport sunxi AHCI and GMAC drivers from v3.15-rc1
+
+  [ Ben Hutchings ]
+  * [x86] Enable X86_INTEL_LPSS (Closes: #745331)
+  * [x86] thinkpad_acpi: Add support for X1 Carbon 2nd generation's adaptive
+    keyboard (Closes: #745252)
+  * [armhf] Enable more Allwinner/sunxi drivers (Closes: #745972):
+    - spi: sunxi: Add Allwinner A31 SPI controller driver
+    - ARM: dt: sun4i: Add A10 SPI controller nodes
+    - PHY: sunxi: Add driver for sunxi usb phy
+    - ARM: sun4i: dt: Add USB host bindings
+    - Enable PHY_SUN4I_USB, RTC_DRV_SUNXI, SPI_SUN6I, USB_EHCI_HCD_PLATFORM,
+      USB_OHCI_HCD_PLATFORM and CONFIG_SUNXI_WATCHDOG as modules
+  * Set ABI to 1
+  * Staging: speakup: Move pasting into a work item and update it to match vt
+    (Closes: #735202,  #744015)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 28 Apr 2014 17:12:03 +0100
+
+linux (3.14.1-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.1
+
+  [ Ben Hutchings ]
+  * [armel] Disable ixp4xx flavour (fixes FTBFS)
+  * [armhf] Enable SECURITY_APPARMOR, SECURITY_TOMOYO
+  * [rt] Update to 3.14.0-rt1 and reenable
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 17 Apr 2014 13:17:18 +0100
+
+linux (3.14-1~exp1) experimental; urgency=medium
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.14
+
+  [ Ben Hutchings ]
+  * nftables: Enable NF_TABLES_BRIDGE, NF_TABLES_IPV4, NFT_CHAIN_ROUTE_IPV4,
+    NFT_CHAIN_NAT_IPV4, NF_TABLES_ARP, NF_TABLES_IPV6, NFT_CHAIN_ROUTE_IPV6,
+    NFT_CHAIN_NAT_IPV6 as modules (Closes: #742763)
+  * udeb: Update sound-modules, thanks to Samuel Thibault (Closes: #743319)
+  * aufs: Update to aufs3.14-20140407 (no functional changes)
+  * mtd: Enable MTD_NAND_ECC_BCH (Closes: #743933)
+  * drm: Enable DRM_LOAD_EDID_FIRMWARE (Closes: #728275)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 09 Apr 2014 09:53:05 +0100
+
+linux-tools (3.14~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 17 Mar 2014 19:31:14 +0000
+
+linux (3.14~rc7-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * bfa,bna: Replace large udelay() with mdelay() (fixes FTBFS on arm)
+    (Closes: #741142)
+  * aufs: Update to aufs3.x-rcN-20140310
+    - bugfix, Fix unmount to properly free anonymous block devices
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 17 Mar 2014 13:30:03 +0000
+
+linux (3.14~rc5-1~exp1) experimental; urgency=medium
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * mm: Enable ZSMALLOC as built-in, ZRAM as module (except for
+    armel/{ixp4xx,orion5x}) (Closes: #676779)
+  * iio,HID: Enable HID_SENSOR_INCLINOMETER_3D as module
+  * media/radio: Enable USB_RAREMONO as module
+  * i40e: Enable I40E_VXLAN, I40E_DCB
+  * net: Enable I40EVF, USB_NET_SR9800 as modules
+  * serial: Enable USB_SERIAL_MXUPORT as module
+  * ceph: Enable CEPH_FS_POSIX_ACL
+  * netfilter: Enable NF_TABLES_INET, NFT_QUEUE, NFT_REJECT,
+    NETFILTER_XT_MATCH_CGROUP, NETFILTER_XT_MATCH_IPCOMP as modules
+  * net/sched: Enable NET_SCH_HHF, NET_SCH_PIE as modules
+  * [x86] crypto: Enable CRYPTO_DEV_CCP, CRYPTO_DEV_CCP_DD,
+    CRYPTO_DEV_CCP_CRYPTO as modules
+  * [x86] platform: Enable CHROMEOS_PSTORE, HP_WIRELESS as modules
+  * [x86] comedi: Enable COMEDI_MF6X4 as modules
+  * [x86] staging: Enable R8821AE, RTS5208 as modules
+  * [x86] thermal: Enable ACPI_INT3403_THERMAL as module
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 07 Mar 2014 03:36:35 +0000
+
+linux (3.13.10-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.8
+    - ALSA: compress: Pass through return value of open ops callback
+    - [hppa] partly revert commit 8a10bc9: parisc/sti_console: prefer Linux
+      fonts over built-in ROM fonts (regression in 3.13.2)
+    - [armhf] net: davinci_emac: Replace devm_request_irq with request_irq
+      (regression in 3.11)
+    - NFSv4: Use the correct net namespace in nfs4_update_server
+    - media: cxusb: unlock on error in cxusb_i2c_xfer() (regression in 3.13)
+    - media: dw2102: some missing unlocks on error (regression in 3.13)
+    - libceph: block I/O when PAUSE or FULL osd map flags are set
+    - libceph: resend all writes after the osdmap loses the full flag
+    - stop_machine: Fix^2 race between stop_two_cpus() and stop_cpus()
+    - [arm] 7941/2: Fix incorrect FDT initrd parameter override
+      (regression in 3.13)
+    - [x86] bpf_jit: support negative offsets
+    - printk: fix syslog() overflowing user buffer
+    - Fix uses of dma_max_pfn() when converting to a limiting address
+    - deb-pkg: Fix building for MIPS big-endian or ARM OABI
+    - deb-pkg: Fix cross-building linux-headers package
+    - fs/proc/proc_devtree.c: remove empty /proc/device-tree when no
+      openfirmware exists.
+    - KVM: MMU: handle invalid root_hpa at __direct_map
+    - [x86] KVM: x86: handle invalid root_hpa everywhere
+    - KVM: VMX: fix use after free of vmx->loaded_vmcs
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.9
+    - ext4: atomically set inode->i_flags in ext4_set_inode_flags()
+    - rcuwalk: recheck mount_lock after mountpoint crossing attempts
+    - Input: mousedev - fix race when creating mixed device
+    - xen/balloon: flush persistent kmaps in correct position
+    - Revert "xen: properly account for _PAGE_NUMA during xen pte translations"
+      (regression in 3.13.5)
+    - drm/i915: Undo gtt scratch pte unmapping again (regression in 3.12)
+    - [i386/486] fix boot on uniprocessor systems
+    - random32: avoid attempt to late reseed if in the middle of seeding
+    - rcuwalk: switch mnt_hash to hlist
+    - mm: close PageTail race
+    - cgroup: protect modifications to cgroup_idr with cgroup_mutex
+    - netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages
+      (CVE-2014-2523)
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.10
+    - selinux: correctly label /proc inodes in use before the policy is loaded
+    - net: sctp: fix skb leakage in COOKIE ECHO path of chunk->auth_chunk
+    - bridge: multicast: add sanity check for query source addresses
+    - tipc: allow connection shutdown callback to be invoked in advance
+    - tipc: fix connection refcount leak
+    - tipc: drop subscriber connection id invalidation
+    - inet: frag: make sure forced eviction removes all frags
+    - vlan: Set correct source MAC address with TX VLAN offload enabled
+      (regression in 3.13)
+    - tcp: tcp_release_cb() should release socket ownership
+    - bridge: multicast: add sanity check for general query destination
+    - bridge: multicast: enable snooping on general queries only
+    - net: socket: error on a negative msg_namelen (regression in 3.11.10)
+    - bonding: set correct vlan id for alb xmit path (regression in 3.12)
+    - ipv6: Avoid unnecessary temporary addresses being generated
+    - net: cdc_ncm: fix control message ordering (regression in 3.13)
+    - tcp: syncookies: do not use getnstimeofday() (regression in 3.13)
+    - tipc: fix spinlock recursion bug for failed subscriptions
+    - ip_tunnel: Fix dst ref-count. (regression in 3.13.7)
+    - tg3: Do not include vlan acceleration features in vlan_features
+    - virtio-net: correct error handling of virtqueue_kick()
+      (regression in 3.13)
+    - usbnet: include wait queue head in device structure
+    - vhost: fix total length when packets are too short (CVE-2014-0077)
+    - vhost: validate vhost_get_vq_desc return value (CVE-2014-0055)
+    - tcp: fix get_timewait4_sock() delay computation on 64bit
+      (regression in 3.13)
+    - xen-netback: remove pointless clause from if statement
+    - netlink: don't compare the nul-termination in nla_strcmp
+    - xen-netback: disable rogue vif in kthread context
+    - net: vxlan: fix crash when interface is created with no group
+    - rds: prevent dereference of a NULL device in rds_iw_laddr_check
+      (CVE-2014-2678)
+    - powernow-k6: disable cache when changing frequency
+    - [m68k] Skip futex_atomic_cmpxchg_inatomic() test
+    - crypto: ghash-clmulni-intel - use C implementation for setkey()
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 15 Apr 2014 22:12:38 +0100
+
+linux (3.13.7-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.7
+    - mm: page_alloc: exempt GFP_THISNODE allocations from zone fairness
+      (regression in 3.12)
+    - mm: include VM_MIXEDMAP flag in the VM_SPECIAL list to avoid m(un)locking
+      (regression in 3.12)
+    - ocfs2: fix quota file corruption
+    - ocfs2 syncs the wrong range...
+    - memcg: fix endless loop in __mem_cgroup_iter_next()
+      (regression in 3.13.3)
+    - net-tcp: fastopen: fix high order allocations
+    - ipv6: reuse ip6_frag_id from ip6_ufo_append_data
+    - ipv4: ipv6: better estimate tunnel header cut for correct ufo handling
+    - ip_tunnel:multicast process cause panic due to skb->_skb_refdst NULL
+      pointer
+    - mac80211: clear sequence/fragment number in QoS-null frames
+    - ath9k: Fix ETSI compliance for AR9462 2.0
+    - ath9k: protect tid->sched check
+    - cpuset: fix a locking issue in cpuset_migrate_mm()
+    - cpuset: fix a race condition in __cpuset_node_allowed_softwall()
+    - firewire: net: fix use after free
+    - firewire: don't use PREPARE_DELAYED_WORK
+    - libata: disable queued TRIM for Crucial M500 mSATA SSDs
+    - libata: use wider match for blacklisting Crucial M500
+    - NFSv4: Fix another nfs4_sequence corruptor (Closes: #734268)
+    - cpufreq: use cpufreq_cpu_get() to avoid cpufreq_get() race conditions
+    - cpufreq: Skip current frequency initialization for ->setpolicy drivers
+      (regression in 3.13)
+    - iscsi/iser-target: Use list_del_init for ->i_conn_node
+    - iser-target: Ignore completions for FRWRs in isert_cq_tx_work
+    - iser-target: Fix post_send_buf_count for RDMA READ/WRITE
+    - mm/readahead.c: fix do_readahead() for no readpage(s)
+      (regression in 3.13)
+    - fs/proc/base.c: fix GPF in /proc/$PID/map_files
+    - drm/i915: fix pch pci device enumeration (regression in 3.11)
+    - drm/i915: Reject >165MHz modes w/ DVI monitors (regression in 3.11)
+    - drm/radeon: fix runpm disabling on non-PX harder
+      (may fix #741619, #742507)
+    - PCI: Enable INTx in pci_reenable_device() only when MSI/MSI-X not enabled
+      (fixes regression in 3.13.6)
+    - [x86] vmxnet3: fix netpoll race condition
+    - mm/compaction: break out of loop on !PageBuddy in isolate_freepages_block
+    - dm space map metadata: fix refcount decrement below 0 which caused
+      corruption
+    - dm cache: fix truncation bug when copying a block to/from >2TB fast
+      device
+    - net: unix socket code abuses csum_partial
+    - SCSI: qla2xxx: Fix multiqueue MSI-X registration.
+    - [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU
+    - Btrfs: fix tree mod logging
+    - Btrfs: fix data corruption when reading/updating compressed extents
+    - intel_pstate: Add setting voltage value for baytrail P states.
+    - Fix mountpoint reference leakage in linkat
+    - bio-integrity: Fix bio_integrity_verify segment start bug
+    - memcg: reparent charges of children before processing parent
+
+  [ Ben Hutchings ]
+  * [arm] mm: Avoid ABI change in 3.13.6 (fixes FTBFS)
+  * nfqueue: Orphan frags in nfqnl_zcopy() and handle errors (CVE-2014-2568)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 25 Mar 2014 17:23:31 +0000
+
+linux-tools (3.13.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5
+    - Modpost: fixed USB alias generation for ranges including 0x9 and 0xA
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.6
+    - perf trace: Fix ioctl 'request' beautifier build problems on
+      !(i386 || x86_64) arches
+
+  [ Ben Hutchings ]
+  * linux-tools: Remove the 'trace_3.13' link to perf
+  * Clean another autoconf-generated file so double-builds work
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 19 Mar 2014 22:33:21 +0000
+
+linux (3.13.6-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.6
+    - drm/nouveau/fb: use correct ram oclass for nv1a hardware
+      (regression in 3.13)
+    - ext4: fix xfstest generic/299 block validity failures
+    - ext4: fix error paths in swap_inode_boot_loader()
+    - ext4: don't try to modify s_flags if the the file system is read-only
+    - ext4: fix online resize with a non-standard blocks per group setting
+    - [arm] 7950/1: mm: Fix stage-2 device memory attributes
+    - [arm] 7953/1: mm: ensure TLB invalidation is complete before enabling MMU
+    - [arm] 7957/1: add DSB after icache flush in __flush_icache_all()
+    - powerpc: Set the correct ksp_limit on ppc32 when switching to irq stack
+      (regression in 3.12)
+    - jbd2: fix use after free in jbd2_journal_start_reserved()
+    - cifs: ensure that uncached writes handle unmapped areas correctly
+      (CVE-2014-0069)
+    - NFS: Do not set NFS_INO_INVALID_LABEL unless server supports labeled NFS
+      (regression in 3.11)
+    - NFS fix error return in nfs4_select_rw_stateid (regression in 3.12)
+    - bridge: fix netconsole setup over bridge (regression in 3.12)
+    - net: fix 'ip rule' iif/oif device rename
+    - net: asix: add missing flag to struct driver_info
+    - gre: add link local route when local addr is any (regression in 3.13)
+    - ipv4: fix counter in_slow_tot
+    - net: use __GFP_NORETRY for high order allocations
+    - batman-adv: fix soft-interface MTU computation (regression in 3.13)
+    - batman-adv: fix TT-TVLV parsing on OGM reception
+    - batman-adv: release vlan object after checking the CRC
+    - batman-adv: properly check pskb_may_pull return value
+    - batman-adv: avoid potential race condition when adding a new neighbour
+    - batman-adv: fix TT CRC computation by ensuring byte order
+      (regression in 3.13)
+    - batman-adv: free skb on TVLV parsing success
+    - batman-adv: avoid double free when orig_node initialization fails
+    - batman-adv: fix potential kernel paging error for unicast transmissions
+    - cgroup: fix error return value in cgroup_mount()
+    - cgroup: fix error return from cgroup_create()
+    - cgroup: fix locking in cgroup_cfts_commit()
+    - cgroup: update cgroup_enable_task_cg_lists() to grab siglock
+    - fs: fix iversion handling
+    - kvm: x86: fix emulator buffer overflow (CVE-2014-0049)
+    - kvm, vmx: Really fix lazy FPU on nested guest
+    - SUNRPC: Ensure that gss_auth isn't freed before its upcall messages
+    - powerpc/powernv: Fix opal_xscom_{read,write} prototype
+    - powerpc/powernv: Fix indirect XSCOM unmangling
+    - perf/x86: Fix event scheduling
+    - sata_sil: apply MOD15WRITE quirk to TOSHIBA MK2561GSYN
+    - cpufreq: powernow-k8: Initialize per-cpu data-structures properly
+      (regression in 3.12)
+    - Revert "writeback: do not sync data dirtied after sync start"
+      (regression in 3.13)
+    - [arm] PCI: mvebu: Use Device ID and revision from underlying endpoint
+    - PCI: Enable INTx if BIOS left them disabled
+    - i7core_edac: Fix PCI device reference count
+    - can: kvaser_usb: check number of channels returned by HW
+    - usb: chipidea: need to mask when writting endptflush and endptprime
+    - mei: set client's read_cb to NULL when flow control fails
+    - workqueue: ensure @task is valid across kthread_stop()
+    - regulator: da9063: Bug fix when setting max voltage on LDOs 5-11
+    - [armhf] mtd: nand: omap: fix ecclayout to be in sync with u-boot NAND
+      driver (regression in 3.13)
+    - [armhf] mtd: nand: omap: fix ecclayout->oobfree->offset
+    - [armhf] mtd: nand: omap: fix ecclayout->oobfree->length
+    - [armhf/armmp-lpae] iommu/arm-smmu: fix pud/pmd entry fill sequence
+    - [armhf/armmp-lpae] iommu/arm-smmu: really fix page table locking
+    - [armhf/armmp-lpae] iommu/arm-smmu: fix table flushing during initial
+      allocations
+    - [armhf/armmp-lpae] iommu/arm-smmu: set CBARn.BPSHCFG to NSH for
+      s1-s2-bypass contexts
+    - perf: Fix hotplug splat
+    - quota: Fix race between dqput() and dquot_scan_active()
+    - ipc,mqueue: remove limits for the amount of system-wide queues
+    - mm, thp: fix infinite loop on memcg OOM
+    - qla2xxx: Fix kernel panic on selective retransmission request
+    - i7300_edac: Fix device reference count
+    - dm cache: move hook_info into common portion of per_bio_data structure
+      (regression in 3.13)
+    - drm/radeon: fix missing bo reservation
+    - drm/radeon: free uvd ring on unload
+
+  [ Ben Hutchings ]
+  * xhci: Revert more sg changes (Closes: #741989; also see #738113):
+    - Revert "xhci 1.0: Limit arbitrarily-aligned scatter gather."
+    - Revert "USBNET: ax88179_178a: enable tso if usb host supports sg dma"
+  * aufs: Update to aufs3.13-20140303
+    - bugfix, Fix unmount to properly free anonymous block devices
+  * net: fix for a race condition in the inet frag code (CVE-2014-0100)
+  * net: sctp: fix sctp_sf_do_5_1D_ce to verify if we/peer is AUTH capable
+    (CVE-2014-0101)
+  * KEYS: Make the keyring cycle detector ignore other keyrings of the
+    same name (CVE-2014-0102)
+  * skbuff: skb_segment: orphan frags before copying (CVE-2014-0131)
+  * ipv6: don't set DST_NOCOUNT for remotely added routes (CVE-2014-2309)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 19 Mar 2014 16:18:42 +0000
+
+linux (3.13.5-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5
+    - xen: properly account for _PAGE_NUMA during xen pte translations
+    - mm: fix page leak at nfs_symlink()
+    - mm/memory-failure.c: move refcount only in !MF_COUNT_INCREASED
+    - CIFS: Fix SMB2 mounts so they don't try to set or get xattrs via cifs
+    - CIFS: Add protocol specific operation for CIFS xattrs
+    - CIFS: retrieving CIFS ACLs when mounted with SMB2 fails dropping session
+    - mac80211: release the channel in error path in start_ap
+    - mac80211: Fix IBSS disconnect
+    - mac80211: fix fragmentation code, particularly for encryption
+    - ath9k_htc: Do not support PowerSave by default
+    - ath9k: Do not support PowerSave by default
+    - [s390x] fix kernel crash due to linkage stack instructions
+    - raw: test against runtime value of max_raw_minors
+    - hwmon: (ntc_thermistor) Avoid math overflow
+    - lockd: send correct lock when granting a delayed lock.
+    - drm/i915: Pair va_copy with va_end in i915_error_vprintf
+    - vt: Fix secure clear screen
+    - staging: lustre: fix quotactl permission denied (LU-4530)
+    - staging: comedi: adv_pci1710: fix analog output readback value
+    - iio: adis16400: Set timestamp as the last element in chan_spec
+    - iio: ak8975: Fix calculation formula for convert micro tesla to gauss
+      unit
+    - usb-storage: add unusual-devs entry for BlackBerry 9000
+    - usb-storage: restrict bcdDevice range for Super Top in Cypress ATACB
+    - xhci 1.0: Limit arbitrarily-aligned scatter gather.
+    - Revert "usbcore: set lpm_capable field for LPM capable root hubs"
+      (regression in 3.12.1)
+    - block: __elv_next_request() shouldn't call into the elevator if bypassing
+    - block: Fix nr_vecs for inline integrity vectors
+    - block: add cond_resched() to potentially long running ioctl discard loop
+    - compiler/gcc4: Make quirk for asm_volatile_goto() unconditional
+    - misc: mic: fix possible signed underflow (undefined behavior) in
+      userspace API
+    - KVM: return an error code in kvm_vm_ioctl_register_coalesced_mmio()
+    - md/raid1: restore ability for check and repair to fix read errors.
+      (regression in 3.10.5)
+    - i2c: mv64xxx: refactor message start to ensure proper initialization
+    - target: Fix free-after-use regression in PR unregister
+    - drivers/edac/edac_mc_sysfs.c: poll timeout cannot be zero
+    - EDAC: Poll timeout cannot be zero, p2
+    - EDAC: Correct workqueue setup path
+
+  [ Ben Hutchings ]
+  * [armhf] net/wireless: Really enable WL_TI and dependent modules
+  * aufs: Update to aufs3.13-20140127 (no functional changes)
+  * [powerpc] Change I2C_POWERMAC from module to built-in (Closes: #713943)
+  * [mips] rtl8187: fix regression on MIPS without coherent DMA
+    (Closes: #739978)
+  * [x86] Enable CHROME_PLATFORMS and re-enable CHROMEOS_LAPTOP as module
+    (Closes: #740042)
+  * [armel/!kirkwood] udeb: Re-add lzo-modules udeb as lzo_compress is a
+    module again (Closes: #740219)
+  * debian/control: Simplify build-dependencies:
+    - Remove versions for debhelper, python, kernel-wedge that are
+      satisfied by stable
+    - Remove module-init-tools as alternative to kmod, which is in stable
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 04 Mar 2014 19:49:27 +0000
+
+linux-tools (3.13.4-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.2
+    - perf kvm: Fix kvm report without guestmount.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 22 Feb 2014 15:39:27 +0000
+
+linux (3.13.4-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.1
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.2
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.3
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.4
+
+  [ Ben Hutchings ]
+  * [x86] Enable POWERCAP, INTEL_RAPL as module (Closes: #736399)
+  * [arm] Disable OABI_COMPAT and enable AUDITSYSCALL (except for
+    armel/{ixp4xx,orion5x}) (Closes: #728975, #736843)
+  * [x86] Enable R8188EU as module, 88EU_AP_MODE and 88EU_P2P (Closes: #736905)
+  * [x86] Enable I2C_DESIGNWARE_PLATFORM as module (Closes: #737163)
+  * [x86] snd-pcsp: Disable autoload (Closes: #697709)
+  * DFSG: Remove the af9005 initialisation script and vs6624 driver again
+    (they were renamed in 3.7)
+  * linux-image.postinst: Use lstat() to check symlink existence
+    (Closes: #738707)
+  * [hppa] Update configuration, thanks to Helge Deller (Closes: #738487)
+    - megaraid: Enable MEGARAID_NEWGEN as module; disable MEGARAID_LEGACY
+    - drm: Change DRM from module to built-in
+    - [/parisc64-smp] udeb: Add fb-modules package containing radeon driver
+  * udeb: Add various recently enabled drivers
+    - Add i40e to nic-modules
+    - Add r815x to nic-usb-modules
+    - Add ath10k_core, ath10k_pci, brcmfmac to nic-wireless-modules
+    - Add esas2r to scsi-modules
+  * Bluetooth: allocate static minor for vhci (fixes depmod error)
+  * Set ABI to 1
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 22 Feb 2014 11:54:57 +0000
+
+linux-tools (3.13-1~exp3) experimental; urgency=medium
+
+  * linux-tools: Fix/revert unportable code in perf trace (fixes FTBFS
+    on powerpc, sparc)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 07 Feb 2014 20:36:29 +0000
+
+linux-tools (3.13-1~exp2) experimental; urgency=medium
+
+  * Merge changes from sid up to 3.12.6-3
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 02 Feb 2014 16:57:49 +0100
+
+linux-tools (3.13-1~exp1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 02 Feb 2014 12:02:29 +0100
+
+linux (3.13-1~exp1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.13
+
+  [ Ben Hutchings ]
+  * [armhf] xen/pci: Fix build on non-x86
+  * [hppa/parisc64-smp] Disable MLONGCALLS (Closes: #733897)
+  * [armel] Remove iop32x flavour (fixes FTBFS)
+  * aufs: Update to aufs3.x-rcN-20140120
+    - bugfix, removed /proc/PID/fd/N
+
+  [ Bastian Blank ]
+  * Initial Python 3 support:
+    - Build-depend on python-six.
+
+  [ Aurelien Jarno ]
+  * [mipsel] Remove cobalt d-i files.
+  * [mipsel] Enable KEXEC like on mips.
+  * [mipsel] Explicitly unset RAPIDIO like on mips. 
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 20 Jan 2014 05:43:51 +0000
+
+linux (3.13~rc6-1~exp1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [rt] Disable until it is updated for 3.13 or later
+  * aufs: Update to aufs3.x-rcN-20131223
+  * [x86] staging: lustre: Make LUSTRE_LLITE_LLOOP tristate
+  * mm: Enable MEM_SOFT_DIRTY, NUMA_BALANCING but not
+    NUMA_BALANCING_DEFAULT_ENABLED
+  * ipv6: Enable IPV6_VTI as module
+  * netfilter: Enable NF_TABLES, NFT_EXTHDR, NFT_META, NFT_CT, NFT_RBTREE,
+    NFT_HASH, NFT_COUNTER, NFT_LOG, NFT_LIMIT, NFT_NAT, NFT_COMPAT,
+    IP_SET_HASH_NETPORTNET, IP_SET_HASH_NETNET, IP_NF_TARGET_SYNPROXY,
+    IP6_NF_TARGET_SYNPROXY as modules
+  * net/sched: Enable NET_CLS_BPF as module
+  * nfc: Enable NFC_DIGITAL, NFC_PORT100 as modules
+  * block: Enable BLK_DEV_NULL_BLK, BLK_DEV_SKD as modules
+  * SCSI: Enable SCSI_ESAS2R as module
+  * net/usb: Enable USB_NET_HUAWEI_CDC_NCM as module
+  * touchscreen: Enable TOUCHSCREEN_SUR40 as module
+  * [x86] video: Enable X86_SYSFB, FB_SIMPLE
+  * [x86] ACPI: Enable ACPI_EXTLOG
+  * [x86] touchscreen: Enable TOUCHSCREEN_TSC_SERIO as module
+  * [x86] tpm: Enable TCG_TIS_I2C_ATMEL, TCG_TIS_I2C_INFINEON,
+    TCG_TIS_I2C_NUVOTON, TCG_ST33_I2C, TCG_XEN as modules
+  * [amd64] misc: Enable INTEL_MIC_HOST as module
+  * [powerpc/powerpc64] block: Enable AIX_PARTITION
+  * net/sched: Change NET_CLS_CGROUP from built-in to module
+  * nfc: Disable NFC_NCI as no enabled drivers need it
+  * misc: Disable BMP085_I2C as unlikely to be useful
+
+  [ Aurelien Jarno ]
+  * [mipsel] Remove r5k-cobalt flavour.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 30 Dec 2013 02:36:11 +0100
+
+linux-tools (3.12.6-3) unstable; urgency=medium
+
+  * linux-tools: Explicitly enable/disable libunwind usage for all
+    architectures (fixes FTBFS on s390x and sparc)
+  * linux-tools: Only use libunwind on x86, as perf needs additional
+    porting work for other architectures (fixes FTBFS on arm and powerpc)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 02 Feb 2014 16:46:44 +0100
+
+linux-tools (3.12.6-2) unstable; urgency=medium
+
+  * linux-tools: Replace build-dependency on libunwind7-dev with
+    libunwind8-dev
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 02 Feb 2014 11:51:18 +0100
+
+linux (3.12.9-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.9
+    - Revert "ACPI: Add BayTrail SoC GPIO and LPSS ACPI IDs"
+      (regression in 3.12.7)
+    - GFS2: Increase i_writecount during gfs2_setattr_chown
+    - vfs: Fix a regression in mounting proc (regression in 3.12)
+    - fork: Allow CLONE_PARENT after setns(CLONE_NEWPID) (regression in 3.12)
+    - i2c: Re-instate body of i2c_parent_is_i2c_adapter() (regression in 3.12)
+    - writeback: Fix data corruption on NFS
+    - thp: fix copy_page_rep GPF by testing is_huge_zero_pmd once only
+    - [x86] ftrace: Load ftrace_ops in parameter not the variable holding it
+    - nilfs2: fix segctor bug that causes file system corruption
+    - md: fix problem when adding device to read-only array with bitmap.
+    - md/raid10: fix bug when raid10 recovery fails to recover a block.
+    - md/raid10: fix two bugs in handling of known-bad-blocks.
+    - md/raid5: Fix possible confusion when multiple write errors occur.
+    - mm: Make {,set}page_address() static inline if WANT_PAGE_VIRTUAL
+      (fixes FTBFS on sparc and m68k)
+    - [x86] drm/i915: Don't grab crtc mutexes in intel_modeset_gem_init()
+      (regression in 3.12.7)
+    - [arm] 7938/1: OMAP4/highbank: Flush L2 cache before disabling
+
+  [ Ben Hutchings ]
+  * HID: Enable HID_ELO, HID_XINMO as modules (Closes: #736369)
+  * xhci: Revert generalised sg support (Closes: #733826, #736274)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 01 Feb 2014 18:50:01 +0100
+
+linux (3.12.8-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.7
+    - [powerpc] kvm: fix rare but potential deadlock scene
+    - [m68k] TTY: pmac_zilog, check existence of ports in pmz_console_init()
+    - xhci: Limit the spurious wakeup fix only to HP machines (fixes
+      regression in 3.12)
+    - usb: chipidea: host: Only disable the vbus regulator if it is not NULL
+      (fixes regression in 3.12)
+    - aio: fix kioctx leak introduced by "aio: Fix a trinity splat"
+    - iser-target: Move INIT_WORK setup into isert_create_device_ib_res
+    - [x86] idle: Repair large-server 50-watt idle-power regression
+      (fixes regression in 3.10)
+    - ext4: call ext4_error_inode() if jbd2_journal_dirty_metadata() fails
+    - ext4: fix use-after-free in ext4_mb_new_blocks
+    - ext4: fix del_timer() misuse for ->s_err_report
+    - ext4: add explicit casts when masking cluster sizes
+    - ext4: fix bigalloc regression
+    - sched/rt: Fix rq's cpupri leak while enqueue/dequeue child RT entities
+    - net_dma: mark broken (fixes potential data loss)
+    - drm/i915: Take modeset locks around intel_modeset_setup_hw_state()
+    - drm/i915: Hold mutex across i915_gem_release
+    - drm/i915: Fix use-after-free in do_switch
+    - drm/i915: don't update the dri1 breadcrumb with modesetting
+    - drm/i915: Fix erroneous dereference of batch_obj inside reset_status
+    - ceph: Avoid data inconsistency due to d-cache aliasing in readpage()
+    - tg3: Expand 4g_overflow_test workaround to skb fragments of any size.
+    - cgroup: fix cgroup_create() error handling path
+    - [powerpc] auxvec.h: account for AT_HWCAP2 in AT_VECTOR_SIZE_BASE
+    - ath9k_htc: properly set MAC address and BSSID mask (CVE-2013-4579)
+      (Closes: #729573)
+    - KVM: nVMX: Unconditionally uninit the MMU on nested vmexit
+    - [x86] KVM: Fix APIC map calculation after re-enabling
+    - [powerpc] Fix bad stack check in exception entry
+    - libata: implement ATA_HORKAGE_NO_NCQ_TRIM and apply it to Micro M500 SSDs
+      (fixes potential data loss)
+    - radiotap: fix bitmap-end-finding buffer overrun
+    - mm: numa: serialise parallel get_user_page against THP migration
+    - mm: numa: call MMU notifiers on THP migration
+    - mm: clear pmd_numa before invalidating
+    - mm: numa: do not clear PTE for pte_numa update
+    - mm: numa: ensure anon_vma is locked to prevent parallel THP splits
+    - sched: numa: skip inaccessible VMAs
+    - mm: numa: clear numa hinting information on mprotect
+    - mm: fix TLB flush race between migration, and change_protection_range
+    - mm: numa: guarantee that tlb_flush_pending updates are visible before
+      page table updates
+    - mm/mempolicy: correct putback method for isolate pages if failed
+    - mm/compaction: respect ignore_skip_hint in update_pageblock_skip
+    - mm/hugetlb: check for pte NULL pointer in __page_check_address()
+    - mm: munlock: fix a bug where THP tail page is encountered
+    - mm: munlock: fix deadlock in __munlock_pagevec()
+    - mm: fix use-after-free in sys_remap_file_pages
+    - Input: allocate absinfo data when setting ABS capability
+    - GFS2: Fix use-after-free race when calling gfs2_remove_from_ail
+    - GFS2: Fix slab memory leak in gfs2_bufdata
+    - GFS2: Fix incorrect invalidation for DIO/buffered I/O
+    - [s390] 3270: fix allocation of tty3270_screen structure
+    - [sh] always link in helper functions extracted from libgcc
+    - selinux: look for IPsec labels on both inbound and outbound packets
+    - selinux: process labeled IPsec TCP SYN-ACK packets properly in
+      selinux_ip_postroute()
+    - aio: clean up and fix aio_setup_ring page mapping
+    - aio/migratepages: make aio migrate pages sane
+    - ACPIPHP / radeon / nouveau: Fix VGA switcheroo problem related to hotplug
+      (regression in 3.12)
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.8
+    - IPv6: Fixed support for blackhole and prohibit routes
+    - net: do not pretend FRAGLIST support
+    - tun: unbreak truncated packet signalling
+    - macvtap: signal truncated packets
+    - br: fix use of ->rx_handler_data in code executed on non-rx_handler path
+    - inet: fix NULL pointer Oops in fib(6)_rule_suppress
+    - vxlan: release rt when found circular route
+    - ipv6: fix illegal mac_header comparison on 32bit
+    - ip_gre: fix msg_name parsing for recvfrom/recvmsg
+    - net: inet_diag: zero out uninitialized idiag_{src,dst} fields
+    - drivers/net/hamradio: Integer overflow in hdlcdrv_ioctl()
+    - hamradio/yam: fix info leak in ioctl
+    - net: fec: fix potential use after free
+    - rds: prevent dereference of a NULL device
+    - arc_emac: fix potential use after free
+    - net: rose: restore old recvmsg behavior (regression in 3.12.4)
+    - vlan: Fix header ops passthru when doing TX VLAN offload.
+    - virtio-net: fix refill races during restore
+    - net: llc: fix use after free in llc_ui_recvmsg
+    - netpoll: Fix missing TXQ unlock and and OOPS.
+    - bridge: use spin_lock_bh() in br_multicast_set_hash_max
+    - sfc: Add length checks to efx_xmit_with_hwtstamp() and
+      efx_ptp_is_ptp_tx()
+    - sfc: PTP: Moderate log message on event queue overflow
+    - sfc: Rate-limit log message for PTP packets without a matching timestamp
+      event
+    - [arm] fix "bad mode in ... handler" message for undefined instructions
+    - [arm] 7923/1: mm: fix dcache flush logic for compound high pages
+    - [hppa] Ensure full cache coherency for kmap/kunmap
+    - clk: clk-divider: fix divisor > 255 bug
+    - mfd: rtsx_pcr: Disable interrupts before cancelling delayed works
+    - netfilter: fix wrong byte order in nf_ct_seqadj_set internal information
+      (regression in 3.12)
+    - netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helper
+    - x86, fpu, amd: Clear exceptions in AMD FXSAVE workaround
+      (CVE-2014-1438) (Closes: #733551)
+    - sched: Fix race on toggling cfs_bandwidth_used
+    - sched: Fix cfs_bandwidth misuse of hrtimer_expires_remaining
+    - sched: Fix hrtimer_cancel()/rq->lock deadlock
+
+  [ Ben Hutchings ]
+  * [hppa] Update configuration, thanks to Helge Deller (Closes: #733895)
+    - Change AGP, AGP_PARISC from modules to built-in, to work around
+      race condition between DRM and AGP
+    - Enable DEBUG_STACKOVERFLOW
+    - udeb: Build packages for the parisc64-smp flavour instead of the
+      removed parisc flavour (fixes FTBFS)
+  * linux-image: Make maintainer scripts less verbose (Closes: #734266)
+  * [m68k] Enable EARLY_PRINTK (Closes: #734289)
+  * crypto: Enable more processor-specific algorithms and drivers:
+    - [amd64] Enable CRYPTO_CRCT10DIF_PCLMUL, CRYPTO_SHA256_SSSE3,
+      CRYPTO_SHA512_SSSE3, CRYPTO_GHASH_CLMUL_NI_INTEL,
+      CRYPTO_CAMELLIA_AESNI_AVX_X86_64, CRYPTO_CAMELLIA_AESNI_AVX2_X86_64,
+      CRYPTO_CAST5_AVX_X86_64, CRYPTO_CAST6_AVX_X86_64,
+      CRYPTO_SERPENT_AVX2_X86_64 as modules (Closes: #734376)
+    - [arm] Enable CRYPTO_SHA1_ARM, CRYPTO_AES_ARM as modules
+    - [powerpc] Enable CRYPTO_SHA1_PPC as module
+    - [sparc] Enable CRYPTO_CRC32C_SPARC64, CRYPTO_MD5_SPARC64,
+      CRYPTO_SHA1_SPARC64, CRYPTO_SHA256_SPARC64, CRYPTO_SHA512_SPARC64,
+      CRYPTO_AES_SPARC64, CRYPTO_CAMELLIA_SPARC64, CRYPTO_DES_SPARC64,
+      CRYPTO_DEV_NIAGARA2 as modules
+    - [x86] Enable CRYPTO_CRC32_PCLMUL as module
+  * [powerpc] Remove AT_HWCAP2 from auxv to avoid module ABI change
+  * [rt] Update to 3.12.6-rt9:
+    - rcu: Don't activate RCU core on NO_HZ_FULL CPUs
+    - timers: do not raise softirq unconditionally
+    - rcutree/rcu_bh_qs: disable irq while calling rcu_preempt_qs()
+  * Revert "net: unix: allow set_peek_off to fail", included in 3.12.8,
+    as it would cause an ABI change
+  * media: Enable VIDEO_STK1160_COMMON (new dependency of VIDEO_STK1160)
+    as module (Closes: #735870)
+  * [x86] brcm80211: Enable BRCMFMAC as module, and BRCMFMAC_SDIO
+    (Closes: #735245)
+  * [x86] staging: lustre: Make LUSTRE_LLITE_LLOOP tristate
+
+  [ Ian Campbell ]
+  * [armel/kirkwood] Fix interrupt handling on non-DT platforms (Closes: #735172)
+  * [armhf/armmp] Add mmci driver to mmc-module udeb.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 19 Jan 2014 19:22:22 +0000
+
+linux (3.12.6-2) unstable; urgency=medium
+
+  [ Bastian Blank ]
+  * [x86] Make MICROCODE built-in for early microcode loading.
+
+  [ Ben Hutchings ]
+  * [armhf] linux-headers: Fix typo in compiler dependency
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 29 Dec 2013 16:56:20 +0100
+
+linux (3.12.6-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4
+    - net: x86: bpf: don't forget to free sk_filter (v2)
+    - net: Fix "ip rule delete table 256" (Closes: #724783)
+    - net-tcp: fix panic in tcp_fastopen_cache_set()
+    - inet: prevent leakage of uninitialized memory to user in recv syscalls
+      (CVE-2013-6405)
+    - ping: prevent NULL pointer dereference on write to msg_name
+      (CVE-2013-6432)
+    - ipv6: fix leaking uninitialized port number of offender sockaddr
+    - netfilter: push reasm skb through instead of original frag skbs
+    - packet: fix use after free race in send path when dev is released
+    - gso: handle new frag_list of frags GRO packets
+    - net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST
+    - xfs: add capability check to free eofblocks ioctl
+    - iommu/vt-d: Fixed interaction of VFIO_IOMMU_MAP_DMA with IOMMU address
+      limits
+    - aio: Fix a trinity splat
+    - aio: prevent double free in ioctx_alloc
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.5
+    - [s390,s390x] crypto: Fix aes-xts parameter corruption
+    - crypto: scatterwalk - Set the chain pointer indication bit
+    - crypto: ccm - Fix handling of zero plaintext when computing mac
+    - crypto: authenc - Find proper IV address in ablkcipher callback
+    - [armhf] mvebu: use the virtual CPU registers to access coherency
+      registers
+    - vfs: fix subtle use-after-free of pipe_inode_info
+    - SCSI: bfa: Fix crash when symb name set for offline vport
+    - SCSI: hpsa: do not discard scsi status on aborted commands
+    - [hppa] fix mmap(MAP_FIXED|MAP_SHARED) to already mmapped address
+    - net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST
+    - SCSI: Disable WRITE SAME for RAID and virtual host adapter drivers
+    - tg3: avoid double-freeing of rx data memory
+    - crypto: scatterwalk - Use sg_chain_ptr on chain entries
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.6
+    - ALSA: memalloc.h - fix wrong truncation of dma_addr_t
+    - [arm] 7912/1: check stack pointer in get_wchan
+    - [arm] 7913/1: fix framepointer check in unwind_frame
+    - KVM: Improve create VCPU parameter (CVE-2013-4587)
+    - [x86] KVM: Fix potential divide by 0 in lapic (CVE-2013-6367)
+    - [x86] KVM: Convert vapic synchronization to _cached functions
+      (CVE-2013-6368)
+    - [x86] KVM: fix guest-initiated crash with x2apic (CVE-2013-6376)
+    - xfs: growfs overruns AGFL buffer on V4 filesystems
+    - futex: fix handling of read-only-mapped hugepages
+    - nfsd: when reusing an existing repcache entry, unhash it first
+    - [armhf] usb: musb: musb_cppi41: handle pre-mature TX complete interrupt
+    - powerpc: Fix PTE page address mismatch in pgtable ctor/dtor
+    - mm: memcg: do not allow task about to OOM kill to bypass the limit
+    - mm: memcg: fix race condition between memcg teardown and swapin
+    - cfg80211: disable 5/10 MHz support for all drivers
+    - Revert "mac80211: allow disable power save in mesh"
+    - mac80211: fix scheduled scan rtnl deadlock
+    - iwlwifi: mvm: check sta_id/drain values in debugfs
+    - Btrfs: fix access_ok() check in btrfs_ioctl_send()
+    - dm snapshot: avoid snapshot space leak on crash
+    - dm array: fix a reference counting bug in shadow_ablock
+    - dm space map metadata: return on failure in sm_metadata_new_block
+    - dm space map: disallow decrementing a reference count below zero
+    - dm table: fail dm_table_create on dm_round_up overflow
+    - dm thin: switch to read only mode if a mapping insert fails
+    - dm thin: switch to read-only mode if metadata space is exhausted
+    - dm thin: always fallback the pool mode if commit fails
+    - dm thin: re-establish read-only state when switching to fail mode
+    - dm thin: allow pool in read-only mode to transition to read-write mode
+    - media/cxd2820r_core: Fix regression in 3.12.3
+    - sched: Avoid throttle_cfs_rq() racing with period_timer stopping
+    - Btrfs: do a full search everytime in btrfs_search_old_slot
+    - Btrfs: reset intwrite on transaction abort
+    - Btrfs: fix memory leak of chunks' extent map
+    - Btrfs: fix hole check in log_one_extent
+    - Btrfs: fix incorrect inode acl reset
+    - Btrfs: take ordered root lock when removing ordered operations inode
+    - Btrfs: do not run snapshot-aware defragment on error
+    - Btrfs: fix a crash when running balance and defrag concurrently
+    - Btrfs: fix lockdep error in async commit
+
+  [ Ben Hutchings ]
+  * udeb: Add ohci-pci to usb-modules (Closes: #730789)
+  * cifs: Enable CIFS_SMB2
+  * [hppa] Update flavours and configuration, thanks to Helge Deller
+    (Closes: #721191)
+    - Remove parisc-smp and parisc64 (UP) flavours
+    - Build with gcc-4.8
+    - rtc: Enable HP_SDC_RTC as module
+    - megaraid: Enable MEGARAID_NEWGEN
+    - [/parisc64-smp] Enable MLONGCALLS, DISCONTIGMEM_MANUAL
+    - [/parisc64-smp] Enable PATA_SIL680, AGP, AGP_PARISC, DRM,
+      DRM_RADEON as modules
+  * firmware: Disable FW_LOADER_USER_HELPER (see #725714)
+  * firmware: Improve logging of success/failure for direct file loading
+  * media: az6007: support Technisat Cablestar Combo HDCI (minus remote)
+    (Closes: #732106)
+  * linux-source: Compress with gzip -1 (Closes: #725492)
+  * [alpha] Prevent a NULL ptr dereference in csum_partial_copy
+  * Set ABI to 1
+  * [ia64] Enable PSTORE, EFI_VARS_PSTORE
+  * [x86,ia64] udeb: Remove zlib-modules as zlib is now built-in
+  * [rt] Update to 3.12.5-rt7:
+    - ptrace: fix ptrace vs tasklist_lock race
+    - migrate_disable pushd down in atomic_dec_and_spin_lock
+    - migrate_disable pushd down in rt_spin_trylock_irqsave
+    - migrate_disable pushd down in rt_write_trylock_irqsave
+    - Revert "sched/rt: Fix wait_task_interactive() to test rt_spin_lock state"
+    - seqlock: consolidate spin_lock/unlock waiting with spin_unlock_wait
+    - softirq: make migrate disable/enable conditioned on softirq_nestcnt
+
+  [ Ian Campbell ]
+  * [armel/kirkwood+orion] Reenable MARVELL_PHY (Closes: #723177)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 21 Dec 2013 03:12:38 +0000
+
+linux (3.12.3-1~exp1) experimental; urgency=medium
+
+  * New upstream stable update:
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.1
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.2
+    - libertas: potential oops in debugfs (CVE-2013-6378)
+    - exec/ptrace: fix get_dumpable() incorrect tests (CVE-2013-2929)
+    https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.3
+
+  [ Ben Hutchings ]
+  * [rt] Update to 3.12.0-rt2 and reenable
+  * HID: Enable UHID as module (Closes: #729338)
+  * [sh4] Remove some accidental inconsistencies in config
+  * Enable CHECKPOINT_RESTORE (Closes: #682700)
+  * Enable JUMP_LABEL (Closes: #730071)
+  * [x86] staging: Enable CRYSTALHD as module (Closes: #730832)
+  * aufs: Update to aufs3.12-20131111 (no functional change)
+  * [rt] Update to 3.12.1-rt4
+  * udeb: Add snd-usb-hiface to sound-modules, thanks to Samuel Thibault
+    (Closes: #730418)
+  * linux-image-dbg: Use correct objcopy command when cross-compiling,
+    thanks to Jon Severinsson
+
+  [ Bastian Blank ]
+  * Use compiler name instead of Linux version in compiler meta-packages.
+
+  [ Ian Campbell ]
+  * [armhf]: Enable AHCI_IMX in armmp+lpae flavours.
+
+  [ Aurelien Jarno ]
+  * [mips/octeon] Add kernel udebs.
+  * [mipsel] Add a loongson-2e flavour.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 05 Dec 2013 14:34:39 +0000
+
+linux-tools (3.12.6-1) unstable; urgency=medium
+
+  * New upstream stable update
+    - perf tools: Remove cast of non-variadic function to variadic
+    - perf tools: Synthesize anon MMAP records again
+
+  [ Ben Hutchings ]
+  * linux-tools: Replace build-dependency on binutils-dev with
+    libiberty-dev (or old binutils-dev, for ease of backporting)
+    (Closes: #730883)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 30 Nov 2013 23:48:32 +0000
+
+linux-tools (3.12-1~exp1) experimental; urgency=low
+
+  * New upstream release (Closes: #729197)
+  * [x86, powerpc, ppc64] linux-tools: Build perf with libnuma
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 18 Nov 2013 05:14:34 +0000
+
+linux (3.12-1~exp1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.12
+
+  [ Ben Hutchings ]
+  * namespaces: Enable USER_NS (Closes: #712870)
+    - Restrict creation of user namespaces to root (CAP_SYS_ADMIN) by
+      default (sysctl: kernel.unprivileged_userns_clone)
+  * aufs: Update to aufs3.x-rcN-20131104
+    - mmap() holds a reference to the union file as well as the branch file
+  * [armel/{iop32x,ixp4xx}] Disable BPF_JIT, MEMCG, USER_NS to reduce kernel
+    size
+  * [arm,x86,s390,s390x] Introduce linux-compiler meta-packages to allow use
+    of foreign linux-headers packages with a native multilib compiler
+  * perf/ftrace: Fix paranoid level for enabling function tracer
+    (CVE-2013-2930)
+  * media/usb/gspca: Enable USB_GSPCA_STK1135 as module
+  * net/ethernet: Enable I40E as module
+  * net/usb: Enable USB_NET_SR9700 as module
+  * net/wireless/rt2x00: Enable RT2800USB_RT3573
+  * openvswitch: Enable OPENVSWITCH_VXLAN
+  * net/sched: Enable NET_SCH_FQ as module
+  * [x86] HID: Enable I2C_HID as module (Closes: #729801)
+  * [x86] input/misc: Enable INPUT_IDEAPAD_SLIDEBAR as module
+  * [x86] fs: Enable LUSTRE_FS, LUSTRE_LLITE_LOOP, LNET_XPRT_IB as modules
+  * [x86] thermal: Enable INTEL_POWERCLAMP, X86_PKG_TEMP_THERMAL as modules
+  * [armhf/armmp] udeb: Add zlib-modules
+
+  [ Thorsten Glaser ]
+  * Update m68k config (Closes: #728392):
+    - enable COMPAT_BRK by explicit upstream (m68k maintainer) request
+    - re-enable FPU emulation after discussion upstream, by popular request
+    - disable ADB_MACIISI by upstream (Mac68k maintainer) request
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 17 Nov 2013 22:41:26 +0000
+
+linux (3.12~rc7-1~exp1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20131014
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 28 Oct 2013 04:12:20 +0000
+
+linux (3.11.10-1) unstable; urgency=medium
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.9
+    - net/mlx4_core: Fix call to __mlx4_unregister_mac
+    - net: sctp: do not trigger BUG_ON in sctp_cmd_delete_tcb
+    - cxgb3: Fix length calculation in write_ofld_wr() on 32-bit architectures
+    - tcp: gso: fix truesize tracking
+    - xen-netback: Handle backend state transitions in a more robust way
+    - xen-netback: transition to CLOSED when removing a VIF
+    - [x86] hyperv-fb: add pci stub
+    - tracing: Fix potential out-of-bounds in trace_get_user()
+    - perf: Fix perf ring buffer memory ordering
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.10
+    - ACPICA: DeRefOf operator: Update to fully resolve FieldUnit and
+      BufferField refs.
+    - libertas: potential oops in debugfs (CVE-2013-6378)
+    - aacraid: prevent invalid pointer dereference
+    - ACPICA: Return error if DerefOf resolves to a null package element.
+    - ACPICA: Fix for a Store->ArgX when ArgX contains a reference to a field.
+    - USB: mos7840: fix tiocmget error handling
+    - Btrfs: relocate csums properly with prealloc extents
+    - [s390,s390x] crypto: s390 - Fix aes-cbc IV corruption
+    - can: c_can: Fix RX message handling, handle lost message before EOB
+    - ipc,shm: correct error return value in shmctl (SHM_UNLOCK)
+    - ipc,shm: fix shm_file deletion races
+    - drm/nvc0-/gr: fix a number of missing explicit array terminators...
+    - sched, idle: Fix the idle polling state logic
+    - [x86] ACPI / EC: Ensure lock is acquired before accessing ec struct
+      members
+    - [x86] ACPI / video: Quirk initial backlight level 0
+    - Staging: zram: Fix access of NULL pointer
+    - Drivers: hv: vmbus: Fix a bug in channel rescind code
+    - rt2x00: fix a crash bug in the HT descriptor handling fix
+    - Bluetooth: revert: "Bluetooth: Add missing reset_resume dev_pm_ops"
+    - exec/ptrace: fix get_dumpable() incorrect tests (CVE-2013-2929)
+
+  [ Ben Hutchings ]
+  * net: clamp ->msg_namelen instead of returning an error
+  * tcp: tsq: restore minimal amount of queueing
+  * rds: prevent BUG_ON triggered on congestion update to loopback
+    (CVE-2012-2372)
+  * ipv6: fix headroom calculation in udp6_ufo_fragment (CVE-2013-4563)
+  * [s390,s390x] qeth: avoid buffer overflow in snmp ioctl (CVE-2013-6381)
+  * xfs: underflow bug in xfs_attrlist_by_handle() (CVE-2013-6382)
+  * [x86] Enable CHROMEOS_LAPTOP as module (Closes: #731271)
+    - iio/light: Enable SENSORS_TSL2563, SENSORS_ISL29018, TSL2583 as modules
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 04 Dec 2013 14:49:01 +0000
+
+linux (3.11.8-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.8
+    - bcache: Fixed incorrect order of arguments to bio_alloc_bioset()
+    - cgroup: fix to break the while loop in cgroup_attach_task() correctly
+    - mac80211: drop spoofed packets in ad-hoc mode
+    - mac80211: fix crash if bitrate calculation goes wrong
+    - rtlwifi: rtl8192cu: Fix error in pointer arithmetic
+    - jfs: fix error path in ialloc
+    - SCSI: sd: call blk_pm_runtime_init before add_disk
+    - ecryptfs: Fix memory leakage in keystore.c
+    - eCryptfs: fix 32 bit corruption issue
+    - raid5: set bio bi_vcnt 0 for discard request
+    - raid5: avoid finding "discard" stripe
+    - libata: make ata_eh_qc_retry() bump scmd->allowed on bogus failures
+    - Revert "epoll: use freezable blocking call"
+    - Revert "select: use freezable blocking call"
+    - md: Fix skipping recovery for read-only arrays.
+    - vhost/scsi: Fix incorrect usage of get_user_pages_fast write parameter
+    - Fix a few incorrectly checked [io_]remap_pfn_range() calls
+    - lib/scatterlist.c: don't flush_kernel_dcache_page on slab page
+    - aacraid: missing capable() check in compat ioctl
+    - mm: Wait for THP migrations to complete during NUMA hinting faults
+    - mm: Prevent parallel splits during THP migration
+    - mm: Close races between THP migration and PMD numa clearing
+    - mm/pagewalk.c: fix walk_page_range() access of wrong PTEs
+    - drm: Prevent overwriting from userspace underallocating core ioctl
+      structs
+    - seq_file: always update file->f_pos in seq_lseek()
+
+  [ Ben Hutchings ]
+  * perf/ftrace: Fix paranoid level for enabling function tracer
+    (CVE-2013-2930)
+  * [armhf] Bump ABI to 2
+  * [armhf/armmp] udeb: Add zlib-modules (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 13 Nov 2013 05:36:36 +0000
+
+linux (3.11.7-1) unstable; urgency=low
+  
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.7
+    - tcp: TSO packets automatic sizing
+    - tcp: TSQ can use a dynamic limit
+    - tcp: must unclone packets before mangling them
+    - tcp: fix incorrect ca_state in tail loss probe (Closes: #728726)
+
+  [ Ben Hutchings ]
+  * [armel] udeb: Re-enable iop32x flavour
+  * Bump ABI to 2 due to TCP changes
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 09 Nov 2013 20:18:02 +0000
+
+linux (3.11.6-2) unstable; urgency=medium
+
+  [ Ben Hutchings ]
+  * [sh4] Reduce compiler version to gcc-4.7, as gcc-4.8 is not yet
+    available
+  * [ia64] Reduce compiler version to gcc-4.6, matching gcc-defaults
+    (fixes FTBFS)
+  * [armhf] Bump ABI to 1a, as enabling Xen and KVM support changes ABI
+  * net: Fix infinite loop in in skb_flow_dissect() (CVE-2013-4348)
+  * net: do not call sock_put() on TIMEWAIT sockets
+  * l2tp: fix kernel panic when using IPv4-mapped IPv6 addresses
+  * net: heap overflow in __audit_sockaddr()
+  * proc connector: fix info leaks
+  * bridge: update mdb expiration timer upon reports.
+  * Revert "bridge: only expire the mdb entry when query is received"
+  * unix_diag: fix info leak
+  * be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd
+  * net: fix cipso packet validation when !NETLABEL
+  * inet: fix possible memory corruption with UDP_CORK and UFO
+  * [arm] 7851/1: check for number of arguments in syscall_get/set_arguments()
+  * ext[34]: fix double put in tmpfile
+  * dm snapshot: fix data corruption (CVE-2013-4299)
+  * i2c: ismt: initialize DMA buffer
+  * mm: fix BUG in __split_huge_page_pmd
+  * writeback: fix negative bdi max pause
+
+  [ Aurelien Jarno ]
+  * UAPI: include <asm/byteorder.h> in linux/raid/md_p.h.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 01 Nov 2013 05:23:13 +0000
+
+linux-tools (3.11-3) unstable; urgency=low
+
+  * linux-tools: Replace build-dependency on libunwind8-dev with
+    libunwind7-dev, as the new libunwind will not enter testing soon
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 29 Oct 2013 02:12:36 +0000
+
+linux (3.11.6-1) unstable; urgency=low
+  
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.6
+    - random: run random_int_secret_init() run after all late_initcalls
+    - ext4: fix memory leak in xattr
+    - KVM: PPC: Book3S HV: Fix typo in saving DSCR
+    - ipc: Apply mainline changes up to 3.12-rc5
+
+  [ Ian Campbell ]
+  * [armhf] Enable Xen and virtio for armmp and armmp-lpae as well as KVM for
+    armmp-lpae only.
+
+  [ Ben Hutchings ]
+  * kbuild: Use -nostdinc in compile tests (Closes: #726861, workaround
+    for #717557)
+  * Disable CC_OPTIMIZE_FOR_SIZE (Closes: #635899, fixes FTBFS on mips,
+    mipsel, powerpc) [!armel/{iop32x,ixp4xx,kirkwood,orion5x},m68k]
+  * aufs: Update to aufs3.11-20131014
+    - Remove dependency on loop module (Closes: #727243)
+  * [armhf/armmp] udeb: Add ppp-modules
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 27 Oct 2013 19:02:04 +0000
+
+linux-tools (3.11-2) unstable; urgency=low
+
+  * linux-tools: Limit build-dependency on libunwind8-dev to architectures
+    where it is available and needed
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 27 Oct 2013 18:01:37 +0000
+
+linux-tools (3.11-1) unstable; urgency=low
+
+  * New upstream release
+  * linux-tools: Build perf with libaudit and libunwind
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 19 Oct 2013 02:38:59 +0100
+
+linux (3.11.5-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.1
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.2
+    - media: siano: fix divide error on 0 counters (Closes: #719623)
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.3
+    - HID: multitouch: validate indexes details (CVE-2013-2897)
+    - HID: LG: validate HID output report details (CVE-2013-2893)
+    - HID: zeroplus: validate output report details (CVE-2013-2889)
+    - HID: lenovo-tpkbd: fix leak if tpkbd_probe_tp fails (CVE-2013-2894)
+    - HID: steelseries: validate output report details (CVE-2013-2891)
+    - HID: logitech-dj: validate output report details (CVE-2013-2895)
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.4
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.5
+    - cpqarray: fix info leak in ida_locked_ioctl() (CVE-2013-2147)
+    - cciss: fix info leak in cciss_ioctl32_passthru() (CVE-2013-2147)
+    - tuntap: correctly handle error in tun_set_iff() (CVE-2013-4343)
+    - net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit (CVE-2013-4350)
+    - ipv6: udp packets following an UFO enqueued packet need also be handled
+      by UFO (CVE-2013-4387)
+
+  [ Ben Hutchings ]
+  * udeb: Update config to match previous kernel config changes:
+    - Remove ext{2,3}-modules
+    - Update description of ext4-modules and let it provide ext{2,3}-modules
+    - Remove aic7xxx_old, enc28j60 and imm from module lists
+    - [sh4] kernel-image no longer provides ext3-modules
+  * [hppa] udeb: kernel-image does not provide ext2-modules (since 3.2.7-1)
+  * [arm] thermal: Re-enable CPU_THERMAL as built-in (regression in
+    3.10~rc4-1~exp1)
+  * Stop providing virtual packages linux-image (Closes: #724569),
+    linux-headers and linux-source
+  * hwmon: Enable SENSORS_JC42, SENSORS_NCT6775 as modules (Closes: #722062)
+  * compiler/gcc4: Add quirk for 'asm goto' miscompilation bug
+  * [arm64] Build a linux-libc-dev package (Closes: #695241)
+  * crypto: ansi_cprng - Fix off by one error in non-block size request
+    (CVE-2013-4345)
+  * mvsas: Recognise device/subsystem 9485/9485 as 88SE9485
+  * Set ABI to 1
+  * [i386] Remove xen-linux-system-<version> packages (Closes: #726010)
+
+  [ Ian Campbell ]
+  * [armhf] Enable CONFIG_PCI for multiplatform flavour.
+    - Enable standard NIC and SCSI modules and include in udebs.
+  * [armhf] Add multiplatform + LPAE flavour (armmp-lpae).
+  * [armhf] Remove mx5, omap and vexpress flavours. These are all supported
+    by the multiplatform flavour.
+  * [armel/kirkwood] Add orion-ehci, mvmdio and of_mdio modules to udebs.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 17 Oct 2013 14:46:41 +0100
+
+linux (3.11-1~exp1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.11
+
+  [ Ben Hutchings ]
+  * Disable drivers for various platform/undetectable devices by default:
+    - ata: Disable PATA_ARASAN_CF
+    - hwrng: Disable HW_RANDOM_TIMERIOMEM
+    - mdio: Disable MDIO_BITBANG
+    - media: Disable SOC_CAMERA
+    - media/radio: Disable I2C_SI470X, RADIO_SAA7706H, RADIO_SI4713,
+      RADIO_TEA5764, RADIO_TEF6862, RADIO_WL1273
+    - mfd: Disable HTC_PASIC3, MFD_PCF50633, MFD_SM501, TPS65010
+    - mtd: Disable MTD_ONENAND_GENERIC
+    - mmc: Disable MMC_SPI, MMC_SDHCI_PLTFM
+    - net/can: Disable CAN_MCP251X
+    - net/ethernet: Disable DNET, ENC28J60, ETHOC, KS8842, KS8851, KS8851_MLL,
+      WIZNET_W5100, WIZNET_W5300
+    - net/wireless: Disable LIBERTAS_SPI, P54_SPI
+    - parport: Disable PARPORT_AX88796
+    - power: Disable BATTERY_BQ27x00, BATTERY_DS2760, BATTERY_DS2782,
+      BATTERY_MAX17040
+    - regulator: Disable all drivers
+    - rtc: Disable all drivers except RTC_DRV_CMOS
+    - serial: Disable SERIAL_MAX3100
+    - spi: Disable SPI_TLE62X0
+    - uio: Disable UIO_PDRV, UIO_PDRV_GENIRQ
+    - USB: Disable USB_C67X00_HCD, USB_ISP116X_HCD, USB_R8A66597_HCD
+    - video: Disable FB_METRONOME
+    - w1: Disable W1_SLAVE_DS2760
+  * [x86] mtd: Disable MTD_NAND_PLATFORM
+  * [x86] power: Disable PDA_POWER
+  * [x86] video: Disable FB_S1D13XXX
+  * Disable some old non-hotplug PCI drivers:
+    - SCSI: Disable SCSI_AIC7XXX_OLD
+    - [x86] mtd: Disable MTD_PMC551
+    - [x86] net/wan: Disable SBNI
+  * Disable parport drivers that are no longer likely to be useful:
+    - block: Disable PARIDE
+    - media: Disable VIDEO_BWQCAM, VIDEO_CQCAM, VIDEO_W9966
+    - SCSI: Disable SCSI_IMM, SCSI_PPA
+    - [x86] net/ethernet: Disable ATP
+  * bluetooth: Disable BT_HCIBTUART; the serial_cs and hci_uart drivers
+    should be used instead
+  * PCI: Disable PCIEPORTBUS in configurations for systems without PCI
+    Express: armel/{iop32x,ixp4xx}, mips/!octeon, mipsel/*, sh4/*
+  * [armhf/{armmp,mx5}] cpufreq: Enable GENERIC_CPUFREQ_CPU0 as module,
+    replacing CPU_FREQ_IMX
+  * [armhf/armmp] Enable PINCTRL_WM8850, replacing GPIO_VT8500
+  * [powerpc/powerpc64] Enable CPU_FREQ_CBE (previously CBE_CPUFREQ) as module
+  * [armel] Re-enable iop32x and ixp4xx flavours
+  * aufs: Update to aufs3.x-rcN-20130909
+
+  [ Bastian Blank ]
+  * Symlink doc directory in linux-headers packages.
+  * Make gcc-4.8 the default compiler.
+  * Use default font selection.
+  * Enable NFS 4.2 client support.
+  * Use ext4 for all ext-variants.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 12 Sep 2013 03:57:27 +0100
+
+linux (3.11~rc7-1~exp1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [arm,mips,s390,sh4] Enable KPROBES
+  * trace: Enable KPROBE_EVENT (Closes: #640953)
+  * trace: Enable UPROBES, UPROBE_EVENT (Closes: #691167)
+  * irq: Always define devm_{request_threaded,free}_irq() (fixes FTBFS on
+    s390,s390x)
+  * [armel] Disable iop32x and ixp4xx flavours (fixes FTBFS)
+  * Clean up maintainer scripts and templating system
+    - Move all templates under debian/templates
+    - linux-image: Remove undocumented $KERNEL_ARCH variable from hook
+      environment
+    - Use only one template syntax (@keyword@) and do all substitutions
+      in gencontrol.py
+    - linux-image.postinst: Remove debconf warning about ramdisk variable in
+      /etc/kernel-img.conf
+    - linux-image.postinst: Remove debconf warning about missing firmware;
+      this should now be redundant and it annoys users that don't need the
+      files (Closes: #612822)
+  * Update Brazilian Portugese debconf template translations
+    (Fernando Ike de Oliveira) (Closes: #719725)
+  * hid: Enable HID_HUION as module (Closes: #721002)
+  * [powerpc,x86] hid: Enable HID_APPLEIR as module
+  * ACPI: Enable ACPI_INITRD_TABLE_OVERRIDE (Closes: #721310)
+  * net: Enable NET_MPLS_GSO
+  * nfc: Enable NFC_SIM as module
+  * md: Enable DM_SWITCH as module
+  * net: Enable NLMON as module
+  * wireless: Enable ATH10K, ATH10K_PCI as modules
+  * media: Enable VIDEO_USBTV as module
+  * video: Enable FB_SMSCUFX as module
+  * usb/serial: Enable USB_SERIAL_WISHBONE, USB_SERIAL_FLASHLOADER,
+    USB_SERIAL_SUUNTO as modules
+  * infiniband: Enable INFINIBAND_ISERT as module
+  * xen: Enable XEN_BALLOON_MEMORY_HOTPLUG
+  * fs: Enable QNX6FS_FS as module
+  * f2fs: Enable F2FS_FS_SECURITY
+  * 9p: Enable 9P_FS_SECURITY
+  * sunrpc: Enable SUNRPC_DEBUG
+  * vhost: Enable VHOST_SCSI as module
+  * [x86] video: Enable FB_HYPERV as module
+  * [x86] snd-hda-intel: Enable SND_HDA_I915
+  * [x86] mmc: Enable MMC_SDHCI_ACPI as module
+  * [x86] comedi: Enable COMEDI_ADV_PCI1724, COMEDI_NI_LABPC_PCI (formerly
+    COMEDI_NI_LABPC) as modules
+  * [x86] Enable MLX5_INFINIBAND as module
+  * [amd64] iommu: Enable AMD_IOMMU_V2
+  * [x86,ia64] fs: Enable EFIVAR_FS as module
+  * wireless/ti: Disable WL_TI on all configurations except armhf/armmp
+  * [hppa,mips,mipsel,sh4,sparc] ehci-hcd: Enable USB_EHCI_ROOT_HUB_TT and
+    USB_EHCI_TT_NEWSCHED in all configurations, consistent with other
+    architectures
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 01 Sep 2013 05:15:57 +0100
+
+linux-tools (3.11~rc4-1~exp1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * linux-tools: Build perf documentation out-of-tree, as this now works
+    and our previous workaround does not
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 08 Aug 2013 16:21:00 +0200
+
+linux (3.11~rc4-1~exp1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20130805
+
+  [ Hector Oron ]
+  * [armhf/armmp] Enable NET_CALXEDA_XGMAC as module (Closes: #717269) 
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 08 Aug 2013 13:09:47 +0200
+
+linux (3.10.11-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.8
+    - [arm] perf/arm: Fix armpmu_map_hw_event()
+    - memcg: don't initialize kmem-cache destroying work for root caches
+    - fs/proc/task_mmu.c: fix buffer overflow in add_page_map()
+    - elevator: Fix a race in elevator switching
+    - mac80211: fix infinite loop in ieee80211_determine_chantype
+    - can: pcan_usb: fix wrong memcpy() bytes length
+    - cfg80211: fix P2P GO interface teardown
+    - ASoC: dapm: Fix empty list check in dapm_new_mux()
+    - ALSA: 6fire: make buffers DMA-able (pcm)
+    - ALSA: 6fire: make buffers DMA-able (midi)
+    - USB: ti_usb_3410_5052: fix big-endian firmware handling
+    - USB: mos7720: fix broken control requests
+    - Fix TLB gather virtual address range invalidation corner cases
+    - [arm] 7809/1: perf: fix event validation for software group leaders
+      (CVE-2013-4254)
+    - jbd2: Fix use after free after error in jbd2_journal_dirty_metadata()
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.9
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.10
+    - [s390] KVM: s390: move kvm_guest_enter,exit closer to sie
+    - mac80211: don't wait for TX status forever
+    - tracing/kprobe: Wait for disabling all running kprobe handlers
+    - tracing: Fix many race conditions including potential use-after-free
+    - tracing/kprobes: Fail to unregister if probe event files are in use
+    - tracing/uprobes: Fail to unregister if probe event files are in use
+    - ftrace: Check module functions being traced on reload
+    - zd1201: do not use stack as URB transfer_buffer
+    - VFS: collect_mounts() should return an ERR_PTR
+    - [arm] davinci: nand: specify ecc strength
+    - drm/radeon/r7xx: fix copy paste typo in golden register setup
+    - drm/radeon: fix UVD message buffer validation
+    - drm/i915: Invalidate TLBs for the rings after a reset
+    - nilfs2: remove double bio_put() in nilfs_end_bio_write() for
+      BIO_EOPNOTSUPP error
+    - Hostap: copying wrong data prism2_ioctl_giwaplist()
+    - SCSI: zfcp: fix lock imbalance by reworking request queue locking
+    - SCSI: zfcp: fix schedule-inside-lock in scsi_device list loops
+    - SCSI: sg: Fix user memory corruption when SG_IO is interrupted by a
+      signal
+    - [x86] get_unmapped_area: Access mmap_legacy_base through mm_struct member
+    - bcache: FUA fixes
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.11
+    - drm/nouveau/mc: fix race condition between constructor and request_irq()
+    - jfs: fix readdir cookie incompatibility with NFSv4 (Closes: #714974)
+    - [powerpc] Work around gcc miscompilation of __pa() on 64-bit
+    - [powerpc] Don't Oops when accessing /proc/powerpc/lparcfg without
+      hypervisor
+    - timer_list: correct the iterator for timer_list
+    - drivers/base/memory.c: fix show_mem_removable() to handle missing sections
+    - memcg: check that kmem_cache has memcg_params before accessing it
+    - SUNRPC: Fix memory corruption issue on 32-bit highmem systems
+    - ath9k_htc: Restore skb headroom when returning skb to mac80211
+    - iscsi-target: Fix ImmediateData=Yes failure regression in >= v3.10
+    - iscsi-target: Fix potential NULL pointer in solicited NOPOUT reject
+    - ACPI / EC: Add ASUSTEK L4R to quirk list in order to validate ECDT
+    - regmap: rbtree: Fix overlapping rbnodes.
+
+  [ Ben Hutchings ]
+  * [rt] Update to 3.10.10-rt7:
+    - hwlat-detector: Update hwlat_detector to add outer loop detection
+    - hwlat-detector: Use thread instead of stop machine
+    - hwlat-detector: Use trace_clock_local if available
+    - genirq: do not invoke the affinity callback via a workqueue
+    - simple-wait: rename and export the equivalent of waitqueue_active()
+    - simple-wait: Fix a race condition with swait wakeups vs adding items
+      to the list
+    - rcu: Use swait_wake_all() in rcu_nocb_gp_cleanup()
+  * aufs: Update to aufs3.10-20130826
+  * aufs: mvdown, don't let unprivileged users provoke a WARNING
+  * [x86] ACPI: Re-enable ACPI_HOTPLUG_MEMORY as built-in
+  * [x86] amd64_edac: Fix single-channel setups (Closes: #717473)
+  * [x86] efi: Ensure efi-pstore is loaded on EFI systems
+  * bug script: Prompt to include crash logs from pstore
+  * ipv6: remove max_addresses check from ipv6_create_tempaddr (CVE-2013-0343)
+  * HID: validate HID report id size (CVE-2013-2888)
+  * HID: pantherlord: validate output report details (CVE-2013-2892)
+  * HID: ntrig: validate feature report details (CVE-2013-2896)
+  * HID: sensor-hub: validate feature report details (CVE-2013-2898)
+  * HID: picolcd_core: validate output report details (CVE-2013-2899)
+  * HID: check for NULL field when setting values
+
+  [ Ian Campbell ]
+  * [armel]: Enable MVMDIO and USB_EHCI_HCD_ORION on Kirkwood and Orion
+    (Closes: #719680)
+  * Bump ABI to 3
+  * [armhf]: Add udebs for armmp flavour
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 10 Sep 2013 14:13:16 +0100
+
+linux-tools (3.10-4) unstable; urgency=low
+
+  * Sourceful upload for the perl 5.18 transition
+  * usbip: Fix package version override to be binNMU-safe
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 30 Aug 2013 12:44:56 +0100
+
+linux (3.10.7-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.6
+    - [arm] Modify vectors page to defend against ROP buffer overflow attacks
+    - [armel] 7790/1: Fix deferred mm switch on VIVT processors
+    - [armel] 7791/1: a.out: remove partial a.out support
+    - [powerpc] VPHN topology change updates all siblings
+    - hwmon: (max6697) fix MAX6581 ideality
+    - USB: mos7840: fix race in register handling
+    - USB: mos7840: fix race in led handling
+    - mac80211: fix duplicate retransmission detection
+    - mac80211: fix ethtool stats for non-station interfaces
+    - ixgbe: Fix Tx Hang issue with lldpad on 82598EB
+    - Bluetooth: ath3k: don't use stack memory for DMA
+    - Bluetooth: fix wrong use of PTR_ERR() in btusb
+    - svcrpc: fix gss-proxy xdr decoding oops
+    - svcrpc: fix gss_rpc_upcall create error
+    - svcrpc: fix kfree oops in gss-proxy code
+    - zram: avoid invalid memory access in zram_exit()
+    - zram: use zram->lock to protect zram_free_page() in swap free notify path
+    - zram: avoid double free in function zram_bvec_write()
+    - zram: avoid access beyond the zram device
+    - zram: protect sysfs handler from invalid memory access
+    - Revert "cpuidle: Quickly notice prediction failure in general case"
+    - cpufreq: Fix cpufreq driver module refcount balance after suspend/resume
+    - Revert "cpuidle: Quickly notice prediction failure for repeat mode"
+    - drm/radeon: Disable dma rings for bo moves on r6xx
+    - xen-blkfront: use a different scatterlist for each request
+    - drm/radeon: never unpin UVD bo v3
+    - Btrfs: fix crash regarding to ulist_add_merge
+    - [s390] bitops: fix find_next_bit_left
+    - userns: unshare_userns(&cred) should not populate cred on failure
+      (CVE-2013-4205)
+    - ipv6: take rtnl_lock and mark mrt6 table as freed on namespace cleanup
+    - usbnet: do not pretend to support SG/TSO
+    - net_sched: Fix stack info leak in cbq_dump_wrr().
+    - af_key: more info leaks in pfkey messages
+    - net_sched: info leak in atm_tc_dump_class()
+    - 8139cp: Add dma_mapping_error checking
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.7
+    - [powerpc] Save the TAR register earlier
+    - [powerpc] tm: Fix context switching TAR, PPR and DSCR SPRs
+    - ext4: make sure group number is bumped after a inode allocation race
+    - regmap: cache: Make sure to sync the last register in a block
+    - hwmon: (adt7470) Fix incorrect return code check
+    - media: em28xx: fix assignment of the eeprom data
+    - ACPI / PM: Walk physical_node_list under physical_node_lock
+    - ALSA: 6fire: fix DMA issues with URB transfer_buffer usage
+    - Btrfs: release both paths before logging dir/changed extents
+    - LOCKD: Don't call utsname()->nodename from nlmclnt_setlockargs
+    - SUNRPC: Don't auto-disconnect from the local rpcbind socket
+    - SUNRPC: If the rpcbind channel is disconnected, fail the call to
+      unregister
+    - virtio/console: Quit from splice_write if pipe->nrbufs is 0
+    - virtio/console: Add pipe_lock/unlock for splice_write
+    - virtio: console: fix race with port unplug and open/close
+    - virtio: console: fix race in port_fops_open() and port unplug
+    - virtio: console: clean up port data immediately at time of unplug
+    - virtio: console: fix raising SIGIO after port unplug
+    - virtio: console: return -ENODEV on all read operations after unplug
+    - drm/radeon: stop sending invalid UVD destroy msg
+    - ext4: flush the extent status cache during EXT4_IOC_SWAP_BOOT
+    - cifs: extend the buffer length enought for sprintf() using
+    - zram: allow request end to coincide with disksize
+    - reiserfs: fix deadlock in umount
+    - [x86] drm/i915: initialize gt_lock early with other spin locks
+
+  [ Ben Hutchings ]
+  * [x86] Enable ASUS_OLED as module (Closes: #680016)
+  * [armel/orion5x] I2C: mv64xxx: fix race between FSM/interrupt and process
+    context (Closes: #622325)
+  * [rt] Update to 3.10.6-rt3
+    - hpsa: fix warning with smp_processor_id() in preemptible
+  * [arm] Change SERIAL_8250_PCI from built-in to module
+  * net: Change WIZNET_W5{1,3}00 from built-in(!) to module
+  * net: Change DROP_MONITOR from built-in to module
+  * netlink: Change NETLINK_DIAG from built-in to module; enable on
+    armel/{iop32x,ixp4xx,orion5x}
+
+  [ Thorsten Glaser ]
+  * [m68k] debian/patches/bugfix/m68k/atari-irqs.patch: patch from mailing list
+    to silence IRQ problems on Atari platforms with multi-platform kernel
+  * [m68k] debian/patches/bugfix/m68k/type-fix-div64.patch: patch from Andreas
+    Schwab to handle do_div being called with a non-u32 second argument
+  * [m68k] begin working on d-i kernel configs (just enough to not FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 17 Aug 2013 22:35:15 +0200
+
+linux-tools (3.10-3) unstable; urgency=low
+
+  * linux-kbuild: Fix no-modules case in modpost wrapper (Closes: #719129)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 08 Aug 2013 21:49:02 +0200
+
+linux (3.10.5-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.4
+    - ipv6,mcast: always hold idev->lock before mca_lock
+    - ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET
+      pending data (CVE-2013-4162)
+    - ipv6: ip6_append_data_mtu did not care about pmtudisc and frag_size
+      (CVE-2013-4163)
+    - sunvnet: vnet_port_remove must call unregister_netdev
+    - ipv6: only static routes qualify for equal cost multipathing
+      (CVE-2013-4125)
+    - atl1e: fix dma mapping warnings
+    - atl1e: unmap partially mapped skb on dma error and free skb
+    - vlan: mask vlan prio bits
+    - vlan: fix a race in egress prio management
+    - fuse: readdirplus: fix dentry leak
+    - fuse: readdirplus: fix instantiate
+    - fuse: readdirplus: sanity checks
+    - bcache: Fix a dumb race
+    - bcache: Advertise that flushes are supported
+    - bcache: Shutdown fix (possibly fixes #715019)
+    - bcache: Fix a sysfs splat on shutdown
+    - bcache: Journal replay fix
+    - ext4: fix error handling in ext4_ext_truncate()
+    - media: saa7134: Fix unlocked snd_pcm_stop() call
+    - media: dmxdev: remove dvb_ringbuffer_flush() on writer side
+    - lockd: protect nlm_blocked access in nlmsvc_retry_blocked
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.5
+    - mm: fix the TLB range flushed when __tlb_remove_page() runs out of slots
+    - iscsi-target: Fix tfc_tpg_nacl_auth_cit configfs length overflow
+    - iser-target: Fix session reset bug with RDMA_CM_EVENT_DISCONNECTED
+    - iscsi-target: Fix ISCSI_OP_SCSI_TMFUNC handling for iser
+    - firewire: fix libdc1394/FlyCap2 iso event regression
+    - SCSI: sd: fix crash when UA received on DIF enabled device
+    - tracing: Remove locking trace_types_lock from
+      tracing_reset_all_online_cpus()
+    - usb: host: xhci: Enable XHCI_SPURIOUS_SUCCESS for all controllers with
+      xhci 1.0
+    - xhci: fix null pointer dereference on ring_doorbell_for_active_rings
+    - xhci: Avoid NULL pointer deref when host dies.
+    - staging: comedi: fix a race between do_cmd_ioctl() and read/write
+    - Btrfs: fix wrong write offset when replacing a device
+    - Btrfs: fix lock leak when resuming snapshot deletion
+    - Btrfs: re-add root to dead root list if we stop dropping it
+    - xen-netfront: pull on receive skb may need to happen earlier
+    - md: Remove recent change which allows devices to skip recovery.
+    - md/raid1: fix bio handling problems in process_checks()
+    - md/raid5: fix interaction of 'replace' and 'recovery'.
+    - md/raid10: remove use-after-free bug.
+    - svcrdma: underflow issue in decode_write_list()
+    - nfsd: nfsd_open: when dentry_open returns an error do not propagate as
+      struct file
+    - ACPI / scan: Do not try to attach scan handlers to devices having them
+    - drm/radeon: fix endian issues with DP handling (v3)
+    - drm/radeon: fix combios tables on older cards
+    - drm/i915: fix up ring cleanup for the i830/i845 CS tlb w/a
+    - drm/i915: Fix write-read race with multiple rings
+    - Partially revert "drm/i915: unconditionally use mt forcewake on hsw/ivb"
+    - drm/i915: Fix incoherence with fence updates on Sandybridge+
+    - drm/i915: fix long-standing SNB regression in power consumption after resume v2
+    - drm/i915: Fix dereferencing invalid connectors in is_crtc_connector_off()
+    - drm/i915: correctly restore fences with objects attached
+    - drm/i915: Serialize almost all register access
+    - drm/radeon/atom: initialize more atom interpretor elements to 0
+    - mm: mempolicy: fix mbind_range() && vma_adjust() interaction
+    - tty_port: Fix refcounting leak in tty_port_tty_hangup()
+    - vfs: livelock avoidance in sget()
+    - iscsi-target: Fix iscsit_add_reject* usage for iser
+    - drm/i915: Correct obj->mm_list link to
+      dev_priv->dev_priv->mm.inactive_list
+
+  [ Ben Hutchings ]
+  * [hppa] udeb: Add core-modules package (Closes: #718270)
+  * nl80211: fix another nl80211_fam.attrbuf race
+  * Bump ABI to 2
+  * ext4: fix retry handling in ext4_ext_truncate()
+  * atl1c: Fix misuse of netdev_alloc_skb in refilling rx ring
+    (Closes: #718505)
+  * [rt] genpatch.py: Accept missing series-rt
+  * [rt] Update to 3.10.4-rt1 and reenable
+  * [rt] genpatch.py: Fix parsing of upstream patches with no header
+  * aufs: Update to aufs3.10-20130805
+  * [rt] md: Disable BCACHE, as it fails to build
+  * SCSI: Don't attempt to send extended INQUIRY command if skip_vpd_pages is
+    set (Closes: #719002)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 07 Aug 2013 22:38:45 +0200
+
+linux (3.10.3-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.2
+    - CIFS: Fix a deadlock when a file is reopened
+    - jbd2: move superblock checksum calculation to jbd2_write_superblock()
+    - jbd2: fix theoretical race in jbd2__journal_restart
+    - ext4: fix corruption when online resizing a fs with 1K block size
+    - ext3,ext4: don't mess with dir_file->f_pos in htree_dirblock_to_tree()
+    - ext4: check error return from ext4_write_inline_data_end()
+    - xhci: check for failed dma pool allocation
+    - [x86] drivers: hv: switch to use mb() instead of smp_mb()
+    - cgroup: fix umount vs cgroup_event_remove() race
+    - cgroup: fix RCU accesses to task->cgroups
+    - [hppa] Fix gcc miscompilation in pa_memcpy()
+    - [hppa] Ensure volatile space register %sr1 is not clobbered
+    - genirq: Fix can_request_irq() for IRQs without an action
+      (Closes: #709647)
+    - [x86] ACPI: Fix HP Folio 13 EC register access (Closes: #684186)
+      + ACPI: Add CMOS RTC Operation Region handler support
+      + ACPI / EC: Add HP Folio 13 to ec_dmi_table in order to skip DSDT scan
+    - ocfs2: xattr: fix inlined xattr reflink
+    - iwlwifi: pcie: fix race in queue unmapping
+    - Btrfs: fix estale with btrfs send
+    - Btrfs: hold the tree mod lock in __tree_mod_log_rewind
+    - Btrfs: only do the tree_mod_log_free_eb if this is our last ref
+    - ext4: fix data offset overflow on 32-bit archs in
+      ext4_inline_data_fiemap()
+    - ext4: fix overflows in SEEK_HOLE, SEEK_DATA implementations
+    - ext4: fix data offset overflow in ext4_xattr_fiemap() on 32-bit archs
+    - ext4: fix overflow when counting used blocks on 32-bit architectures
+    - ext4: fix ext4_get_group_number()
+    - ext4: don't allow ext4_free_blocks() to fail due to ENOMEM
+    - [arm] 7767/1: let the ASID allocator handle suspended animation
+    - [arm] 7768/1: prevent risks of out-of-bound access in ASID allocator
+    - [arm] 7769/1: Cortex-A15: fix erratum 798181 implementation
+    - [arm] 7778/1: smp_twd: twd_update_frequency need be run on all online CPUs
+    - [armhf] dts: imx: cpus/cpu nodes dts updates
+    - [armhf] drivers/dma/pl330.c: fix locking in pl330_free_chan_resources()
+    - memcg, kmem: fix reference count handling on the error path
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.3
+    - cpufreq: Revert commit a66b2e to fix suspend/resume regression
+    - iio: Fix iio_channel_has_info
+    - iio: inkern: fix iio_convert_raw_to_processed_unlocked
+    - ALSA: seq-oss: Initialize MIDI clients asynchronously
+    - ALSA: Fix unlocked snd_pcm_stop() calls in various drivers
+    - libata-zpodd: Use ata_tf_init() to select the right device
+    - md/raid10: fix bug which causes all RAID10 reshapes to move no data.
+    - md/raid10: fix two bugs affecting RAID10 reshape.
+    - md/raid10: fix two problems with RAID10 resync. (Closes: #717681)
+    - mac80211: close AP_VLAN interfaces before unregistering all
+    - svcrpc: fix failures to handle -1 uid's
+    - svcrpc: fix handling of too-short rpc's
+    - drm/i915: Fix context sizes on HSW
+    - drm/i915: Only clear write-domains after a successful wait-seqno
+    - drm/gem: fix not to assign error value to gem name
+    - drm/nv50-/disp: Use output specific mask in interrupt (Closes: #717590)
+    - iommu/amd: Only unmap large pages from the first pte
+    - MIPS: Octeon: Don't clobber bootloader data structures.
+    - perf: Clone child context from parent context pmu
+    - perf: Remove WARN_ON_ONCE() check in __perf_event_enable() for valid
+      scenario
+    - perf: Fix perf_lock_task_context() vs RCU
+    - tracing: Protect ftrace_trace_arrays list in trace_events.c
+    - tracing: Fix race between deleting buffer and setting events
+
+  [ Arnaud Patard ]
+  * udeb: add ehci-pci to usb-modules
+
+  [ Ben Hutchings ]
+  * udeb: Add snd-cmi8328 and snd-scs1x to sound-modules, thanks to
+    Samuel Thibault (Closes: #717183)
+  * be2net: Fix to avoid hardware workaround when not needed
+  * iwlwifi: Update 3160 and 7260 support to work with production firmware
+  * rtlwifi: rtl8723ae: Fix typo in firmware names
+  * [x86] Change INTEL_MEI_ME back to a module (Closes: #717383)
+  * [armhf/armmp] Enable NET_CALXEDA_XGMAC as module (Closes: #717269)
+  * linux-source: Switch compression of tarball and patch to xz.  Disable
+    compression of package (but use gzip, to keep old tools happy).
+  * linux-source: Install kernel config files for linux-image packages in
+    /usr/src/linux-config-$UPSTREAMVERSION directory
+  * ata: Disable SATA_INIC162X - this driver corrupts data and is not
+    expected to be fixed (Closes: #714295)
+  * writeback: Fix periodic writeback after fs mount
+  * sfc: Fix memory leak when discarding scattered packets
+  * neighbour: fix a race in neigh_destroy()
+  * virtio: support unlocked queue poll
+  * virtio_net: fix race in RX VQ processing
+  * vhost-net: fix use-after-free in vhost_net_flush
+  * tuntap: correctly linearize skb when zerocopy is used
+  * macvtap: correctly linearize skb when zerocopy is used
+  * ipv6: in case of link failure remove route directly instead of
+    letting it expire
+  * 9p: fix off by one causing access violations and memory corruption
+
+  [ Thorsten Glaser ]
+  * Update m68k configs (Closes: #717689):
+    - disable some functionality due to size constraints
+    - switch to using initrd
+    - drop all flavours; build a generic image that runs on
+      multiple subarchitectores (old Amiga, Atari, Macintosh tested;
+      old BVME6000, MVME147, MVME16x, new Apollo, Q40/Q60 untested)
+    - use gcc-4.8
+    - add patch to make Atari EtherNAT actually selectable
+  * nfs: Enable swap on NFS
+  * fs/nls: Enable Macintosh HFS+ codepage modules
+  * debian/control: Fix Vcs-Svn: use anonscm.debian.org
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 28 Jul 2013 00:33:32 +0100
+
+linux-tools (3.10-2) unstable; urgency=low
+
+  * linux-kbuild: Fix use of getline() in modpost wrapper (Closes: #717195)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 18 Jul 2013 04:02:11 +0100
+
+linux-tools (3.10-1) unstable; urgency=low
+
+  * New upstream release
+
+  [ Chris Boot ]
+  * Update modpost-symbol-prefix.patch for 3.10
+
+  [ Ben Hutchings ]
+  * debian/patches: Add DEP-3 headers (From, Subject, Forwarded) to all patches
+  * debian/copyright: Convert to machine-readable format (fka DEP-5)
+  * debian/copyright: Add explanation of indirect linking of perf to OpenSSL
+  * debian/rules.real: Remove support for pre-multiarch dpkg
+  * Update policy version to 3.9.4
+    - debian/rules: Implement build-arch and build-indep targets
+  * linux-kbuild: Update modpost wrapper for 3.10
+    - Implement the -T option
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 16 Jul 2013 13:29:22 +0100
+
+linux (3.10.1-1) unstable; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.10
+    - netfilter: nf_nat_sip: fix mangling (Closes: #715822)
+    - drm/i915: Add HPD IRQ storm detection (Closes: #572537)
+    - ipv6: ip6_sk_dst_check() must not assume ipv6 dst (CVE-2013-2232)
+    - af_key: fix info leaks in notify messages (CVE-2013-2234)
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.1
+    - libceph: Fix NULL pointer dereference in auth client code (CVE-2013-1059)
+    - ceph: fix sleeping function called from invalid context.
+    - libceph: fix invalid unsigned->signed conversion for timespec encoding
+    - module: do percpu allocation after uniqueness check. No, really!
+    - charger-manager: Ensure event is not used as format string
+    - hpfs: better test for errors
+    - crypto: sanitize argument for format string
+    - MAINTAINERS: add stable_kernel_rules.txt to stable maintainer information
+    - futex: Take hugepages into account when generating futex_key
+    - tty: Reset itty for other pty
+    - Revert "serial: 8250_pci: add support for another kind of NetMos
+      Technology PCI 9835 Multi-I/O Controller"
+    - NFSv4.1 end back channel session draining
+    - nfsd4: fix decoding of compounds across page boundaries
+    - KVM: VMX: mark unusable segment as nonpresent
+    - SCSI: sd: Fix parsing of 'temporary ' cache mode prefix
+    - cpufreq: Fix cpufreq regression after suspend/resume
+    - Revert "memcg: avoid dangling reference count in creation failure"
+	
+  [ Ben Hutchings ]
+  * cassini: Make missing firmware non-fatal (Closes: #714128)
+  * debian/patches: Add DEP-3 headers (From/Author, Subject/Description,
+    Forwarded/Origin) to all patches
+  * aufs: Add DEP-3 headers to generated/copied patches
+  * [rt] genpatch.py: Work with upstream patch series as well as git
+    - Fold convert-series into genpatch.py
+  * [rt] genpatch.py: Add Origin header to all patches
+  * debian/bin/check-patches.sh: Report missing DEP-3 headers
+  * alx: Use upstream minimal driver
+    - Update to 3.11-rc1
+  * [x86] efivars: Reenable 'paranoid' size check by default, as it should
+    no longer have false positives
+  * debian/patches: Reorder and group patches in series
+  * debian/rules.real: Remove support for pre-multiarch dpkg
+  * Update policy version to 3.9.4
+    - debian/control: Put xen-linux-system-* in the 'metapackages' section
+  * linux-source: Add bc to recommended packages (Closes: #715413)
+  * udeb: Add ath6kl_usb and mwifiex_usb to nic-wireless-modules
+  * udeb: Add pm80xx (previously pm8001) to scsi-extra-modules
+  * udeb: Add virtio_scsi to virtio-modules
+  * Set ABI to 1
+  * xen/blkback: Check device permissions before allowing OP_DISCARD
+    (CVE-2013-2140)
+  * udeb: Remove obsolete and unsupported drivers and filesystems
+    - Remove ppa from scsi-modules
+    - Remove floppy-modules, irda-modules, parport-modules, plip-modules,
+      qnx4-modules, reiserfs-modules, ufs-modules
+  * [x86] efivars: Re-enable pstore support by default.  It can be disabled
+    by setting module parameter pstore_disable=Y.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 16 Jul 2013 02:06:53 +0100
+
+linux (3.10~rc7-1~exp1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [armhf/armmp] Add EMAC ethernet driver found on Allwinner A10 SoCs,
+    thanks to Niall Walsh (Closes: #711998)
+    - Add MDIO bus driver for the Allwinner EMAC
+    - Add EMAC controller node to sun4i DTSI
+    - cubieboard: Enable ethernet (EMAC) support in dts
+    - Add EMAC Controller to Hackberry dt
+  * [x86] cpufreq: Enable X86_INTEL_PSTATE (Closes: #712062)
+  * debian/control: Add Homepage field
+  * debian/watch: Add watch file and update script
+  * misc/bmp085: Enable building as a module
+  * misc: Enable BMP085_I2C as module
+  * team: Enable NET_TEAM_MODE_RANDOM as module
+  * 8021q: Enable VLAN_8021Q_MVRP
+  * batman: Enable BATMAN_ADV_NC
+  * netlink: Enable NETLINK_MMAP, NETLINK_DIAG [!armel/{iop32x,ixp4xx,orion5x}]
+  * sctp: Enable SCTP_COOKIE_HMAC_SHA1
+  * tipc: Enable TIPC_MEDIA_IB
+  * [x86] cpufreq: Enable X86_AMD_FREQ_SENSITIVITY as module
+  * [x86] i2c: Enable I2C_ISMT, I2C_DESIGNWARE_PCI as modules
+  * [x86] mouse: Enable MOUSE_CYAPA as modules
+  * [armel/{iop32x,ixp4xx,orion5x}] Disable features to reduce kernel size
+    - Disable KSM, YAMA
+    - [armel/orion5x] Disable FTRACE
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 24 Jun 2013 14:55:23 +0100
+
+linux (3.10~rc5-1~exp1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [x86] Enable HYPERVISOR_GUEST
+  * udeb: Clean up configuration:
+    - Move i2c-algo-bit to i2c-modules
+    - Remove redundant control file overrides
+    - [s390] Use symlinks to follow s390x configuration
+    - [sparc64] Use symlinks to follow sparc configuration
+    - Only list the 'new' firewire modules in firewire-core-modules
+    - Remove obsolete eth1394 and firewire-core-modules dependency from
+      nic-modules
+    - Move ide-modules and ide-core-modules into ia64 configuration
+    - [powerpc,x86] Fold nic-extra-modules into nic-modules
+  * iwlegacy: Use consistent condition for il_pm_ops (fixes FTBFS on ia64)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 11 Jun 2013 04:44:05 +0100
+
+linux (3.10~rc4-1~exp1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20130520
+  * alx: Update VLAN tag handling for 3.10
+  * md: Enable BCACHE as module
+  * net/usb: Enable USB_RTL8152 as module
+    - udeb: Add r8152 to nic-usb-modules
+  * rt2800usb: Enable RT2800USB_RT55XX
+  * net/wireless: Enable RTL8188EE
+    - udeb: Add rtl8188ee to nic-wireless-modules
+  * linux-image: Restore package date (in ISO format) to utsname version
+    string ('uname -v' output)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 03 Jun 2013 02:43:51 +0100
+
+linux (3.9.8-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.7
+    - b43: stop format string leaking into error msgs (CVE-2013-2852)
+    - ACPI / video: Do not bind to device objects with a scan handler
+    - libceph: must hold mutex for reset_changed_osds()
+    - ceph: ceph_pagelist_append might sleep while atomic
+    - rbd: don't destroy ceph_opts in rbd_add()
+    - Bluetooth: Fix missing length checks for L2CAP signalling PDUs
+    - kmsg: honor dmesg_restrict sysctl on /dev/kmsg
+    - memcg: don't initialize kmem-cache destroying work for root caches
+    - md/raid1: consider WRITE as successful only if at least one non-Faulty
+      and non-rebuilding drive completed it.
+    - md/raid1,5,10: Disable WRITE SAME until a recovery strategy is in place
+    - [x86] Modify UEFI anti-bricking code
+    - powerpc: Fix stack overflow crash in resume_kernel when ftracing
+    - USB: pl2303: fix device initialisation at open
+    - USB: f81232: fix device initialisation at open
+    - USB: spcp8x5: fix device initialisation at open
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.8
+    - ARM: 7752/1: errata: LoUIS bit field in CLIDR register is incorrect
+    - clk: remove notifier from list before freeing it
+    - [hppa] make interrupt and interruption stack allocation reentrant
+    - ACPI / dock: Take ACPI scan lock in write_undock()
+    - net: fec: fix kernel oops when plug/unplug cable many times
+    - tcp: fix tcp_md5_hash_skb_data()
+    - net/802/mrp: fix lockdep splat
+    - ipv6: fix possible crashes in ip6_cork_release()
+    - r8169: fix offloaded tx checksum for small packets.
+    - xfrm: properly handle invalid states as an error
+    - ip_tunnel: fix kernel panic with icmp_dest_unreach
+    - net: Block MSG_CMSG_COMPAT in send(m)msg and recv(m)msg
+    - net: force a reload of first item in hlist_nulls_for_each_entry_rcu
+    - vhost_net: clear msg.control for non-zerocopy case during tx
+    - net: sctp: fix NULL pointer dereference in socket destruction
+    - team: check return value of team_get_port_by_index_rcu() for NULL
+    - team: move add to port list before port enablement
+    - l2tp: Fix PPP header erasure and memory leak
+    - sctp: fully initialize sctp_outq in sctp_outq_init
+    - macvtap: set transport header before passing skb to lower device
+    - tuntap: set transport header before passing it to kernel
+    - packet: set transport header before doing xmit
+    - netback: set transport header before passing it to kernel
+    - net_sched: better precise estimation on packet length for untrusted
+      packets
+    - firmware loader: fix use-after-free by double abort
+    - target/iscsi: don't corrupt bh_count in iscsit_stop_time2retain_timer()
+    - rbd: use the correct length for format 2 object names
+    - perf: Fix perf mmap bugs
+    - perf: Fix mmap() accounting hole
+
+  [ Ben Hutchings ]
+  * yama: Disable ptrace restrictions by default, and change boot message
+    to indicate this (Closes: #712740)
+  * fanotify: info leak in copy_event_to_user() (CVE-2013-2148)
+  * drivers/cdrom/cdrom.c: use kzalloc() for failing hardware (CVE-2013-2164)
+  * block: do not pass disk names as format strings (CVE-2013-2851)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 29 Jun 2013 18:44:21 +0100
+
+linux (3.9.6-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.6
+    - xhci - correct comp_mode_recovery_timer on return from hibernate
+    - usb: musb: make use_sg flag URB specific
+    - USB: keyspan: fix bogus array index
+    - [arm] 7747/1: pcpu: ensure __my_cpu_offset cannot be re-ordered across
+      barrier()
+    - hpfs: fix warnings when the filesystem fills up
+    - cifs: fix off-by-one bug in build_unc_path_to_root
+    - ecryptfs: fixed msync to flush data
+    - eCryptfs: Check return of filemap_write_and_wait during fsync
+    - hwmon: (adm1021) Strengthen chip detection for ADM1021, LM84 and MAX1617
+    - drm: fix a use-after-free when GPU acceleration disabled
+    - [powerpc] pseries: Force 32 bit MSIs for devices that require it
+    - [powerpc] pseries: Make 32-bit MSI quirk work on systems lacking firmware
+      support
+
+  [ Ben Hutchings ]
+  * [armel/orion5x] Enable EXPERT; disable FIPS, OABI_COMPAT, PCI_QUIRKS,
+    VGA_ARB to reduce kernel size (really fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 15 Jun 2013 04:53:13 +0100
+
+linux (3.9.5-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.5
+    - [arm] 7723/1: crypto: sha1-armv4-large.S: fix SP handling
+    - mac80211: use just spin_lock() in ieee80211_get_tkip_p2k()
+    - USB: cxacru: potential underflow in cxacru_cm_get_array()
+    - TTY: Fix tty miss restart after we turn off flow-control
+      (Closes: #465823)
+    - cifs: only set ops for inodes in I_NEW state
+    - drivers/char/random.c: fix priming of last_data
+    - random: fix accounting race condition with lockless irq entropy_count
+      update
+    - fat: fix possible overflow for fat_clusters
+    - tg3: Fix data corruption on 5725 with TSO
+    - ocfs2: goto out_unlock if ocfs2_get_clusters_nocache() failed in
+      ocfs2_fiemap()
+    - mm compaction: fix of improper cache flush in migration code
+    - klist: del waiter from klist_remove_waiters before wakeup waitting process
+    - wait: fix false timeouts when using wait_event_timeout()
+    - nilfs2: fix issue of nilfs_set_page_dirty() for page at EOF boundary
+    - mm: mmu_notifier: re-fix freed page still mapped in secondary MMU
+    - mm: memcg: remove incorrect VM_BUG_ON for swap cache pages in uncharge
+    - mm/pagewalk.c: walk_page_range should avoid VM_PFNMAP areas
+    - mm/THP: use pmd_populate() to update the pmd with pgtable_t pointer
+    - module: don't unlink the module until we've removed all exposure.
+    - xfs: kill suid/sgid through the truncate path.
+    - SUNRPC: Prevent an rpc_task wakeup race
+    - cifs: fix potential buffer overrun when composing a new options string
+    - cgroup: initialize xattr before calling d_instantiate()
+    - [powerpc] 32bit:Store temporary result in r0 instead of r8
+    - [powerpc] tm: Fix userspace stack corruption on signal delivery for active
+      transactions
+    - [powerpc] tm: Abort on emulation and alignment faults
+    - iscsi-target: fix heap buffer overflow on error
+    - KVM: fix sil/dil/bpl/spl in the mod/rm fields
+    - reiserfs: fix deadlock with nfs racing on create/lookup
+    - reiserfs: fix problems with chowning setuid file w/ xattrs
+    - reiserfs: fix spurious multiple-fill in reiserfs_readdir_dentry
+    - jfs: fix a couple races
+    - IB/iser: Return error to upper layers on EAGAIN registration failures
+    - fuse: fix readdirplus Oops in fuse_dentry_revalidate
+    - target: Re-instate sess_wait_list for target_wait_for_sess_cmds
+    - xen-netback: Fix regressions caused by fix for CVE-2013-0216
+      + coalesce slots in TX path and fix regressions
+      + don't disconnect frontend when seeing oversize packet
+
+  [ Ben Hutchings ]
+  * [powerpcspe] Remove installer udebs (really fixes FTBFS)
+  * [s390] Add pgste to ptep_modify_prot_start()
+  * [s390] Enable PCI, PCI and USB drivers
+  * [powerpc] Fix build error in stable/3.9
+  * [armel/iop32x,armel/ixp4xx] Disable OABI_COMPAT, PCI_QUIRKS to reduce
+    kernel size (fixes FTBFS)
+  * ath9k: Disable PowerSave by default (Closes: #695968)
+  * [i386] udeb: Add viafb to fb-modules (Closes: #705788)
+    - [i386] udeb: Move i2c-algo-bit to i2c-modules and make fb-modules
+      depend on it
+    - viafb: Autoload on OLPC XO 1.5 only
+  * fs: Enable F2FS_FS as module (Closes: #711342)
+  * iio,HID: Enable IIO, HID_SENSOR_HUB, HID_SENSOR_ACCEL_3D,
+    HID_SENSOR_ALS, HID_SENSOR_GYRO_3D, HID_SENSOR_MAGNETOMETER_3D
+    as modules (Closes: #711690)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 10 Jun 2013 02:41:53 +0100
+
+linux-tools (3.9.4-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 03 Jun 2013 13:45:52 +0100
+
+linux (3.9.4-1) unstable; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.9
+    - ALSA: hda - Add generic parser support to Analog Device codec driver
+      (Closes: #659033)
+    - Input: add support for Cypress PS/2 Trackpads (Closes: #703607)
+    - [armel] media: VIDEO_ZORAN is disabled as it requires virt_to_bus()
+    - [armhf/omap] OMAP_MBOX_FWK and TIDSPBRIDGE is disabled as they are
+      not yet compatible with ARM multiplatform
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.1
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.2
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.3
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.9.4
+
+  [ Ben Hutchings ]
+  * [rt] Disable until it is updated for Linux 3.9 or later
+  * Build-Depend on bc, needed to build kernel/timeconst.h
+  * [x86] Enable VMWARE_VMCI, VSOCKETS, VMWARE_VMCI_VSOCKETS as modules
+    (Closes: #707676)
+  * README.Debian: Correct reference to Berkeley Database development package
+  * aufs: Update to aufs3.9-20130506
+  * [powerpcspe] Prevent building uImage with missing mkimage, thanks to
+    Roland Stigge (Closes: #708094)
+  * udeb: Fix yet more configuration errors causing FTBFS:
+    - [powerpc/powerpc64] Replace ibmvscsic with ibmvscsi in scsi-modules
+    - [ppc64] Use symlinks to follow powerpc/powerpc64 configuration
+    - [powerpcspe] Use symlinks to follow powerpc configuration
+      (Closes: #708336, #708662)
+    - Add raid6_pq to md-modules, and make btrfs-modules depend on it
+  * netfilter: Enable NETFILTER_XT_MATCH_BPF, NETFILTER_XT_MATCH_CONNLABEL
+    as modules
+  * bridge: Enable BRIDGE_VLAN_FILTERING
+  * batman: Enable BATMAN_ADV_DAT
+  * nfc: Enable NFC_LLCP
+  * can: Enable CAN_PEAK_USB, CAN_8DEV_USB as modules
+  * hci_uart: Enable BT_HCIUART_3WIRE
+  * [amd64,powerpc/powerpc64,ppc64] block: Enable BLK_DEV_RSXX as module
+  * SCSI: Enable SCSI_CHELSIO_FCOE, SCSI_MPT3SAS, SCSI_UFSHCD as modules
+    - udeb: Add csiostor, mpt3sas, ufshcd, ufshcd-pci to scsi-extra-modules
+  * md: Enable DM_CACHE as module
+  * net/usb: Enable USB_NET_AX88179_178A as module (Closes: #704129)
+    - udeb: Add ax88179_178a to nic-usb-modules
+  * net/wireless: Enable AR5523 (Closes: #701777), IWLMVM,
+    RTL8723AE (Closes: #708348), WIL6210 as modules
+    - udeb: Add ar5523, iwldvm, iwlmvm, rtl8723ae, wil6210 to
+      nic-wireless-modules
+  * serial: Enable SERIAL_RP2 as module
+    - udeb: Add rp2 to serial-modules
+  * hw_random: Enable HW_RANDOM_TPM as module
+  * [x86] watchdog: Enable IE6XX_WDT, VIA_WDT as modules
+  * media/usb: Enable DVB_USB_AZ6007, USB_GSPCA_JL2005BCD as modules
+  * stk1160: Enable VIDEO_STK1160_AC97
+  * ivtv: Enable VIDEO_IVTV_ALSA as module
+  * radio: Enable RADIO_SHARK, RADIO_SHARK2, USB_KEENE, USB_MA901 as modules
+  * hda: Enable SND_HDA_CODEC_CA0132_DSP
+  * sound/firewire: Enable SND_SCS1X as module
+  * hid-holtek: Enable HOLTEK_FF
+  * hid: Enable HID_ICADE, HID_PS3REMOTE, HID_STEELSERIES, HID_THINGM as
+    modules
+  * usb/serial: Enable USB_SERIAL_F81232, USB_SERIAL_METRO, USB_SERIAL_QT2,
+    USB_SERIAL_XSENS_MT, USB_SERIAL_ZTE as modules
+    - udeb: Add f81232, quatech2, zte_ev to usb-serial-modules
+  * infiniband: Enable INFINIBAND_OCRDMA as module
+  * [x86] vfio: Enable VFIO, VFIO_PCI as modules
+  * [x86] hv: Enable HYPERV_BALLOON as module
+  * security: Enable SECURITY_YAMA, SECURITY_YAMA_STACKED (Closes: #704750)
+  * iscsi-target: fix heap buffer overflow on error (CVE-2013-2850)
+
+  [ Aurelien Jarno ]
+  * [mips] Enable KEXEC.
+
+  [ Arnaud Patard ]
+  * [armhf] Add armmp flavour
+  * [armhf] backport usb support for imx53 through chipidea and usb phy nop fixes
+  * [armhf] backport armada 370/xp thermal support
+  * [armhf] fix hard freeze when mvneta is used as module
+  * [arm] backport ehci split patches for omap and orion
+  * [armel] enable thermal
+  * [armel] kirkwood: enable more DT configs, thermal, POWER_RESET_*
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 01 Jun 2013 23:13:01 +0100
+
+linux (3.8.13-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.13
+    - autofs - remove autofs dentry mount check
+    - hugetlbfs: fix mmap failure in unaligned size request
+      (fixes regression in 3.4)
+    - perf/x86/intel/lbr: Fix LBR filter
+    - perf/x86/intel/lbr: Demand proper privileges for PERF_SAMPLE_BRANCH_KERNEL
+    - ipvs: ip_vs_sip_fill_param() BUG: bad check of return value
+    - netfilter: ctnetlink: don't permit ct creation with random tuple
+    - ext4: add check for inodes_count overflow in new resize ioctl
+    - r8169: fix 8168evl frame padding.
+    - drm/prime: keep a reference from the handle to exported dma-buf (v6)
+    - Btrfs: compare relevant parts of delayed tree refs
+    - Btrfs: fix extent logging with O_DIRECT into prealloc
+    - kernel/audit_tree.c: tree will leak memory when failure occurs in
+      audit_trim_trees()
+
+  [ Ben Hutchings ]
+  * udeb: Fix more configuration errors causing FTBFS:
+    - [m68k,mips,mipsel,ppc64,sparc64] Add crc-modules as common dependency
+      of btrfs-modules and xfs-modules (and others)
+    - [powerpc] Add llc to nic-shared-modules
+  * Bump ABI to 2
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 16 May 2013 00:28:04 +0100
+
+linux (3.8.12-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.12
+    - [powerpc] spufs: Initialise inode->i_ino in spufs_new_inode()
+      (possibly fixes: #707175)
+    - iwlwifi: fix freeing uninitialized pointer
+    - tty: fix up atime/mtime mess, take three
+    - sysfs: fix use after free in case of concurrent read/write and readdir
+    - [ia64] Fix initialization of CMCI/CMCP interrupts
+    - [ia64] Wrong asm register contraints in the futex implementation
+      (Closes: #702641)
+    - [ia64] Wrong asm register contraints in the kvm implementation
+      (Closes: #702639)
+    - fs/fscache/stats.c: fix memory leak
+    - hrtimer: Fix ktime_add_ns() overflow on 32bit architectures
+    - swap: redirty page if page write fails on swap file
+    - mm: swap: mark swap pages writeback before queueing for direct IO
+    - ACPI: Fix wrong parameter passed to memblock_reserve
+    - cgroup: fix an off-by-one bug which may trigger BUG_ON()
+    - cgroup: fix broken file xattrs
+    - clockevents: Set dummy handler on CPU_DEAD shutdown (Closes: #700333)
+    - inotify: invalid mask should return a error number but not set it
+      (fixes regression in 3.8.1)
+    - exec: do not abuse ->cred_guard_mutex in threadgroup_lock()
+    - md: bad block list should default to disabled.
+    - MD: ignore discard request for hard disks of hybid raid1/raid10 array
+      (fixes regression in 3.6)
+    - nfsd4: don't close read-write opens too soon
+    - wireless: regulatory: fix channel disabling race condition
+    - ext4/jbd2: don't wait (forever) for stale tid caused by wraparound
+    - jbd2: fix race between jbd2_journal_remove_checkpoint and
+      ->j_commit_callback
+    - ext4: fix journal callback list traversal
+    - ext4: fix big-endian bug in metadata checksum calculations
+    - [x86] KVM: X86 emulator: fix source operand decoding for 8bit mov[zs]x
+      instructions
+
+  [ Ben Hutchings ]
+  * [rt] Remove xen-linux-system packages and references to Xen support,
+    as Xen does not support real-time scheduling
+  * udeb: Fix configuration errors causing FTBFS:
+    - [armhf/vexpress] Remove ipv6-modules; ipv6 is now built-in
+    - [mipsel/sb1-bcm91250a,sparc] Add crc-modules as common dependency of
+      btrfs-modules and xfs-modules (and others)
+    - [powerpc] Add nic-shared-modules as common dependency of nic-modules
+      and nic-extra-modules
+    - Unify module list for nic-shared-modules across architectures [!m68k]
+  * [rt] Update to 3.8.11-rt8:
+    - time/timekeeping: shadow tk->cycle_last together with clock->cycle_last
+    - sched/workqueue: Only wake up idle workers if not blocked on sleeping
+      spin lock
+  * aufs: Update to aufs3.8-20130506
+    - for linux-3.7, btrfs limits the link count explicitly
+    - for linux-3.6, push mnt_want_write() outside of i_mutex
+    - possible bugfix, make sure the target branch is upper
+    - possible bugfix, error handling in reopen_nondir()
+    - new copyup implementation
+    - pin the branch dir
+    - convert the plink list into hlist
+  * linux-doc: Include aufs documentation
+  * [x86] zsmalloc: Change to built-in, as it can no longer be modular
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 10 May 2013 04:46:36 +0100
+
+linux-tools (3.8.11-1) unstable; urgency=low
+
+  * New upstream stable update
+
+  [ Ben Hutchings ]
+  * Upload to unstable (Closes: #707023)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 07 May 2013 02:11:16 +0100
+
+linux (3.8.11-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6
+    - sysfs: fix race between readdir and lseek
+    - sysfs: handle failure path correctly for readdir()
+    - rtlwifi: usb: add missing freeing of skbuff
+    - b43: A fix for DMA transmission sequence errors
+    - tg3: fix length overflow in VPD firmware parsing (CVE-2013-1929)
+    - xen-blkback: fix dispatch_rw_block_io() error path
+    - net/irda: add missing error path release_sock call
+    - usb: xhci: Fix TRB transfer length macro used for Event TRB.
+    - Btrfs: fix locking on ROOT_REPLACE operations in tree mod log
+    - Btrfs: fix race between mmap writes and compression
+    - USB: serial: fix use-after-free in TIOCMIWAIT
+    - loop: prevent bdev freeing while device in use
+    - virtio: console: add locking around c_ovq operations
+    - nfsd4: reject "negative" acl lengths
+    - Btrfs: fix space leak when we fail to reserve metadata space
+    - net: remove a WARN_ON() in net_enable_timestamp()
+    - 8021q: fix a potential use-after-free
+    - unix: fix a race condition in unix_release()
+    - atl1e: drop pci-msi support because of packet corruption
+      (possibly fixes: #577747)
+    - ipv6: fix bad free of addrconf_init_net
+    - ipv6: don't accept multicast traffic with scope 0
+    - ipv6: don't accept node local multicast traffic from the wire
+    - pch_gbe: fix ip_summed checksum reporting on rx
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.7
+    - drm/nouveau: fix handling empty channel list in ioctl's
+    - drm/i915: Be sure to turn hsync/vsync back on at crt enable (v2)
+      (fixes regression in 3.8.3)
+    - drm: correctly restore mappings if drm_open fails
+    - mm: prevent mmap_cache race in find_vma()
+    - mwifiex: limit channel number not to overflow memory
+    - spinlocks and preemption points need to be at least compiler barriers
+    - crypto: gcm - fix assumption that assoc has one segment
+    - NFSv4/4.1: Fix bugs in nfs4[01]_walk_client_list
+    - vfio-pci: Fix possible integer overflow
+    - can: gw: use kmem_cache_free() instead of kfree()
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.8
+    - ipc: set msg back to -EAGAIN if copy wasn't performed
+    - GFS2: Fix unlock of fcntl locks during withdrawn state
+    - cifs: Allow passwords which begin with a delimitor (fixes
+      regression in 3.8)
+    - [i386] Fix possible incomplete TLB invalidate with PAE pagetables
+    - sched_clock: Prevent 64bit inatomicity on 32bit systems
+    - [x86] mm, paravirt: Fix vmalloc_fault oops during lazy MMU updates
+    - tty: don't deadlock while flushing workqueue
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9
+    - [powerpc] add a missing label in resume_kernel
+    - [powerpc] kvm/powerpc/e500mc: fix tlb invalidation on cpu migration
+    - kthread: Prevent unpark race which puts threads on the wrong cpu
+    - hrtimer: Don't reinitialize a cpu_base lock on CPU_UP
+    - hugetlbfs: add swap entry check in follow_hugetlb_page()
+    - kernel/signal.c: stop info leak via the tkill and the tgkill syscalls
+    - hfsplus: fix potential overflow in hfsplus_file_truncate()
+    - md: raid1,10: Handle REQ_WRITE_SAME flag in write bios
+    - [x86] KVM: Allow cross page reads and writes from cached translations.
+      (fixes regression in fix for CVE-2013-1796)
+    - hsched: Convert BUG_ON()s in try_to_wake_up_local() to WARN_ON_ONCE()s
+    - [armel] Fix kexec by setting outer_cache.inv_all for Feroceon
+    - ath9k_htc: accept 1.x firmware newer than 1.3
+    - mac80211: fix cfg80211 interaction on auth/assoc request
+    - crypto: algif - suppress sending source address information in recvmsg
+      (CVE-2013-3076)
+    - vm: add and use vm_iomap_memory() helper function
+    - Btrfs: make sure nbytes are right after log replay
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.10
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.11
+    - TTY: do not update atime/mtime on read/write
+    - TTY: fix atime/mtime regression
+    - [sparc] sparc64: Fix race in TLB batch processing.
+    - atm: update msg_namelen in vcc_recvmsg() (CVE-2013-3222)
+    - ax25: fix info leak via msg_name in ax25_recvmsg() (CVE-2013-3223)
+    - Bluetooth: fix possible info leak in bt_sock_recvmsg() (CVE-2013-3224)
+    - Bluetooth: RFCOMM - Fix missing msg_namelen update in
+      rfcomm_sock_recvmsg() (CVE-2013-3225)
+    - Bluetooth: SCO - Fix missing msg_namelen update in sco_sock_recvmsg()
+    - caif: Fix missing msg_namelen update in caif_seqpkt_recvmsg()
+      (CVE-2013-3227)
+    - irda: Fix missing msg_namelen update in irda_recvmsg_dgram()
+      (CVE-2013-3228)
+    - [s390] iucv: Fix missing msg_namelen update in iucv_sock_recvmsg()
+      (CVE-2013-3229)
+    - l2tp: fix info leak in l2tp_ip6_recvmsg()
+    - llc: Fix missing msg_namelen update in llc_ui_recvmsg() (CVE-2013-3231)
+    - netrom: fix info leak via msg_name in nr_recvmsg()
+    - NFC: llcp: fix info leaks via msg_name in llcp_sock_recvmsg()
+    - rose: fix info leak via msg_name in rose_recvmsg() (CVE-2013-3234)
+    - tipc: fix info leaks via msg_name in recv_msg/recv_stream
+      (CVE-2013-3235)
+    - atl1e: limit gso segment size to prevent generation of wrong ip length
+      fields (Closes: #565404)
+    - af_unix: If we don't care about credentials coallesce all messages
+    - ipv6/tcp: Stop processing ICMPv6 redirect messages
+    - rtnetlink: Call nlmsg_parse() with correct header length
+    - tcp: incoming connections might use wrong route under synflood
+    - tcp: Reallocate headroom if it would overflow csum_start
+    - net: cdc_mbim: remove bogus sizeof()
+    - net: fix incorrect credentials passing (CVE-2013-1979)
+    - net: drop dst before queueing fragments
+
+  [ Ben Hutchings ]
+  * [rt] Update to 3.8.10-rt6
+  * aufs: Update to aufs3.8-20130325
+    - ftruncate() supports sb_{start,end}_write()
+    - replace mnt_drop_write_file() by __mnt_drop_write()
+    - support for vfs_truncate()
+  * udeb: Move modules and adjust dependencies to avoid duplicates
+    (Closes: #706646)
+    - Move crc16 to crc-modules; make ext4-modules and nic-usb-modules depend
+      on it
+    - Make xfs-modules depends on crc-modules
+    - Move pps_core and ptp to nic-common-modules or nic-modules as appropriate
+  * udeb: Merge redundant configuration for ext{2,3} dependency on mbcache
+  * Set ABI to 1
+  * bug script: Remove broken sound functions (Closes: #705619)
+  * [i386/486] udeb: Add lxfb to fb-modules (Closes: #705780)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 04 May 2013 21:45:23 +0100
+
+linux (3.8.5-1~experimental.1) experimental; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.5
+
+  [ Ben Hutchings ]
+  * signal: Fix use of missing sa_restorer field (build regression
+    introduced by fix for CVE-2013-0914)
+  * udeb: Add hid-generic, hid-holtek-kbd, hid-lenovo-tpkbd,
+    hid-roccat-isku, hid-roccat-lua, hid-roccat-savu to input-modules
+  * cdc_ncm,cdc_mbim: Use NCM by default
+  * [rt] Update to 3.8.4-rt2 and reenable
+  * [rt] wireless: orinoco_usb is BROKEN
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 31 Mar 2013 07:35:31 +0100
+
+linux (3.8.3-1~experimental.1) experimental; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.3
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.8-20130311
+  * USB: cdc-wdm: fix buffer overflow (CVE-2013-1860)
+  * signal: always clear sa_restorer on execve (CVE-2013-0914)
+  * ext3: Fix format string issues (CVE-2013-1848)
+  * net/sctp: Validate parameter size for SCTP_GET_ASSOC_STATS (CVE-2013-1828)
+  * bridge: fix mdb info leaks
+  * rtnl: fix info leak on RTM_GETLINK request for VF devices
+  * dcbnl: fix various netlink info leaks
+  * ALSA: seq: Fix missing error handling in snd_seq_timer_open()
+
+  [ Ian Campbell ]
+  * arm: correct path to DTB files. Patch from Nobuhiro Iwamatsu.
+    (Closes: #703082)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 19 Mar 2013 04:52:46 +0000
+
+linux-tools (3.8.2-1~experimental.1) experimental; urgency=low
+
+  * New upstream release (Closes: #702450)
+
+  [ Ben Hutchings ]
+  * linux-tools: Install bash_completion script for perf with a version-
+    dependent name (Closes: #701790)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 07 Mar 2013 05:32:40 +0000
+
+linux (3.8.2-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.1
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.2
+
+  [ Ben Hutchings ]
+  * linux-image: Increase minimum version of initramfs-tools to 0.110~
+    which copes with the recently renamed EHCI and NFS modules
+  * genorig: Accept xz-compressed upstream tarballs and patches,
+    thanks to Sedat Dilek
+  * net: Enable USB_NET_CDC_MBIM as module (Closes: #701869)
+  * mfd,mmc,memstick: Enable MFD_RTSX_PCI, MMC_REALTEK_PCI and
+    MEMSTICK_REALTEK_PCI as modules, replacing RTS_PSTOR (Closes: #702108)
+  * [mips,mipsel] Add dependencies for HAVE_ARCH_TRANSPARENT_HUGEPAGE
+    (fixes FTBFS)
+
+  [ Aurelien Jarno ]
+  * [mips/octeon] Change HW_RANDOM and HW_RANDOM_OCTEON to modules.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 07 Mar 2013 04:00:04 +0000
+
+linux (3.8-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.8
+    - pidns: Support unsharing the pid namespace. (Closes: #595920)
+    - fsnotify: Rework locking and reference counting (Closes: #602966)
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20130204
+  * sock_diag: Fix out-of-bounds access to sock_diag_handlers[]
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 25 Feb 2013 05:29:53 +0000
+
+linux (3.7.8-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.4
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.5
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.6
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.7
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.8
+
+  [ Ben Hutchings ]
+  * Add powerpcspe architecture, thanks to Roland Stigge (Closes: #693042)
+  * aufs: Hide CONFIG_AUFS_PROC_MAP, which requires a patch we don't apply
+    (Closes: #693332)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 15 Feb 2013 00:42:03 +0000
+
+linux (3.7.3-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.3
+
+  [ Ben Hutchings ]
+  * [ia64] nouveau: Disable another bit of ACPI support (fixes FTBFS)
+  * [armhf/omap] Make OMAP_DMA built-in (fixes FTBFS)
+  * ath6kl: Do not use virt_addr_valid() (fixes FTBFS on mips,mipsel)
+  * [armel/iop32x,armel/ixp4xx,armel/orion5x] Make IPV6 a module again due
+    to kernel size limit (fixes FTBFS)
+  * ALSA: usb-audio: Avoid autopm calls after disconnection; Fix missing
+    autopm for MIDI input (Closes: #664068)
+  * [!x86] Disable ZRAM, ZSMALLOC as modules (Reopens: #676779), as they
+    really aren't portable yet.
+  * udeb: Remove ipv6-modules on all architectures/flavours where it's
+    now built-in (fixes FTBFS)
+
+  [ Ian Campbell ]
+  * [x86/xen] Update microcode driver to use new API.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 18 Jan 2013 01:36:15 +0000
+
+linux (3.7.1-1~experimental.2) experimental; urgency=low
+
+  [ Ben Hutchings ]
+  * linux-headers-common: Include the include/uapi/asm-generic directory
+    (Closes: #696664)
+  * linux-headers-common: Do not use link-vmlinux.sh when cleaning external
+    modules (Closes: #696775)
+  * Enable ZRAM, ZSMALLOC as modules on all architectures (Closes: #676779)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 05 Jan 2013 17:48:05 +0000
+
+linux-tools (3.7.1-1~experimental.1) experimental; urgency=low
+
+  * New upstream release
+
+  [ Ben Hutchings ]
+  * [amd64] linux-tools: Enable optimisations and special-casing of x86_64
+    (Closes: #694759)
+
+  [ Uwe Kleine-König ]
+  * linux-kbuild: debian/control: Use Section: kernel (Closes: #545017)
+
+ -- Jonathan Nieder <jrnieder@gmail.com>  Fri, 28 Dec 2012 09:29:53 -0800
+
+linux (3.7.1-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.7
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.1
+
+  [ maximilian attems ]
+  * Enable WIZNET_W5100, WIZNET_W5300, AMD_PHY, BCM87XX_PHY.
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20121210
+  * [rt] Disable until it is updated for Linux 3.7 or later
+  * Make gcc-4.7 the default compiler
+  * [mips,mipsel,sparc] media/parpot: Disable VIDEO_PMS in all
+    configurations where the other parport video drivers are disabled
+  * [x86] fs: Re-enable PSTORE_RAM (formerly known as RAMOOPS) as module
+  * net/wireless: Enable WL_TI; re-enable WL1251 and WL12XX as modules
+  * staging: Enable RTLLIB; re-enable RTL8192E as module
+  * media: Enable IR_TTUSBIR as module, replacing LIRC_TTUSBIR
+  * media: Enable VIDEO_STK1160 as module, replacing EASYCAP
+  * [armhf/mx5] Update configuration:
+    - Enable MACH_IMX51_DT, replacing MACH_MX51_EFIKAMX (but not fully
+      working in this kernel version)
+    - Enable SOC_IMX53, replacing MACH_MX53_{EVK,SMD,LOCO,ARD}
+    - Re-enable MFD_MC13XXX_SPI (formerly included in MFD_MC13XXX)
+    - Enable PWM and re-enable PWM_IMX (formerly known as MXC_PWM)
+  * [i386] comedi: Re-enable COMEDI_ISA_DRIVERS
+  * [i386,alpha] media/radio: Enable V4L_RADIO_ISA_DRIVERS and re-enable
+    the ISA drivers
+  * PCI: Enable PCI_REALLOC_ENABLE_AUTO
+  * [x86] PCI: Enable PCI_PRI, PCI_PASID, PCI_IOAPIC
+  * [amd64] ACPI: Enable ACPI_BGRT
+  * net: Enable INET_UDP_DIAG, NET_IPVTI, PACKET_DIAG, UNIX_DIAG as modules
+  * netfilter: Enable NF_NAT_IPV6, IP6_NF_TARGET_MASQUERADE, IP6_NF_TARGET_NPT,
+    NF_CT_NETLINK_HELPER as modules
+  * net/sched: Enable NET_EMATCH_CANID, NET_EMATCH_IPSET as modules
+  * can: Enable CAN_PEAK_PCIEC, CAN_PEAK_PCMCIA, CAN_PEAK_USB as modules
+  * [i386] can: Enable CAN_CC770, CAN_CC770_ISA as module
+  * block: Enable BLK_DEV_NVME, BLK_DEV_PCIESSD_MTIP32XX as modules
+  * qla2xxx: Enable TCM_QLA2XXX as module
+  * team: Enable NET_TEAM_MODE_BROADCAST as module
+  * net: Enable VXLAN as module
+  * phy: Enable AT803X_PHY as module
+  * rt2800pci: Enable RT2800PCI_RT3290
+  * wireless/ti: Enable WL18XX as module
+  * ptp: Enable clock drivers along with associated net/PHY drivers
+  * [!x86] drm: Disable DRM_VMWGFX
+  * drm: Enable DRM_UDL as module
+    - Disable autoloading as it is incompatible with older versions of
+      xserver-xorg-video-displaylink
+  * [x86] drm: Enable DRM_AST, DRM_MGAG200 as modules
+    - Disable autoloading as they are incompatible with older versions of
+      xserver-xorg-video-ast and xserver-xorg-video-mga
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 24 Dec 2012 02:50:21 +0000
+
+linux (3.6.9-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.9
+
+  [ maximilian attems ]
+  * Enable NETFILTER_XT_TARGET_HMARK, NET_EMATCH_IPSET, USB_NET_QMI_WWAN.
+  * Enable more HID drivers.
+  * [x86] Enable INTEL_MEI.
+  * [ARM]: 7492/1: add strstr declaration for decompressors.
+
+  [ Ben Hutchings ]
+  * HID: Add Apple wireless keyboard 2011 ANSI to special driver list
+    (Closes: #694546)
+
+  [ Arnaud Patard ]
+  * [ARM]: add patch from staging-next to fix lis3l02dq on omap
+  * [ARM]: backport omap usb fixes to make it build again.
+  * Change musb Kconfig so that our configuration of USB_MUSB_OMAP2PLUS
+  is used and not set to 'm'.
+
+ -- maximilian attems <maks@debian.org>  Wed, 05 Dec 2012 16:16:50 +0100
+
+linux (3.6.8-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.7
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.8
+
+  [ Bastian Blank ]
+  * Enable POWER_SUPPLY, BLK_DEV_THROTTLING and NETPRIO_CGROUP.
+  * [amd64] Enable CRYPTO_CAMELLIA_X86_64, CRYPTO_SERPENT_AVX_X86_64 and
+    CRYPTO_TWOFISH_AVX_X86_64.
+  * [x86] Enable more platform drivers.
+  * [s390/s390x-tape, s390x/s390x-tape] Remove not longer supported image
+    variant.
+  * [s390, s390x] Enable support for transparent hugepages.
+  * Use XZ for kernel images if supported.
+
+  [ maximilian attems ]
+  * Enable DVB_USB_RTL28XXU. (closes: #692749)
+  * Enable SBP_TARGET. (closes: #685341)
+
+ -- maximilian attems <maks@debian.org>  Wed, 28 Nov 2012 18:35:41 +0100
+
+linux-tools (3.6-1~experimental.1) experimental; urgency=low
+
+  * New upstream release (Closes: #690011)
+
+  [ Ben Hutchings ]
+  * genorig: Accept xz-compressed upstream tarballs and patches, and
+    generate an xz-compressed orig tarball, thanks to Sedat Dilek
+  * source: Enable xz-compression for debian directory tarball
+
+  [ Jonathan Nieder ]
+  * Add myself to uploaders list.
+
+ -- Jonathan Nieder <jrnieder@gmail.com>  Sat, 24 Nov 2012 13:40:28 -0800
+
+linux (3.6.6-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.5
+    - [x86] mm: Find_early_table_space based on ranges that are actually
+      being mapped (Closes: #692067)
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.6
+    - ext4: fix unjournaled inode bitmap modification (Closes: #692411)
+
+  [ Uwe Kleine-König ]
+  * [rt] bump to 3.6.4-rt10
+
+  [ Ben Hutchings ]
+  * [x86] staging: Re-enable ZSMALLOC as module, previously selected by
+    ZRAM but now a dependency (Closes: #692024)
+  * fs: Re-enable link security restrictions that are disabled by default
+    in 3.6.5
+  * [rt] Update to 3.6.6-rt17
+  * rc: Enable RC_DEVICES; re-enable LIRC; re-enable the drivers that
+    depend on those; enable IR_SANYO_DECODER and IR_IGUANA as modules
+
+  [ Bastian Blank ]
+  * [sparc] Remove IP_PNP, IP_PNP_RARP, NET_IPGRE and ARPD overrides.
+  * Enable IPv6 globally.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 15 Nov 2012 04:49:50 +0000
+
+linux (3.6.4-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.6
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.1
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.2
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.3
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.4
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.6-20121015
+  * cirrus: Disable by default, as it is currently incompatible with
+    xserver-xorg-video-cirrus. It can be forced to load with module
+    parameter modeset=1.
+
+  [ Uwe Kleine-König ]
+  * reenable the rt featureset using 3.6.3-rt8
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 29 Oct 2012 04:22:02 +0000
+
+linux (3.5.5-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.3
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.4
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.5
+
+  [ Ben Hutchings ]
+  * mfd: lpc_ich: Fix a 3.5 kernel regression for iTCO_wdt driver
+    (Closes: #686040)
+  * drm: Enable various drivers (Closes: #685479):
+    - [x86] Enable DRM_GMA500 (previously DRM_PSB) as module
+    - Enable DRM_CIRRUS_QEMU as module
+  * media/dvb: Enable DVB_USB_AF9035 as module (Closes: #687050)
+
+  [ Bastian Blank ]
+  * Remove superfluous dependency in debugging packages.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 04 Oct 2012 15:19:30 +0200
+
+linux-tools (3.5-1~experimental.1) experimental; urgency=low
+
+  * New upstream release
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 20 Aug 2012 00:57:12 +0100
+
+linux (3.5.2-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.1
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.2
+
+  [ Ben Hutchings ]
+  * genorig: Fix linux_upstream_full compute for version with modifier,
+    thanks to Julien Danjou (Closes: #683824)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 19 Aug 2012 21:36:04 +0100
+
+linux (3.5-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.5
+
+  [ Ben Hutchings ]
+  * net: Enable OPENVSWITCH as module (Closes: #675010)
+  * aufs: Update to aufs3.5-20120730
+  * rt: Disable until it is updated for Linux 3.5 or later
+  * debian/copyright: Convert to machine-readable format (fka DEP-5)
+  * debian/copyright: Add copyright notice for newly-added Unicode data
+  * [x86] seccomp: Enable SECCOMP_FILTER
+  * [x86] applesmc: Update to Linux 3.6, including fixes for new MacBook models
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 01 Aug 2012 14:08:55 +0100
+
+linux (3.4.4-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.2
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.3
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.4
+
+  [ Ben Hutchings ]
+  * [ia64] Export <asm/cmpxchg.h> to userland (fixes FTBFS)
+  * [x86] Enable BATTERY_SBS as module (Closes: #662902)
+  * team: Enable NET_TEAM_MODE_LOADBALANCE as module
+  * [x32] Build a linux-libc-dev package
+  * input: Enable MOUSE_SYNAPTICS_USB (Closes: #678071)
+  * [x86] staging: zsmalloc: Finish conversion to a separate module
+    (Closes: #677273)
+  * [rt] Update to 3.4.4-rt13
+
+  [ Arnaud Patard ]
+  * [armel] disable FIPS, VGA_ARB, FTRACE on iop32x and ixp4xx to reduce
+  kernel size.
+  * [armel] disable virtio modules on all platforms except versatile
+  * [armel] enable PHYSMAP on all platforms except ixp4xx
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 26 Jun 2012 07:28:41 +0100
+
+linux-tools (3.4-1~experimental.1) experimental; urgency=low
+
+  * New upstream release
+  * Build-Depend on bison and flex, now required to build perf
+  * Fix version insertion in perf man pages
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 09 Jun 2012 20:51:12 +0100
+
+linux-2.6 (3.4.1-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.4
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.1
+
+  [ maximilian attems ]
+  * Enable DM_VERITY, NF_CONNTRACK_TIMEOUT, NF_CT_NETLINK_TIMEOUT,
+    IP_NF_MATCH_RPFILTER, IP6_NF_MATCH_RPFILTER, NETFILTER_NETLINK_ACCT,
+    NETFILTER_XT_MATCH_NFACCT, NET_SCH_PLUG, SCSI_UFSHCD, SCSI_VIRTIO,
+    NET_TEAM, ATH6KL.
+
+  [ Ben Hutchings ]
+  * DFSG: Remove the new vs6624 driver, which contains non-free firmware
+  * aufs: Update to aufs3.4-20120521
+  * [rt] Update to 3.4-rt8 and reenable
+
+ -- maximilian attems <maks@debian.org>  Wed, 06 Jun 2012 10:25:57 +0200
+
+linux-2.6 (3.3.6-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.5
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6
+    - USB: cdc-wdm: fix race leading leading to memory corruption
+    - autofs: make the autofsv5 packet file descriptor use a packetized pipe
+      (Closes: #633423)
+    - PM / Hibernate: fix the number of pages used for hibernate/thaw buffering
+      (Closes: #659363)
+    - efi: Validate UEFI boot variables
+    - efivars: Improve variable validation
+    - fs/cifs: fix parsing of dfs referrals
+    - hfsplus: Fix potential buffer overflows (CVE-2012-2319)
+    - exit_signal: fix the "parent has changed security domain" logic
+    - net: l2tp: unlock socket lock before returning from l2tp_ip_sendmsg
+    - sky2: fix receive length error in mixed non-VLAN/VLAN traffic
+      (Closes: #492853)
+    - [s390] KVM: do store status after handling STOP_ON_STOP bit
+    - [s390] KVM: Sanitize fpc registers for KVM_SET_FPU
+    - KVM: Fix write protection race during dirty logging
+    - KVM: mmu_notifier: Flush TLBs before releasing mmu_lock
+    - KVM: Ensure all vcpus are consistent with in-kernel irqchip settings
+      (CVE-2012-1601)
+    - KVM: nVMX: Fix erroneous exception bitmap check
+    - KVM: VMX: Fix kvm_set_shared_msr() called in preemptible context
+    - KVM: lock slots_lock around device assignment
+    - hugepages: fix use after free bug in "quota" handling
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 18 May 2012 03:53:16 +0100
+
+linux-2.6 (3.3.4-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4
+
+  [ Ben Hutchings ]
+  * [x86] dell-laptop: Terminate quirks list properly
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 01 May 2012 01:23:59 +0100
+
+linux-2.6 (3.3.2-1~experimental.1) experimental; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.1
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2
+
+  [ Ben Hutchings ]
+  * [armel/iop32x] Add missing #includes (fixes FTBFS)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 15 Apr 2012 16:36:13 +0100
+
+linux-tools (3.3-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+  * linux-kbuild: debian/control: Set Multi-Arch: foreign
+  * linux-tools: Build perf on alpha and hppa (Closes: #664834)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 24 Mar 2012 23:15:59 +0000
+
+linux-2.6 (3.3-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.3
+
+  [ Ben Hutchings ]
+  * [x86] crypto: Enable CRYPTO_SERPENT_SSE2_586, CRYPTO_SERPENT_SSE2_X86_64
+  * aufs: Update to aufs3.x-rcN-20120312
+  * IB: Enable INFINIBAND_SRPT as module (Closes: #663041)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 21 Mar 2012 03:08:36 +0000
+
+linux-2.6 (3.3~rc6-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20120123
+  * rt: Disable until it is updated for Linux 3.3 or later
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 04 Mar 2012 20:27:42 +0000
+
+linux (3.2.41-2) unstable; urgency=low
+
+  * [ia64] udeb: Remove efi-modules package; make kernel-image provide
+    efi-modules (fixes FTBFS)
+  * linux-headers: Fix file installation on architectures without
+    Kbuild.platforms (Closes: #703800)
+  * [x86] drm/i915: bounds check execbuffer relocation count (CVE-2013-0913)
+  * [x86] drm: Enable DRM_GMA500 as module, replacing DRM_PSB (Closes: #703506)
+    - Enable DRM_GMA600, DRM_GMA3600, DRM_MEDFIELD
+  * [x86] KVM: x86: fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME
+    (CVE-2013-1796)
+  * [x86] KVM: x86: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache
+    functions (CVE-2013-1797)
+  * KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 25 Mar 2013 15:17:44 +0000
+
+linux (3.2.41-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.40
+    - ext4: return ENOMEM if sb_getblk() fails
+    - ext4: fix possible use-after-free with AIO
+    - s390/kvm: Fix store status for ACRS/FPRS
+    - staging: comedi: disallow COMEDI_DEVCONFIG on non-board minors
+    - ext4: fix race in ext4_mb_add_n_trim()
+    - UBIFS: fix double free of ubifs_orphan objects
+    - hrtimer: Prevent hrtimer_enqueue_reprogram race
+    - nfsd: Fix memleak
+    - x86: Do not leak kernel page mapping locations
+    - USB: usb-storage: unusual_devs update for Super TOP SATA bridge
+    - posix-cpu-timers: Fix nanosleep task_struct leak
+    - NFSv4.1: Don't decode skipped layoutgets
+    - cgroup: fix exit() vs rmdir() race
+    - cpuset: fix cpuset_print_task_mems_allowed() vs rename() race
+    - ext4: fix xattr block allocation/release with bigalloc
+    - mm: fix pageblock bitmap allocation
+    - target: Add missing mapped_lun bounds checking during make_mappedlun
+      setup
+    - b43: Increase number of RX DMA slots
+    - posix-timer: Don't call idr_find() with out-of-range ID
+    - fs: Fix possible use-after-free with AIO
+    - powerpc/kexec: Disable hard IRQ before kexec
+    - mmu_notifier_unregister NULL Pointer deref and multiple ->release()
+      callouts
+    - tmpfs: fix use-after-free of mempolicy object (CVE-2013-1767)
+    - ocfs2: fix possible use-after-free with AIO
+    - ocfs2: fix ocfs2_init_security_and_acl() to initialize acl correctly
+    - ocfs2: ac->ac_allow_chain_relink=0 won't disable group relink
+    - idr: fix a subtle bug in idr_get_next()
+    - idr: make idr_get_next() good for rcu_read_lock()
+    - idr: fix top layer handling
+    - sysctl: fix null checking in bin_dn_node_address()
+    - nbd: fsync and kill block device on shutdown
+    - s390/timer: avoid overflow when programming clock comparator
+      (regression in 3.2.38)
+    - xen-pciback: rate limit error messages from xen_pcibk_enable_msi{,x}()
+      (CVE-2013-0231)
+    - xen-netback: correctly return errors from netbk_count_requests()
+    - xen-netback: cancel the credit timer when taking the vif down
+    - ipv6: use a stronger hash for tcp
+    - staging: comedi: ni_labpc: correct differential channel sequence for
+      AI commands
+    - staging: comedi: ni_labpc: set up command4 register *after* command3
+    - vhost: fix length for cross region descriptor (CVE-2013-0311)
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.41
+    - NFS: Don't allow NFS silly-renamed files to be deleted, no signal
+    - ARM: VFP: fix emulation of second VFP instruction
+    - md: fix two bugs when attempting to resize RAID0 array.
+    - proc connector: reject unprivileged listener bumps
+    - cifs: ensure that cifs_get_root() only traverses directories
+    - dm: fix truncated status strings
+    - hw_random: make buffer usable in scatterlist. (real fix for #701784)
+    - efi_pstore: Check remaining space with QueryVariableInfo() before
+      writing data
+    - efi: be more paranoid about available space when creating variables
+      (Closes: #703574)
+    - vfs: fix pipe counter breakage
+    - xen/pciback: Don't disable a PCI device that is already disabled.
+    - ALSA: seq: Fix missing error handling in snd_seq_timer_open()
+    - ext3: Fix format string issues (CVE-2013-1848)
+    - keys: fix race with concurrent install_user_keyrings() (CVE-2013-1792)
+    - USB: cdc-wdm: fix buffer overflow (CVE-2013-1860)
+    - signal: always clear sa_restorer on execve (CVE-2013-0914)
+    - crypto: user - fix info leaks in report API (CVE-2013-2546,
+      CVE-2013-2547, CVE-2013-2548)
+    - Fix: compat_rw_copy_check_uvector() misuse in aio, readv, writev, and
+      security keys
+    - batman-adv: bat_socket_read missing checks
+    - batman-adv: Only write requested number of byte to user buffer
+    - mm/hotplug: correctly add new zone to all other nodes' zone lists
+      (CVE-2012-5517)
+    - btrfs: use rcu_barrier() to wait for bdev puts at unmount
+
+  [ Aurelien Jarno]
+  * [mips,mipsel] Disable VGA_CONSOLE and ignore the corresponding ABI
+    change. It is completely broken on MIPS.
+  * headers: Include Kbuild.platforms and Platform files in -common to
+    fix out-of-tree building on mips and mipsel.
+  * [{mips,mipsel}/{4,5}kc-malta] Enable HW_RANDOM as module so that both
+    flavours have a consistent configuration.
+
+  [ Ben Hutchings ]
+  * [x86] ata_piix: reenable MS Virtual PC guests (fixes regression in
+    3.2.19-1)
+  * test-patches: Clean up all previous test patches, whether or not they
+    were applied
+  * test-patches: Add --fuzz option to allow testing patches that have fuzz
+  * [x86] efi: Fix processor-specific memcpy() build error (Closes: #698581)
+  * udeb: Add hid-topseed to input-modules (Closes: #702611)
+  * [x86] drm/i915: Unconditionally initialise the interrupt workers,
+    thanks to Bjørn Mork (Closes: #692607)
+  * efi: Ensure efivars is loaded on EFI systems (Closes: #703363)
+    - [x86] Use a platform device to trigger loading of efivars
+    - [ia64] Change EFI_VARS from module to built-in
+  * efivars: Work around serious firmware bugs
+    - Allow disabling use as a pstore backend
+    - Add module parameter to disable use as a pstore backend
+      * [x86] Set EFI_VARS_PSTORE_DEFAULT_DISABLE=y
+    - explicitly calculate length of VariableName
+    - Handle duplicate names from get_next_variable()
+  * efi_pstore: Introducing workqueue updating sysfs
+  * efivars: pstore: Do not check size when erasing variable
+  * efivars: Remove check for 50% full on write
+  * kmsg_dump: Only dump kernel log in error cases (Closes: #703386)
+    - kexec: remove KMSG_DUMP_KEXEC
+    - kmsg_dump: don't run on non-error paths by default
+  * [x86] i915: initialize CADL in opregion (Closes: #703271)
+  * drm, agp: Update to 3.4.37:
+    - drm/radeon/dce6: fix display powergating
+    - drm: don't add inferred modes for monitors that don't support them
+    - drm/i915: Increase the RC6p threshold.
+  * signal: Fix use of missing sa_restorer field (build regression
+    introduced by fix for CVE-2013-0914)
+  * rds: limit the size allocated by rds_message_alloc()
+  * rtnl: fix info leak on RTM_GETLINK request for VF devices
+  * dcbnl: fix various netlink info leaks
+  * [s390] mm: fix flush_tlb_kernel_range()
+  * [powerpc] Fix cputable entry for 970MP rev 1.0
+  * vhost/net: fix heads usage of ubuf_info
+  * udf: avoid info leak on export (CVE-2012-6548)
+  * isofs: avoid info leak on export (CVE-2012-6549)
+  * [x86,powerpc/powerpc64] random: Change HW_RANDOM back from built-in to
+    module, as we now have a real fix for #701784
+  * [rt] Update to 3.2.40-rt60
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 23 Mar 2013 03:54:34 +0000
+
+linux (3.2.39-2) unstable; urgency=high
+
+  * [s390,s390x] virtio: Ignore ABI changes in 3.2.39 (fixes FTBFS)
+  * [sparc] drm: Ignore ABI changes in 3.2.39 (fixes FTBFS)
+  * [sparc] drm: Change from built-in to module
+  * [rt] Update to 3.2.39-rt59:
+    - acpi/rt: Convert acpi_gbl_hardware lock back to a raw_spinlock_t
+    - printk: Fix rq->lock vs logbuf_lock unlock lock inversion
+    - wait-simple: Simple waitqueue implementation
+    - rcutiny: Use simple waitqueue
+  * [x86] efi: Fix ABI change for introduction of efi_enabled() function
+    in 3.2.38 (Closes: #701690)
+  * [armel/versatile] i2c: Re-enable I2C_PCA_PLATFORM as module, erroneously
+    disabled in 3.2.39-1 (fixes FTBFS)
+  * [x86,powerpc/powerpc64] random: Change HW_RANDOM from module to built-in,
+    to work around virtio-rng bug (Closes: #701784)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 27 Feb 2013 03:48:30 +0000
+
+linux (3.2.39-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.36
+    - freezer: PF_FREEZER_NOSIG should be cleared along with PF_NOFREEZE
+      (Closes: #697077)
+    - tmpfs: fix shared mempolicy leak
+    - virtio: 9p: correctly pass physical address to userspace for high pages
+    - virtio: force vring descriptors to be allocated from lowmem
+    - USB: EHCI: bugfix: urb->hcpriv should not be NULL
+    - rcu: Fix batch-limit size problem
+    - Bluetooth: ath3k: Add support for VAIO VPCEH [0489:e027]
+      (Closes: #700550)
+    - mvsas: fix undefined bit shift
+    - ALSA: usb-audio: Avoid autopm calls after disconnection; Fix missing
+      autopm for MIDI input (Closes: #664068)
+    - target/file: Fix 32-bit highmem breakage for SGL -> iovec mapping
+    - SCSI: fix Null pointer dereference on disk error
+    - proc: pid/status: show all supplementary groups
+    - nfsd4: fix oops on unusual readlike compound
+    - ARM: missing ->mmap_sem around find_vma() in swp_emulate.c
+    - sctp: fix memory leak in sctp_datamsg_from_user() when copy from user
+      space fails
+    - ne2000: add the right platform device
+    - irda: sir_dev: Fix copy/paste typo
+    - ipv4: ip_check_defrag must not modify skb before unsharing
+    - telephony: ijx: buffer overflow in ixj_write_cid()
+    - udf: fix memory leak while allocating blocks during write
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.37
+    - ext4: fix extent tree corruption caused by hole punch
+    - jbd2: fix assertion failure in jbd2_journal_flush()
+    - tmpfs mempolicy: fix /proc/mounts corrupting memory
+    - sparc: huge_ptep_set_* functions need to call set_huge_pte_at()
+    - inet: Fix kmemleak in tcp_v4/6_syn_recv_sock and
+      dccp_v4/6_request_recv_sock
+    - net: sched: integer overflow fix
+    - tcp: implement RFC 5961 3.2
+    - tcp: implement RFC 5961 4.2
+    - tcp: refine SYN handling in tcp_validate_incoming
+    - tcp: tcp_replace_ts_recent() should not be called from
+      tcp_validate_incoming()
+    - tcp: RFC 5961 5.2 Blind Data Injection Attack Mitigation
+    - RDMA/nes: Fix for crash when registering zero length MR for CQ
+    - ACPI : do not use Lid and Sleep button for S5 wakeup
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.38
+    - staging: comedi: comedi_test: fix race when cancelling command
+    - mm: use aligned zone start for pfn_to_bitidx calculation
+    - [s390] s390/time: fix sched_clock() overflow (Closes: #698382) 
+    - [i386] xen: Fix stack corruption in xen_failsafe_callback for 32bit
+      PVOPS guests. (CVE-2013-0190)
+    - KVM: PPC: Emulate dcbf
+    - evm: checking if removexattr is not a NULL
+    - ath9k_htc: Fix memory leak
+    - ath9k: do not link receive buffers during flush
+    - ath9k: fix double-free bug on beacon generate failure
+    - x86/msr: Add capabilities check
+    - can: c_can: fix invalid error codes
+    - can: ti_hecc: fix invalid error codes
+    - can: pch_can: fix invalid error codes
+    - smp: Fix SMP function call empty cpu mask race
+    - xfs: Fix possible use-after-free with AIO
+    - EDAC: Test correct variable in ->store function
+    - samsung-laptop: Disable on EFI hardware, to avoid damaging it
+    - NFS: Don't silently fail setattr() requests on mountpoints
+    - intel-iommu: Prevent devices with RMRRs from being placed into SI Domain
+    - ALSA: usb-audio: Fix regression by disconnection-race-fix patch
+      (Closes: #696321)
+    - printk: fix buffer overflow when calling log_prefix function from
+      call_console_drivers
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.39
+    - USB: XHCI: fix memory leak of URB-private data
+    - sched/rt: Use root_domain of rt_rq not current processor
+    - mwifiex: fix incomplete scan in case of IE parsing error
+    - x86-64: Replace left over sti/cli in ia32 audit exit code
+    - Bluetooth: Fix handling of unexpected SMP PDUs
+    - ptrace/x86: Partly fix set_task_blockstep()->update_debugctlmsr() logic
+    - Fix race condition with PTRACE_SETREGS and fatal signal (CVE-2013-0871)
+      + ptrace: introduce signal_wake_up_state() and ptrace_signal_wake_up()
+      + ptrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL
+      + wake_up_process() should be never used to wakeup a TASK_STOPPED/TRACED
+        task
+    - net: prevent setting ttl=0 via IP_TTL
+    - ipv6: fix header length calculation in ip6_append_data()
+    - netxen: fix off by one bug in netxen_release_tx_buffer()
+    - r8169: remove the obsolete and incorrect AMD workaround
+    - net: loopback: fix a dst refcounting issue
+    - packet: fix leakage of tx_ring memory
+    - net: sctp: sctp_setsockopt_auth_key: use kzfree instead of kfree
+    - net: sctp: sctp_endpoint_free: zero out secret key data
+    - xen/netback: shutdown the ring if it contains garbage. (CVE-2013-0216)
+    - xen/netback: don't leak pages on failure in xen_netbk_tx_check_gop.
+    - xen/netback: free already allocated memory on failure in
+      xen_netbk_get_requests
+    - netback: correct netbk_tx_err to handle wrap around. (CVE-2013-0217)
+    - tcp: frto should not set snd_cwnd to 0
+    - tcp: fix for zero packets_in_flight was too broad
+    - tcp: fix MSG_SENDPAGE_NOTLAST logic
+    - bridge: Pull ip header into skb->data before looking into ip header.
+      (Closes: #697903)
+    - x86/xen: don't assume %ds is usable in xen_iret for 32-bit PVOPS.
+      (CVE-2013-0228)
+
+  [ Aurelien Jarno ]
+  * [armhf/vexpress] Add kernel udebs.
+
+  [ Julien Cristau ]
+  * Backport drm and agp subsystems from Linux 3.4.29 (closes: #687442)
+    - [x86] i915: Fixes freezes on Ivy Bridge (Closes: #689268)
+    - nouveau: Support for newer nvidia chipsets (Closes: #690284)
+    - radeon: Support for HD7000 'Southern Islands' chips
+    - [x86] drm/i915: add Ivy Bridge GT2 Server entries (Closes: #684767)
+    - [x86] drm/i915: Close race between processing unpin task and queueing
+      the flip
+
+  [ Ben Hutchings ]
+  * Input: wacom - fix touch support for Bamboo Fun CTH-461
+  * media/rc: Add iguanair driver from Linux 3.7 (Closes: #696925)
+  * rt2800: add chipset revision RT5390R support (Closes: #696592)
+  * [armhf/mx5] mtd: Enable MTD_BLOCK as module
+  * [armhf/mx5] udeb: Add missing storage drivers (Closes: #697128)
+    - Add ata-modules including libata, pata-modules including pata_imx,
+      sata-modules including ahci_platform
+    - Add sdhci-esdhc-imx to mmc-modules
+    - Add mtd-modules including mtd, mtdblock and m25p80
+  * [armhf] udeb: Fix network driver selection
+    - [armhf/mx5] Remove nic-modules
+    - [armhf/vexpress] Add usb-modules
+    - Add standard set of USB drivers to nic-usb-modules
+    - Add nic-wireless-modules
+  * be2net: Apply backported fixes requested by Emulex (Closes: #697479)
+    - be2net: do not modify PCI MaxReadReq size
+    - be2net: fix reporting number of actual rx queues
+    - be2net: do not use SCRATCHPAD register
+    - be2net: reduce gso_max_size setting to account for ethernet header.
+    - be2net: Increase statistics structure size for skyhawk.
+    - be2net: Explicitly clear the reserved field in the Tx Descriptor
+    - be2net: Regression bug wherein VFs creation broken for multiple cards.
+    - be2net: Fix to trim skb for padded vlan packets to workaround an ASIC Bug
+    - be2net: Fix Endian
+    - be2net: Enable RSS UDP hashing for Lancer and Skyhawk
+    - be2net: dont pull too much data in skb linear part
+    - be2net: Fix to parse RSS hash from Receive completions correctly.
+    - be2net: Avoid disabling BH in be_poll()
+  * udeb: Add specialised USB keyboard/mouse drivers to input-modules:
+    hid-a4tech, hid-cypress, hid-ezkey (Closes: #697035), hid-kensington,
+    hid-keytouch, hid-kye, hid-multitouch, hid-ortek, hid-primax,
+    hid-quanta, hid-samsung, hid-speedlink
+  * radeon: Firmware is required for DRM and KMS on R600 onward, but not
+    for KMS on earlier chips (Closes: #697229)
+  * [!powerpc] radeon: Reenable DRM_RADEON_KMS, as it apparently works on
+    most non-PowerMac systems
+  * fs: cachefiles: add support for large files in filesystem caching
+    (Closes: #698376)
+  * [rt] Update to 3.2.38-rt57:
+    - sched: Adjust sched_reset_on_fork when nothing else changes
+    - sched: Queue RT tasks to head when prio drops
+    - sched: Consider pi boosting in setscheduler
+    - sched: Init idle->on_rq in init_idle()
+    - sched: Check for idle task in might_sleep()
+    - mm: swap: Initialize local locks early
+  * [armel/versatile,armhf/vexpress] i2c: Enable I2C, I2C_VERSATILE as modules
+    (Closes: #696182)
+  * ext4: Fix corruption by hole punch in large files (Closes: #685726)
+    - rewrite punch hole to use ext4_ext_remove_space()
+    - fix hole punch failure when depth is greater than 0
+    - fix kernel BUG on large-scale rm -rf commands
+  * md: protect against crash upon fsync on ro array (Closes: #696650)
+  * net: Add alx driver for Atheros AR8161 and AR8162 (Closes: #699129)
+    - Mark as staging, since it has not been accepted upstream
+  * [armel/kirkwood] rtc-s35390a: add wakealarm support (Closes: #693997)
+  * [x86] i915: Invert backlight brightness control for various models
+    including Packard Bell NCL20 (Closes: #627372) and eMachines G725
+    (Closes: #680737)
+    - Also allow this behaviour to be enabled via module parameter
+      invert_brightness=1
+  * [amd64] edac: Enable EDAC_SBRIDGE as module (Closes: #699283)
+  * SCSI: Add virtio_scsi driver (Closes: #686636)
+  * [x86] sound: Enable LINE6_USB as module (Closes: #700211)
+    - Apply upstream changes up to Linux 3.8-rc1
+  * [armhf/mx5] Update description to mention i.MX53
+  * mm: Try harder to allocate vmemmap blocks (Closes: #699913)
+  * aufs: Update to aufs3.2-20130204:
+    - support for syncfs(2)
+    - possible bugfix, race in lookup
+    - bugfix, half refreshed iinfo
+    - possible bugfix, au_lkup_by_ino() returns ESTALE
+  * [x86] efi: Clear EFI_RUNTIME_SERVICES rather than EFI_BOOT by "noefi" boot
+    parameter
+  * [x86] efi: Make "noefi" really disable EFI runtime serivces
+  * drm, agp: Update to 3.4.32
+    - drm/radeon: add WAIT_UNTIL to the non-VM safe regs list for cayman/TN
+    - drm/radeon: prevent crash in the ring space allocation
+  * linux-image-dbg: Add symlinks to vmlinux from the locations expected by
+    kdump-tools (Closes: #700418), systemtap and others
+  * mm: fix pageblock bitmap allocation (fixes regression in 3.2.38)
+  * USB: usb-storage: unusual_devs update for Super TOP SATA bridge
+
+  [ Cyril Brulebois ]
+  * Bump python build-dep, needed since the switch from local SortedDict
+    to collections.OrderedDict (new in version 2.7). (Closes: #697740)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 25 Feb 2013 00:36:51 +0000
+
+linux (3.2.35-2) unstable; urgency=low
+
+  * [ia64] Make IPV6 built-in (fixes FTBFS)
+  * [rt] Update to 3.2.35-rt52
+  * audit: Increase maximum number of names logged per syscall to 30
+    (Closes: #631799)
+  * asix: Add support for Lenovo 10/100 USB dongle (Closes: #696248)
+  * udeb: Add ums-eneub6250, ums-realtek (Closes: #694348) to
+    usb-storage-modules
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 19 Dec 2012 03:41:35 +0000
+
+linux (3.2.35-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.33
+    - samsung-laptop: don't handle backlight if handled by acpi/video
+      (Closes: #693190)
+    - e1000: fix vlan processing regression (Closes: #690956)
+    - [x86] drm/i915: no lvds quirk for Zotac ZDBOX SD ID12/ID13
+      (Closes: #691122)
+    - au0828: fix case where STREAMOFF being called on stopped stream
+      causes BUG()
+    - net: Fix skb_under_panic oops in neigh_resolve_output
+    - vlan: don't deliver frames for unknown vlans to protocols
+    - RDS: fix rds-ping spinlock recursion
+    - tcp: resets are misrouted
+    - nfsd4: fix nfs4 stateid leak
+    - [arm] vfp: fix saving d16-d31 vfp registers on v6+ kernels
+    - scsi_debug: Fix off-by-one bug when unmapping region
+    - storvsc: Account for in-transit packets in the RESET path
+    - tmpfs,ceph,gfs2,isofs,reiserfs,xfs: fix fh_len checking
+    - ext4: race-condition protection for ext4_convert_unwritten_extents_endio
+      (CVE-2012-4508)
+    - md/raid10: use correct limit variable
+    - net/wireless: ipw2200: Fix panic occurring in ipw_handle_promiscuous_tx()
+    - USB: cdc-acm: fix pipe type of write endpoint
+    - [x86] xen: don't corrupt %eip when returning from a signal handler
+    - sysfs: sysfs_pathname/sysfs_add_one: Use strlcat() instead of strcat()
+    - fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check
+    - netfilter: nf_conntrack: fix racy timer handling with reliable events
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.34
+    - x86: Remove the ancient and deprecated disable_hlt() and enable_hlt()
+      facility (Closes: #667501)
+    - ALSA: PCM: Fix some races at disconnection
+    - ALSA: usb-audio: Fix races at disconnection
+    - crypto: cryptd - disable softirqs in cryptd_queue_worker to prevent
+      data corruption
+    - mac80211: Only process mesh config header on frames that RA_MATCH
+    - mac80211: fix SSID copy on IBSS JOIN
+    - mac80211: check management frame header length
+    - mac80211: verify that skb data is present
+    - mac80211: make sure data is accessible in EAPOL check
+    - ath9k: Test for TID only in BlockAcks while checking tx status
+    - nfs: Show original device name verbatim in /proc/*/mount{s,info}
+      (Closes: #669314)
+    - target: Avoid integer overflow in se_dev_align_max_sectors()
+    - hwmon: (w83627ehf) Force initial bank selection
+    - xfs: fix reading of wrapped log data
+    - fanotify: fix missing break
+    - drm/vmwgfx: Fix a case where the code would BUG when trying to pin
+      GMR memory
+    - sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter()
+    - netlink: use kfree_rcu() in netlink_release()
+    - tcp: fix FIONREAD/SIOCINQ
+    - net: fix divide by zero in tcp algorithm illinois (CVE-2012-4565)
+    - af-packet: fix oops when socket is not present
+    - r8169: Fix WoL on RTL8168d/8111d. (Closes: #674154)
+    - sky2: Fix for interrupt handler (Closes: #681280)
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.35
+    - UBIFS: fix mounting problems after power cuts
+    - [s390] gup: add missing TASK_SIZE check to get_user_pages_fast()
+    - [x86] Exclude E820_RESERVED regions and memory holes above 4 GB from
+      direct mapping.
+    - netfilter: Mark SYN/ACK packets as invalid from original direction
+    - netfilter: Validate the sequence number of dataless ACK packets as well
+    - ipv4: avoid undefined behavior in do_ip_setsockopt()
+    - Input: i8042 - also perform controller reset when suspending
+      (Closes: #693934)
+    - brcm80211: smac: only print block-ack timeout message at trace level
+      (Closes: #674430)
+    - GFS2: Test bufdata with buffer locked and gfs2_log_lock held
+    - [x86] mce, therm_throt: Don't report power limit and package level
+      thermal throttle events in mcelog (Closes: #695209)
+    - [hppa] fix virtual aliasing issue in get_shared_area()
+    - xfs: drop buffer io reference when a bad bio is built
+    - reiserfs: Protect reiserfs_quota_{on,write}() with write lock
+    - md: Reassigned the parameters if read_seqretry returned true in func
+      md_is_badblock.
+    - md: Avoid write invalid address if read_seqretry returned true.
+    - [i386] Fix invalid stack address while in softirq
+    - selinux: fix sel_netnode_insert() suspicious rcu dereference
+    - [hppa] fix user-triggerable panic on parisc
+    - block: Don't access request after it might be freed
+    - futex: avoid wake_futex() for a PI futex_q
+
+  [ Ben Hutchings ]
+  * [x86] udeb: Re-add isci to scsi-extra-modules (Closes: #690886;
+    regression of #652897 in version 3.2~rc7-1~experimental.1 due to
+    mis-merge)
+  * udeb: Add missing net drivers:
+    - Add 8021q (Closes: #689159), cxgb4, cxgb4vf, igbvf, ixgbevf, micrel,
+      mlx4_en, pch_gbe, qlge, smsc9420, tehuti, vxge to nic-extra-modules
+    - Add int51x1, smsc75xx, smsc95xx to nic-usb-modules
+    - Add adm8211, at76c50x-usb, b43legacy, iwl4965, libertas_tf_usb,
+      mwifiex_pcie, mwl8k, orinoco_usb, prism2_usb, r8187se, r8192e_pci,
+      r8712u, rtl8192ce (Closes: #686605), rtl8192cu, rtl8192de, rtl8192se
+      vt6656_stage to nic-wireless-modules
+    - Move broadcom to nic-modules, as it may be needed by tg3
+  * udeb: Add bnx2fc, fnic, pmcraid to scsi-extra-modules
+  * udeb: Move rtl8180 to nic-wireless-modules
+  * [x86] asus-laptop: Do not call HWRS on init (Closes: #692436)
+  * [x86] drm/i915: Only kick out vesafb if we takeover the fbcon with KMS
+    (Closes: #686284)
+  * [!x86] radeon: Disable DRM_RADEON_KMS, as this is still not expected to
+    work (Closes: #628972)
+  * radeon: Disable KMS earlier if firmware is not installed (Closes: #607194)
+  * [amd64] linux-image: Include VIA Nano in package description
+  * linux-image-dbg: Change package description to use the phrase
+    'debugging symbols' and correct grammar
+  * usb: Disable UAS; it is known to be broken, and the supported devices
+    can also work with usb-storage
+  * ipv6: Treat ND option 31 as userland (DNSSL support) (Closes: #694522)
+  * rt2x00: Add device IDs 5362, 5392, 539b (Closes: #694312)
+  * udeb: Add pata_piccolo to pata-modules (Closes: #695437)
+  * firmware_class: Log every success and failure against given device
+  * firmware: Remove redundant log messages from drivers
+  * [x86] ACPI / video: ignore BIOS initial backlight value for
+    HP Folio 13-2000 (Closes: #692361)
+  * [x86] KVM: x86: invalid opcode oops on SET_SREGS with OSXSAVE bit set
+    (CVE-2012-4461)
+  * kmod: make __request_module() killable (CVE-2012-4398)
+  * exec: do not leave bprm->interp on stack (CVE-2012-4530)
+  * exec: use -ELOOP for max recursion depth
+  * [rt] Update to 3.2.34-rt51:
+    - hrtimer: Raise softirq if hrtimer irq stalled
+    - rcu: Disable RCU_FAST_NO_HZ on RT
+    - net: netfilter: Serialize xt_write_recseq sections on RT
+  * megaraid_sas: fix memory leak if SGL has zero length entries
+    (Closes: #688198)
+
+  [ Ian Campbell ]
+  * [xen] add support for microcode updating. (Closes: #693053)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 10 Dec 2012 00:14:55 +0000
+
+linux (3.2.32-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.31
+    - target: Fix ->data_length re-assignment bug with SCSI overflow
+    - hpsa: fix handling of protocol error
+    - cifs: fix return value in cifsConvertToUTF16
+    - asix: Support DLink DUB-E100 H/W Ver C1 (Closes: #687567)
+    - dj: memory scribble in logi_dj
+    - dm: handle requests beyond end of device instead of using BUG_ON
+    - md/raid10: fix "enough" function for detecting if array is failed.
+    - libata: Prevent interface errors with Seagate FreeAgent GoFlex
+    - vfs: dcache: fix deadlock in tree traversal
+    - Revert "drm/radeon: rework pll selection (v3)" (regression in 3.2.30)
+    - HID: hidraw: don't deallocate memory when it is in use
+    - xfrm: Workaround incompatibility of ESN and async crypto
+    - xfrm_user: fix various information leaks
+    - xfrm_user: ensure user supplied esn replay window is valid
+    - net: guard tcp_set_keepalive() to tcp sockets
+    - ipv4: raw: fix icmp_filter()
+    - ipv6: raw: fix icmpv6_filter()
+    - ipv6: mip6: fix mip6_mh_filter()
+    - netrom: copy_datagram_iovec can fail
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.32
+    - mtd: nand: Use the mirror BBT descriptor when reading its version
+    - TTY: ttyprintk, don't touch behind tty->write_buf
+    - n_gsm: fix various serious bugs
+    - hpsa: Use LUN reset instead of target reset
+    - staging: comedi: don't dereference user memory for INSN_INTTRIG
+    - ext4: fix potential deadlock in ext4_nonda_switch()
+    - staging: comedi: fix memory leak for saved channel list
+    - scsi_remove_target: fix softlockup regression on hot remove
+      (Closes: #690990)
+    - usb: host: xhci: Fix Null pointer dereferencing with 71c731a for
+      non-x86 systems (regression in 3.2.30)
+    - ext4: online defrag is not supported for journaled files
+    - staging: comedi: s626: don't dereference insn->data
+    - serial: pl011: handle corruption at high clock speeds
+    - ext4: always set i_op in ext4_mknod()
+    - ext4: fix fdatasync() for files with only i_size changes
+    - [x86] drm/i915: use adjusted_mode instead of mode for checking the
+      6bpc force flag (regression in 3.2.29)
+    - staging: comedi: jr3_pci: fix iomem dereference
+    - JFFS2: don't fail on bitflips in OOB
+    - mtd: nandsim: bugfix: fail if overridesize is too big
+    - pnfsblock: fix partial page buffer wirte
+    - target/file: Re-enable optional fd_buffered_io=1 operation
+    - iscsit: remove incorrect unlock in iscsit_build_sendtargets_resp
+    - rapidio/rionet: fix multicast packet transmit logic
+    - ALSA: aloop - add locking to timer access
+    - [armhf/omap] counter: add locking to read_persistent_clock
+    - mm: fix invalidate_complete_page2() lock ordering
+    - mm: thp: fix pmd_present for split_huge_page and PROT_NONE with THP
+    - mm: hugetlb: fix pgoff computation when unmapping page from vma
+    - hugetlb: do not use vma_hugecache_offset() for vma_prio_tree_foreach
+    - [x86] firewire: cdev: fix user memory corruption (i386 userland on
+      amd64 kernel)
+    - udf: fix retun value on error path in udf_load_logicalvol
+    - eCryptfs: Unlink lower inode when ecryptfs_create() fails
+    - eCryptfs: Initialize empty lower files when opening them
+    - eCryptfs: Revert to a writethrough cache model
+    - eCryptfs: Write out all dirty pages just before releasing the lower file
+    - eCryptfs: Call lower ->flush() from ecryptfs_flush()
+    - mempolicy: remove mempolicy sharing
+    - mempolicy: fix a race in shared_policy_replace()
+    - mempolicy: fix refcount leak in mpol_set_shared_policy()
+    - mempolicy: fix a memory corruption by refcount imbalance in
+      alloc_pages_vma()
+    - hpsa: dial down lockup detection during firmware flash
+    - netfilter: nf_ct_ipv4: packets with wrong ihl are invalid
+    - netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP
+      expectation
+    - netfilter: nf_ct_expect: fix possible access to uninitialized timer
+    - ipvs: fix oops on NAT reply in br_nf context
+
+  [ Ben Hutchings ]
+  * codel: refine one condition to avoid a nul rec_inv_sqrt
+  * [mips,mipsel] Ignore NFS/SunRPC ABI changes in 3.2.30 (fixes FTBFS)
+  * tg3: Fix TSO CAP for 5704 devs w / ASF enabled
+  * SUNRPC: Set alloc_slot for backchannel tcp ops (regression in 3.2.30)
+  * iwlwifi: Do not request unreleased firmware for IWL6000 (Closes: #689416)
+  * aufs: Update to aufs3.2-20120827:
+    - Fix statfs() values when different block sizes are in use
+  * udeb: Add hid-logitech-dj to input-modules (Closes: #661379)
+  * connector: Make CONNECTOR built-in; enable PROC_EVENTS (Closes: #588200)
+  * e1000e: Change wthresh to 1 to avoid possible Tx stalls
+  * [x86] efi: Build EFI stub with EFI-appropriate options
+  * [rt] Update to 3.2.32-rt48:
+    - random: Make add_interrupt_randomness() work on rt
+    - softirq: Init softirq local lock after per cpu section is set up
+    - mm: slab: Fix potential deadlock
+    - mm: page_alloc: Use local_lock_on() instead of plain spinlock
+    - rt: rwsem/rwlock: lockdep annotations
+    - sched: Better debug output for might sleep
+    - stomp_machine: Use mutex_trylock when called from inactive cpu
+  * [x86] storvsc: Account for in-transit packets in the RESET path
+  * fs: handle failed audit_log_start properly
+  * fs: prevent use after free in auditing when symlink following was denied
+  * kernel/sys.c: fix stack memory content leak via UNAME26 (CVE-2012-0957)
+  * ALSA: hda: Fix oops caused by "Fix internal mic for Lenovo Ideapad U300s"
+    in 3.2.32
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 22 Oct 2012 06:25:37 +0100
+
+linux (3.2.30-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30
+    - ext3: Fix fdatasync() for files with only i_size changes
+    - UBI: fix a horrible memory deallocation bug
+    - fuse: fix retrieve length
+    - mmc: card: Skip secure erase on MoviNAND; causes unrecoverable corruption
+    - udf: Fix data corruption for files in ICB
+    - xen: Use correct masking in xen_swiotlb_alloc_coherent.
+    - CIFS: Fix error handling in cifs_push_mandatory_locks
+    - [x86] drm/i915: Wait for all pending operations to the fb before
+      disabling the pipe
+    - xhci: Fix bug after deq ptr set to link TRB
+    - NFS: Fix the initialisation of the readdir 'cookieverf' array
+    - staging: comedi: das08: Correct AI encoding for das08jr-16-ao
+    - staging: comedi: das08: Correct AO output for das08jr-16-ao
+    - rt2800usb: Added rx packet length validity check
+    - staging: zcache: fix cleancache race condition with shrinker
+    - NFS: return error from decode_getfh in decode open
+    - ARM: 7526/1: traps: send SIGILL if get_user fails on undef handling path
+    - ahci: Add alternate identifier for the 88SE9172
+
+  [ Ben Hutchings ]
+  * [s390/s390x-tape] udeb: Remove fuse-modules configuration (fixes FTBFS)
+
+ -- dann frazier <dannf@debian.org>  Wed, 26 Sep 2012 16:00:58 +0900
+
+linux (3.2.29-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24
+    - sched/nohz: Rewrite and fix load-avg computation -- again
+      (Closes: #674153)
+    - libsas: fix taskfile corruption in sas_ata_qc_fill_rtf
+    - md/raid1: fix use-after-free bug in RAID1 data-check code.
+    - PCI: EHCI: fix crash during suspend on ASUS computers
+    - cpufreq / ACPI: Fix not loading acpi-cpufreq driver (regression in 3.2.2)
+    - block: fix infinite loop in __getblk_slow (regression in 3.2.19)
+      (Closes: #684293)
+    - PM / Hibernate: Hibernate/thaw fixes/improvements
+    - tcm_fc: Fix crash seen with aborts and large reads
+    - fifo: Do not restart open() if it already found a partner
+    - cifs: on CONFIG_HIGHMEM machines, limit the rsize/wsize to the kmap space
+    - UBIFS: fix a bug in empty space fix-up
+    - ore: Fix NFS crash by supporting any unaligned RAID IO
+    - ore: Remove support of partial IO request (NFS crash)
+    - pnfs-obj: don't leak objio_state if ore_write/read fails
+    - pnfs-obj: Fix __r4w_get_page when offset is beyond i_size
+    - dm raid1: fix crash with mirror recovery and discard
+    - dm raid1: set discard_zeroes_data_unsupported
+    - time: Fix bugs in leap-second handling (Closes: #679882)
+      + ntp: Fix leap-second hrtimer livelock
+      + timekeeping: Fix leapsecond triggered load spike issue
+    - bnx2x: fix checksum validation
+    - bnx2x: fix panic when TX ring is full
+    - eCryptfs: Gracefully refuse miscdev file ops on inherited/passed files
+    - ACPI / PM: Make acpi_pm_device_sleep_state() follow the specification
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.25
+    - mm: Fix various performance problems, particularly affecting use of
+      transparent hugepages (Closes: #675493)
+    - target: Add range checking to UNMAP emulation
+    - target: Fix reading of data length fields for UNMAP commands
+    - target: Fix possible integer underflow in UNMAP emulation
+    - target: Check number of unmap descriptors against our limit
+    - ext4: don't let i_reserved_meta_blocks go negative
+    - ext4: undo ext4_calc_metadata_amount if we fail to claim space
+    - locks: fix checking of fcntl_setlease argument
+    - Btrfs: call the ordered free operation without any locks held
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.26
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.27
+    - lirc_sir: make device registration work (Closes: #680762)
+    - random: Improve random number generation on non-interactive systems
+      + random: Use arch_get_random_int instead of cycle counter if avail
+      + random: Use arch-specific RNG to initialize the entropy store
+      + random: make 'add_interrupt_randomness()' do something sane
+      + usb: feed USB device information to the /dev/random driver
+      + net: feed /dev/random with the MAC address when registering a device
+      + rtc: wm831x: Feed the write counter into device_add_randomness()
+      + mfd: wm831x: Feed the device UUID into device_add_randomness()
+    - futex: Test for pi_mutex on fault in futex_wait_requeue_pi()
+    - futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi()
+    - s390/mm: downgrade page table after fork of a 31 bit process
+    - asus-wmi: use ASUS_WMI_METHODID_DSTS2 as default DSTS ID.
+      (Closes: #679158)
+    - md/raid1: don't abort a resync on the first badblock.
+    - [arm] 7467/1: mutex: use generic xchg-based implementation for ARMv6+
+    - [arm] 7476/1: vfp: only clear vfp state for current cpu in vfp_pm_suspend
+    - [arm] 7477/1: vfp: Always save VFP state in vfp_pm_suspend on UP
+    - [arm] 7478/1: errata: extend workaround for erratum #720789
+    - [arm] Fix undefined instruction exception handling
+    - mm: mmu_notifier: fix freed page still mapped in secondary MMU
+    - mm: hugetlbfs: close race during teardown of hugetlbfs shared page tables
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.28
+    - bnx2: Fix bug in bnx2_free_tx_skbs().
+    - sch_sfb: Fix missing NULL check
+    - sctp: Fix list corruption resulting from freeing an association on a list
+    - cipso: don't follow a NULL pointer when setsockopt() is called
+    - caif: fix NULL pointer check
+    - net/tun: fix ioctl() based info leaks
+    - rtlwifi: rtl8192cu: Change buffer allocation for synchronous reads
+    - hfsplus: fix overflow in sector calculations in hfsplus_submit_bio
+    - drm/i915: fixup seqno allocation logic for lazy_request
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.29
+    - pnfs: defer release of pages in layoutget
+    - fuse: verify all ioctl retry iov elements
+    - usb: serial: mos7840: Fixup mos7840_chars_in_buffer()
+    - sched: fix divide by zero at {thread_group,task}_times
+    - vfs: canonicalize create mode in build_open_flags()
+    - dccp: check ccid before dereferencing
+    - md: Don't truncate size at 4TB for RAID0 and Linear
+    - target: fix NULL pointer dereference bug alloc_page() fails to get memory
+    - USB: CDC ACM: Fix NULL pointer dereference
+    - alpha: Don't export SOCK_NONBLOCK to user space. (Closes: #658460)
+    - radeon: Fix various bugs in reading vbios (Closes: #685604)
+    - vfs: missed source of ->f_pos races
+    - svcrpc: fix BUG() in svc_tcp_clear_pages
+    - svcrpc: sends on closed socket should stop immediately
+    - fbcon: fix race condition between console lock and cursor timer (v1.1)
+    - mm: hugetlbfs: correctly populate shared pmd
+    - fs/buffer.c: remove BUG() in possible but rare condition
+    - block: replace __getblk_slow misfix by grow_dev_page fix
+    - Staging: speakup: fix an improperly-declared variable. (Closes: #685953)
+    - NFS: Fix Oopses in nfs_lookup_revalidate and nfs4_lookup_revalidate
+
+  [ Ben Hutchings ]
+  * Bump ABI to 4
+  * linux-image: Include package version in utsname version string
+    ('uname -v' output) (Closes: #638878)
+  * linux-source: Drop support for version.$DISTRIBUTION
+  * [arm,ia64,powerpc,s390,sh,x86] linux-image: Include package version
+    in stack traces from WARN, BUG, Oops etc.
+  * udeb: Add snd-hda-codec-ca0132 to sound-modules (Closes: #682368)
+  * linux-source: Suggest pkg-config, needed to build kconfig GUIs
+    (Closes: #682726)
+  * debugfs: Add mode, uid and gid mount options; set default mode to 700
+    (Closes: #681418)
+  * net: new counter for tx_timeout errors in sysfs
+  * net: Add byte queue limits (bql) for reduced buffer-bloat
+  * bnx2,bnx2x,e1000e,forcedeth,igb,ixgbe,sfc,skge,sky2,tg3:
+    Add support for bql
+  * fs: Update link security restrictions to match Linux 3.6:
+    - Drop kconfig options; restrictions can only be disabled by sysctl
+    - Change the audit message type from AUDIT_AVC (1400) to
+      AUDIT_ANON_LINK (1702)
+  * [rt] Update to 3.2.28-rt42:
+    - time/rt: Fix up leap-second backport for RT changes
+    - fix printk flush of messages
+  * rds: set correct msg_namelen (CVE-2012-3430)
+  * e1000: add dropped DMA receive enable back in for WoL (Closes: #684618)
+  * PCI/PM/Runtime: make PCI traces quieter (Closes: #684049)
+  * rc: ite-cir: Initialise ite_dev::rdev earlier (Closes: #684441)
+  * input: Enable TOUCHSCREEN_ATMEL_MXT as module (Closes: #685123)
+  * usb: Add USB_QUIRK_RESET_RESUME for all Logitech UVC webcams
+    (Closes: #668211)
+  * [alpha] Use gcc-4.6 (Closes: #685894)
+    - Use large data model to work around link failure
+  * [i386/486] video: Change FB_GEODE_LX from built-in to module (lxfb)
+    (Closes: #686528)
+  * [i386/686-pae] video: Disable Geode framebuffer drivers, not used with
+    any chips that support PAE
+  * [x86] drm/i915: Fix i8xx interrupt handling (Closes: #655152)
+  * [armel/kirkwood] ahci: Add JMicron 362 device IDs (Closes: #634180)
+  * speakup: lower default software speech rate (Closes: #686742)
+  * e1000e: Fix potential DoS when TSO enabled
+  * mm: Remove user-triggerable BUG from mpol_to_str
+  * sfc: Fix maximum number of TSO segments and minimum TX queue size
+    (CVE-2012-3412)
+    - tcp: Apply device TSO segment limit earlier
+  * net_sched: gact: Fix potential panic in tcf_gact().
+  * af_packet: remove BUG statement in tpacket_destruct_skb
+  * net: Fix various information leaks
+  * af_packet: don't emit packet on orig fanout group
+  * af_netlink: force credentials passing (CVE-2012-3520)
+  * netlink: fix possible spoofing from non-root processes
+  * net: ipv4: ipmr_expire_timer causes crash when removing net namespace
+  * [i386] i810fb: Enable FB_I810_GTF, FB_I810_I2C (Closes: #687644)
+  * udeb: Add fuse-modules to support os-prober (see #684265)
+
+  [ Bastian Blank ]
+  * Make xen-linux-system meta-packages depend on xen-system. This allows
+    automatic updates. (closes: #681637)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 16 Sep 2012 06:16:38 +0100
+
+linux (3.2.23-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.22
+    - nilfs2: ensure proper cache clearing for gc-inodes
+    - ath9k_hw: avoid possible infinite loop in ar9003_get_pll_sqsum_dvc
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.23
+    - splice: fix racy pipe->buffers uses
+    - NFC: Prevent multiple buffer overflows in NCI (CVE-2012-3364)
+    - NFC: Return from rawsock_release when sk is NULL
+    - md/raid5: Do not add data_offset before call to is_badblock
+    - md/raid5: In ops_run_io, inc nr_pending before calling
+      md_wait_for_blocked_rdev
+    - md/raid10: fix failure when trying to repair a read error.
+    - udf: Improve sanity checking of filesystem metadata (CVE-2012-3400)
+      + udf: Avoid run away loop when partition table length is corrupted
+      + udf: Fortify loading of sparing table
+    - l2tp: fix a race in l2tp_ip_sendmsg()
+    - netpoll: fix netpoll_send_udp() bugs
+    - Btrfs: run delayed directory updates during log replay
+    - ocfs2: clear unaligned io flag when dio fails
+    - aio: make kiocb->private NUll in init_sync_kiocb()
+    - mm: Hold a file reference in madvise_remove
+
+  [ Ben Hutchings ]
+  * linux-libc-dev: Fix redundant 'GNU glibc' in description (Closes: #631228)
+  * README.source: Correct name of main patch series file
+  * [sh] Fix up store queue code for subsys_interface changes (Closes: #680025)
+  * scsi: Silence unnecessary warnings about ioctl to partition
+    (Closes: #656899)
+  * Update Czech debconf template translations (Michal Simunek)
+    (Closes: #679674)
+  * linux-image: Remove versioned relations where stable version is new enough
+  * udf: Improve table length check to avoid possible overflow
+  * CIFS: Respect negotiated MaxMpxCount (deferred from 3.2.14)
+  * epoll: clear the tfile_check_list on -ELOOP (CVE-2012-3375)
+  * nouveau: Update to support Fermi (NVC0+) acceleration (Closes: #679566)
+    - Refactor sub-channel use
+    - Bump version to 1.0.0
+  * e100: ucode is optional in some cases
+  * [x86] drm/i915: prefer wide & slow to fast & narrow in DP configs
+    (Closes: #658662)
+  * cipso: don't follow a NULL pointer when setsockopt() is called
+  * [x86] hwmon: Enable SENSORS_SCH5636 as module (Closes: #680934)
+  * atl1c: fix issue of transmit queue 0 timed out
+  * raid5: delayed stripe fix (Closes: #680366)
+  * fs: Remove easily user-triggerable BUG from generic_setlease
+  * tcp: drop SYN+FIN messages
+  * fifo: Do not restart open() if it already found a partner (Closes: #678852)
+  * [rt] linux-source: Include -rt version suffix
+  * [rt] Update to 3.2.23-rt37:
+    - Latency histogramms: Cope with backwards running local trace clock
+    - Latency histograms: Adjust timer, if already elapsed when programmed
+    - Disable RT_GROUP_SCHED in PREEMPT_RT_FULL
+    - Latency histograms: Detect another yet overlooked sharedprio condition
+    - slab: Prevent local lock deadlock
+    - fs, jbd: pull your plug when waiting for space
+    - perf: Make swevent hrtimer run in irq instead of softirq
+    - cpu/rt: Rework cpu down for PREEMPT_RT
+    - cpu/rt: Fix cpu_hotplug variable initialization
+    - workqueue: Revert workqueue: Fix PF_THREAD_BOUND abuse
+    - workqueue: Revert workqueue: Fix cpuhotplug trainwreck
+
+  [ Arnaud Patard ]
+  * [mipsel] add r8169 to d-i udeb.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 22 Jul 2012 23:25:47 +0100
+
+linux (3.2.21-3) unstable; urgency=low
+
+  * driver core: remove __must_check from device_create_file
+    (fixes FTBFS on sparc)
+  * i2400m: Disable I2400M_SDIO; hardware did not reach production
+  * apparmor: remove advertising the support of network rules from
+    compat iface (Closes: #676515)
+  * xen/netfront: teardown the device before unregistering it (Closes: #675190)
+  * linux-{doc,manual,source,support}: Mark as capable of satisfying
+    relations from foreign packages (Multi-Arch: foreign) (Closes: #679202)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 28 Jun 2012 04:58:18 +0100
+
+linux (3.2.21-2) unstable; urgency=low
+
+  * [i386] cpufreq/gx: Fix the compile error
+  * [powerpc] Enable PPC_DISABLE_WERROR (fixes FTBFS)
+  * tracing/mm: Move include of trace/events/kmem.h out of header into slab.c
+    (fixes FTBFS on sparc)
+  * [i386] Disable incomplete lguest support
+  * udeb: Add missing dependencies for various modules (see #678587)
+    - [armel/kirkwood] fb-modules depends on kernel-image
+    - [ia64] nic-usb-modules depends on kernel-image, nic-shared-modules,
+      usb-modules
+    - [ia64] sata-modules depends on kernel-image, scsi-core-modules
+    - [ia64] scsi-modules depends on scsi-core-modules
+    - [ia64,powerpc,ppc64] pcmcia-modules depends on kernel-image
+    - [powerpc,ppc64] nic-pcmcia-modules depends on kernel-image,
+      nic-shared-modules, pcmcia-modules
+    - [powerpc,ppc64,x86] scsi-modules depends on ata-modules
+    - [x86] nic-extra-modules depends on i2c-modules
+  * wacom: do not crash when retrieving touch_max (Closes: #678798)
+  * wacom: Revert unintended changes to handling of Tablet PCs
+    (Closes: #677164)
+  * linux-image, README.Debian: Suggest debian-kernel-handbook package
+
+  [ Arnaud Patard ]
+  * [armel, armhf] backport BPF JIT support
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 26 Jun 2012 01:56:42 +0100
+
+linux-tools (3.2.17-1) unstable; urgency=low
+
+  * New upstream stable updates:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.15
+    - modpost: fix ALL_INIT_DATA_SECTIONS
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.16
+    - perf hists: Catch and handle out-of-date hist entry maps.
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.17
+    - Perf: fix build breakage
+
+  * Fix version insertion in perf man pages
+  * Build usbip userland packages (Closes: #568362)
+    - Do not build a shared library package; the API and ABI have changed
+      from libusbip0 but there has been no upstream soversion change
+  * usbipd: Enable TCP wrappers for access control
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 24 Jun 2012 02:52:26 +0100
+
+linux (3.2.21-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.21
+    - NFSv4.1: Fix a request leak on the back channel
+    - target: Return error to initiator if SET TARGET PORT GROUPS emulation
+      fails
+    - USB: add NO_D3_DURING_SLEEP flag and revert 151b61284776be2
+    - USB: fix gathering of interface associations
+
+  [ Ben Hutchings ]
+  * [ia64,powerpc] udeb: Add crc-itu-t to crc-modules; make
+    firewire-core-modules depend on it (fixes FTBFS)
+  * [arm,m68k,sh4] udeb: Build ipv6-modules
+  * ethtool: allow ETHTOOL_GSSET_INFO for users
+  * [rt] bump version to 3.2.20-rt32
+  * cpu: Convert 'cpu' and 'machinecheck' sysdev_class to a regular subsystem
+  * [x86] Add driver auto probing for x86 features
+    - crypto: Add support for x86 cpuid auto loading for x86 crypto drivers
+      (Closes: #568008)
+    - intel-idle: convert to x86_cpu_id auto probing
+    - HWMON: Convert coretemp to x86 cpuid autoprobing
+    - HWMON: Convert via-cputemp to x86 cpuid autoprobing
+    - cpufreq: Add support for x86 cpuinfo auto loading (Closes: #664813)
+  * [x86] ACPI: Load acpi-cpufreq from processor driver automatically
+  * Bump ABI to 3
+  * input: Add Synaptics USB device driver (Closes: #678071)
+  * [x86] udeb: Fix dependencies for nic-wireless-modules
+
+  [ Aurelien Jarno ]
+  * [mips,mipsel] udeb: Remove rivafb and nvidiafb.
+  * [ppc64]: add udebs, based on powerpc/powerpc64.
+
+  [ Bastian Blank ]
+  * Support build-arch and build-indep make targets.
+
+  [ Arnaud Patard ]
+  * [armel/kirkwood] Add dreamplug and iconnect support (Closes: #675922)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 22 Jun 2012 13:54:15 +0100
+
+linux (3.2.20-1) unstable; urgency=low
+
+  * The "Confused? You Won't Be" release
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.20
+   - cifs: fix oops while traversing open file list (try #4)
+   - mm/fork: fix overflow in vma length when copying mmap on clone
+   - mm: fix faulty initialization in vmalloc_init()
+   - x86, amd, xen: Avoid NULL pointer paravirt references
+   - ext4: force ro mount if ext4_setup_super() fails
+   - ext4: disallow hard-linked directory in ext4_lookup
+   - ext4: add missing save_error_info() to ext4_error()
+   - ALSA: usb-audio: fix rate_list memory leak
+   - Bluetooth: btusb: typo in Broadcom SoftSailing id (Closes: #674565)
+   - ipv4: Do not use dead fib_info entries.
+   - ipv4: fix the rcu race between free_fib_info and ip_route_output_slow
+   - l2tp: fix oops in L2TP IP sockets for connect() AF_UNSPEC case
+   - btree: fix tree corruption in btree_get_prev()
+   - asix: allow full size 8021Q frames to be received (Closes: #676545)
+   - ext4: don't trash state flags in EXT4_IOC_SETFLAGS
+   - ext4: fix the free blocks calculation for ext3 file systems w/ uninit_bg
+
+  [ Ben Hutchings ]
+  * Rename source package to 'linux' (Closes: #636010)
+  * Convert source package format to 3.0 (quilt)
+    - Convert patch system to quilt, except for the 'orig' patch series
+    - Use xz compression for upstream and Debian tarballs
+    - README.source: Update description of patch system to match current
+      usage
+    - linux-patch-debian: Remove; it is no longer necessary for GPL
+      compliance and does not work with our current patch management
+  * linux-image: Change package name for bugs to 'src:linux' (Closes: #644198)
+  * DFSG: video: Remove nvidiafb and rivafb, which include apparently
+    obfuscated code (Closes: #383481, #609615).  The nouveau driver supports
+    all the same hardware, aside from RIVA 128 (NV3).
+  * udeb: Add udf-modules containing UDF filesystem module (Closes: #613972)
+  * [mipsel/loongson2f] linux-image: Recommend libc6-loongson2f
+    (Closes: #629410)
+  * Build-Depend on kmod or module-init-tools, not just the latter
+  * test-patches: Recognise the rt featureset automatically
+  * udeb: Build-Depend on kernel-wedge >= 2.84; this allows us to list
+    modules as required even if they are built-in in some configurations
+  * filter: Allow to create sk-unattached filters
+  * proc: Backport hidepid mount option from Linux 3.4 (Closes: #669028)
+  * NFSv4: Reduce the footprint of the idmapper (Closes: #657078)
+  * [i386] thp: avoid atomic64_read in pmd_read_atomic for 32bit PAE
+    (Closes: #676360)
+  * linux-source: Add single patch for each featureset
+  * [x86] Enable CRASH_DUMP, PROC_VMCORE (Closes: #623177)
+  * media/dvb: Enable DVB_DDBRIDGE as module (Closes: #676952)
+  * net: sock: validate data_len before allocating skb in
+    sock_alloc_send_pskb() (CVE-2012-2136)
+  * macvtap: zerocopy: fix offset calculation when building skb
+  * macvtap: zerocopy: fix truesize underestimation
+  * macvtap: zerocopy: put page when fail to get all requested user pages
+  * macvtap: zerocopy: set SKBTX_DEV_ZEROCOPY only when skb is built
+    successfully
+  * macvtap: zerocopy: validate vectors before building skb (CVE-2012-2119)
+  * KVM: Fix buffer overflow in kvm_set_irq() (CVE-2012-2137)
+
+  [ Bastian Blank ]
+  * [s390/s390x,s390x/s390x] Build debugging symbols.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 11 Jun 2012 02:46:34 +0100
+
+linux-2.6 (3.2.19-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.19
+    - hpsa: Fix problem with MSA2xxx devices (Closes: #661057)
+    - IB/core: Fix mismatch between locked and pinned pages
+    - iommu: Fix off by one in dmar_get_fault_reason()
+    - vfs: make AIO use the proper rw_verify_area() area helpers
+    - HID: logitech: read all 32 bits of report type bitfield (Closes: #671292)
+    - USB: Remove races in devio.c
+    - ext{3,4}: Fix error handling on inode bitmap corruption
+    - uvcvideo: Fix ENUMINPUT handling
+    - dl2k: Clean up rio_ioctl (CVE-2012-2313)
+    - [x86] MCE: Fix vm86 handling for 32bit mce handler
+    - [x86] mce: Fix check for processor context when machine check was taken.
+    - ethtool: Null-terminate filename passed to ethtool_ops::flash_device
+    - NFSv4: Fix buffer overflows in ACL support (CVE-2012-2375)
+      + Avoid reading past buffer when calling GETACL
+      + Avoid beyond bounds copy while caching ACL
+
+  [ Ben Hutchings ]
+  * be2net: Backport most changes up to Linux 3.5-rc1, thanks to
+    Sarveshwar Bandi (Closes: #673391)
+    - Add support for Skyhawk cards
+  * net/sched: Add codel and fq_codel from Linux 3.5-rc1
+  * [x86] udeb: Add hyperv-modules containing Hyper-V paravirtualised drivers
+  * [x86] ata_piix: defer disks to the Hyper-V drivers by default
+  * [x86] drm/i915:: Disable FBC on SandyBridge (Closes: #675022)
+  * AppArmor: compatibility patch for v5 interface (Closes: #661151)
+  * hugepages: fix use after free bug in "quota" handling (CVE-2012-2133)
+  * [x86] mm: pmd_read_atomic: fix 32bit PAE pmd walk vs pmd_populate SMP race
+    condition (CVE-2012-2373)
+  * hugetlb: fix resv_map leak in error path (CVE-2012-2390)
+  * [SCSI] fix scsi_wait_scan (Closes: #647436)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 01 Jun 2012 13:15:48 +0100
+
+linux-2.6 (3.2.18-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.18
+    - hugetlb: prevent BUG_ON in hugetlb_fault() -> hugetlb_cow()
+    - net: l2tp: unlock socket lock before returning from l2tp_ip_sendmsg
+    - [sparc] sparc64: Do not clobber %g2 in xcall_fetch_glob_regs().
+    - ext4: avoid deadlock on sync-mounted FS w/o journal
+    - brcm80211: smac: fix endless retry of A-MPDU transmissions
+      (Closes: #672891)
+    - target: Fix SPC-2 RELEASE bug for multi-session iSCSI client setups
+    - ALSA: hda/idt - Fix power-map for speaker-pins with some HP laptops
+      (Closes: #672582)
+    - usbnet: fix skb traversing races during unlink(v2)
+    - [arm] prevent VM_GROWSDOWN mmaps extending below FIRST_USER_ADDRESS
+
+  [ Jonathan Nieder ]
+  * wacom: Add support for various tablet models (Closes: #671801)
+  * rt2800usb: Add support for Ralink RT5392/RF5372 chipset (Closes: #673186)
+
+  [ Ben Hutchings ]
+  * test-patches: Fix -j option, broken since 3.1.0-1~experimental.1
+  * rt2800usb: Re-enable powersaving by default, as it should work better
+    than in 2.6.38
+  * [sparc,sparc64] Build virtio-modules-udeb for use in qemu (Closes: #673320)
+  * KVM: mmu_notifier: Flush TLBs before releasing mmu_lock
+  * [x86] KVM: nVMX: Fix erroneous exception bitmap check
+  * [x86] KVM: VMX: vmx_set_cr0 expects kvm->srcu locked
+  * [s390] KVM: do store status after handling STOP_ON_STOP bit
+  * [s390] KVM: Sanitize fpc registers for KVM_SET_FPU
+  * ACPI battery: only refresh the sysfs files when pertinent information
+    changes (Closes: #670958)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 21 May 2012 04:07:08 +0100
+
+linux-2.6 (3.2.17-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.17
+    - md: fix possible corruption of array metadata on shutdown.
+    - ext4: fix endianness breakage in ext4_split_extent_at()
+    - KVM: unmap pages from the iommu when slots are removed (CVE-2012-2121)
+    - btrfs: btrfs_root_readonly() broken on big-endian
+    - ocfs2: Fix various bugs affecting big-endian architectures
+    - lockd: fix the endianness bug
+    - phonet: Check input from user before allocating
+    - netlink: fix races after skb queueing
+    - net: fix a race in sock_queue_err_skb()
+    - net/ethernet: ks8851_mll fix rx frame buffer overflow
+    - x86, apic: APIC code touches invalid MSR on P5 class machines
+    - drm/i915: fix integer overflow in i915_gem_execbuffer2()
+    - drm/i915: fix integer overflow in i915_gem_do_execbuffer()
+    - USB: cdc-wdm: fix race leading leading to memory corruption
+    - autofs: make the autofsv5 packet file descriptor use a packetized pipe
+      (Closes: #633423)
+    - efi: Validate UEFI boot variables
+    - efivars: Improve variable validation
+    - fs/cifs: fix parsing of dfs referrals
+    - hfsplus: Fix potential buffer overflows (CVE-2012-2319)
+    - exit_signal: fix the "parent has changed security domain" logic
+
+  [ Ben Hutchings ]
+  * aufs: Enable AUFS_EXPORT
+  * ext4: Report max_batch_time option correctly (Closes: #654206)
+  * [i386/rt-686-pae] Enable HIGHMEM64G as intended for this configuration
+  * NFSv4: Revalidate uid/gid after open (Closes: #659111)
+  * sky2: propogate rx hash when packet is copied
+  * sky2: fix receive length error in mixed non-VLAN/VLAN traffic
+    (Closes: #492853)
+  * KVM: Ensure all vcpus are consistent with in-kernel irqchip settings
+    (CVE-2012-1601)
+  * KVM: lock slots_lock around device assignment (CVE-2012-2121)
+  * [rt] bump version to 3.2.16-rt27
+
+  [ Bastian Blank ]
+  * [s390] Enable IUCV special message support. (closes: #671238)
+
+  [ Arnaud Patard ]
+  * [armhf] Add vexpress support from Vagrant Cascadian with a slightly
+    modified kernel configuration (Closes: #670462)
+  * [armel] Introduce a new udeb module for leds and use it on kirkwoord
+    kernel thanks to Simon Guinot (Closes: #671200)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 12 May 2012 15:29:09 +0100
+
+linux-2.6 (3.2.16-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.16
+    - drm/i915: properly compute dp dithering for user-created modes
+      (Closes: #666360)
+    - md/bitmap: prevent bitmap_daemon_work running while initialising bitmap
+    - [ia64] Fix futex_atomic_cmpxchg_inatomic() (Closes: #659485)
+    - USB: serial: fix race between probe and open
+    - fcaps: clear the same personality flags as suid when fcaps are used
+      (CVE-2012-2123)
+    - ACPICA: Fix to allow region arguments to reference other scopes
+      (Closes: #661581)
+    - futex: Do not leak robust list to unprivileged process
+    - drm/radeon/kms: fix the regression of DVI connector check
+      (Closes: #670047)
+
+  [ Ben Hutchings ]
+  * rt2x00: Identify rt2800usb chipsets. (Closes: #658067)
+  * [x86] Add EFI boot stub support (Closes: #669033)
+  * brcmsmac: "INTERMEDIATE but not AMPDU" only when tracing
+  * NFSv4: Fix error handling and improve error reporting for file locking
+    (Closes: #669270)
+    - Rate limit the state manager for lock reclaim warning messages
+    - Ensure that the LOCK code sets exception->inode
+    - Ensure that we check lock exclusive/shared type against open modes
+  * [x86] i915: Fix integer overflows in i915_gem_{do_execbuffer,execbuffer2}
+  * Revert "autofs: work around unhappy compat problem on x86-64".
+    Reopens #633423.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 29 Apr 2012 08:00:53 +0100
+
+linux-2.6 (3.2.15-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.15
+    - drm/radeon/kms: fix fans after resume (Closes: #596741)
+    - sysctl: fix write access to dmesg_restrict/kptr_restrict
+    - [x86] PCI: use host bridge _CRS info on MSI MS-7253 (Closes: #619034)
+    - nfs: Fix length of buffer copied in __nfs4_get_acl_uncached
+    - [x86] ioat: fix size of 'completion' for Xen (Closes: #660554)
+    - cred: copy_process() should clear child->replacement_session_keyring
+
+  [ Ben Hutchings ]
+  * net: fix /proc/net/dev regression (Closes: #659499)
+  * [armel/orion5x] Fix GPIO enable bits for MPP9 (Closes: #667446)
+  * [x86] drm/i915: mask transcoder select bits before setting them on LVDS
+  * [armhf/mx5,mipsel/loongson-2f] input: Enable INPUT_TOUCHSCREEN
+    (Closes: #668036)
+  * [x86] hv: Update all Hyper-V drivers to 3.4-rc1 (Closes: #661318)
+  * hugetlb: fix race condition in hugetlb_fault()
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 14 Apr 2012 18:23:44 +0100
+
+linux-2.6 (3.2.14-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14
+    - mm: thp: fix pmd_bad() triggering in code paths holding mmap_sem
+      read mode (CVE-2012-1179)
+    - hugetlbfs: avoid taking i_mutex from hugetlbfs_read()
+    - md/bitmap: ensure to load bitmap when creating via sysfs
+      (Closes: #661558)
+    - md: dont set md arrays to readonly on shutdown
+    - md/raid1,raid10: avoid deadlock during resync/recovery (Closes: #584881)
+    - md: fix clearing of the changed flags for the bad blocks list
+    - xfs: fix inode lookup race
+    - sysctl: protect poll() in entries that may go away
+    - NFSv4: Rate limit the state manager warning messages (Closes: #666121)
+    - jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer
+    - ext4: ignore EXT4_INODE_JOURNAL_DATA flag with delalloc
+    - ext4: fix race between sync and completed io work
+    - ext4: check for zero length extent
+    - vfs: fix d_ancestor() case in d_materialize_unique
+    - udf: Fix deadlock in udf_release_file()
+    - dm crypt: add missing error handling
+    - dm thin: fix stacked bi_next usage
+    - xfs: Fix oops on IO error during xlog_recover_process_iunlinks()
+    - NFSv4: Fix two infinite loops in the mount code
+    - drm/i915: suspend fbdev device around suspend/hibernate
+      (Closes: #645547)
+    - net: fix a potential rcu_read_lock() imbalance in rt6_fill_node()
+    - [x86] tls: Off by one limit check
+    - PCI: ASPM: Fix pcie devices with non-pcie children (Closes: #665420)
+
+  [ Jonathan Nieder ]
+  * ata: Enable PATA_IT8213 as module (Closes: #666506)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 05 Apr 2012 05:02:45 +0100
+
+linux-2.6 (3.2.13-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.13
+
+  [ Ben Hutchings ]
+  * kbuild: do not check for ancient modutils tools
+
+  [ Uwe Kleine-König ]
+  * [rt] bump version to 3.2.12-rt22
+
+  [ Bastian Blank ]
+  * [s390x] Ignore ABI change.
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 28 Mar 2012 13:40:26 +0200
+
+linux-tools (3.2.7-2) unstable; urgency=high
+
+  * Apply upstream changes to fix various buffer overflow bugs:
+    - perf tools: Use scnprintf where applicable
+    - perf tools: Incorrect use of snprintf results in SEGV
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 20 Mar 2012 04:54:22 +0000
+
+linux-2.6 (3.2.12-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.11
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.12
+    - aio: fix io_setup/io_destroy race
+    - aio: fix the "too late munmap()" race
+    - vfs: fix double put after complete_walk()
+    - acer-wmi: No wifi rfkill on Lenovo machines (Closes: #655941)
+    - tcp: fix false reordering signal in tcp_shifted_skb
+    - r8169: corrupted IP fragments fix for large mtu
+    - tcp: don't fragment SACKed skbs in tcp_mark_head_lost()
+    - tcp: fix tcp_shift_skb_data() to not shift SACKed data below snd_una
+    - block: Fix NULL pointer dereference in sd_revalidate_disk
+      (Closes: #649735)
+    - block: fix __blkdev_get and add_disk race condition
+
+  [ Ben Hutchings ]
+  * [powerpc] Enable KVM_GUEST
+  * [s390] Ignore arch_pick_mmap_layout version change; it should not be
+    needed by modules (fixes FTBFS)
+  * [x86] Disable POHMELFS; this version is obsolete
+  * epoll: Don't limit non-nested epoll paths
+  * CIFS: Fix a spurious error in cifs_push_posix_locks
+  * [rt] bump rt patch to version 3.2.11-rt20
+  * aufs: Update to aufs3.2-20120312
+  * tcp: fix syncookie regression
+  * ipv6: Don't dev_hold(dev) in ip6_mc_find_dev_rcu
+
+  [ Jonathan Nieder ]
+  * [x86] Enable RTS5139 as module (Closes: #663912)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 20 Mar 2012 04:32:51 +0000
+
+linux-2.6 (3.2.10-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10
+    - regset: Prevent null pointer reference on readonly regsets
+      (CVE-2012-1097)
+
+  [ Uwe Kleine-König ]
+  * [rt] bump rt patch to version 3.2.9-rt17
+  * [rt] fix conflict between the security restrictions on links introduced in
+    3.2.9-1 and rt (Closes: #663269)
+
+  [ Aurelien Jarno ]
+  * [mips,mipsel] Mark ext4-modules as provided by the kernel-image udeb, remove
+    ide-core-modules provide.
+
+  [ Ben Hutchings ]
+  * [x86,ia64] PCI/hotplug: Build-in common hotplug drivers:
+    - Change HOTPLUG_PCI, HOTPLUG_PCI_PCIE to built-in
+    - [x86] Change HOTPLUG_PCI_ACPI to built-in (Closes: #663433)
+    - [ia64] Enable HOTPLUG_PCI_SGI as built-in
+  * linux-headers: Remove unused, broken symlinks to Kbuild (Closes: #663597)
+  * udeb: Remove dependency of {pcmcia,usb}-storage-modules on ide-core-modules
+  * [mips,mipsel] Mark ata-modules as provided by the kernel-image udeb
+    for most flavours
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 13 Mar 2012 17:19:32 +0100
+
+linux-tools (3.2.7-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.7
+    - perf tools: Fix perf stack to non executable on x86_64
+    - perf evsel: Fix an issue where perf report fails to show the proper
+      percentage
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 05 Mar 2012 00:19:02 +0000
+
+linux-2.6 (3.2.9-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.8
+    - [i386] i387: move TS_USEDFPU flag from thread_info to task_struct
+    - [x86] additional refactoring of FPU/SSE state save and restore
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.9
+    - vfs: fix d_inode_lookup() dentry ref leak
+    - target: Allow control CDBs with data > 1 page
+    - epoll: introduce POLLFREE to flush ->signalfd_wqh before kfree()
+    - epoll: ep_unregister_pollwait() can use the freed pwq->whead
+    - epoll: limit paths (CVE-2011-1083)
+    - cdrom: use copy_to_user() without the underscores
+
+  [ Bastian Blank ]
+  * [mips,mipsel] Also remove ext4 modules from installer.
+
+  [ Ben Hutchings ]
+  * Update debconf template translations:
+    - Update Dutch (Willem Kuyn) (Closes: #658736)
+    - Add Polish (Michał Kułach) (Closes: #658912)
+  * Bump ABI to 2
+  * fs: Introduce and enable security restrictions on links:
+    - Do not follow symlinks in /tmp that are owned by other users
+      (sysctl: fs.protected_symlinks)
+    - Do not allow unprivileged users to create hard links to sensitive files
+      (sysctl: fs.protected_hardlinks) (Closes: #609455)
+      + This breaks the 'at' package in stable, which will be fixed shortly
+        (see #597130)
+    The precise restrictions are specified in Documentation/sysctl/fs.txt in
+    the linux-doc-3.2 and linux-source-3.2 packages.
+  * iwlwifi: fix key removal (Closes: #651199)
+  * cgroups: Set CGROUP_PERF
+  * hid: Enable HID_HOLTEK, HID_PRIMAX, HID_SPEEDLINK, HID_WIIMOTE as modules,
+    HID_ACRUX_FF
+  * media/rc: Enable RC_ATI_REMOTE as module
+  * gspca: Enable USB_GSPCA_TOPRO as module
+  * dvb-usb: Enable DVB_USB_PCTV452E, DVB_USB_MXL111SF as modules
+
+  [ Uwe Kleine-König ]
+  * [x86] Update rt featureset to 3.2.9-rt15
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 04 Mar 2012 15:32:20 +0000
+
+linux-2.6 (3.2.7-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.7
+
+  [ Ben Hutchings ]
+  * Add Turkish debconf template translations (Mert Dirik) (Closes: #660117)
+  * [amd64] Disable BLK_DEV_IDEPNP, BLK_DEV_OPTI621, IDE_GENERIC
+  * Use libata-based drivers for most of the remaining PATA controllers:
+    - pata_legacy replaces ide-generic
+    - pata_isapnp replaces ide-pnp
+    - pata_opti replaces opti621
+    - pata_hpt366 and pata_hpt37x replace hpt366
+    - pata_ninja32 replaces delkin_cb
+    - pata_cs5535 replaces cs5535
+    - pata_winbond replaces sl82c105
+    - [alpha] pata_cypress replaces cy82c693
+    - [hppa] pata_ns87415 replaces ns87415
+    - [sparc] Various replacements, as for x86 in 2.6.32-10
+  * Disable old IDE subsystem [!ia64,m68k]:
+    - Disable BLK_DEV_IT8172, BLK_DEV_IT8213, BLK_DEV_TC86C001, BLK_DEV_TRM290
+    - [alpha] Disable BLK_DEV_4DRIVES, BLK_DEV_ALI14XX, BLK_DEV_DTC2278,
+      BLK_DEV_HT6560B, BLK_DEV_QD65XX, BLK_DEV_UMC8672
+  * fs: Enable EFI_PARTITION in all configurations (Closes: #660582)
+  * [i386] Re-enable INTEL_IOMMU, IRQ_REMAP
+  * [mips/r5k-ip32] Enable INPUT_SGI_BTNS (previously INPUT_SGIO2_BTNS)
+  * [powerpc/powerpc64] Enable IBM_EMAC (previously IBM_NEW_EMAC)
+  * [x86] drm/i915: do not enable RC6p on Sandy Bridge (Closes: #660265)
+  * ipsec: be careful of non existing mac headers (Closes: #660804)
+  * version: Use maintainer rather than uploader address for official
+    binary packages
+
+  [ Bastian Blank ]
+  * Don't advertise Xen support for rt images. (closes: #659988)
+  * [m68k,mips,mipsel] Use ext4 for all ext-variants. (closes: #660446)
+  * [m68k,mips,mipsel] Don't built-in ramdisk support.
+  * [hppa,mips,mipsel] Don't built-in cramfs support.
+  * [alpha,hppa] Don't built-in ext2.
+  * Remove IDE trigger for LED support.
+  * Remove all framebuffer bootup logos.
+  * NFSv4: Fix an Oops in the NFSv4 getacl code.
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 28 Feb 2012 16:00:41 +0100
+
+linux-2.6 (3.2.6-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.5
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.6
+    - ALSA: hda - Apply 0x0f-VREF fix to all ASUS laptops with ALC861/660
+      (Closes: #657302)
+    - [armhf] vfp: flush thread hwstate before restoring context from sigframe
+    - proc: mem_release() should check mm != NULL
+    - proc: make sure mem_open() doesnt pin the targets memory
+    - [arm] sched/rt: Fix task stack corruption under
+      __ARCH_WANT_INTERRUPTS_ON_CTXSW
+    - eCryptfs: Infinite loop due to overflow in ecryptfs_write()
+    - iscsi-target: Fix reject release handling in iscsit_free_cmd()
+    - iscsi-target: Fix double list_add with iscsit_alloc_buffs reject
+    - pcmcia: fix socket refcount decrementing on each resume
+
+  [ Aurelien Jarno ]
+  * hwmon: backport IT8728F support for linux 3.3. 
+
+  [ Uwe Kleine-König ]
+  * [amd64] Update rt featureset to 3.2.5-rt12
+  * [i386] enable rt featureset for 686-pae
+
+  [ Arnaud Patard ]
+  * Merge ixp4xx oops fix when probing mtd.
+
+  [ Ben Hutchings ]
+  * Change linux-image dependencies to allow kmod as an alternative to
+    module-init-tools
+  * relay: prevent integer overflow in relay_open()
+  * builddeb: Don't create files in /tmp with predictable names
+  * ath9k: fix a WEP crypto related regression (Closes: #659484)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 16 Feb 2012 02:38:38 +0000
+
+linux-2.6 (3.2.4-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.3
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.4
+    - eCryptfs: Sanitize write counts of /dev/ecryptfs
+    - eCryptfs: Make truncate path killable
+    - eCryptfs: Check inode changes in setattr
+    - drm/i915: paper over missed irq issues with force wake voodoo
+    - tpm_tis: add delay after aborting command (Closes: #649033)
+    - USB: ftdi_sio: fix initial baud rate (Closes: #658164)
+    - USB: Realtek cr: fix autopm scheduling while atomic (Closes: #656724)
+
+  [ Ben Hutchings ]
+  * [armel] Add mv78xx0 flavour; thanks to Steve McIntyre for the config
+  * net: Disable FIXED_PHY; this driver only causes trouble
+  * PCI: Rework ASPM disable code (fixes power usage regression on some
+    systems)
+
+  [ Bastian Blank ]
+  * Remove unneeded scmversion workaround.
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 05 Feb 2012 15:42:21 +0100
+
+linux-2.6 (3.2.2-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2
+    - ext4: fix undefined behavior in ext4_fill_flex_info() (CVE-2009-4307)
+    - Unused iocbs in a batch should not be accounted as active (CVE-2012-0058)
+    - uvcvideo: Fix integer overflow in uvc_ioctl_ctrl_map()
+    - [arm] proc: clear_refs: do not clear reserved pages
+
+  [ Ben Hutchings ]
+  * Clean up linux-image maintainer scripts:
+    - Stop changing 'build' and 'source' symlinks; these now belong to the
+      linux-headers packages
+    - Remove unused configuration variables
+    - prerm: Remove last vestige of /usr/doc transition
+    - postrm: Remove modules.*.bin; currently modules.builtin.bin is left
+      behind
+  * [alpha] Build with gcc-4.5 (Closes: #657112)
+  * aufs: Update to aufs3.2-20120109 (fixes FTBFS on m68k)
+  * [m68k] Fix assembler constraint to prevent overeager gcc optimisation
+  * sdhci-pci: Include driver in installer
+  * [armel] udeb: Do not attempt to build lzo-modules udeb as lzo_compress
+    is now built-in (fixes FTBFS)
+  * [armhf] udeb: Include rt2800usb in nic-modules, replacing rt2870sta
+    which was removed from the kernel
+  * drm: Fix authentication kernel crash
+  * xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink()
+  * jbd: Issue cache flush after checkpointing
+  * crypto: sha512 - make it work, undo percpu message schedule
+    - crypto: sha512 - reduce stack usage to safe number
+  * [x86] xen: size struct xen_spinlock to always fit in arch_spinlock_t
+  * l2tp: l2tp_ip - fix possible oops on packet receive
+  * macvlan: fix a possible use after free
+  * tcp: fix tcp_trim_head() to adjust segment count with skb MSS
+  * [x86] KVM: fix missing checks in syscall emulation (CVE-2012-0045)
+
+  [ Thorsten Glaser ]
+  * [m68k] Use gcc-4.6 like (almost) all other architectures
+  * Pass the cflags define as CFLAGS_KERNEL and CFLAGS_MODULE to kbuild
+  * [m68k] Use cflags -ffreestanding (Closes: #648996)
+
+  [ Aurelien Jarno ]
+  * [mips,octeon] Disabled CONFIG_FIXED_PHY as it conflicts with the octeon
+    phy driver.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 01 Feb 2012 01:44:05 +0000
+
+linux-tools (3.2.1-2) unstable; urgency=low
+
+  * Add Vcs-{Svn,Browser} fields
+  * Reduce minimum version of linux-base to 3.4~ to support backports
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 24 Jan 2012 04:26:24 +0000
+
+linux-2.6 (3.2.1-2) unstable; urgency=high
+
+  [ Stefan Lippers-Hollmann ]
+  * udeb: Add missing modules to nic-wireless-modules:
+    - lib80211 encryption algorithms (lib80211_crypt_{wep,ccmptkip})
+      needed for e.g. ipw2x00 wlan modules (Closes: #636259)
+    - ath9k_htc, carl9170 and rt2800{pci,usb} drivers
+      (Closes: #636321, #636353, #636385)
+
+  [ Ben Hutchings ]
+  * Update Vcs-Browser URL for the switch to ViewVC
+  * Point Vcs-{Svn,Browser} at trunk branch, since the sid branch does
+    not always exist
+  * Build linux-libc-dev without multiarch if dpkg does not support it,
+    to support backports
+  * proc: clean up and fix /proc/<pid>/mem handling (CVE-2012-0056)
+
+  [ Aurelien Jarno ]
+  * [x86] Backport KVM nested VMX fixes from 3.3 to fix warnings and
+    crashes of L1 guests.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 23 Jan 2012 15:10:04 +0000
+
+linux-tools (3.2.1-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 19 Jan 2012 04:17:19 +0000
+
+linux-2.6 (3.2.1-1) unstable; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.2
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1
+
+  [ Aurelien Jarno ]
+  * [arm, mips, mipsel, sh4] Add a virtio-modules udeb on flavours which
+    can be emulated by QEMU.
+
+  [ Ben Hutchings ]
+  * media/dvb: Enable DVB_USB_IT913X as module (Closes: #653776)
+  * [arm] Remove use of possibly undefined BUILD_BUG_ON in <asm/bug.h>
+    (fixes FTBFS)
+  * Install /lib/modules/<kernel-version>/modules.builtin in linux-image
+    packages
+  * [ia64] Add accept4() syscall (Closes: #647825)
+  * [x86] staging: Enable STAGING_MEDIA, which various drivers now depend on
+    (Closes: #654800)
+  * [um,m68k] Register a generic CPU device (fixes regression introduced by
+    the fix for #649216)
+  * [alpha] add io{read,write}{16,32}be functions, thanks to Michael Cree
+  * net: reintroduce missing rcu_assign_pointer() calls
+  * Input: ALPS - add support for protocol versions 3 and 4
+    (Closes: #618422, #648207)
+  * [powerpc/powerpc64] udeb: Drop zlib-modules; ZLIB_DEFLATE is built-in
+  * [amd64] iommu: Enable INTEL_IOMMU, INTEL_IOMMU_FLOPPY_WA, IRQ_REMAP
+  * [amd64] cpufreq: Enable X86_P4_CLOCKMOD (Closes: #656328)
+  * Refresh list of related firmware packages for bug script
+
+  [ Bastian Blank ]
+  * [amd64] crypt: Enable some amd64 only ciphers.
+  * Packaging updates:
+    - Use unicode.
+    - Cleanup config handling.
+    - Remove support for plain-xen image type.
+    - Allow disabling debug infos for unreleased builds.
+
+  [ Arnaud Patard ]
+  * [armel] disable tomoyo and apparmor to allow kernel image to fit into flash.
+  * [armel] add back ixp4xx gpiolib patch
+  * [arm] backport topdown mmap support from rmk's tree
+  * [armel] Enable support from LaCIE kirkwood devices, thanks to Simon Guinot
+    (Closes: #655344)
+  * [armel] Backport 88f6282 A1 support
+
+  [ Jurij Smakov ]
+  * [sparc] Add mpt2sas to scsi-common-modules udeb on sparc and sparc64,
+    needed by Niagara T3 machines.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 18 Jan 2012 16:14:12 +0000
+
+linux-2.6 (3.2~rc7-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+    - [powerpc] pasemi_mac: Fix building as module
+    - [x86] mpparse: Account for bus types other than ISA and PCI
+      (Closes: #586494)
+    - EHCI : Fix a regression in the ISO scheduler (Closes: #651382)
+    - [arm] setup: initialize arm_dma_zone_size earlier (Closes: #651215)
+
+  [ Ben Hutchings ]
+  * [x86] et131x: Include driver in installer (Closes: #651440)
+  * security: Enable APPARMOR (Closes: #598408)
+
+  [ Uwe Kleine-König ]
+  * [amd64] Update rt featureset to 3.2-rc5-rt8
+
+  [ Bastian Blank ]
+  * Use xz compression for all packages.
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 28 Dec 2011 14:55:38 +0100
+
+linux-tools (3.2~rc4-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 07 Dec 2011 01:53:15 +0000
+
+linux-2.6 (3.2~rc4-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Update to aufs3.x-rcN-20111114
+  * ieee802154: Enable IEEE802154_6LOWPAN as module
+  * can: Enable CAN_GW, CAN_EMS_PCMCIA, CAN_PEAK_PCI as modules
+  * nfc: enable NFC_NCI as module
+  * scsi: Enable MVUMI as module
+  * dm: Enable DM_THIN_PROVISIONING as module
+  * b43: Enable B43_PHY_HT
+  * [ia64,powerpc,sparc,x86] wireless: Enable MWIFIEX_PCIE as module
+  * udeb: Update configuration for 3.2:
+    - Provide the default configuration instead of including it from the
+      kernel-wedge package
+    - iwlagn is renamed to iwlwifi
+    - blowfish is renamed to blowfish_generic
+
+  [ Uwe Kleine-König ]
+  * [amd64] reenable rt featureset with 3.2-rc4-rt5
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 03 Dec 2011 23:07:41 +0000
+
+linux-2.6 (3.1.8-2) unstable; urgency=high
+
+  * igmp: Avoid zero delay when receiving odd mixture of IGMP queries
+    (Closes: #654876) (CVE-2012-0207)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 10 Jan 2012 00:14:39 +0000
+
+linux-2.6 (3.1.8-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.7
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8
+    - Revert "clockevents: Set noop handler in clockevents_exchange_device()",
+      included in stable update 3.1.5 (Closes: #653398)
+    - cfq-iosched: fix cfq_cic_link() race condition
+    - binary_sysctl(): fix memory leak
+    - cgroups: fix a css_set not found bug in cgroup_attach_proc
+    - iwlwifi: allow to switch to HT40 if not associated (Closes: #653423)
+    - futex: Fix uninterruptible loop due to gate_area
+    - drm/radeon/kms: bail on BTC parts if MC ucode is missing
+    - [sparc] sparc64: Fix masking and shifting in VIS fpcmp emulation.
+    - llc: llc_cmsg_rcv was getting called after sk_eat_skb.
+    - ipv4: reintroduce route cache garbage collector
+    - Revert "rtc: Disable the alarm in the hardware" (Closes: #652869)
+
+  [ Ben Hutchings ]
+  * snapshot: Implement compat_ioctl (Closes: #502816)
+  * drm/radeon: flush read cache for gtt with fence on r6xx and newer GPU
+    (Closes: #646376)
+  * rtc: Fix alarm rollover when day or month is out-of-range (Closes: #646429)
+  * l2tp: ensure sk->dst is still valid (Closes: #652503)
+  * Update Russian debconf template translations (Yuri Kozlov)
+    (Closes: #653716)
+  * v4l2-ioctl: integer overflow in video_usercopy()
+  * Restrict ioctl forwarding on partitions and logical volumes (CVE-2011-4127)
+  * [x86] KVM: Prevent starting PIT timers in the absence of irqchip support
+    (CVE-2011-4622)
+
+  [ Jonathan Nieder ]
+  * prerm: Print an error message when aborting removal of the running
+    kernel (Closes: #601962)
+  
+  [ Aurelien Jarno ]
+  * [sh4] Remove core-modules udeb as it is empty.
+  * [sh4/sh7751r] Disable CONFIG_RTS7751R2D_1. Support for this board 
+    implies IRQless IDE, which causes data corruption.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 08 Jan 2012 16:31:16 +0000
+
+linux-2.6 (3.1.6-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.6
+    - staging: r8712u: Add new USB ID (Closes: #651622)
+    - [arm] setup: initialize arm_dma_zone_size earlier (Closes: #651215)
+
+  [ Ben Hutchings ]
+  * [x86] Enable HYPERV, HYPERV_STORAGE, HYPERV_NET, HYPERV_UTILS,
+    HYPERV_MOUSE as modules (Closes: #652014)
+  * cciss: Add IRQF_SHARED back in for the non-MSI(X) interrupt handler
+    (Closes: #650119)
+  * udeb: Update configuration:
+    - Provide the default configuration instead of including it from the
+      kernel-wedge package
+    - [x86] Include et131x (Closes: #651440)
+    - [x86] Include isci (Closes: #652897)
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 23 Dec 2011 17:02:26 +0100
+
+linux-tools (3.1.1-3) unstable; urgency=low
+
+  * Fix s390x support.
+
+ -- Aurelien Jarno <aurel32@debian.org>  Sun, 18 Dec 2011 19:32:12 +0100
+
+linux-2.6 (3.1.5-1) unstable; urgency=low
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.5
+    - bridge: correct IPv6 checksum after pull (Closes: #651469)
+    - USB: EHCI: fix HUB TT scheduling issue with iso transfer
+      (Closes: #651015)
+    - [x86] mpparse: Account for bus types other than ISA and PCI
+      (Closes: #586494)
+
+  [ Bastian Blank ]
+  * Fix generation of revisions for the patch list.
+
+  [ Hector Oron ]
+  * regulator: backport fix for nullpointer dereference in core.
+
+  [ Ben Hutchings ]
+  * [x86] Enable MEMTEST (Closes: #613321, #646361)
+    - If bad RAM is detected, WARN and recommend a more thorough test
+  * brcmsmac: Fix I/O functions for MIPS and for big-endian architectures
+  * [x86] Enable GPIO_PCH, GPIO_ML_IOH, I2C_EG20T, PCH_CAN, PCH_DMA,
+    PCH_GBE, PCH_PHUB, SERIAL_PCH_UART, SPI_TOPCLIFF_PCH, USB_GADGET,
+    USB_EG20T as modules
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 11 Dec 2011 05:28:40 +0000
+
+linux-2.6 (3.1.4-1) unstable; urgency=low
+
+  * New upstream stable updates:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.2
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.3
+    - TTY: ldisc, wait for ldisc infinitely in hangup (Closes: #645071)
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.4
+
+  [ Martin Michlmayr ]
+  * [armel] Set the priority of pata-modules to standard since the
+    GLAN Tank uses PATA.
+
+  [ Ben Hutchings ]
+  * Enable BCMA as module, BCMA_HOST_PCI and B43_BCMA (Closes: #649567)
+    but limit these to devices not supported by brcmsmac
+  * brcmsmac: Enable as module for all architectures
+  * Include module taint flags in bug reports
+  * lirc_serial: Fix various bugs that may result in a crash, deadlock or
+    other failure (Closes: #645811)
+  * amilo-rfkill: Use proper functions to write to the i8042 safely
+  * topology: Provide CPU topology in sysfs in !SMP configurations
+    (Closes: #649216)
+
+  [ Bastian Blank ]
+  * Include generated headers. (closes: #650085)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 29 Nov 2011 14:14:14 +0100
+
+linux-tools (3.1.1-2) unstable; urgency=low
+
+  * Change the check for stale debian/control to tolerate binNMUs
+    (Closes: #649005)
+  * Rebuild with perl 5.14 (Closes: #649006)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 17 Nov 2011 03:18:03 +0000
+
+linux-tools (3.1.1-1) unstable; urgency=low
+
+  * New upstream release
+
+  [ Bastian Blank ]
+  * Rename to linux-tools.
+  * Use 3.0 (quilt) source format.
+  * Properly patch modpost symbol prefix setting.
+  * Build linux-tools binary package.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 14 Nov 2011 04:57:47 +0000
+
+linux-2.6 (3.1.1-1) unstable; urgency=high
+
+  * New upstream stable update:
+    http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.1
+
+  [ Aurelien Jarno ]
+  * [s390x] Add s390x udebs, based on linux-kernel-di-s390x-2.6.
+  * [sparc64] Sync udebs with sparc.
+
+  [ Ben Hutchings ]
+  * [powerpc] Fix module selection for {ata,ide,scsi-core}-modules udebs
+  * [alpha] wire up accept4 syscall, thanks to Michael Cree
+  * iwlagn: fix modinfo display for 135 ucode (Closes: #647958)
+  * [powerpc] ptrace: Fix build with gcc 4.6
+  * [arm] add io{read,write}{16,32}be functions (fixes FTBFS)
+  * cifs, freezer: add wait_event_freezekillable and have cifs use it
+    (Closes: #488794)
+  * [alpha] Remove old, broken udeb configuration (Closes: #647586)
+  * DFSG: Remove drivers/staging/ft1000/ft1000-*/*.img, non-free
+    firmware for drivers we don't build
+  * hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops (CVE-2011-2203)
+  * vmscan: fix shrinker callback bug in fs/super.c
+  * block: Always check length of all iov entries in blk_rq_map_user_iov()
+  * [x86] Add amilo-rfkill driver for some Fujitsu-Siemens Amilo laptops
+    (Closes: #631664)
+
+  [ Arnaud Patard ]
+  * [arm] add missing ioread/write be functions to ixp4xx to fix FTBFS
+  * [armhf] allow to build kernel image for iMX51 and iMX53 and enable some
+    iMX53 platforms.
+  * [armhf] add ahci for iMX53, pata for iMX51
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 13 Nov 2011 20:08:09 +0000
+
+linux-2.6 (3.1.0-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.1
+    - drm/i915: FBC off for ironlake and older, otherwise on by default
+      (Closes: #641622)
+    - drm/radeon: Update AVIVO cursor coordinate origin before x/yorigin
+      calculation (Closes: #585130)
+    - crypto: ghash - Avoid null pointer dereference if no key is set
+
+  [ Ben Hutchings ]
+  * [powerpc/powerpc64] Add missing #include to LPAR console selection fix
+  * Make kernel-wedge package checks non-fatal in experimental builds
+  * [x86/!486] Enable INTEL_IDLE
+  * aufs: Update to aufs3.1-20111031 (Closes: #644687)
+
+  [ Bastian Blank ]
+  * Use xz compression for debug packages.
+  * Make gcc-4.6 the default compiler.
+  * Use shorter versions in the package names.
+  * Remove linux-tools-* binary package.
+  * Drop external module packages stuff.
+  * Set default security module to Unix Discretionary Access Controls.
+    - Remove unneeded selinux boot parameter.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 03 Nov 2011 20:03:14 +0100
+
+linux-2.6 (3.1.0~rc7-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * Build udebs for the installer
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 25 Sep 2011 22:52:50 +0100
+
+linux-2.6 (3.1.0~rc6-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [ia64] Disable GENERIC_GPIO (fixes FTBFS)
+  * [i386] libertas: prioritize usb8388_olpc.bin firmware on OLPC machines
+  * [armel/ixp4xx] Add gpioblib support (fixes FTBFS)
+  * [i386] Fix alignment of alternative instruction entries (Closes: #640964)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 21 Sep 2011 05:45:40 +0100
+
+linux-2.6 (3.1.0~rc4-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * aufs: Disable until it is updated for Linux 3.1
+  * rt: Disable until it is updated for Linux 3.1
+  * nfs: Enable NFSv4.1/pNFS (Closes: #627655)
+  * [x86] ACPI: Enable ACPI_APEI_GHES as built-in (no longer modular).
+    Enable ACPI_APEI_MEMORY_FAILURE.
+  * netfilter: Enable IP_SET_HASH_NETIFACE as module
+  * net: Enable NFC, NFC_PN533 as modules
+  * video: Enable FB_UDL as module (Closes: #618261)
+  * target: Enable ISCSI_TARGET as module
+  * skge: Enable SKGE_GENESIS
+  * net/wireless: Enable RTL8192DE as module
+  * hwmon: Enable SENSORS_EMC2103, SENSORS_LM95245, SENSORS_MAX1668,
+    SENSORS_NTC_THERMISTOR, SENSORS_SMM665 as modules
+  * [i386] Enable GPIO_CS5535, MFD_CS5535, CS5535_MFGPT,
+    CS5535_CLOCK_EVENT_SRC, GPIO_VX855, MFD_VX855 as modules;
+    [i386/486] Enable OLPC_XO1_PM, OLPC_XO1_RTC, OLPC_XO1_SCI, OLPC_XO15_SCI
+    (Closes: #639113)
+  * media/dvb: Enable DVB_NET
+  * media/rc: Enable IR_MCE_KBD_DECODER as module
+  * gspca: Enable USB_GSPCA_SE401 as module
+  * de4x5: Disable on all architectures except alpha (Closes: #639538)
+  * wl128x: Disable on all flavours except armhf/omap
+  * Make bug script accept failure of lspci (Closes: #639439)
+  * [alpha] Disable GENERIC_GPIO (Closes: #638696)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 29 Aug 2011 14:48:28 +0100
+
+linux-2.6 (3.0.0-6) unstable; urgency=high
+
+  [ Uwe Kleine-König ]
+  * [amd64] Update rt featureset to 3.0.7-rt20
+
+  [ Bastian Blank ]
+  * Add stable 3.0.7, including:
+    - drm/radeon: Update AVIVO cursor coordinate origin before x/yorigin
+      calculation (Closes: #585130)
+    - ipv6: fix NULL dereference in udp6_ufo_fragment() (Closes: #643817)
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.7
+
+  [ Ben Hutchings ]
+  * [powerpc] Change ATA, PATA_MACIO from module to built-in (Closes: #641210)
+  * [powerpc] Change IDE, IDE_GD from built-in to module
+  * Add stable 3.0.8, including:
+    - cputimer: Cure lock inversion
+    - drm/ttm: ensure ttm for new node is bound before calling move_notify()
+    - drm/ttm: unbind ttm before destroying node in accel move cleanup
+    - CIFS: Fix ERR_PTR dereference in cifs_get_root
+    - xfs: start periodic workers later
+    - mm: fix race between mremap and removing migration entry
+    - x25: Prevent skb overreads when checking call user data
+    - crypto: ghash - Avoid null pointer dereference if no key is set
+      (CVE-2011-4081)
+    - hfsplus: Fix kfree of wrong pointers in hfsplus_fill_super() error path
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.8
+  * [{mips,mipsel}/{4,5}kc-malta] Disable X.25, as in all other configurations
+  * ark3116: Fix initialisation order (Closes: #640391)
+  * Add empty files to trigger generation of kernel-image udebs
+  * aufs: Update to aufs3.0-20111031 (Closes: #644687)
+  * xfs: Fix possible memory corruption in xfs_readlink (CVE-2011-4077)
+  * oom: fix integer overflow of points in oom_badness (CVE-2011-4097)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 01 Nov 2011 14:50:06 +0000
+
+linux-2.6 (3.0.0-5) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * Bump ABI to 2
+  * kobj_uevent: Ignore if some listeners cannot handle message
+    (Closes: #641661)
+  * Build udebs for the installer
+  * Add stable 3.0.5 and 3.0.6, including:
+    - TTY: pty, fix pty counting
+    - pata_via: disable ATAPI DMA on AVERATEC 3200
+    - atm: br2684: Fix oops due to skb->dev being NULL
+    - alarmtimers: Avoid possible null pointer traversal
+    - alarmtimers: Memset itimerspec passed into alarm_timer_get
+    - alarmtimers: Avoid possible denial of service with high freq periodic
+      timers
+    - rtc: Fix RTC PIE frequency limit
+    - x86, perf: Check that current->mm is alive before getting user callchain
+    - xen/smp: Warn user why they keel over - nosmp or noapic and what to use
+      instead. (Closes: #637308)
+    - drm/nouveau: properly handle allocation failure in nouveau_sgdma_populate
+    - net/9p: fix client code to fail more gracefully on protocol error
+    - virtio: Fix the size of receive buffer packing onto VirtIO ring.
+    - virtio: VirtIO can transfer VIRTQUEUE_NUM of pages.
+    - fs/9p: Fid is not valid after a failed clunk.
+    - fs/9p: When doing inode lookup compare qid details and inode mode bits.
+    - fs/9p: Always ask new inode in create
+    - net/9p: Fix the msize calculation.
+    - 9p: close ACL leaks
+    - fs/9p: Add fid before dentry instantiation
+    - net/9p: Fix kernel crash with msize 512K
+    - fs/9p: Always ask new inode in lookup for cache mode disabled
+    - vfs: restore pinning the victim dentry in vfs_rmdir()/vfs_rename_dir()
+    - cifs: fix possible memory corruption in CIFSFindNext (CVE-2011-3191)
+    - writeback: introduce .tagged_writepages for the WB_SYNC_NONE sync stage
+    - writeback: update dirtied_when for synced inode to prevent livelock
+    - fib:fix BUG_ON in fib_nl_newrule when add new fib rule
+    - scm: Capture the full credentials of the scm sender
+    - vlan: reset headers on accel emulation path
+    - xfrm: Perform a replay check after return from async codepaths
+    - bridge: Pseudo-header required for the checksum of ICMPv6
+    - bridge: fix a possible use after free
+    - TPM: Call tpm_transmit with correct size (CVE-2011-1161)
+    - TPM: Zero buffer after copying to userspace (CVE-2011-1162)
+    - ALSA: fm801: Gracefully handle failure of tuner auto-detect
+      (Closes: #641946)
+    - btrfs: fix d_off in the first dirent
+    - ARM: 7091/1: errata: D-cache line maintenance operation by MVA may not
+      succeed
+    - ARM: 7099/1: futex: preserve oldval in SMP __futex_atomic_op
+    - ALSA: usb-audio: Check for possible chip NULL pointer before clearing
+      probing flag
+    - cfg80211: Fix validation of AKM suites
+    - iwlagn: fix dangling scan request
+    - block: Free queue resources at blk_release_queue() (Closes: #631187)
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.5
+     http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.6
+  * Make taskstats require root access (CVE-2011-2494)
+
+  [ Uwe Kleine-König ]
+  * [amd64] Update rt featureset to 3.0.6-rt16 (Closes: #643301)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 05 Oct 2011 15:14:34 +0100
+
+linux-2.6 (3.0.0-4) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * Make bug script accept failure of lspci (Closes: #639439)
+  * [alpha] Disable GENERIC_GPIO (Closes: #638696)
+  * Add stable 3.0.4, including:
+    - loop: fix deadlock when sysfs and LOOP_CLR_FD race against each other
+    - Btrfs: fix an oops of log replay
+    - ext4: Fix ext4_should_writeback_data() for no-journal mode
+    - ext4: call ext4_ioend_wait and ext4_flush_completed_IO in ext4_evict_inode
+    - ext4: Resolve the hang of direct i/o read in handling
+      EXT4_IO_END_UNWRITTEN.
+    - ext4: fix nomblk_io_submit option so it correctly converts uninit blocks
+    - xen-blkfront: Drop name and minor adjustments for emulated scsi devices
+    - xen/x86: replace order-based range checking of M2P table by linear one
+    - rt2x00: fix order of entry flags modification
+    - Add a personality to report 2.6.x version numbers
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.4
+  * sendmmsg/sendmsg: fix unsafe user pointer access
+  * rt2x00: fix crash in rt2800usb_write_tx_desc
+  * rt2x00: fix crash in rt2800usb_get_txwi (Closes: #636531)
+  * [sparc] Only Panther cheetah+ chips have POPC (Closes: #639949)
+  * uvcvideo: Fix crash when linking entities (Closes: #637740)
+  * Update Spanish debconf template translations (Omar Campagne)
+    (Closes: #636242)
+
+  [ Moritz Muehlenhoff ]
+  * Update German Debconf translation. Thanks to Holger Wansing
+    (Closes: #641487)
+
+  [ Uwe Kleine-König ]
+  * [amd64] Update rt featureset to 3.0.4-rt14
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 19 Sep 2011 14:40:42 +0100
+
+linux-2.6 (3.0.0-3) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * Disable SENSORS_SHT15, unlikely to be usable on any supported platform
+    (Closes: #638696)
+  * Add stable 3.0.3, including:
+    - atm: br2864: sent packets truncated in VC routed mode (Closes: #638656)
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.3
+  * netfilter: TCP and raw fix for ip_route_me_harder (fixes case where
+    SNAT/masquerading is not done)
+  * Remove net device features from bug reports (Closes: #638956)
+  * [mips,mipsel] Ignore nfs ABI changes made in 3.0.0-2; fixes FTBFS
+  * genirq: Fix wrong bit operation
+  * befs: Validate length of long symbolic links (CVE-2011-2928)
+  * CIFS: Fix memory corruption on mount (Closes: #635344)
+  * x86-32, vdso: On system call restart after SYSENTER, use int $0x80
+  * drm/ttm: fix ttm_bo_add_ttm(user) failure path
+  * fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 27 Aug 2011 08:04:02 +0100
+
+linux-2.6 (3.0.0-2) unstable; urgency=high
+
+  [ Aurelien Jarno ]
+  * Add configuration files for s390x architecture.
+
+  [ Ben Hutchings ]
+  * linux-libc-dev: Install include/asm under arch-specific directory
+    (thanks to Aurelien for correcting the directory); mark package as
+    multi-arch-coinstallable (Multi-Arch: same)
+  * [powerpc] Use libata-based drivers for most PATA controllers
+    (Closes: #636854):
+    - Various drivers replaced as for x86 in 2.6.32-10
+    - pata_macio replaces ide_pmac
+  * Add stable 3.0.2, including:
+    - net: Cap number of elements for sendmmsg
+    - net: Fix security_socket_sendmsg() bypass problem
+    - [x86] xen: allow enable use of VGA console on dom0
+    - net: Compute protocol sequence numbers and fragment IDs using MD5
+    - cifs: cope with negative dentries in cifs_get_root
+    - ALSA: snd-usb: avoid dividing by zero on invalid input
+    - ipv6: make fragment identifications less predictable (CVE-2011-2699)
+    - sch_sfq: fix sfq_enqueue() (Closes: #631945)
+    - gre: fix improper error handling
+    - ecryptfs: Add mount option to check uid of device being mounted
+      = expect uid
+    - ecryptfs: Return error when lower file pointer is NULL
+    - ext{3,4}: Properly count journal credits for long symlinks
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.2
+  * [x86] Enable RTS_PSTOR as module
+
+  [ maximilian attems ]
+  * Add stable 3.0.1, including:
+    - gro: Only reset frag0 when skb can be pulled (CVE-2011-2723)
+    - staging: comedi: fix infoleak to userspace (CVE-2011-2909)
+    - rtc: limit frequency
+    - CIFS: Fix oops while mounting with prefixpath
+    - [SCSI] fix crash in scsi_dispatch_cmd()
+    - tracing: Fix bug when reading system filters on module removal
+    - tracing: Have "enable" file use refcounts like the "filter" file
+    - ext4: fix i_blocks/quota accounting when extent insertion fails
+    - ext4: free allocated and pre-allocated blocks when check_eofblocks_fl
+      fails
+    - ext3: Fix oops in ext3_try_to_allocate_with_rsv()
+    - nfsd4: remember to put RW access on stateid destruction
+    - nfsd4: fix file leak on open_downgrade
+    - NFS: Fix spurious readdir cookie loop messages
+    - proc: fix a race in do_io_accounting()
+    - ipc/sem.c: fix race with concurrent semtimedop() timeouts and IPC_RMID
+    - [armel,armhf,hppa] dm io: flush cpu cache with vmapped io
+    - dm snapshot: flush disk cache when merging
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v3.0/ChangeLog-3.0.1
+
+  [ Jonathan Nieder ]
+  * perf: do not look at ./config for configuration (Closes: #632923)
+    (CVE-2011-2905)
+
+  [ Uwe Kleine-König ]
+  * [amd64] Update rt featureset to 3.0.1-rt11
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 16 Aug 2011 06:08:53 +0100
+
+linux-kbuild-2.6 (3.0.0-2) unstable; urgency=low
+
+  * Include new script depmod.sh (Closes: #635539)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 29 Jul 2011 01:00:20 +0200
+
+linux-kbuild-2.6 (3.0.0-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 24 Jul 2011 15:38:35 +0200
+
+linux-2.6 (3.0.0-1) unstable; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_3.0
+
+  [ maximilian attems ]
+  * Topconfig enable modular VIDEO_SR030PC30, VIDEO_NOON010PC30,
+    SOC_CAMERA_IMX074, SOC_CAMERA_OV2640, SOC_CAMERA_OV6650,
+    SOC_CAMERA_OV9740, USB_YUREX.
+  * [x86] enable modular VIDEO_VIA_CAMERA.
+  * [x86_32] enable modular XO15_EBOOK.
+  * ALSA: hda - Enable auto-parser as default for Conexant codecs.
+
+  [ Ben Hutchings ]
+  * linux-support, linux-tools: Use dh_python2 instead of dh_pysupport
+  * aufs: Update for 3.0
+  * [amd64] Enable PCMCIA_AHA152X as module (Closes: #632929)
+  * Update debconf template translations:
+    - Slovak (Slavko)
+  * [x86] comedi: Enable the same drivers as in stable (squeeze), except
+    for ISA drivers on amd64 (Closes: #633516)
+  * Reduce required initramfs-tools version to 0.99~, to ease backporting
+  * [armhf/mx5] Explicitly configure this flavour to support i.MX51; it
+    is not currently possible to support other i.MX5x processors as well
+
+  [ Arnaud Patard ]
+  * Merge ixp4xx build fix and enable ixp4xx back
+ 
+  [ Aurelien Jarno ]
+  * [mips/octeon] Disable MEGARAID_SAS, SUSPEND, HIBERNATION, PM_RUNTIME.
+    Enable FUSION, FUSION_SAS, HW_RANDOM, HW_RANDOM_OCTEON, 
+    OCTEON_MGMT_ETHERNET, CONFIG_OCTEON_ETHERNET.
+
+  [ Bastian Blank ]
+  * [xen] Allow autoloading of backend drivers.
+
+  [ Uwe Kleine-König ]
+  * [amd64] Add rt featureset with 3.0-rt2 patch set
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 24 Jul 2011 02:42:27 +0200
+
+linux-2.6 (3.0.0~rc6-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ maximilian attems ]
+  * Topconfig enable modular USB_NET_KALMIA, I2C_DIOLAN_U2C, SMBUS,
+    SENSORS_SMBUS, SENSORS_SHT21, SENSORS_EMC6W201, SENSORS_SCH5627,
+    SENSORS_ADS1015, SENSORS_W83795, SENSORS_DS620, SENSORS_LINEAGE,
+    SENSORS_LTC4151, SENSORS_LTC4261, SENSORS_MAX16065, SENSORS_MAX6639,
+    SENSORS_MAX6642, BT_WILINK.
+  * [x86_32] enable modular I2C_PXA.
+  * [x86] enable modular SENSORS_FAM15H_POWER.
+  * drm/i915: Hold struct_mutex during i915_save_state/i915_restore_state.
+  * [thinkpad]: Add KEY_MICMUTE and enable it on Lenovo X220.
+  * [m68k]: resources: Add lookup_resource().
+  * m68k/atari: Reserve some ST-RAM early on for device buffer use.
+  * ALSA: hda - Handle -1 as invalid position, too
+  * ALSA: hda - Judge playback stream from stream id in azx_via_get_position()
+
+  [ Ben Hutchings ]
+  * [x86] Enable SCSI_ISCI as module
+
+ -- maximilian attems <maks@debian.org>  Tue, 05 Jul 2011 11:05:43 +0200
+
+linux-kbuild-2.6 (3.0.0~rc5-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 29 Jun 2011 02:32:31 +0100
+
+linux-2.6 (3.0.0~rc5-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+    -  fix wrong iput on d_inod. (closes: #631255, #631802)
+
+  [ maximilian attems ]
+  * [x86] enable some comedi modules. (closes: #631199)
+  * [kirkwood] Enable sound support for the HP t5325 (closes: #631762)
+
+  [ Arnaud Patard ]
+  * [armel] disable ixp4xx, until upstream agrees on how to fix
+  the build error
+  * [armel] Remove configuration options which don't exist anymore
+  * [armhf] disable net dma/async tx on mx5 as it can't work
+
+ -- maximilian attems <maks@debian.org>  Tue, 28 Jun 2011 11:55:21 +0200
+
+linux-2.6 (3.0.0~rc4-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+    - drm/i915: Fixes. (closes: #627976)
+
+  [ maximilian attems ]
+  * [x86] enable modular INTEL_OAKTRAIL, ACPI_APEI_PCIEAER.
+  * Topconfig enable modular RADIO_WL1273, RADIO_WL128X.
+
+  [ Ben Hutchings ]
+  * rt2800pci: Add device ID for RT539F device (Closes: #630960)
+  * atm: Enable for all architectures except m68k, s390 (Closes: #630900)
+
+ -- maximilian attems <maks@debian.org>  Tue, 21 Jun 2011 15:00:23 +0200
+
+linux-2.6 (3.0.0~rc3-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [i386] idle: EXPORT_SYMBOL(default_idle, pm_idle) if
+    CONFIG_APM_MODULE (only); fixes FTBFS
+
+  [ maximilian attems ]
+  * Update configs.
+  * Topconfig enable BPF_JIT. (closes: #630553)
+  * Update debconf pt (Américo Monteiro) translations. (closes: #627631)
+  * Add kbuild fixes out of linux-next.
+
+ -- maximilian attems <maks@debian.org>  Thu, 16 Jun 2011 15:04:33 +0200
+
+linux-2.6 (3.0.0~rc2-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ maximilian attems ]
+  * Newer Standards-Version 3.9.2 without changes.
+  
+  [ Hector Oron ]
+  * [armel/iop32x] Fix FTBFS (Closes: #629342)
+
+  [ Aurelien Jarno ]
+  * [mips,mipsel] Update arch/mips/kernel/i8259.c to fix FTBFS.
+  * [mips,mipsel] Remove explicit disable of CONFIG_DRM_NOUVEAU and 
+    CONFIG_DRM_RADEON_KMS.
+
+  [ Ben Hutchings ]
+  * perf: Cancel -Werror compiler option; fixes FTBFS with perl 5.14
+  * qla4xxx: Remove our fix for #598503; it has now been fixed upstream
+    in a different way and the two changes resulted in FTBFS
+  * [ia64] nouveau: Disable ACPI support. It probably wasn't very useful
+    on ia64, and now depends on mxm-wmi which is definitely x86-only.
+  * Make gcc-4.5 the default compiler (except for alpha, hppa and m68k)
+  * Restore xen-linux-system-<version>-<flavour> packages
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 09 Jun 2011 01:10:53 +0100
+
+linux-kbuild-2.6 (3.0.0~rc1-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+  * Remove docproc, no longer required for module builds
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 01 Jun 2011 10:21:01 +0100
+
+linux-2.6 (3.0.0~rc1-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [x86] Enable BACKLIGHT_APPLE, replacing BACKLIGHT_MBP_NVIDIA
+    (Closes: #627492)
+  * cgroups: Disable memory resource controller by default. Allow it
+    to be enabled using kernel parameter 'cgroup_enable=memory'.
+  * rt2800usb: Enable support for more USB devices including
+    Linksys WUSB600N (Closes: #596626) (this change was accidentally
+    omitted from 2.6.39-1)
+  * fs: Enable FHANDLE
+  * cgroups: Enable CGROUP_MEM_RES_CTLR_SWAP but not
+    CGROUP_MEM_RES_CTLR_SWAP_ENABLED. Swap accounting can be enabled
+    using kernel parameter 'swapaccount'.
+  * ipv4: Enable IP_FIB_TRIE_STATS
+  * netfilter: Enable IP_SET, IP_SET_BITMAP_IP, IP_SET_BITMAP_IPMAC,
+    IP_SET_BITMAP_PORT, IP_SET_HASH_IP, IP_SET_HASH_IPPORT,
+    IP_SET_HASH_IPPORTIP, IP_SET_HASH_IPPORTNET, IP_SET_HASH_NET,
+    IP_SET_HASH_NETPORT, IP_SET_LIST_SET, NETFILTER_XT_SET as modules
+  * net/sched: Enable NET_SCH_QFQ as module
+  * can: Enable CAN_SOFTING, CAN_SOFTING_CS as modules
+  * mtd: Enable MTD_SWAP as module
+  * of, proc: Enable PROC_DEVICETREE
+  * dm: Enable DM_RAID, DM_FLAKEY as modules. Note these are currently
+    experimental.
+  * target: Enable TCM_FC as module
+  * net/wireless/ath: Enable CARL9170 as module (carl9170, replacing
+    ar9170usb)
+  * rtlwifi: Enable RTL8192SE as module (Closes: #590280)
+  * net/wireless: Enable MWIFIEX, MWIFIEX_SDIO as modules
+  * net/usb: Enable USB_VL600 as module
+  * tablet: Enable drivers for all possible architectures and flavours
+  * tablet: Enable TABLET_USB_HANWANG as module
+  * pps: Enable PPS_CLIENT_PARPORT as module
+  * ptp: Enable PTP_1588_CLOCK, PTP_1588_CLOCK_GIANFAR,
+    PTP_1588_CLOCK_IXP46X as modules
+  * [x86] watchdog: Enable SP5100_TCO, NV_TCO as modules
+  * media/rc: Enable IR_REDRAT3, RC_LOOPBACK as module
+  * [x86] media/rc: Enable IR_ITE_CIR, IR_FINTEK as modules
+  * gspca: Enable USB_GSPCA_KINECT as module
+  * [i386] radio: Enable RADIO_MIROPCM20 as module
+  * s3fb: Enable FB_S3_DDC
+  * viafb: Enable FB_VIA_X_COMPATIBILITY
+  * es1968: Enable SND_ES1968_RADIO
+  * sound: Enable SND_ISIGHT, SND_LOLA as modules
+  * hid: Enable HID_ACRUX, HID_EMS_FF, HID_KEYTOUCH, HID_LCPOWER,
+    HID_MULTITOUCH, HID_ROCCAT_ARVO, HID_ROCCAT_KONEPLUS,
+    HID_ROCCAT_KOVAPLUS as modules
+  * usb-storage: Enable USB_STORAGE_REALTEK, USB_STORAGE_ENE_UB6250 as
+    modules
+  * mmc: Enable MMC_VUB300, MMC_USHC as modules
+  * memstick: Enable MEMSTICK_R592 as module
+  * [x86] edac: Enable EDAC_I7300 as module
+  * [i386] staging, video: Enable FB_OLPC_DCON as module
+  * [x86] staging, drm: Enable DRM_PSB as module
+  * crypto, net: Enable CRYPTO_USER_API_HASH, CRYPTO_USER_API_SKCIPHER as
+    modules
+  * [x86] block, xen: Enable XEN_BLKDEV_BACKEND as module
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 01 Jun 2011 06:41:14 +0100
+
+linux-2.6 (2.6.39-3) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * [x86] i915: Revert "drm/i915: Enable GMBUS for post-gen2 chipsets"
+    (Closes: #627575)
+  * linux-source-<version>: Suggest libqt4-dev (for 'make xconfig')
+    instead of libqt3-mt-dev (Closes: #631666)
+  * [armhf] Add omap flavour, thanks to Sebastian Reichel
+  * [armhf] rtc-twl: Switch to using threaded irq
+  * bridge/netfilter: provide a cow_metrics method for fake_ops
+    (Closes: #629932)
+  * Update debconf template translations:
+    - Danish (Joe Dalton) (Closes: #632551)
+    - Slovak (Slavko) (Closes: #608684)
+  * partitions/efi: Fix crash (oops) caused by corrupted GUID partition
+    table (CVE-2011-1577)
+  * ksm: fix NULL pointer dereference in scan_get_next_rmap_item()
+    (CVE-2011-2183)
+  * inet_diag: Fix infinite loop in inet_diag_bc_audit() (CVE-2011-2213)
+  * taskstats: don't allow duplicate entries in listener mode (CVE-2011-2484)
+  * bluetooth: Prevent buffer overflow in l2cap config request
+    (CVE-2011-2497)
+
+  [ maximilian attems ]
+  * Add stable 2.6.39.2, including:
+    - block: Fix crash (oops) in blkdev_get() on failed exclusive open
+      (Closes: #631574)
+    - nl80211: fix check for valid SSID size in scan operations (CVE-2011-2517)
+    - drm/radeon/kms: viewport height has to be even
+    - drm/radeon/kms: fix for radeon on systems >4GB without hardware iommu
+    - fat: Fix corrupt inode flags when remove ATTR_SYS flag
+    - scsi:  Fix oops caused by queue refcounting failure
+    - cifs: don't allow cifs_reconnect to exit with NULL socket pointer
+    - drm/radeon/kms: do bounds checking for 3D_LOAD_VBPNTR and bump array
+      limit
+    - TOMOYO: Fix oops in tomoyo_mount_acl() (CVE-2011-2518)
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.2
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 04 Jul 2011 07:08:10 +0100
+
+linux-2.6 (2.6.39-2) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * [x86] Enable BACKLIGHT_APPLE, replacing BACKLIGHT_MBP_NVIDIA
+    (Closes: #627492)
+  * cgroups: Disable memory resource controller by default. Allow it
+    to be enabled using kernel parameter 'cgroup_enable=memory'.
+  * rt2800usb: Enable support for more USB devices including
+    Linksys WUSB600N (Closes: #596626) (this change was accidentally
+    omitted from 2.6.39-1)
+  * [x86] Remove Celeron from list of processors supporting PAE. Most
+    'Celeron M' models do not.
+  * Update debconf template translations:
+    - Swedish (Martin Bagge) (Closes: #628932)
+    - French (David Prévot) (Closes: #628191)
+  * aufs: Update for 2.6.39 (Closes: #627837)
+  * Add stable 2.6.39.1, including:
+    - ext4: dont set PageUptodate in ext4_end_bio()
+    - pata_cmd64x: fix boot crash on parisc (Closes: #622997, #622745)
+    - ext3: Fix fs corruption when make_indexed_dir() fails
+    - netfilter: nf_ct_sip: validate Content-Length in TCP SIP messages
+    - sctp: fix race between sctp_bind_addr_free() and
+      sctp_bind_addr_conflict()
+    - sctp: fix memory leak of the ASCONF queue when free asoc
+    - md/bitmap: fix saving of events_cleared and other state
+    - cdc_acm: Fix oops when Droids MuIn LCD is connected
+    - cx88: Fix conversion from BKL to fine-grained locks (Closes: #619827)
+    - keys: Set cred->user_ns in key_replace_session_keyring (CVE-2011-2184)
+    - tmpfs: fix race between truncate and writepage
+    - nfs41: Correct offset for LAYOUTCOMMIT
+    - xen/mmu: fix a race window causing leave_mm BUG()
+    - ext4: fix possible use-after-free in ext4_remove_li_request()
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.1
+  * Bump ABI to 2
+  * netfilter: Enable IP_SET, IP_SET_BITMAP_IP, IP_SET_BITMAP_IPMAC,
+    IP_SET_BITMAP_PORT, IP_SET_HASH_IP, IP_SET_HASH_IPPORT,
+    IP_SET_HASH_IPPORTIP, IP_SET_HASH_IPPORTNET, IP_SET_HASH_NET,
+    IP_SET_HASH_NETPORT, IP_SET_LIST_SET, NETFILTER_XT_SET as modules
+    (Closes: #629401)
+
+  [ Aurelien Jarno ]
+  * [mipsel/loongson-2f] Disable_SCSI_LPFC to workaround GCC ICE.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 07 Jun 2011 12:14:05 +0100
+
+linux-kbuild-2.6 (2.6.39-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 20 May 2011 04:53:57 +0100
+
+linux-2.6 (2.6.39-1) unstable; urgency=low
+
+  [ maximilian attems ]
+  * [x86] Enable CRYPTO_AES_NI_INTEL for all flavours. (closes: #623631)
+  * topconfig: Enable SND_USB_6FIRE, SND_FIREWIRE_SPEAKERS,
+    MEDIA_CONTROLLER, DVB_USB_TECHNISAT_USB2, USB_GSPCA_NW80X,
+    USB_GSPCA_VICAM, XEN_WDT, LOOPBACK_TARGET.
+  * [x86] Enable modular XEN_NETDEV_BACKEND.
+  * topconfig enable mem cgroup RESOURCE_COUNTERS, CGROUP_MEM_RES_CTLR.
+    (closes: #534964)
+  * Cleanup configs.
+
+  [ Ben Hutchings ]
+  * [!x86] Disable TPM drivers. TPMs are currently only fitted in PCs.
+  * rt2800usb: Enable support for more USB devices including
+    Linksys WUSB600N (Closes: #596626)
+  * mm: Select SLAB allocator again. Although SLUB is currently the
+    upstream default, this was set as an experiment rather than a
+    recommendation! SLUB generally has poorer performance than SLAB on
+    larger systems.
+  * postinst: Remove specific support for running a ramdisk creator;
+    warn users that specify one in /etc/kernel-img.conf
+  * Require initramfs-tools >= 0.99, which installs a postinst hook
+
+  [ Arnaud Patard ]
+  * [armel] Disable eeti touchscreen driver due to missing irq_to_gpio on
+    several platforms.
+
+ -- maximilian attems <maks@debian.org>  Thu, 19 May 2011 15:34:37 +0200
+
+linux-2.6 (2.6.39~rc7-1~experimental.1) experimental; urgency=low
+
+  * [x86] Enable modular ASUS_WMI and ASUS_NB_WMI. (closes: #626141)
+  * [x86] Enable modular DELL_WMI_AIO, HP_ACCEL, INTEL_IPS, ACPI_IPMI.
+  * [x86/486] Enable modular XO1_RFKILL, XO15_EBOOK.
+  * topconfig: Enable modular NF_CONNTRACK_TIMESTAMP, NF_CONNTRACK_SNMP,
+    NETFILTER_XT_TARGET_AUDIT, NETFILTER_XT_MATCH_ADDRTYPE,
+    NETFILTER_XT_MATCH_DEVGROUP, NET_SCH_SFB, NET_SCH_MQPRIO, NET_SCH_CHOKE,
+    SATA_ACARD_AHCI, PATA_ARASAN_CF, SCSI_BNX2X_FCOE.
+  * Add nl debconf template translation. (closes: #622967)
+    Thanks willem kuyn <willemkuyn@gmail.com>.
+  * topconfig Enable modular RTL8192CU. (closes: #625613)
+
+ -- maximilian attems <maks@debian.org>  Tue, 10 May 2011 15:11:00 +0200
+
+linux-2.6 (2.6.39~rc6-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate  
+
+  [ maximilian attems ]
+  * Enable SQUASHFS_{LZO,XZ}. (closes: #613658)
+  * [x86] Enable EASYCAP. (closes: #624505)
+
+  [ Ben Hutchings
+  * xhci-hcd: Include <linux/slab.h> in xhci-pci.c (fixes FTBFS on armel)
+  * [x86] Enable BRCMSMAC; the brcmsmac module replaces brcm80211
+    (Closes: #625510)
+
+  [ Aurelien Jarno ]
+  * drm/nouveau, drm/radeon: remove fix for non-powerpc/sparc/x86.
+  * [mips,mipsel] Disabled CONFIG_DRM_NOUVEAU and CONFIG_DRM_RADEON_KMS.
+  * [mips/octeon] Disabled CONFIG_HOTPLUG_CPU and CONFIG_PM.
+
+ -- maximilian attems <maks@debian.org>  Sun, 08 May 2011 12:23:15 +0200
+
+linux-2.6 (2.6.39~rc5-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate  
+
+  [ Ben Hutchings ]
+  * [powerpc] kexec: Fix build failure on 32-bit SMP
+  * net/wireless: Adjust config for iwlegacy/iwlwifi split (Closes: #624124)
+    - Enable IWLWIFI_LEGACY as module
+    - Enable IWL4965 as module; it is no longer part of the iwlagn module
+  * [armhf] Actually install zImage into the linux-image package, thanks to
+    Sebastian Reichel
+  * [armhf] Build a linux-tools package
+  * Fix configuration for features that are no longer modular, thanks to
+    Sedat Dilek (Closes: #624372):
+    - bluetooth: Re-enable BT_L2CAP and BT_SCO as part of bluetooth module
+    - leds: Explicitly enable LEDS_CLASS as built-in
+    - mfd: Explicitly disable MFD_WM8994
+
+  [ Aurelien Jarno ]
+  * drm/nouveau, drm/radeon: fix build failure on mips.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 29 Apr 2011 06:04:13 +0100
+
+linux-2.6 (2.6.39~rc4-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [i386] Rename '686-bigmem' flavour to '686-pae'; remove '686' flavour.
+    For 686-class systems without PAE, the '486' flavour is more efficient
+    than the '686' flavour due to optimisation for uniprocessor systems.
+  * Add armhf architecture with mx5 flavour, thanks to Hector Oron and
+    Vagrant Cascadian (Closes: #621032)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 24 Apr 2011 03:21:31 +0100
+
+linux-2.6 (2.6.38-5) unstable; urgency=medium
+
+  [ Thorsten Glaser ]
+  * [m68k] atari: Enable and compile in generic RTC
+  * [m68k] Backport the most urgent fixes from 2.6.39
+    - Add helper functions to handle kernel faults, traps and
+      exceptions better (used by the other patches below)
+    - Add improved support for running under the ARAnyM emulator
+      (its native features interface) and emulated hardware
+      + block access (similar to virtio-block)
+      + console access (redirection to stdout)
+      + network access (Ethernet)  (Closes: #599121)
+  * [m68k] Add patch from queue fixing atarifb console output on
+    machines with a lot of FastRAM by reserving some ST-RAM early
+  * [m68k] Add patch from mm mailing list to fix SLUB breakage
+
+  [ Aurelien Jarno ]
+  * [mips/octeon] Disable CONFIG_HOTPLUG_CPU.
+
+  [ Ben Hutchings ]
+  * rt2800pci, rt2800usb: Enable experimental support for more recent
+    chips (Closes: #623808)
+  * [x86] staging: Enable EASYCAP as module (Closes: #624505)
+  * Add stable 2.6.38.5, including:
+    - p54: Initialize extra_len in p54_tx_80211
+    - nfsd4: Fix filp leak (regression introduced in 2.6.38.3)
+    - radeon: PLL tweaks for R7xx
+    - nouveau: Fix notifier memory corruption bug
+    - radeon: Fix bad shift in atom iio table parser
+    - [x86] i915: Sanitize the output registers after resume
+    - [x86] ideapad: Read brightness setting on brightness key notify
+    - ath9k_hw: Partially revert "fix dma descriptor rx error bit parsing"
+    - [s390] pfault: fix token handling
+    - ACPI/PM: Avoid infinite recurrence while registering power resources
+    - [hppa] slub: Disable use with DISCONTIGMEM && !NUMA
+    - vfs: avoid large kmalloc()s for the fdtable
+    - agp: Fix arbitrary kernel memory writes (CVE-2011-1745)
+    - agp: Fix OOM and buffer overflow (CVE-2011-1746)
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5
+  * [hppa] Bump ABI to 2a
+  * mpt2sas: Prevent heap overflows and unchecked reads
+    (CVE-2011-1494, CVE-2011-1495)
+  * [armel] Prevent heap corruption in OABI semtimedop
+  * can: Add missing socket check in can/bcm release (CVE-2011-1598)
+  * ldm: Disable broken support for VBLK fragments (CVE-2011-1017)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 07 May 2011 21:24:55 +0100
+
+linux-2.6 (2.6.38-4) unstable; urgency=low
+
+  * usb-audio: Define another USB ID for a buggy USB MIDI cable
+    (Closes: #617743)
+  * net: Enable BATMAN_ADV as module (Closes: #622361)
+  * Add stable 2.6.38.3, including:
+    - eCryptfs: Unlock page in write_begin error path
+    - irda: validate peer name and attribute lengths (CVE-2011-1180)
+    - irda: prevent heap corruption on invalid nickname
+    - nilfs2: fix data loss in mmap page write for hole blocks
+    - ALSA: pcm: fix infinite loop in snd_pcm_update_hw_ptr0()
+    - inotify: fix double free/corruption of stuct user
+    - perf: Fix task_struct reference leak
+    - ROSE: prevent heap corruption with bad facilities (CVE-2011-1493)
+    - [x86] mtrr, pat: Fix one cpu getting out of sync during resume
+    - Input: synaptics - fix crash in synaptics_module_init()
+    - ath9k: fix a chip wakeup related crash in ath9k_start
+    - mac80211: fix a crash in minstrel_ht in HT mode with no supported MCS
+      rates
+    - UBIFS: fix oops on error path in read_pnode
+    - quota: Don't write quota info in dquot_commit()
+    - mm: avoid wrapping vm_pgoff in mremap()
+    - wl12xx: fix potential buffer overflow in testmode nvs push
+    - Bluetooth: sco: fix information leak to userspace (CVE-2011-1078)
+    - bridge: netfilter: fix information leak (CVE-2011-1080)
+    - Bluetooth: bnep: fix buffer overflow (CVE-2011-1079)
+    - netfilter: ip_tables: fix infoleak to userspace (CVE-2011-1171)
+    - netfilter: arp_tables: fix infoleak to userspace (CVE-2011-1170)
+    - [x86] Revert "x86: Cleanup highmap after brk is concluded"
+      (Closes: #621072)
+    - Squashfs: handle corruption of directory structure
+    - ext4: fix a double free in ext4_register_li_request
+    - ext4: fix credits computing for indirect mapped files
+    - nfsd: fix auth_domain reference leak on nlm operations
+    - nfsd4: fix oops on lock failure
+    - char/tpm: Fix unitialized usage of data buffer (CVE-2011-1160)
+    - ipv6: netfilter: ip6_tables: fix infoleak to userspace (CVE-2011-1172)
+    - econet: 4 byte infoleak to the network (CVE-2011-1173)
+    - sound/oss: remove offset from load_patch callbacks
+      (CVE-2011-1476, CVE-2011-1477)
+    - inotify: fix double free/corruption of stuct user (CVE-2011-1479)
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.3
+  * Add stable 2.6.38.4, including:
+    - vm: Fix vm_pgoff wrap in stack expansion
+    - cifs: Always do is_path_accessible check in cifs_mount
+    - cifs: Check for private_data before trying to put it
+    - sn9c102: Restrict world-wirtable sysfs files
+    - UBIFS: Restrict world-writable debugfs files
+    - vm: Fix mlock() on stack guard page
+    - UBIFS: Fix assertion warnings
+    - perf: Fix task context scheduling
+    - fib: Add rtnl locking in ip_fib_net_exit
+    - l2tp: Fix possible oops on l2tp_eth module unload
+    - ipv6: Fix duplicate /proc/sys/net/ipv6/neigh directory entries.
+    - net_sched: fix ip_tos2prio
+    - pppoe: drop PPPOX_ZOMBIEs in pppoe_flush_dev
+    - xfrm: Refcount destination entry on xfrm_lookup
+    - vlan: Take into account needed_headroom
+    - bridge: Reset IPCB when entering IP stack on NF_FORWARD
+    - futex: Set FLAGS_HAS_TIMEOUT during futex_wait restart setup
+    - oom-kill: Remove boost_dying_task_prio()
+    - UBIFS: Fix oops when R/O file-system is fsync'ed
+    - sched: Fix erroneous all_pinned logic
+    - vmscan: all_unreclaimable() use zone->all_unreclaimable as a name
+    - next_pidmap: fix overflow condition
+    - proc: Do proper range check on readdir offset
+    - [powerpc] Fix oops if scan_dispatch_log is called too early
+    - ehci: Unlink unused QHs when the controller is stopped
+    - USB: Fix formatting of SuperSpeed endpoints in /proc/bus/usb/devices
+    - xhci: Fix math in xhci_get_endpoint_interval()
+    - xhci: Also free streams when resetting devices
+    - USB: Fix unplug of device with active streams
+    - bluetooth: Fix HCI_RESET command synchronization
+    - bridge: Reset IPCB in br_parse_ip_options
+    - ip: ip_options_compile() resilient to NULL skb route
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.4
+  * [s390] pfault: fix token handling (Closes: #622570)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 23 Apr 2011 03:17:53 +0100
+
+linux-2.6 (2.6.38-3) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * [ppc64] Add to linux-tools package architectures (Closes: #620124)
+  * [amd64] Save cr4 to mmu_cr4_features at boot time (Closes: #620284)
+  * appletalk: Fix bugs introduced when removing use of BKL
+  * ALSA: Fix yet another race in disconnection
+  * cciss: Fix lost command issue
+  * ath9k: Fix kernel panic in AR2427
+  * ses: Avoid kernel panic when lun 0 is not mapped
+  * PCI/ACPI: Report ASPM support to BIOS if not disabled from command line
+
+  [ Aurelien Jarno ]
+  * rtlwifi: fix build when PCI is not enabled.
+
+  [ Martin Michlmayr ]
+  * rtlwifi: Eliminate udelay calls with too large values (Closes: #620204)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 06 Apr 2011 13:53:30 +0100
+
+linux-2.6 (2.6.38-2) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * kconfig: Avoid buffer underrun in choice input (fixes FTBFS on mips)
+  * rt2800usb: Disable powersaving by default (Closes: #618930)
+  * b43: Enable B43_PHY_N (Closes: #619070)
+  * net/wireless: Enable RTL8192CE as module (Closes: #619051)
+  * Add configuration for Debian architecture ppc64, matching the
+    powerpc/powerpc64 flavour (Closes: #618976)
+  * Enable BOOT_PRINTK_DELAY (support for the boot_delay kernel parameter)
+  * [x86/!486] Enable TRANSPARENT_HUGEPAGE, TRANSPARENT_HUGEPAGE_MADVISE
+    (Closes: #618924)
+  * [x86/486] Enable X86_32_IRIS (IRIS power-off support) (Closes: #619493)
+  * Add stable 2.6.38.1, including:
+    - RDMA/cma: Fix crash in request handlers (CVE-2011-0695)
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.1
+  * radeon: Add some sanity checks to obj info record parsing, thanks
+    to John Lindgren (Closes: #618847)
+  * [x86] KVM: remove isr_ack logic from PIC (Closes: #612105)
+  * Add stable 2.6.38.2, including:
+    - cgroups: If you list_empty() a head then don't list_del() it
+    - oom: Fix various bugs in victim task selection
+    - xen-kbdfront: Advertise either absolute or relative coordinates
+    - signal: Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing
+      the signal code (CVE-2011-1182)
+    - ext3: Skip orphan cleanup on rocompat fs
+    - sysctl: Restrict write access to dmesg_restrict
+    - proc: Protect mm start_code/end_code in /proc/pid/stat
+    - nfsd: Fix internal NFSv4.1 operation flags to be non-overlapping
+    - nfsd: Fix wrong limit used in NFSv4 session creation
+    - USB: Do not pass negative length to snoop_urb()
+    - cdc-acm: Fix various bugs that can lead to a crash or memory corruption
+    - fs: Fix deadlock in pivot_root()
+    - fs: Assign sb->s_bdi to default_backing_dev_info if the bdi is going away
+    - x86: Cleanup highmap after brk is concluded
+    - NFS: Fix a hang/infinite loop in nfs_wb_page()
+    - ext4: Skip orphan cleanup if fs has unknown ROCOMPAT features
+    For the complete list of changes, see:
+     http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.2
+  * [amd64] media/rc: Enable IR_NUVOTON as module (Closes: #619937)
+  * [x86] media/rc: Enable IR_WINBOND_CIR as module
+  * [x86] Enable DEBUG_SET_MODULE_RONX (Closes: #619838)
+  * SCSI: Enable TARGET_CORE and related modules (Closes: #619298)
+  * [hppa] Remove .size directive for flush_alias_page (should fix FTBFS)
+
+  [ Jurij Smakov ]
+  * Bump CONFIG_NR_CPUS on sparc to 256 to accomodate T2+ machines
+    (Closes: #619435)
+  * Bump ABI to 2
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 29 Mar 2011 05:31:03 +0100
+
+linux-kbuild-2.6 (2.6.38-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 16 Mar 2011 13:45:58 +0000
+
+linux-2.6 (2.6.38-1) unstable; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_2_6_38
+
+  [ Ben Hutchings ]
+  * Move firmware-linux-free to separate source package (firmware-free)
+  * Move linux-base to separate source package
+  * net/can: Enable CAN_SLCAN as module (Closes: #617629)
+  * sound: Enable SND_ALOOP as module (Closes: #617869)
+  * Remove the Big Kernel Lock:
+    - adfs,appletalk,i810,ufs,usbip: Refactor locking
+    - hpfs: Disable HPFS_FS
+  * ext4: Disable FS_IOC_FIEMAP ioctl temporarily (together with fixes
+    for btrfs in 2.6.38, closes: #615035)
+  * sched: Build with SCHED_AUTOGROUP, but do not enable autogrouping by
+    default (use sysctl kernel.sched_autogroup_enabled=1) (Closes: #618486)
+  * Set ABI to 1
+
+  [ Aurelien Jarno]
+  * mips/malta-[45]kc: 
+    - disable ATM, TR, WAN.
+    - synchronize options in malta-4kc and malta-5kc.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 16 Mar 2011 04:47:57 +0000
+
+linux-2.6 (2.6.38~rc8-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * [sparc] Fix .size directive for do_int_load
+  * [arm] Fix .size directive for xscale_dma_a0_map_area
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 12 Mar 2011 03:31:52 +0000
+
+linux-2.6 (2.6.38~rc7-1~experimental.1) experimental; urgency=low
+
+  [ maximilian attems ]
+  * New upstream release candidate
+    - swiotlb: Fix wrong panic (Closes: #615990)
+  * x86: Set DRM_I915_KMS on request by xorg team.
+
+  [ Ben Hutchings ]
+  * [x86] Correct typos in label names in two asm functions (Closes: #616426)
+  * [x86] Enable VT6656, loading firmware from a separate file (requires
+    firmware-linux-nonfree 0.29) (Closes: #568454)
+  * perf: Build with libdwarf for improved analysis capabilities
+  * perf: Build with newt for improved user interface (Closes: #615868)
+  * aufs: Update for 2.6.38
+  * aufs: Fix device numbers passed to security_path_mknod()
+  * dib0700/dib7000m: Add pid filtering (Closes: #614837)
+  * [powerpc] Revert fb module changes (Closes: #614221)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 08 Mar 2011 02:34:04 +0000
+
+linux-2.6 (2.6.38~rc6-1~experimental.1) experimental; urgency=low
+
+  [ Ben Hutchings ]
+  * New upstream release candidate
+    - drm/radeon/kms: hopefully fix pll issues for real (v3) (Closes: #614566)
+    - r8169: Keep firmware in memory (Closes: #609538)
+    - [sparc] Fix misaligned tracing information which the module loader
+      does not support (Closes: #609371)
+    - [sh4] Export cpu_core_map to fix build failure with CONFIG_SFC=m.
+    - [armel] Support for Buffalo LS-CHL (Closes: #590105).
+    - btrfs: Prevent heap corruption in btrfs_ioctl_space_info()
+      (CVE-2011-0699)
+    - [s390] Remove task_show_regs (CVE-2011-0710)
+  * DFSG: Remove drivers/staging/ft1000/ft1000-pcmcia/boot.h, non-free
+    firmware for a driver we don't build (Closes: #609448)
+  * module,bug: Add TAINT_OOT_MODULE flag for modules that weren't built
+    in-tree
+
+  [ maximilian attems ]
+  * [x86] linux-images suggest extlinux, s/grub/grub-pc/. (closes: #613909)
+
+  [ Aurelien Jarno]
+  * mips/swarm: enable PATA drivers that have been lost during IDE -> PATA
+    conversion.
+  * mips/malta-[45]kc: set VIRTUALIZATION.
+
+ -- maximilian attems <maks@debian.org>  Tue, 22 Feb 2011 14:36:33 +0100
+
+linux-2.6 (2.6.37-2) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * Add stable 2.6.37.1:
+    - libata: Set queue DMA alignment to sector size for ATAPI too
+    - USB: serial: add missing .usb_driver field in serial drivers
+    - USB: EHCI: fix scheduling while atomic during suspend
+    - zram: Fix data corruption issue
+    - brcm80211: Fix suspend/resume issue
+    - ath9k: Fix system hang when resuming from S3/S4
+    - SCSI: Fix medium error problems with some arrays which can cause
+      data corruption
+    - libsas: Fix runaway error handler problem
+    - NFS: Don't use vm_map_ram() in readdir
+    - NFS: Fix NFSv3 exclusive open semantics
+    - /proc/kcore: Fix seeking
+    - mm: Fix migration hangs on anon_vma lock
+    - writeback: Stop background/kupdate works from livelocking other works
+    - writeback: Avoid livelocking WB_SYNC_ALL writeback
+    - ext4: Fix trimming of a single group
+    - af_unix: Avoid socket->sk NULL OOPS in stream connect security hooks
+    - virtio_net: Add schedule check to napi_enable call
+    - ptrace: Use safer wake up on ptrace_detach()
+    - net: Fix ip link add netns oops
+    - SMP: Fix smp_call_function_many() SMP race
+    - md: Ensure no IO request to get md device before it is properly
+      initialised
+    - PM/runtime: Don't enable interrupts while running in_interrupt
+    - [x86] mm: Avoid possible bogus TLB entries by clearing prev
+      mm_cpumask after switching mm
+  * Kbuild: Include localversion file in linux-headers-*; fixes output
+    of 'make kernelrelease'
+  * Add stable 2.6.37.2:
+    - nfsd: Memory corruption due to writing beyond the stat array
+    - xen: p2m: Correctly initialize partial p2m leaf
+    - av7110: Check for negative array offset (CVE-2011-0521)
+    - cred: Fix kernel panic upon security_file_alloc() failure
+    - btrfs: Prevent heap corruption in btrfs_ioctl_space_info()
+      (CVE-2011-0699)
+    - cred: Fix BUG() upon security_cred_alloc_blank() failure
+    - cred: Fix memory and refcount leaks upon security_prepare_creds()
+      failure
+    - PCI: Use security_capable() when checking capablities during config
+      space read
+    - [s390] Remove task_show_regs (CVE-2011-0710)
+    - PM/hibernate: Return error code when alloc_image_page() fails
+    - fs/partitions: Validate map_count in Mac partition tables
+    - workqueue: Wake up a worker when a rescuer is leaving a gcwq
+    - ALSA: caiaq - Fix possible string-buffer overflow
+  * Set ABI to 2
+
+  [ Martin Michlmayr ]
+  * [armel/orion5x] Re-enable all devices.
+  * [armel/kirkwood] Re-enable Seagate FreeAgent DockStar support.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 26 Feb 2011 03:16:16 +0000
+
+linux-kbuild-2.6 (2.6.37-1) unstable; urgency=low
+
+  * Upload to unstable
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 15 Feb 2011 14:15:36 +0000
+
+linux-2.6 (2.6.37-1) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * [arm] ixp4xx: Revert build fix, now applied upstream which resulted
+    in another build failure
+  * r8169: Keep firmware in memory (Closes: #609538)
+  * r8712u: Firmware filename is rtlwifi/rtl8712u.bin (Closes: #602450)
+  * [sparc] Fix misaligned tracing information which the module loader
+    does not support (Closes: #609371)
+  * Set ABI to 1
+  * Add aufs2.1, marked as staging (Closes: #573189, #613248)
+  * fs/notify: Enable FANOTIFY (Closes: #599877)
+  * acer-wmi, aic94xx, asus_acpi, iscsi, janz-ican3, rtc-ds1511, tc1100-wmi:
+    Restrict write permissions on files in procfs/sysfs
+  * nbd: Remove module-level ioctl mutex mistakenly introduced in 2.6.37
+  * [x86] crypto: Re-enable AES_NI_INTEL as module (Closes: #597658)
+  * [powerpc] video/fb: Enable FB_VGA16 as built-in; build FB_CT65550,
+    FB_NVIDIA, FB_MATROX, FB_RADEON, FB_ATY128, FB_ATY, FB_SIS, FB_3DFX
+    as modules (Closes: #609615)
+
+  [ Aurelien Jarno ]
+  * [sh4] Export cpu_core_map to fix build failure with CONFIG_SFC=m.
+  * [mips/5kc-malta] Enable CONFIG_VGA_CONSOLE.
+
+  [ Bastian Blank ]
+  * Enable CIFS fscache and ACL support.
+  * Enable Xen PCI frontend.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 15 Feb 2011 04:14:09 +0000
+
+linux-kbuild-2.6 (2.6.37-1~experimental.1) experimental; urgency=low
+
+  * New upstream version
+  * Include new script gcc-goto.sh
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 16 Jan 2011 15:14:34 +0000
+
+linux-2.6 (2.6.37-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_2_6_37
+    - starfire: Fix dma_addr_t size test for MIPS (fixes FTBFS)
+    - watchdog: Improve failure message and documentation (Closes: #608138)
+
+  [ Ben Hutchings ]
+  * i2c-i801: Include <linux/slab.h> (fixes FTBFS on alpha)
+  * [x86] Staging: Enable R8712U as module (r8712u, replacing r8192s_usb)
+    - Enable loading external firmware, thanks to Stefan Lippers-Hollmann
+  * linux-base: Look for GRUB 1 configuration in both /boot/grub and
+    /boot/boot/grub (Closes: #607863)
+  * btrfs: Require CAP_SYS_ADMIN for filesystem rebalance (Closes: #608185)
+  * r8169: Change RTL8111D/RTL8168D initialisation and firmware loading to
+    match upstream version (Closes: #596390 with firmware-realtek 0.28)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 05 Jan 2011 02:44:28 +0000
+
+linux-2.6 (2.6.37~rc7-1~experimental.1) experimental; urgency=low
+  
+  * New upstream release candidate
+    - [mips] Rename mips_dma_cache_sync back to dma_cache_sync (fixes FTBFS)
+
+  [ Ben Hutchings ]
+  * debian/copyright: Add explanation of indirect linking of perf to
+    OpenSSL (Closes: #606520)
+  * [powerpc,x86] Enable PATA_PCMCIA (Closes: #606324)
+  * Disable BLK_DEV_IDECS
+  * [alpha] Use libata-based drivers for most PATA controllers
+  * [powerpc] linux-base: Run ybin after updating yaboot.conf
+    (Closes: #607284)
+  * Update debconf template translations:
+    - Add Catalan (Jordi Mallach)
+    - Update Danish (Joe Hansen)
+    - Update Spanish (Omar Campagne, Javier Fernández-Sanguino)
+    - Add Italian (Luca Bruno)
+    - Update Japanese (Nobuhiro Iwamatsu)
+    - Add Brazilian Portugese (Flamarion Jorge)
+    - Update Vietnamese (Clytie Siddall)
+  * debian/bin/test-patches: Restrict patches to featureset when building
+    with a featureset (thanks to Tim Small)
+  * Recommend use of 'make deb-pkg' to build custom kernel packages
+  * [ia64] drm/nouveau: Revert unnecessary exclusion of ACPI support code
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 25 Dec 2010 16:21:09 +0000
+
+linux-2.6 (2.6.37~rc5-1~experimental.3) experimental; urgency=low
+
+  * Really apply patches added in the previous version
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 11 Dec 2010 16:27:21 +0000
+
+linux-2.6 (2.6.37~rc5-1~experimental.2) experimental; urgency=low
+
+  * Second attempt to fix FTBFS on various architectures:
+    - [alpha] Do not use -Werror for arch/alpha
+    - [arm/ixp4xx] Rename FREQ macro to avoid collisions (v2)
+    - drm/nouveau: Only select ACPI_VIDEO if its dependencies are met
+    - [mips] Change mips_sc_is_activated() to do what the comment says
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 11 Dec 2010 06:27:51 +0000
+
+linux-2.6 (2.6.37~rc5-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ Ben Hutchings ]
+  * Attempt to fix FTBFS on various architectures:
+    - [alpha] Do not use -Werror for arch/alpha/kernel
+    - [arm/ixp4xx] Rename FREQ macro to avoid collisions
+    - [mips] Add the necessary parameter to mips_sc_is_activated()
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 10 Dec 2010 02:59:12 +0000
+
+linux-2.6 (2.6.37~rc4-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+
+  [ maximilian attems ]
+  * Newer Standards-Version 3.9.1 without changes.
+
+  [ Martin Michlmayr ]
+  * Add ixp4xx build fix from Arnaud Patard (Closes: #602669)
+  * [armel/kirkwood] Enable sound.
+  * ASoC: Add support for OpenRD Ultimate (Arnaud Patard).
+
+  [ Ben Hutchings ]
+  * Enable PM_ADVANCED_DEBUG (Closes: #603254)
+  * Disable X.25 protocol and related drivers.  This 10 year old experiment
+    has stalled and is a source of security bugs.
+  * Disable Econet protocol.  It is unmaintained upstream, probably broken,
+    and of historical interest only.
+  * af_802154,decnet,rds: Disable auto-loading as mitigation against local
+    exploits.  These protocol modules are not widely used and can be
+    explicitly loaded or aliased on systems where they are wanted.
+  * debian/rules: Change 'clean' rule to remove package build directories
+    even after a version bump, thanks to Timo Juhani Lindfors
+  * dm: Deal with merge_bvec_fn in component devices better (Closes: #604457)
+  * 9p: Enable 9P_FS_POSIX_ACL
+  * netfilter/ipvs: Enable IP_VS_PE_SIP as module
+  * net/sched: Enable NET_ACT_CSUM as module
+  * can: Enable CAN_SJA1000_ISA, CAN_TSCAN1 as modules
+  * block: Enable BLK_DEV_RBD (Rados) as module
+  * sensors: Enable AD525X_DPOT_SPI, APDS9802ALS, ISL29020, SENSORS_BH1780,
+    SENSORS_BH1770, SENSORS_APDS990X, HMC6352, BMP085 as modules
+  * scsi: Enable SCSI_CXGB4_ISCSI as module
+  * net/ppp: Enable PPTP as module
+  * net: Enable BNA, SMCTR, USB_NET_CX82310_ETH as modules
+  * IR: Enable IR_RC5_SZ_DECODER as module
+  * [i386] IR: Enable IR_NUVOTON as module
+  * V4L: Enable GSPCA_KONICA, GSPCA_XIRLINK_CIT as modules
+  * DVB: Enable USB_LME2510 as module
+  * [i386] sound/isa: Enable SND_AZT1605, SND_AZT2316, SND_JAZZ16,
+    SND_MSND_PINNACLE, SND_MSND_CLASSIC as modules
+  * HID: Enable HID_UCLOGIC, HID_WALTOP, HID_ROCCAT_PYRA as modules
+  * hid-logitech: Enable LOGIWII_FF
+  * Enable USB_UAS (USB-attached SCSI) as module
+  * serial: Enable USB_SERIAL_SAMBA as module
+  * drm/nouveau: Enable DRM_I2C_SIL164 as module
+  * perf: Use libiberty, not libbfd, for symbol demangling
+    (Closes: #604750, #606050)
+  * firmware: Correct copyright information and add source for CIS files
+    (accidentally omitted when merging from sid branch)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 05 Dec 2010 23:19:38 +0000
+
+linux-kbuild-2.6 (2.6.36-1~experimental.1) experimental; urgency=low
+
+  * New upstream version
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 15 Nov 2010 00:20:33 +0000
+
+linux-2.6 (2.6.36-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_2_6_36
+    - writeback: always use sb->s_bdi for writeback purposes (Closes: #599466)
+    - i7core_edac: fix panic in udimm sysfs attributes registration
+      (Closes: #600528)
+
+  [ Ben Hutchings ]
+  * qla4xxx: Fix build on some architectures lacking 64-bit I/O
+    (Closes: #598503)
+  * [x86] Enable modular TM6000, TM6000_ALSA, TM6000_DVB
+  * [x86] Staging: fix Makefile so brcm80211 will actually build
+    (Closes: #599465)
+  * [x86] Enable modular IDEAPAD_ACPI (Closes: #599444)
+  * perf: Enable Perl and Python scripting
+    - Move scripts to /usr/share/perf_<version>-core (Closes: #599624)
+  * crypto: Explicitly enable algorithm self-tests (Closes: #599441)
+  * [x86] Skip looking for ioapic overrides when ioapics are not present
+    (Closes: #598533)
+  * [x86] ata_piix: Add device ID for ICH4-L
+  * [armel/iop32x,ia64,x86] Disable BLK_DEV_PIIX as obsolete
+  * [amd64] Disable DRM_I810; i81x chipsets do not support 64-bit processors
+  * [x86] Disable DRM_I830; the i915 driver is now used instead
+
+  [ Martin Michlmayr ]
+  * Kirkwood: restrict the scope of the PCIe reset workaround
+
+ -- maximilian attems <max@stro.at>  Wed, 27 Oct 2010 13:23:11 +0200
+
+linux-2.6 (2.6.36~rc6-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+    - drm/i915: Ensure that the crtcinfo is populated during mode_fixup()
+      (Closes: #592415)
+    - USB: fix bug in initialization of interface minor numbers
+      (Closes: #598207)
+
+  [ Ben Hutchings ]
+  * linux-base: Remove dependency on libapt-pkg-perl (Closes: #589996, really)
+  * Disable INTEL_IDLE.  It can no longer be built as a module and so was
+    actually disabled by the previous version, but I do not consider it ready
+    to build-in yet.
+  * Enable modular NETFILTER_XT_TARGET_CHECKSUM, NETFILTER_XT_TARGET_IDLETIMER,
+    NETFILTER_XT_MATCH_CPU, NETFILTER_XT_MATCH_IPVS
+  * Reenable LOCKUP_DETECTOR, accidentally disabled by the previous version
+  * Enable modular AD525X_DPOT_I2C, ATM_NICSTAR, CAN_ESD_USB2, CHELSIO_T4VF,
+    FIREWIRE_NOSY, HID_ACRUX_FF, HID_ELECOM, INFINIBAND_CXGB4, INFINIBAND_QIB,
+    MTD_PCMCIA, ORINOCO_USB, PPS_CLIENT_LDISC, RAMOOPS, SERIAL_MFD_HSU,
+    UIO_NETX, USB_GSPCA_SPCA1528, USB_GSPCA_SQ930X, USB_SERIAL_SSU100,
+    USB_SERIAL_ZIO, WL1271_SDIO, WL1271_SPI
+  * Enable BT_HCIUART_ATH3K, USB_SERIAL_MOS7715_PARPORT
+  * [x86] Enable modular SENSORS_PKGTEMP
+  * Enable modular IR_CORE, RC_MAP, all IR decoders, IR_IMON, IR_MCEUSB,
+    IR_ENE, IR_STREAMZAP
+  * [x86] Enable modular LIRC drivers
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 03 Oct 2010 21:18:41 +0100
+
+linux-2.6 (2.6.36~rc5-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+    - 3c59x: Fix deadlock in vortex_error() (Closes: #595554)
+
+  [ Ben Hutchings ]
+  * speakup: Update to match Debian package version 3.1.5.dfsg.1-1
+  * [x86] Add brcm80211 driver for Broadcom 802.11n wireless network
+    controllers
+  * [x86] Set XEN_PLATFORM_PCI=y
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 21 Sep 2010 02:15:33 +0100
+
+linux-2.6 (2.6.35-1~experimental.3) experimental; urgency=low
+
+  [ Ritesh Raj Sarraf ]
+  * Add .gnu_debuglink information into kernel modules (Closes: #555549)
+  
+  [ Ben Hutchings ]
+  * linux-base: Remove dependency on libapt-pkg-perl (Closes: #589996)
+  * Update debconf template translations:
+    - Czech (Michal Simunek) (Closes: #590546)
+    - Portugese (Américo Monteiro) (Closes: #590557)
+    - French (David Prévot) (Closes: #591149)
+    - Russian (Yuri Kozlov) (Closes: #591241)
+    - Swedish (Martin Bagge) (Closes: #592045)
+    - German (Holger Wansing) (Closes: #592226)
+  * [x86] Enable samsung-laptop driver
+  * [sparc] Enable XVR1000 driver (Closes: #574243)
+  * Change BLK_CGROUP from module to built-in so that cfq can be the
+    default I/O scheduler again (Closes: #593720)
+  * [mipsel/loongson-2f] Enable smtcfb (FB_SM7XX) driver (Closes: #594642)
+
+  [ Ian Campbell ]
+  * Fixes/overrides for Linitan warnings:
+    - Add "(meta package)" to short description of linux-headers
+      metapackages, resolves empty-binary-package.
+    - Add dependency on ${misc:Depends} to all packages, resolves
+      debhelper-but-no-misc-depends. Required update to gencontrol.py to
+      augment rather than override headers_arch_depends read from templates.
+    - Override dbg-package-missing-depends for linux-image-*-dbg. It is not
+      necessary to install the kernel image package to use the dbg package
+      since the dbg package already contains a complete image with symbols.
+
+  [ Bastian Blank ]
+  * Disable Ralink staging drivers, the in-tree ones reached "works-for-me"
+    status.
+
+  [ Aurelien Jarno ]
+  * Fix netfilter CONFIG_COMPAT support.
+  * [sh4] set VIRTUALIZATION.
+  * [mips] Add an octeon flavour.
+
+  [ maximilian attems]
+  * Add stable 2.6.35.3 and 2.6.35.4.
+
+ -- maximilian attems <maks@debian.org>  Mon, 06 Sep 2010 15:16:17 +0200
+
+linux-2.6 (2.6.35-1~experimental.2) experimental; urgency=low
+
+  * images: Nuke modules.devname on removal. (closes: #590607)
+  * Add stable 2.6.35.1 and 2.6.35.2.
+  * mm: fix page table unmap for stack guard page properly.
+  * mm: fix up some user-visible effects of the stack guard page.
+  * config.loongson-2f: Enable USB and RTC for loongson-2f.
+    Thanks Geert Stappers <stappers@stappers.nl> (closes: #583689)
+
+ -- maximilian attems <maks@debian.org>  Mon, 16 Aug 2010 23:49:32 +0200
+
+linux-kbuild-2.6 (2.6.35-1~experimental.1) experimental; urgency=low
+
+  * New upstream version
+  * Update policy version to 3.9.1; no changes required
+  * Fix minor issues reported by lintian:
+    - Add ${misc:Depends} to dependencies
+    - Add debian/source/format file
+    - Remove redundant priority and section fields
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 08 Aug 2010 22:31:47 +0100
+
+linux-2.6 (2.6.35-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_2_6_35
+    - [ia64] Fix crash when gcore reads gate area (Closes: #588574)
+    - tpm_tis: fix subsequent suspend failures (Closes: #591031)
+
+  * topconfig enable BLK_CGROUP, NETFILTER_XT_TARGET_TEE, VMWARE_BALLOON,
+    ATH9K_HTC, TOUCHSCREEN_HAMPSHIRE, TOUCHSCREEN_TPS6507X, SND_ASIHPI,
+    SQUASHFS_XATTRS, RCU_FAST_NO_HZ, COMPACTION, IP_MROUTE_MULTIPLE_TABLES,
+    IPV6_MROUTE_MULTIPLE_TABLES, NET_DCCPPROBE, NET_SCTPPROBE, L2TP,
+    BT_L2CAP_EXT_FEATURES, MTD_NAND_RICOH, ATA_BMDMA, KEYBOARD_QT2160,
+    N_GSM, SENSORS_SHT15, SENSORS_EMC1403, SENSORS_ADS7871, SENSORS_TMP102,
+    SND_ES1968_INPUT, SND_MAESTRO3_INPUT, LEDS_LT3593, LEDS_MC13783.
+  * x86 enable INTEL_IDLE, ACPI_HED, ACPI_APEI, ACPI_APEI_GHES,
+    PCI_CNB20LE_QUIRK.
+
+ -- maximilian attems <maks@debian.org>  Tue, 03 Aug 2010 16:21:16 +0200
+
+linux-2.6 (2.6.35~rc6-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+    - drm/i915: Add 'reclaimable' to i915 self-reclaimable page allocations
+      (Closes: #534422)
+
+  [ Ben Hutchings ]
+  * [!x86] Disable FB_VIA; these GPUs are only found on x86 motherboards
+  * ds2782_battery: Fix build failure on several architectures
+  * postinst: Remove support for 'default' boot loaders. Warn users on
+    upgrade if the current configuration may rely on this.
+  * [i386/686] Remove AMD K6 from the list of supported processors; it
+    does not implement the CMOV instruction
+  * 3c59x: Fix call to mdio_sync() with the wrong argument (Closes: #589989)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 24 Jul 2010 01:00:26 +0100
+
+linux-2.6 (2.6.35~rc5-1~experimental.1) experimental; urgency=low
+
+  * New upstream release candidate
+  
+  [ Ben Hutchings ]
+  * Consistently name the linux-tools package and perf binary using the
+    upstream version without any -rcN suffix
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 13 Jul 2010 01:09:27 +0100
+
+linux-2.6 (2.6.35~rc4-1~experimental.1) experimental; urgency=low
+  
+  * New upstream snapshot
+    - [hppa] clear floating point exception flag on SIGFPE signal
+      (Closes: #559406)
+    - Add mantis and hopper DVB drivers (Closes: #577264)
+    - eeepc-laptop: Disable wireless hotplug on more models where the
+      controller is not at the expected address (Closes: #576199)
+    - qcserial: Add support for Qualcomm Gobi 2000 devices
+      (Closes: #585661)
+    - radeon: Fix MacBook Pro connector quirk (Closes: #585943)
+    - r8169: Fix MDIO timing (Closes: #583139)
+    - asix: fix setting mac address for AX88772 (Closes: #587580)
+    - Update Marvell CESA (mv_cesa) driver (Closes: #585790):
+
+  [ Ben Hutchings ]
+  * ipr: add writeq definition if needed (Closes: #584840)
+  * [mips] Fix boot from ATA hard drives (Closes: #584784):
+    - Set io_map_base for several PCI bridges lacking it
+    - Replace per-platform built-in IDE drivers with libata-based drivers
+    - Enable BLK_DEV_SD as built-in on all platforms
+  * Update Spanish debconf templates, thanks to Omar Campagne
+    (Closes: #580538)
+  * [powerpc] Enable pata_amd driver, replacing amd74xx
+  * linux-base: Don't identify LVM2 PVs by UUID (Closes: #585852)
+  * Move NEWS to linux-latest-2.6 (Closes: #586401)
+  * 3c59x: Change locking to avoid use of disable_irq() (Closes: #586967)
+  * Enable IPv6 support for IPVS (IP_VS_IPV6) (Closes: #584549)
+  * linux-base: If the disk ID update process fails, give the user a
+    chance to retry or change their answers (Closes: #585609)
+  * ipv6: Clamp reported valid_lft to a minimum of 0 (Closes: #514644)
+  * ipv6: Use interface max_desync_factor instead of static default
+    (Closes: #514646)
+  * [ia64, powerpc, sparc, x86] Enable KPROBES and KRETPROBES
+    (Closes: #584130)
+  * r8192s_usb: Fix various bugs:
+    - Clean up in case of an error in module initialisation
+    - Rename and remove proc directories correctly if an interface is
+      not called wlan0 (Closes: #582972)
+    - Correct device ID table (Closes: #584945, #587985)
+  * [x86] Enable r8192u_usb driver
+  * Add linux-tools-<version> package containing the perf tool
+    (Closes: #548715)
+  * Enable SERIAL_USB_TI (Closes: #588096) and SERIAL_USB_WHITEHEAT
+  * [x86] Enable EDAC_I7CORE
+
+  [ maximilian attems ]
+  * Enable DRM_RADEON_KMS.
+
+  [ Martin Michlmayr ]
+  * OpenRD-Base: revert patch "allow SD/UART1 selection" since it
+    never made it upstream.
+  * ARM: update mach types.
+  * Add support for OpenRD-Ultimate.
+  * QNAP TS-11x/TS-21x: Add MPP44 (board ID).
+  * Add support for the HP t5325 Thin Client.
+  * m25p80: Add support for Macronix 25L8005.
+  * [armel/kirkwood] Enable FB_XGI and FRAMEBUFFER_CONSOLE.
+  * [armel] Make MOUSE_PS2 modular.
+  * [armel] Build INPUT_UINPUT for all flavours.
+  * [armel/kirkwood] Enable FB_UDL.
+  * [armel] Disable PARPORT_PC (Closes: #588164)
+
+  [ Bastian Blank ]
+  * Disable mISDN support for NETJet cards. The driver binds a generic PCI
+    bridge.
+  * Disable ISDN4Linux drivers.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 10 Jul 2010 21:53:57 +0100
+
+linux-2.6 (2.6.34-1~experimental.2) experimental; urgency=low
+
+  [ Ben Hutchings ]
+  * [x86] Reenable rtl8192su, accidentally disabled in previous version
+    (Closes: #580740)
+  * writeback: Update dirty flags in two steps
+  * writeback: ensure that WB_SYNC_NONE writeback with sb pinned is sync
+    (Closes: #582808)
+  * writeback: fix non-integrity write-back
+  * [mipsel] Add a loongson-2f flavour
+  * [mipsel] Loongson: Define rtc device on MC146818-equipped systems
+  * Make gcc-4.4 the default compiler
+  * [ia64] Hardcode the output of the scripts under arch/ia64/scripts so
+    that we can build out-of-tree modules correctly (refresh and re-add
+    dropped patch) (Closes: #392592)
+  * [ia64] Enable SGI SN support and mspec driver (Closes: #582224)
+  * iwlwifi: Disable QoS when connected to a non-QoS-capable AP
+    (Closes: #578262)
+  * [x86] Disable e_powersaver cpufreq driver as unsafe. It has already
+    been blacklisted by cpufrequtils. The acpi-cpufreq driver can be used
+    instead on some VIA C7 systems. (Closes: #566208)
+  * [amd64] ext4: Fix compat EXT4_IOC_ADD_GROUP (used by online resize)
+  * Install debug kernel image in /usr/lib/debug/boot (Closes: #582810)
+  * Build inet_lro as a module
+  * [sparc] Enable CONFIG_FB_XVR500, CONFIG_FB_XVR2500 (Closes: #508108)
+
+  [ maximilian attems ]
+  * topconfig enable CFQ_GROUP_IOSCHED, MFD_WM8994, REGULATOR_MAX8649,
+    REGULATOR_WM8994, VHOST_NET, BT_ATH3K, CRYPTO_PCRYPT.
+  * [x86] Enable X86_PCC_CPUFREQ, VGA_SWITCHEROO (closes: #582637).
+
+  [ Martin Michlmayr ]
+  * QNAP TS-419P: Export GPIO indicating jumper setting of JP1.
+
+  [ dann frazier ]
+  * [hppa] clear floating point exception flag on SIGFPE signal
+    (Closes: #559406)
+
+  [ Aurelien Jarno ]
+  * [sh4] fix sh_tmu clocksource following recent nohz changes.
+
+  [ Moritz Muehlenhoff ]
+  * Enable X86 board specific fixups for reboot (Closes: #536537)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 06 Jun 2010 18:53:04 +0100
+
+linux-kbuild-2.6 (2.6.34-1~experimental.1) experimental; urgency=low
+
+  * New upstream version
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 20 May 2010 01:19:43 +0100
+
+linux-2.6 (2.6.34-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_2_6_34
+
+  * New upstream release
+    - rtl8192su: Add IDs for several more devices (Closes: #580740)
+
+  [ maximilian attems ]
+  * topconfig enable IPV6_SIT_6RD, NETFILTER_XT_TARGET_CT, IP_VS_PROTO_SCTP,
+    NF_CONNTRACK_ZONES, CAN_PLX_PCI, TI_DAC7512, SCSI_HPSA, PATA_TOSHIBA,
+    MACVTAP, CHELSIO_T4, IXGBEVF, QLCNIC, LIBERTAS_MESH,
+    USB_NET_SMSC75XX, USB_SIERRA_NET, VIDEO_CX18_ALSA, USB_GSPCA_BENQ,
+    USB_GSPCA_CPIA1, USB_GSPCA_OV534_9, USB_GSPCA_SN9C2028, RADIO_TEF6862,
+    RADIO_SAA7706H, SND_USB_UA101, CEPH_FS, MICREL_PHY, KSZ884X_PCI,
+    SENSORS_ADT7411, SENSORS_ASC7621, VIDEO_TLG2300, DVB_USB_AZ6027,
+    DVB_NGENE, HID_3M_PCT, LOGIG940_FF, HID_MAGICMOUSE, HID_MOSART,
+    HID_NTRIG, HID_QUANTA, HID_STANTUM, HID_WACOM, USB_SERIAL_QCAUX,
+    USB_SERIAL_VIVOPAY_SERIAL, MMC_RICOH_MMC, LEDS_DELL_NETBOOKS, LOGFS.
+  * [x86] Enable EEEPC_WMI.
+  * Fix backlight support on some recent Thinkpads.
+  * acpi: Fall back to manually changing SCI_EN.
+  * Explicitly pass in whether sb is pinned or not.
+  
+  [ Ben Hutchings ]
+  * Prepare debconf templates for translation (Closes: #576758)
+  * [x86] Enable r8187se driver, previously named rtl8187se
+
+  [ Aurelien Jarno ]
+  * mips/swarm: fix boot from IDE based media (Sebastian Andrzej Siewior)
+    (closes: #466977).
+  * mips/*: remove SND_* options, as they are already enabled in topconfig.
+
+ -- maximilian attems <maks@debian.org>  Wed, 19 May 2010 17:06:13 +0200
+
+linux-2.6 (2.6.33-1~experimental.5) experimental; urgency=low
+
+  [ Ian Campbell ]
+  * Include Xen hypervisor in reportbug "related to" list.
+
+  [ maximilian attems]
+  * Add stable 2.6.33.2.
+
+  [ Ben Hutchings ]
+  * [x86] Enable ramzswap driver (Closes: #573912)
+  * [x86] Re-enable rt2860sta and rt2870sta drivers which were accidentally
+    disabled when moving to Linux 2.6.33 (Closes: #576723)
+  * Add stable 2.6.33.3:
+    - ACPI: EC: Allow multibyte access to EC; fixes temperature monitoring
+      on some Dell laptops (Closes: #563313)
+
+  [ Aurelien Jarno ]
+  * Add support for sh4 architecture, patch by Nobuhiro Iwamatsu
+    (Closes: #569034)
+  * [mips*/*malta] Remove options that are present in topconfig.
+
+ -- maximilian attems <maks@debian.org>  Wed, 05 May 2010 16:38:53 +0200
+
+linux-2.6 (2.6.33-1~experimental.4) experimental; urgency=low
+
+  [ Ben Hutchings ]
+  * Include aufs2, marked as staging (Closes: #573189)
+  * Remove /usr/include/drm from linux-libc-dev; let libdrm-dev provide it
+    again (Closes: #572067)
+  * [x86] Enable rtl8192su driver using external firmware
+
+  [ maximilian attems]
+  * Add stable 2.6.33.1.
+
+ -- maximilian attems <maks@debian.org>  Wed, 17 Mar 2010 18:13:53 +0100
+
+linux-2.6 (2.6.33-1~experimental.3) experimental; urgency=low
+
+  [ Ben Hutchings ]
+  * Fix regexp for binNMU versions in modules/rules.include (Closes: #524632)
+  * linux-base: Fix bugs and improve libata transition code:
+    - Fix calls to disk_id_to_path (renamed to id_to_path) (Closes: #572283)
+    - Don't show empty list of devices to be relabelled
+    - Don't update udev CD rules unnecessarily
+    - Show the device paths to be added to udev CD rules
+    - Ignore nonexistent devices and properly handle devices of unknown
+      filesystem type (Closes: #572341, #572445)
+    - Don't accept empty filesystem labels as identifiers (Closes: #572438)
+    - For consistency with fresh installations, use or assign UUIDs rather
+      than labels where both are available (Closes: #572376)
+    - Replace CD/DVD/BD device names with udev-provided persistent aliases
+    - Fix update of boot device name for LILO and related loaders
+    - Update uswsusp resume device name
+
+ -- maximilian attems <maks@debian.org>  Thu, 11 Mar 2010 05:58:02 +0100
+
+linux-2.6 (2.6.33-1~experimental.2) experimental; urgency=low
+
+  [ Ben Hutchings ]
+  * Add missing debconf templates for linux-base (Closes: #571558)
+  * Fix libata transition code for GRUB 1 config (Closes: #571662)
+
+ -- maximilian attems <maks@debian.org>  Sun, 28 Feb 2010 17:48:11 +0100
+
+linux-2.6 (2.6.33-1~experimental.1) experimental; urgency=low
+
+  * New upstream release: http://kernelnewbies.org/Linux_2_6_33
+
+  [ maximilian attems]
+  * [topconfig] set BLK_DEV_DRBD, DRM_NOUVEAU, DRM_NOUVEAU_BACKLIGHT,
+    DRM_VMWGFX, SENSORS_LM73, SENSORS_AMC682, SENSORS_LIS3_I2C,
+    SENSORS_MC13783_ADC, TOUCHSCREEN_DYNAPRO, TOUCHSCREEN_MC13783,
+    GIGASET_CAPI, LEDS_DAC124S085, LEDS_INTEL_SS4200, LEDS_INTEL_SS4200,
+    DVB_FIREDTV, DVB_USB_EC168, SOC_CAMERA_MT9T112, SOC_CAMERA_OV9640,
+    USB_GSPCA_PAC7302, USB_GSPCA_STV0680, AD525X_DPOT, CAN_MCP251X,
+    RT2800PCI, REGULATOR_MAX8660, RTC_DRV_BQ32K, RTC_DRV_MSM6242,
+    RTC_DRV_RP5C01, VMWARE_PVSCSI, SCSI_PM8001, WIMAX_IWMC3200_SDIO,
+    INPUT_SPARSEKMAP, SERIO_ALTERA_PS2, MANTIS_CORE, DVB_MANTIS,
+    DVB_HOPPER.
+  * [x86] set CS5535_MFGPT, SENSORS_K10TEMP, GEODE_WDT, MSI_WMI,
+    TOSHIBA_BT_RFKILL, ACPI_CMPC, CRYPTO_GHASH_CLMUL_NI_INTE.
+
+  [ Ben Hutchings ]
+  * Use libata-based drivers for most PATA controllers (Closes: #444182):
+    - pata_triflex replaces triflex
+    - pata_atiixp replaces atiixp
+    - pata_ns87415 replaces ns87415
+    - pata_sc1200 replaces sc1200
+    - pata_cs5536 replaces cs5536
+    - pata_amd replaces amd74xx
+    - pata_sis replaces sis5513
+    - pata_rz1000 replaces rz1000
+    - pata_efar replaces slc90e66
+    - pata_pdc202xx_old replaces pdc202xx_old
+    - pata_pdc2027x replaces pdc202xx_new
+    - pata_cs5520 replaces cs5520
+    - pata_cs5530 replaces cs5530
+    - pata_cmd64x replaces cmd64x
+    - pata_sil680 replaces siimage
+    - pata_ali replaces alim15x3
+    - pata_via replaces via82cxxx
+    - pata_serverworks replaces serverworks
+    - pata_artop replaces aec62xx
+    - pata_it821x replaces it821x
+    - ata_piix, pata_oldpiix, pata_mpiix mostly replace piix
+    - ata_generic, pata_ns87410, pata_netcell replace ide-pci-generic
+  * Add libata transition script
+
+ -- maximilian attems <maks@debian.org>  Thu, 25 Feb 2010 15:21:38 +0100
+
+linux-2.6 (2.6.32-30) unstable; urgency=high
+
+  [ Ben Hutchings ]
+  * mpt2sas: Fix incorrect scsi_dma_map error checking (Closes: #606968)
+  * Update Spanish debconf template translation (Omar Campagne, Javier
+    Fernández-Sanguino) (Really closes: #600694)
+  * intel-iommu: Force-disable IOMMU for iGFX on broken Cantiga revisions
+    (Closes: #607095)
+  * [powerpc] linux-base: Run ybin after updating yaboot.conf
+    (Closes: #607284)
+  * tehuti: Firmware filename is tehuti/bdx.bin
+  * iwlwifi: Reduce a failure-prone memory allocation (Closes: #599345)
+  * linux-base: Look for GRUB 1 configuration in both /boot/grub and
+    /boot/boot/grub (Closes: #607863)
+  * rt28x0: Add ieee80211_regdom module parameter mimicking cfg80211 as a
+    workaround for incorrect region code in NVRAM (Closes: #594561)
+  * btrfs: Require CAP_SYS_ADMIN for filesystem rebalance (Closes: #608185)
+  * [x86] dell-laptop: Enable for some newer Dell models
+  * r8169: Change RTL8111D/RTL8168D initialisation and firmware loading to
+    match upstream version (Closes: #596390 with firmware-realtek 0.28)
+  * Add stable 2.6.32.28:
+    - NFS: Fix panic after nfs_umount()
+    - usb-storage/libusual: Add support for Samsung YP-CP3 MP4 Player,
+      thanks to Vitaly Kuznetsov (Closes: #555835)
+    - bfa: Fix system crash when reading sysfs fc_host statistics
+      (CVE-2010-4343)
+    - IB/uverbs: Handle large number of entries in poll CQ (CVE-2010-4649)
+    - orinoco: Fix TKIP countermeasure behaviour (CVE-2010-4648)
+    - mm: Add security_file_mmap check to install_special_mapping
+      (CVE-2010-4346)
+    - sctp: Fix a race between ICMP protocol unreachable and connect()
+      (CVE-2010-4526)
+    - hvc_console: Fix race between hvc_close and hvc_remove (CVE-2010-2653)
+      (previously applied as an isolated fix in 2.6.32-25)
+    - fuse/cuse: Verify ioctl retries (CVE-2010-4650)
+  * [powerpc] Restore device tree source files to linux-image packages
+    (Closes: #609155)
+
+  [ maximilian attems ]
+  * [openvz] Reenable NF_CONNTRACK_IPV6. (closes: #580507)
+  * cifs: fix another memleak, in cifs_root_iget.
+  * b43: Fix warning at drivers/mmc/core/core.c:237 in mmc_wait_for_cmd.
+  * drm/radeon/kms: MC vram map needs to be >= pci aperture size.
+  * drm/radeon/kms: make sure blit addr masks are 64 bit.
+  * drm/radeon/kms: fix handling of tex lookup disable in cs checker on r2xx.
+  * drm/i915: Free hardware status page on unload when physically mapped.
+  * drm/i915/overlay: Ensure that the reg_bo is in the GTT prior to writing.
+  * drm/radeon/kms/atom: set sane defaults in atombios_get_encoder_mode().
+  * drm/radeon/kms: fix typos in disabled vbios code.
+  * drm/radeon/kms: add workaround for dce3 ddc line vbios bug.
+  * drm/radeon/kms: fix interlaced and doublescan handling.
+  * drm/i915/sdvo: Always add a 30ms delay to make SDVO TV detection reliable.
+  * wireless: b43: fix error path in SDIO.
+  * drm/radeon/kms: don't apply 7xx HDP flush workaround on AGP.
+
+  [ Ian Campbell ]
+  * xen: backport TTM patches to use PCI API. Fixes PCIe GPU (specifically
+    Radeon and Nouveau) on Xen (Closes: #601341).
+  * xen: netback: drop SKBs which are GSO but do not have a partial
+    checksum set (Closes: #608144).
+
+  [ dann frazier ]
+  * exec: make argv/envp memory visible to oom-killer (CVE-2010-4243)
+  * irda: Fix information leak in IRLMP_ENUMDEVICES (CVE-2010-4529)
+  * af_unix: limit unix_tot_inflight (CVE-2010-4249)
+
+  [ Moritz Muehlenhoff ]
+  * net: ax25: fix information leak to userland (CVE-2010-3875)
+  * net: packet: fix information leak to userland (CVE-2010-3876)	
+  * net: tipc: fix information leak to userland (CVE-2010-3877)
+  * inet_diag: Make sure we actually run the same bytecode we audited
+    (CVE-2010-3880)
+  * econet: Fix crash in aun_incoming() (CVE-2010-4342)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 11 Jan 2011 05:42:11 +0000
+
+linux-2.6 (2.6.32-29) unstable; urgency=high
+
+  [ Ben Hutchings ]
+  * megaraid_sas: Add support for 'entry-level' SAS controllers including
+    the 9240 family (Closes: #604083)
+  * tcp: Make TCP_MAXSEG minimum more correct (refinement of fix for
+    CVE-2010-4165)
+  * l2tp: Fix UDP socket reference count bugs in the pppol2tp driver
+    (Closes: #604748)
+  * USB: Retain device power/wakeup setting across reconfiguration;
+    don't enable remote wakeup by default (Closes: #605246)
+  * dm: Deal with merge_bvec_fn in component devices better (Closes: #604457)
+  * Update Spanish debconf template translation (Aaron H Farias Martinez)
+    (Closes: #600694)
+  * perf: Use libiberty, not libbfd, for symbol demangling
+    (Closes: #590226, #606050)
+  * [x86] Add support for Fintek hardware watchdogs (Closes: #601187)
+    - resource: Add shared I/O region support
+    - hwmon: f71882fg: Use a muxed resource lock for the Super I/O port
+    - watchdog: Add f71808e_wdt driver
+  * bcm5974: Add reporting of multitouch events (Closes: #605450)
+  * fusion: Set FUSION_MAX_SGE=128, the upstream default (Closes: #606096)
+  * Add stable 2.6.32.27:
+    - block: limit vec count in bio_kmalloc() and bio_alloc_map_data()
+    - block: take care not to overflow when calculating total iov length
+    - block: check for proper length of iov entries in blk_rq_map_user_iov()
+      (CVE-2010-4163)
+    - net: clear heap allocation for ETHTOOL_GRXCLSRLALL (CVE-2010-3861)
+    - asus_oled: fix up some sysfs attribute permissions
+    - ipc: initialize structure memory to zero for compat functions
+      (CVE-2010-4073)
+    - ipc/shm: fix information leak to userland (CVE-2010-4072)
+    - ipc/sem: sys_semctl: fix kernel stack information leakage (CVE-2010-4083)
+    - tty: prevent DOS in the flush_to_ldisc
+    - [x86] KVM: VMX: Fix host userspace gsbase corruption (Closes: #604956)
+    - KVM: VMX: fix vmx null pointer dereference on debug register access
+      (CVE-2010-0435)
+    - KVM: x86: fix information leak to userland (CVE-2010-3881)
+    - firewire/cdev: fix information leak
+    - firewire-core: fix an information leak
+    - firewire-ohci: fix buffer overflow in AR split packet handling
+    - bio: take care not overflow page count when mapping/copying user data
+      (CVE-2010-4162)
+    - sisusbvga: fix information leak to userland
+    - iowarrior: fix information leak to userland
+    - usb: core: fix information leak to userland
+    - usb-storage/sierra_ms: fix sysfs file attribute
+    - ueagle-atm: fix up some permissions on the sysfs files
+    - cypress_cy7c63: fix up some sysfs attribute permissions
+    - usbled: fix up some sysfs attribute permissions
+    - trancevibrator: fix up a sysfs attribute permission
+    - usbsevseg: fix up some sysfs attribute permissions
+    - do_exit(): make sure that we run with get_fs() == USER_DS (CVE-2010-4258)
+    - DECnet: don't leak uninitialized stack byte
+    - perf_events: Fix perf_counter_mmap() hook in mprotect() (CVE-2010-4169)
+    - frontier: fix up some sysfs attribute permissions
+    - net/sched: fix kernel information leak in act_police
+    - can-bcm: fix minor heap overflow (CVE-2010-3874)
+    - ivtvfb: prevent reading uninitialized stack memory (CVE-2010-4079)
+    - net/sched: fix some kernel information leaks
+  * TTY: Fix error return from tty_ldisc_open() (regression in 2.6.32.27)
+  * filter: make sure filters dont read uninitialized memory (CVE-2010-4158)
+  * posix-cpu-timers: workaround to suppress the problems with mt exec
+    (CVE-2010-4248)
+
+  [ Ian Campbell ]
+  * xen: disable ACPI NUMA for PV guests and allow IRQ desc allocation on any
+    node (Closes: #603632)
+  * xen: handle potential time discontinuity on resume (Closes: #602273)
+  * xen: don't bother to stop other cpus on shutdown/reboot (Closes: #605448)
+  * xen: Add cpu hotplug support to prevent crash while parsing ACPI processor
+    tables (Closes: #602109)
+
+  [ Martin Michlmayr ]
+  * Kirkwood: Add support for 6282 based QNAP devices.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 10 Dec 2010 05:45:11 +0000
+
+linux-2.6 (2.6.32-28) unstable; urgency=high
+
+  [ maximilian attems ]
+  * ipc: initialize structure memory to zero for shmctl.
+  * drm/i915: set DIDL using the ACPI video output device _ADR method return.
+  * images: Nuke modules.devname on removal. (closes: #590607)
+  * Newer Standards-Version 3.9.1 without changes.
+  * drm/ttm: Clear the ghost cpu_writers flag on ttm_buffer_object_transfer.
+  * [openvz] Update upstream patch to 2.6.32-dzhanibekov.
+  * [openvz] ubc: Fix orphan count checks after merge.
+
+  [ Martin Michlmayr ]
+  * Update udlfb to 2.6.37:
+    - udlfb: minor cleanups
+    - udlfb: fix coding style issues
+    - udlfb: fbdev character read and write support
+    - udlfb: add DPMS support
+    - udlfb: remove metrics_misc sysfs attribute
+    - udlfb: revamp reference handling to insure successful shutdown
+    - udlfb: enhance EDID and mode handling support
+    - udlfb: fix big endian rendering error
+    - udlfb: support for writing backup EDID to sysfs file
+    - udlfb: add module options for console and fb_defio
+    - udlfb: fix incorrect fb_defio implementation for multiple framebuffers
+    - udlfb: fix checkpatch and style
+
+  [ Ben Hutchings ]
+  * Update debconf template translations:
+    - Update Japanese (Nobuhiro Iwamatsu) (Closes: #602152)
+    - Update Catalan (Jordi Mallach) (Closes: #602520)
+    - Add Italian (Luca Bruno) (Closes: #602945)
+  * sunrpc: Fix NFS client over TCP hangs due to packet loss (Closes: #589945)
+  * brcm80211: Update to 2.6.37-rc1
+  * [powerpc] ALSA: Fix headphone and line-out detection on PowerMac G4 DA
+    (Closes: #603419)
+  * [x86] snd-hda-codec-cirrus: Add quirks for IMac 27", MacBookPro 5,5 and 7,1
+  * [x86] btusb: Add device IDs for MacBookPro 6,2 and 7,1 (Closes: #603651)
+  * [x86] applesmc: Add support for iMac 9,1 and MacBookPro 2,2, 5,3, 5,4, 6,*
+    and 7,*
+  * [x86] applesmc, bcm5974, btusb, HID, mbp_nvidia_bl, snd-hda-codec-cirrus:
+    Add support for MacBookAir 3,1 and 3,2 (Closes: #603395)
+  * [x86] mbp_nvidia_bl: Add support for MacBookPro 7,1
+  * x25: Fix remote denial-of-service vulnerabilities:
+    - x25 accesses fields beyond end of packet
+    - memory corruption in X.25 facilities parsing (CVE-2010-3873)
+    - Prevent crashing when parsing bad X.25 facilities (CVE-2010-4164)
+  * tcp: Increase TCP_MAXSEG socket option minimum (CVE-2010-4165)
+  * rds: Fix integer overflow in RDS cmsg handling
+  * af_802154,decnet,econet,rds,x25: Disable auto-loading as mitigation
+    against local exploits.  These protocol modules are not widely used
+    and can be explicitly loaded or aliased on systems where they are
+    wanted.
+  * atl1c: Add support for Atheros AR8151 and AR8152 (Closes: #599771)
+  * Add stable 2.6.32.26:
+    - synclink_cs: Fix information leak to userland
+    - bluetooth: Fix missing NULL check
+    - [x86] KVM: VMX: Fix host GDT.LIMIT corruption
+    - [x86] KVM: Fix fs/gs reload oops with invalid ldt (CVE-2010-3698)
+    - gdth: Fix integer overflow in ioctl (CVE-2010-4157)
+  * [x86] KVM: SVM: Fix wrong intercept masks for KVM_{GET,SET}_VCPU_EVENTS
+    on 32 bit, thanks to Philipp Matthias Hahn (Closes: #599507)
+
+  [ dann frazier ]
+  * [vserver] Update patch to 2.6.32.25-vs2.3.0.36.29.6
+  * add qlcnic driver
+  * econet: Avoid stack overflow w/ large msgiovlen (CVE-2010-3848)
+  * econet: disallow NULL remote addr for sendmsg() (CVE-2010-3849)
+  * econet: Add mising CAP_NET_ADMIN check in SIOCSIFADDR (CVE-2010-3850)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 25 Nov 2010 01:20:50 +0000
+
+linux-2.6 (2.6.32-27) unstable; urgency=high
+  
+  * The "We'll Always Have Paris" release
+
+  [ Ben Hutchings ]
+  * rndis_host: Restrict fix for #576929 to specific devices
+    (Closes: #589403, #600660)
+  * Add stable 2.6.32.25:
+    - rme9652: prevent reading uninitialized stack memory
+      (CVE-2010-4080, CVE-2010-4081)
+    - ocfs2: Don't walk off the end of fast symlinks
+    - ip: fix truesize mismatch in ip fragmentation
+    - net: clear heap allocations for privileged ethtool actions
+    - execve: setup_arg_pages: diagnose excessive argument size
+    - execve: improve interactivity with large arguments
+    - execve: make responsive to SIGKILL with large arguments
+    - rose: Fix signedness issues wrt. digi count. (CVE-2010-3310)
+    - ALSA: prevent heap corruption in snd_ctl_new() (CVE-2010-3442)
+    - setup_arg_pages: diagnose excessive argument size (CVE-2010-3858)
+  * btrfs: add a "df" ioctl for btrfs (Closes: #600190)
+  * Update debconf template translations:
+    - Add Catalan (Jordi Mallach) (Closes: #601146)
+    - Add Brazilian Portugese (Flamarion Jorge) (Closes: #601102)
+    - Update Vietnamese (Clytie Siddall) (Closes: #601534)
+  * phonet: device notifier only runs on initial namespace
+    (Really closes: #597904)
+  * net/socket: Limit sendto()/recvfrom() length (CVE-2010-1187)
+    [Original reference is incorrect; should be CVE-2010-3859.]
+
+  [ Ian Campbell ]
+  * xen: import additional fixes for disabling netfront smartpoll mode
+    (Closes: #600992).
+
+  [ dann frazier ]
+  * e1000e: Reset 82577/82578 PHY before first PHY register read
+    (Closes: #601017)
+
+  [ Martin Michlmayr ]
+  * Kirkwood: reset PCIe unit on boot
+  * Kirkwood: restrict the scope of the PCIe reset workaround
+
+  [ maximilian attems ]
+  * Update abi files, readd Xen as ABI stable.
+  * 2.6.33.stable-queue: drm/radeon: fix PCI ID 5657 to be an RV410.
+  * Add drm changes from 2.6.32.24+drm33.11:
+    - i915: return -EFAULT if copy_to_user fails.
+    - drm/i915: Prevent double dpms on
+    - drm: Only decouple the old_fb from the crtc is we call mode_set*
+    - drm/i915: Unset cursor if out-of-bounds upon mode change (v4)
+    - drm/i915,agp/intel: Add second set of PCI-IDs for B43
+  * net: Limit socket I/O iovec total length to INT_MAX. (CVE-2010-1187)
+    [Original reference is incorrect; should be CVE-2010-3859.]
+  * numa: fix slab_node(MPOL_BIND).
+
+ -- maximilian attems <maks@debian.org>  Sat, 30 Oct 2010 12:24:37 +0200
+
+linux-2.6 (2.6.32-26) unstable; urgency=high
+
+  [ Ian Campbell ]
+  * xen: fix PVHVM hang at boot when Xen does not support vector callbacks.
+  * xen: fix race between PV drivers and xenstore initialisation which caused
+    breakage in drivers for both regular PV and PVHVM guests.
+
+  [ maximilian attems ]
+  * [openvz] Enable ioprio. (closes: #596772)
+    Thanks Daniel Hahler <debian-bugs@thequod.de>
+
+  [ Ben Hutchings ]
+  * [x86] radeon: Add quirks to make HP nx6125 and dv5000 laptops resume
+    (Closes: #583968)
+  * dm-crypt: Add 'plain64' IV; this avoids watermarking attacks that are
+    possible with 'plain' IV on devices larger than 2TB (Closes: #600384)
+  * [x86] ahci,ata_generic: let ata_generic handle new MBP w/ MCP89
+    (Closes: #600305)
+  * debian/.../patches.py: Open files as needed, rather than all at once
+    (Closes: #600423)
+  * [openvz] printk: Handle global log buffer reallocation (Closes: #600299)
+  * debian/bin/test-patches: Restrict patches to featureset when building
+    with a featureset (thanks to Tim Small)
+  * sata_via: Delay on vt6420 when starting ATAPI DMA write (Closes: #488566)
+  * r6040: Fix various bugs in r6040_multicast_list() (Closes: #600155)
+
+  [ dann frazier ]
+  * Force enable DMA on MBP w/ MCP 7,1
+  * RDS sockets: remove unsafe kmap_atomic optimization (CVE-2010-3904)
+  * v4l: disable dangerous buggy compat function (CVE-2010-2963)
+
+ -- dann frazier <dannf@debian.org>  Tue, 19 Oct 2010 07:50:55 -0600
+
+linux-2.6 (2.6.32-25) unstable; urgency=high
+
+  [ Ben Hutchings ]
+  * mmc: build fix: mmc_pm_notify is only available with CONFIG_PM=y
+  * Add stable 2.6.32.24 (trivial fix, already applied)
+  * ipg: Remove device claimed by dl2k from pci id table (Closes: #599021)
+  * linux-image: Include modules.order in image packages (Closes: #598518)
+  * [x86] isdn/i4l: Reenable ISDN4Linux drivers, but mark them as staging
+    (Closes: #588551)
+    - hisax: Disable device aliases that conflict with mISDN
+  * Update Danish debconf template translation (Joe Hansen) (Closes: #599457)
+  * [x86] KVM: SVM: Fix wrong intercept masks on 32 bit (Closes: #599507)
+  * e1000: fix Tx hangs by disabling 64-bit DMA (Closes: #518182)
+  * rt2x00: Fix calculation of required TX headroom (Closes: #599395)
+  * Add drm changes from 2.6.32.22+drm33.10:
+    - i915: Don't touch PORT_HOTPLUG_EN in intel_dp_detect()
+    - i915: Kill dangerous pending-flip debugging
+    - radeon: release AGP bridge at suspend
+    - radeon: initialize set_surface_reg for rs600 asic
+  * [x86] toshiba_acpi: Add full hotkey support (Closes: #599768)
+
+  [ Stephen R. Marenka ]
+  * m68k: fix missing io macros.
+  * m68k: modular swim on mac.
+  * m68k: never build staging drivers on m68k.
+  * m68k: build in rtc class on atari.
+
+  [ Ian Campbell ]
+  * xen: do not truncate machine address on gnttab_copy_grant_page hypercall
+    (Closes: #599089)
+
+  [ dann frazier ]
+  * drm/i915: Sanity check pread/pwrite (CVE-2010-2962)
+  * drm/i915: Rephrase pwrite bounds checking to avoid any potential overflow
+  * GFS2: Fix writing to non-page aligned gfs2_quota structures (CVE-2010-1436)
+  * hvc_console: Fix race between hvc_close and hvc_remove (CVE-2010-2653)
+  * net sched: fix some kernel memory leaks (CVE-2010-2942)
+  * niu: Fix kernel buffer overflow for ETHTOOL_GRXCLSRLALL (CVE-2010-3084)
+  * rose: Fix signedness issues wrt. digi count (CVE-2010-3310)
+  * Fix pktcdvd ioctl dev_minor range check (CVE-2010-3437)
+  * ALSA: prevent heap corruption in snd_ctl_new() (CVE-2010-3442)
+  * net sched: fix kernel leak in act_police (CVE-2010-3477)
+  * sctp: Fix out-of-bounds reading in sctp_asoc_get_hmac() (CVE-2010-3705)
+
+ -- dann frazier <dannf@debian.org>  Thu, 14 Oct 2010 01:08:05 -0600
+
+linux-2.6 (2.6.32-24) unstable; urgency=high
+
+  [ Ben Hutchings ]
+  * speakup: Update to match Debian package version 3.1.5.dfsg.1-1
+  * scsi_dh_emc: Fix mode select request setup (Closes: #591540)
+  * snd-hda-codec-via: Fix syntax error when CONFIG_SND_HDA_POWER_SAVE is
+    disabled (Closes: #597043)
+  * Add stable 2.6.32.22:
+    - [vserver] Revert sched changes since they conflict.
+  * Recommend use of 'make deb-pkg' to build custom kernel packages
+  * [x86] Revert "i915: Blacklist i830, i845, i855 for KMS". The current X
+    driver (xserver-xorg-video-intel version 2.12.0+shadow-1) should work
+    properly with KMS on these chips. (Closes: #596453)
+  * phonet: Restrict to initial namespace (Closes: #597904)
+  * Add stable 2.6.32.23:
+    - serial/mos*: prevent reading uninitialized stack memory
+    - net: Fix oops from tcp_collapse() when using splice()
+    - rds: fix a leak of kernel memory
+    - hso: prevent reading uninitialized memory (CVE-2010-3298)
+    - cxgb3: prevent reading uninitialized stack memory (CVE-2010-3296)
+    - eql: prevent reading uninitialized stack memory (CVE-2010-3297)
+    - vt6655: fix buffer overflow
+    - net/llc: make opt unsigned in llc_ui_setsockopt()
+    - sisfb: prevent reading uninitialized stack memory
+    - aio: check for multiplication overflow in do_io_submit (CVE-2010-3067)
+    - xfs: prevent reading uninitialized stack memory (CVE-2010-3078)
+    - viafb: prevent reading uninitialized stack memory
+    - [hppa,ia64] mm: guard page for stacks that grow upwards (CVE-2010-2240)
+    - sctp: Do not reset the packet during sctp_packet_config()
+      (CVE-2010-3432)
+  * xen: Fix typo in xen_percpu_chip definition
+  * 3c59x: Remove incorrect locking (Closes: #598103)
+  * f71882fg: Add support for the f71889fg (Closes: #597820)
+  * drm/radeon: Fix regressions introduced in 2.6.34.3 (Closes: #597636)
+  * mmc: fix hangs related to mmc/sd card insert/removal during suspend/resume
+    (Closes: #598147)
+
+  [ Martin Michlmayr ]
+  * ARM: update mach types.
+  * [armel/config.kirkwood] Enable MACH_DOCKSTAR.
+
+  [ Ian Campbell ]
+  * [x86/xen] Disable netfront's smartpoll mode by default. (Closes: #596635)
+
+  [ maximilian attems ]
+  * [openvz] Update upstream patch to 2.6.32-dyomin.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 30 Sep 2010 00:46:16 +0100
+
+linux-2.6 (2.6.32-23) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * cgroupfs: create /sys/fs/cgroup to mount cgroupfs on (Closes: #595964)
+  * r8169: Fix MDIO timing (Closes: #583139; mistakenly reverted in 2.6.32-19)
+  * gro: Fix bogus gso_size on the first fraglist entry (Closes: #596802)
+  * vgaarb: Fix VGA arbiter to accept PCI domains other than 0 (from stable
+    2.6.32.12; mistakenly omitted in 2.6.32-12)
+
+  [ maximilian attems ]
+  * openvz: cfq-iosched: do not force idling for sync workload.
+
+  [ Stephen R. Marenka ]
+  * m68k: switch to generic siginfo layout.
+  * m68k: NPTL support.
+
+  [ dann frazier ]
+  * compat: Make compat_alloc_user_space() incorporate the access_ok()
+    (CVE-2010-3081)
+  * x86-64, compat (CVE-2010-3301):
+    - Retruncate rax after ia32 syscall entry tracing
+    - Test %rax for the syscall number, not %eax
+  * wireless extensions: fix kernel heap content leak (CVE-2010-2955)
+  * KEYS (CVE-2010-2960):
+    - Fix RCU no-lock warning in keyctl_session_to_parent()
+    - Fix bug in keyctl_session_to_parent() if parent has no session keyring
+
+ -- dann frazier <dannf@debian.org>  Fri, 17 Sep 2010 15:27:04 -0600
+
+linux-2.6 (2.6.32-22) unstable; urgency=low
+
+  [ Ian Campbell ]
+  * xen: backport pvhvm drivers from upstream.
+  * Fixes/overrides for Lintian warnings:
+    - Add "(meta package)" to short description of linux-headers
+      metapackages, resolves empty-binary-package.
+    - Add dependency on ${misc:Depends} to all packages, resolves
+      debhelper-but-no-misc-depends. Required update to gencontrol.py to
+      augment rather than override headers_arch_depends read from templates.
+    - Override dbg-package-missing-depends for linux-image-*-dbg. It is not
+      necessary to install the kernel image package to use the dbg package
+      since the dbg package already contains a complete image with symbols.
+
+  [ Ben Hutchings ]
+  * [x86/xen] Restore stack guard page (CVE-2010-2240)
+  * Add stable 2.6.32.21:
+    - ext4: consolidate in_range() definitions (CVE-2010-3015)
+    - mm: make the mlock() stack guard page checks stricter
+      (avoids regression for Xen tools; closes: 594756)
+    - [sparc] sunxvr500: Ignore secondary output PCI devices
+      (Closes: #594604)
+    - ocfs2: fix o2dlm dlm run purgelist (Closes: #593679)
+    - Avoid ABI change in mm
+    - Ignore ABI change in snd-emu10k1
+  * Add drm changes from stable 2.6.34.6:
+    - drm: stop information leak of old kernel stack (CVE-2010-2803)
+  * rt2870sta: Add more device IDs from vendor drivers
+  * rt2860sta, rt2870sta: Enable channels 12-14 (Closes: #594561)
+  * SCSI/mptsas: fix hangs caused by ATA pass-through (Closes: #594690)
+  * sky2: Apply fixes and new hardware support from 2.6.33-2.6.35
+    (Closes: #571526)
+  * postinst: Really warn users on upgrade if the current configuration may
+    rely on running a default boot loader.
+  * input: add compat support for sysfs and /proc capabilities output
+    (Closes: #579017)
+  * snd-hda-intel: Add support for VIA V1708S, VT1718S, VT1828S, VT2020,
+    VT1716S, VT2002P, VT1812, VT1818S
+  * hwmon/w83627ehf: Add support for W83667HG-B
+  * 3c59x: Fix deadlock in vortex_error() (Closes: #595554)
+  * [x86] paravirt: Add a global synchronization point for pvclock (from
+    2.6.32.16; reverted due to a regression which was addressed in 2.6.32.19)
+  * sched, cputime: Introduce thread_group_times() (from 2.6.32.19; reverted
+    due to the potential ABI change which we now carefully avoid)
+  * net/{tcp,udp,llc,sctp,tipc,x25}: Add limit for socket backlog
+    (Closes: #592187)
+  * tun: Don't add sysfs attributes to devices without sysfs directories
+    (Closes: #594845)
+  * [x86] Add brcm80211 driver for Broadcom 802.11n wireless network
+    controllers
+  * r8169: Remove MODULE_FIRMWARE declarations since the firmware is
+    non-essential and we do not distribute it
+  * [x86] HPET: unmap unused I/O space
+  * ipheth: add support for iPhone 4
+  * ipheth: remove incorrect devtype of WWAN
+  * ALSA: emux: Add trivial compat ioctl handler (Closes: #596478)
+  * hostap_pci: set dev->base_addr during probe (Closes: #595802)
+  * ethtool: allow non-netadmin to query settings (see #520724)
+  * ACPI: add boot option acpi=copy_dsdt to fix corrupt DSDT, and enable this
+    automatically for known-bad Toshiba models (Closes: #596709)
+
+  [ Bastian Blank ]
+  * Use Breaks instead of Conflicts.
+
+  [ Aurelien Jarno ]
+  * [mips,mipsel] Fix computation of DMA flags from device's 
+    coherent_dma_mask.
+
+  [ Martin Michlmayr ]
+  * Add some patches from the Orion tree:
+    - OpenRD: Enable SD/UART selection for serial port 1
+    - kirkwood: Unbreak PCIe I/O port
+    - Kirkwood: support for Seagate DockStar
+
+  [ dann frazier ]
+  * netxen_nic: add support for loading unified firmware images
+  * irda: Correctly clean up self->ias_obj on irda_bind() failure.
+    (CVE-2010-2954)
+
+  [ maximilian attems ]
+  * [powerpc] Enable WINDFARM_PM121. (closes: #596515)
+    Thanks Étienne BERSAC <bersace03@gmail.com>
+  * nouveau: disable acceleration on NVA3/NVA5/NVA8 by default.
+  * openvz: disable KSM. Thanks Dietmar Maurer <dietmar@proxmox.com>.
+    (closes: #585864)
+  * Update openvz patch to d38b56fd0dca.
+  * openvz: enalbe modular VZ_EVENT.
+
+ -- maximilian attems <maks@debian.org>  Tue, 14 Sep 2010 14:17:11 +0200
+
+linux-2.6 (2.6.32-21) unstable; urgency=high
+
+  [ Ben Hutchings ]
+  * Add stable 2.6.32.19:
+    - ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files
+      (CVE-2010-2066)
+    - mm: keep a guard page below a grow-down stack segment (CVE-2010-2240)
+      (not applied to xen featureset)
+    - md/raid10: fix deadlock with unaligned read during resync
+      (Closes: #591415)
+    - Revert "sched, cputime: Introduce thread_group_times()" which would
+      result in an ABI change
+  * Add stable 2.6.32.20:
+    - Fix regressions introduced by original fix for CVE-2010-2240
+  * Add drm and other relevant changes from stable 2.6.34.4
+  * Add 'breaks' relation from image packages to boot loader packages that
+    do not install required hooks (Closes: #593683)
+  * [x86] i915: Blacklist i830, i845, i855 for KMS
+    (Closes: #568207, #582105, #593432, #593507)
+
+  [ Bastian Blank ]
+  * Update Xen patch.
+    - Notify Xen on crash.
+    - Several blktap fixes.
+
+  [ Ritesh Raj Sarraf ]
+  * Add .gnu_debuglink information into kernel modules (Closes: #555549)
+
+  [ Ian Campbell ]
+  * [x86/xen] temporarily remove stack guard page, it breaks the xen
+    toolstack.
+
+  [ Aurelien Jarno ]
+  * [mips,mipsel] Fix 64-bit atomics.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 25 Aug 2010 01:06:18 +0100
+
+linux-2.6 (2.6.32-20) unstable; urgency=low
+
+  [ Moritz Muehlenhoff ]
+  * Backport XVR1000 driver (Closes: #574243)
+
+  [ Ben Hutchings ]
+  * Add stable 2.6.32.18:
+    - CIFS: Fix compile error with __init in cifs_init_dns_resolver()
+      definition (FTBFS for most architectures)
+    - GFS2: rename causes kernel Oops (CVE-2010-2798)
+    - xfs: prevent swapext from operating on write-only files
+      (CVE-2010-2226)
+  * Update debconf template translations:
+    - Swedish (Martin Bagge) (Closes: #592045)
+    - German (Holger Wansing) (Closes: #592226)
+  * [i386/openvz-686] Remove AMD Geode LX and VIA C3 "Nehemiah" from the
+    list of supported processors; they do not implement PAE
+  * V4L/DVB: Add Elgato EyeTV Diversity to dibcom driver (Closes: #591710)
+  * [s390] dasd: use correct label location for diag fba disks
+    (Closes: #582281)
+  * Add drm changes from stable 2.6.34.2 (thanks to Stefan Bader) and
+    2.6.34.3
+  * drm/i915: disable FBC when more than one pipe is active
+    (Closes: #589077)
+  * IB/ipath: Fix probe failure path (Closes: #579393)
+  * ext4: fix freeze deadlock under IO (regression introduced in 2.6.32.17)
+  * xen: Completely disable use of XSAVE (Closes: #592428)
+
+  [ Martin Michlmayr ]
+  * [armel/orion5x] Add a missing #include to fix a build issue.
+  * [armel/kirkwood, armel/orion5x] Build-in support for more devices.
+
+  [ dann frazier ]
+  * can: add limit for nframes and clean up signed/unsigned variables
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 12 Aug 2010 03:26:39 +0100
+
+linux-2.6 (2.6.32-19) unstable; urgency=low
+
+  [ maximilian attems ]
+  * inotify send IN_UNMOUNT events.
+  * inotify fix oneshot support.
+
+  [ Ben Hutchings ]
+  * linux-base: Remove dependency on libapt-pkg-perl (Closes: #589996)
+  * pata_pdc202xx_old: Fix UDMA mode for PDC2024x and PDC2026x controllers
+    (Closes: #590532)
+  * Update debconf template translations:
+    - Czech (Michal Simunek) (Closes: #590546)
+    - Portugese (Américo Monteiro) (Closes: #590557)
+    - French (David Prévot) (Closes: #591149)
+    - Russian (Yuri Kozlov) (Closes: #591241)
+  * Add stable 2.6.32.17:
+    - ethtool: Fix potential kernel buffer overflow in ETHTOOL_GRXCLSRLALL
+      (CVE-2010-2478)
+    - GFS2: Fix up system xattrs (CVE-2010-2525)
+    - Revert ABI changes in firmware_class and ssb
+    - Ignore ABI changes in acpi_processor, hostap and jbd2
+  * Add drm changes from stable 2.6.33.7:
+    - drm/i915: Enable low-power render writes on GEN3 hardware (915, 945,
+      G33 and Atom "Pineview") (Closes: #590193, maybe others)
+  * [i386/xen-686] Remove AMD Geode LX and VIA C3 "Nehemiah" from the list
+    of supported processors; they do not implement PAE
+  * [x86] Add samsung-laptop driver
+
+  [ dann frazier ]
+  * [ia64] Fix crash when gcore reads gate area (Closes: #588574)
+
+  [ Bastian Blank ]
+  * Update Xen patch.
+    - Ignore ABI changes.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 05 Aug 2010 02:43:19 +0100
+
+linux-2.6 (2.6.32-18) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * iwlwifi: Allocate pages for RX buffers, reducing the probability of
+    allocation failure (Closes: #580124)
+  * postinst: Remove support for 'default' boot loaders. Warn users on
+    upgrade if the current configuration may rely on this.
+  * rt2860sta, rt2870sta: Apply changes from Linux 2.6.33 and 2.6.34
+    - rt2860sta: Fix WPA(2)PSK issue when group cipher of AP is WEP40
+      or WEP104 (Closes: #574766)
+  * rt3090sta: Replace with rt2860sta (Closes: #588863)
+  * [i386/686] Remove AMD K6 from the list of supported processors; it
+    does not implement the CMOV instruction
+  * drm/i915: Add 'reclaimable' to i915 self-reclaimable page allocations
+    (really closes: #534422, we hope)
+  * Revert "x86, paravirt: Add a global synchronization point for pvclock",
+    included in stable 2.6.32.16 (Closes: #588426)
+  * 3c59x: Fix call to mdio_sync() with the wrong argument (Closes: #589989)
+
+  [ Martin Michlmayr ]
+  * Add some patches from the Orion tree, including support for Marvell's
+    Armada 300 (88F6282):
+    - Kirkwood: update MPP definition.
+    - Kirkwood: fix HP t5325 after updating MPP definitions
+    - leds: leds-gpio: Change blink_set callback to be able to turn off
+      blinking
+    - net/phy/marvell: Expose IDs and flags in a .h and add dns323 LEDs
+      setup flag
+    - orion5x: Base support for DNS-323 rev C1
+    - orion5x: Fix soft-reset for some platforms
+    - mtd: orion/kirkwood: add RnB line support to orion mtd driver
+    - mtd: kirkwood: allow machines to register RnB callback
+    - Kirkwood: add support for rev A1 of the 88f6192 and 88f6180 chips
+    - Kirkwood: Add support for 88f6282
+    - PCI: add platform private data to pci_sys_data
+    - Kirkwood: add support for PCIe1
+    - Kirkwood: more factorization of the PCIe init code
+
+  [ maximilian attems ]
+  * sched: Fix over-scheduling bug.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 23 Jul 2010 03:48:08 +0100
+
+linux-2.6 (2.6.32-17) unstable; urgency=low
+
+  [ maximilian attems ]
+  * agp: add no warn since we have a fallback to vmalloc paths.
+
+  [ Ben Hutchings ]
+  * linux-tools: Fix build for hppa and do not attempt to build for
+    architectures where perf events are not available (Closes: #588409)
+  * linux-tools: Add build-dependency on binutils-dev to enable symbol
+    demangling in perf
+  * drm/i915: Fix memory corruption on resume from hibernation
+    (Closes: #534422)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 10 Jul 2010 16:40:38 +0100
+
+linux-2.6 (2.6.32-16) unstable; urgency=low
+
+  [ dann frazier ]
+  * [hppa] clear floating point exception flag on SIGFPE signal
+    (Closes: #559406)
+
+  [ Ben Hutchings ]
+  * Add stable 2.6.32.15
+  * Add mantis and hopper DVB drivers with mb86a16 and tda665x DVB
+    front-ends, backported by Bjørn Mork (Closes: #577264)
+  * Build inet_lro as a module
+  * [sparc] Enable CONFIG_FB_XVR500, CONFIG_FB_XVR2500 (Closes: #508108)
+  * Update Spanish debconf templates, thanks to Omar Campagne
+    (Closes: #580538)
+  * Revert "Add EC path for Thinkpad X100."; it is incomplete and broken
+  * sctp: fix append error cause to ERROR chunk correctly (regression due
+    to fix for CVE-2010-1173)
+  * [powerpc] Enable pata_amd driver, replacing amd74xx
+  * eeepc-laptop: Disable wireless hotplug on more models where the
+    controller is not at the expected address (Closes: #576199)
+  * [mips] Fix boot from ATA hard drives (Closes: #584784):
+    - Set io_map_base for several PCI bridges lacking it
+    - Replace per-platform built-in IDE drivers with libata-based drivers
+    - Enable BLK_DEV_SD as built-in on all platforms
+  * Revert "vlan/macvlan: propagate transmission state to upper layers"
+    (Closes: #585770)
+  * linux-base: Don't identify LVM2 PVs by UUID (Closes: #585852)
+  * usb-serial: Add generic USB WWAN code, backported by Mark Hymers
+    (Closes: #585661)
+    - option, qcserial: Use generic USB WWAN code
+    - qcserial: Add support for Qualcomm Gobi 2000 devices
+  * radeon: Fix MacBook Pro connector quirk (Closes: #585943)
+  * r8169: Fix MDIO timing (Closes: #583139)
+  * Move NEWS to linux-latest-2.6 (Closes: #586401)
+  * 3c59x: Change locking to avoid use of disable_irq() (Closes: #586967)
+  * Enable IPv6 support for IPVS (IP_VS_IPV6) (Closes: #584549)
+  * Revert "tpm: autoload tpm_tis based on system PnP IDs", included in
+    stable 2.6.32.12 (Closes: #584273)
+  * linux-base: If the disk ID update process fails, give the user a
+    chance to retry or change their answers (Closes: #585609)
+  * asix: fix setting mac address for AX88772 (Closes: #587580)
+  * ipv6: Clamp reported valid_lft to a minimum of 0 (Closes: #514644)
+  * ipv6: Use interface max_desync_factor instead of static default
+    (Closes: #514646)
+  * Add stable 2.6.32.16:
+    - Fixes CVE-2010-1641, CVE-2010-1187, CVE-2010-1148, CVE-2010-1173
+      and CVE-2010-2071
+    - libata: disable ATAPI AN by default (Closes: #582737, #582903)
+  * Add drm changes from stable 2.6.33.6
+  * [ia64, powerpc, sparc, x86] Enable KPROBES and KRETPROBES
+    (Closes: #584130)
+  * r8192s_usb: Fix various bugs:
+    - Check for skb allocation failure in 2 more places
+    - Update LED control code
+    - Clean up in case of an error in module initialisation
+    - Rename and remove proc directories correctly if an interface is
+      not called wlan0 (Closes: #582972)
+    - Correct device ID table (Closes: #584945, #587985)
+  * Add r8192u_usb driver
+  * Add linux-tools-<version> package containing the perf tool
+    (Closes: #548715)
+  * Enable USB_SERIAL_TI (Closes: #588096) and USB_SERIAL_WHITEHEAT
+
+  [ Aurelien Jarno ]
+  * [sh4] optimize runtime disabling of trapped I/O. 
+  * [mips] backport mips/swarm: fix M3 TLB exception handler.
+
+  [ Moritz Muehlenhoff ]
+  * Enable X86 board specific fixups for reboot (Closes: #536537)
+
+  [ Martin Michlmayr ]
+  * OpenRD-Base: revert patch "allow SD/UART1 selection" since it
+    never made it upstream.
+  * ARM: update mach types.
+  * Add support for OpenRD-Ultimate.
+  * QNAP TS-11x/TS-21x: Add MPP36 (RAM) and MPP44 (board ID).
+  * Add support for the HP t5325 Thin Client.
+  * m25p80: Add support for Macronix 25L8005.
+  * Add framebuffer driver for XGI chipsets.
+  * [armel/kirkwood] Enable FB_XGI and FRAMEBUFFER_CONSOLE.
+  * [armel] Make MOUSE_PS2 modular.
+  * [armel] Build INPUT_UINPUT for all flavours.
+  * Update Marvell CESA (mv_cesa) driver (Closes: #585790):
+    - Invoke the user callback from a softirq context
+    - Remove compiler warning in mv_cesa driver
+    - Fix situation where the dest sglist is organized differently than...
+    - Fix situations where the src sglist spans more data than the reques...
+    - Enqueue generic async requests
+    - Rename a variable to a more suitable name
+    - Execute some code via function pointers rathr than direct calls
+    - Make the copy-back of data optional
+    - Support processing of data from previous requests
+    - Add sha1 and hmac(sha1) async hash drivers
+  * Update DisplayLink (udlfb) driver:
+    - add dynamic modeset support
+    - checkpatch cleanup
+    - reorganize function order
+    - pre-allocated urb list helpers
+    - clean up function naming
+    - Add functions to expose sysfs metrics and controls
+    - Rework startup and teardown to fix race conditions
+    - improved rendering performance
+    - Support for fbdev mmap clients (defio)
+    - explicit dependencies and warnings
+    - remove printk and small cleanup
+  * [armel/kirkwood] Enable FB_UDL.
+  * [armel] Disable PARPORT_PC (Closes: #588164)
+
+  [ Bastian Blank ]
+  * Disable mISDN support for NETJet cards. The driver binds a generic PCI
+    bridge.
+  * Disable ISDN4Linux drivers.
+
+  [ maximilian attems]
+  * Update openvz patch to 5fd638726a69.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Mon, 05 Jul 2010 22:13:33 +0100
+
+linux-2.6 (2.6.32-15) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * [hppa] Ignore ABI change caused by disabling CONFIG_IDE_TIMINGS
+  * [powerpc] Fix unnecessary ABI change
+
+  [ Bastian Blank ]
+  * xen: Fix crash in netback.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Tue, 01 Jun 2010 01:31:05 +0100
+
+linux-2.6 (2.6.32-14) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * [ia64] Hardcode the output of the scripts under arch/ia64/scripts so
+    that we can build out-of-tree modules correctly (refresh and re-add
+    dropped patch) (Closes: #392592)
+  * vlan/macvlan: propagate transmission state to upper layers
+  * macvlan: add GRO bit to features mask
+  * macvlan: allow multiple driver backends
+  * Add macvtap driver (Closes: #568755)
+  * [ia64] Enable SGI SN support and mspec driver (Closes: #582224)
+  * iwlwifi: Disable QoS when connected to a non-QoS-capable AP
+    (Closes: #578262)
+  * [x86] Disable e_powersaver cpufreq driver as unsafe. It has already
+    been blacklisted by cpufrequtils. The acpi-cpufreq driver can be used
+    instead on some VIA C7 systems. (Closes: #566208)
+  * nouveau: Fix fbcon corruption with font width not divisible by 8
+    (Closes: #583162)
+  * [amd64] ext4: Fix compat EXT4_IOC_ADD_GROUP (used by online resize)
+  * Install debug kernel image in /usr/lib/debug/boot (Closes: #582810)
+  * net: sysfs: Check for null ethtool_ops before getting speed/duplex
+  * Add stable 2.6.32.14:
+    - [hppa] Revert "parisc: Set PCI CLS early in boot.", erroneously
+      included in 2.6.32.13 causing FTBFS
+    - btrfs: check for read permission on src file in the clone ioctl
+      (CVE-2010-1636)
+
+  [ Bastian Blank ]
+  * Update Xen patch.
+    - Fix checksum offloading in netback. (closes: #583366)
+
+  [ maximilian attems]
+  * Add drm changes from stable 2.6.33.5:
+    - i915: Disable FBC on 915GM and 945GM (Closes: #582427)
+  * Update openvz patch to e7399c239fad.
+
+  [ Martin Michlmayr ]
+  * QNAP TS-419P: Export GPIO indicating jumper setting of JP1.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 29 May 2010 00:32:44 +0100
+
+linux-2.6 (2.6.32-13) unstable; urgency=low
+
+  [ Frederik Schueler ]
+  * sparc: Fix use of uid16_t and gid16_t in asm/stat.h
+
+  [ Moritz Muehlenhoff ]
+  * Enable tomoyo (Closes: #562486)
+
+  [ maximilian attems]
+  * backport KVM: x86: Extend KVM_SET_VCPU_EVENTS with selective updates.
+    (closes: #580652)
+  * KEYS: find_keyring_by_name() can gain access to a freed keyring.
+    CVE-2010-1437
+  * hppa, sparc, powerpc disable BLK_DEV_CMD64X.
+  * topconfig enable PATA_CMD64X. (closes: #580799)
+  * x86: Disable CRYPTO_AES_NI_INTEL as it causes boot failures on T410.
+  * Add stable 2.6.32.13:
+    - [SCSI] Enable retries for SYNCRONIZE_CACHE commands to fix I/O error.
+    - [SCSI] Retry commands with UNIT_ATTENTION sense codes to fix ext3/ext4
+      I/O errors.
+    - [SCSI] skip sense logging for some ATA PASS-THROUGH cdbs
+      (Closes: #578129)
+    - raid6: fix recovery performance regression.
+    - raid456: Enable error-correction on singly-degraded RAID6
+      (Closes: #581392)
+    - r8169: fix broken register writes (Closes: #407217, #573007)
+    - V4L/DVB: budget: Fix crash in case of failure to attach frontend
+      (Closes: #575207)
+  * drm/edid: Fix 1024x768@85Hz.
+
+  [ Ben Hutchings ]
+  * linux-base: Fix typo in disk relabelling code (Closes: #580467)
+  * linux-base: Don't quote boot device name in elilo.conf
+    (Closes: #580710; works-around: #581173)
+  * rtl8192su: Add IDs for several more devices (Closes: #580740)
+  * Add drm and sfc changes from stable 2.6.33.4
+  * Improve workaround for HPAs (Host Protected Areas) overlapping
+    partitions, thanks to Tejun Heo:
+    - SCSI/libata: Disable HPA if it overlaps a partition (Closes: #572618)
+    - buffer: Make invalidate_bdev() drain all percpu LRU add caches
+    - block: Rescan partition tables after HPA is disabled
+    - libata: Disable HPA if it is only enabled after suspend
+  * V4L/DVB: budget: Select correct frontend drivers (Closes: #575223)
+  * 3c503: Fix IRQ probing (Closes: #566522)
+  * sis-agp: Remove SIS 760, handled by amd64-agp
+  * amd64-agp: Probe unknown AGP devices the right way (Closes: #548090)
+
+  [ Aurelien Jarno ]
+  * mips/swarm: fix boot from IDE based media (Sebastian Andrzej Siewior)
+    (closes: #466977).
+  * backport mips/swarm: fix M3 TLB exception handler.
+    [This patch was actually reverted and never applied in version 2.6.32-13]
+  * backport MIPS FPU emulator: allow Cause bits of FCSR to be writeable
+    by ctc1. (closes: #580602).
+  * mips/swarm: enable adm* hwmon drivers.
+  * backport Input: Add support of Synaptics Clickpad device (Closes: #572842)
+
+  [ Bastian Blank ]
+  * Fix symlinks in several packages.
+  * Update Xen patch.
+  * [amd64, i386/{686-bigmem,openvz-686,vserver-686-bigmem,xen-686}]
+    Build debugging symbols. (closes: #365349)
+  * Ignore crypto ABI changes.
+
+  [ Martin Michlmayr ]
+  * Backport GuruPlug support.
+
+  [ Christian Perrier ]
+  * Update debconf templates:
+    - English revised by the debian-l10n-english team as part of the Smith
+      review project (Closes: #578349)
+    - Vietnamese (Clytie Siddall) (Closes: #579234)
+    - German (Holger Wansing) (Closes: #579864)
+    - Russian (Yuri Kozlov) (Closes: #578994)
+    - Estonian (mihkel) (Closes: #579019)
+    - Czech (Michal Simunek) (Closes: #579268)
+    - Swedish (Martin Bagge) (Closes: #579308)
+    - French (David Prévot) (Closes: #579763)
+    - Spanish (Omar Campagne) (Closes: #580538)
+    - Portuguese (Américo Monteiro) (Closes: #577227)
+    - Japanese (Kenshi Muto) (Closes: #580855)
+    - Danish (Joe Hansen) (Closes: #580915)
+    - Czech (Michal Simunek) (Closes: #581399)
+
+ -- maximilian attems <maks@debian.org>  Mon, 17 May 2010 15:29:27 +0200
+
+linux-2.6 (2.6.32-12) unstable; urgency=low
+
+  * The "Microwave Background" release
+
+  [ Ben Hutchings ]
+  * Prepare debconf templates for translation. (closes: #576758)
+  * [x86] PCI/forcedeth: Disable MSI for MCP55 on P5N32-E SLI
+    (Closes: #552299)
+  * phylib: Fix typo in bcm63xx PHY driver table
+  * linux-base: Fix bugs and improve libata transition code:
+    - Fix scope of _system() function (Closes: #576925)
+    - Fix case where a file may wrongly be listed as automatically converted
+      (Closes: #577047)
+    - Check device IDs in mdadm.conf rather than assuming it needs manual
+      conversion
+    - Use vol_id if available since the version of blkid in lenny does not
+      support the output format we need (Closes: #576608)
+    - Fix missing line breaks in updated crypttab (Closes: #577735)
+  * i915: Stop trying to use ACPI lid status to determine LVDS connection
+    (Closes: #577724)
+  * forcedeth: Fix hardware version check for TX bug workaround
+    (Closes: #572201)
+  * rndis_host: Poll status channel before control channel (Closes: #576929)
+  * megaraid_sas: Fix copying of sense data for 32-bit management tools on
+    64-bit kernel (Closes: #578398)
+  * Add ipheth driver for iPhone tethering
+  * virtio_net: Make delayed refill more reliable (Closes: #576838)
+
+  [ maximilian attems]
+  * [ia64] Built in fbcon.
+  * Update openvz patch to c05f95fcb04e. (closes: #574598)
+  * Reenable nouveau autoloading.
+  * reiserfs: Fix permissions on .reiserfs_priv. CVE-2010-1146
+  * libata,ata_piix: detect and clear spurious IRQs.
+  * libata/SCSI: fix locking around blk_abort_request().
+  * topconfig enable NET_DROP_MONITOR. (closes: #578568)
+  * Add stable 2.6.32.12:
+    - ACPI: EC: Allow multibyte access to EC; fixes temperature monitoring
+      on some Dell laptops (Closes: #563313)
+    - [x86] KVM: disable paravirt mmu reporting (Closes: #573071)
+    - thinkpad-acpi: lock down video output state access (Closes: #565790)
+    - xfs update (closes: #579410)
+  * Add drm changes from stable 2.6.33.3:
+    - drm/radeon: R300 AD only has one quad pipe (Closes: #575681)
+  * libata: Fix accesses at LBA28 boundary (old bug, but nasty) (v2)
+  * Add EC path for Thinkpad X100.
+  * Bump ABI to 5, apply:
+    - hrtimer: Tune hrtimer_interrupt hang logic
+  * Add libata TRIM support.
+  * Backport radeon r800 modesetting support.
+  * drm/radeon/kms: further spread spectrum fixes.
+  * Backport p54 fixes.
+  * net: export device speed and duplex via sysfs.
+  * postrm: rm modules.softdep. (closes: #579175)
+  * Backport KVM: Xen PV-on-HVM guest support.
+  * Backport KVM: x86: Add KVM_GET/SET_VCPU_EVENTS.
+  * hugetlb: fix infinite loop in get_futex_key() when backed by huge pages
+  * ext4: Issue the discard operation *before* releasing the blocks to be
+    reused.
+  * libiscsi: regression: fix header digest errors.
+  * Revert module.c and module.h changes from -stable update.
+
+  [ dann frazier ]
+  * Add DRBD backport
+  * sctp: Fix skb_over_panic resulting from multiple invalid parameter
+    errors (CVE-2010-1173)
+  * [CIFS] Allow null nd (as nfs server uses) on create (CVE-2010-1148)
+  * tipc: Fix oops on send prior to entering networked mode (CVE-2010-1187)
+  * [powerpc] KGDB: don't needlessly skip PAGE_USER test for Fsl booke
+    Note: KGDB is not currently enabled in debian builds (CVE-2010-1446)
+
+  [ Aurelien Jarno ]
+  * [sh4] Add a sh7751r flavour.
+  * [mips/*malta] Remove options that are present in topconfig.
+
+  [ Martin Michlmayr ]
+  * dns323-setup.c: fix WARN() when booting (Arnaud Patard).
+  * mips: enable PATA platform on SWARM and LITTLESUR (Sebastian Andrzej
+    Siewior).
+  * [mips/sb1-bcm91250a] Enable PATA_PLATFORM.
+
+  [ Bastian Blank ]
+  * Update Xen patch.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 01 May 2010 02:58:31 +0100
+
+linux-2.6 (2.6.32-11) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * [sparc] Provide io{read,write}{16,32}be() (Closes: #574421)
+  * Use libata-based drivers for most PATA controllers on all architectures
+    (previously applied only to x86)
+  * linux-base: Fix bugs and improve libata transition code:
+    - Handle duplicates in /etc/udev/rules.d/70-persistent-cd.rules
+      (Closes: #574630)
+    - Always attempt conversion if $DEBCONF_RECONFIGURE is set
+    - Never attempt conversion during a fresh installation (Closes: #576243)
+    - Convert disk IDs in crypttab (Closes: #575056)
+    - Redirect stdin and stdout of child processes to avoid interfering with
+      debconf (Closes: #574987)
+    - Report when hdparm.conf or mdadm.conf may need to be updated
+      (Closes: #576442)
+    - Where a device has both a UUID and a label, prefer to identify it by
+      UUID, consistent with fresh installations
+    - Do not use device labels including certain unsafe characters
+      (Closes: #576537)
+  * iwlwifi: Fix repeated warnings about tfds_in_queue (Closes: #574526)
+  * eeepc-laptop: Disable CPU speed control on 701 and 702 since it can
+    cause the system to hang (Closes: #559578)
+  * eeepc-laptop: Disable wireless hotplug on 1005HA, 1201N and 1005PE
+    since it disconnects the wrong device (Closes: #573607)
+  * linux-headers-*: Support postinst hooks in /etc/kernel/header_postinst.d,
+    thanks to Michael Gilbert (Closes: #569724)
+  * rt2860sta: Fix argument to linux_pci_unmap_single() (Closes: #575726)
+  * nouveau: nv50: Implement ctxprog/state generation
+  * phylib: Support PHY module autoloading (Closes: #553024)
+  * [x86] Add ramzswap driver (Closes: #573912)
+
+  [ maximilian attems]
+  * [alpha, hppa] Disable oprofile as tracing code is unsupported here.
+    (closes: #574368)
+  * Update openvz patch to 14a9729fab67. (closes: #574598, #575189)
+  * [x86]: Disable FB_INTEL. (closes: #447575, #503766, #574401)
+  * ssb: do not read SPROM if it does not exist.
+  * ssb: Avoid null pointer dereference by aboves.
+  * Add stable 2.6.32.11.
+    - MIPS: Cleanup forgotten label_module_alloc in tlbex.c (Closes: #571305) 	
+    - ath5k: fix setup for CAB queue (closes: #576213)
+    - NFS: Prevent another deadlock in nfs_release_page() (Closes: #574348)
+  * Revert to keep ABI:
+    - hrtimer: Tune hrtimer_interrupt hang logic
+
+  [ Moritz Muehlenhoff ]
+  * Add support for sh4 architecture, patch by Nobuhiro Iwamatsu
+  (Closes: #569034)
+
+  [ Bastian Blank ]
+  * Update Xen patch.
+    - Fix free interrupt problem on uni-processor machines.
+
+  [ Ian Campbell ]
+  * Include Xen hypervisor in reportbug "related to" list.
+
+ -- maximilian attems <maks@debian.org>  Mon, 05 Apr 2010 20:31:15 +0200
+
+linux-2.6 (2.6.32-10) unstable; urgency=low
+  
+  * The "Big Bang" release
+
+  [ maximilian attems]
+  * tcp: fix ICMP-RTO war.
+  * Add stable 2.6.32.10.
+    - net/via-rhine: Fix scheduling while atomic bugs (closes: #549606)
+    - HID: remove TENX iBuddy from blacklist (Closes: #551312)
+    - USB: SIS USB2VGA DRIVER: support KAIREN's USB VGA adaptor
+      USB20SVGA-MB-PLUS (Closes: #565857)
+  * Bump ABI to 4.
+  * [x86] Add openvz flavour.
+    - adds ppp support (closes: #550975)
+  * Prevent nouveau from autoloading until xserver-xorg-video-nouveau lands.
+ 
+  [ Moritz Muehlenhoff ]
+  * Enable CONFIG_KEYS_DEBUG_PROC_KEYS (Closes: #400932)
+  * Amend README.source with documentation on how to generate a 
+    source tree with all patches applied (Closes: #509156)
+  * Document needed packages for preparatory packaging
+    steps (Closes: #548028)
+
+  [ Aurelien Jarno ]
+  * Fix signal stack alignement on sparc64 (Closes: #569797)
+  
+  [ Bastian Blank ]
+  * Add support for Xen dom0 into its featureset.
+    (Closes: #499745, #503857, #504805, #505545, #506118, #507785, #509085,
+     #509733, #511963, #513835, #514511, #516223, #516374, #516635, #517048,
+     #519586, #520702, #522452, #524571, #524596, #526695, #533132, #533432,
+     #534880, #534978, #541227, #542299, #542614, #543489, #544525, #548345,
+     #554564, #554621, #559175, #559634)
+  * [alpha, amd64, i386, amd64, powerpc] Make all AGP driver built-in to
+    workaround race-condition between DRM and AGP.
+
+  [ Ben Hutchings ]
+  * drm: Apply all changes from 2.6.33 and 2.6.33.1:
+    - Add nouveau driver
+    - i915: Fix disappearing mouse pointer (Closes: #551330)
+    - i915: Restore video overlay support (Closes: #560033)
+    - i915: Fix DDC on some systems by clearing BIOS GMBUS (Closes: #567747)
+    - radeon: Enable KMS support
+  * qla2xxx: Disable MSI/MSI-X on some chips or as selected by module parameter
+    (Closes: #572322)
+    - MSI is disabled on QLA24xx chips other than QLA2432 (MSI-X already was)
+    - MSI-X is disabled if qlx2enablemsix=2
+    - MSI and MSI-X are disabled if qlx2enablemsix=0
+  * [sparc64] Make prom entry spinlock NMI safe (Closes: #572442)
+  * firmware: Correct copyright information and add source for CIS files
+  * Fix first line of kernel-doc for a few functions so that they get valid
+    manual pages
+  * Remove /usr/include/drm from linux-libc-dev; let libdrm-dev provide it
+    again
+  * [x86] Enable rtl8192su driver using external firmware
+  * [x86] Use libata-based drivers for most PATA controllers (Closes: #444182):
+    - pata_triflex replaces triflex
+    - pata_atiixp replaces atiixp
+    - pata_ns87415 replaces ns87415
+    - pata_sc1200 replaces sc1200
+    - pata_cs5536 replaces cs5536
+    - pata_amd replaces amd74xx
+    - pata_sis replaces sis5513
+    - pata_rz1000 replaces rz1000
+    - pata_efar replaces slc90e66
+    - pata_pdc202xx_old replaces pdc202xx_old
+    - pata_pdc2027x replaces pdc202xx_new
+    - pata_cs5520 replaces cs5520
+    - pata_cs5530 replaces cs5530
+    - pata_cmd64x replaces cmd64x
+    - pata_sil680 replaces siimage
+    - pata_ali replaces alim15x3
+    - pata_via replaces via82cxxx
+    - pata_serverworks replaces serverworks
+    - pata_artop replaces aec62xx
+    - pata_it821x replaces it821x
+    - ata_piix, pata_oldpiix, pata_mpiix mostly replace piix
+    - ata_generic, pata_ns87410, pata_netcell replace ide-pci-generic
+  * linux-base: Add libata transition script
+  * Hide sensitive information when including network configuration in bug
+    reports and running a different kernel version
+
+  [ Martin Michlmayr ]
+  * Add some ARM patches from git:
+    - Update mach types
+    - eSATA SheevaPlug: basic board support
+    - eSATA SheevaPlug: configure SoC SATA interface
+    - eSATA SheevaPlug: correlate MPP to SD CD and SD WP
+  * [armel/kirkwood] Enable MACH_ESATA_SHEEVAPLUG.
+
+ -- maximilian attems <maks@debian.org>  Tue, 16 Mar 2010 23:39:05 +0100
+
+linux-2.6 (2.6.32-9) unstable; urgency=high
+
+  [ Ben Hutchings ]
+  * Do not build obsolete lgs8gl5 driver
+  * [x86] Enable USB IP drivers (Closes: #568903)
+  * Ignore failure of lsusb when gathering information for bug reports
+    (Closes: #569725)
+  * macvlan: Add bridge, VEPA and private modes (Closes: #568756)
+  * [sparc] sunxvr500: Support Intergraph graphics chips again
+    (Closes: #508108)
+  * sfc: Apply fixes from 2.6.33
+  * ath9k: Add support for AR2427
+  * fs/exec.c: fix initial stack reservation (regression in 2.6.32.9)
+
+  [ maximilian attems]
+  * Postinst don't refercence k-p related manpage. (closes: #542208)
+  * Postinst only write kernel-img.conf for palo boxes.
+  * Enable VT_HW_CONSOLE_BINDING for unbinding efifb. (closes: #569314)
+  * hwmon: Add driver for VIA CPU core temperature.
+  * wireless: report reasonable bitrate for MCS rates through wext.
+  * efifb: fix framebuffer handoff. (bugzilla.k.o #15151)
+  * Add stable 2.6.32.9:
+    - drm/i915: Fix DDC on some systems by clearing BIOS GMBUS setup.
+      (closes: #567747)
+    - futex: Handle futex value corruption gracefully. (CVE-2010-0623)
+    - futex_lock_pi() key refcnt fix. (CVE-2010-0623)
+    - Staging: fix rtl8187se compilation errors with mac80211.
+      (closes: #566726)
+  * r8169 patch for rx length check errors. (CVE-2009-4537)
+  * vgaarb: fix incorrect dereference of userspace pointer.
+  * Bump ABI to 3.
+  * drm/i915: give up on 8xx lid status.
+  * vgaarb: fix "target=default" passing.
+  * drm/radeon: block ability for userspace app to trash 0 page and beyond.
+    (closes: #550562)
+
+  [ Bastian Blank ]
+  * Restrict access to sensitive SysRq keys by default.
+  * debian/rules.real: Install arch specific scripts.
+
+  [ Moritz Muehlenhoff ]
+  * Set source format to 1.0
+
+  [ Martin Michlmayr ]
+  * [armel/iop32x] Enable ARCH_IQ80321 and ARCH_IQ31244 (Thanks Arnaud
+    Patard).
+  * [armel/kirkwood] Disable MTD_NAND_VERIFY_WRITE to avoid errors
+    with ubifs on OpenRD (Thanks Gert Doering) (Closes: #570407)
+  * OpenRD-Base: allow SD/UART1 selection (Closes: #571019)
+  * D-Link DNS-323 revision A1: implement power LED (Closes: 503172).
+
+ -- maximilian attems <maks@debian.org>  Wed, 24 Feb 2010 17:06:27 +0100
+
+linux-2.6 (2.6.32-8) unstable; urgency=high
+
+  [ Bastian Blank ]
+  * Don't let default compiler flags escape into build.
+
+  [ dann frazier ]
+  * KVM: PIT: control word is write-only (CVE-2010-0309)
+  * Fix potential crash with sys_move_pages (CVE-2010-0415)
+
+  [ Ben Hutchings ]
+  * Build lgs8gxx driver along with cxusb (Closes: #568414)
+  * Revert incorrect change to powerpc clocksource setup (Closes: #568457)
+  * Add stable release 2.6.32.8:
+    - Remove TIF_ABI_PENDING bit from x86, sparc & powerpc, fixing
+      32-bit userland/64-bit kernel breakage (Closes: #568416)
+    - connector: Delete buggy notification code. (CVE-2010-0410)
+  * [x86] KVM: Add IOPL/CPL checks to emulator, to prevent privilege
+    escalation within a guest. (CVE-2010-0298, CVE-2010-0306)
+
+  [ Martin Michlmayr ]
+  * Implement power-off for D-Link DNS-323 rev B1 and fix the blinking
+    power LED (Erik Benada) (Closes: #503172).
+
+  [ Aurelien Jarno ]
+  * Enable CONFIG_FB_CIRRUS and CONFIG_LOGO on 4kc-malta and 5kc-malta.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 11 Feb 2010 02:17:17 +0000
+
+linux-2.6 (2.6.32-7) unstable; urgency=low
+
+  [ maximilian attems]
+  * [x86] Disable deprecated X86_CPU_DEBUG, causes boot failures.
+  * Newer Standards-Version 3.8.4 without changes.
+
+  [ Ben Hutchings ]
+  * clocksource/events: Fix fallout of generic code changes
+    (Closes: #568030)
+  * Set ABI to 2.
+
+  [ dann frazier ]
+  * Disable FUNCTION_TRACER due to performance/build issues.
+    (Closes: #568025)
+  * Split 'flush_old_exec' into two functions (CVE-2010-0307)
+
+ -- dann frazier <dannf@debian.org>  Wed, 03 Feb 2010 18:35:21 -0700
+
+linux-2.6 (2.6.32-6) unstable; urgency=high
+
+  [ Ben Hutchings ]
+  * Documentation/3c509: document ethtool support (Closes: #564743)
+  * Add MODULE_FIRMWARE declarations to several drivers that lacked them
+  * [x86] Update rt2860sta/rt2870sta firmware loader patch
+    - Accept 8K versions of rt2870.bin
+    - Fix hang on resume
+  * [x86] Enable rt3090sta using firmware loader
+  * Add stable release 2.6.32.4:
+    - untangle the do_mremap() mess (CVE-2010-0291)
+    - fasync: split 'fasync_helper()' into separate add/remove functions
+      (CVE-2009-4141)
+    - kernel/signal.c: fix kernel information leak with print-fatal-signals=1
+      (CVE-2010-0003)
+    - netfilter: ebtables: enforce CAP_NET_ADMIN (CVE-2010-0007)
+    - quota: Fix dquot_transfer for filesystems different from ext4
+      (Closes: #566532)
+    - audit: Fix memory management bugs (Closes: #562815)
+      + fix braindamage in audit_tree.c untag_chunk()
+      + fix more leaks in audit_tree.c tag_chunk()
+    - ipv6: skb_dst() can be NULL in ipv6_hop_jumbo(). (CVE-2010-0006)
+    - Fix DMA mapping for i915 driver (Closes: #558237, #567352)
+      + drm: remove address mask param for drm_pci_alloc()
+      + agp/intel-agp: Clear entire GTT on startup
+  * e1000,e1000e: Discard all fragments of received over-length packets
+    (CVE-2009-4536, CVE-2009-4538)
+  * Enable the '686' configuration options in '686-vserver' packages and
+    the '686-bigmem' configuration options in '686-bigmem-vserver' packages
+    (Closes: #566213)
+  * Add stable release 2.6.32.5:
+    - inotify: do not reuse watch descriptors (Closes: #561880)
+    - megaraid_sas: remove sysfs poll_mode_io world writeable permissions
+      (CVE-2009-3939) (Closes: #562975)
+  * Force distribution=UNRELEASED in debian/bin/test-patches so that it
+    works in released source packages
+  * Add stable release 2.6.32.6
+  * postinst: Enable escape sequences in debconf notes (Closes: #566539)
+  * Add 3w-sas driver for LSI 3ware 9750 SAS controllers
+  * aufs2: Update to snapshot from 2010-01-25 (Closes: #567391)
+  * cdc_ether: Do not set link down initially; not all devices send link
+    change interrupts (Closes: #567689)
+  * Add stable release 2.6.32.7:
+    - clockevent: Don't remove broadcast device on halt or CPU hotplug
+      (Closes: #566547)
+  * sfc: Apply fixes from 2.6.33-rc{5,6}
+  * Set ABI to 1.
+
+  [ Ian Campbell ]
+  * xen: Enable up to 32G of guest memory on i386.
+
+  [ Julien Cristau ]
+  * drm/i915: disable powersave by default (closes: #564807)
+
+  [ Bastian Blank ]
+  * Enable all NCP file system options.
+  * [amd64] Make AGP support again built-in to fullfill the not completely
+    documented dependency with GART IOMMU support. (closes: #561552)
+  * Enable dynamic minor allocations for ALSA, DVB and USB. (closes: #510593)
+
+  [ maximilian attems ]
+  * [topconfig] set MEMORY_FAILURE, 9P_FSCACHE, INFINIBAND_IPOIB_CM
+    (closes: #565494), ITCO_VENDOR_SUPPORT (closes: #525232), PCIEASPM
+    (closes: #545417), HWPOISON_INJECT.
+  * Enable easier debugging of Power Managment code. (closes: #478315)
+  * Pass `DEB_MAINT_PARAMS' to hook scripts. (closes: #563161)
+  * Enable more mobile IPv6 needs. (closes: #528834)
+
+  [ dann frazier ]
+  * [vserver] explicitly disable CFS_HARD_LIMITS
+  * Enable FUNCTION_TRACER and STACK_TRACER (Closes: #563847)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 31 Jan 2010 23:09:28 +0000
+
+linux-2.6 (2.6.32-5) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * sfc: Apply fixes from 2.6.33-rc3
+  * ath5k: Fix eeprom checksum check for custom sized eeproms
+    (Closes: #563136)
+
+  [ maximilian attems ]
+  * topconfig unset USB_ISP1362_HCD FTBFS on armel and useless.
+    (closes: #564156)
+  * topconfig set PATA_ATP867X, PATA_RDC, SND_CS5535AUDIO, PM_RUNTIME,
+    ATA_VERBOSE_ERROR, RTC_DRV_WM831X, RTC_DRV_PCF2123, RTC_DRV_AB3100,
+    SND_HDA_PATCH_LOADER, DEVTMPFS (closes: #560040).
+  * [x86] set RTL8192E, TOPSTAR_LAPTOP, I2C_SCMI.
+  * Explicitly disable diverse staging drivers.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 10 Jan 2010 03:22:23 +0000
+
+linux-2.6 (2.6.32-4) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * Correct comments referring to dpkg --print-installation-architecture
+    in maintainer scripts (Closes: #558077)
+  * modules: Skip empty sections when exporting section notes
+    (Closes: #563036)
+  * via-velocity: Give RX descriptors to the NIC later on open or MTU change
+    (Closes: #508527)
+  * dmfe/tulip: Let dmfe handle DM910x except for SPARC on-board chips
+    (Closes: #515533)
+  * Add stable release 2.6.32.3:
+    - ath5k: fix SWI calibration interrupt storm (may fix #563466)
+    - iwl3945: disable power save (Closes: #563693)
+    - rt2x00: Disable powersaving for rt61pci and rt2800pci (may fix #561087)
+
+  [ maximilian attems ]
+  * topconfig set CAN_EMS_USB, BT_MRVL, BT_MRVL_SDIO, BE2ISCSI, SCSI_PMCRAID,
+    SCSI_BFA_FC, USB_GL860, USB_GSPCA_JEILINJ, I2C_SI4713, RADIO_SI4713,
+    RADIO_SI470X, DVB_USB_FRIIO, EDAC_I3200, SENSORS_TMP421, SENSORS_WM8350,
+    SBC_FITPC2_WATCHDOG, TOUCHSCREEN_MCS5000, UIO_PCI_GENERIC, KSZ8842,
+    KS8851, KS8851_MLL, MISDN_AVMFRITZ, MISDN_SPEEDFAX, MISDN_INFINEON,
+    MISDN_W6692, MISDN_NETJET, INPUT_WINBOND_CIR, BATTERY_DS2782, MFD_WM831X,
+    MFD_MC13783, MTD_SST25L, TOUCHSCREEN_USB_E2I, INPUT_WM831X_ON,
+    SENSORS_WM831X, WM831X_WATCHDOG, AB3100_OTP, REGULATOR_WM831X,
+    REGULATOR_MC13783, REGULATOR_AB3100, REGULATOR_TPS65023,
+    REGULATOR_TPS6507X, VIDEO_SAA7164, DVB_PT1, BACKLIGHT_WM831X,
+    SND_HDA_CODEC_CIRRUS, USB_ISP1362_HCD, LEDS_WM831X_STATUS,
+    MTD_ONENAND_GENERIC, B43_SDIO, B43_PHY_LP, KEYBOARD_ADP5588, QT2160,
+    KEYBOARD_LM8323, KEYBOARD_MAX7359, KEYBOARD_OPENCORES, MOUSE_PS2_SENTELIC,
+    WM831X_POWER.
+  * [x86] set ACPI_POWER_METER, ACPI_PROCESSOR_AGGREGATOR, SFI,
+    EDAC_DECODE_MCE.
+  * Set MOUSE_PS2_ELANTECH for various EeePc. (closes: #522920)
+
+  [ dann frazier ]
+  * Fix vserver build on ia64 (Closes: #563356)
+  * Fix vserver build on s390 (Closes: #563355)
+
+  [ Martin Michlmayr ]
+  * Report model information on armel when filing a bug.
+  * ARM: Add an earlyprintk debug console (Catalin Marinas)
+  * [armel] Enable EARLY_PRINTK.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 07 Jan 2010 03:33:39 +0000
+
+linux-2.6 (2.6.32-3) unstable; urgency=high
+
+  * The "Not a Suitable Christmas Present" release
+
+  [ Martin Michlmayr ]
+  * [armel/orion5x] Build MTD_CFI_AMDSTD into the kernel again since
+    it's needed on the D-Link DNS-323 (thanks Manuel Roeder).
+    (Closes: #562205)
+
+  [ dann frazier ]
+  * Input: ALPS - add support for touchpads with 4-directional button
+  * Input: ALPS - add interleaved protocol support (Dell E6x00 series)
+    (Closes: #561589)
+  * Re-enable vserver
+
+  [ Ben Hutchings ]
+  * sfc: Apply changes from 2.6.33-rc1 adding support for SFC9000 family
+  * Add stable release 2.6.32.2:
+    - KVM: x86 emulator: limit instructions to 15 bytes (CVE-2009-4031)
+    - hfs: fix a potential buffer overflow (CVE-2009-4020)
+  * radeon: fix crtc vblank update for r600 (regression in 2.6.32.2)
+  * ia64: Include <linux/personality.h> header in <asm/fcntl.h>; fixes
+    FTBFS
+  * r8169: Allow RTL8168D v1 and v2 to be used without firmware files
+    (Closes: #561309)
+  * Enable vmxnet3 (VMware guest paravirt net driver) (Closes: #562046)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 24 Dec 2009 04:28:55 +0000
+
+linux-2.6 (2.6.32-2) unstable; urgency=high
+
+  [ Bastian Blank ]
+  * Allow memory hot-add and -remove if possible.
+  * Enable USB suspend.
+  * Enable kernel samepage merging. (closes: #558200)
+  * [s390]
+    - Enable SECCOMP.
+    - Enable z/VM Watchdog Timer.
+
+  [ Moritz Muehlenhoff ]
+  * Disable cryptoloop (Closes: #559755)
+  * Initial work on a README.source file as suggested by current policy
+
+  [ Ben Hutchings ]
+  * aufs2: Update to snapshot from 2009-12-05
+  * postinst: Fix failure paths in check for missing firmware
+    (Closes: #560263)
+  * atl1c: Fix system hang when link drops (Closes: #559577)
+  * netfilter: xtables: fix conntrack match v1 ipt-save output
+    (Closes: #556587)
+
+  [ Aurelien Jarno ]
+  * Add support for the sparc64 architecture.
+
+  [ dann frazier ]
+  * Add stable release 2.6.32.1:
+    - ext4: Fix double-free of blocks with EXT4_IOC_MOVE_EXT (CVE-2009-4306)
+    - ext4: avoid divide by zero when trying to mount a corrupted file system
+      (CVE-2009-4307)
+    - ext4: Fix insufficient checks in EXT4_IOC_MOVE_EXT (CVE-2009-4131)
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Wed, 16 Dec 2009 21:42:49 +0000
+
+linux-kbuild-2.6 (2.6.32-1) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * New upstream version. (closes: #560090)
+  * Include new script module-common.lds, thanks to Zoran Dzelajlija.
+
+  [ Bastian Blank ]
+  * Move contents of linux-kbuild package to /usr/lib.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 11 Dec 2009 16:16:12 +0100
+
+linux-2.6 (2.6.32-1) unstable; urgency=low
+
+  * New upstream release candidate:
+  - Fixes wifi with rt73usb (Closes: #555640)
+
+  [ Martin Michlmayr ]
+  * [armel/kirkwood] Turn on USB_SUSPEND (on the request of a SheevaPlug
+    user).
+  * [mips/4kc-malta, mips/5kc-malta] Compile USB as a module rather than
+    into the kernel.
+
+  [ Bastian Blank ]
+  * Enable PCI_MSI.
+  * [powerpc] Properly enable Apple PMU battery.
+  * [mips/mipsel] Drop remaining OSS drivers.
+  * [powerpc] Enable PCIe support.
+  * Move contents of linux-support package to /usr/share.
+  * Make linux-patch package depend against python.
+  * Use python-support instead of python-central.
+  * Always enable software watchdog support.
+  * Always enable complete USB mass storage support.
+  * [amd64, powerpc, sparc] Build USB support as module.
+  * [amd64] Build AGP support as module.
+  * Always enable dummy net driver support.
+  * Drop linux-tree package, it have no users left.
+
+  [ Ben Hutchings ]
+  * Re-enable accidentally omitted drivers, thanks to Uwe Kleine-König
+    (Closes: #558011):
+    - Atheros wireless drivers (ar9170, ath5k, ath9k)
+    - TI wl12xx wireless drivers (wl1251_spi, wl1251_sdio and wl1271
+      replace wl12xx)
+    - Silicon Labs Si470x FM Radio Receiver driver (radio-usb-si470x)
+  * Add 'removable' option to the mmc module. Setting this to 0 causes
+    MMC/SD cards to be assumed non-removable, and filesystems on them
+    will remain mounted over a suspend/resume cycle. (Closes: #504391)
+  * Add MODULE_FIRMWARE declarations to many drivers that lacked them, so
+    that missing firmware will be reported automatically during upgrades
+  * atl1e: Remove broken implementation of TSO for TCP/IPv6
+    (Closes: #558426) and allow other hardware offloads to be disabled in
+    case they are also buggy
+  * usbnet: Set link down initially for drivers that update link state
+    (Closes: #444043)
+  * aufs2: Update to snapshot from 2009-11-29
+  * i915: Enable auto-loading even though CONFIG_DRM_I915_KMS is not set
+
+  [ dann frazier ]
+  * mac80211 (CVE-2009-4026, CVE-2009-4027):
+    - fix two remote exploits
+    - fix spurious delBA handling
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 06 Dec 2009 18:17:39 +0100
+
+linux-2.6 (2.6.32~rc8-1~experimental.1) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * New upstream release candidate.
+    - slip: Clean up create and destroy	 (Closes: #408635)
+    - signal: Fix alternate signal stack check (Closes: #544905)
+  * README.Debian: Add brief information about building specific binary
+    packages (Closes: #546182)
+  * lgs8gxx: Remove firmware for lgs8g75 and use request_firmware() to
+    load it
+  * r8169: Remove firmware for RTL8168D v1 and v2 and use
+    request_firmware() to load it
+  * DocBook: Fix build breakage
+  * Hide WPA authentication parameters and comments when including network
+    configuration in bug reports
+
+  [ Bastian Blank ]
+  * [mips] Don't force EMBEDDED on.
+  * [sparc] Don't builtin Ext2 support.
+  * Enable PERF_EVENTS, EVENT_PROFILE, CRYPTO_VMAC, CRYPTO_GHASH, TREE_RCU.
+  * Use SLUB as default SLAB allocator.
+
+  [ Martin Michlmayr ]
+  * [armel] Make some options modular (since there's no reason for them
+    to be built in): FTL, NFTL, MTD_CFI_AMDSTD, MTD_CFI_STAA.
+  * [armel/orion5x, armel/kirkwood] Enable ISDN (requested by Markus
+    Krebs).
+  * Add patch from Albin Tonnerre to add HAVE_KERNEL_LZMA to arm.
+  * [armel] Enable KERNEL_LZMA, i.e. compress kernels with lzma to get
+    much better compression.
+  * [armel] Re-enable options that were turned off recently because of
+    size constraints: DEBUG_USER, DEBUG_KERNEL, BOOT_TRACER, ARM_UNWIND,
+    BLK_DEV_IO_TRACE and SECURITY_SELINUX.
+
+  [ maximilian attems ]
+  * Simplify postinst nuke reverse symlinks handling. Patch from
+    Sebastian Andrzej Siewior <sebastian@breakpoint.cc>.
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 21 Nov 2009 21:41:45 +0100
+
+linux-2.6 (2.6.31-2) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * [armel/orion5x, armel/kirkwood] Make sure VGA_CONSOLE is disabled,
+    otherwise the kernel won't boot.
+  * [armel/kirkwood] Enable CRYPTO_DEV_MV_CESA (Closes: #552270).
+  * [armel/kirkwood, armel/orion5x] Enable ORION_WATCHDOG (the
+    name of the config variable changed).
+  * Add OpenRD-Client support again.
+  * Add QNAP TS-41x support.
+  * [armel/orion5x, armel/kirkwood] Enable ISDN (requested by Markus
+    Krebs).
+  * Fix a build failure of the ISDN hisax elsa driver on ARM.
+  * mips: fix build of vmlinux.lds (Closes: #552422).
+
+  [ Ben Hutchings ]
+  * postinst: Accept absolute paths in modules.dep generated by the
+    lenny version of module-init-tools (Closes: #552610)
+  * aufs2: Remove incorrect static assertion (Closes: #554120)
+  * Add stable release 2.6.31.6:
+    - fs: pipe.c null pointer dereference (CVE-2009-3547)
+    - KEYS: get_instantiation_keyring() should inc the keyring refcount
+      in all cases (CVE-2009-3624)
+    - netlink: fix typo in initialization (CVE-2009-3612)
+  * Undo PCMCIA ABI change in 2.6.31.6
+  * Hide wireless keys and wake-on-LAN password when including network
+    configuration in bug reports
+  * Add Geode LX/NX to list of 686-class processors
+
+  [ Bastian Blank ]
+  * [powerpc] Remove SMP warning from PowerMac cpufreq (Closes: #554124)
+
+  [ maximilian Attems ]
+  * Really fix making a debian kernel installable without kernel-img.conf.
+    Thanks for patch to Sebastian Andrzej Siewior <sebastian@breakpoint.cc>.
+    (closes: #555093).
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 15 Nov 2009 18:47:49 +0000
+
+linux-kbuild-2.6 (2.6.31.2-1) unstable; urgency=low
+
+  * Upload to unstable.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sun, 25 Oct 2009 18:38:44 +0000
+
+linux-2.6 (2.6.31-1) unstable; urgency=low
+
+  [ Ben Hutchings ]
+  * Include aufs2, marked as staging (Closes: #541828)
+  * Include speakup modules under staging
+  * Add stable release 2.6.31.5
+  * [x86_64] Enable NUMA_EMU (Closes: #541389)
+
+  [ Martin Michlmayr ]
+  * CPUidle: always return with interrupts enabled.
+  * [armel/orion5x, armel/kirkwood] Enable FB since some Kirkwood
+    machines have a VGA chip (e.g. OpenRD-Client) and because it's
+    possible to use a DisplayLink USB virtual graphics adapter.
+
+  [ maximilian attems ]
+  * [alpha] Disable SND_MIXART, causes gcc ICE.
+  * [x86] Enable modular X86_MCE_INJECT.
+  * [x86_32] Set LSM_MMAP_MIN_ADDR to zero to unbreak dosemu and 16-bit Wine,
+    ia64 and x86_64 to 65536 otherwise default to 32768.
+  * Unset UEVENT_HELPER_PATH to save some boot cycles.
+
+  [ Bastian Blank ]
+  * Set ABI to 1.
+  * Enable Apple PMU battery. (closes: #544264)
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 24 Oct 2009 19:17:30 +0200
+
+linux-kbuild-2.6 (2.6.31.2-1~experimental.1) experimental; urgency=low
+
+  [ Bastian Blank ]
+  * New upstream version.
+
+  [ Ben Hutchings ]
+  * Include new script gcc-x86_32-has-stack-protector.sh.
+  * Add myself to Uploaders.
+  * New upstream version (2.6.31.2).
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 17 Oct 2009 23:05:27 +0100
+
+linux-2.6 (2.6.31-1~experimental.2) experimental; urgency=low
+
+  [ Ben Hutchings ]
+  * Include more information in bug reports:
+    - Model information
+    - Firmware package status
+    - Network configuration and status (optional)
+    - USB device list
+  * nfs: Avoid overrun when copying client IP address string
+    (Closes: #549002)
+  * Add support for DEB_BUILD_OPTIONS=parallel=N (Closes: #458560)
+  * sfc: Fix initial link state
+  * Improve package descriptions
+    - Clarify the differences between i386 flavours (Closes: #414690)
+    - Simplify wording of the description template
+  * Add stable release 2.6.31.3
+  * Remove /usr/include/scsi from linux-libc-dev; these headers are
+    provided by libc6-dev (Closes: #550130)
+  * Remove dummy dot-files from linux-libc-dev
+  * hfsplus: Refuse to mount volumes larger than 2TB, which may otherwise
+    be corrupted (Closes: #550010)
+  * Add stable release 2.6.31.4
+    - x86: Don't leak 64-bit kernel register values to 32-bit processes
+      (CVE-2009-2910)
+    - appletalk: Fix skb leak when ipddp interface is not loaded
+      (CVE-2009-2903)
+
+  [ maximilian attems ]
+  * Add stable release 2.6.31.2
+    - ax25: Fix signed comparison in the sockopt handler (CVE-2009-2909)
+    - PM / yenta: Fix cardbus suspend/resume regression (Closes: #522828)
+
+  [ dann frazier ]
+  * [sparc] build zImage by default, fixes build
+  * [ia64] Fix call to elilo in postinst
+
+ -- maximilian attems <maks@debian.org>  Mon, 12 Oct 2009 23:54:52 +0200
+
+linux-2.6 (2.6.31-1~experimental.1) experimental; urgency=low
+
+  * New upstream release.
+    - Support for W83627DHG-P (closes: #535646).
+    - Restore MAC address and MTU change operations on Orinoco and others
+      (Closes: #536455)
+    - Remove incorrect ACPI blacklisting of ASUS P4B266 mainboards
+      (Closes: #525625)
+    - atl1c fixes for Eee PC model 1005HA-H. (closes: #538410)
+    - parisc64-smp boot fix on J5600. (closes: #539369)
+    - parisc: Fix GOT overflow during module load on 64bit kernel
+      (closes: #539378)
+    - xfs: fix freeing of inodes not yet added to the inode cache
+      (Closes: #527517)
+    - IPv6: add "disable" module parameter support to ipv6.ko.
+      (closes: #542470)
+    - IPv6: avoid wraparound for expired preferred lifetime
+      (Closes: #518710)
+    - Fixes lockups with older dual-CPU machines (Closes: #542551)
+    - x86, pat: Allow ISA memory range uncacheable mapping requests
+      (Closes: #538159)
+    - drm/i915: Hook connector to encoder during load detection
+      (Closes: #522358)
+    - module: workaround duplicate section names (Closes: #545229)
+    - b43: Add fw capabilities (Closes: #533357)
+    - procfs: Fix idle time in uptime (Closes: #545981)
+    - e1000, e1000e, igb, ixgb, ixgbe: Fix initial link state
+      (Closes: #546041)
+    - CIFS: Handle port= mount option correctly (Closes: #524142)
+    - i915: Prevent screen flickering in X11 (Closes: #545377)
+    - hppa: Ensure broadcast tlb purge runs single threaded
+      (Closes: #539215)
+
+  [ maximilian attems ]
+  * [powerpc64] Enable modular RTC_DRV_PS3, PS3_VRAM.
+    (Closes: #528694)
+  * Set new NETFILTER_XT_MATCH_OSF, FIREWIRE_NET, SND_CTXFI, USB_XHCI_HCD,
+    IEEE802154, CAN_DEV, EEPROM_MAX6875, DM_LOG_USERSPACE, DM_MULTIPATH_QL,
+    DM_MULTIPATH_ST, LIBERTAS_SPI, CAN_SJA1000, CAN_SJA1000_PLATFORM,
+    CAN_EMS_PCI, CAN_KVASER_PCI, CB710_CORE, CNIC, RT2800USB,
+    USB_NET_INT51X1, SND_LX6464ES, BLK_DEV_OSD, SCSI_BNX2_ISCSI, IWM,
+    IEEE802154_DRIVERS, TOUCHSCREEN_EETI, TOUCHSCREEN_W90X900,
+    BATTERY_MAX17040, SENSORS_TMP401, REGULATOR_USERSPACE_CONSUMER,
+    REGULATOR_MAX1586, REGULATOR_LP3971, MEDIA_SUPPORT, CUSE,
+    WL12XX, PPS, AB3100_CORE, SND_HDA_INPUT_JACK,MMC_SDHCI_PLTFM,
+    MMC_CB710, MMC_VIA_SDMMC, LEDS_LP3944, RTC_DRV_RX8025,
+    SMARTJOYPLUS_FF, USB_CDC_PHONET, USB_GSPCA_SN9C20X, MOUSE_SYNAPTICS_I2C,
+    PCIEAER_INJECT.
+  * Disable v4l1 ov511 and quickcam_messenger drivers.
+  * [x86_64] Enable HW_RANDOM_VIA.
+  * [x86] Keep divers staging stuff enabled.
+  * [x86] Enable RT3070, COMEDI_PCMCIA_DRIVERS, ACERHDF, EDAC_AMD64,
+    XEN_DEV_EVTCHN, XEN_SYS_HYPERVISOR, PERF_COUNTERS,
+    CC_STACKPROTECTOR, DEFAULT_MMAP_MIN_ADDR=65536.
+  * rtl8192su: remove firmware and disable.
+  * Newer Standards-Version 3.8.2 without changes.
+  * Allow install in chroot without do_initrd check for piuparts.
+  * Cleanup Maintainer scripts from ancient pre linux-2.6 assumptions.
+    (Also closes: #536333)
+  * Disable DEVKMEM.
+  * [ppc, sparc] Enable EFI_PARTITION. (closes: #540486)
+  * Disable old USB_DEVICE_CLASS. (Closes: #510279)
+  * Drop yaird initramfs generator support.
+  * Add stable release 2.6.31.1.
+  * Enable PREEMPT_VOLUNTARY.
+
+  [ Ben Hutchings ]
+  * mga: remove unnecessary change from firmware-loading patch
+  * cxgb3: remove PHY firmware and use request_firmware() to load it
+  * Add firmware-linux-free package containing DFSG-free firmware
+  * av7110: include firmware source and binary
+  * snd-cs46xx: reenable using external firmware (closes: #464197,
+    but note that Debian cannot currently distribute the firmware),
+    thanks to Kalle Olavi Niemitalo <kon@iki.fi>
+  * ib_ipath: remove firmware for QLogic IBA7220 and use
+    request_firmware() to load it
+  * dvb-usb-af9005: remove initialisation script derived from Windows
+    driver and use request_firmware() to extract it at run-time
+    (closes: #494119)
+  * Add warning on upgrade to a new upstream version where the system
+    appears to be missing necessary firmware files (closes: #541702)
+  * qla1280: Release spinlock when requesting firmware (closes: #543244)
+  * r128: Add test for initialisation to all ioctls that require it
+    (closes: #541630)
+  * rt{2860,2870,3070}sta: Use existing CCITT CRC implementation on
+    firmware rather than adding an equivalent variant of ITU-T CRC
+  * rd: Build as a module since we do not require initrd support
+  * x86: Fix crash in text_poke_early() on 486-class processors
+    (Closes: #515982)
+  * intel-agp: Fix cache flushing on i8xx chipsets, avoiding graphics
+    corruption and GPU lock-ups (Closes: #541307)
+  * Generate architecture-qualified package relations as needed for
+    flavours that exist for multiple architectures (Closes: #278729)
+  * Prompt bug reporters to run the kernel version they're reporting on
+    or otherwise record boot messages
+  * Include PCI device list in bug reports even if the running kernel
+    doesn't match
+
+  [ Martin Michlmayr ]
+  * [armel/orion5x, armel/kirkwood] Set GPIO_SYSFS=y since these
+    platforms have been converted to GPIOLIB.
+  * [armel/orion5x, armel/kirkwood] Disable MARVELL_PHY since it may
+    lead to conflicts with the built-in Ethernet.
+  * Add features from 2.6.32:
+    - crypto: mv_cesa - Add support for Orion5X crypto engine
+  * [armel/orion5x] Enable CRYPTO_DEV_MV_CESA.
+  * Disable SYS_HAS_EARLY_PRINTK on SGI IP22 to work around a hang
+    during bootup (Closes: #507557)
+  * [armel] Enable BPQETHER (on the request of Iain Young) and some
+    other AX25 drivers.
+
+  [ Bastian Blank ]
+  * Disable staging drivers by default.
+  * Force all bugs against images to be reported to linux-2.6.
+    (closes: #539176)
+  * [arm] Remove old arm architecture.
+  * Use kernel architecture for libc-dev build.
+
+  [ Moritz Muehlenhoff ]
+  * Fix Linus' name in copyright file (Closes: #530620)
+  * More verbose explanation on difference between Alpha flavour
+    (Closes: #497230)
+  * Add Vcs-Svn and Vcs-Browser stanzas pointing to the SVN branch
+    used for development in unstable. There are other branches
+    used for experimental (trunk), oldstable and stable, but Vcs-*
+    doesn't yet provide the ability to distinguish branches in a
+    more fine-grained manner. (Closes: #471495)
+  * Update Standards-Version to 3.8.3, no changes needed
+  * Disable PROM console support (Closes: #525958)
+  * Make the description of linux-support a little more verbose
+    (Closes: #400825)
+  * This upload fixes the following security issues:
+    - CVE-2009-3290 (2.6.31)
+    - CVE-2009-3288 (2.6.31.1)
+    - CVE-2009-3280 (2.6.31.1)
+    - CVE-2009-3234 (2.6.31.1)
+    - CVE-2009-3043 (2.6.31)
+    - CVE-2009-3002 (2.6.31)
+    - CVE-2009-3001 (2.6.31)
+    - CVE-2009-2844 (2.6.31)
+    - CVE-2009-2695 (2.6.31)
+    - CVE-2009-2691 (2.6.31)
+
+  [ dann frazier ]
+  * n_tty: Fix echo race
+  * [ia64] Stop disabling CONFIG_HOTPLUG_CPU, which was blocking
+    CONFIG_KEXEC from being enabled
+  * [hppa] Disable CONFIG_AB3100_CORE, it fails to build
+
+ -- maximilian attems <maks@debian.org>  Sun, 04 Oct 2009 20:27:05 +0200
+
+linux-2.6 (2.6.30-8) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * Disable SYS_HAS_EARLY_PRINTK on SGI IP22 to work around a hang
+    during bootup (Closes: #507557)
+  * module: workaround duplicate section names to fix a panic on
+    boot on hppa (Closes: #545229).
+  * Add stable release 2.6.30.8.
+  * [armel/kirkwood] Add Marvell OpenRD-Client support (Dhaval Vasa).
+    Thanks Stefan Kaltenbrunner.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 25 Sep 2009 23:47:56 +0200
+
+linux-2.6 (2.6.30-7) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * [armel/kirkwood] Enable eSATA on QNAP TS-219P (John Holland).
+  * [armel/kirkwood] Marvell OpenRD-Base board support (Dhaval Vasa).
+  * [armel/kirkwood] Initialise SATA for OpenRD-Base (Ron Lee).
+  * [armel/kirkwood] Enable SATA_AHCI.
+
+  [ Ben Hutchings ]
+  * qla1280: Release spinlock when requesting firmware (closes: #543244)
+  * r128: Add test for initialisation to all ioctls that require it
+    (closes: #541630)
+  * [i386] Fix crash in text_poke_early() on 486-class processors
+    (Closes: #515982)
+  * intel-agp: Fix cache flushing on i8xx chipsets, avoiding graphics
+    corruption and GPU lock-ups (Closes: #541307)
+  * [i386] Allow ISA memory range uncacheable mapping requests
+    (Closes: #538159)
+  * Fix idle time in /proc/uptime (Closes: #545981)
+  * e1000, e1000e, igb, ixgb, ixgbe, sfc: Fix initial link state
+    (Closes: #546041)
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.30.5.
+    - drm/i915: Hook connector to encoder during load detection
+      (fixes tv/vga detect) (Closes: #522358)
+  * Add stable release 2.6.30.6.
+    - x86: Fix lock-up on SMP Pentium Pro, Pentium 2, Pentium 3, and
+      Athlon MP systems (Closes: #542551)
+    - NET: Fix information leaks from getsockname() (CVE-2009-3001,
+      CVE-2009-3002)
+    - iwl3945/rfkill: Reenable radio when hardware switch turned back on
+      (Closes: #530554)
+  * Bump ABI to 2.
+  * Apply missing fixes:
+    - block: fix sg SG_DXFER_TO_FROM_DEV regression.
+    - sched_rt: Fix overload bug on rt group scheduling.
+  * Add stable release 2.6.30.7.
+  * [sparc] Disable PROM console. (closes: #525958)
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 16 Sep 2009 17:23:13 +0200
+
+linux-2.6 (2.6.30-6) unstable; urgency=high
+
+  [ Bastian Blank ]
+  * Set default low address space protection to default value.
+
+  [ dann frazier ]
+  * Make sock_sendpage() use kernel_sendpage() (CVE-2009-2692)
+  * flat: fix uninitialized ptr with shared libs
+  * [parisc] isa-eeprom - Fix loff_t usage
+  * do_sigaltstack: avoid copying 'stack_t' as a structure to user space
+  * posix-timers: Fix oops in clock_nanosleep() with CLOCK_MONOTONIC_RAW
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 15 Aug 2009 15:50:02 +0200
+
+linux-2.6 (2.6.30-5) unstable; urgency=high
+
+  [ maximilian attems ]
+  * Add stable release 2.6.30.4.
+    - cifs: fix regression with O_EXCL creates and optimize away lookup
+      (closes: #536426)
+    - ecryptfs: check tag 11 literal data buffer size (CVE-2009-2406)
+    - ecryptfs: check tag 3 package encrypted size (CVE-2009-2407)
+  * Ignore nf_conntrack ABI change.
+  * Revert to keep ABI:
+    - block: fix sg SG_DXFER_TO_FROM_DEV regression.
+    - sched_rt: Fix overload bug on rt group scheduling.
+  * [hppa]: Ignore any ABI (broke on 2.6.30.2).
+
+ -- maximilian attems <maks@debian.org>  Mon, 03 Aug 2009 12:08:56 +0200
+
+linux-2.6 (2.6.30-4) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.30.2.
+  * Fix pci access in x86 startup code. (closes: #537783)
+  * Ignore ABI changes.
+  * Include all plattform and mach specific headers on arm.
+
+  [ maximilian attems ]
+  * Add stable release 2.6.30.3.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 30 Jul 2009 11:55:11 +0200
+
+linux-2.6 (2.6.30-3) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Build-Depend against cpio. (closes: #536196)
+
+  [ Martin Michlmayr ]
+  * [arm] Export __cpu_flush_dcache_page.
+
+  [ Aurelien Jarno ]
+  * [ia64] Fix asm/fpu.h includes.
+
+  [ dann frazier ]
+  * Fix NULL pointer dereference in tun_chr_pool() (CVE-2009-1897)
+  * personality: fix PER_CLEAR_ON_SETID (CVE-2009-1895)
+  * Add -fno-delete-null-pointer-checks to CFLAGS
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 18 Jul 2009 10:00:01 +0200
+
+linux-2.6 (2.6.30-2) unstable; urgency=low
+
+  [ dann frazier ]
+  * [powerpc] Use generic rtc (closes: #535354)
+  * [parisc]
+    - ensure broadcast tlb purge runs single threaded
+    - fix ldcw inline assembler
+    (closes: #535844)
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.30.1:
+    - KVM: x86: check for cr3 validity in ioctl_set_sregs (CVE-2009-2287)
+    - ALSA: intel8x0 - Fix PCM position craziness (closes: #533780)
+    - ide-cd: prevent null pointer deref via cdrom_newpc_intr (closes: #535342)
+  * Ignore ABI changes.
+
+  [ maximilian attems ]
+  * [alpha] Add upstream smp buildfix.
+  * [parisc] Disable vxge and niu.
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 07 Jul 2009 14:45:43 +0200
+
+linux-kbuild-2.6 (2.6.30-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 17 Jun 2009 16:49:57 +0200
+
+linux-2.6 (2.6.30-1) unstable; urgency=low
+
+  * New upstream release.
+    - radeonfb: suspend/resume for ATI Mobility Radeon RV350.
+      (closes: #506964)
+    - tcp: fix MSG_PEEK race check (closes: #513695)
+    - e100 fixes (closes: #527056)
+    - mos7840: fix miscalculation of minor numbers (closes: #498293)
+    - reiserfs update (closes: #531804)
+    - bluetooth stack suspend/resume (closes: #508426, #529785)
+    - e1000e: Remove mutex_trylock and associated WARN on failure
+      (closes: #524699)
+
+  [ maximilian attems ]
+  * [sparc] Enable BLK_DEV_CRYPTOLOOP. (closes: #521829)
+  * Enable PATA_JMICRON instead of legacy BLK_DEV_JMICRON.
+    (closes: #431500, #458493)
+  * Set new NILFS2, AT76C50X_USB, MWL8K, P54_SPI, AR9170_USB,
+    NETFILTER_XT_MATCH_CLUSTER, RDS, SCSI_MPT2SAS, SCSI_OSD_INITIATOR,
+    ETHOC, IGBVF, VXGE, TOUCHSCREEN_AD7877, SENSORS_ATK0110,
+    NETFILTER_XT_TARGET_LED, 3C359, HW_RANDOM_TIMERIOMEM, SENSORS_G760A,
+    SENSORS_LTC4215, SENSORS_LM95241, USB_GSPCA_MR97310A, USB_GSPCA_SQ905,
+    USB_GSPCA_SQ905C, USB_PWC_INPUT_EVDEV, DVB_USB_CE6230, SND_INDIGOIOX,
+    SND_INDIGODJX, USB_SERIAL_CP210X, USB_SERIAL_QUALCOMM,
+    USB_SERIAL_SYMBOL, ISL29003, SERIAL_MAX3100, VIDEO_HDPVR, VIDEO_CX231XX,
+    DRAGONRISE_FF, LEDS_LP5521, LEDS_DAC124S085, LEDS_BD2802,
+    UIO_AEC, CRYPTO_ZLIB, REGULATOR_FIXED_VOLTAGE, NOP_USB_XCEIV,
+    POHMELFS, FSCACHE, CACHEFILES, EXOFS, NFS_FSCACHE, AFS_FSCACHE,
+    MTD_NAND_NANDSIM, STRIP_ASM_SYMS, FCOE_FNIC, USB_NET_CDC_EEM,
+    PCI_IOV, ASYNC_TX_DMA, ROMFS_BACKED_BY_BOTH, DETECT_HUNG_TASK.
+  * [amd64, i386] Set new DELL_WMI, EDAC_AMD8131, EDAC_AMD8111, X86_PAT, DMAR,
+    X86_CPU_DEBUG, CRYPTO_AES_NI_INTEL, X86_X2APIC.
+  * Newer Standards-Version 3.8.1 without changes.
+  * xfs: fix freeing memory in xfs_getbmap().
+
+  [ Ben Hutchings ]
+  * Remove firmware from drivers/staging (closes: #521553)
+    - make rt2860sta and rt2870sta use request_firmware(),
+      thanks to Darren Salt
+  * Remove some sourceless firmware not included in Debian kernel images
+
+  [ Martin Michlmayr ]
+  * [mipsel/r5k-cobalt] Enable SCSI_SYM53C8XX_2 (closes: #526836).
+  * [arm/iop32x, arm/ixp4xx, arm/orion5x] Turn off BOOT_TRACER,
+    BLK_DEV_IO_TRACE, CONTEXT_SWITCH_TRACER, ARM_UNWIND and
+    SECURITY_SELINUX because of size constraints.
+  * [mips/sb1-bcm91250a] There is a platform PATA driver for SWARM IDE
+    these days, so disable IDE and build in ATA, SCSI and BLK_DEV_SD.
+  * [mips/sb1-bcm91250a, mips/sb1a-bcm91480b] Compile in SB1250_MAC and
+    BROADCOM_PHY.
+  * [mips/r4k-ip22] Enable NET_ISA and various ISA network modules on
+    the request of Damian Dimmich since they might be useful on the
+    SGI Indigo2.
+  * Add patches from git.marvell.com:
+    - alternative copy_to_user: more precise fallback threshold
+    - lower overhead with alternative copy_to_user for small copies
+    - Kirkwood: Add CPU idle driver
+    - Kirkwood: clock gating for unused peripherals
+
+  [ Aurelien Jarno ]
+  * [mips(el)/sb1-bcm91250a] Set CONFIG_SCSI_AIC7XXX=y, it is needed
+    on the build daemons.
+  * topconfig set CONFIG_RD_GZIP, CONFIG_RD_BZIP2, CONFIG_RD_LZMA.
+
+  [ Bastian Blank ]
+  * [i386] Disable PentiumPro errata workaround.
+  * [i386] Enable support for big SMP systems.
+  * Disable OSS.
+  * [s390] Use Sparse Memory layout.
+  * [amd64, i386, powerpc, sparc] Make IPv6 support built-in.
+  * Centralize Sound core options.
+  * Centralize Power Management options.
+  * Centralize CPU Frequency scaling options.
+  * [sparc] Enable CPU Frequency scaling.
+  * Enable Network console logging support.
+  * [s390/s390x-tape] Add image.
+  * [s390/s390, s390/s390-tape] Remove images.
+  * [i386/486] Enable High Memory Support.
+  * [i386] Allocate pagetables from High Memory.
+  * [amd64, i386] Write protect kernel read-only data structures.
+  * [amd64, i386] Make kernel relocatable.
+  * Move images and headers into kernel section.
+
+  [ dann frazier ]
+  * Enable bnx2x, using firmware-split patches from net-next and mirroring
+    the per-subarch config settings used for bnx2
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 14 Jun 2009 11:45:08 +0200
+
+linux-2.6 (2.6.29-5) unstable; urgency=low
+
+  [ dann frazier ]
+  * [ia64] Backport rtc-efi driver from mainline
+
+  [ maximilian attems ]
+  * qla1280: Fix off-by-some error in firmware loading. (closes: #527265)
+
+  [ Martin Michlmayr ]
+  * Broadcom SB: fix locking in set_irq_affinity.
+  * mmc: load mvsdio automatically when it's a platform device.
+  * mmc: mvsdio: ignore high speed timing requests from the core
+  * USB: ftdi_sio: add vendor/product id for the Marvell SheevaPlug.
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.29.3:
+    - ath9k: Fix FIF_BCN_PRBRESP_PROMISC handling
+    - tracing: x86, mmiotrace: fix range test
+    - sched: account system time properly
+    - rndis_wlan: fix initialization order for workqueue&workers
+    - mm: fix Committed_AS underflow on large NR_CPUS environment
+    - Ignore madvise(MADV_WILLNEED) for hugetlbfs-backed regions
+    - clockevents: prevent endless loop in tick_handle_periodic()
+    - intel-iommu: Avoid panic() for DRHD at address zero.
+    - intel-iommu: Fix oops in device_to_iommu() when devices not found.
+    - intel-iommu: Fix device-to-iommu mapping for PCI-PCI bridges.
+    - cs5536: define dma_sff_read_status() method
+    - proc: avoid information leaks to non-privileged processes
+    - ath5k: fix buffer overrun in rate debug code
+    - mv643xx_eth: OOM handling fixes
+    - mv643xx_eth: 64bit mib counter read fix
+    - check_unsafe_exec: s/lock_task_sighand/rcu_read_lock/
+    - do_execve() must not clear fs->in_exec if it was set by another thread
+    - check_unsafe_exec() doesn't care about signal handlers sharing
+    - New locking/refcounting for fs_struct
+    - Take fs_struct handling to new file (fs/fs_struct.c)
+    - Get rid of bumping fs_struct refcount in pivot_root(2)
+    - Kill unsharing fs_struct in __set_personality()
+    - Annotate struct fs_struct's usage count restriction
+    - fix setuid sometimes wouldn't
+    - fix setuid sometimes doesn't
+    - compat_do_execve should unshare_files
+    - powerpc: Sanitize stack pointer in signal handling code
+    - ACPI: Revert conflicting workaround for BIOS w/ mangled PRT entries
+    - USB: serial: fix lifetime and locking problems
+    - ptrace: ptrace_attach: fix the usage of ->cred_exec_mutex
+    - kbuild: fix Module.markers permission error under cygwin
+    - pagemap: require aligned-length, non-null reads of /proc/pid/pagemap
+    - drm/i915: allow tiled front buffers on 965+
+    - bio: fix memcpy corruption in bio_copy_user_iov()
+    - PCI quirk: disable MSI on VIA VT3364 chipsets
+    - ASoC: Fix offset of freqmode in WM8580 PLL configuration
+    - x86/PCI: don't call e820_all_mapped with -1 in the mmconfig case
+    - x86-64: fix FPU corruption with signals and preemption
+    - drm/i915: add support for G41 chipset
+    - unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184)
+    - PCI: fix incorrect mask of PM No_Soft_Reset bit
+    - exit_notify: kill the wrong capable(CAP_KILL) check (CVE-2009-1337)
+    - crypto: ixp4xx - Fix handling of chained sg buffers
+    - block: include empty disks in /proc/diskstats
+    - b44: Use kernel DMA addresses for the kernel DMA API
+    - virtio-rng: Remove false BUG for spurious callbacks
+    - USB: Unusual Device support for Gold MP3 Player Energy
+    - KVM: x86: release time_page on vcpu destruction
+    - KVM: Fix overlapping check for memory slots
+    - KVM: MMU: disable global page optimization
+    - KVM: MMU: Fix off-by-one calculating large page count
+    - mac80211: fix basic rate bitmap calculation
+    - ALSA: us122l: add snd_us122l_free()
+    - thinkpad-acpi: fix LED blinking through timer trigger
+    - b43: Refresh RX poison on buffer recycling
+    - b43: Poison RX buffers
+    - mac80211: Fix bug in getting rx status for frames pending in reorder
+      buffer
+    - forcedeth: Fix resume from hibernation regression.
+  * Ignore ABI change.
+
+  [ Jurij Smakov ]
+  * [sparc] Fix build
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 17 May 2009 12:45:13 +0200
+
+linux-2.6 (2.6.29-4) unstable; urgency=low
+
+  [ maximilian attems ]
+  * drm/i915: allow tiled front buffers on 965+.
+
+  [ Martin Michlmayr ]
+  * Extend erase timeout in M25P80 SPI Flash driver (Peter Horton).
+  * Add driver for GMT G760A fan speed PWM controller chip.
+  * [arm/orion5x] Enable SENSORS_G760A.
+  * Add patches from git.marvell.com:
+    - allow for alternative __copy_to_user/__clear_user implementations
+    - alternative copy_to_user/clear_user implementation copy_user
+  * [arm/orion5x, armel/kirkwood] Enable UACCESS_WITH_MEMCPY.
+  * [MMC] give Sandisk/Kingston SDHC cards some slack before the SWITCH
+    command.
+
+  [ dann frazier ]
+  * [parisc] Fix macro expansion in atomic.h fixing PHONET compilation issue
+  * [parisc] reenable PHONET
+  * Btrfs: fix __ucmpdi2 compile bug on 32 bit builds
+
+  [ Stephen R. Marenka ]
+  * [m68k] Add 2.6.29 patches.
+  * [m68k] Enable RTC for aranym (2.6.29 solution).
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.29.2:
+    - Bonding: fix zero address hole bug in arp_ip_target list
+    - skge: fix occasional BUG during MTU change
+    - scsi: mpt: suppress debugobjects warning
+    - hugetlbfs: return negative error code for bad mount option
+    - NFS: Fix the XDR iovec calculation in nfs3_xdr_setaclargs
+    - gso: Fix support for linear packets
+    - agp: zero pages before sending to userspace
+    - virtio: fix suspend when using virtio_balloon
+    - Revert "console ASCII glyph 1:1 mapping"
+    - Input: gameport - fix attach driver code
+    - x86, PAT: Remove page granularity tracking for vm_insert_pfn maps
+    - KVM: is_long_mode() should check for EFER.LMA
+    - KVM: VMX: Update necessary state when guest enters long mode
+    - KVM: fix kvm_vm_ioctl_deassign_device
+    - KVM: MMU: handle compound pages in kvm_is_mmio_pfn
+    - KVM: Reset PIT irq injection logic when the PIT IRQ is unmasked
+    - KVM: Interrupt mask notifiers for ioapic
+    - KVM: Add CONFIG_HAVE_KVM_IRQCHIP
+    - KVM: Fix missing smp tlb flush in invlpg
+    - USB: usb-storage: augment unusual_devs entry for Simple Tech/Datafab
+    - USB: fix oops in cdc-wdm in case of malformed descriptors
+    - USB: ftdi_sio: add vendor/project id for JETI specbos 1201 spectrometer
+    - usb gadget: fix ethernet link reports to ethtool
+    - x86: disable X86_PTRACE_BTS for now
+    - SCSI: sg: fix q->queue_lock on scsi_error_handler path
+    - SCSI: sg: avoid blk_put_request/blk_rq_unmap_user in interrupt
+    - SCSI: sg: fix races with ioctl(SG_IO)
+    - SCSI: sg: fix races during device removal
+    - mm: pass correct mm when growing stack
+    - pata_hpt37x: fix HPT370 DMA timeouts
+    - hpt366: fix HPT370 DMA timeouts
+    - powerpc: Fix data-corrupting bug in __futex_atomic_op
+    - ALSA: hda - Fix the cmd cache keys for amp verbs
+    - sfc: Match calls to netif_napi_add() and netif_napi_del()
+    - tty: Fix leak in ti-usb
+    - spi: spi_write_then_read() bugfixes
+    - add some long-missing capabilities to fs_mask
+    - hrtimer: fix rq->lock inversion (again)
+    - x86: fix broken irq migration logic while cleaning up multiple vectors
+    - sched: do not count frozen tasks toward load
+    - dm kcopyd: fix callback race
+    - dm kcopyd: prepare for callback race fix
+    - posix-timers: fix RLIMIT_CPU && setitimer(CPUCLOCK_PROF)
+    - posix-timers: fix RLIMIT_CPU && fork()
+    - posixtimers, sched: Fix posix clock monotonicity
+    - cap_prctl: don't set error to 0 at 'no_change'
+    - SCSI: libiscsi: fix iscsi pool error path
+    - SCSI: libiscsi: fix iscsi pool error path
+    - sparc64: Fix bug in ("sparc64: Flush TLB before releasing pages.")
+    - ALSA: hda - add missing comma in ad1884_slave_vols
+    - splice: fix deadlock in splicing to file
+    - netfilter: {ip, ip6, arp}_tables: fix incorrect loop detection
+    - kprobes: Fix locking imbalance in kretprobes
+    - acer-wmi: Blacklist Acer Aspire One
+    - crypto: shash - Fix unaligned calculation with short length
+    - net/netrom: Fix socket locking
+    - af_rose/x25: Sanity check the maximum user frame size
+    - dm table: fix upgrade mode race
+    - dm: path selector use module refcount directly
+    - dm target: use module refcount directly
+    - dm snapshot: avoid having two exceptions for the same chunk
+    - dm snapshot: avoid dropping lock in __find_pending_exception
+    - dm snapshot: refactor __find_pending_exception
+    - dm io: make sync_io uninterruptible
+    - dm raid1: switch read_record from kmalloc to slab to save memory
+    - vfs: skip I_CLEAR state inodes
+    - dm: preserve bi_io_vec when resubmitting bios
+    - ixgbe: Fix potential memory leak/driver panic issue while setting up Tx &
+      Rx ring parameters
+    - mm: do_xip_mapping_read: fix length calculation
+    - mm: define a UNIQUE value for AS_UNEVICTABLE flag
+    - sysctl: fix suid_dumpable and lease-break-time sysctls
+    - cpumask: fix slab corruption caused by alloc_cpumask_var_node()
+    - ide-atapi: start DMA after issuing a packet command
+    - ide: drivers/ide/ide-atapi.c needs <linux/scatterlist.h>
+    - V4L/DVB (10943): cx88: Prevent general protection fault on rmmod
+    - r8169: Reset IntrStatus after chip reset
+    - md/raid1 - don't assume newly allocated bvecs are initialised.
+    - SCSI: sg: fix iovec bugs introduced by the block layer conversion
+    - drm/i915: fix TV mode setting in property change
+    - drm/i915: only set TV mode when any property changed
+    - drm: Use pgprot_writecombine in GEM GTT mapping to get the right bits for
+      !PAT.
+    - drm/i915: check for -EINVAL from vm_insert_pfn
+    - drm/i915: Check for dev->primary->master before dereference.
+    - drm/i915: Sync crt hotplug detection with intel video driver
+    - drm/i915: Read the right SDVO register when detecting SVDO/HDMI.
+    - drm/i915: Change DCC tiling detection case to cover only mobile parts.
+    - dock: fix dereference after kfree()
+    - ACPI: cap off P-state transition latency from buggy BIOSes
+    - x86, setup: mark %esi as clobbered in E820 BIOS call
+    - tracing/core: fix early free of cpumasks
+    - rt2x00: Fix SLAB corruption during rmmod
+    - ext4: fix locking typo in mballoc which could cause soft lockup hangs
+    - ext4: fix typo which causes a memory leak on error path
+    - MIPS: Compat: Zero upper 32-bit of offset_high and offset_low.
+    - PCI/x86: detect host bridge config space size w/o using quirks
+    - ide: Fix code dealing with sleeping devices in do_ide_request()
+    - fbdev: fix info->lock deadlock in fbcon_event_notify()
+    - fbmem: fix fb_info->lock and mm->mmap_sem circular locking dependency
+    - security/smack: fix oops when setting a size 0 SMACK64 xattr
+  * Bump ABI to 2.
+  * [sparc] Make the kernels again 64bit. (closes: #525926)
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 03 May 2009 09:38:42 +0200
+
+linux-2.6 (2.6.29-3) unstable; urgency=low
+
+  [ maximilian attems ]
+  * [powerpc] Pipe mkimage postinst call to stderr for debconf.
+    Thanks Jordi Mallach <jordi@debian.org> for the patch. (closes: #518231)
+  * [parisc] Disable PHONET.
+  * [sparc] Disable BTRFS.
+
+  [ Bastian Blank ]
+  * [alpha] Fix location of kernel image.
+  * Add source link to headers packages. (closes: #523726)
+
+  [ Martin Michlmayr ]
+  * Add some sata_mv fixes for Kirkwood from Marvell:
+    - use new sata phy register settings for new devices
+    - increate the IORDY timeout for the soc controllers
+
+ -- maximilian attems <maks@debian.org>  Fri, 17 Apr 2009 10:36:03 +0200
+
+linux-2.6 (2.6.29-2) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * [arm/ixp4xx] Build in LEDS_TRIGGER_TIMER (closes: #521141).
+  * [mips*/4kc-malta, mips*/5kc-malta] Build in RTC_DRV_CMOS.
+
+  [ maximilian attems ]
+  * linux-libc-dev: Bump versioned replaces libdrm-dev.
+  * parisc: hardcode gcc-4.3 usage.
+  * Postrm cleanup new module-init-tools 3.7 files.
+
+  [ Bastian Blank ]
+  * Install all needed Makefiles into common headers package.
+    (closes: #521472)
+  * Add stable release 2.6.29.1:
+    - V4L: v4l2-common: remove incorrect MODULE test
+    - sparc64: Fix reset hangs on Niagara systems.
+    - sparc64: Flush TLB before releasing pages.
+    - sparc64: Fix MM refcount check in smp_flush_tlb_pending().
+    - KVM: MMU: Fix another largepage memory leak
+    - cfg80211: fix incorrect assumption on last_request for 11d
+    - lguest: fix spurious BUG_ON() on invalid guest stack.
+    - lguest: wire up pte_update/pte_update_defer
+    - VM, x86, PAT: Change is_linear_pfn_mapping to not use vm_pgoff
+    - x86: mtrr: don't modify RdDram/WrDram bits of fixed MTRRs
+    - x86: ptrace, bts: fix an unreachable statement
+    - x86: fix 64k corruption-check
+    - x86, uv: fix cpumask iterator in uv_bau_init()
+    - x86, PAT, PCI: Change vma prot in pci_mmap to reflect inherited prot
+    - Add a missing unlock_kernel() in raw_open()
+    - fuse: fix fuse_file_lseek returning with lock held
+    - ARM: 5435/1: fix compile warning in sanity_check_meminfo()
+    - ARM: twl4030 - leak fix
+    - ARM: fix leak in iop13xx/pci
+    - ARM: cumana: Fix a long standing bogon
+    - ARM: 5428/1: Module relocation update for R_ARM_V4BX
+    - ARM: pxa: fix overlay being un-necessarily initialized on pxa25x
+    - DVB: firedtv: FireDTV S2 problems with tuning solved
+    - cfg80211: force last_request to be set for OLD_REG if regdom is EU
+    - CIFS: Fix memory overwrite when saving nativeFileSystem field during mount
+    - ath5k: warn and correct rate for unknown hw rate indexes
+    - ath5k: disable MIB interrupts
+    - b43: fix b43_plcp_get_bitrate_idx_ofdm return type
+    - ath9k: fix dma mapping leak of rx buffer upon rmmod
+    - ath5k: use spin_lock_irqsave for beacon lock
+    - cifs: fix buffer format byte on NT Rename/hardlink
+    - ath9k: downgrade xmit queue full message to xmit debug
+    - KVM: SVM: set accessed bit for VMCB segment selectors
+    - KVM: VMX: Don't allow uninhibited access to EFER on i386
+    - USB: add quirk to avoid config and interface strings
+    - USB: gadget: fix rndis regression
+    - USB: usb-storage: increase max_sectors for tape drives
+    - USB: fix USB_STORAGE_CYPRESS_ATACB
+    - USB: EHCI: add software retry for transaction errors
+    - xfrm: spin_lock() should be spin_unlock() in xfrm_state.c
+    - ipv6: Plug sk_buff leak in ipv6_rcv (net/ipv6/ip6_input.c)
+    - GRO: Disable GRO on legacy netif_rx path (closes: #521691)
+    - bridge: bad error handling when adding invalid ether address
+    - dnet: drivers/net/dnet.c needs <linux/io.h>
+    - udp: Wrong locking code in udp seq_file infrastructure
+    - netfilter: nf_conntrack_tcp: fix unaligned memory access in tcp_sack
+
+  [ dann frazier ]
+  * bnx2: correct firmware revisions (closes: #522049)
+  * [mips] Zero upper 32-bits of compat llseek (closes: #521016)
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 04 Apr 2009 15:13:33 +0200
+
+linux-kbuild-2.6 (2.6.29-1) unstable; urgency=low
+
+  * New upstream version. 
+  * Autogenerate list of supported options in modpost. (closes: #518961)
+    - Build-depend against python.
+  * Use debhelper compat level 7.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 26 Mar 2009 12:54:47 +0100
+
+linux-2.6 (2.6.29-1) unstable; urgency=low
+
+  * New upstream release
+    - tg3 use request_firmware and firmware nuked.
+    - acenic use request_firmware and firmware nuked.
+    - e100 use request_firmware and firmware nuked. (closes: #494308)
+    - cassini use request_firmware and firmware nuked.
+    - starfire use request_firmware and firmware nuked. (closes: #501152)
+    - cxgb3 use request_firmware and firmware nuked.
+    - NR_CPUS setting no longer affects size of modules. (closes: #516709)
+    - orinoco: use KERN_DEBUG for link status messages. (closes: #447549)
+    - [CIFS] Fix oops in cifs_strfromUCS_le mounting to servers which do
+      not specify their OS. (closes: #463402)
+    - fixes conflict between <asm/byteorder.h> and <endian.h> on mips
+      (closes: #519761)
+
+  [ maximilian attems ]
+  * topconfig set new NET_NS, NET_SCH_DRR, NET_CLS_CGROUP, LIB80211,
+    SCSI_CXGB3_ISCSI, NATIONAL_PHY, STE10XP, LSI_ET1011C_PHY, BTRFS_FS,
+    SQUASHFS, PCI_STUB, WIMAX, MTD_LPDDR, EEPROM_AT24, EEPROM_AT25,
+    EEPROM_LEGACY, BLK_DEV_IT8172, SMSC9420, WIMAX_I2400M_USB,
+    WIMAX_I2400M_SDIO, MISDN_HFCUSB, SENSORS_ADT7475, SENSORS_LTC4245,
+    RADIO_TEA5764, SND_HDA_CODEC_INTELHDMI, RT2860, RT2870, RTL8187SE,
+    LIBFC, FCOE, ATL1C, JOYSTICK_WALKERA0701, TOUCHSCREEN_WACOM_W8001,
+    TOUCHSCREEN_TSC2007, W1_SLAVE_DS2431, WM8350_POWER, SOC_CAMERA_MT9T031,
+    SOC_CAMERA_TW9910, SOC_CAMERA_OV772X, USB_STV06XX, USB_GSPCA_OV534,
+    DVB_LGDT3304, WM8350_WATCHDOG, SMSC_SCH311X_WDT, SND_HRTIMER,
+    SND_HDA_RECONFIG, GREENASIA_FF, USB_SERIAL_SIEMENS_MPI,
+    USB_SERIAL_OPTICON, LEDS_ALIX2, LEDS_WM8350, OCFS2_FS_POSIX_ACL,
+    BTRFS_FS_POSIX_ACL, ATM_SOLOS, MFD_PCF50633, PCF50633_ADC, PCF50633_GPIO,
+    REGULATOR_PCF50633, DVB_S921, EDAC_I5400, RTC_DRV_PCF50633,
+    INPUT_PCF50633_PMU, CHARGER_PCF50633, DEVPTS_MULTIPLE_INSTANCES,
+    SCHED_OMIT_FRAME_POINTER, DCB, IXGBE_DCB, SFC_MTD, BE2NET, DNET.
+  * topconfig enable SND_HDA_HWDEP for sound debugging purpose.
+  * topconfig enable USB_HIDDEV (closes: #517771)
+  * [x86] set DELL_LAPTOP, COMEDI, X86_PTRACE_BTS, XENFS, XEN_COMPAT_XENFS,
+    X86_REROUTE_FOR_BROKEN_BOOT_IRQS, OPTIMIZE_INLINING.
+  * [x86] unset DRM_I915_KMS due to upgrade path from Lenny override with
+    modeset module param.
+  * temp.image.plain/preinst: Consistent output.
+  * [x86_64] set SPARSE_IRQ, NUMA_MIGRATE_IRQ_DESC, TREE_RCU.
+  * [x86_32] set BLK_DEV_CS5536.
+  * [powerpc] set PHANTOM, HP_ILO, MV643XX_ETH, MOUSE_BCM5974, VIRTUALIZATION.
+  * topconfig unset legacy SCSI_PROC_FS, PCMCIA_IOCTL, ACPI_PROCFS_POWER,
+    ACPI_PROC_EVENT.
+
+  [ Bastian Blank ]
+  * Use external source directory for all builds.
+  * Use external source directory for all header packages.
+  * Use dh_prep.
+  * Update copyright file.
+  * [s390/s390] Disable BTRFS.
+  * [sparc] Use sparc as kernel architecture.
+  * Update kconfig report changes patch.
+  * [s390] Enable KVM.
+  * Use debhelper compat level 7.
+
+  [ Martin Michlmayr ]
+  * [mips/r4k-ip22] Build in RTC_DRV_DS1286.
+  * [mips/r5k-ip32] Build in RTC_DRV_CMOS (Closes: #516775).
+  * [arm/versatile, arm/iop32x, arm/ixp4xx] Make LLC2 modular.
+  * [arm, mips, mipsel] Make MII modular.
+  * [arm/ixp4xx] Make IXP4XX_WATCHDOG modular.
+  * topconfig: Disable NET_DSA since this hardware is special purpose and
+    the option cannot be made modular at the moment and bloats the kernel
+    image too much.
+  * [arm, armel] Enable various V4L USB devices. (Closes: #518582)
+  * [arm/orion5x] Build the SENSORS_LM75 module since it's needed on the
+    D-Link DNS-323.
+  * [arm/iop32x, arm/ixp4xx, arm/orion5x] Enable INPUT_TOUCHSCREEN.
+  * [arm/iop32x, arm/ixp4xx, arm/orion5x] Enable INPUT_JOYDEV, GAMEPORT
+    and INPUT_JOYSTICK (Closes: #520433).
+  * [arm/iop32x, arm/ixp4xx, arm/orion5x] Add a size check to ensure that
+    the kernel will fit in flash.
+  * Add patches from git.marvell.com to improve Kirkwood support:
+    - make gpio /input/output validation separate
+    - MPP initialization code
+    - SDIO driver for Marvell SoCs
+    - SDIO driver registration for DB6281 and RD6281
+    - register internal devices in a common place
+    - Marvell SheevaPlug support
+    - SheevaPlug USB Power Enable setup
+    - SheevaPlug LED support
+    - Hook up I2C on Kirkwood
+    - Add support for QNAP TS-119/TS-219 Turbo NAS
+  * [armel/kirkwood] Add an image for Marvell's Kirkwood platform.
+
+  [ Ben Hutchings ]
+  * Remove firmware from drivers and make them use request_firmware():
+    - mga (closes: #502666)
+    - qla1280 (closes: #502667)
+    - r128 (closes: #494007)
+    - radeon (closes: #494009)
+    - tehuti (closes: #501153)
+    - typhoon (closes: #502669)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 24 Mar 2009 14:32:11 +0100
+
+linux-kbuild-2.6 (2.6.28-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 22 Feb 2009 13:45:39 +0100
+
+linux-2.6 (2.6.28-1) unstable; urgency=low
+
+  * New upstream release
+    - new btusb. (closes: #505184)
+    - iwlagn driver for Intel Wifi Link 5100 and 5300. (closes: #501157)
+    - drm git branch vblank-rework merged. (closes: #456219)
+    - netfilter.h got in.h include. (closes: #487103)
+    - netlink errno propageted. (closes: #489340)
+    - agp g41 support (closes: #513228)
+    - Includes atl2 driver (Closes: #500065)
+    - Fixes loading of video module on Samsung systems
+      (Closes: #475319, #495697)
+    - Fix rf_kill handling of iwl3945 driver (Closes: #503688)
+    - Fix adjtimex frequency offset (Closes: #432877)
+    - Fix oopses with Canon PIXMA MP150 (Closes: #487725)
+    - Fix excessive interrrupts with compiz (Closes: #456219)
+    - dsp56k: use request_firmware and firmware nuked (closes: #494010)
+    - dabusb: use request_firmware and firmware nuked (closes: #502663)
+    - kaweth: use request_firmware and firmware nuked (closes: #502665)
+
+  [ maximilian attems ]
+  * Reenable new Juju firewire stack.
+  * topconfig set ATH9K, IWL5000, IP_NF_SECURITY, IP6_NF_SECURITY,
+    BRIDGE_EBT_IP6, BT_HCIBTUSB, TOUCHSCREEN_INEXIO, TOUCHSCREEN_TOUCHIT213,
+    VIRTIO_CONSOLE, VIDEO_ZORAN_ZR36060, USB_VIDEO_CLASS_INPUT_EVDEV,
+    USB_GSPCA, USB_S2255, OCFS2_FS_STATS, OMFS_FS, CRYPTO_RMD128,
+    CRYPTO_RMD160, CRYPTO_RMD256, CRYPTO_RMD320, VLAN_8021Q_GVRP, HP_WMI,
+    COMPAL_LAPTOP, SCSI_DH, SCSI_DH_RDAC, SCSI_DH_HP_SW, SCSI_DH_EMC,
+    SCSI_DH_ALUA, MAC80211_HWSIM, USB_HSO, BLK_DEV_INTEGRITY, SGI_XP, SGI_GRU,
+    TLAN, ATM_IA, ATM_FORE200E, MISDN, I2C_HELPER_AUTO, I2C_ISCH,
+    I2C_NFORCE2_S4985, AT24, SENSORS_AD7414, SENSORS_ADCXX,
+    SOC_CAMERA_PLATFORM, VIDEO_SH_MOBILE_CEU, DVB_USB_DW2102, DVB_USB_ANYSEE,
+    DVB_SIANO_SMS1XXX, DVB_DRX397XD, MMC_SDHCI_PCI (closes: #507150),
+    MMC_SDRICOH_CS (closes: #509979), EDAC_I5100, RTC_DRV_M41T94,
+    RTC_DRV_DS1305, UBIFS, EXT4 (closes: #512266), CGROUP_FREEZER,
+    NETFILTER_TPROXY, NETFILTER_XT_TARGET_TPROXY, NETFILTER_XT_MATCH_RECENT,
+    NETFILTER_XT_MATCH_SOCKET, NET_ACT_SKBEDIT, PHONET, NET_9P_RDMA, ATL2, JME,
+    ENIC, MLX4_EN, USB_NET_SMSC95XX, I7300_IDLE, NET_SCH_MULTIQ, ICS932S401,
+    PANASONIC_LAPTOP, QLGE, LIBERTAS_THINFIRM, LIBERTAS_THINFIRM_USB,
+    INPUT_CM109, W1_SLAVE_BQ27000, SENSORS_ADT7462, SENSORS_MAX1111,
+    SENSORS_LIS3LV02D, MFD_WM8400, MFD_WM8350_I2C, SOC_CAMERA_MT9M111,
+    USB_M5602, USB_GSPCA_CONEX, USB_GSPCA_ETOMS, USB_GSPCA_FINEPIX,
+    USB_GSPCA_MARS, USB_GSPCA_OV519, USB_GSPCA_PAC207, USB_GSPCA_PAC7311,
+    USB_GSPCA_SONIXB, USB_GSPCA_SONIXJ, USB_GSPCA_SPCA500, USB_GSPCA_SPCA501,
+    USB_GSPCA_SPCA505, USB_GSPCA_SPCA506, USB_GSPCA_SPCA508, USB_GSPCA_SPCA561,
+    USB_GSPCA_STK014, USB_GSPCA_SUNPLUS, USB_GSPCA_T613, USB_GSPCA_TV8532,
+    USB_GSPCA_VC032X, USB_GSPCA_ZC3XX, C2PORT, C2PORT_DURAMAR_2150,
+    W83697UG_WDT, USB_MR800, DVB_USB_CINERGY_T2, DVB_USB_DTV5100,
+    DVB_USB_AF9015, DVB_DM1105, DVB_LGS8GL5, DVB_DUMMY_FE,
+    SND_HDA_CODEC_NVHDMI, SND_USB_US122L, USB_VST, LEDS_PCA9532, LEDS_HP_DISK,
+    LEDS_PCA955X, LEDS_TRIGGER_BACKLIGHT, EDAC_X38, RTC_DRV_RX8581,
+    RTC_DRV_DS1390, RTC_DRV_DS3234, RTC_DRV_DS1286, RTC_DRV_M48T35,
+    RTC_DRV_BQ4802, RTC_DRV_WM8350, UNEVICTABLE_LRU, MAC80211_RC_MINSTREL,
+    BATTERY_BQ27x00, REGULATOR, REGULATOR_BQ24022, REGULATOR_WM8350,
+    REGULATOR_WM8400, FB_VIA, FB_METRONOME, FB_MB862XX, UIO_SERCOS3,
+    CORE_DUMP_DEFAULT_ELF_HEADERS, NET_DSA, NET_DSA_MV88E6060,
+    NET_DSA_MV88E6131, NET_DSA_MV88E6123_61_65, IT87_WDT,
+    BACKLIGHT_MBP_NVIDIA, SND_HDA_INPUT_BEEP, USB_WUSB, USB_TMC, IDE_GD,
+    IDE_GD_ATA, IDE_GD_ATAPI, PCMCIA_IBMTR, USB_EMI62, USB_EMI26, USB_SEVSEG,
+    UWB, UWB_WLP, UWB_I1480U, UWB_I1480U_WLP, CRYPTO_FIPS, ANSI_CPRNG,
+    CRC_T10DIF, STAGING, ET131X, CRYPTO_ANSI_CPRNG, PRISM2_USB, HID_COMPAT,
+    SYSCTL_SYSCALL_CHECK, BOOT_TRACER.
+  * [x86] set MOUSE_BCM5974, X86_RESERVE_LOW_64K, OPROFILE_IBS,
+    MICROCODE_INTEL, MICROCODE_AMD, X86_VERBOSE_BOOTUP, MTRR_SANITIZER,
+    CRYPTO_CRC32C_INTEL, STRICT_DEVMEM.
+  * [x86_64] set AMD_IOMMU, INTR_REMAP.
+  * [x86_32] set TOUCHSCREEN_HTCPEN, MOUSE_PS2_OLPC.
+  * Add stable releases 2.6.28.1-6.
+  * Turn off SYSFS_DEPRECATED* for newer udev and proper /sys/.
+  * linux-libc-dev: Add versioned replaces libdrm-dev. (closes: #513604)
+  * topconfig: Enable MACVLAN. (closes: #504611)
+  * [ppc] BAYCOM_PAR, BAYCOM_EPP.
+  * [x86_64] set NR_CPUS to 512. (closes: #491309)
+  * [686-bigmem] set modular XEN_FBDEV_FRONTEND.
+  * Newer Standards-Version 3.8.0 without changes.
+  * Use update-initramfs for initramfs-tools.
+  * Fix preinst and postinst call to not use deprecated mkinitramfs-kpkg
+    interfaces.
+
+  [ Martin Michlmayr ]
+  * [mips/r4k-ip22, mips/sb1-bcm91250a] Don't build in ISO9660.
+  * [mipsel/r5k-cobalt] Enable INPUT_COBALT_BTNS.
+  * [mipsel/r5k-cobalt] Enable the new Cobalt LCD driver (FB_COBALT).
+  * [mips/r4k-ip22] Enable the new ALSA sound driver (SND_SGI_HAL2).
+  * [arm/iop32x, arm/ixp4xx] Don't build in KEYBOARD_ATKBD, MOUSE_PS2,
+    SERIO, JFFS2_FS, and CRAMFS.
+  * [arm/iop32x, arm/ixp4xx] Unset DEBUG_KERNEL so the kernel will
+    fit in flash.
+  * [arm/orion5x] Unset FIXED_PHY to work around a clash with fixed
+    mdio bus and mv643xx_eth.
+  * Migrate arm, armel, mips and mipsel away from kernel-package.
+
+  [ Ian Campbell ]
+  * [x86]: Enable Xen guest support in amd64 flavour. (closes: #495590)
+
+  [ dann frazier ]
+  * [x86, ia64] Enable ACPI_PCI_SLOT
+
+  [ Bastian Blank ]
+  * Make gcc-4.3 the default compiler. (closes: #463295)
+  * Add optional image size check.
+  * debian/rules.real: Setup image installation rules for alpha, hppa,
+    ia64 and sparc.
+  * Remove support to build images using kernel-package.
+
+ -- maximilian attems <maks@debian.org>  Wed, 18 Feb 2009 16:36:04 +0100
+
+linux-2.6 (2.6.26-12) unstable; urgency=high
+
+  [ Ian Campbell ]
+  * xen: fix ACPI processor throttling for when processor id is -1. (closes: #502849)
+
+  [ dann frazier ]
+  * Make sendmsg() block during UNIX garbage collection (CVE-2008-5300)
+  * Fix race conditions between inotify removal and umount (CVE-2008-5182)
+  * Fix DoS when calling svc_listen twice on the same socket while reading
+    /proc/net/atm/*vc (CVE-2008-5079)
+
+  [ Bastian Blank ]
+  * [openvz, vserver] Fix descriptions.
+  * [sparc] Enable Sun Logical Domains support. (closes: #501684)
+  * Fix coexistence of pata_marvell and ahci. (closes: #507432)
+  * [sparc] Support Intergraph graphics chips. (closes: #508108)
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 15 Dec 2008 12:57:18 +0100
+
+linux-2.6 (2.6.26-11) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * [sparc] Reintroduce dummy PCI host controller to workaround broken X.org.
+  * [sparc] Fix size checks in PCI maps.
+  * Add stable release 2.6.26.8:
+    - netfilter: restore lost ifdef guarding defrag exception
+    - netfilter: snmp nat leaks memory in case of failure
+    - netfilter: xt_iprange: fix range inversion match
+    - ACPI: dock: avoid check _STA method
+    - ACPI: video: fix brightness allocation
+    - sparc64: Fix race in arch/sparc64/kernel/trampoline.S
+    - math-emu: Fix signalling of underflow and inexact while packing result.
+    - tcpv6: fix option space offsets with md5
+    - net: Fix netdev_run_todo dead-lock
+    - scx200_i2c: Add missing class parameter
+    - DVB: s5h1411: Power down s5h1411 when not in use
+    - DVB: s5h1411: Perform s5h1411 soft reset after tuning
+    - DVB: s5h1411: bugfix: Setting serial or parallel mode could destroy bits
+    - V4L: pvrusb2: Keep MPEG PTSs from drifting away
+    - ACPI: Always report a sync event after a lid state change
+    - ALSA: use correct lock in snd_ctl_dev_disconnect()
+    - file caps: always start with clear bprm->caps_*
+    - libertas: fix buffer overrun
+    - net: Fix recursive descent in __scm_destroy().
+    - SCSI: qla2xxx: Skip FDMI registration on ISP21xx/22xx parts.
+      (Closes: #502552)
+    - edac cell: fix incorrect edac_mode
+    - ext[234]: Avoid printk floods in the face of directory corruption
+      (CVE-2008-3528)
+    - gpiolib: fix oops in gpio_get_value_cansleep()
+  * Override ABI changes.
+  * [xen] Update description. (closes: #505961)
+  * Revert parts of 2.6.26.6 to fix resume breakage. (closes: #504167)
+    - clockevents: prevent multiple init/shutdown
+    - clockevents: broadcast fixup possible waiters
+
+  [ dann frazier ]
+  * Fix buffer overflow in hfsplus (CVE-2008-4933)
+  * Fix BUG() in hfsplus (CVE-2008-4934)
+  * Fix stack corruption in hfs (CVE-2008-5025)
+  * Fix oops in tvaudio when controlling bass/treble (CVE-2008-5033)
+
+  [ Martin Michlmayr ]
+  * [arm/iop32x, arm/ixp4xx, arm/orion5x] Enable support for more partition
+    tables, including MAC_PARTITION (requested by Benoît Knecht).
+  * leds-pca9532: Fix memory leak and properly handle errors (Sven Wegener)
+  * leds-pca9532: Move i2c work to a workqueque (Riku Voipio). (closes:
+    #506116)
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 26 Nov 2008 11:43:48 +0100
+
+linux-2.6 (2.6.26-10) unstable; urgency=low
+
+  [ dann frazier ]
+  * sctp: Fix possible kernel panic in sctp_sf_abort_violation (CVE-2008-4618)
+
+  [ Martin Michlmayr ]
+  * DNS-323: add support for revision B1 machines (Matthew Palmer).
+  * ext3/ext4: Add support for non-native signed/unsigned htree hash
+    algorithms (Theodore Ts'o). (closes: #493957)
+  * [arm/ixp4xx] Enable USB_ACM (closes: #504723).
+
+  [ Bastian Blank ]
+  * agp: Fix stolen memory counting on Intel G4X. (closes: #502606)
+  * Add stable release 2.6.26.7:
+    - security: avoid calling a NULL function pointer in drivers/video/tvaudio.c
+    - DVB: au0828: add support for another USB id for Hauppauge HVR950Q
+    - drm/i915: fix ioremap of a user address for non-root (CVE-2008-3831)
+    - ACPI: Ignore _BQC object when registering backlight device
+    - hwmon: (it87) Prevent power-off on Shuttle SN68PT
+    - Check mapped ranges on sysfs resource files
+    - x86: avoid dereferencing beyond stack + THREAD_SIZE
+    - PCI: disable ASPM on pre-1.1 PCIe devices
+    - PCI: disable ASPM per ACPI FADT setting
+    - V4L/DVB (9053): fix buffer overflow in uvc-video
+    - V4L/DVB (8617): uvcvideo: don't use stack-based buffers for USB transfers.
+    - V4L/DVB (8498): uvcvideo: Return sensible min and max values when querying
+      a boolean control.
+    - V4L: zr36067: Fix RGBR pixel format
+    - V4L: bttv: Prevent NULL pointer dereference in radio_open
+    - libata: fix EH action overwriting in ata_eh_reset()
+    - libata: always do follow-up SRST if hardreset returned -EAGAIN
+    - fbcon_set_all_vcs: fix kernel crash when switching the rotated consoles
+    - modules: fix module "notes" kobject leak
+    - b43legacy: Fix failure in rate-adjustment mechanism
+    - CIFS: make sure we have the right resume info before calling CIFSFindNext
+    - sched_rt.c: resch needed in rt_rq_enqueue() for the root rt_rq
+    - tty: Termios locking - sort out real_tty confusions and lock reads
+    - x86, early_ioremap: fix fencepost error
+    - x86: improve UP kernel when CPU-hotplug and SMP is enabled
+    - x86: Reserve FIRST_DEVICE_VECTOR in used_vectors bitmap.
+  * [xen] Remove pte file workaround.
+
+  [ Ian Campbell ]
+  * [xen] Disable usage of PAT. (closes: #503821)
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 08 Nov 2008 10:50:58 +0100
+
+linux-2.6 (2.6.26-9) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.26.6:
+    - mm owner: fix race between swapoff and exit
+    - rtc: fix kernel panic on second use of SIGIO nofitication
+    - fbcon: fix monochrome color value calculation
+    - ALSA: snd-powermac: HP detection for 1st iMac G3 SL
+    - ALSA: snd-powermac: mixers for PowerMac G4 AGP
+    - sparc64: Fix missing devices due to PCI bridge test in
+      of_create_pci_dev().
+    - sparc64: Fix disappearing PCI devices on e3500.
+    - sparc64: Fix OOPS in psycho_pcierr_intr_other().
+    - sparc64: Fix interrupt register calculations on Psycho and Sabre.
+    - sparc64: Fix PCI error interrupt registry on PSYCHO.
+    - udp: Fix rcv socket locking
+    - sctp: Fix oops when INIT-ACK indicates that peer doesn't support AUTH
+      (CVE-2008-4576)
+    - sctp: do not enable peer features if we can't do them.
+    - ipsec: Fix pskb_expand_head corruption in xfrm_state_check_space
+    - netlink: fix overrun in attribute iteration
+    - niu: panic on reset
+    - ipv6: Fix OOPS in ip6_dst_lookup_tail().
+    - XFRM,IPv6: initialize ip6_dst_blackhole_ops.kmem_cachep
+    - af_key: Free dumping state on socket close
+    - pcmcia: Fix broken abuse of dev->driver_data
+    - clockevents: remove WARN_ON which was used to gather information
+    - ntp: fix calculation of the next jiffie to trigger RTC sync
+    - x86: HPET: read back compare register before reading counter
+    - x86: HPET fix moronic 32/64bit thinko
+    - clockevents: broadcast fixup possible waiters
+    - HPET: make minimum reprogramming delta useful
+    - clockevents: prevent endless loop lockup
+    - clockevents: prevent multiple init/shutdown
+    - clockevents: enforce reprogram in oneshot setup
+    - clockevents: prevent endless loop in periodic broadcast handler
+    - clockevents: prevent clockevent event_handler ending up handler_noop
+    - x86: fix memmap=exactmap boot argument
+    - x86: add io delay quirk for Presario F700
+    - ACPI: Avoid bogus EC timeout when EC is in Polling mode
+    - x86: fix SMP alternatives: use mutex instead of spinlock, text_poke is
+      sleepable
+    - rtc: fix deadlock
+    - mm: dirty page tracking race fix
+    - x86-64: fix overlap of modules and fixmap areas
+    - x86: PAT proper tracking of set_memory_uc and friends
+    - x86: fix oprofile + hibernation badness
+    - x86: fdiv bug detection fix
+    - rt2x00: Use ieee80211_hw->workqueue again
+    - x86: Fix 27-rc crash on vsmp due to paravirt during module load
+    - sg: disable interrupts inside sg_copy_buffer
+    - ocfs2: Increment the reference count of an already-active stack.
+    - APIC routing fix
+    - sched: fix process time monotonicity
+    - block: submit_bh() inadvertently discards barrier flag on a sync write
+    - x64, fpu: fix possible FPU leakage in error conditions
+    - x86-64: Clean up save/restore_i387() usage
+    - KVM: SVM: fix guest global tlb flushes with NPT
+    - KVM: SVM: fix random segfaults with NPT enabled
+    - ALSA: remove unneeded power_mutex lock in snd_pcm_drop
+    - ALSA: fix locking in snd_pcm_open*() and snd_rawmidi_open*()
+    - ALSA: oxygen: fix distorted output on AK4396-based cards
+    - ALSA: hda - Fix model for Dell Inspiron 1525
+    - SCSI: qla2xxx: Defer enablement of RISC interrupts until ISP
+      initialization completes.
+    - USB: fix hcd interrupt disabling
+    - smb.h: do not include linux/time.h in userspace
+    - pxa2xx_spi: fix build breakage
+    - pxa2xx_spi: chipselect bugfixes
+    - pxa2xx_spi: dma bugfixes
+    - mm: mark the correct zone as full when scanning zonelists
+    - async_tx: fix the bug in async_tx_run_dependencies
+    - drivers/mmc/card/block.c: fix refcount leak in mmc_block_open()
+    - ixgbe: initialize interrupt throttle rate
+    - i2c-dev: Return correct error code on class_create() failure
+    - x86-32: AMD c1e force timer broadcast late
+  * [x86] Update patch to detect not properly announced cmos RTC devices.
+  * [xen] Overtake hvc console by default.
+
+  [ maximilian attems ]
+  * [openvz] ip: NULL pointer dereferrence in tcp_v(4|6)_send_ack
+    (closes: #500472)
+  * [openvz] unset NF_CONNTRACK_IPV6 for now until abi bump.
+
+  [ Stephen R. Marenka ]
+  * [m68k] add patches to fix atari ethernec per Michael Schmitz:
+    atari-ethernec-IRQF_SHARED.diff and atari-ethernec-fixes.diff.
+  * [m68k] add mac-esp-fix-for-quadras-with-two-esp-chips.diff to fix macs
+    with dual scsi busses and a problem with xorg, per Finn Thain.
+  * [m68k] add atari-atari_keyb_init-operator-precedence.diff per
+    Michael Schmitz.
+  * [m68k] more mac patches, per Finn Thain.
+
+  [ Martin Michlmayr ]
+  * [arm/ixp4xx] Enable USB_ATM and USB_SPEEDTOUCH (closes: #502182).
+  * [arm/iop32x, arm/orion5x] Likewise.
+  * DNS-323: read MAC address from flash (Matthew Palmer).
+
+  [ dann frazier ]
+  * Restrict access to the DRM_I915_HWS_ADDR ioctl (CVE-2008-3831)
+  * Don't allow splicing to files opened with O_APPEND (CVE-2008-4554)
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 18 Oct 2008 12:14:22 +0200
+
+linux-2.6 (2.6.26-8) unstable; urgency=medium
+
+  [ dann frazier ]
+  * [x86] Fix broken LDT access in VMI (CVE-2008-4410)
+  * ata: Fix off-by-one-error that causes errors when reading a
+    block on the LBA28-LBA48 boundary
+  * [s390] prevent ptrace padding area read/write in 31-bit mode
+    (CVE-2008-1514)
+
+  [ Bastian Blank ]
+  * Fix generation of i386 Xen image information.
+  * [i386] Restrict the usage of long NOPs. (closes: #464962)
+  * Fix access to uninitialized user keyring. (closes: #500279)
+  * [x86] Fix detection of non-PNP RTC devices. (closes: #499230)
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 09 Oct 2008 12:07:21 +0200
+
+linux-2.6 (2.6.26-7) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * [xen] Add SuSE Xen patch. (closes: #495895)
+  * Only register notifiers in braille console if used, fixes Insert key.
+    (closes: #494374)
+  * Fix ACPI EC GPE storm detection. (closes: #494546)
+  * Disable useless support for ISP1760 USB host controller.
+    (closes: #498304)
+  * rt61pci: Add a sleep after firmware upload. (closes: #498828)
+
+  [ Stephen R. Marenka ]
+  * [m68k] Set CONFIG_ATARI_ETHERNEC=m for atari, since it only works
+    in modular form.
+  * [m68k] Enable CONFIG_ADB_PMU68K=y for mac.
+  * [m68k] Add atari-aranym-nf-wrappers.diff patch to fix atari LBD
+    problems, set CONFIG_LBD=y for atari.
+
+  [ Martin Michlmayr ]
+  * [arm/orion5x] Enable CONFIG_ATALK (requested by Ben Schwarz).
+  * [arm/versatile] Enable CONFIG_VFP. (closes: #499463)
+  * ath5k: Fix bad udelay calls on AR5210 code (Nick Kossifidis).
+  * [arm] No longer disable ATH5K.
+
+  [ dann frazier ]
+  * Add missing capability checks in sbni_ioctl (CVE-2008-3525)
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 01 Oct 2008 09:02:30 +0200
+
+linux-2.6 (2.6.26-6) unstable; urgency=low
+
+  [ maximilian attems ]
+  * [openvz] Enable checkpointing. (closes: #497292)
+
+  [ Bastian Blank ]
+  * Allow forced module loading again. (closes: #494144)
+  * Set IEEE 802.11 (wireless) regulatory domain default to EU.
+    (closes: #497971)
+  * [i386] Enable IDE ACPI support. Override ABI changes. (closes: #470528)
+  * [i386/686-bigmem] Promote to generic subarch. (closes: #476120)
+
+  [ Martin Michlmayr ]
+  * Fix dead 21041 ethernet after ifconfig down (Thomas Bogendoerfer).
+
+  [ dann frazier ]
+  * [hppa] Enable the FPU before using it, fixes booting on A500s
+    with our CONFIG_PRINTK_TIME=y setting. (closes: #499458)
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 24 Sep 2008 12:06:47 +0200
+
+linux-2.6 (2.6.26-5) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * Backport power-off method for Kurobox Pro.
+  * [arm/versatile] Really enable CONFIG_RTC_DRV_PL031 (closes: #484432).
+
+  [ Stephen R. Marenka ]
+  * [m68k] Set CONFIG_LBD=n for atari, since it conflicts with nfblock.
+
+  [ Bastian Blank ]
+  * Reenable SiS SATA support. (closes: #496603)
+  * [amd64,i386] Disable new-style SiS PATA support.
+  * Add stable release 2.6.26.4:
+    - sata_mv: don't issue two DMA commands concurrently
+    - KVM: MMU: Fix torn shadow pte
+    - x86: work around MTRR mask setting, v2
+    - nfsd: fix buffer overrun decoding NFSv4 acl (CVE-2008-3915)
+    - sunrpc: fix possible overrun on read of /proc/sys/sunrpc/transports
+      (CVE-2008-3911)
+    - r8169: balance pci_map / pci_unmap pair
+    - tg3: Fix firmware event timeouts
+    - crypto: authenc - Avoid using clobbered request pointer
+    - sparc64: Fix cmdline_memory_size handling bugs.
+    - sparc64: Fix overshoot in nid_range().
+    - ipsec: Fix deadlock in xfrm_state management. (closes: #497796)
+    - sctp: fix random memory dereference with SCTP_HMAC_IDENT option.
+    - sctp: correct bounds check in sctp_setsockopt_auth_key
+    - sch_prio: Fix nla_parse_nested_compat() regression
+    - sctp: add verification checks to SCTP_AUTH_KEY option
+    - sctp: fix potential panics in the SCTP-AUTH API.
+    - udp: Drop socket lock for encapsulated packets
+    - pkt_sched: Fix actions referencing
+    - pkt_sched: Fix return value corruption in HTB and TBF.
+    - netns: Add network namespace argument to rt6_fill_node() and
+      ipv6_dev_get_saddr()
+    - ipv6: Fix OOPS, ip -f inet6 route get fec0::1, linux-2.6.26,
+      ip6_route_output, rt6_fill_node+0x175 (CVE-2008-3686)
+    - AX.25: Fix sysctl registration if !CONFIG_AX25_DAMA_SLAVE
+    - mm: make setup_zone_migrate_reserve() aware of overlapping nodes
+    - 8250: improve workaround for UARTs that don't re-assert THRE correctly
+    - rtc_time_to_tm: fix signed/unsigned arithmetic
+    - drivers/char/random.c: fix a race which can lead to a bogus BUG()
+    - cifs: fix O_APPEND on directio mounts
+    - atl1: disable TSO by default
+    - forcedeth: fix checksum flag
+    - bio: fix bio_copy_kern() handling of bio->bv_len
+    - bio: fix __bio_copy_iov() handling of bio->bv_len
+    - ALSA: oxygen: prevent muting of nonexistent AC97 controls
+    - S390 dasd: fix data size for PSF/PRSSD command
+    - x86: fix "kernel won't boot on a Cyrix MediaGXm (Geode)"
+    - x86: work around MTRR mask setting
+    - USB: cdc-acm: don't unlock acm->mutex on error path
+    - binfmt_misc: fix false -ENOEXEC when coupled with other binary handlers
+    - fbdefio: add set_page_dirty handler to deferred IO FB
+    - eeepc-laptop: fix use after free
+    - PCI: fix reference leak in pci_get_dev_by_id()
+    - cramfs: fix named-pipe handling
+  * Override ABI changes.
+  * [hppa] Disable new-style RTC support. Override ABI changes.
+
+  [ maximilian attems ]
+  * openvz: Add upstream fixes up to 24cebf40278cb071ff8b. (closes: #497528)
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 10 Sep 2008 12:55:16 +0200
+
+linux-2.6 (2.6.26-4) unstable; urgency=low
+
+  [ maximilian attems ]
+  * x86: Reset ACPI_PROCFS_POWER for Lenny as buggy apps depend on it.
+    (closes: #495541)
+  * x86: ACPI: Fix thermal shutdowns
+  * openvz: Add upstream fixes up to 0f14912e3d2251aff. (closes: #494384)
+  * Add stable release 2.6.26.3:
+    - USB: fix interface unregistration logic
+    - usb-storage: unusual_devs entries for iRiver T10 and Datafab CF+SM reader
+    - usb-serial: don't release unregistered minors
+    - usb-storage: revert DMA-alignment change for Wireless USB
+    - usb-storage: automatically recognize bad residues
+    - USB: ftdi_sio: Add USB Product Id for ELV HS485
+    - qla2xxx: Set an rport's dev_loss_tmo value in a consistent manner.
+    - dccp: change L/R must have at least one byte in the dccpsf_val field
+      (CVE-2008-3276)
+    - KVM: Avoid instruction emulation when event delivery is pending
+    - cs5520: add enablebits checking
+    - acer-wmi: Fix wireless and bluetooth on early AMW0 v2 laptops
+    - USB: usb-storage: quirk around v1.11 firmware on Nikon D4
+    - radeonfb: fix accel engine hangs
+    - radeon: misc corrections
+    - sparc64: Fix global reg snapshotting on self-cpu.
+    - sparc64: Do not clobber %g7 in setcontext() trap.
+    - sparc64: Fix end-of-stack checking in save_stack_trace().
+    - sparc64: Fix recursion in stack overflow detection handling.
+    - sparc64: Make global reg dumping even more useful.
+    - sparc64: Implement IRQ stacks.
+    - sparc64: Handle stack trace attempts before irqstacks are setup.
+    - PCI: Limit VPD length for Broadcom 5708S
+    - ide: it821x in pass-through mode segfaults in 2.6.26-stable
+    - syncookies: Make sure ECN is disabled
+    - USB: ftdi_sio: add support for Luminance Stellaris Evaluation/Development
+      Kits
+    - i2c: Fix NULL pointer dereference in i2c_new_probed_device
+    - SCSI: hptiop: add more PCI device IDs
+    - SCSI: ses: fix VPD inquiry overrun
+    - SCSI: scsi_transport_spi: fix oops in revalidate
+    - CIFS: Fix compiler warning on 64-bit
+    - x86: fix spin_is_contended()
+    - matrox maven: fix a broken error path
+    - i2c: Let users select algorithm drivers manually again
+    - CIFS: properly account for new user= field in SPNEGO upcall string
+      allocation
+    - x86: fix setup code crashes on my old 486 box
+    - KVM: ia64: Fix irq disabling leak in error handling code
+    - mlock() fix return values
+    - rtl8187: Fix lockups due to concurrent access to config routine
+    - KVM: task switch: segment base is linear address
+    - KVM: task switch: use seg regs provided by subarch instead of reading
+      from GDT
+    - KVM: task switch: translate guest segment limit to virt-extension byte
+      granular field
+    - r8169: avoid thrashing PCI conf space above RTL_GIGA_MAC_VER_06
+    - sparc64: FUTEX_OP_ANDN fix
+    - posix-timers: do_schedule_next_timer: fix the setting of ->si_overrun
+    - posix-timers: fix posix_timer_event() vs dequeue_signal() race
+    - vt8623fb: fix kernel oops
+    - ide-cd: fix endianity for the error message in cdrom_read_capacity
+    - qla2xxx: Add dev_loss_tmo_callbk/terminate_rport_io callback support.
+    - random32: seeding improvement
+    - CIFS: mount of IPC$ breaks with iget patch
+    - CIFS: if get root inode fails during mount, cleanup tree connection
+    - crypto: padlock - fix VIA PadLock instruction usage with
+      irq_ts_save/restore()
+    - ipvs: Fix possible deadlock in estimator code
+    - SCSI: block: Fix miscalculation of sg_io timeout in CDROM_SEND_PACKET
+      handler.
+    - ALSA: asoc: restrict sample rate and size in Freescale MPC8610 sound
+      drivers
+    - ALSA: ASoC: fix SNDCTL_DSP_SYNC support in Freescale 8610 sound drivers
+    - USB: pl2023: Remove USB id (4348:5523) handled by ch341
+    - relay: fix "full buffer with exactly full last subbuffer" accounting
+      problem
+    - ipv6: Fix ip6_xmit to send fragments if ipfragok is true
+    - x86: amd opteron TOM2 mask val fix
+
+  [ dann frazier ]
+  * [ia64] Fix boot-time hang w/ PRINTK_TIME by ensuring that cpu0 can access
+    per-cpu vars in early boot
+  * delay calls to sched_clock() until after sched_clock_init() to prevent
+    inaccurate printk timings on ia64 and presumably other architectures
+
+  [ Ian Campbell ]
+  * [xen] import upstream fix to fb-defio driver used by Xen framebuffer.
+
+  [ Bastian Blank ]
+  * [powerpc] Enable proper RTC support. (closes: #484693)
+
+  [ Martin Michlmayr ]
+  * Add Marvell Orion fixes:
+    - sata_mv: add the Gen IIE flag to the SoC devices.
+    - sata_mv: don't avoid clearing interrupt status on SoC host adapters
+
+  [ dann frazier ]
+  * Fix overflow condition in sctp_setsockopt_auth_key (CVE-2008-3526)
+  * Fix panics that may occur if SCTP AUTH is disabled (CVE-2008-3792)
+  * [x86] Fix memory leak in the copy_user routine
+    (CVE-2008-0598, closes: #490910)
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 28 Aug 2008 08:46:42 +0200
+
+linux-2.6 (2.6.26-3) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Disable Emagic Audiowerk 2 soundcard support. The PCI IDs clashes with
+    many DVB cards.
+  * Update VServer patch to 2.3.0.35.
+  * [armel/versatile] Override ABI changes.
+  * [i386/686-bigmem] Add VServer image.
+
+  [ Aurelien Jarno ]
+  * [armel/versatile] Disable CONFIG_NO_HZ, CONFIG_HIGH_RES_TIMERS for
+    dynticks. (closes: #494842)
+
+  [ Martin Michlmayr ]
+  * Fix PCIe on the Kurobox Pro (Lennert Buytenhek).
+  * Fix regressions caused by the "use software GSO for SG+CSUM capable
+    netdevices" patch:
+    - loopback: Enable TSO (Herbert Xu)
+    - net: Preserve netfilter attributes in skb_gso_segment using
+      __copy_skb_header (Herbert Xu)
+
+  [ dann frazier ]
+  * [amd64] Fix typo in TOM2 mask value, preventing a hang on some opteron
+    systems. (closes: #494365)
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 18 Aug 2008 15:34:38 +0200
+
+linux-kbuild-2.6 (2.6.26-3) unstable; urgency=low
+
+  * Fix recursive installation. (closes: #494435)
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 10 Aug 2008 13:01:41 +0200
+
+linux-kbuild-2.6 (2.6.26-2) unstable; urgency=low
+
+  * Include new scripts. (closes: #494435)
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 09 Aug 2008 20:45:12 +0200
+
+linux-2.6 (2.6.26-2) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * [powerpc] Install arch/powerpc/lib/crtsavres.o into the headers, it is
+    used during module linking.
+  * Add stable release 2.6.26.1:
+    - Fix off-by-one error in iov_iter_advance()
+    - ath5k: don't enable MSI, we cannot handle it yet
+    - b43legacy: Release mutex in error handling code
+    - cpufreq acpi: only call _PPC after cpufreq ACPI init funcs got called already
+    - VFS: increase pseudo-filesystem block size to PAGE_SIZE
+    - markers: fix markers read barrier for multiple probes
+    - tmpfs: fix kernel BUG in shmem_delete_inode
+    - mpc52xx_psc_spi: fix block transfer
+    - ixgbe: remove device ID for unsupported device
+    - UML - Fix boot crash
+    - eCryptfs: use page_alloc not kmalloc to get a page of memory
+    - x86: fix kernel_physical_mapping_init() for large x86 systems
+    - DVB: cx23885: SRAM changes for the 885 and 887 silicon parts
+    - DVB: cx23885: Reallocated the sram to avoid concurrent VIDB/C issues
+    - DVB: cx23885: DVB Transport cards using DVB port VIDB/TS1 did not stream
+    - DVB: cx23885: Ensure PAD_CTRL is always reset to a sensible default
+    - V4L: cx23885: Bugfix for concurrent use of /dev/video0 and /dev/video1
+    - V4L: saa7134: Copy tuner data earlier to avoid overwriting manual tuner type
+    - V4L: uvcvideo: Add support for Medion Akoya Mini E1210 integrated webcam
+    - V4L: uvcvideo: Make input device support optional
+    - V4L: uvcvideo: Don't free URB buffers on suspend
+    - V4L: uvcvideo: Use GFP_NOIO when allocating memory during resume
+    - V4L: uvcvideo: Fix a buffer overflow in format descriptor parsing
+    - DVB: dib0700: add support for Hauppauge Nova-TD Stick 52009
+    - V4L: cx18: Upgrade to newer firmware & update documentation
+    - ALSA: trident - pause s/pdif output
+    - myri10ge: do not use mgp->max_intr_slots before loading the firmware
+    - myri10ge: do not forget to setup the single slice pointers
+    - iop-adma: fix platform driver hotplug/coldplug
+    - sparc64: Do not define BIO_VMERGE_BOUNDARY.
+    - sparc64: Fix cpufreq notifier registry.
+    - sparc64: Fix lockdep issues in LDC protocol layer.
+    - tcp: Clear probes_out more aggressively in tcp_ack().
+    - ARM: fix fls() for 64-bit arguments
+    - vmlinux.lds: move __attribute__((__cold__)) functions back into final .text section
+    - rtc-at91rm9200: avoid spurious irqs
+    - ide-cd: fix oops when using growisofs
+    - x86: fix crash due to missing debugctlmsr on AMD K6-3
+    - cpusets: fix wrong domain attr updates
+    - proc: fix /proc/*/pagemap some more
+    - Fix build on COMPAT platforms when CONFIG_EPOLL is disabled
+    - markers: fix duplicate modpost entry
+    - x86, suspend, acpi: enter Big Real Mode
+    - USB: fix usb serial pm counter decrement for disconnected interfaces
+    - x86 reboot quirks: add Dell Precision WorkStation T5400
+    - Fix typos from signal_32/64.h merge
+    - rcu: fix rcu_try_flip_waitack_needed() to prevent grace-period stall
+    - Patch Upstream: x86 ptrace: fix PTRACE_GETFPXREGS error
+    - KVM: MMU: Fix potential race setting upper shadow ptes on nonpae hosts
+    - KVM: MMU: nuke shadowed pgtable pages and ptes on memslot destruction
+    - KVM: x86 emulator: Fix HLT instruction
+    - KVM: VMX: Add ept_sync_context in flush_tlb
+    - KVM: mmu_shrink: kvm_mmu_zap_page requires slots_lock to be held
+    - KVM: SVM: fix suspend/resume support
+    - KVM: VMX: Fix a wrong usage of vmcs_config
+    - isofs: fix minor filesystem corruption
+    - quota: fix possible infinite loop in quota code
+    - hdlcdrv: Fix CRC calculation.
+    - ipv6: __KERNEL__ ifdef struct ipv6_devconf
+    - ipv6: use timer pending
+    - udplite: Protection against coverage value wrap-around
+    - pxamci: trivial fix of DMA alignment register bit clearing
+  * [sparc] Install asm-sparc headers again.
+  * Force RTC on by default and set clock on startup. Override ABI changes.
+  * [i386, amd64] Make the CMOS RTC support builtin. (closes: #493567)
+  * Add stable release 2.6.26.2:
+    - sound: ensure device number is valid in snd_seq_oss_synth_make_info
+    - Ath5k: kill tasklets on shutdown
+    - Ath5k: fix memory corruption
+    - vfs: fix lookup on deleted directory
+    - ALSA: emu10k1 - Fix inverted Analog/Digital mixer switch on Audigy2
+    - ALSA: hda - Add missing Thinkpad Z60m support
+    - ALSA: hda - Fix DMA position inaccuracy
+    - ALSA: hda - Fix wrong volumes in AD1988 auto-probe mode
+    - Add compat handler for PTRACE_GETSIGINFO
+    - Bluetooth: Signal user-space for HIDP and BNEP socket errors
+    - Input: i8042 - add Acer Aspire 1360 to nomux blacklist
+    - Input: i8042 - add Gericom Bellagio to nomux blacklist
+    - Input: i8042 - add Intel D845PESV to nopnp list
+    - jbd: fix race between free buffer and commit transaction
+    - NFS: Ensure we zap only the access and acl caches when setting new acls
+    - SCSI: ch: fix ch_remove oops
+    - linear: correct disk numbering error check
+    - netfilter: xt_time: fix time's time_mt()'s use of do_div()
+    - Kprobe smoke test lockdep warning
+    - Close race in md_probe
+    - x86: io delay - add checking for NULL early param
+    - x86: idle process - add checking for NULL early param
+    - SCSI: bsg: fix bsg_mutex hang with device removal
+    - netfilter: nf_nat_sip: c= is optional for session
+    - romfs_readpage: don't report errors for pages beyond i_size
+    - ftrace: remove unneeded documentation
+
+  [ Martin Michlmayr ]
+  * METH: fix MAC address setup (Thomas Bogendoerfer)
+  * Export the reset button of the QNAP TS-409.
+  * net: use software GSO for SG+CSUM capable netdevices (Lennert Buytenhek)
+
+  [ dann frazier ]
+  * device_create interface changed between 2.6.26 and 2.6.27; adjust hpilo
+    backport appropriately. Fixes a NULL pointer dereference in ilo_probe().
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 08 Aug 2008 08:09:00 +0200
+
+linux-kbuild-2.6 (2.6.26-1) unstable; urgency=low
+
+  * New upstream version.
+  * modpost: Support new parameters.
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 02 Aug 2008 13:09:54 +0200
+
+linux-2.6 (2.6.26-1) unstable; urgency=low
+
+  * New upstream release see http://kernelnewbies.org/Linux_2_6_26
+    - UDF 2.50 support. (closes: #480910)
+    - mmc: increase power up delay (closes: #481190)
+    - snd-hda-intel suspend troubles fixed. (closes: #469727, #481613, #480034)
+    - cifs QueryUnixPathInfo fix (closes: #480995)
+    - r8169 oops in r8169_get_mac_version (closes: #471892)
+    - netfilter headers cleanup (closes: #482331)
+    - iwlwifi led support (closes: #469095)
+    - ath5k associates on AR5213A (closes: #463785)
+    - T42 suspend fix (closes: #485873)
+    - cpuidle acpi driver: fix oops on AC<->DC (closes: #477201)
+    - opti621 ide fixes (closes: #475561)
+    - ssh connection hangs with mac80211 (closes: #486089)
+    - ocfs2: Allow uid/gid/perm changes of symlinks (closes: #479475)
+    - xircom_tulip_cb: oboslete driver removed (closes: #416900)
+    - r8169 properly detect link status (closes: #487586)
+    - iwl3945 connection + support fixes (closes: #481436, #482196)
+    - longrun cpufreq min freq fix (closes: #468149)
+    - emux midi synthesizer SOFT_PEDAL-release event (closes: #474312)
+    - vmemmap fixes to use smaller pages (closes: #483489)
+    - x86 freeze fixes (closes: #482100, #482074)
+    - xen boot failure fix (closes: #488284)
+    - gdb read floating-point and SSE registers (closes: #485375)
+    - USB_PERSIST is default on (closes: #489963)
+    - alsa snd-hda Dell Inspiron fix (closes: #490649)
+    - ipw2200: queue direct scans (closes: #487721)
+    - better gcc-4.3 support (closes: #492301)
+    - iwl3945 monitor mode. (closes: #482387)
+
+  [ maximilian attems ]
+  * topconfig set CRYPTO_CTS, SND_PCSP, SND_AW2, IWL4965_LEDS, IWL3945_LEDS,
+    RT2400PCI_LEDS, RT2500PCI_LEDS, RT61PCI_LEDS, RT2500USB_LEDS,
+    RT73USB_LEDS, NF_CT_PROTO_DCCP, BRIDGE_EBT_NFLOG, IWLWIFI_RFKILL,
+    USB_SERIAL_SPCP8X5, USB_STORAGE_CYPRESS_ATACB, DVB_ISL6405, DVB_AU8522,
+    VIDEO_EM28XX_DVB, VIDEO_CX18, VIDEO_AU0828, SOC_CAMERA_MT9M001,
+    SOC_CAMERA_MT9V022, DVB_TUNER_ITD1000, VIDEO_PVRUSB2_DVB, USB_C67X00_HCD,
+    USB_ISP1760_HCD, HTC_PASIC3, I2C_PCA_PLATFORM, TOUCHSCREEN_WM97XX,
+    JOYSTICK_ZHENHUA, SFC, ACCESSIBILITY, UIO_SMX, LOGIRUMBLEPAD2_FF,
+    A11Y_BRAILLE_CONSOLE, EDS_TRIGGER_DEFAULT_ON, VIDEO_ALLOW_V4L1, ATA_ACPI,
+    SATA_PMP, ATA_SFF, USB_SERIAL_MOTOROLA, USB_WDM, MAC80211_MESH,
+    IPV6_MROUTE, IPV6_PIMSM_V2, MTD_AR7_PARTS, SENSORS_IBMAEM, PATA_SCH,
+    CGROUP_DEVICE, USB_ISIGHTFW, HW_RANDOM_VIRTIO, RTC_DRV_FM3130,
+    USB_VIDEO_CLASS, CIFS_DFS_UPCALL.
+  * [amd64, i386]: KVM_CLOCK, KVM_GUEST, ISCSI_IBFT_FIND, ISCSI_IBFT, THERMAL,
+    EEEPC_LAPTOP, FB_N411, THERMAL_HWMON.
+  * [amd64]: Enable SCSI_DPT_I2O as 64 bit now.
+  * Reenable USB_SERIAL_EDGEPORT, USB_SERIAL_EDGEPORT_TI. (closes: #480195)
+  * Enable TCP_MD5SIG for BGP sessions. (closes: #443742)
+  * Add recognised alsa cards to bug report.
+  * topconfig: Enable HYSDN, no longer broken on smp.
+  * Add request_firmware patch for keyspan. (closes: #448900)
+  * [x86]: Enable dma engine. (closes: #473331)
+  * [ppc64]: Enable IBMEBUS and EHEA. (closes: #484888)
+  * topconfig: Enable PROFILING across all flavours. (closes: #484885)
+  * 486: enable OLPC support thanks Andres Salomon for merge.
+    Kconfig variable patch by Robert Millan (closes: #485063).
+  * Add request_firmware patch for ip2.
+  * Add request_firmware patch for acenic. (closes: #284221)
+  * [x86, ia64]: Set HPET_RTC_IRQ. (closes: #479709, #476970)
+  * [ppc]: Set SND_VIRMIDI. (closes: #290090)
+  * Fallback for userspace compatibility to old IEEE 1394 FireWire stack.
+    (closes: #451367, #475295, #478419)
+  * [x86]: Enable modular FB_UVESA. (closes: #473180)
+  * JFFS2 enable summary and compressor support. (closes: #488242)
+  * Add OLPC sdhci quirks. Thanks Andres Salomon <dilinger@debian.org>
+    (closes: #485192)
+  * [ppc]: Enable RTC_DRV_PPC. (closes: #484693) Thanks for the patch to
+    Geoff Levand <geoffrey.levand@am.sony.com>.
+  * Enable BLK_DEV_BSG for SG v4 support.
+  * [amd64] Enable default disabled memtest boot param.
+  * topconfig: Enable PATA_SIS instead of SATA_SIS. (closes: #485609)
+  * Add OpenVZ countainer flavour for amd64, i386. (closes: #392015)
+  * atl1e driver for Atheros(R) L1e Fast Ethernet. (closes: #492029)
+  * [ALSA] hda - Add ICH9 controller support (8086:2911)
+  * [ALSA] hda - support intel DG33 motherboards
+  * HP iLO driver
+  * Input: i8042 - add Arima-Rioworks HDAMB board to noloop list
+    (closes: #489190) thanks Guillaume Morin <guillaume@morinfr.org>
+
+  [ Martin Michlmayr ]
+  * [arm/orion5x] Update the config to reflect upstream renaming this
+    subarch.
+  * [arm/orion5x] Add some patches from Marvell's Orion tree:
+    - Feroceon: speed up flushing of the entire cache
+    - support for 5281 D0 stepping
+    - cache align destination pointer when copying memory for some processors
+    - cache align memset and memzero
+    - DMA engine driver for Marvell XOR engine
+    - Orion hardware watchdog support
+  * [arm/orion5x] Enable NETCONSOLE.
+  * [arm/orion5x] Disable more SCSI drivers.
+  * [arm/ixp4xx] Disable most ATA and more SCSI and network drivers.
+  * [arm/versatile] Enable CONFIG_RTC_DRV_PL031 (closes: #484432).
+  * [arm/iop32x, arm/ixp4xx, arm/versatile] Enable ARM_THUMB (closes: #484524).
+  * [arm/iop32x] Add LED driver for Thecus N2100 (Riku Voipio).
+  * [mips/r5k-ip32] Enable USB.
+  * [arm/orion5x, arm/iop32x, arm/ixp4xx, mipsel/r5k-cobalt] Enable HAMRADIO
+    on the request of Heinz Janssen.
+  * [arm/orion5x] Add support for QNAP TS-409 and HP mv2120; thanks
+    Sylver Bruneau.
+  * [mips] Add patches from Thomas Bogendoerfer:
+    - gbefb: fix cmap FIFO timeout (closes: #487257)
+    - IP32: Enable FAST-20 for onboard scsi
+    - IP32: SGI O2 sound driver
+  * [arm/ixp4xx] Add support for Freecom FSG-3 (Rod Whitby).
+  * [arm/ixp4xx] Enable CONFIG_MACH_DSMG600.
+  * [arm/iop32x] Unset NET_DMA since it actually leads to worse network
+    performance.
+  * [arm/orion5x] Fix a boot crash on the Kurobox Pro.
+  * [arm/orion5x] use better key codes for the TS-209/TS-409 buttons
+  * [arm/orion5x] export red SATA lights on TS-409, fix SATA presence/activity
+  * [arm] Enable KEXEC (closes: #492268).
+  * [arm/orion5x] Enable USB_PRINTER, requested by Mike Arthur.
+  * [arm/orion5x] Enable binfmt aout, x25, wireless and ATM.
+  * [arm/iop32x, arm/orion5x] Enable USB_SISUSBVGA.
+  * [arm] xfs: pack some shortform dir2 structures for the ARM old ABI
+    architecture (closes: #414932).
+
+  [ Ian Campbell ]
+  * Readme.build updated on how to generate orig tarballs.
+  * Forward port vmlinuz-target.patch.
+  * Enable Xen save/restore and memory ballooning for Xen enabled kernels.
+
+  [ Bastian Blank ]
+  * [powerpc/powerpc-miboot] Disable. (closes: #481358)
+  * [powerpc/powerpc64] Support IBM Cell based plattforms and PS3.
+    (closes: #462529)
+  * [s390] Synchronize block device, network bridge, network scheduler and CRC
+    support.
+  * [s390] Enable support for PCI-attached cryptographic adapters.
+  * Use control group as base for group CPU scheduler. This reenabled
+    traditional nice behaviour. (closes: #489223)
+  * Bump yaird dependencies to at least 0.0.13.
+  * Reenable SECCOMP. There is no longer additional overhead.
+    (closes: #474648)
+  * Export symbol required for MOL again. (closes: #460667)
+  * [powerpc/powerpc64] Fix console selection in LPAR environment.
+    (closes: #492703)
+  * Fix several userspace compatibility problems.
+
+  [ Christian T. Steigies ]
+  * [m68k] enable SERIAL_CONSOLE for amiga and atari
+
+  [ Thiemo Seufer ]
+  * [mips] Fix logic bug in atomic_sub_if_positive.
+
+  [ Stephen R. Marenka ]
+  * [m68k] Update pending m68k patches.
+  * [m68k] Enable nfcon and nfblock for atari.
+  * [m68k] Change compiler to default.
+
+  [ Aurelien Jarno ]
+  * [arm/versatile] Switch scsi/ext3/smc91x to modules now that we have proper
+    d-i support. Remove options defined in toplevel config file.
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 30 Jul 2008 10:17:29 +0200
+
+linux-2.6 (2.6.25-7) unstable; urgency=high
+
+  * Add stable release 2.6.25.10:
+    - TTY: fix for tty operations bugs (CVE-2008-2812)
+    - sched: fix cpu hotplug
+    - IB/mthca: Clear ICM pages before handing to FW
+    - DRM: enable bus mastering on i915 at resume time
+    - x86: shift bits the right way in native_read_tscp
+    - x86_64 ptrace: fix sys32_ptrace task_struct leak (CVE-2008-3077)
+    - ptrace GET/SET FPXREGS broken
+    - futexes: fix fault handling in futex_lock_pi
+    - x86: fix cpu hotplug crash
+  * Add stable release 2.6.25.11:
+    - x86: fix ldt limit for 64 bit
+
+ -- maximilian attems <maks@debian.org>  Mon, 14 Jul 2008 10:58:14 +0200
+
+linux-2.6 (2.6.25-6) unstable; urgency=high
+
+  [ maximilian attems ]
+  * Add stable release 2.6.25.7:
+    - double-free of inode on alloc_file() failure exit in create_write_pipe()
+    - m68k: Add ext2_find_{first,next}_bit() for ext4
+    - bluetooth: fix locking bug in the rfcomm socket cleanup handling
+    - serial: fix enable_irq_wake/disable_irq_wake imbalance in serial_core.c
+    - bttv: Fix a deadlock in the bttv driver (closes: #487594)
+    - forcedeth: msi interrupts
+    - CPUFREQ: Fix format string bug.
+    - mmc: wbsd: initialize tasklets before requesting interrupt
+    - ecryptfs: fix missed mutex_unlock
+    - mac80211: send association event on IBSS create
+    - bluetooth: rfcomm_dev_state_change deadlock fix
+    - sunhv: Fix locking in non-paged I/O case.
+    - cassini: Only use chip checksum for ipv4 packets.
+    - ipwireless: Fix blocked sending
+    - net: Fix call to ->change_rx_flags(dev, IFF_MULTICAST) in
+      dev_change_flags()
+    - fbdev: export symbol fb_mode_option
+    - ipsec: Use the correct ip_local_out function
+    - tcp: fix skb vs fack_count out-of-sync condition
+    - tcp FRTO: Fix fallback to conventional recovery
+    - tcp FRTO: SACK variant is errorneously used with NewReno
+    - tcp FRTO: work-around inorder receivers
+    - tcp: Fix inconsistency source (CA_Open only when !tcp_left_out(tp))
+    - l2tp: avoid skb truesize bug if headroom is increased
+    - l2tp: Fix possible WARN_ON from socket code when UDP socket is closed
+    - l2tp: Fix possible oops if transmitting or receiving when tunnel goes down
+    - ax25: Fix NULL pointer dereference and lockup.
+    - sound: emu10k1 - fix system hang with Audigy2 ZS Notebook PCMCIA card
+    - tcp: Allow send-limited cwnd to grow up to max_burst when gso disabled
+    - tcp: Limit cwnd growth when deferring for GSO
+    - af_key: Fix selector family initialization.
+    - hgafb: resource management fix
+    - cifs: fix oops on mount when CONFIG_CIFS_DFS_UPCALL is enabled
+    - b43: Fix controller restart crash
+    - ssb: Fix context assertion in ssb_pcicore_dev_irqvecs_enable
+    - eCryptfs: protect crypt_stat->flags in ecryptfs_open()
+    - cciss: add new hardware support
+    - ecryptfs: add missing lock around notify_change
+    - ecryptfs: clean up (un)lock_parent
+    - Add 'rd' alias to new brd ramdisk driver
+    - net_sched: cls_api: fix return value for non-existant classifiers
+    - vlan: Correctly handle device notifications for layered VLAN devices
+    - IB/umem: Avoid sign problems when demoting npages to integer
+    - x86: fix recursive dependencies
+    - can: Fix copy_from_user() results interpretation
+    - Kconfig: introduce ARCH_DEFCONFIG to DEFCONFIG_LIST
+    - tcp: TCP connection times out if ICMP frag needed is delayed
+    - ALSA: hda - Fix resume of auto-config mode with Realtek codecs
+    - netlink: Fix nla_parse_nested_compat() to call nla_parse() directly
+  * Add stable release 2.6.25.9:
+    - Add return value to reserve_bootmem_node()
+    - x86: use BOOTMEM_EXCLUSIVE on 32-bit
+    - sctp: Make sure N * sizeof(union sctp_addr) does not overflow.
+    - hwmon: (lm85) Fix function RANGE_TO_REG()
+    - hwmon: (adt7473) Initialize max_duty_at_overheat before use
+    - x86: set PAE PHYSICAL_MASK_SHIFT to 44 bits.
+    - Reinstate ZERO_PAGE optimization in 'get_user_pages()' and fix XIP
+    - watchdog: hpwdt: fix use of inline assembly
+    - Fix ZERO_PAGE breakage with vmware
+    - atl1: relax eeprom mac address error check
+
+  [ Martin Michlmayr]
+  * [arm/orion5x] Enable INPUT_EVDEV and KEYBOARD_GPIO.
+
+  [ Steve Langasek ]
+  * Enable CONFIG_CIFS_EXPERIMENTAL and CONFIG_CIFS_UPCALL, required for
+    CIFS mounts to be able to use Kerberos authentication.  Closes: #480663.
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.25.8:
+    - x86: disable mwait for AMD family 10H/11H CPUs
+    - x86: remove mwait capability C-state check
+    - nf_conntrack_h323: fix memory leak in module initialization error path
+    - nf_conntrack_h323: fix module unload crash
+    - nf_conntrack: fix ctnetlink related crash in nf_nat_setup_info()
+    - SCSI: sr: fix corrupt CD data after media change and delay
+    - ACPICA: Ignore ACPI table signature for Load() operator
+    - scsi_host regression: fix scsi host leak
+    - b43: Fix possible NULL pointer dereference in DMA code
+    - b43: Fix noise calculation WARN_ON
+    - virtio_net: Fix skb->csum_start computation
+    - opti621: remove DMA support
+    - opti621: disable read prefetch
+    - Fix tty speed handling on 8250
+    - x86-64: Fix "bytes left to copy" return value for copy_from_user()
+   * Fix alpha build due too inconsistent kallsyms data.
+
+ -- maximilian attems <maks@debian.org>  Fri, 27 Jun 2008 00:33:53 +0200
+
+linux-2.6 (2.6.25-5) unstable; urgency=low
+
+  [ maximilian attems ]
+  [ Bastian Blank ]
+  * Reenable VServer images.
+
+  [ maximilian attems ]
+  * Add stable release 2.6.25.5:
+    - asn1: additional sanity checking during BER decoding (CVE-2008-1673)
+  * Add stable release 2.6.25.6:
+    - atl1: fix 4G memory corruption bug
+    - capabilities: remain source compatible with 32-bit raw legacy capability
+      support.
+    - usb-serial: Use ftdi_sio driver for RATOC REX-USB60F
+    - cpufreq: fix null object access on Transmeta CPU
+    - Smack: fuse mount hang fix
+    - cgroups: remove node_ prefix_from ns subsystem
+    - XFS: Fix memory corruption with small buffer reads
+    - x86: don't read maxlvt before checking if APIC is mapped
+    - USB: option: add new Dell 5520 HSDPA variant
+    - md: do not compute parity unless it is on a failed drive
+    - md: fix uninitialized use of mddev->recovery_wait
+    - md: fix prexor vs sync_request race
+    - HID: split Numlock emulation quirk from HID_QUIRK_APPLE_HAS_FN.
+    - USB: do not handle device 1410:5010 in 'option' driver
+    - USB: unusual_devs: Add support for GI 0401 SD-Card interface
+    - USB: add Telstra NextG CDMA id to option driver
+    - USB: fix build errors in ohci-omap.c and ohci-sm501.c
+    - USB: add TELIT HDSPA UC864-E modem to option driver
+    - memory_hotplug: always initialize pageblock bitmap
+    - x86: fix bad pmd ffff810000207xxx(9090909090909090)
+    - USB: add Zoom Telephonics Model 3095F V.92 USB Mini External modem to
+      cdc-acm
+    - x86: prevent PGE flush from interruption/preemption
+    - IPoIB: Test for NULL broadcast object in ipiob_mcast_join_finish()
+    - i386: fix asm constraint in do_IRQ()
+    - i2c-nforce2: Disable the second SMBus channel on the DFI Lanparty NF4
+      Expert
+    - i2c/max6875: Really prevent 24RF08 corruption
+    - brk: make sys_brk() honor COMPAT_BRK when computing lower bound
+    - Revert "PCI: remove default PCI expansion ROM memory allocation"
+    - PS3: gelic: fix memory leak
+    - eCryptfs: remove unnecessary page decrypt call
+    - netfilter: nf_conntrack_expect: fix error path unwind in
+      nf_conntrack_expect_init()
+    - netfilter: xt_connlimit: fix accouning when receive RST packet in
+      ESTABLISHED state
+    - netfilter: nf_conntrack_ipv6: fix inconsistent lock state in
+      nf_ct_frag6_gather()
+    - POWERPC Bolt in SLB entry for kernel stack on secondary cpus
+    - netfilter: xt_iprange: module aliases for xt_iprange
+    - x86: user_regset_view table fix for ia32 on 64-bit
+    - x86: if we cannot calibrate the TSC, we panic.
+    - CIFS: Fix UNC path prefix on QueryUnixPathInfo to have correct slash
+    - x86, fpu: fix CONFIG_PREEMPT=y corruption of application's FPU stack
+    - libata: force hardreset if link is in powersave mode
+    - x86: fix setup of cyc2ns in tsc_64.c
+    - x86: distangle user disabled TSC from unstable
+    - x86: disable TSC for sched_clock() when calibration failed
+    - pagemap: fix bug in add_to_pagemap, require aligned-length reads of
+      /proc/pid/pagemap
+    - ext3/4: fix uninitialized bs in ext3/4_xattr_set_handle()
+    - proc: calculate the correct /proc/<pid> link count
+    - CPUFREQ: Make acpi-cpufreq more robust against BIOS freq changes behind
+      our back.
+    - USB: remove PICDEM FS USB demo (04d8:000c) device from ldusb
+    - types.h: don't expose struct ustat to userspace
+
+  [ Bastian Blank ]
+  * Ignore ABI change in internal XFS symbol.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 12 Jun 2008 08:47:11 +0200
+
+linux-2.6 (2.6.25-4) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Fix arm Kconfig logic disabling random drivers. (closes: #481410)
+  * Add stable release 2.6.25.4:
+    - OHCI: fix regression upon awakening from hibernation
+    - V4L/DVB (7473): PATCH for various Dibcom based devices
+    - {nfnetlink, ip, ip6}_queue: fix skb_over_panic when enlarging packets
+    - dccp: return -EINVAL on invalid feature length
+    - md: fix raid5 'repair' operations
+    - sparc: Fix SA_ONSTACK signal handling.
+    - sparc: Fix fork/clone/vfork system call restart.
+    - sparc64: Stop creating dummy root PCI host controller devices.
+    - sparc64: Fix wedged irq regression.
+    - SPARC64: Fix args to 64-bit sys_semctl() via sys_ipc().
+    - serial: Fix sparc driver name strings.
+    - sparc: Fix ptrace() detach.
+    - sparc: Fix mremap address range validation.
+    - sparc: Fix debugger syscall restart interactions.
+    - sparc32: Don't twiddle PT_DTRACE in exec.
+    - r8169: fix oops in r8169_get_mac_version
+    - SCSI: aha152x: Fix oops on module removal
+    - SCSI: aha152x: fix init suspiciously returned 1, it should follow
+      0/-E convention
+    - sch_htb: remove from event queue in htb_parent_to_leaf()
+    - i2c-piix4: Blacklist two mainboards
+    - SCSI: qla1280: Fix queue depth problem
+    - ipvs: fix oops in backup for fwmark conn templates
+    - USB: airprime: unlock mutex instead of trying to lock it again
+    - rtc: rtc_time_to_tm: use unsigned arithmetic
+    - SCSI: libiscsi regression in 2.6.25: fix nop timer handling
+    - SCSI: libiscsi regression in 2.6.25: fix setting of recv timer
+    - can: Fix can_send() handling on dev_queue_xmit() failures
+    - macvlan: Fix memleak on device removal/crash on module removal
+    - nf_conntrack: padding breaks conntrack hash on ARM
+    - sparc: sunzilog uart order
+    - r8169: fix past rtl_chip_info array size for unknown chipsets
+    - x86: use defconfigs from x86/configs/*
+    - vt: fix canonical input in UTF-8 mode
+    - ata_piix: verify SIDPR access before enabling it
+    - serial: access after NULL check in uart_flush_buffer()
+    - x86: sysfs cpu?/topology is empty in 2.6.25 (32-bit Intel system)
+    - XFRM: AUDIT: Fix flowlabel text format ambibuity.
+  * Update userspace merged HZ alpha fixed version.
+  * Backport netfilter: Move linux/types.h inclusions outside of #ifdef
+    __KERNEL__. (closes: #479899)
+  * types.h: don't expose struct ustat to userspace. (closes: #429064)
+
+  [ Bastian Blank ]
+  * Fix ABI changes from: ipvs: fix oops in backup for fwmark conn templates
+
+ -- maximilian attems <maks@debian.org>  Tue, 27 May 2008 11:46:11 +0200
+
+linux-2.6 (2.6.25-3) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.25.3:
+    - sit: Add missing kfree_skb() on pskb_may_pull() failure.
+    - sparc: Fix mmap VA span checking.
+    - CRYPTO: eseqiv: Fix off-by-one encryption
+    - CRYPTO: authenc: Fix async crypto crash in crypto_authenc_genicv()
+    - CRYPTO: cryptd: Correct kzalloc error test
+    - CRYPTO: api: Fix scatterwalk_sg_chain
+    - x86 PCI: call dmi_check_pciprobe()
+    - b43: Fix some TX/RX locking issues
+    - kprobes/arm: fix decoding of arithmetic immediate instructions
+    - kprobes/arm: fix cache flush address for instruction stub
+    - b43: Fix dual-PHY devices
+    - POWERPC: mpc5200: Fix unterminated of_device_id table
+    - reiserfs: Unpack tails on quota files
+    - sched: fix hrtick_start_fair and CPU-Hotplug
+    - vfs: fix permission checking in sys_utimensat
+    - md: fix use after free when removing rdev via sysfs
+    - mm: fix usemap initialization
+    - 2.6.25 regression: powertop says 120K wakeups/sec
+
+  [ maximilian attems ]
+  * Redisable old dup prism54 driver.
+  * Reenable accidentaly disabled SIS190. (closes: #478773)
+  * Add lmkl patch to unbreak HZ userspace aka perl5.10 build fix.
+    (closes: #480130)
+
+  [ Martin Michlmayr ]
+  * [armel] Disable some SCSI drives (that are disabled on arm) so the
+    ramdisk will fit in flash on NSLU2 (closes: #480310).
+
+ -- maximilian attems <maks@debian.org>  Wed, 14 May 2008 11:16:56 +0200
+
+linux-2.6 (2.6.25-2) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Add stable release 2.6.25.1:
+    - Fix dnotify/close race (CVE-2008-1375)
+    - V4L: Fix VIDIOCGAP corruption in ivtv
+    - USB: log an error message when USB enumeration fails
+    - USB: OHCI: fix bug in controller resume
+    - SCSI: qla2xxx: Correct regression in relogin code.
+    - rose: Socket lock was not released before returning to user space
+    - x86, pci: fix off-by-one errors in some pirq warnings
+    - hrtimer: timeout too long when using HRTIMER_CB_SOFTIRQ
+    - RDMA/nes: Fix adapter reset after PXE boot
+    - rtc-pcf8583 build fix
+    - JFFS2: Fix free space leak with in-band cleanmarkers
+    - SELinux: no BUG_ON(!ss_initialized) in selinux_clone_mnt_opts
+    - tehuti: check register size (CVE-2008-1675)
+    - IPSEC: Fix catch-22 with algorithm IDs above 31
+    - alpha: unbreak OSF/1 (a.out) binaries
+    - tehuti: move ioctl perm check closer to function start (CVE-2008-1675)
+    - aio: io_getevents() should return if io_destroy() is invoked
+    - mm: fix possible off-by-one in walk_pte_range()
+    - TCP: Increase the max_burst threshold from 3 to tp->reordering.
+    - ssb: Fix all-ones boardflags
+    - cgroup: fix a race condition in manipulating tsk->cg_list
+    - drivers/net/tehuti: use proper capability check for raw IO access
+    - tg3: 5701 DMA corruption fix
+    - V4L: tea5761: bugzilla #10462: tea5761 autodetection code were broken
+    - b43: Workaround invalid bluetooth settings
+    - b43: Add more btcoexist workarounds
+    - b43: Workaround DMA quirks
+    - dm snapshot: fix chunksize sector conversion
+    - x86: Fix 32-bit x86 MSI-X allocation leakage
+    - RTNETLINK: Fix bogus ASSERT_RTNL warning
+    - net: Fix wrong interpretation of some copy_to_user() results.
+    - dz: test after postfix decrement fails in dz_console_putchar()
+    - RDMA/nes: Free IRQ before killing tasklet
+    - S2io: Fix memory leak during free_tx_buffers
+    - S2io: Version update for memory leak fix during free_tx_buffers
+    - USB: Add HP hs2300 Broadband Wireless Module to sierra.c
+    - V4L: cx88: enable radio GPIO correctly
+    - hrtimer: raise softirq unlocked to avoid circular lock dependency
+    - tcp: tcp_probe buffer overflow and incorrect return value
+  * [ide] Add upstream piix patch for asus eee pc. (closes: #479217)
+
+  [ Christian T. Steigies ]
+  * [m68k] Add patches for 2.6.25.
+  * [m68k] Disable EXT4DEV_FS for now.
+  * [m68k] Enable SCSI_MAC_ESP for mac.
+
+  [ Ian Campbell ]
+  * [x86]: Enable Xen guest support in all i386 flavours.
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.25.2:
+    - fix SMP ordering hole in fcntl_setlk() (CVE-2008-1669)
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 08 May 2008 14:46:48 +0200
+
+linux-kbuild-2.6 (2.6.25-2) unstable; urgency=low
+
+  * modpost: Support new parameters. (closes: #479271)
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 05 May 2008 19:58:40 +0200
+
+linux-kbuild-2.6 (2.6.25-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 02 May 2008 10:32:13 +0200
+
+linux-2.6 (2.6.25-1) unstable; urgency=low
+
+  * New upstream release (closes: #456799, #468440, #475161, #475134, #475441)
+    - Add oabi shim for fstatat64 (closes: #462677)
+
+  [ maximilian attems ]
+  * topconfig set NOZOMI, CRYPTO_SEQIV, CRYPTO_CTR, CRYPTO_GCM, CRYPTO_CCM,
+    CRYPTO_SALSA20, CRYPTO_LZO, CRYPTO_DEV_HIFN_795X, USB_SI470X,
+    USB_STKWEBCAM, VIDEO_PVRUSB2_ONAIR_USB2, VIDEO_PVRUSB2_ONAIR_CREATOR,
+    VIDEO_EM28XX_ALSA, CRYPTO_DEV_HIFN_795X_RNG, PCF8575, TPS65010, RTL8180,
+    ENC28J60, R6040, CAN, NETFILTER_XT_MATCH_OWNER, MAC80211_RC_DEFAULT_PI,
+    NETFILTER_XT_TARGET_RATEEST, NETFILTER_XT_TARGET_TCPOPTSTRIP,
+    NETFILTER_XT_MATCH_IPRANGE, NETFILTER_XT_MATCH_RATEEST, SND_OXYGEN,
+    SND_HIFIER, SND_VIRTUOSO, USB_NET_RNDIS_WLAN, USB_ANNOUNCE_NEW_DEVICES,
+    USB_SERIAL_IUU, NET_CLS_FLOW, INFINIBAND_NES, RTC_DRV_R9701,
+    RTC_DRV_DS1511, MEMSTICK, SENSORS_W83L786NG, SENSORS_ADS7828, IPWIRELESS,
+    RISCOM8, IGB, UTS_NS, IPC_NS, IPV6_ROUTE_INFO, ENCLOSURE_SERVICES,
+    SCSI_ENCLOSURE, SENSORS_ADT7473, SCSI_MVSAS, REALTEK_PHY, RTC_DRV_S35390A,
+    MEMSTICK_JMICRON_38X, IWL4965_HT.
+  * [amd64] Enable CRYPTO_SALSA20_X86_64, EDAC_I3000, EFI, EFI_VARS, I8K,
+    PARAVIRT_GUEST, PARAVIRT, VIRTIO_PCI, VIRTIO_BALLOON, SPARSEMEM_VMEMMAP.
+  * [amd64, i386]: Enable LEDS_CLEVO_MAIL, INPUT_APANEL, ACER_WMI,
+    THINKPAD_ACPI_HOTKEY_POLL, HP_WATCHDOG, THINKPAD_ACPI_VIDEO,
+    VIRTION_CONSOLE, ACPI_WMI, IO_DELAY_0X80.
+  * topconfig disable PARPORT_PC_FIFO due to instabilities.
+    (closes: #366165, #388309, #406056, #407816, #453911)
+  * [amd64, i386]: Enable SONYPI_COMPAT for better sony laptop support.
+  * topconfig: Enable HID_FF for some HID devices. (closes: #441348)
+  * topconfig: Enable IPV6_ROUTER_PREF for multi-homed net. (closes: #449247)
+  * topconfig: Set UTF8 as default encoding. (closes: #417324)
+  * Tighten yaird dependency. (closes: #403171)
+  * Configs general cleanup, centralize USB_NET, disable IRDA_DEBUG.
+  * postinst: Nuke confusing postinst message. (closes: #465512)
+  * [sparc]: Enable SCSI_SCAN_ASYNC.
+  * [i386]: Enable TC1100_WMI, SND_SIS7019, CRYPTO_SALSA20_586.
+  * topconfig: Centralize old IEEE80211 stack options. (closes: #470558)
+  * control.source.in: Newer standard version without changes.
+  * copyright: adapt to latest lintian recommendation.
+  * input: Add 4 additional exports for modular speakup and braille support.
+  * firewire: Add firewire-git.patch for latest firewire tree features.
+  * 686: Set USB_PERSIST for eee pc suspend support. (closes: #468213)
+  * topconfig disable PATA_SIS as sis5513 enabled. (closes: #475525)
+  * [xen]: Support direct load of bzImage under Xen. (closes: #474509)
+    Thanks Ian Campbell <ijc@hellion.org.uk> for patches.
+  * [xen]: Module autoprobing support for frontend drivers.
+  * [arm]: Don't ovverride topconfig SENSORS_W83792D setting.
+    (closes: #477745)
+
+  [ Martin Michlmayr ]
+  * [arm/armel] Add a kernel for Orion based devices, such as the QNAP
+    TS-109/TS-209.
+  * [mips(el)/sb1*] Enable SB1250_MAC (thanks Thomas Bogendoerfer).
+  * [mipsel/r5k-cobalt] Enable DUMMY_CONSOLE since this might
+    fix the debian-installer startup hang on Qube 2700.
+  * [arm/footbridge] Disable KEYS and SECURITY for smaller d-i image.
+  * [arm/footbridge] Build NFS as a module to make the image smaller.
+  * [mips/r5k-ip32] Don't build in NFS.
+  * [mips/r5k-ip32] Use the generic config options for NFS, which will
+    enable NFSv4. (closes: #471007)
+  * [mips/r5k-ip32] Enable R8169, requested by Giuseppe Sacco.
+  * [arm/iop32x] Enable MACH_EM7210. (closes: #473136)
+  * [arm/orion] Add patch to set the MAC address on QNAP TS-109/TS-209
+    (Lennert Buytenhek).
+  * [arm/orion] Add support for Buffalo Linkstation Pro/Live (Byron Bradley).
+  * [arm/orion] Fix hang when Write Allocate is enabled (Lennert Buytenhek).
+  * [arm/orion] Add support for QNAP TS-409 (Sylver Bruneau).
+  * [arm/orion] Add preliminary support for HP mv2120.
+
+  [ Daniel Baumann ]
+  * Added patch from unionfs upstream to export release_open_intent symbol.
+
+  [ Gordon Farquharson ]
+  * [arm/ixp4xx] Use GPIO LED driver as opposed to ixp4xx LED driver.
+  * [arm/ixp4xx] Fix ixp4xx-beeper module so that udev loads it
+    automatically.
+  * [arm/iop32x] Enable support for the GLAN Tank flash chip (M29W400DB).
+  * [arm/iop32x] Do not build the ARTOP PATA driver (PATA_ARTOP).
+  * [arm/iop32x] Register the F75375 device in the GLAN Tank platform code.
+  * Prevent physmap from calling request_module() too early.
+  * [arm/ixp4xx] Fix used_sram_bitmap corruption in qmgr_release_queue().
+
+  [ Aurelien Jarno ]
+  * [mips/mipsel] Enable CONFIG_NO_HZ, CONFIG_HIGH_RES_TIMERS for dynticks
+    and true high-resolution timers on 4kc-malta and 5kc-malta flavours.
+  * [i386, amd64] Set modular VIRTIO, VIRTIO_RING, VIRTIO_BLK, VIRTIO_NET.
+
+  [ Bastian Blank ]
+  * Remove binary only firmwares for:
+    - Broadcom NetXtremeII 10Gb support
+  * Disable now broken drivers:
+    - Broadcom NetXtremeII 10Gb support
+  * Fix broken drivers:
+    - Broadcom NetXtremeII support
+  * [powerpc] Use new wrapper install support.
+  * [s390] Enable DM_MULTIPATH_EMC.
+  * Enable AF_RXRPC, RXKAD, PRINTK_TIME, DEBUG_KERNEL, SCHED_DEBUG,
+    TIMER_STATS, DEBUG_FS.
+  * Disable R3964, USB_GADGET.
+  * [hppa] Enable several filesystems.
+  * Make NLS modular.
+  * [i386/486] Make ext2 modular.
+  * [alpha,amd64,i386] Make ATM modular.
+  * [powerpc/powerpc64] Support PA Semi based plattforms. (closes: #463200)
+  * Follow upstream change for default TCP congestion control.
+    (closes: #477589)
+
+  [ Steve Langasek ]
+  * topconfig: Enable CONFIG_CIFS_WEAK_PW_HASH, required for compatibility
+    with legacy (pre-NTLM) fileservers.
+
+  [ Christian Perrier ]
+  * Debconf template rewrite + mark them as translatable.
+    Thanks to Justin B Rye <jbr@edlug.org.uk> for review.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 25 Apr 2008 16:27:23 +0200
+
+linux-2.6 (2.6.24-6) unstable; urgency=high
+
+  [ Martin Michlmayr ]
+  * [armel] Fix FTBFS on armel by enabling CONFIG_USB_USBNET=m in
+    armel/config, as it was done for arm/config already.
+  * [armel] Add oabi shim for fstatat64 (Riku Voipio)
+
+  [ Gordon Farquharson ]
+  * [arm/iop32x] Do not build the ARTOP PATA driver (PATA_ARTOP).
+  * [arm/iop32x] Enable MTD_CMDLINE_PARTS.
+
+  [ Kyle McMartin ]
+  * [hppa] fix pdc_console panic at boot (closes: #476292).
+  * [hppa] properly flush user signal tramps
+  * [hppa] special case futex cmpxchg on kernel space NULL (closes: 476285).
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 18 Apr 2008 19:41:30 +0200
+
+linux-2.6 (2.6.24-5) unstable; urgency=low
+
+  [ Gordon Farquharson ]
+  * [arm] Enable asix driver (USB_NET_AX8817X).
+  * [arm] Enable CONFIG_USB_CATC, CONFIG_USB_KAWETH, CONFIG_USB_PEGASUS,
+          and CONFIG_USB_RTL8150.
+  * [arm/ixp4xx] Update Ethernet driver (closes: #471062).
+  * [arm/ixp4xx] Add HSS driver.
+
+  [ Bastian Blank ]
+  * [s390/s390-tape]: Override localversion correctly.
+  * Add stable release 2.6.24.3:
+    - x86_64: CPA, fix cache attribute inconsistency bug
+    - bonding: fix NULL pointer deref in startup processing
+    - POWERPC: Revert chrp_pci_fixup_vt8231_ata devinit to fix libata on pegasos
+    - PCMCIA: Fix station address detection in smc
+    - SCSI: gdth: scan for scsi devices
+    - USB: fix pm counter leak in usblp
+    - S390: Fix futex_atomic_cmpxchg_std inline assembly.
+    - genirq: do not leave interupts enabled on free_irq
+    - hrtimer: catch expired CLOCK_REALTIME timers early
+    - hrtimer: check relative timeouts for overflow
+    - SLUB: Deal with annoying gcc warning on kfree()
+    - hrtimer: fix *rmtp/restarts handling in compat_sys_nanosleep()
+    - hrtimer: fix *rmtp handling in hrtimer_nanosleep()
+    - Disable G5 NAP mode during SMU commands on U3
+    - Be more robust about bad arguments in get_user_pages()
+    - AUDIT: Increase skb->truesize in audit_expand
+    - BLUETOOTH: Add conn add/del workqueues to avoid connection fail.
+    - INET: Prevent out-of-sync truesize on ip_fragment slow path
+    - INET_DIAG: Fix inet_diag_lock_handler error path.
+    - IPCOMP: Fetch nexthdr before ipch is destroyed
+    - IPCOMP: Fix reception of incompressible packets
+    - IPV4: fib: fix route replacement, fib_info is shared
+    - IPV4: fib_trie: apply fixes from fib_hash
+    - PKT_SCHED: ematch: oops from uninitialized variable (resend)
+    - SELinux: Fix double free in selinux_netlbl_sock_setsid()
+    - TC: oops in em_meta
+    - TCP: Fix a bug in strategy_allowed_congestion_control
+    - SCSI: sd: handle bad lba in sense information
+    - Fix dl2k constants
+    - XFS: Fix oops in xfs_file_readdir()
+    - hugetlb: add locking for overcommit sysctl
+    - inotify: fix check for one-shot watches before destroying them
+    - NFS: Fix a potential file corruption issue when writing
+    - NETFILTER: nf_conntrack_tcp: conntrack reopening fix
+    - SPARC/SPARC64: Fix usage of .section .sched.text in assembler code.
+  * Add stable release 2.6.24.4:
+    - S390 futex: let futex_atomic_cmpxchg_pt survive early functional tests.
+    - slab: NUMA slab allocator migration bugfix
+    - relay: fix subbuf_splice_actor() adding too many pages
+    - BLUETOOTH: Fix bugs in previous conn add/del workqueue changes.
+    - SCSI advansys: Fix bug in AdvLoadMicrocode
+    - async_tx: avoid the async xor_zero_sum path when src_cnt > device->max_xor
+    - aio: bad AIO race in aio_complete() leads to process hang
+    - jbd: correctly unescape journal data blocks
+    - jbd2: correctly unescape journal data blocks
+    - zisofs: fix readpage() outside i_size
+    - NETFILTER: nfnetlink_log: fix computation of netlink skb size
+    - NETFILTER: nfnetlink_queue: fix computation of allocated size for netlink skb
+    - NETFILTER: xt_time: fix failure to match on Sundays
+    - sched_nr_migrate wrong mode bits
+    - nfsd: fix oops on access from high-numbered ports
+    - sched: fix race in schedule()
+    - SCSI: mpt fusion: don't oops if NumPhys==0
+    - SCSI: gdth: fix to internal commands execution
+    - SCSI: gdth: bugfix for the at-exit problems
+    - Fix default compose table initialization
+    - x86: don't use P6_NOPs if compiling with CONFIG_X86_GENERIC
+    - SCSI: fix BUG when sum(scatterlist) > bufflen
+    - USB: ehci: handle large bulk URBs correctly (again)
+    - USB: ftdi_sio - really enable EM1010PC
+    - USB: ftdi_sio: Workaround for broken Matrix Orbital serial port
+    - VT notifier fix for VT switch
+    - eCryptfs: make ecryptfs_prepare_write decrypt the page
+    - ioat: fix 'ack' handling, driver must ensure that 'ack' is zero
+    - macb: Fix speed setting
+    - x86: move out tick_nohz_stop_sched_tick() call from the loop
+    - atmel_spi: fix clock polarity
+    - b43: Backport bcm4311 fix
+    - arcmsr: fix IRQs disabled warning spew
+    - e1000e: Fix CRC stripping in hardware context bug
+    - PCI x86: always use conf1 to access config space below 256 bytes
+    - moduleparam: fix alpha, ia64 and ppc64 compile failures
+    - pata_hpt*, pata_serverworks: fix UDMA masking
+    - SCSI advansys: fix overrun_buf aligned bug
+    - NETFILTER: fix ebtable targets return
+    - NETFILTER: Fix incorrect use of skb_make_writable
+    - NETFILTER: nfnetlink_queue: fix SKB_LINEAR_ASSERT when mangling packet data
+    - spi: pxa2xx_spi clock polarity fix
+    - ufs: fix parenthesisation in ufs_set_fs_state()
+    - hugetlb: ensure we do not reference a surplus page after handing it to buddy
+    - file capabilities: simplify signal check
+    - futex: runtime enable pi and robust functionality
+    - futex: fix init order
+    - ARM pxa: fix clock lookup to find specific device clocks
+    - x86: replace LOCK_PREFIX in futex.h
+    - SCSI aic94xx: fix REQ_TASK_ABORT and REQ_DEVICE_RESET
+    - SCSI gdth: don't call pci_free_consistent under spinlock
+    - SCSI ips: fix data buffer accessors conversion bug
+    - usb-storage: don't access beyond the end of the sg buffer
+    - fuse: fix permission checking
+    - CRYPTO xts: Use proper alignment
+    - CRYPTO xcbc: Fix crash with IPsec
+    - SCSI ips: handle scsi_add_host() failure, and other err cleanups
+    - x86: adjust enable_NMI_through_LVT0()
+    - drivers: fix dma_get_required_mask
+    - iov_iter_advance() fix
+    - x86: Clear DF before calling signal handler (closes: #469058)
+    - ub: fix up the conversion to sg_init_table()
+    - MIPS: Mark all but i8259 interrupts as no-probe.
+    - IRQ_NOPROBE helper functions
+    - IPCOMP: Disable BH on output when using shared tfm
+    - IPCONFIG: The kernel gets no IP from some DHCP servers
+    - IPV4: Remove IP_TOS setting privilege checks.
+    - IPV6: dst_entry leak in ip4ip6_err.
+    - IPV6: Fix IPsec datagram fragmentation
+    - NET: Fix race in dev_close(). (Bug 9750)
+    - NET: Messed multicast lists after dev_mc_sync/unsync (closes: #466719)
+    - NIU: Bump driver version and release date.
+    - NIU: Fix BMAC alternate MAC address indexing.
+    - NIU: More BMAC alt MAC address fixes.
+    - TCP: Improve ipv4 established hash function.
+    - SPARC: Fix link errors with gcc-4.3
+    - SPARC64: Loosen checks in exception table handling.
+
+  [ Martin Michlmayr ]
+  * [mips/r4k-ip22] Enable BLK_DEV_LOOP and BLK_DEV_CRYPTOLOOP.
+  * [mips/r5k-ip32] Enable BLK_DEV_LOOP and BLK_DEV_CRYPTOLOOP.
+  * [mips/r4k-ip22] Enable PPP, PPPOE and SLIP.
+  * [mips/r5k-ip32] Enable PPP, PPPOE and SLIP.
+  * Don't check the section size when we're cross compiling.
+
+  [ dann frazier ]
+  * Remove cap_task_kill (closes: #463669)
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 27 Mar 2008 12:40:16 +0100
+
+linux-2.6 (2.6.24-4) unstable; urgency=low
+
+  * Add stable release 2.6.24.1:
+    - splice: missing user pointer access verification (CVE-2008-0009/10)
+    - drm: the drm really should call pci_set_master..
+    - Driver core: Revert "Fix Firmware class name collision"
+    - fix writev regression: pan hanging unkillable and un-straceable
+    - sched: fix high wake up latencies with FAIR_USER_SCHED
+    - sched: let +nice tasks have smaller impact
+    - b43: Reject new firmware early
+    - selinux: fix labeling of /proc/net inodes
+    - b43legacy: fix DMA slot resource leakage
+    - b43legacy: drop packets we are not able to encrypt
+    - b43legacy: fix suspend/resume
+    - b43legacy: fix PIO crash
+    - b43: Fix dma-slot resource leakage
+    - b43: Drop packets we are not able to encrypt
+    - b43: Fix suspend/resume
+    - sky2: fix for WOL on some devices
+    - sky2: restore multicast addresses after recovery
+    - x86: restore correct module name for apm
+    - ACPI: update ACPI blacklist
+    - PCI: Fix fakephp deadlock
+    - sys_remap_file_pages: fix ->vm_file accounting
+    - lockdep: annotate epoll
+    - forcedeth: mac address mcp77/79
+    - USB: Fix usb_serial_driver structure for Kobil cardreader driver.
+    - USB: handle idVendor of 0x0000
+    - USB: fix usbtest halt check on big endian systems
+    - USB: storage: Add unusual_dev for HP r707
+    - USB: Variant of the Dell Wireless 5520 driver
+    - USB: use GFP_NOIO in reset path
+    - USB: ftdi driver - add support for optical probe device
+    - USB: pl2303: add support for RATOC REX-USB60F
+    - USB: remove duplicate entry in Option driver and Pl2303 driver for Huawei modem
+    - USB: sierra: add support for Onda H600/Zte MF330 datacard to USB Driver for Sierra Wireless
+    - USB: ftdi-sio: Patch to add vendor/device id for ATK_16IC CCD
+    - USB: ftdi_sio - enabling multiple ELV devices, adding EM1010PC
+    - USB: sierra driver - add devices
+    - USB: Adding YC Cable USB Serial device to pl2303
+    - USB: Sierra - Add support for Aircard 881U
+    - USB: add support for 4348:5523 WinChipHead USB->RS 232 adapter
+    - USB: CP2101 New Device IDs
+    - usb gadget: fix fsl_usb2_udc potential OOPS
+    - USB: keyspan: Fix oops
+    - vm audit: add VM_DONTEXPAND to mmap for drivers that need it (CVE-2008-0007)
+    - slab: fix bootstrap on memoryless node
+    - DVB: cx23885: add missing subsystem ID for Hauppauge HVR1800 Retail
+
+  [ Martin Michlmayr ]
+  * [arm/ixp4xx] Enble ATA_OVER_ETH, requested by Nicola Fankhauser.
+  * [arm/iop32x] Enble ATA_OVER_ETH.
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.24.2:
+    - splice: fix user pointer access in get_iovec_page_array()
+    (CVE-2008-0600, closes: #464945)
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 11 Feb 2008 12:29:23 +0100
+
+linux-2.6 (2.6.24-3) unstable; urgency=low
+
+  [ maximilian attems ]
+  * [scsi]: hptiop: add more adapter models and fixes.
+  * [amd64, i386]: Reenable ACPI_PROCFS_POWER. (closes: #463253)
+
+  [ Gordon Farquharson ]
+  * [arm/ixp4xx] Update Ethernet driver so that it can be loaded by udev
+    automatically.
+
+  [ Martin Michlmayr ]
+  * [mips/r5k-ip32] Enable R8169, requested by Giuseppe Sacco. (Closes:
+    #463705)
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 06 Feb 2008 13:05:18 +0100
+
+linux-2.6 (2.6.24-2) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Fix broken merge of flavour specific settings.
+    - [i386]: Recommends are fixed.
+    - [s390/s390-tape]: Built as small image again.
+
+  [ maximilian attems ]
+  * Disable old dup prism54 driver.
+  * Stable queue: slab: fix bootstrap on memoryless node.
+
+  [ Aurelien Jarno ]
+  * [arm]: Remove options that are present in topconfig from config.versatile.
+  * [arm]: Turn off B44 since it fails to compile on armel.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 31 Jan 2008 17:37:00 +0100
+
+linux-kbuild-2.6 (2.6.24-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 29 Jan 2008 14:03:06 +0100
+
+linux-2.6 (2.6.24-1) unstable; urgency=low
+
+  * New upstream release
+    (closes: #461639)
+
+  [ Martin Michlmayr ]
+  * Don't build the AdvanSys driver on ARM since it fails to compile.
+  * Disable ATH5K on ARM since it fails to compile.
+  * [arm/iop32x] Activate DMADEVICES.
+  * [mips/mipsel] Turn off CONFIG_NIU since it fails to compile.
+
+  [ maximilian attems ]
+  * [amd64, i386]: Enable ACPI_SYSFS_POWER and disable ACPI_PROCFS_POWER.
+  * [fw] Sync with latest git-ieee1394 for sbp2 fixes.
+
+  [ Bastian Blank ]
+  * Kill reboot warning from old templates.
+  * Fix strange default value for link_in_boot. (closes: #425056)
+  * [powerpc/powerpc]: Enable Efika support.
+  * [powerpc]: Lower mkvmlinuz to the state of a bootloader.
+  * [powerpc]: Remove ppc and m68k include dirs from headers.
+  * Remove versions from relations fullfilled in stable.
+
+  [ Aurelien Jarno ]
+  * [arm]: Update versatile config.
+
+  [ Gordon Farquharson ]
+  * [arm/ixp4xx] Change the ixp4xx network driver from the driver
+    written by Christian Hohnstaedt to the driver written by Krzysztof
+    Hasala which has partially been accepted upstream.
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 26 Jan 2008 11:35:11 +0100
+
+linux-2.6 (2.6.24~rc8-1~experimental.1) experimental; urgency=low
+
+  * New upstream release
+    (closes: #454776, #458142, #457992, #458899, #426124, #459732, #455566).
+
+  [ maximilian attems ]
+  * New upstream release, rebase dfsg stuff plus drivers-atm.patch,
+    scripts-kconfig-reportoldconfig.patch.
+  * [amd64, powerpc] Set HIGH_RES_TIMERS and NO_HZ (closes: #458312).
+  * topconfig set NETFILTER_XT_MATCH_TIME, NET_ACT_NAT, KSDAZZLE_DONGLE,
+    KS959_DONGLE, NET_9P_FD, IP1000, VETH, IXGBE, NIU, TEHUTI, LIBERTAS_CS,
+    LIBERTAS_SDIO, RT2X00, SENSORS_ADT7470, SENSORS_I5K_AMB, SENSORS_F71882FG,
+    SENSORS_FSCHMD, SENSORS_IBMPEX, CRYPTO_XTS, CRYPTO_SEED, CRYPTO_AUTHENC,
+    DVB_S5H1409, DVB_TUNER_MT2131, INET_LRO, MMC_RICOH_MMC, MMC_SPI,
+    RTC_DRV_DS1374, VIDEO_CX23885, VIDEO_FB_IVTV, USB_SERIAL_CH341,
+    SCSI_SRP_TGT_ATTRS, ADM8211, MTD_INTEL_VR_NOR, MTD_ALAUDA,
+    MTD_ONENAND_2X_PROGRAM, MTD_ONENAND_SIM, DM_MULTIPATH_HP, FUJITSU_LAPTOP,
+    QUOTA_NETLINK_INTERFACE, DM_UEVENT, SCSI_FC_TGT_ATTRS, SSB, BT_HCIUART_LL,
+    BT_HCIBTSDIO, MTD_OOPS, CGROUPS, MDIO_BITBANG, HIDRAW, P54, SDIO_UART,
+    NETCONSOLE_DYNAMIC, SECURITY_FILE_CAPABILITIES.
+  * Disable smbfs in topconfig, not supported upstream, use cifs.
+  * Disable bcm43xx, deprecated by upstream. Enable B43 (needs v4 firmware)
+    and B43LEGACY (needs v3 firmware).
+  * [i386]: Set SND_SC6000, EDAC_I3000, EDAC_I5000, SBC7240_WDT,
+    NET_9P_VIRTIO, FB_GEODE_LX, VIRTIO_NET, VIRTIO_BLK.
+  * Set USB_EHCI_TT_NEWSCHED fills USB 2.0 bandwith better. (closes: #454797)
+  * postrm: Nuke initramfs sha1sum on linux-image removal. (closes: #420245)
+  * Unifiy BSD_PROCESS_ACCT settings across configs. (closes: #455892)
+  * Reenable DABUSB as firmware is BSD licensed.
+  * [hppa]: Disable OCFS2, due build trouble.
+  * topconfig: Enable delay accounting TASKSTATS. (closes: #433204)
+  * Add git-ieee1394.patch for latest firewire fixes.
+  * [i386] Enable PARAVIRT_GUEST. (closes: #457562)
+  * [amd64, i386] Enable CPU_IDLE for software-controlled idle pm.
+  * [amd64, i386] Enable IT8712F_WDT, FB_EFI.
+  * Add and enable at76.patch wireless driver for Atmel USB cards.
+  * Add and enable ath5k.patch wireless driver for Atheros 5xxx cards.
+  * Unify VLAN_8021Q setting, needed also on r5k-cobalt.
+  * Double max SERIAL_8250_NR_UARTS to 32. (closes: #440807)
+  * topconfig: Enable AUDITSYSCALL for better SELinux support.
+
+  [ Bastian Blank ]
+  * [amd64, i386]: Set kernel architecture to x86.
+  * [i386]: Remove linux-libc-dev arch override.
+
+  [ Martin Michlmayr ]
+  * [mipsel/r5k-cobalt] Enable the new LEDs driver for Cobalt RaQ.
+  * [arm/iop32x] Re-enable USB_NET and PPP, thanks Daniel Hess (closes:
+    #456416).
+  * [arm/iop32x] Enable BSD_PROCESS_ACCT and POSIX_MQUEUE (closes: #455892).
+  * [mips] Disable AdvanSys SCSI since it doesn't compile.
+  * [arm/ixp4xx] Enable IP_ADVANCED_ROUTER, requested by Oliver Urbann.
+  * [arm/iop32x] Enable IP_ADVANCED_ROUTER.
+
+  [ dann frazier ]
+  * [ia64]: Enable BLK_CPQ_DA
+
+  [ Frederik Schüler ]
+  * Add GFS2 locking symbols export patch.
+
+  [ Aurelien Jarno ]
+  * [mips/mipsel] Remove QEMU flavour, as the Malta platform is now correctly
+    emulated in QEMU.
+
+  [ Christian T. Steigies ]
+  * [m68k]: Update patches from linux-m68k CVS
+  * [m68k]: Enable building for bvme6000, mvme147, and mvme16x again
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 18 Jan 2008 12:23:26 +0100
+
+linux-2.6 (2.6.23-2) unstable; urgency=low
+
+  [ dann frazier ]
+  * [ia64]: Enable BLK_CPQ_DA
+
+  [ Gordon Farquharson ]
+  * [arm/iop32x] Use the new i2c framework to load rtc-rs5c372 for the
+    GLAN Tank.
+
+  [ Frederik Schüler ]
+  * Export gfs2 locking symbols required to build gfs1 module.
+
+  [ maximilian attems ]
+  * [ppc] Reenable PMAC_BACKLIGHT.
+  * [sparc] Add davem get_cpu() SunFire boot patch. (closes: #440720)
+  * Add stable release 2.6.23.10:
+    - IPV4: Remove bogus ifdef mess in arp_process
+    - KVM: x86 emulator: Use emulator_write_emulated and not emulator_write_std
+    - KVM: SVM: Fix FPU leak while emulating clts
+    - revert "dpt_i2o: convert to SCSI hotplug model"
+    - KVM: x86 emulator: fix access registers for instructions with ModR/M
+      byte and Mod = 3
+    - KVM: x86 emulator: invd instruction
+    - KVM: SVM: Intercept the 'invd' and 'wbinvd' instructions
+    - KVM: Skip pio instruction when it is emulated, not executed
+    - KVM: VMX: Force vm86 mode if setting flags during real mode
+    - forcedeth: new mcp79 pci ids
+    - forcedeth boot delay fix
+    - PFKEY: Sending an SADB_GET responds with an SADB_GET
+    - rd: fix data corruption on memory pressure.
+    - create /sys/.../power when CONFIG_PM is set
+    - USB: fix up EHCI startup synchronization
+    - RXRPC: Add missing select on CRYPTO
+    - KVM: VMX: Reset mmu context when entering real mode
+    - NET: random : secure_tcp_sequence_number should not assume
+      CONFIG_KTIME_SCALAR
+    - NET: Corrects a bug in ip_rt_acct_read()
+    - NETFILTER: Fix NULL pointer dereference in nf_nat_move_storage()
+    - netfilter: Fix kernel panic with REDIRECT target.
+    - IPV6: Restore IPv6 when MTU is big enough
+    - UNIX: EOF on non-blocking SOCK_SEQPACKET
+    - x86 setup: add a near jump to serialize %cr0 on 386/486
+    - Fix synchronize_irq races with IRQ handler
+    - CRYPTO api: Fix potential race in crypto_remove_spawn
+    - TCP: Fix TCP header misalignment
+    - tmpfs: restore missing clear_highpage (CVE-2007-6417)
+    - TCP: MTUprobe: fix potential sk_send_head corruption
+    - NETFILTER: fix forgotten module release in xt_CONNMARK and xt_CONNSECMARK
+    - fb_ddc: fix DDC lines quirk
+    - VLAN: Fix nested VLAN transmit bug
+    - I4L: fix isdn_ioctl memory overrun vulnerability (CVE-2007-6151)
+    - isdn: avoid copying overly-long strings
+    - nf_nat: fix memset error
+    - esp_scsi: fix reset cleanup spinlock recursion
+    - libertas: properly account for queue commands
+    - KVM: Fix hang on uniprocessor
+    - USB: make the microtek driver and HAL cooperate
+    - TEXTSEARCH: Do not allow zero length patterns in the textsearch
+      infrastructure
+    - XFRM: Fix leak of expired xfrm_states
+    - NETFILTER: xt_TCPMSS: remove network triggerable WARN_ON
+    - BRIDGE: Lost call to br_fdb_fini() in br_init() error path
+    - DECNET: dn_nl_deladdr() almost always returns no error
+    - BRIDGE: Properly dereference the br_should_route_hook
+    - PKT_SCHED: Check subqueue status before calling hard_start_xmit
+    - Freezer: Fix APM emulation breakage
+    - XFS: Make xfsbufd threads freezable
+    - TCP: Problem bug with sysctl_tcp_congestion_control function
+    - wait_task_stopped(): pass correct exit_code to wait_noreap_copyout()
+    - KVM: x86 emulator: implement 'movnti mem, reg'
+    - TCP: illinois: Incorrect beta usage
+    - futex: fix for futex_wait signal stack corruption
+    - libata: kill spurious NCQ completion detection
+    - hrtimers: avoid overflow for large relative timeouts (CVE-2007-5966)
+    - Input: ALPS - add support for model found in Dell Vostro 1400
+      (closes: #448818)
+    - PNP: increase the maximum number of resources
+    - sched: some proc entries are missed in sched_domain sys_ctl debug code
+    - ATM: [he] initialize lock and tasklet earlier
+  * Add stable release 2.6.23.11:
+    - BRIDGE: Section fix.
+    - Revert "Freezer: Fix APM emulation breakage"
+  * Backport fix for CVE-2007-5938
+    - iwlwifi: fix possible NULL dereference in iwl_set_rate()
+  * Add stable release 2.6.23.12:
+    - Revert "PNP: increase the maximum number of resources"
+  * VM/Security: add security hook to do_brk (CVE-2007-6434)
+  * security: protect from stack expantion into low vm addresses
+  * [hppa]: Disable OCFS2, due build trouble.
+
+  [ Aurelien Jarno ]
+  * [arm/versatile] Disable ACENIC and MYRI10GE as they are useless on this
+    platform.
+  * Add em28xx-dv100.patch to add support for Pinnacle Dazzle DVC 100.
+
+  [ Bastian Blank ]
+  * Fix abi change in 2.6.23.10.
+
+ -- maximilian attems <maks@debian.org>  Fri, 21 Dec 2007 11:47:55 +0100
+
+linux-kbuild-2.6 (2.6.23-1) unstable; urgency=low
+
+  * New upstream version.
+  * modpost: Support -s.
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 05 Dec 2007 08:23:28 +0100
+
+linux-2.6 (2.6.23-1) unstable; urgency=low
+
+  * New upstream release (closes: #447682).
+    - r8169: fix confusion between hardware and IP header alignment
+      (closes: #452069).
+
+  [ maximilian attems ]
+  * [ppc] Enable for powerpc config the ams (Apple Motion Sensor).
+    (closes: #426210)
+  * Add to linux-doc the missing toplevel text files.
+    (closes: #360876, #438697)
+  * Set CONFIG_BLK_DEV_IO_TRACE for blktrace(8) support. (closes: #418442)
+  * ipw2200: Enable IPW2200_RADIOTAP and IPW2200_PROMISCUOUS for optional
+    rtap interface. (closes: #432555)
+  * Enable in topconfig NF_CT_PROTO_UDPLITE, NETFILTER_XT_TARGET_TRACE,
+    NETFILTER_XT_MATCH_CONNLIMIT, NETFILTER_XT_MATCH_U32, SENSORS_ABITUGURU3,
+    SENSORS_LM93, SENSORS_DME1737, SENSORS_THMC50, DVB_USB_AF9005,
+    DVB_USB_AF9005_REMOTE, CRC7, I2C_TAOS_EVM, DS1682, SENSORS_TSL2550,
+    SPI_LM70_LLP, SPI_TLE62X0, W1_SLAVE_DS2760, TUNER_TEA5761, NET_9P,
+    DM_MULTIPATH_RDAC, NET_SCH_RR, EEPROM_93CX6, PPPOL2TP, CRYPTO_HW, UIO,
+    UIO_CIF, SND_CS5530, RTL8187, PC300TOO, TCG_TIS, SCSI_SAS_ATA,
+    PATA_MARVELL.
+  * [i386] Enable lguest.
+  * [amd64, i386] Enable VIDEO_OUTPUT_CONTROL, NETDEVICES_MULTIQUEUE.
+  * linux-image bugscript add cmdline.
+  * [amd64, i386, ia64]: Enable DMIID, ACPI_PROC_EVENT.
+  * Enable TCG_TPM various userspace accesses it. (closes: #439020)
+  * Add and enable IWLWIFI.
+  * Add git-ieee1394.patch for latest firewire fixes.
+  * [ipv6] Enable IPV6_MULTIPLE_TABLES, IPV6_SUBTREES. (closes: #441226)
+  * Add and enable E1000E.
+  * Add stable release 2.6.23.1:
+    - libata: sata_mv: more S/G fixes
+
+  [ Martin Michlmayr ]
+  * [mips] Add a bcm1480 PCI build fix.
+  * Update Riku Voipio's Fintek F75375/SP driver to the latest version.
+  * [arm/iop32x] Set the fan on Thecus N2100 to full speed (Riku Voipio).
+  * [arm/iop32x] Remove the IPv6 and filesystem info from the config file
+    so we will get the values from the main config file.  This should
+    enable NFSv4 and ip6tables support requested by Wouter Verhelst.
+  * [arm/iop32x] Remove even more options to receive the default options.
+  * [arm/ixp4xx] Remove a lot of options to receive the default options.
+  * [mips/r4k-ip22] Remove a lot of options to receive the default options.
+    This will enable ISCSI requested by Martin Zobel-Helas.
+  * [mips/r5k-ip32] Remove a lot of options to receive the default options.
+    This will enable PCI Ethernet devices requested by Giuseppe Sacco.
+  * [mipsel/r5k-cobalt] Remove a lot of options to receive the default
+    options.
+  * [mipsel/r5k-cobalt] Enable the modern Cobalt LEDs driver.
+  * [arm/iop32x] Enable Intel IOP ADMA support.
+  * [arm] Mark BCM43XX as broken on ARM.
+  * [mips/r4k-ip22] Disable EARLY PRINTK because it breaks serial console.
+  * [mips] Add some IP22 fixes from Thomas Bogendoerfer:
+    - Fix broken EISA interrupt setup by switching to generic i8259
+    - Fix broken eeprom access by using __raw_readl/__raw_writel
+
+  [ Bastian Blank ]
+  * Add unpriviledged only Xen support.
+  * [i386] Drop k7 images.
+  * Drop maybe IETF document. (closes: #423040)
+  * Drop drivers because of binary only firmwares:
+    - DABUSB driver
+    - COPS LocalTalk PC support
+    - Digi Intl. RightSwitch SE-X support
+    - 3Com 3C359 Token Link Velocity XL adapter support
+    - SMC ISA/MCA adapter support
+    - EMI 6|2m USB Audio interface support
+    - EMI 2|6 USB Audio interface support
+    - Computone IntelliPort Plus serial support
+  * Remove binary only firmwares for:
+    - Alteon AceNIC/3Com 3C985/NetGear GA620 Gigabit support
+    - Broadcom Tigon3 support
+    - USB Keyspan USA-xxx Serial Driver
+    - Korg 1212 IO
+    - ESS Allegro/Maestro3
+    - Yamaha YMF724/740/744/754
+    - Technotrend/Hauppauge Nova-USB devices
+    - YAM driver for AX.25
+    - MyriCOM Gigabit Ethernet support
+    - PTI Qlogic, ISP Driver
+    - Cirrus Logic (Sound Fusion) CS4280/CS461x/CS462x/CS463x
+    - Madge Ambassador (Collage PCI 155 Server)
+    - PCA-200E support
+    - SBA-200E support
+    - Broadcom NetXtremeII support
+  * Disable now broken drivers:
+    - Alteon AceNIC/3Com 3C985/NetGear GA620 Gigabit support
+    - USB Keyspan USA-xxx Serial Driver
+    - Technotrend/Hauppauge Nova-USB devices
+    - YAM driver for AX.25
+    - MyriCOM Gigabit Ethernet support
+    - PTI Qlogic, ISP Driver
+    - Cirrus Logic (Sound Fusion) CS4280/CS461x/CS462x/CS463x
+    - Madge Ambassador (Collage PCI 155 Server)
+    - PCA-200E support
+    - SBA-200E support
+    - Broadcom NetXtremeII support
+  * Add -common to common header package names.
+  * Drop provides from common header packages.
+  * Update plain image type.
+  * Put only a config dump into linux-support.
+
+  [ Aurelien Jarno ]
+  * [mips, mipsel] Add a 64-bit image (5kc-malta) for the MIPS Malta board.
+    (closes: #435677)
+    [sparc] Enable r8169 module on sparc64 and sparc64-smp flavours (closes:
+    #431977)
+
+  [ Frederik Schüler ]
+  * Move all PATA options into the global config file, exept PATA_ARTOP
+    (arm/ixp4xx) and PATA_MPC52xx (powerpc).
+  * Move new global options into the global config file
+  * Clean up new amd64 options
+
+  [ dann frazier ]
+  * [ia64] Re-enable various unintentionally disabled config options
+  * Enable hugetlbfs on i386, amd64, sparc64 and powerpc64. Closes: #450939
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.23.2:
+    - BLOCK: Fix bad sharing of tag busy list on queues with shared tag maps
+    - fix tmpfs BUG and AOP_WRITEPAGE_ACTIVATE
+    - Fix compat futex hangs. (closes: #433187)
+    - sched: keep utime/stime monotonic
+    - fix the softlockup watchdog to actually work
+    - splice: fix double kunmap() in vmsplice copy path
+    - writeback: don't propagate AOP_WRITEPAGE_ACTIVATE
+    - SLUB: Fix memory leak by not reusing cpu_slab
+    - HOWTO: update ja_JP/HOWTO with latest changes
+    - fix param_sysfs_builtin name length check
+    - param_sysfs_builtin memchr argument fix
+    - Remove broken ptrace() special-case code from file mapping
+    - locks: fix possible infinite loop in posix deadlock detection
+    - lockdep: fix mismatched lockdep_depth/curr_chain_hash
+  * Add stable release 2.6.23.3:
+    - revert "x86_64: allocate sparsemem memmap above 4G"
+    - x86: fix TSC clock source calibration error
+    - x86 setup: sizeof() is unsigned, unbreak comparisons
+    - x86 setup: handle boot loaders which set up the stack incorrectly
+    - x86: fix global_flush_tlb() bug
+    - xfs: eagerly remove vmap mappings to avoid upsetting Xen
+    - xen: fix incorrect vcpu_register_vcpu_info hypercall argument
+    - xen: deal with stale cr3 values when unpinning pagetables
+    - xen: add batch completion callbacks
+    - UML - kill subprocesses on exit
+    - UML - stop using libc asm/user.h
+    - UML - Fix kernel vs libc symbols clash
+    - UML - Stop using libc asm/page.h
+    - POWERPC: Make sure to of_node_get() the result of pci_device_to_OF_node()
+    - POWERPC: Fix handling of stfiwx math emulation
+    - MIPS: R1: Fix hazard barriers to make kernels work on R2 also.
+    - MIPS: MT: Fix bug in multithreaded kernels.
+    - Fix sparc64 MAP_FIXED handling of framebuffer mmaps
+    - Fix sparc64 niagara optimized RAID xor asm
+  * Add stable release 2.6.23.4:
+    - mac80211: make ieee802_11_parse_elems return void
+    - mac80211: only honor IW_SCAN_THIS_ESSID in STA, IBSS, and AP modes
+    - mac80211: honor IW_SCAN_THIS_ESSID in siwscan ioctl
+    - mac80211: store SSID in sta_bss_list
+    - mac80211: store channel info in sta_bss_list
+    - mac80211: reorder association debug output
+    - ieee80211: fix TKIP QoS bug
+    - NETFILTER: nf_conntrack_tcp: fix connection reopening
+    - Fix netlink timeouts.
+    - Fix crypto_alloc_comp() error checking.
+    - Fix SET_VLAN_INGRESS_PRIORITY_CMD error return.
+    - Fix VLAN address syncing.
+    - Fix endianness bug in U32 classifier.
+    - Fix TEQL oops.
+    - Fix error returns in sys_socketpair()
+    - softmac: fix wext MLME request reason code endianness
+    - Fix kernel_accept() return handling.
+    - TCP: Fix size calculation in sk_stream_alloc_pskb
+    - Fix SKB_WITH_OVERHEAD calculations.
+    - Fix 9P protocol build
+    - Fix advertised packet scheduler timer resolution
+    - Add get_unaligned to ieee80211_get_radiotap_len
+    - mac80211: Improve sanity checks on injected packets
+    - mac80211: filter locally-originated multicast frames
+  * Add stable release 2.6.23.5:
+    - zd1211rw, fix oops when ejecting install media
+    - rtl8187: Fix more frag bit checking, rts duration calc
+    - ipw2100: send WEXT scan events
+    - zd1201: avoid null ptr access of skb->dev
+    - sky2: fix power settings on Yukon XL
+    - sky2: ethtool register reserved area blackout
+    - sky2: status ring race fix
+    - skge: XM PHY handling fixes
+    - Fix L2TP oopses.
+    - TG3: Fix performance regression on 5705.
+    - forcedeth: add MCP77 device IDs
+    - forcedeth msi bugfix
+    - ehea: 64K page kernel support fix
+    - libertas: fix endianness breakage
+    - libertas: more endianness breakage
+  * Add stable release 2.6.23.6:
+    - ACPI: suspend: Wrong order of GPE restore.
+    - ACPI: sleep: Fix GPE suspend cleanup
+    - libata: backport ATA_FLAG_NO_SRST and ATA_FLAG_ASSUME_ATA, part 2
+    - libata: backport ATA_FLAG_NO_SRST and ATA_FLAG_ASSUME_ATA
+    - libata: add HTS542525K9SA00 to NCQ blacklist
+    - radeon: set the address to access the GART table on the CPU side correctly
+    - Char: moxa, fix and optimise empty timer
+    - Char: rocket, fix dynamic_dev tty
+    - hptiop: avoid buffer overflow when returning sense data
+    - ide: Fix cs5535 driver accessing beyond array boundary
+    - ide: Fix siimage driver accessing beyond array boundary
+    - ide: Add ide_get_paired_drive() helper
+    - ide: fix serverworks.c UDMA regression
+    - i4l: fix random freezes with AVM B1 drivers
+    - i4l: Fix random hard freeze with AVM c4 card
+    - ALSA: hda-codec - Add array terminator for dmic in STAC codec
+    - USB: usbserial - fix potential deadlock between write() and IRQ
+    - USB: add URB_FREE_BUFFER to permissible flags
+    - USB: mutual exclusion for EHCI init and port resets
+    - usb-gadget-ether: prevent oops caused by error interrupt race
+    - USB: remove USB_QUIRK_NO_AUTOSUSPEND
+    - MSI: Use correct data offset for 32-bit MSI in read_msi_msg()
+    - md: raid5: fix clearing of biofill operations
+    - md: fix an unsigned compare to allow creation of bitmaps with v1.0 metadata
+    - dm: fix thaw_bdev
+    - dm delay: fix status
+    - libata: sync NCQ blacklist with upstream
+    - ALSA: hdsp - Fix zero division
+    - ALSA: emu10k1 - Fix memory corruption
+    - ALSA: Fix build error without CONFIG_HAS_DMA
+    - ALSA: fix selector unit bug affecting some USB speakerphones
+    - ALSA: hda-codec - Avoid zero NID in line_out_pins[] of STAC codecs
+    - IB/mthca: Use mmiowb() to avoid firmware commands getting jumbled up
+    - IB/uverbs: Fix checking of userspace object ownership
+    - hwmon/lm87: Disable VID when it should be
+    - hwmon/lm87: Fix a division by zero
+    - hwmon/w83627hf: Don't assume bank 0
+    - hwmon/w83627hf: Fix setting fan min right after driver load
+    - i915: fix vbl swap allocation size.
+    - POWERPC: Fix platinumfb framebuffer
+  * Add stable release 2.6.23.7:
+    - NFS: Fix a writeback race...
+    - ocfs2: fix write() performance regression
+    - minixfs: limit minixfs printks on corrupted dir i_size (CVE-2006-6058)
+  * Add stable release 2.6.23.8:
+    - wait_task_stopped: Check p->exit_state instead of TASK_TRACED (CVE-2007-5500)
+    - TCP: Make sure write_queue_from does not begin with NULL ptr (CVE-2007-5501)
+  * Add stable release 2.6.23.9:
+    - ipw2200: batch non-user-requested scan result notifications
+    - USB: Nikon D40X unusual_devs entry
+    - USB: unusual_devs modification for Nikon D200
+    - softlockup: use cpu_clock() instead of sched_clock()
+    - softlockup watchdog fixes and cleanups
+    - x86: fix freeze in x86_64 RTC update code in time_64.c
+    - ntp: fix typo that makes sync_cmos_clock erratic
+    - x86: return correct error code from child_rip in x86_64 entry.S
+    - x86: NX bit handling in change_page_attr()
+    - x86: mark read_crX() asm code as volatile
+    - x86: fix off-by-one in find_next_zero_string
+    - i386: avoid temporarily inconsistent pte-s
+    - libcrc32c: keep intermediate crc state in cpu order
+    - geode: Fix not inplace encryption
+    - Fix divide-by-zero in the 2.6.23 scheduler code
+    - ACPI: VIDEO: Adjust current level to closest available one.
+    - libata: sata_sis: use correct S/G table size
+    - sata_sis: fix SCR read breakage
+    - reiserfs: don't drop PG_dirty when releasing sub-page-sized dirty file
+    - x86: disable preemption in delay_tsc()
+    - dmaengine: fix broken device refcounting
+    - nfsd4: recheck for secure ports in fh_verify
+    - knfsd: fix spurious EINVAL errors on first access of new filesystem
+    - raid5: fix unending write sequence
+    - oProfile: oops when profile_pc() returns ~0LU
+    - drivers/video/ps3fb: fix memset size error
+    - i2c/eeprom: Hide Sony Vaio serial numbers
+    - i2c/eeprom: Recognize VGN as a valid Sony Vaio name prefix
+    - i2c-pasemi: Fix NACK detection
+
+ -- maximilian attems <maks@debian.org>  Fri, 30 Nov 2007 11:40:09 +0100
+
+linux-2.6 (2.6.22-6) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * [mips] Add IP22 (SGI Indy) patches from Thomas Bogendoerfer:
+    - Disable EARLY PRINTK because it breaks serial.
+    - fix wrong argument order.
+    - wrong check for second HPC.  Closes: #448488
+
+  [ maximilian attems ]
+  * Add stable release 2.6.22.11 - minus ipv6 abi breaker:
+    - libertas: fix endianness breakage
+    - libertas: more endianness breakage
+    - Fix ROSE module unload oops.
+    - Add get_unaligned to ieee80211_get_radiotap_len
+    - Fix ipv6 redirect processing, leads to TAHI failures.
+    - i915: fix vbl swap allocation size.
+    - Fix ESP host instance numbering.
+    - Fix TCP MD5 on big-endian.
+    - Fix zero length socket write() semantics.
+    - Fix sys_ipc() SEMCTL on sparc64.
+    - Fix TCP initial sequence number selection.
+    - lockdep: fix mismatched lockdep_depth/curr_chain_hash
+    - V4L: ivtv: fix udma yuv bug
+    - Fix TCP's ->fastpath_cnt_hit handling.
+    - hwmon/lm87: Fix a division by zero
+    - hwmon/lm87: Disable VID when it should be
+    - hwmon/w83627hf: Fix setting fan min right after driver load
+    - hwmon/w83627hf: Don't assume bank 0
+    - netdrvr: natsemi: Fix device removal bug
+    - Fix ieee80211 handling of bogus hdrlength field
+    - mac80211: filter locally-originated multicast frames
+    - POWERPC: Fix handling of stfiwx math emulation
+    - dm9601: Fix receive MTU
+    - firewire: fix unloading of fw-ohci while devices are attached
+    - Fix cls_u32 error return handling.
+    - ACPI: disable lower idle C-states across suspend/resume
+  * Add stable release 2.6.22.12-rc1:
+    - genirq: cleanup mismerge artifact
+    - genirq: suppress resend of level interrupts
+    - genirq: mark io_apic level interrupts to avoid resend
+    - IB/uverbs: Fix checking of userspace object ownership
+    - minixfs: limit minixfs printks on corrupted dir i_size (CVE-2006-6058)
+    - param_sysfs_builtin memchr argument fix
+    - x86: fix global_flush_tlb() bug
+    - dm snapshot: fix invalidation deadlock
+    - Revert "x86_64: allocate sparsemem memmap above 4G"
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.2.0.5.
+    - Ignore symbols from never to be merged patch.
+
+ -- maximilian attems <maks@debian.org>  Sun,  4 Nov 2007 17:35:51 +0100
+
+linux-2.6 (2.6.22-5) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Add stable release 2.6.22.6:
+    - USB: allow retry on descriptor fetch errors
+    - PCI: lets kill the 'PCI hidden behind bridge' message
+    - Netfilter: Missing Kbuild entry for netfilter
+    - Fix soft-fp underflow handling.
+    - SPARC64: Fix sparc64 task stack traces.
+    - TCP: Do not autobind ports for TCP sockets
+    - DCCP: Fix DCCP GFP_KERNEL allocation in atomic context
+    - NET: Share correct feature code between bridging and bonding
+    - SNAP: Fix SNAP protocol header accesses.
+    - NET: Fix missing rcu unlock in __sock_create()
+    - IPv6: Invalid semicolon after if statement
+    - TCP: Fix TCP rate-halving on bidirectional flows.
+    - TCP: Fix TCP handling of SACK in bidirectional flows.
+    - uml: fix previous request size limit fix
+    - usb: add PRODUCT, TYPE to usb-interface events
+    - PPP: Fix PPP buffer sizing.
+    - ocfs2: Fix bad source start calculation during kernel writes
+    - signalfd: fix interaction with posix-timers
+    - signalfd: make it group-wide, fix posix-timers scheduling
+    - USB: fix DoS in pwc USB video driver
+    - sky2: don't clear phy power bits
+    - PCI: disable MSI on RS690
+    - PCI: disable MSI on RD580
+    - PCI: disable MSI on RX790
+    - IPV6: Fix kernel panic while send SCTP data with IP fragments
+    - i386: fix lazy mode vmalloc synchronization for paravirt
+  * Set abi to 3.
+  * Add stable release 2.6.22.7: (CVE-2007-4573)
+    - x86_64: Zero extend all registers after ptrace in 32bit entry path.
+  * Add stable release 2.6.22.8: (CVE-2007-4571)
+    - Convert snd-page-alloc proc file to use seq_file
+  * Add stable release 2.6.22.9:
+    - 3w-9xxx: Fix dma mask setting
+    - Fix pktgen src_mac handling.
+    - nfs: fix oops re sysctls and V4 support
+    - DVB: get_dvb_firmware: update script for new location of tda10046 firmware
+    - afs: mntput called before dput
+    - disable sys_timerfd()
+    - Fix "Fix DAC960 driver on machines which don't support 64-bit DMA"
+    - futex_compat: fix list traversal bugs
+    - MTD: Initialise s_flags in get_sb_mtd_aux()
+    - Fix sparc64 v100 platform booting.
+    - Fix IPV6 DAD handling
+    - ext34: ensure do_split leaves enough free space in both blocks
+    - dir_index: error out instead of BUG on corrupt dx dirs
+    - Fix oops in vlan and bridging code
+    - V4L: ivtv: fix VIDIOC_S_FBUF: new OSD values were never set
+    - crypto: blkcipher_get_spot() handling of buffer at end of page
+    - Fix datagram recvmsg NULL iov handling regression.
+    - Handle snd_una in tcp_cwnd_down()
+    - Fix TCP DSACK cwnd handling
+    - JFFS2: fix write deadlock regression
+    - hwmon: End of I/O region off-by-one
+    - Fix debug regression in video/pwc
+    - splice: fix direct splice error handling
+    - Fix race with shared tag queue maps
+    - Fix ipv6 source address handling.
+    - POWERPC: Flush registers to proper task context
+    - bcm43xx: Fix cancellation of work queue crashes
+    - Fix DAC960 driver on machines which don't support 64-bit DMA
+    - DVB: get_dvb_firmware: update script for new location of sp8870 firmware
+    - USB: fix linked list insertion bugfix for usb core
+    - Correctly close old nfsd/lockd sockets.
+    - Fix IPSEC AH4 options handling
+    - setpgid(child) fails if the child was forked by sub-thread
+    - sigqueue_free: fix the race with collect_signal()
+    - Fix decnet device address listing.
+    - Fix inet_diag OOPS.
+    - Leases can be hidden by flocks
+    - kconfig: oldconfig shall not set symbols if it does not need to
+    - MTD: Makefile fix for mtdsuper
+    - firewire: fw-ohci: ignore failure of pci_set_power_state
+      (fix suspend regression)
+    - ieee1394: ohci1394: fix initialization if built non-modular
+    - Fix device address listing for ipv4.
+    - Fix tc_ematch kbuild
+    - V4L: cx88: Avoid a NULL pointer dereference during mpeg_open()
+    - DVB: b2c2-flexcop: fix Airstar HD5000 tuning regression
+    - fix realtek phy id in forcedeth
+    - rpc: fix garbage in printk in svc_tcp_accept()
+    - Fix IPV6 append OOPS.
+    - Fix ipv6 double-sock-release with MSG_CONFIRM
+    - ACPI: Validate XSDT, use RSDT if XSDT fails
+  * Update vserver patch to 2.2.0.4.
+  * Add stable release 2.6.22.10:
+    - i386: Use global flag to disable broken local apic timer on AMD CPUs.
+    - Fix timer_stats printout of events/sec
+    - libata: update drive blacklists
+    - i2c-algo-bit: Read block data bugfix
+    - scsi_transport_spi: fix domain validation failure from incorrect width
+      setting
+    - Fix SMP poweroff hangs
+    - Fix ppp_mppe kernel stack usage.
+    - sky2: reduce impact of watchdog timer
+    - sky2: fix VLAN receive processing
+    - sky2: fix transmit state on resume
+    - SELinux: clear parent death signal on SID transitions
+    - NLM: Fix a circular lock dependency in lockd
+    - NLM: Fix a memory leak in nlmsvc_testlock
+
+  [ Martin Michlmayr ]
+  * [mips] Add a fix so qemu NE2000 will work again.
+  * [mipsel/r5k-cobalt] Enable MTD.
+  * [mips] Backport "Fix CONFIG_BUILD_ELF64 kernels with symbols in
+    CKSEG0" to fix crash on boot on IP32 (SGI O2).  Closes: #444104.
+
+  [ Steve Langasek ]
+  * Set CONFIG_MATHEMU=y on alpha, which is required for proper fp math on
+    at least ev4-ev56 systems.  Closes: #411813.
+  * linux-image packages need to depend on a newer version of coreutils,
+    because of the use of readlink -q -m inherited from kernel-package.
+    Closes: #413311.
+
+  [ Bastian Blank ]
+  * Fix tainted check in bug scripts.
+
+  [ dann frazier ]
+  * [ia64] Re-enable various unintentionally disabled config options
+
+ -- Maximilian Attems <maks@debian.org>  Thu, 11 Oct 2007 13:31:38 +0000
+
+linux-2.6 (2.6.22-4) unstable; urgency=low
+
+  [ dann frazier ]
+  * [hppa] Use generic compat_sys_getdents (closes: #431773)
+
+  [ Martin Michlmayr ]
+  * [powerpc] Fix PS/2 keyboard detection on Pegasos (closes: #435378).
+
+  [ Emanuele Rocca ]
+  * [sparc] Add patch to fix PCI config space accesses on sun4u.
+  * [sparc] Disable CONFIG_SCSI_SCAN_ASYNC.
+
+  [ maximilian attems ]
+  * Add stable release 2.6.22.2:
+    - usb-serial: Fix edgeport regression on non-EPiC devices
+    - Missing header include in ipt_iprange.h
+    - drivers/video/macmodes.c:mac_find_mode() mustn't be __devinit
+    - Fix ipv6 tunnel endianness bug.
+    - aacraid: fix security hole
+    - USB: cdc-acm: fix sysfs attribute registration bug
+    - USB: fix warning caused by autosuspend counter going negative
+    - Fix sparc32 memset()
+    - Fix leak on /proc/lockdep_stats
+    - Fix leaks on /proc/{*/sched, sched_debug, timer_list, timer_stats}
+    - futex: pass nr_wake2 to futex_wake_op
+    - md: handle writes to broken raid10 arrays gracefully
+    - forcedeth bug fix: cicada phy
+    - forcedeth bug fix: vitesse phy
+    - forcedeth bug fix: realtek phy
+    - ACPI: dock: fix opps after dock driver fails to initialize
+    - pcmcia: give socket time to power down
+    - drm/i915: Fix i965 secured batchbuffer usage (CVE-2007-3851)
+    - Fix console write locking in sparc drivers.
+    - Sparc64 bootup assembler bug
+    - IPV6: /proc/net/anycast6 unbalanced inet6_dev refcnt
+    - make timerfd return a u64 and fix the __put_user
+    - Fix error queue socket lookup in ipv6
+    - Input: lifebook - fix an oops on Panasonic CF-18
+    - readahead: MIN_RA_PAGES/MAX_RA_PAGES macros
+    - V4L: Add check for valid control ID to v4l2_ctrl_next
+    - V4L: ivtv: fix broken VBI output support
+    - V4L: ivtv: fix DMA timeout when capturing VBI + another stream
+    - V4L: ivtv: Add locking to ensure stream setup is atomic
+    - V4L: wm8775/wm8739: Fix memory leak when unloading module
+    - do not limit locked memory when RLIMIT_MEMLOCK is RLIM_INFINITY
+    - Include serial_reg.h with userspace headers (closes: #433755)
+    - TCP FRTO retransmit bug fix
+    - Fix rfkill IRQ flags.
+    - nfsd: fix possible read-ahead cache and export table corruption
+    - nfsd: fix possible oops on re-insertion of rpcsec_gss modules
+    - jbd commit: fix transaction dropping
+    - jbd2 commit: fix transaction dropping
+    - softmac: Fix ESSID problem
+    - uml: limit request size on COWed devices
+    - UML: exports for hostfs
+    - splice: fix double page unlock
+    - cfq-iosched: fix async queue behaviour
+    - cr_backlight_probe() allocates too little storage for struct cr_panel
+    - sx: switch subven and subid values
+    - hugetlb: fix race in alloc_fresh_huge_page()
+    - KVM: SVM: Reliably detect if SVM was disabled by BIOS
+    - dm io: fix another panic on large request
+    - md: raid10: fix use-after-free of bio
+    - fs: 9p/conv.c error path fix
+    - Fix sparc32 udelay() rounding errors.
+    - sony-laptop: fix bug in event handling
+    - eCryptfs: ecryptfs_setattr() bugfix
+    - Hangup TTY before releasing rfcomm_dev
+    - dm io: fix panic on large request
+    - dm raid1: fix status
+    - dm snapshot: permit invalid activation
+    - "ext4_ext_put_in_cache" uses __u32 to receive physical block number
+    - destroy_workqueue() can livelock
+    - USB: fix for ftdi_sio quirk handling
+    - Fix TC deadlock.
+    - Fix IPCOMP crashes.
+    - gen estimator timer unload race
+    - Netfilter: Fix logging regression
+    - Fix user struct leakage with locked IPC shem segment
+    - Fix reported task file values in sense data
+    - gen estimator deadlock fix
+    - Netpoll leak
+    - dm: disable barriers
+    - firewire: fw-sbp2: set correct maximum payload (fixes CardBus adapters)
+    - fw-ohci: fix "scheduling while atomic"
+    - firewire: fix memory leak of fw_request instances
+    - ieee1394: revert "sbp2: enforce 32bit DMA mapping"
+    - libata: add FUJITSU MHV2080BH to NCQ blacklist
+    - i386: HPET, check if the counter works
+    - CPU online file permission
+    - acpi-cpufreq: Proper ReadModifyWrite of PERF_CTL MSR
+    - Keep rfcomm_dev on the list until it is freed
+    - SCTP scope_id handling fix
+    - Fix ipv6 link down handling.
+    - Fix TCP IPV6 MD5 bug.
+    - sysfs: release mutex when kmalloc() failed in sysfs_open_file().
+    - nf_conntrack: don't track locally generated special ICMP error
+  * Bump abi due to firewire, ivtv and xrfm changes.
+  * Add stable release 2.6.22.3:
+    - fix oops in __audit_signal_info()
+    - direct-io: fix error-path crashes
+    - powerpc: Fix size check for hugetlbfs
+    - stifb: detect cards in double buffer mode more reliably
+    - pata_atiixp: add SB700 PCI ID
+    - PPC: Revert "[POWERPC] Add 'mdio' to bus scan id list for platforms
+      with QE UEC"
+    - random: fix bound check ordering (CVE-2007-3105)
+    - softmac: Fix deadlock of wx_set_essid with assoc work
+    - PPC: Revert "[POWERPC] Don't complain if size-cells == 0 in prom_parse()"
+    - ata_piix: update map 10b for ich8m
+    - CPUFREQ: ondemand: fix tickless accounting and software coordination bug
+    - CPUFREQ: ondemand: add a check to avoid negative load calculation
+  * Add stable release 2.6.22.4:
+    - Reset current->pdeath_signal on SUID binary execution (CVE-2007-3848)
+  * Add stable release 2.6.22.5:
+    - x86_64: Check for .cfi_rel_offset in CFI probe
+    - x86_64: Change PMDS invocation to single macro
+    - i386: Handle P6s without performance counters in nmi watchdog
+    - revert "x86, serial: convert legacy COM ports to platform devices"
+    - ACPICA: Fixed possible corruption of global GPE list
+    - ACPICA: Clear reserved fields for incoming ACPI 1.0 FADTs
+    - i386: Fix double fault handler
+    - JFFS2 locking regression fix.
+    - r8169: avoid needless NAPI poll scheduling
+    - Linux 2.6.22.5
+    - AVR32: Fix atomic_add_unless() and atomic_sub_unless()
+    - i386: allow debuggers to access the vsyscall page with compat vDSO
+    - hwmon: (smsc47m1) restore missing name attribute
+    - hwmon: fix w83781d temp sensor type setting
+    - Hibernation: do not try to mark invalid PFNs as nosave
+    - sky2: restore workarounds for lost interrupts
+    - sky2: carrier management
+    - sky2: check for more work before leaving NAPI
+    - sky2: check drop truncated packets
+    - forcedeth: fix random hang in forcedeth driver when using netconsole
+    - libata: add ATI SB700 device IDs to AHCI driver
+
+  [ dann frazier ]
+  * [ia64] Restore config cleanup now that its safe to break the ABI
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.2.0.3.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 30 Aug 2007 20:19:44 +0200
+
+linux-2.6 (2.6.22-3) unstable; urgency=low
+
+  [ dann frazier ]
+  * [ia64] Config cleanup in 2.6.22-2 broke the ABI; revert most of it
+    for now (everything but the efivars and sym53c8xx modules)
+
+  [ Martin Michlmayr ]
+  * [mipsel/r5k-cobalt] Fix a typo in the config file.
+  * [mipsel/4kc-malta] Update the config file, thanks Aurelien Jarno.
+  * [mipsel] Add patch from Yoichi Yuasa to fix IDE on Cobalt.
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 29 Jul 2007 13:47:38 +0200
+
+linux-2.6 (2.6.22-2) unstable; urgency=low
+
+  [ Steve Langasek ]
+  * [alpha] request_irq-retval.patch: capture the return value of all
+    request_irq() calls in sys_titan.c to suppress the warning (and
+    build failure with -Werror); failures still aren't being handled, but
+    there's nothing that needs to be done -- or nothing that can be done
+    -- if these requests fail anyway.
+
+  [ Christian T. Steigies ]
+  * Add module.lds to kernel headers (closes: #396220)
+  * Enable INPUT_UINPUT on mac
+  * Add 2.6.22 patches from linux-m68k CVS
+
+  [ maximilian attems ]
+  * Add stable release 2.6.22.1:
+    - nf_conntrack_h323: add checking of out-of-range on choices' index values
+      (CVE-2007-3642)
+
+  [ dann frazier ]
+  * [ia64] Re-enable various config options which were unintentionally
+    disabled somewhere between 2.6.21 and 2.6.22
+  * [ia64] Re-enable vserver flavour - this was somehow lost when 2.6.22
+    was merged from trunk to the sid branch
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.2.0.3-rc1.
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 23 Jul 2007 09:38:01 +0200
+
+linux-kbuild-2.6 (2.6.22-1) unstable; urgency=low
+
+  * New upstream version.
+  * Don't fail if no module is specified.
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 17 Jul 2007 23:14:23 +0200
+
+linux-2.6 (2.6.22-1) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Drop asfs options.
+  * Drop linux-libc-headers references.
+  * Update vserver patch to 2.2.0-rc5.
+
+  [ maximilian attems ]
+  * Fullfils policy 3.7.2.2.
+  * Add Sempron to the k7 image description (closes: #384737)
+    Thanks Robert Millan <rmh@aybabtu.com>.
+  * [powerpc] Enable CONFIG_ADB_PMU_LED.
+  * [hppa] Disable a bunch of topconfig enabled fb devices. Thanks Frank
+    Lichtenheld <djpig@debian.org> for build fix.
+
+  [ Christian T. Steigies ]
+  * Add module.lds to kernel headers
+  * Enable INPUT_UINPUT on mac
+  * Add 2.6.22 patches from linux-m68k CVS
+
+  [ dann frazier ]
+  * Enable vserver flavour for ia64 (closes: #423232)
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 15 Jul 2007 15:03:40 +0200
+
+linux-2.6 (2.6.22~rc5-1~experimental.1) experimental; urgency=low
+
+  [ Bastian Blank ]
+  * [powerpc]: Disable prep.
+  * [powerpc]: Disable apm emulation.
+  * Drop inactive members from Uploaders.
+
+  [ maximilian attems ]
+  * Cleanup configs of old unused variables.
+  * Enable TCP_CONG_YEAH, TCP_CONG_ILLINOIS, NF_CONNTRACK_SANE, DM_DELAY,
+    GIGASET_M101, SATA_INIC162X, VIDEO_IVTV, USB_ZR364XX, INFINIBAND_CXGB3,
+    MLX4_INFINIBAND, SPI_AT25, MFD_SM501, DVB_USB_M920X, DVB_USB_GL861,
+    DVB_USB_AU6610, DVB_USB_OPERA1, SENSORS_AD7418, SENSORS_ADM1029,
+    SENSORS_F75375S, SENSORS_CORETEMP, SENSORS_MAX6650, SENSORS_APPLESMC,
+    I2C_SIMTEC, I2C_TINY_USB, SC92031, LIBERTAS_USB, RFKILL, RFKILL_INPUT,
+    MTD_UBI, SND_USB_CAIAQ, SND_USB_CAIAQ_INPUT, USB_BERRY_CHARGE,
+    RTC_DRV_MAX6900, SUNRPC_BIND34, SND_PORTMAN2X4, FB_VT8623, FUSION_LAN,
+    DISPLAY_SUPPORT, FB_ARK, FB_SM501
+    and disable SCSI_ESP_CORE, SPI_SPIDEV, CRYPT_CRYPTD, SYSV68_PARTITION,
+    MOUSE_PS2_TOUCHKIT, INPUT_POLLDEV in topconfig.
+  * [amd64, i386]: Take care of the renaming acpi-ibm to thinkpad-acpi.
+    Enable KINGSUN_DONGLE, AF_RXRPC, RXKAD, MTD_NAND_PLATFORM, BLINK, PHANTOM,
+    BACKLIGHT_PROGEAR, FB_HECUBA, FB_LE80578, FB_CARILLO_RANCH.
+    Disable OSS_OBSOLETE.
+  * Enable WLAN_PRE80211 and WLAN_80211 on all archs with NET_RADIO enabled.
+  * Fix RTC_INTF_{DEV,SYSFS,PROC}=y where enabled modular.
+  * Enable new wirless stack mac80211 and improved wireless conf api.
+  * Enable new USB Touchscreen Driver on all configs with touchscreens.
+  * Enable the newly added crypto algorythm: fcrypt, pcbc and camellia.
+  * Unify CONFIG_TR to toplevel config, also enable new drivers 3C359
+    and SMCTR.
+  * Enable the moved USB tablets config options where wacom is enabled.
+  * [i386] Enable driver for Crystalfontz 128x64 2-color LCD.
+  * [amd64] Enable KS0108 LCD controller.
+  * Enable the new firewire stack labeled to be more simple and robust.
+  * [i386] Enable VMI paravirtualized interface.
+  * [powerpc] Enable fb for IBM GXT4500P adaptor.
+  * [amd64] Enable timerstats too.
+
+  [ Martin Michlmayr ]
+  * mipsel/r5k-cobalt: Use the new RTC system.
+
+  [ dann frazier ]
+  * Add Xen licensing info to the copyright file. (closes: #368912)
+
+  [ Gordon Farquharson ]
+  * arm: Mark CHELSIO_T3, NETXEN_NIC, BCM43XX, VIDEO_BT848,
+    DVB_B2C2_FLEXCOP, and DVB_BUDGET as broken on ARM.
+  * arm/ixp4xx: Add support for the new generic I2C GPIO driver on the
+    NSLU2 and the NAS100D. Thanks to Michael-Luke Jones and Rod Whitby.
+  * arm/ixp4xx: Update Artop PATA support patch for the NAS 100d.
+
+  [ Christian T. Steigies ]
+  * m68k: Disable already included patches (611, 618, 630)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 19 Jun 2007 17:49:52 +0200
+
+linux-2.6 (2.6.21-6) unstable; urgency=low
+
+  * Add stable release 2.6.21.6:
+    - nf_conntrack_h323: add checking of out-of-range on choices' index values
+      (CVE-2007-3642)
+  * Update vserver patch to 2.2.0.
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 10 Jul 2007 18:36:17 +0200
+
+linux-2.6 (2.6.21-5) unstable; urgency=low
+
+  [ Christian T. Steigies ]
+  * [m68k] Add atari isa and scsi fixes
+
+  [ maximilian attems ]
+  * Add stable release 2.6.21.4:
+    - cpuset: prevent information leak in cpuset_tasks_read (CVE-2007-2875)
+    - random: fix error in entropy extraction (CVE-2007-2453 1 of 2)
+    - random: fix seeding with zero entropy (CVE-2007-2453 2 of 2)
+    - NETFILTER: {ip, nf}_conntrack_sctp: fix remotely triggerable NULL ptr
+      dereference (CVE-2007-2876)
+  * Add stable release 2.6.21.5:
+    - acpi: fix potential call to a freed memory section.
+    - USB: set the correct Interrupt interval in usb_bulk_msg
+    - i386: Fix K8/core2 oprofile on multiple CPUs
+    - ntfs_init_locked_inode(): fix array indexing
+    - ALSA: wm8750 typo fix
+    - neofb: Fix pseudo_palette array overrun in neofb_setcolreg
+    - e1000: disable polling before registering netdevice
+    - timer statistics: fix race
+    - x86: fix oprofile double free
+    - ALSA: usb-audio: explicitly match Logitech QuickCam
+    - zd1211rw: Add AL2230S RF support
+    - IPV4: Correct rp_filter help text.
+    - Fix AF_UNIX OOPS
+    - ICMP: Fix icmp_errors_use_inbound_ifaddr sysctl
+    - NET: Fix BMSR_100{HALF,FULL}2 defines in linux/mii.h
+    - SPARC64: Fix _PAGE_EXEC_4U check in sun4u I-TLB miss handler.
+    - SPARC64: Don't be picky about virtual-dma values on sun4v.
+    - SPARC64: Fix two bugs wrt. kernel 4MB TSB.
+    - cciss: fix pci_driver.shutdown while device is still active
+    - fix compat console unimap regression
+    - timer stats: speedups
+    - SPARC: Linux always started with 9600 8N1
+    - pci_ids: update patch for Intel ICH9M
+    - PCI: quirk disable MSI on via vt3351
+    - UML - Improve host PTRACE_SYSEMU check
+    - NET: parse ip:port strings correctly in in4_pton
+    - Char: cyclades, fix deadlock
+    - IPSEC: Fix panic when using inter address familiy IPsec on loopback.
+    - TCP: Use default 32768-61000 outgoing port range in all cases.
+    - TG3: Fix link problem on Dell's onboard 5906.
+    - fuse: fix mknod of regular file
+    - md: Avoid overflow in raid0 calculation with large components.
+    - md: Don't write more than is required of the last page of a bitmap
+    - make freezeable workqueues singlethread
+    - tty: fix leakage of -ERESTARTSYS to userland
+    - V4L/DVB (5593): Budget-ci: Fix tuning for TDM 1316 (160..200 MHz)
+    - Input: i8042 - fix AUX port detection with some chips
+    - SCSI: aacraid: Correct sa platform support.
+      (Was: [Bug 8469] Bad EIP value on pentium3 SMP kernel-2.6.21.1)
+    - BLUETOOTH: Fix locking in hci_sock_dev_event().
+    - hpt366: don't check enablebits for HPT36x
+    - ieee1394: eth1394: bring back a parent device
+    - NET: Fix race condition about network device name allocation.
+    - ALSA: hda-intel - Probe additional slots only if necessary
+    - ALSA: hda-intel - Fix detection of audio codec on Toshiba A100
+    - ahci: disable 64bit dma on sb600
+    - i386: HPET, check if the counter works
+    - Ignore bogus ACPI info for offline CPUs
+    - NOHZ: Rate limit the local softirq pending warning output
+    - Prevent going idle with softirq pending
+    - Work around Dell E520 BIOS reboot bug
+    - NET: "wrong timeout value" in sk_wait_data() v2
+    - IPV6 ROUTE: No longer handle ::/0 specially.
+    - x86_64: allocate sparsemem memmap above 4G
+  * Bump ABI to 2.
+
+  [ Bastian Blank ]
+  * Back out ABI fixing changes.
+  * Update vserver patch to 2.2.0-rc3.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 22 Jun 2007 12:39:47 +0200
+
+linux-2.6 (2.6.21-4) unstable; urgency=low
+
+  * [powerpc] Fix mkvmlinuz support.
+  * [s390] Add exception handler for diagnose 224.
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 26 May 2007 14:08:44 +0200
+
+linux-2.6 (2.6.21-3) unstable; urgency=low
+
+  [ Gordon Farquharson ]
+  * arm/ixp4xx: Add patch to set NSLU2 timer frequency.
+
+  [ maximilian attems ]
+  * sparc64: enable USB_SERIAL. (closes: #412740)
+  * Apply stable 2.6.21.1.
+  * Add stable release 2.6.21.2:
+    - slob: fix page order calculation on not 4KB page
+    - libata-sff: Undo bug introduced with pci_iomap changes
+    - kbuild: fixdep segfault on pathological string-o-death
+    - IPMI: fix SI address space settings
+    - IPV6: Reverse sense of promisc tests in ip6_mc_input
+    - iop: fix iop_getttimeoffset
+    - iop13xx: fix i/o address translation
+    - arm: fix handling of svc mode undefined instructions
+    - CPUFREQ: powernow-k7: fix MHz rounding issue with perflib
+    - CPUFREQ: Support rev H AMD64s in powernow-k8
+    - CPUFREQ: Correct revision mask for powernow-k8
+    - JFS: Fix race waking up jfsIO kernel thread
+    - IPV6: Send ICMPv6 error on scope violations.
+    - SPARC64: Add missing cpus_empty() check in hypervisor xcall handling.
+    - SPARC64: Fix recursion in PROM tree building.
+    - SERIAL SUNHV: Add an ID string.
+    - SPARC64: Bump PROMINTR_MAX to 32.
+    - SPARC64: Be more resiliant with PCI I/O space regs.
+    - oom: fix constraint deadlock
+    - fix for bugzilla 8426: massive slowdown on SCSI CD/DVD drive connected to
+      mptspi driver
+    - x86_64 : Fix vgettimeofday()
+    - IPV6: Fix slab corruption running ip6sic
+    - IPSEC: Check validity of direction in xfrm_policy_byid
+    - CRYPTO: api: Read module pointer before freeing algorithm
+    - NET_SCHED: prio qdisc boundary condition
+    - reiserfs: suppress lockdep warning
+    - USB HID: hiddev - fix race between hiddev_send_event() and
+      hiddev_release()
+    - NETFILTER: {ip,nf}_nat_proto_gre: do not modify/corrupt GREv0 packets
+      through NAT
+    - fix leaky resv_huge_pages when cpuset is in use
+    - ACPI: Fix 2.6.21 boot regression on P4/HT
+    - TG3: Fix TSO bugs.
+    - TG3: Remove reset during MAC address changes.
+    - TG3: Update version and reldate.
+    - BNX2: Fix TSO problem with small MSS.
+    - BNX2: Block MII access when ifdown.
+    - BNX2: Save PCI state during suspend.
+    - BNX2: Update version and reldate.
+    - sis900: Allocate rx replacement buffer before rx operation
+    - knfsd: Avoid use of unitialised variables on error path when nfs exports.
+    - knfsd: rpc: fix server-side wrapping of krb5i replies
+    - md: Avoid a possibility that a read error can wrongly propagate through
+    - md/raid1 to a filesystem.
+    - fat: fix VFAT compat ioctls on 64-bit systems
+    - NETFILTER: {ip,nf}_conntrack: fix use-after-free in helper destroy
+      callback invocation
+    - ppp: Fix ppp_deflate issues with recent zlib_inflate changes
+    - NETPOLL: Fix TX queue overflow in trapped mode.
+    - NETPOLL: Remove CONFIG_NETPOLL_RX
+    - cxacru: Fix infinite loop when trying to cancel polling task
+    - TCP: zero out rx_opt in tcp_disconnect()
+    - ipv6: track device renames in snmp6
+    - skge: default WOL should be magic only (rev2)
+    - skge: allow WOL except for known broken chips
+    - sky2: allow 88E8056
+    - sky2: 88e8071 support not ready
+    - skge: crash on shutdown/suspend
+    - sky2: fix oops on shutdown
+    - udf: decrement correct link count in udf_rmdir
+    - ALSA: hda-codec - Fix resume of STAC92xx codecs
+    - sata_via: add missing PM hooks
+    - driver-core: don't free devt_attr till the device is released
+    - pci-quirks: disable MSI on RS400-200 and RS480
+    - highres/dyntick: prevent xtime lock contention
+    - clocksource: fix resume logic
+    - smc911x: fix compilation breakage wjen debug is on
+    - SCTP: Fix sctp_getsockopt_local_addrs_old() to use local storage.
+    - SCTP: Correctly copy addresses in sctp_copy_laddrs
+    - SCTP: Prevent OOPS if hmac modules didn't load
+    - IPV6: Do no rely on skb->dst before it is assigned.
+    - IPV6 ROUTE: Assign rt6i_idev for ip6_{prohibit,blk_hole}_entry.
+
+  [ Christian T. Steigies ]
+  * m68k: enable ATARI_SCSI and ATARI_ROM_ISA
+
+  [ Bastian Blank ]
+  * Fix linux/version.h in linux-libc-dev.
+  * Make it possible to specifiy special CFLAGS.
+  * [hppa] Reenable.
+  * [hppa] Workaround hppa64 failure.
+  * [hppa] Fix debugging in lws syscalls.
+  * Fix abi change.
+  * Add stable release 2.6.21.3:
+    - [PATCH] GEODE-AES: Allow in-place operations [CVE-2007-2451]
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 25 May 2007 10:57:48 +0200
+
+linux-kbuild-2.6 (2.6.21-1) unstable; urgency=low
+
+  * New upstream version.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 18 May 2007 23:45:14 +0200
+
+linux-2.6 (2.6.21-2) unstable; urgency=low
+
+  [ Christian T. Steigies ]
+  * m68k: fix atari scc patch
+  * m68k: install compressed vmlinuz images so the post-inst script can find it
+
+  [ Steve Langasek ]
+  * [alpha] isa-mapping-support.patch: add isa_page_to_bus and
+    isa_bus_to_virt defines to complement the existing isa_virt_to_bus
+    define; untested, but these should all be straightforward on alpha and
+    defining them is certainly a better option for getting user feedback
+    than disabling the affected drivers.
+
+  [ Bastian Blank ]
+  * [powerpc] Readd mkvmlinuz support. (closes: #419033)
+  * [sparc]: Disable sparc32 image.
+  * [hppa]: Temporary disable all images.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 18 May 2007 19:52:36 +0200
+
+linux-2.6 (2.6.21-1) unstable; urgency=low
+
+  [ maximilian attems ]
+  * New upstream release see http://kernelnewbies.org/Linux_2_6_21
+    (closes: #423874)
+  * Disable CONFIG_IP_ROUTE_MULTIPATH_CACHED in topconfig.
+  * Enable CONFIG_IP6_NF_MATCH_MH, CONFIG_CHELSIO_T3, CONFIG_USB_NET_DM9601,
+    CONFIG_NETFILTER_XT_TARGET_TCPMSS, CONFIG_RTC_DRV_CMOS,
+    CONFIG_ASUS_LAPTOP, CONFIG_SONY_LAPTOP, CONFIG_DVB_TUNER_QT1010,
+    CONFIG_USB_IOWARRIOR, CONFIG_ATL1 in topconfig.
+  * [i386] Enable CONFIG_ACPI_BAY, CONFIG_X86_LONGHAUL, CONFIG_BLK_DEV_DELKIN,
+    CONFIG_BLK_DEV_IT8213, CONFIG_BLK_DEV_TC86C001, CONFIG_INPUT_ATLAS_BTNS,
+    CONFIG_SENSORS_ADM1029, CONFIG_FB_SVGALIB, CONFIG_FB_S3,
+    CONFIG_USB_KC2190, CONFIG_KS0108.
+  * Add stable release 2.6.21.1:
+    - IPV4: Fix OOPS'er added to netlink fib.
+    - IPV6: Fix for RT0 header ipv6 change.
+  * [i386] Enable CONFIG_NO_HZ, CONFIG_HIGH_RES_TIMERS for dynticks and true
+    high-resolution timers.
+  * [i386] Enable CONFIG_TIMER_STATS to collect stats about kernel/userspace
+    timer aka power usage (see powertop). (closes: #423694)
+  * [i386] Disable obsolete CONFIG_IRQBALANCE due to bad timer behaviour.
+
+  [ Martin Michlmayr ]
+  * Add armel (arm with EABI) support.  Thanks, Lennert Buytenhek and
+    Joey Hess.  (closes: #410853)
+  * Mark CHELSIO_T3 as broken on ARM.
+  * Take arch/arm/tools/mach-types from current git to fix build failure
+    because MACH_TYPE_EP80219 is not defined.
+  * mips/sb1: Don't build CONFIG_ATA into the kernel.
+  * mips/sb1: Unset CONFIG_USB_{KBD,MOUSE} since the generic HID is used.
+  * arm/iop32x: Don't build CONFIG_ATA into the kernel.
+  * arm/ixp4xx: Enable more SATA drivers.
+  * arm/ixp4xx: Enable PATA_ARTOP which is needed by the nas100d.
+  * arm/ixp4xx: Set CONFIG_USB_EHCI_TT_NEWSCHED.
+  * mips/4kc-malta: Add an image for the MIPS Malta board.  Thanks,
+    Aurelien Jarno. (closes: #421377)
+
+  [ Emanuele Rocca ]
+  * sparc: Enable CONFIG_SCSI_QLOGIC_1280. (closes: #423177)
+
+  [ Christian T. Steigies ]
+  * Add m68k patches for 2.6.21
+  * Add type: plain to [image] in arch/m68k/defines to fix missing
+    Modules.symvers problem
+
+  [ Steve Langasek ]
+  * Revert change to disable image building on alpha.
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.2.0-rc1.
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 16 May 2007 13:46:38 +0200
+
+linux-2.6 (2.6.20-3) unstable; urgency=low
+
+  [ Gordon Farquharson ]
+  * arm: Mark CONFIG_MTD_NAND_CAFE and CONFIG_NETXEN_NIC as broken to
+    fix FTBFS.
+
+  [ Bastian Blank ]
+  * Disable new pata drivers. (closes: #419458)
+  * Disable pata in ata_piix.
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 24 Apr 2007 09:54:44 +0200
+
+linux-2.6 (2.6.20-2) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Rename linux-libc-headers into linux-libc-dev.
+  * [mips] Drop sb1250 uart support.
+  * [alpha] Temporary disable alpha images.
+  * Add stable release 2.6.20.7:
+    - Linux 2.6.20.7
+    - Update libata drive blacklist to the latest from 2.6.21
+    - fix page leak during core dump
+    - revert "retries in ext4_prepare_write() violate ordering requirements"
+    - revert "retries in ext3_prepare_write() violate ordering requirements"
+    - libata: Clear tf before doing request sense (take 3)
+    - fix lba48 bug in libata fill_result_tf()
+    - ahci.c: walkaround for SB600 SATA internal error issue
+    - libata bugfix: preserve LBA bit for HDIO_DRIVE_TASK
+    - softmac: avoid assert in ieee80211softmac_wx_get_rate
+    - knfsd: allow nfsd READDIR to return 64bit cookies
+    - Fix TCP slow_start_after_idle sysctl
+    - Fix tcindex classifier ABI borkage...
+    - Fix IPSEC replay window handling
+    - Fix TCP receiver side SWS handling.
+    - Fix scsi sense handling
+    - Fix length validation in rawv6_sendmsg()
+    - NETFILTER: ipt_CLUSTERIP: fix oops in checkentry function
+    - 8139too: RTNL and flush_scheduled_work deadlock
+    - Fix calculation for size of filemap_attr array in md/bitmap.
+    - HID: Do not discard truncated input reports
+    - DVB: pluto2: fix incorrect TSCR register setting
+    - DVB: tda10086: fix DiSEqC message length
+    - sky2: phy workarounds for Yukon EC-U A1
+    - sky2: turn on clocks when doing resume
+    - sky2: turn carrier off when down
+    - skge: turn carrier off when down
+    - sky2: reliable recovery
+    - i386: fix file_read_actor() and pipe_read() for original i386 systems
+    - kbuild: fix dependency generation
+
+  [ dann frazier ]
+  * [hppa] Add parisc arch patch from Kyle McMartin
+  * [hppa] Enable CONFIG_TULIP_MMIO (closes: #332962)
+  * [hppa] Disable ni52 driver, it doesn't build (and wouldn't work if it did)
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 15 Apr 2007 16:04:16 +0200
+
+linux-kbuild-2.6 (2.6.20-1) unstable; urgency=low
+
+  * New upstream version.
+  * modpost: Support -w.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 12 Apr 2007 06:53:00 +0200
+
+linux-2.6 (2.6.20-1) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * mipsel: Drop DECstation support (both r3k-kn02 and r4k-kn04).
+  * arm: Drop RiscPC (rpc) support.
+  * arm: Update configs for 2.6.19-rc6.
+  * arm: source drivers/ata/Kconfig so SATA can be enabled on ARM.
+  * arm/footbridge: Unset SATA.
+  * arm/s3c2410: Drop this flavour since no such device is supported
+    in debian-installer and the ARM build resources are limited.
+
+  [ Sven Luther ]
+  * [powerpc] Added Genesi Efika support patch
+
+  [ Bastian Blank ]
+  * Remove legacy pty support. (closes: #338404)
+  * Enable new scsi parts.
+  * powerpc: Enable ibmvscsis.
+  * Add stable release 2.6.20.1:
+    - Linux 2.6.20.1
+    - [PATCH] Fix a free-wrong-pointer bug in nfs/acl server (CVE-2007-0772)
+  * Add stable release 2.6.20.2:
+    - Linux 2.6.20.2
+    - IPV6: Handle np->opt being NULL in ipv6_getsockopt_sticky() [CVE-2007-1000]
+    - x86-64: survive having no irq mapping for a vector
+    - Fix buffer overflow in Omnikey CardMan 4040 driver (CVE-2007-0005)
+    - TCP: Fix minisock tcp_create_openreq_child() typo.
+    - gfs2: fix locking mistake
+    - ATA: convert GSI to irq on ia64
+    - pktcdvd: Correctly set cmd_len field in pkt_generic_packet
+    - video/aty/mach64_ct.c: fix bogus delay loop
+    - revert "drivers/net/tulip/dmfe: support basic carrier detection"
+    - throttle_vm_writeout(): don't loop on GFP_NOFS and GFP_NOIO allocations
+    - fix section mismatch warning in lockdep
+    - ueagle-atm.c needs sched.h
+    - kvm: Fix asm constraint for lldt instruction
+    - lockdep: forward declare struct task_struct
+    - Char: specialix, isr have 2 params
+    - buffer: memorder fix
+    - kernel/time/clocksource.c needs struct task_struct on m68k
+    - m32r: build fix for processors without ISA_DSP_LEVEL2
+    - hugetlb: preserve hugetlb pte dirty state
+    - enable mouse button 2+3 emulation for x86 macs
+    - v9fs_vfs_mkdir(): fix a double free
+    - ufs: restore back support of openstep
+    - Fix MTRR compat ioctl
+    - kexec: Fix CONFIG_SMP=n compilation V2 (ia64)
+    - NLM: Fix double free in __nlm_async_call
+    - RPM: fix double free in portmapper code
+    - Revert "[PATCH] LOG2: Alter get_order() so that it can make use of ilog2() on a constant"
+    - Backport of psmouse suspend/shutdown cleanups
+    - USB: usbnet driver bugfix
+    - sched: fix SMT scheduler bug
+    - tty_io: fix race in master pty close/slave pty close path
+    - forcedeth: disable msix
+    - export blk_recount_segments
+    - Fix reference counting (memory leak) problem in __nfulnl_send() and callers related to packet queueing.
+    - Fix anycast procfs device leak
+    - Don't add anycast reference to device multiple times
+    - Fix TCP MD5 locking.
+    - Fix %100 cpu spinning on sparc64
+    - Fix skb data reallocation handling in IPSEC
+    - Fix xfrm_add_sa_expire() return value
+    - Fix interrupt probing on E450 sparc64 systems
+    - HID: fix possible double-free on error path in hid parser
+    - POWERPC: Fix performance monitor exception
+    - libata: add missing CONFIG_PM in LLDs
+    - libata: add missing PM callbacks
+    - bcm43xx: Fix assertion failures in interrupt handler
+    - mmc: Power quirk for ENE controllers
+    - UML - Fix 2.6.20 hang
+    - fix umask when noACL kernel meets extN tuned for ACLs
+    - sata_sil: ignore and clear spurious IRQs while executing commands by polling
+    - swsusp: Fix possible oops in userland interface
+    - Fix posix-cpu-timer breakage caused by stale p->last_ran value
+    - V4L: cx88-blackbird: allow usage of 376836 and 262144 sized firmware images
+    - V4L: fix cx25840 firmware loading
+    - DVB: digitv: open nxt6000 i2c_gate for TDED4 tuner handling
+    - DVB: cxusb: fix firmware patch for big endian systems
+    - V4L: pvrusb2: Handle larger cx2341x firmware images
+    - V4L: pvrusb2: Fix video corruption on stream start
+    - dvbdev: fix illegal re-usage of fileoperations struct
+    - md: Fix raid10 recovery problem.
+    - bcm43xx: fix for 4309
+    - i386: Fix broken CONFIG_COMPAT_VDSO on i386
+    - x86: Don't require the vDSO for handling a.out signals
+    - x86_64: Fix wrong gcc check in bitops.h
+    - sky2: transmit timeout deadlock
+    - sky2: dont flush good pause frames
+    - Fix oops in xfrm_audit_log()
+    - Prevent pseudo garbage in SYN's advertized window
+    - Fix IPX module unload
+    - Clear TCP segmentation offload state in ipt_REJECT
+    - Fix atmarp.h for userspace
+    - UHCI: fix port resume problem
+    - Fix recently introduced problem with shutting down a busy NFS server.
+    - Avoid using nfsd process pools on SMP machines.
+    - EHCI: turn off remote wakeup during shutdown
+    - IPV6: HASHTABLES: Use appropriate seed for caluculating ehash index.
+    - MTD: Fatal regression in drivers/mtd/redboot.c in 2.6.20
+    - Kconfig: FAULT_INJECTION can be selected only if LOCKDEP is enabled.
+    - USB HID: Fix USB vendor and product IDs endianness for USB HID devices
+    - Fix null pointer dereference in appledisplay driver
+    - ieee1394: fix host device registering when nodemgr disabled
+    - ieee1394: video1394: DMA fix
+    - Fix compile error for e500 core based processors
+    - md: Avoid possible BUG_ON in md bitmap handling.
+    - Fix allocation failure handling in multicast
+    - Fix TCP FIN handling
+    - Fix ATM initcall ordering.
+    - Fix various bugs with aligned reads in RAID5.
+    - hda-intel - Don't try to probe invalid codecs
+    - usbaudio - Fix Oops with unconventional sample rates
+    - usbaudio - Fix Oops with broken usb descriptors
+    - USB: fix concurrent buffer access in the hub driver
+    - Missing critical phys_to_virt in lib/swiotlb.c
+    - AGP: intel-agp bugfix
+    - bcm43xx: Fix for oops on ampdu status
+    - bcm43xx: Fix for oops on resume
+    - ide: fix drive side 80c cable check
+    - Keys: Fix key serial number collision handling
+    - knfsd: Fix a race in closing NFSd connections.
+    - pata_amd: fix an obvious bug in cable detection
+    - prism54: correct assignment of DOT1XENABLE in WE-19 codepaths
+    - rtc-pcf8563: detect polarity of century bit automatically
+    - x86_64: fix 2.6.18 regression - PTRACE_OLDSETOPTIONS should be accepted
+    - ocfs2: ocfs2_link() journal credits update
+  * Update xen patch to changeset 48670 from fedora 2.6.20 branch.
+  * Support xen versions 3.0.4-1 and 3.0.3-1.
+
+  [ Rod Whitby ]
+  * arm/ixp4xx: Enable PATA_ARTOP for the nas100d and dsmg600.
+  * arm/ixp4xx: Enable RTC for the nas100d
+  * Add nas100d Ethernet MAC setup support.
+  * Add temporary hack to get Artop PATA support going on the nas100d.
+
+  [ maximilian attems ]
+  * i386: Enable kvm.
+  * Add stable release 2.6.20.3:
+    - Fix sparc64 device register probing
+    - Fix bug 7994 sleeping function called from invalid context
+    - Fix timewait jiffies
+    - Fix UDP header pointer after pskb_trim_rcsum()
+    - Fix compat_getsockopt
+    - bcm43xx: Fix problem with >1 GB RAM
+    - nfnetlink_log: fix NULL pointer dereference
+    - nfnetlink_log: fix possible NULL pointer dereference
+    - conntrack: fix {nf, ip}_ct_iterate_cleanup endless loops
+    - nf_conntrack/nf_nat: fix incorrect config ifdefs
+    - tcp conntrack: accept SYN|URG as valid
+    - nfnetlink_log: fix reference leak
+    - nfnetlink_log: fix use after free
+    - nf_conntrack: fix incorrect classification of IPv6 fragments as
+      ESTABLISHED
+    - nfnetlink_log: zero-terminate prefix
+    - nfnetlink_log: fix crash on bridged packet
+    - Fix callback bug in connector
+    - fix for bugzilla #7544 (keyspan USB-to-serial converter)
+    - ip6_route_me_harder should take into account mark
+  * Add myself to uploaders field, entry got lost after 2.6.16-2
+  * Add stable release 2.6.20.4:
+    - fix deadlock in audit_log_task_context()
+    - EHCI: add delay to bus_resume before accessing ports
+    - Copy over mac_len when cloning an skb
+    - fix read past end of array in md/linear.c
+    - oom fix: prevent oom from killing a process with children/sibling unkillable
+    - Fix sparc64 hugepage bugs
+    - Fix page allocation debugging on sparc64
+    - Fix niagara memory corruption
+    - Input: i8042 - really suppress ACK/NAK during panic blink
+    - Input: i8042 - fix AUX IRQ delivery check
+    - Input: i8042 - another attempt to fix AUX delivery checks
+    - Fix rtm_to_ifaddr() error return.
+    - r8169: fix a race between PCI probe and dev_open
+    - futex: PI state locking fix
+    - adjust legacy IDE resource setting (v2)
+    - UML - arch_prctl should set thread fs
+    - gdth: fix oops in gdth_copy_cmd()
+    - Fix extraneous IPSEC larval SA creation
+    - IA64: fix NULL pointer in ia64/irq_chip-mask/unmask function
+    - st: fix Tape dies if wrong block size used, bug 7919
+    - Fix ipv6 flow label inheritance
+    - NETFILTER: nfnetlink_log: fix reference counting
+    - mm: fix madvise infinine loop
+    - Fix another NULL pointer deref in ipv6_sockglue.c
+    - NetLabel: Verify sensitivity level has a valid CIPSO mapping
+    - Fix GFP_KERNEL with preemption disabled in fib_trie
+    - IrDA: irttp_dup spin_lock initialisation
+    - hda-intel - Fix codec probe with ATI controllers
+    - hrtimer: prevent overrun DoS in hrtimer_forward()
+    - fix MTIME_SEC_MAX on 32-bit
+    - nfs: nfs_getattr() can't call nfs_sync_mapping_range() for non-regular files
+    - dio: invalidate clean pages before dio write
+    - initialise pi_lock if CONFIG_RT_MUTEXES=N
+  * Add stable release 2.6.20.5:
+    - FRA_{DST,SRC} are le16 for decnet
+    - CIFS: reset mode when client notices that ATTR_READONLY is no longer set
+    - ide: clear bmdma status in ide_intr() for ICHx controllers (revised #4)
+    - ide: remove clearing bmdma status from cdrom_decode_status() (rev #4)
+    - NET: Fix sock_attach_fd() failure in sys_accept()
+    - DCCP: Fix exploitable hole in DCCP socket options
+    - ide: revert "ide: fix drive side 80c cable check, take 2" for now
+    - generic_serial: fix decoding of baud rate
+    - IPV6: Fix ipv6 round-robin locking.
+    - VIDEO: Fix FFB DAC revision probing
+    - PPP: Fix PPP skb leak
+    - V4L: msp_attach must return 0 if no msp3400 was found.
+    - CRYPTO: api: scatterwalk_copychunks() fails to advance through scatterlist
+    - APPLETALK: Fix a remotely triggerable crash (CVE-2007-1357)
+    - UML - fix epoll
+    - UML - host VDSO fix
+    - UML - Fix static linking
+    - UML - use correct register file size everywhere
+    - libata: sata_mv: don't touch reserved bits in EDMA config register
+    - libata: sata_mv: Fix 50xx irq mask
+    - libata bugfix: HDIO_DRIVE_TASK
+    - V4L: Fix SECAM handling on saa7115
+    - DVB: fix nxt200x rf input switching
+    - SPARC: Fix sparc builds with gcc-4.2.x
+    - V4L: saa7146: Fix allocation of clipping memory
+    - uml: fix unreasonably long udelay
+    - NET: Fix packet classidier NULL pointer OOPS
+    - NET_SCHED: Fix ingress qdisc locking.
+    - sata_nv: delay on switching between NCQ and non-NCQ commands
+    - dvb-core: fix several locking related problems
+    - ieee1394: dv1394: fix CardBus card ejection
+    - CIFS: Allow reset of file to ATTR_NORMAL when archive bit not set
+    - jmicron: make ide jmicron driver play nice with libata ones
+    - libata: clear TF before IDENTIFYing
+    - NET: Fix FIB rules compatability
+    - DVB: isl6421: don't reference freed memory
+    - V4L: radio: Fix error in Kbuild file
+    - i2o: block IO errors on i2o disk
+  * Add stable release 2.6.20.6:
+    - CRYPTO api: Use the right value when advancing scatterwalk_copychunks
+    - uml: fix static linking for real
+
+  [ Gordon Farquharson ]
+  * Disable broken config options on ARM.
+
+  [ Frederik Schüler ]
+  * Disable NAPI on forcedeth, it is broken.
+
+  [ dann frazier ]
+  * Hardcode the output of the scripts under arch/ia64/scripts as executed
+    in an etch environment so that we can build out of tree modules correctly
+    (re-add; patch seems to have been dropped during a merge.)
+    See: #392592
+  * Allow '.' and '+' in the target dist field of the changelog. dpkg has
+    supported this since 1.13.20, see #361171.
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 09 Apr 2007 19:21:52 +0200
+
+linux-2.6 (2.6.18.dfsg.1-10) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Add patches out of stable queue 2.6.18
+    - [amd64] Don't leak NT bit into next task (CVE-2006-5755)
+    - IB/srp: Fix FMR mapping for 32-bit kernels and addresses above 4G
+    - SCSI: add missing cdb clearing in scsi_execute()
+  * Xen postinst: Use takeover for update-initramfs. Makes postinst idempotent.
+    On creation it should always overwrite. (closes: #401183)
+  * Hand-picked from stable release 2.6.16.38:
+    - i2c-viapro: Add support for the VT8237A and VT8251
+    - PCI: irq: irq and pci_ids patch for Intel ICH9
+    - i2c-i801: SMBus patch for Intel ICH9
+    - fix the UML compilation
+    - drm: allow detection of new VIA chipsets
+    - drm: Add the P4VM800PRO PCI ID.
+    - rio: typo in bitwise AND expression.
+    - i2c-mv64xxx: Fix random oops at boot
+    - i2c: fix broken ds1337 initialization
+    - [SUNKBD]: Fix sunkbd_enable(sunkbd, 0); obvious.
+    - Call init_timer() for ISDN PPP CCP reset state timer (CVE-2006-5749)
+    - V4L: cx88: Fix leadtek_eeprom tagging
+    - SPI/MTD: mtd_dataflash oops prevention
+    - grow_buffers() infinite loop fix (CVE-2006-5757/CVE-2006-6060)
+    - corrupted cramfs filesystems cause kernel oops (CVE-2006-5823)
+    - ext2: skip pages past number of blocks in ext2_find_entry
+      (CVE-2006-6054)
+    - handle ext3 directory corruption better (CVE-2006-6053)
+    - hfs_fill_super returns success even if no root inode (CVE-2006-6056)
+      backout previous fix, was not complete.
+    - Fix for shmem_truncate_range() BUG_ON()
+    - ebtables: check struct type before computing gap
+    - [IPV4/IPV6]: Fix inet{,6} device initialization order.
+    - [IPV6] Fix joining all-node multicast group.
+    - [SOUND] Sparc CS4231: Use 64 for period_bytes_min
+  * [PKTGEN]: Convert to kthread API. Thanks David Miller for patch.
+  * [IDE] Add driver for Jmicron  JMB36x devices by Alan Cox.
+    Enable jmicron on i386 and amd64 archs.
+  * Hand-picked from stable release 2.6.16.39:
+    - atiixp: hang fix
+    - V4L/DVB: Flexcop-usb: fix debug printk
+    - V4L/DVB: Fix uninitialised variable in dvb_frontend_swzigzag
+    - read_zero_pagealigned() locking fix
+    - adfs: fix filename handling
+    - sparc32: add offset in pci_map_sg()
+    - cdrom: set default timeout to 7 seconds
+    - [SCSI] qla1280 command timeout
+    - [SCSI] qla1280 bus reset typo
+    - [Bluetooth] Check if DLC is still attached to the TTY
+    - [Bluetooth] Fix uninitialized return value for RFCOMM sendmsg()
+    - [Bluetooth] Return EINPROGRESS for non-blocking socket calls
+    - [Bluetooth] Handle command complete event for exit periodic inquiry
+    - [Bluetooth] Fix compat ioctl for BNEP, CMTP and HIDP
+    - [Bluetooth] Add locking for bt_proto array manipulation
+    - i386: fix CPU hotplug with 2GB VMSPLIT
+
+  [ dann frazier ]
+  * Fix raid1 recovery (closes: #406181)
+
+  [ Jurij Smakov ]
+  * Add dtlb-prot-bug-niagara.patch by David Miller, fixing the bug in the
+    Niagara's DTLB-PROT trap.
+
+  [ Bastian Blank ]
+  * i386: Add amd64 image. (closes: #379090)
+
+ -- Bastian Blank <waldi@debian.org>  Fri,  2 Feb 2007 12:50:35 +0100
+
+linux-2.6 (2.6.18.dfsg.1-9) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * arm/iop32x: Enable CONFIG_IP_NF_CONNTRACK_EVENTS and _NETLINK.
+  * arm/ixp4xx: Enable some more I2C sensor modules.
+  * arm/ixp4xx: Enable CONFIG_USB_NET_RNDIS_HOST.
+  * arm/footbridge: Enable CONFIG_NATSEMI.
+  * Revert mm/msync patches because they cause filesystem corruption
+    (closes: #401006, #401980, #402707) ...
+  * ... and add an alternative msync patch from Hugh Dickins that
+    doesn't depend on the mm changes (closes: #394392).
+  * mips: provide pci_get_legacy_ide_irq needed by some IDE drivers
+    (see #404950).
+  * arm: Implement flush_anon_page(), which is needed for FUSE
+    (closes: #402876) and possibly dm-crypt/LUKS (see #403426).
+  * arm: Turn off PCI burst on the Cyber2010, otherwise X11 on
+    Netwinder will crash.
+  * arm/iop32x: Enable CONFIG_IEEE80211_SOFTMAC and drivers based
+    on it.
+  * arm/ixp4xx: Upgrade to version 0.3.1 of the IXP4xx NPE Ethernet
+    driver.  This version fixes stuck connections, e.g. with scp and
+    NFS (closes: #404447).
+  * arm/ixp4xx: Enable CONFIG_VIDEO_CPIA_USB.
+  * arm/ixp4xx: Enable CONFIG_ISCSI_TCP.
+  * arm/iop32x: Likewise.
+
+  [ Bastian Blank ]
+  * Bump ABI to 4.
+  * Update vserver patch to 2.0.2.2-rc9. (closes: #402743, #403790)
+  * Update xen patch to changeset 36186 from Fedora 2.6.18 branch.
+  * i386/xen: Build only the pae version. (closes: #390862)
+  * hppa: Override host type when necessary.
+  * Fix tg3 reset. (closes: #405085)
+
+  [ dann frazier ]
+  * Fix potential fragmentation attacks in ip6_tables (CVE-2006-4572)
+  * Backport a number of fixes for the cciss driver
+    - Fix a bug with 1TB disks caused by converting total_size to an int
+    - Claim devices that are of the HP RAID class and have a valid cciss sig
+    - Make NR_CMDS a per-controller define - most can do 1024 commands, but
+      the E200 family can only support 128
+    - Change the SSID on the E500 as a workaround for a firmware bug
+    - Disable prefetch on the P600 controller. An ASIC bug may result in
+      prefetching beyond the end of physical memory
+    - Increase blk_queue_max_sectors from 512 to 2048 to increase performance
+    - Map out more memor for the PCI config table, required to reach offset
+      0x214 to disable DMA on the P600
+    - Set a default raid level on a volume that either does not support
+      reading the geometry or reports an invalid geometry for whatever reason
+      to avoid problems with buggy firmware
+    - Revert change that replaed XFER_READ/XFER_WRITE macros with
+      h->cciss_read/h->cciss_write that caused command timeouts on older
+      controllers on ia32 (closes: #402787)
+  * Fix mincore hang (CVE-2006-4814)
+  * ia64: turn on IOC4 modules for SGI Altix systems. Thanks to Stephane Larose
+    for suggesting this.
+  * Add versioned build dep on findutils to make sure the system find command
+    supports the -execdir action (closes: #405150)
+  * Hardcode the output of the scripts under arch/ia64/scripts as executed
+    in an etch environment so that we can build out of tree modules correctly
+    (closes: #392592)
+  * Update unusual_devs entry for ipod to fix an eject issue (closes: #406124)
+  * Re-add verify_pmtmr_rate, resolving problems seen on older K6 ASUS
+    boards where the ACPI PM timer runs too fast (closes: #394753)
+  * Avoid condition where /proc/swaps header may not be printed
+    (closes: #292318)
+  * [hppa] disable XFS until it works (closes: #350482)
+
+  [ Norbert Tretkowski ]
+  * libata: handle 0xff status properly. (closes: #391867)
+  * alpha: enabled CONFIG_SCSI_ARCMSR. (closes: #401187)
+  * removed BROKEN_ON_SMP dependency from I2C_ELEKTOR. (closes: #402253)
+
+  [ Christian T. Steigies ]
+  * m68k/atari: enable keyboard, mouse and fb drivers
+  * m68k/atari: fixes for ethernec and video driver by Michael Schmitz
+  * m68k/atari: fixes for scsi driver by Michael Schmitz
+  * m68k/mac: fixes for mace and cuda driver by Finn Thain
+  * m68k/atari: fixes for ide driver by Michael Schmitz
+  * m68k/atari: fixes for ide driver by Michael Schmitz
+  * m68k/atari: fixes for ethernec and atakeyb driver by Michael Schmitz, build ethernec as module
+  * m68k/mac: fixes for mace and adb driver by Finn Thain
+
+  [ maximilian attems ]
+  * Add stable release 2.6.18.6:
+    - EBTABLES: Fix wraparounds in ebt_entries verification.
+    - EBTABLES: Verify that ebt_entries have zero ->distinguisher.
+    - EBTABLES: Deal with the worst-case behaviour in loop checks.
+    - EBTABLES: Prevent wraparounds in checks for entry components' sizes.
+    - skip data conversion in compat_sys_mount when data_page is NULL
+    - bonding: incorrect bonding state reported via ioctl
+    - x86-64: Mark rdtsc as sync only for netburst, not for core2
+      (closes: #406767)
+    - dm crypt: Fix data corruption with dm-crypt over RAID5 (closes: #402812)
+    - forcedeth: Disable INTx when enabling MSI in forcedeth
+    - PKT_SCHED act_gact: division by zero
+    - XFRM: Use output device disable_xfrm for forwarded packets
+    - IPSEC: Fix inetpeer leak in ipv4 xfrm dst entries.
+    - V4L: Fix broken TUNER_LG_NTSC_TAPE radio support
+    - m32r: make userspace headers platform-independent
+    - IrDA: Incorrect TTP header reservation
+    - SUNHME: Fix for sunhme failures on x86
+    - Bluetooth: Add packet size checks for CAPI messages (CVE-2006-6106)
+    - softmac: remove netif_tx_disable when scanning
+    - DVB: lgdt330x: fix signal / lock status detection bug
+    - dm snapshot: fix freeing pending exception
+    - NET_SCHED: policer: restore compatibility with old iproute binaries
+    - NETFILTER: ip_tables: revision support for compat code
+    - ARM: Add sys_*at syscalls
+    - ieee1394: ohci1394: add PPC_PMAC platform code to driver probe
+    - softirq: remove BUG_ONs which can incorrectly trigger
+  * Hand-picked from stable release 2.6.16.30:
+    - [PPPOE]: Advertise PPPoE MTU
+  * Hand-picked from stable release 2.6.16.31:
+    - [NETFILTER]: Fix ip6_tables extension header bypass bug (CVE-2006-4572)
+    - fix RARP ic_servaddr breakage
+  * Hand-picked from stable release 2.6.16.32:
+    - drivers/telephony/ixj: fix an array overrun
+    - flush D-cache in failure path
+  * Hand-picked from stable release 2.6.16.33:
+    - Add new PHY to sis900 supported list
+    - ipmi_si_intf.c: fix "&& 0xff" typos
+    - drivers/scsi/psi240i.c: fix an array overrun
+  * Hand-picked from stable release 2.6.16.34:
+    - [IPX]: Annotate and fix IPX checksum
+    - [IGMP]: Fix IGMPV3_EXP() normalization bit shift value.
+  * Hand-picked from stable release 2.6.16.35:
+    - sgiioc4: Disable module unload
+    - Fix a masking bug in the 6pack driver.
+    - drivers/usb/input/ati_remote.c: fix cut'n'paste error
+    - proper flags type of spin_lock_irqsave()
+  * Hand-picked from stable release 2.6.16.37:
+    - [CRYPTO] sha512: Fix sha384 block size
+    - [SCSI] gdth: Fix && typos
+    - Fix SUNRPC wakeup/execute race condition
+  * Enable DEBUG_FS for usbmon in generic config. Don't disable it on alpha,
+    amd64, hppa and ia64. (closes: 378542)
+  * Backport a number of upstream fixes for the r8169 driver, needed for
+    network performance (closes: 388870, 400524)
+    - r8169: more alignment for the 0x8168
+    - r8169: phy program update
+    - r8169: more magic during initialization of the hardware
+    - r8169: perform a PHY reset before any other operation at boot time
+    - r8169: Fix iteration variable sign
+    - r8169: remove extraneous Cmd{Tx/Rx}Enb write
+  * sound: hda: detect ALC883 on MSI K9A Platinum motherboards (MS-7280)
+    patch from Leonard Norrgard <leonard.norrgard@refactor.fi>
+  * tulip: Add i386 specific patch to remove duplicate pci ids.
+    Thanks Jurij Smakov <jurij@wooyd.org> (closes: #334104, #405203)
+  * amd64, i386: Disable SK98LIN as SKGE is the modern capable driver.
+    (closes: 405196)
+  * Backout net-bcm43xx_netdev_watchdog.patch and push 2.6.18.2 fix.
+    (closes: 402475)
+
+  [ Jurij Smakov ]
+  * Add bugfix/sparc/isa-dev-no-reg.patch to make sure that
+    isa_dev_get_resource() can deal with devices which do not have a 'reg'
+    PROM property. Failure to handle such devices properly resulted in an
+    oops during boot on Netra X1. Thanks to Richard Mortimer for debugging
+    and patch. (closes: #404216)
+  * Add bugfix/sparc/ehci-hub-contol-alignment.patch to prevent unaligned
+    memory accesses in ehci-hub-control() by adding an alignment attribute
+    to the tbuf array declaration. Thanks to David Miller for the patch.
+
+  [ Sven Luther ]
+  * [powerpc] Enable CONFIG_PMAC_BACKLIGHT_LEGACY (Closes: #407671).
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 24 Jan 2007 13:21:51 +0100
+
+linux-2.6 (2.6.18-8) unstable; urgency=low
+
+  * Fix relations in the generated control file. (closes: #400544)
+  * Add stable release 2.6.18.4:
+    - bridge: fix possible overflow in get_fdb_entries (CVE-2006-5751)
+  * Add stable release 2.6.18.5:
+    - pcmcia: fix 'rmmod pcmcia' with unbound devices
+    - BLUETOOTH: Fix unaligned access in hci_send_to_sock.
+    - alpha: Fix ALPHA_EV56 dependencies typo
+    - TG3: Add missing unlock in tg3_open() error path.
+    - softmac: fix a slab corruption in WEP restricted key association
+    - AGP: Allocate AGP pages with GFP_DMA32 by default
+    - V4L: Do not enable VIDEO_V4L2 unconditionally
+    - bcm43xx: Drain TX status before starting IRQs
+    - fuse: fix Oops in lookup
+    - UDP: Make udp_encap_rcv use pskb_may_pull
+    - NETFILTER: Missing check for CAP_NET_ADMIN in iptables compat layer
+    - NETFILTER: ip_tables: compat error way cleanup
+    - NETFILTER: ip_tables: fix module refcount leaks in compat error paths
+    - NETFILTER: Missed and reordered checks in {arp,ip,ip6}_tables
+    - NETFILTER: arp_tables: missing unregistration on module unload
+    - NETFILTER: Kconfig: fix xt_physdev dependencies
+    - NETFILTER: xt_CONNSECMARK: fix Kconfig dependencies
+    - NETFILTER: H.323 conntrack: fix crash with CONFIG_IP_NF_CT_ACCT
+    - IA64: bte_unaligned_copy() transfers one extra cache line.
+    - x86 microcode: don't check the size
+    - scsi: clear garbage after CDBs on SG_IO
+    - IPV6: Fix address/interface handling in UDP and DCCP, according to the scoping architecture.
+  * Revert abi changing patch from 2.6.18.5.
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 10 Dec 2006 17:51:53 +0100
+
+linux-2.6 (2.6.18-7) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Emit conflict lines for initramfs generators. (closes: #400305)
+  * Update vserver patch to 2.0.2.2-rc8.
+  * s390: Add patch to fix posix types.
+
+  [ Martin Michlmayr ]
+  * r8169: Add an option to ignore parity errors.
+  * r8169: Ignore parity errors on the Thecus N2100.
+  * rtc: Add patch from Riku Voipio to get RS5C372 going on the N2100.
+  * arm/iop32x: Build RS5C372 support into the kernel.
+
+  [ maximilian attems ]
+  * hfs: Fix up error handling in HFS. (MOKB-14-11-2006)
+  * sata: Avoid null pointer dereference in SATA Promise.
+  * cifs: Set CIFS preferred IO size.
+
+  [ Jurij Smakov ]
+  * Add bugfix/sunhme-pci-enable.patch, fixing the failure of sunhme
+    driver on x86/PCI hosts due to missing pci_enable_device() and
+    pci_set_master() calls, lost during code refactoring upstream.
+    (closes: #397460)
+
+ -- Bastian Blank <waldi@debian.org>  Mon,  4 Dec 2006 15:20:30 +0100
+
+linux-2.6 (2.6.18-6) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Enable the new ACT modules globally. They were already set for amd64, hppa
+    and mips/mipsel - needed by newer iproute2. (closes: #395882, #398172)
+  * Fix msync() for LSB 3.1 compliance, backport fedora patches from 2.6.19
+   - mm: tracking shared dirty pages
+   - mm: balance dirty pages
+   - mm: optimize the new mprotect() code a bit
+   - mm: small cleanup of install_page()
+   - mm: fixup do_wp_page()
+   - mm: msync() cleanup (closes: #394392)
+  * [amd64,i386] Enable CONFIG_USB_APPLETOUCH=m (closes: #382298)
+  * Add stable release 2.6.18.3:
+    - x86_64: Fix FPU corruption
+    - e1000: Fix regression: garbled stats and irq allocation during swsusp
+    - POWERPC: Make alignment exception always check exception table
+    - usbtouchscreen: use endpoint address from endpoint descriptor
+    - fix via586 irq routing for pirq 5
+    - init_reap_node() initialization fix
+    - CPUFREQ: Make acpi-cpufreq unsticky again.
+    - SPARC64: Fix futex_atomic_cmpxchg_inatomic implementation.
+    - SPARC: Fix missed bump of NR_SYSCALLS.
+    - NET: __alloc_pages() failures reported due to fragmentation
+    - pci: don't try to remove sysfs files before they are setup.
+    - fix UFS superblock alignment issues
+    - NET: Set truesize in pskb_copy
+    - block: Fix bad data direction in SG_IO (closes: #394690)
+    - cpqarray: fix iostat
+    - cciss: fix iostat
+    - Char: isicom, fix close bug
+    - TCP: Don't use highmem in tcp hash size calculation.
+    - S390: user readable uninitialised kernel memory, take 2.
+    - correct keymapping on Powerbook built-in USB ISO keyboards
+    - USB: failure in usblp's error path
+    - Input: psmouse - fix attribute access on 64-bit systems
+    - Fix sys_move_pages when a NULL node list is passed.
+    - CIFS: report rename failure when target file is locked by Windows
+    - CIFS: New POSIX locking code not setting rc properly to zero on successful
+    - Patch for nvidia divide by zero error for 7600 pci-express card
+      (maybe fixes 398258)
+    - ipmi_si_intf.c sets bad class_mask with PCI_DEVICE_CLASS
+
+  [ Steve Langasek ]
+  * [alpha] new titan-video patch, for compatibility with TITAN and similar
+    systems with non-standard VGA hose configs
+  * [alpha] bugfix for srm_env module from upstream (Jan-Benedict Glaw),
+    makes the module compatible with the current /proc interface so that
+    reads no longer return EFAULT.  (closes: #353079)
+  * Bump ABI to 3 for the msync fixes above.
+
+  [ Martin Michlmayr ]
+  * arm: Set CONFIG_BINFMT_MISC=m
+  * arm/ixp4xx: Set CONFIG_ATM=m (and related modules) so CONFIG_USB_ATM has
+    an effect.
+  * arm/iop32x: Likewise.
+  * arm/s3c2410: Unset CONFIG_PM_LEGACY.
+  * arm/versatile: Fix Versatile PCI config byte accesses
+  * arm/ixp4xx: Swap the disk 1 and disk 2 LED definitions so they're right.
+  * mipsel/r5k-cobalt: Unset CONFIG_SCSI_SYM53C8XX_2 because the timeout is
+    just too long.
+  * arm/ixp4xx: Enable more V4L USB devices.
+
+  [ dann frazier ]
+  * Backport various SCTP changesets from 2.6.19, recommended by Vlad Yasevich
+    (closes: #397946)
+  * Add a "Scope of security support" section to README.Debian, recommended
+    by Moritz Muehlenhoff
+
+  [ Thiemo Seufer ]
+  * Enable raid456 for mips/mipsel qemu kernel.
+
+  [ dann frazier ]
+  * The scope of the USR-61S2B unusual_dev entry was tightened, but too
+    strictly. Loosen it to apply to additional devices with a smaller bcd.
+    (closes: #396375)
+
+  [ Sven Luther ]
+  * Added support for TI ez430 development tool ID in ti_usb.
+    Thanks to Oleg Verych for providing the patch.
+
+  [ Christian T. Steigies ]
+  * Added support for Atari EtherNEC, Aranym, video, keyboard, mouse, and serial
+    by Michael Schmitz
+
+  [ Bastian Blank ]
+  * [i386] Reenable AVM isdn card modules. (closes: #386872)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 21 Nov 2006 11:28:09 +0100
+
+linux-2.6 (2.6.18-5) unstable; urgency=low
+
+  [ maximilian attems ]
+  * [s390] readd the fix for "S390: user readable uninitialised kernel memory
+    (CVE-2006-5174)"
+  * [s390] temporarily add patch queued for 2.6.18.3 fixing 32 bit opcodes and
+    instructions.
+
+  [ Thiemo Seufer ]
+  * Fix build failure of hugetlbfs (closes: #397139).
+  * Add kernel configuration for qemu's mips/mipsel emulation, thanks to
+    Aurelien Jarno.
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.0.2.2-rc6.
+  * Update xen parts for vserver. (closes: #397281)
+
+  [ dann frazier ]
+  * [ia64] Move to upstream version of sal-flush-fix patch, which is slightly
+    different than the early version added in 2.6.18-3.
+
+  [ Frederik Schüler ]
+  * [i386] Acticate CONFIG_SX for all flavours. (closes: #391275)
+
+  [ Steve Langasek ]
+  * [alpha] new asm-subarchs patch: tell the compiler that we're
+    deliberately emitting ev56 or ev6 instructions, so that this code
+    will still compile without having to cripple gcc-4.1's checking of
+    whether the correct instruction set is used.  Closes: #397139.
+
+  [ Martin Michlmayr ]
+  * arm/ixp4xx: Enable CONFIG_USB_ATM.
+  * arm/iop32x: Enable CONFIG_PPPOE.
+  * arm/iop32x: Enable CONFIG_USB_ATM.
+
+ -- Bastian Blank <waldi@debian.org>  Wed,  8 Nov 2006 17:15:55 +0100
+
+linux-2.6 (2.6.18-4) unstable; urgency=low
+
+  [ Norbert Tretkowski ]
+  * [alpha] Switched to gcc-4.1.
+
+  [ Jurij Smakov ]
+  * [sparc] Remove sparc64-atyfb-xl-gr.patch, it does more harm than
+    good in 2.6.18.
+  * [sparc] Add bugfix/sparc/compat-alloc-user-space-alignment.patch
+    (thanks to David Miller) to make sure that compat_alloc_user_space()
+    always returns memory aligned on a 8-byte boundary on sparc. This
+    prevents a number of unaligned memory accesses, like the ones in
+    sys_msgrcv() and compat_sys_msgrcv(), triggered every 5 seconds whenever
+    fakeroot is running.
+  * [sparc] Add bugfix/sparc/bus-id-size.patch (thanks to David Miller)
+    to ensure that the size of the strings stored in the bus_id field of
+    struct device never exceeds the amount of memory allocated for them
+    (20 bytes). It fixes the situations in which storing longer device
+    names in this field would cause corruption of adjacent memory regions.
+    (closes: #394697).
+  * [sparc] Add bugfix/sparc/sunblade1k-boot-fix.patch (thanks to David
+    Miller) to fix a boottime crash on SunBlade1000.
+  * [sparc] Add bugfix/sparc/t1k-cpu-lockup.patch (thanks to David Miller)
+    to prevent soft CPU lockup on T1000 servers, which can be triggered from
+    userspace, resulting in denial of service.
+
+  [ Martin Michlmayr ]
+  * arm/iop32x: Fix the interrupt of the 2nd Ethernet slot on N2100.
+  * arm/iop32x: Allow USB and serial to co-exist on N2100.
+  * arm/ixp4xx: Add clocksource for Intel IXP4xx platforms.
+  * arm: Enable CONFIG_AUDIT=y again.
+  * arm/ixp4xx: Add the IXP4xx Ethernet driver.
+  * arm/ixp4xx: Build LED support into the kernel.
+  * Add a driver for Fintek F75375S/SP and F75373.
+  * arm/iop32x: Build F75375S/SP support in.
+  * arm/iop32x: Fix the size of the RedBoot config partition.
+
+  [ maximilian attems ]
+  * Add netpoll leak fix.
+  * Add upstream forcedeth swsusp support.
+  * r8169: PCI ID for Corega Gigabit network card.
+  * r8169: the MMIO region of the 8167 stands behin BAR#1.
+  * r8169: Add upstream fix for infinite loop during hotplug.
+  * Bump build-dependency on kernel-package to 10.063.
+  * r8169: pull revert mac address change support.
+  * bcm43xx: Add full netdev watchout timeout patch. (closes: 392065)
+    Thanks Sjoerd Simons <sjoerd@spring.luon.net> for the testing.
+  * Add stable release 2.6.18.2:
+    - Remove not yet released, revert the included patches.
+    - Keep aboves bcm43xx fix, it's more complete.
+    - Watchdog: sc1200wdt - fix missing pnp_unregister_driver()
+    - fix missing ifdefs in syscall classes hookup for generic targets
+    - JMB 368 PATA detection
+    - usbfs: private mutex for open, release, and remove
+    - sound/pci/au88x0/au88x0.c: ioremap balanced with iounmap
+    - x86-64: Fix C3 timer test
+    - Reintroduce NODES_SPAN_OTHER_NODES for powerpc
+    - ALSA: emu10k1: Fix outl() in snd_emu10k1_resume_regs()
+    - IB/mthca: Use mmiowb after doorbell ring
+    - SCSI: DAC960: PCI id table fixup
+    - ALSA: snd_rtctimer: handle RTC interrupts with a tasklet
+    - JFS: pageno needs to be long
+    - SPARC64: Fix central/FHC bus handling on Ex000 systems.
+    - SPARC64: Fix memory corruption in pci_4u_free_consistent().
+    - SPARC64: Fix PCI memory space root resource on Hummingbird.
+      (closes: #392078)
+    - Fix uninitialised spinlock in via-pmu-backlight code.
+    - SCSI: aic7xxx: pause sequencer before touching SBLKCTL
+    - IPoIB: Rejoin all multicast groups after a port event
+    - ALSA: Dereference after free in snd_hwdep_release()
+    - rtc-max6902: month conversion fix
+    - NET: Fix skb_segment() handling of fully linear SKBs
+    - SCTP: Always linearise packet on input
+    - SCSI: aic7xxx: avoid checking SBLKCTL register for certain cards
+    - IPV6: fix lockup via /proc/net/ip6_flowlabel [CVE-2006-5619]
+    - fix Intel RNG detection
+    - ISDN: check for userspace copy faults
+    - ISDN: fix drivers, by handling errors thrown by ->readstat()
+    - splice: fix pipe_to_file() ->prepare_write() error path
+    - ALSA: Fix bug in snd-usb-usx2y's usX2Y_pcms_lock_check()
+    - ALSA: Repair snd-usb-usx2y for usb 2.6.18
+    - PCI: Remove quirk_via_abnormal_poweroff
+    - Bluetooth: Check if DLC is still attached to the TTY
+    - vmscan: Fix temp_priority race
+    - Use min of two prio settings in calculating distress for reclaim
+    - __div64_32 for 31 bit. Fixes funny clock speed on hercules emulator.
+      (closes: 395247)
+    - DVB: fix dvb_pll_attach for mt352/zl10353 in cx88-dvb, and nxt200x
+    - fuse: fix hang on SMP
+    - md: Fix bug where spares don't always get rebuilt properly when they become live.
+    - md: Fix calculation of ->degraded for multipath and raid10
+    - knfsd: Fix race that can disable NFS server.
+    - md: check bio address after mapping through partitions.
+    - fill_tgid: fix task_struct leak and possible oops
+    - uml: fix processor selection to exclude unsupported processors and features
+    - uml: remove warnings added by previous -stable patch
+    - Fix sfuzz hanging on 2.6.18
+    - SERIAL: Fix resume handling bug
+    - SERIAL: Fix oops when removing suspended serial port
+    - sky2: MSI test race and message
+    - sky2: pause parameter adjustment
+    - sky2: turn off PHY IRQ on shutdown
+    - sky2: accept multicast pause frames
+    - sky2: GMAC pause frame
+    - sky2: 88E803X transmit lockup (2.6.18)
+    - tcp: cubic scaling error
+    - mm: fix a race condition under SMC + COW
+    - ALSA: powermac - Fix Oops when conflicting with aoa driver
+    - ALSA: Fix re-use of va_list
+    - posix-cpu-timers: prevent signal delivery starvation
+    - NFS: nfs_lookup - don't hash dentry when optimising away the lookup
+    - uml: make Uml compile on FC6 kernel headers
+    - Fix potential interrupts during alternative patching
+  * Backport atkbd - supress "too many keys" error message.
+  * [s390] Revert temporarly 2.6.18.1 "S390: user readable uninitialised
+    kernel memory (CVE-2006-5174)" fix as it causes ftfbs
+
+  [ Sven Luther ]
+  * [powerpc] Added exception alignement patch from Benjamin Herrenschmidt.
+
+  [ Frederik Schüler ]
+  * Bump ABI to 2.
+  * Update vserver patch to 2.0.2.2-rc4.
+
+  [ Thiemo Seufer ]
+  * Add patches from linux-mips.org's 2.6.18-stable branch:
+    - bugfix/copy-user-highpage.patch, needed for cache alias handling
+      on mips/mipsel/hppa.
+    - bugfix/mips/syscall-wiring.patch, fixes TLS register access, and
+      n32 rt_sigqueueinfo.
+    - bugfix/mips/sb1-flush-cache-data-page.patch, missing cache flush
+      on SB-1.
+    - bugfix/mips/trylock.patch, fix trylock implementation for R1x000
+      and R3xxx.
+    - bugfix/mips/smp-cpu-bringup.patch, correct initialization of
+      non-contiguous CPU topology.
+    - bugfix/mips/header-exports.patch, clean up userland exports of
+      kernel headers.
+    - bugfix/mips/sb1-interrupt-handler.patch, fix broken interrupt
+      routing on SB-1.
+    - bugfix/mips/cache-alias.patch, fixes #387498 for mips/mipsel.
+    - bugfix/mips/ip22-zilog-console.patch, fix long delays seen with
+      SGI ip22 serial console.
+    - bugfix/mips/signal-handling.patch, fixes a signal handling race
+      condition shown with gdb.
+    - bugfix/mips/sb1-duart-tts.patch, replaces mips-sb1-duart-tts.patch,
+      use standard Linux names for SB-1 consoles.
+    - bugfix/mips/wait-race.patch, correct behaviour of the idle loop.
+    - bugfix/mips/sgi-ioc3.patch, checksumming fix for IOC3 network
+      driver.
+    - features/mips/qemu-kernel.patch, support for the mips/mipsel
+      machine emulated by Qemu.
+    - features/mips/backtrace.patch, reimplementation of stack analysis
+      and backtrace printing, useful for in-kernel debugging.
+    - bugfix/mips/dec-scsi.patch, replaces mips-dec-scsi.patch, fixes DSP
+      SCSI driver for DECstations.
+    - bugfix/mips/dec-serial.patch, replaces mips-dec-serial.patch, fix
+      serial console handling on DECstations.
+
+ -- Frederik Schüler <fs@debian.org>  Sat,  4 Nov 2006 18:45:02 +0100
+
+linux-2.6 (2.6.18-3) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Fix home of patch apply script.
+  * Unify CPUSET option. (closes: #391931)
+  * Support xen version 3.0.3-1.
+  * Add AHCI suspend support.
+  * Add patch to support bindmount without nodev on vserver.
+  * Update fedora xen patch to changeset 36252.
+
+  [ Steve Langasek ]
+  * [alpha] restore alpha-prctl.patch, which keeps disappearing every time
+    there's a kernel upgrade :/
+
+  [ Frederik Schüler ]
+  * Activate CONFIG_NET_CLS_* globaly. (Closes: #389918)
+  * Make CONFIG_EFI_VARS modular on i386. (Closes: #381951)
+  * Activate CONFIG_SCSI_ARCMSR on amd64, powerpc, sparc too.
+  * [vserver] Activate HARDCPU and HARDCPU_IDLE.
+  * [vserver] Upgrade to vs2.0.2.2-rc2.
+
+  [ maximilian attems ]
+  * [mipsel] Disable CONFIG_SECURITY_SECLVL on DECstations too.
+  * Add stable release 2.6.18.1:
+   - add utsrelease.h to the dontdiff file
+   - V4L: copy-paste bug in videodev.c
+   - block layer: elv_iosched_show should get elv_list_lock
+   - NETFILTER: NAT: fix NOTRACK checksum handling
+   - bcm43xx: fix regressions in 2.6.18 (Closes: #392065)
+   - x86-64: Calgary IOMMU: Fix off by one when calculating register space
+     location
+   - ide-generic: jmicron fix
+   - scx200_hrt: fix precedence bug manifesting as 27x clock in 1 MHz mode
+   - invalidate_inode_pages2(): ignore page refcounts
+   - rtc driver rtc-pcf8563 century bit inversed
+   - fbdev: correct buffer size limit in fbmem_read_proc()
+   - mm: bug in set_page_dirty_buffers
+   - TCP: Fix and simplify microsecond rtt sampling
+   - MD: Fix problem where hot-added drives are not resynced.
+   - IPV6: Disable SG for GSO unless we have checksum
+   - PKT_SCHED: cls_basic: Use unsigned int when generating handle
+   - sata_mv: fix oops
+   - [SPARC64]: Kill bogus check from bootmem_init().
+   - IPV6: bh_lock_sock_nested on tcp_v6_rcv
+   - [CPUFREQ] Fix some more CPU hotplug locking.
+   - SPARC64: Fix serious bug in sched_clock() on sparc64
+   - Fix VIDIOC_ENUMSTD bug
+   - load_module: no BUG if module_subsys uninitialized
+   - i386: fix flat mode numa on a real numa system
+   - cpu to node relationship fixup: map cpu to node
+   - cpu to node relationship fixup: acpi_map_cpu2node
+   - backlight: fix oops in __mutex_lock_slowpath during head
+     /sys/class/graphics/fb0/*
+   - do not free non slab allocated per_cpu_pageset
+   - rtc: lockdep fix/workaround
+   - powerpc: Fix ohare IDE irq workaround on old powermacs
+   - sysfs: remove duplicated dput in sysfs_update_file
+   - powerpc: fix building gdb against asm/ptrace.h
+   - Remove offsetof() from user-visible <linux/stddef.h>
+   - Clean up exported headers on CRIS
+   - Fix v850 exported headers
+   - Don't advertise (or allow) headers_{install,check} where inappropriate.
+   - Remove UML header export
+   - Remove ARM26 header export.
+   - Fix H8300 exported headers.
+   - Fix m68knommu exported headers
+   - Fix exported headers for SPARC, SPARC64
+   - Fix 'make headers_check' on m32r
+   - Fix 'make headers_check' on sh64
+   - Fix 'make headers_check' on sh
+   - Fix ARM 'make headers_check'
+   - One line per header in Kbuild files to reduce conflicts
+   - sky2 network driver device ids
+   - sky2: tx pause bug fix
+   - netdrvr: lp486e: fix typo
+   - mv643xx_eth: fix obvious typo, which caused build breakage
+   - zone_reclaim: dynamic slab reclaim
+   - Fix longstanding load balancing bug in the scheduler
+   - jbd: fix commit of ordered data buffers
+   - ALSA: Fix initiailization of user-space controls
+   - USB: Allow compile in g_ether, fix typo
+   - IB/mthca: Fix lid used for sending traps
+   - S390: user readable uninitialised kernel memory (CVE-2006-5174)
+   - zd1211rw: ZD1211B ASIC/FWT, not jointly decoder
+   - V4L: pvrusb2: Limit hor res for 24xxx devices
+   - V4L: pvrusb2: Suppress compiler warning
+   - V4L: pvrusb2: improve 24XXX config option description
+   - V4L: pvrusb2: Solve mutex deadlock
+   - DVB: cx24123: fix PLL divisor setup
+   - V4L: Fix msp343xG handling regression
+   - UML: Fix UML build failure
+   - uml: use DEFCONFIG_LIST to avoid reading host's config
+   - uml: allow using again x86/x86_64 crypto code
+   - NET_SCHED: Fix fallout from dev->qdisc RCU change
+  * Add backported git patch remving BSD secure level - request by the
+    Debian Security Team. (closes: 389282)
+  * [powerpc] Add DAC960-ipr PCI id table fixup.
+  * [powerpc] Fix uninitialised spinlock in via-pmu-backlight code.
+  * Fix serial_cs resume handling.
+  * Fix oops when removing suspended serial port.
+  * Check if DLC is still attached to the TTY.
+  * Add fedora backport of i965 DRM support.
+
+  [ Martin Michlmayr ]
+  * [mips] Apply some patches from linux-mips' linux-2.6.18-stable GIT tree:
+    - The o32 fstatat syscall behaves differently on 32 and 64 bit kernels
+    - fstatat syscall names
+    - BCM1480: Mask pending interrupts against c0_status.im.
+    - Cobalt: Time runs too quickly
+    - Show actual CPU information in /proc/cpuinfo
+    - Workaround for bug in gcc -EB / -EL options
+    - Do not use -msym32 option for modules
+    - Fix O32 personality(2) call with 0xffffffff argument
+    - Use compat_sys_mount
+
+  [ dann frazier ]
+  * [ia64]: Fix booting on HP cell systems, thanks to Troy Heber
+    - Enable CONFIG_HUGETLBFS
+    - bugfix/ia64/sal-flush-fix.patch: delay sal cache flush
+  * bugfix/sky2-receive-FIFO-fix.patch: fix sky2 hangs on some chips
+    Thanks to Stephen Hemminger for the patch. (Closes: #391382)
+  * features/all/drivers/cciss-support-for-gt-2TB-volumes.patch:
+    Add support for > 2TB volumes
+  * bugfix/sym2-dont-claim-raid-devs.patch: Prevent cpqarray/sym2 conflict
+    by telling sym2 not to claim raid devices. (Closes: #391384)
+
+  [ Sven Luther ]
+  * [powerpc] Added AMD74xx driver module to the powerpc64 flavour
+    (Closes: #391861).
+
+  [ Kyle McMartin ]
+  * [hppa] Force CROSS_COMPILE=hppa64-linux-gnu- (closes: #389296)
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 21 Oct 2006 15:59:43 +0200
+
+linux-2.6 (2.6.18-2) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * hppa: Fix compiler dependencies. (closes: #389296)
+  * Make cfq the default io scheduler.
+  * Add arcmsr (Areca) driver.
+  * powerpc/prep: Fix compatibility asm symlink.
+  * m68k: Disable initramfs support.
+
+  [ Kyle McMartin ]
+  * hppa: Add parisc patchset.
+
+  [ Norbert Tretkowski ]
+  * [alpha] Workaround undefined symbols by setting CONFIG_SCSI=y for smp flavour.
+    (closes: #369517)
+
+  [ Christian T. Steiges ]
+  * m68k: Update patches for 2.6.18.
+  * m68k: Re-Add m68k-as and m68k-macro patch which allow building with current binutils.
+  * m68k: disable CONFIG_AUDIT for m68k.
+  * m68k/mac: add m68k-no-backlight and m68k-fbcon patch.
+  * m68k/mac: enable SONIC, disable all ADB but CUDA.
+
+  [ Jurij Smakov ]
+  * Add bugfix/proc-fb-reading.patch to fix the inconsistent behaviour
+    of /proc/fb. (Closes: #388815)
+  * sparc: Enable vserver flavour for sparc64. (Closes: #386656)
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 29 Sep 2006 14:12:19 +0200
+
+linux-kbuild-2.6 (2.6.18-1) unstable; urgency=low
+
+  * New upstream version.
+  * Use included headers. (closes: #382286, #384211)
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 25 Sep 2006 21:45:50 +0200
+
+linux-2.6 (2.6.18-1) unstable; urgency=low
+
+  The unpruned release
+
+  [ Martin Michlmayr ]
+  * Bump build-dependency on kernel-package to 10.054.
+  * arm/iop32x: Build ext2/3 as modules.
+  * arm/iop32x: Disable CONFIG_EMBEDDED.
+  * mipsel/r5k-cobalt: Enable ISDN.
+  * arm/footbridge: Enable the CIFS module (closes: #274808).
+  * arm/nslu2: Drop flavour since this machine is supported by arm/ixp4xx.
+  * arm: Make get_unaligned() work with const pointers and GCC 4.1.
+  * mipsel/r5k-cobalt: Enable CONFIG_BONDING as a module.
+  * arm/iop32x: Likewise.
+  * arm/ixp4xx: Likewise.
+  * arm: Disable CONFIG_AUDIT for now since it's broken.
+
+  [ Sven Luther ]
+  * [powerpc] Enabled the -prep flavour. (Closes: #359025)
+  * [powerpc] The sisfb framebuffer device is now builtin.
+  * [powerpc] Updated the powerpc serial patch. This fixes the XServe serial
+    port, but at the cost powermac pcmcia serial cards support.
+    Thanks go to Mark Hymers for providing the patch.
+    (Closes: #364637, #375194)
+  * [powerpc] Added patch to fix oldworld/quik booting.
+    Thanks fo to Christian Aichinger for investigating to Benjamin
+    Herrenschmidt for providing the patch. (Closes: #366620, #375035).
+  * [powerpc] Fixes hvc_console caused suspsend-to-disk breakage. Thanks to
+    Andrew Morton for providing the patch. (Closes: #387178)
+  * [powerpc] Disabled mv643xx_eth on powerpc64 flavours, as there never was a
+    Marvell Discovery northbrige for 64bit powerpc cpus.
+
+  [ Frederik Schüler ]
+  * Remove obsolete options from amd64 and i386 configs.
+  * Deactivate EVBUG.
+  * Make PARPORT options global.
+  * [i386] Add class definition for 486 flavour.
+
+  [ maximilian attems ]
+  * Enable CONFIG_PRINTER=m for all powerpc flavours.
+  * Enable the new alsa CONFIG_SND_AOA framework for powerpc.
+  * Add the merged advansys pci table patch.
+
+  [ Bastian Blank ]
+  * hppa: Use gcc-4.1.
+  * Only provide 16 legacy ptys.
+
+  [ Norbert Tretkowski ]
+  * [alpha] Updated configs.
+  * [alpha] Disabled CONFIG_AUDIT, broken.
+  * [alpha] Added vserver flavour.
+
+ -- Bastian Blank <waldi@debian.org>  Sun, 24 Sep 2006 15:55:37 +0200
+
+linux-2.6 (2.6.17-9) unstable; urgency=medium
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.0.2.
+    - Fix possible priviledge escalation in remount code. (CVE-2006-4243)
+
+  [ Frederik Schüler ]
+  * Add stable release 2.5.17.12:
+    - sky2: version 1.6.1
+    - sky2: fix fiber support
+    - sky2: MSI test timing
+    - sky2: use dev_alloc_skb for receive buffers
+    - sky2: clear status IRQ after empty
+    - sky2: accept flow control
+    - dm: Fix deadlock under high i/o load in raid1 setup.
+    - Remove redundant up() in stop_machine()
+    - Missing PCI id update for VIA IDE
+    - PKTGEN: Fix oops when used with balance-tlb bonding
+    - PKTGEN: Make sure skb->{nh,h} are initialized in fill_packet_ipv6() too.
+    - Silent data corruption caused by XPC
+    - uhci-hcd: fix list access bug
+    - binfmt_elf: fix checks for bad address
+    - [s390] bug in futex unqueue_me
+    - fcntl(F_SETSIG) fix
+    - IPV6 OOPS'er triggerable by any user
+    - SCTP: Fix sctp_primitive_ABORT() call in sctp_close().
+    - SPARC64: Fix X server crashes on sparc64
+    - TG3: Disable TSO by default
+    - dm: mirror sector offset fix
+    - dm: fix block device initialisation
+    - dm: add module ref counting
+    - dm: fix mapped device ref counting
+    - dm: add DMF_FREEING
+    - dm: change minor_lock to spinlock
+    - dm: move idr_pre_get
+    - dm: fix idr minor allocation
+    - dm snapshot: unify chunk_size
+    - Have ext2 reject file handles with bad inode numbers early.
+    - Allow per-route window scale limiting
+    - bridge-netfilter: don't overwrite memory outside of skb
+    - fix compilation error on IA64
+    - Fix output framentation of paged-skbs
+    - spectrum_cs: Fix firmware uploading errors
+    - TEXTSEARCH: Fix Boyer Moore initialization bug
+  * Add stable release 2.6.17.13:
+    - lib: add idr_replace
+    - pci_ids.h: add some VIA IDE identifiers
+  * Remove patches merged upstream:
+    - s390-kernel-futex-barrier.patch
+  * Unpatch ia64-mman.h-fix.patch
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 13 Sep 2006 14:54:14 +0200
+
+linux-2.6 (2.6.17-8) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * arm/ixp4xx: Enable CONFIG_W1.
+
+  [ dann frazier ]
+  * sound-pci-hda-mac-mini-quirks.diff, sound-pci-hda-intel-d965.diff
+    sound-pci-hda-mac-mini-intel945.diff:
+    Updates to patch_sigmatel.c to add x86 mac-mini sound support
+    Thanks to Matt Kraai. (closes: #384972)
+
+  [ Kyle McMartin ]
+  * hppa: Re-enable pa8800 fixing patches from James Bottomley.
+    Pulled fresh from parisc-linux git tree.
+  * ia64: Pull in compile-failure fix from Christian Cotte-Barrot.
+    Pulled from linux-ia64 mailing list. Fix is correct.
+  * hppa/alpha/mips: Fix compile-failure due to missing arch_mmap_check. Patch sent
+    upstream to stable@kernel.org.
+
+  [ dann frazier ]
+  * sym2: only claim "Storage" class devices - the cpqarray driver should be
+    used for 5c1510 devices in RAID mode. (closes: #380272)
+
+  [ Bastian Blank ]
+  * Backport change to allow all hypercalls for xen.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 31 Aug 2006 12:12:51 +0200
+
+linux-2.6 (2.6.17-7) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * arm/iop32x: Enable CONFIG_BLK_DEV_OFFBOARD.
+  * arm/iop32x: Unset CONFIG_BLK_DEV_AMD74XX since it fails on ARM
+    with "Unknown symbol pci_get_legacy_ide_irq".
+  * arm/iop32x: Enable a number of MD and DM modules.
+  * arm/iop32x: Enable some more USB network modules.
+  * mipsel/r5k-cobalt: Increase 8250 NR_UARTS and RUNTIME_UARTS to 4.
+  * mipsel/r5k-cobalt: Fix MAC detection problem on Qube 2700.
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.0.2-rc29.
+  * Add stable release 2.6.17.10:
+    - Fix possible UDF deadlock and memory corruption (CVE-2006-4145)
+    - elv_unregister: fix possible crash on module unload
+    - Fix sctp privilege elevation (CVE-2006-3745)
+
+  [ maximilian attems ]
+  * Add RAM range to longclass for -bigmem. (closes: 382799)
+  * Add stable release 2.6.17.9:
+    - powerpc: Clear HID0 attention enable on PPC970 at boot time
+    (CVE-2006-4093)
+  * Add stable release 2.6.17.11:
+    - Fix ipv4 routing locking bug
+    - disable debugging version of write_lock()
+    - PCI: fix ICH6 quirks
+    - 1394: fix for recently added firewire patch that breaks things on ppc
+    - Fix IFLA_ADDRESS handling
+    - Fix BeFS slab corruption
+    - Fix timer race in dst GC code
+    - Have ext3 reject file handles with bad inode numbers early
+    - Kill HASH_HIGHMEM from route cache hash sizing
+    - sys_getppid oopses on debug kernel
+    - IA64: local DoS with corrupted ELFs
+    - tpm: interrupt clear fix
+    - ulog: fix panic on SMP kernels
+    - dm: BUG/OOPS fix
+    - MD: Fix a potential NULL dereference in md/raid1
+    - ip_tables: fix table locking in ipt_do_table
+    - swsusp: Fix swap_type_of
+    - sky2: phy power problem on 88e805x
+    - ipx: header length validation needed
+
+  [ Frederik Schüler ]
+  * Activate CONFIG_R8169_VLAN on amd64. (closes: #383707)
+  * Activate EFI boot support on i386. (closes: #381951)
+
+  [ dann frazier ]
+  * Include module.lds in headers package if it exists. (closes: #342246)
+  * Add Apple MacBook product IDs to usbhid and set
+    CONFIG_USB_HIDINPUT_POWERBOOK=y on i386 and amd64. (closes: #383620)
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 24 Aug 2006 15:54:51 +0000
+
+linux-2.6 (2.6.17-6) unstable; urgency=low
+
+  [ maximilian attems ]
+  * debian/arch/i386/defines: Activate 686-bigmem flavour for enterprise
+  usage.
+  * Add ubuntu pci table patch for scsi drivers advansys and fdomain.
+
+  [ Martin Michlmayr ]
+  * arm/armeb: Use gcc-4.1.
+  * mips/mipsel: Use gcc-4.1.
+  * arm/ixp4xx: Update config based on the NSLU2 config.
+  * arm/s3c2410: Unset CONFIG_DEBUG_INFO.
+  * arm/iop32x: xscale: don't mis-report 80219 as an iop32x
+  * arm/iop32x: Add an MTD map for IOP3xx boards
+  * arm/iop32x: Add support for the Thecus N2100.
+  * arm/iop32x: Add support for the GLAN Tank.
+  * arm/iop32x: Add a flavour for IOP32x based machines.
+
+  [ Bastian Blank ]
+  * Shrink short descriptions.
+  * Make gcc-4.1 the default compiler.
+  * [powerpc]: Use gcc-4.1.
+  * Move latest and transitional packages to linux-latest-2.6.
+
+  [ Frederik Schüler ]
+  * [amd64] Add smp-alternatives backport.
+  * [amd64] Drop smp flavours.
+  * [amd64] Merge k8 and p4 flavours into a generic one, following upstreams
+    advice.
+  * Activate BSD_PROCESS_ACCT_V3.
+  * Add stable release 2.6.17.8:
+    - ALSA: Don't reject O_RDWR at opening PCM OSS
+    - Add stable branch to maintainers file
+    - tty serialize flush_to_ldisc
+    - S390: fix futex_atomic_cmpxchg_inatomic
+    - Fix budget-av compile failure
+    - cond_resched() fix
+    - e1000: add forgotten PCI ID for supported device
+    - ext3: avoid triggering ext3_error on bad NFS file handle
+    - ext3 -nobh option causes oops
+    - Fix race related problem when adding items to and svcrpc auth cache.
+    - ieee1394: sbp2: enable auto spin-up for Maxtor disks
+    - invalidate_bdev() speedup
+    - Sparc64 quad-float emulation fix
+    - VLAN state handling fix
+    - Update frag_list in pskb_trim
+    - UHCI: Fix handling of short last packet
+    - sky2: NAPI bug
+    - i2c: Fix 'ignore' module parameter handling in i2c-core
+    - scx200_acb: Fix the block transactions
+    - scx200_acb: Fix the state machine
+    - H.323 helper: fix possible NULL-ptr dereference
+    - Don't allow chmod() on the /proc/<pid>/ files
+    - PCI: fix issues with extended conf space when MMCONFIG disabled because of e820
+
+  [ Sven Luther ]
+  * [powerpc] Added console=hvsi0 too to CMDLINE to the powerpc64 flavour, for
+    non-virtualized IBM power machines serial console.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 11 Aug 2006 19:58:06 +0200
+
+linux-kbuild-2.6 (2.6.17-3) unstable; urgency=low
+
+  * Replace own modpost with original one.
+
+ -- Bastian Blank <waldi@debian.org>  Tue,  1 Aug 2006 11:01:18 +0200
+
+linux-2.6 (2.6.17-5) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * [arm/nslu2] Enable CONFIG_USB_EHCI_SPLIT_ISO.  Closes: #378554
+
+  [ maximilian attems ]
+  * Add stable release 2.6.17.7:
+    - BLOCK: Fix bounce limit address check
+    - v4l/dvb: Fix budget-av frontend detection
+    - v4l/dvb: Fix CI on old KNC1 DVBC cards
+    - v4l/dvb: Fix CI interface on PRO KNC1 cards
+    - v4l/dvb: Backport fix to artec USB DVB devices
+    - v4l/dvb: Backport the DISEQC regression fix to 2.6.17.x
+    - v4l/dvb: stradis: dont export MODULE_DEVICE_TABLE
+    - pnp: suppress request_irq() warning
+    - generic_file_buffered_write(): handle zero-length iovec segments
+    - serial 8250: sysrq deadlock fix
+    - Reduce ACPI verbosity on null handle condition
+    - ieee80211: TKIP requires CRC32
+    - Make powernow-k7 work on SMP kernels.
+    - via-velocity: the link is not correctly detected when the device starts
+    - Add missing UFO initialisations
+    - USB serial ftdi_sio: Prevent userspace DoS (CVE-2006-2936)
+    - cdrom: fix bad cgc.buflen assignment
+    - splice: fix problems with sys_tee()
+    - fix fdset leakage
+    - struct file leakage
+    - XFS: corruption fix
+    - v4l/dvb: Kconfig: fix description and dependencies for saa7115 module
+    - dvb-bt8xx: fix frontend detection for DViCO FusionHDTV DVB-T Lite rev 1.2
+    - IB/mthca: restore missing PCI registers after reset
+    - v4l/dvb: Backport the budget driver DISEQC instability fix
+    - Fix IPv4/DECnet routing rule dumping
+    - pdflush: handle resume wakeups
+    - x86_64: Fix modular pc speaker
+    - Fix powernow-k8 SMP kernel on UP hardware bug.
+    - ALSA: RME HDSP - fixed proc interface (missing {})
+    - ALSA: au88x0 - Fix 64bit address of MPU401 MMIO port
+    - ALSA: Fix a deadlock in snd-rtctimer
+    - ALSA: Fix missing array terminators in AD1988 codec support
+    - ALSA: Fix model for HP dc7600
+    - ALSA: Fix mute switch on VAIO laptops with STAC7661
+    - ALSA: fix the SND_FM801_TEA575X dependencies
+    - ALSA: Fix undefined (missing) references in ISA MIRO sound driver
+    - ALSA: Fix workaround for AD1988A rev2 codec
+    - ALSA: hda-intel - Fix race in remove
+    - Suppress irq handler mismatch messages in ALSA ISA drivers
+    - PKT_SCHED: Fix illegal memory dereferences when dumping actions
+    - PKT_SCHED: Return ENOENT if action module is unavailable
+    - PKT_SCHED: Fix error handling while dumping actions
+    - generic_file_buffered_write(): deadlock on vectored write
+    - ethtool: oops in ethtool_set_pauseparam()
+    - memory hotplug: solve config broken: undefined reference to `online_page'
+  * Add budget-av-compile-fix.patch stable compile fix.
+  * Enable in all configs setting SND_FM801_TEA575X SND_FM801_TEA575X_BOOL=y.
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 29 Jul 2006 13:30:06 +0200
+
+linux-2.6 (2.6.17-4) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.17.5:
+    - Fix nasty /proc vulnerability (CVE-2006-3626)
+  * Add stable release 2.6.17.6:
+    - Relax /proc fix a bit
+  * Set section of images to admin.
+
+  [ dann frazier ]
+  * [ia64] Drop the non-SMP flavours; they are not well maintained upstream.
+    Note that the non-SMP flavours have been identical to the SMP builds
+    since 2.6.13-1; this was to avoid having to drop then re-add these
+    flavours if upstream resolved the issue - but that never happened.
+    Note that this is a measurable performance penalty on non-SMP systems.
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 17 Jul 2006 11:08:41 +0200
+
+linux-2.6 (2.6.17-3) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Add stable release 2.6.17.2:
+    - ide-io: increase timeout value to allow for slave wakeup
+    - NTFS: Critical bug fix (affects MIPS and possibly others)
+    - Link error when futexes are disabled on 64bit architectures
+    - SCTP: Reset rtt_in_progress for the chunk when processing its sack.
+    - SPARC32: Fix iommu_flush_iotlb end address
+    - ETHTOOL: Fix UFO typo
+    - UML: fix uptime
+    - x86: compile fix for asm-i386/alternatives.h
+    - bcm43xx: init fix for possible Machine Check
+    - SCTP: Fix persistent slowdown in sctp when a gap ack consumes rx buffer.
+    - kbuild: bugfix with initramfs
+    - Input: return correct size when reading modalias attribute
+    - ohci1394: Fix broken suspend/resume in ohci1394
+    - idr: fix race in idr code
+    - USB: Whiteheat: fix firmware spurious errors
+    - libata: minor patch for ATA_DFLAG_PIO
+    - SCTP: Send only 1 window update SACK per message.
+    - PFKEYV2: Fix inconsistent typing in struct sadb_x_kmprivate.
+    - SCTP: Limit association max_retrans setting in setsockopt.
+    - SCTP: Reject sctp packets with broadcast addresses.
+    - IPV6: Sum real space for RTAs.
+    - IPV6 ADDRCONF: Fix default source address selection without
+      CONFIG_IPV6_PRIVACY
+    - IPV6: Fix source address selection.
+  * Add stable release 2.6.17.3:
+    - NETFILTER: SCTP conntrack: fix crash triggered by packet without chunks
+    [CVE-2006-2934]
+  * Deapply merged sparc32-iotlb.patch.
+  * Fix README.Debian: Correct svn location, remove old boot param bswap
+    reference, the asfs patch is in the Debian kernel. Remove reference to
+    AMD 768 erratum 10, it was solved in 2.6.12. Add wording corrections.
+  * Set CONFIG_SERIAL_8250_RN_UARTS=16 for all archs beside mips/m68k unless
+    explicitly set on a specific value. (closes: 377151)
+  * Add stable release 2.6.17.4:
+    - fix prctl privilege escalation and suid_dumpable (CVE-2006-2451)
+
+  [ Sven Luther ]
+  * Re-enabled fs-asfs patch.
+
+  [ Thiemo Seufer ]
+  * [mips,mipsel] Fix sb1 interrupt handlers.
+  * [mips,mipsel] Fix devfs-induced build failure in sb1250 serial driver.
+  * [mips] SGI ip22 RTC was broken, fixed thanks to Julien Blache.
+  * [mips] Fix SGI ip22 serial console, thanks to Julien Blache.
+
+  [ Martin Michlmayr ]
+  * [arm/nslu2] Enable HFS and some other filesystems.
+  * [arm/nslu2] Unset CONFIG_USB_STORAGE_DEBUG.  Closes: #377853.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 13 Jul 2006 13:14:53 +0200
+
+linux-kbuild-2.6 (2.6.17-2) unstable; urgency=low
+
+  * Fix uninitialied variable. (closes: #377656)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 11 Jul 2006 10:10:24 +0200
+
+linux-kbuild-2.6 (2.6.17-1) unstable; urgency=low
+
+  * Initial release. (closes: #368544)
+
+ -- Bastian Blank <waldi@debian.org>  Sat,  1 Jul 2006 19:10:07 +0200
+
+linux-2.6 (2.6.17-2) unstable; urgency=low
+
+  [ Jurij Smakov ]
+  * [sparc] Switch to gcc-4.1 as it produces a working kernel,
+    while gcc-4.0 does not. No ABI bump neccessary, because
+    2.6.17-1 sparc binaries never made it to the archive.
+  * [sparc32] Add sparc32-iotlb.patch to fix DMA errors on sparc32.
+
+  [ Sven Luther ]
+  * [powerpc] Added console=hvc0 default commandline option to powerpc64 flavour.
+  * [powerpc] Fixed mkvmlinuz support, which was missing from -1. (Closes: #375645)
+  * [powerpc] Added PowerBook HID support for last-gen PowerBook keyboards.
+    (Closes: #307327)
+
+  [ Martin Michlmayr ]
+  * [mipsel] Fix compilation error in dz serial driver.
+  * [mipsel] Update configs.
+  * [mipsel] Add a build fix for the Cobalt early console support.
+  * [arm/nslu2] Disable SE Linux support for now so the kernel fits into flash.
+
+  [ Christian T. Steigies ]
+  * [m68k] Update patches for 2.6.17.
+  * [m68k] Add m68k-as and m68k-macro patch which allow building with current binutils.
+  * [m68k] Disable all subarches but amiga and mac for official linux-images.
+
+  [ Kyle McMartin ]
+  * [hppa] Update patchset (2.6.17-pa6) from parisc-linux.org.
+    Which fixes relocation errors in modules with 64-bit kernels, and
+    a softlockup on non-SMP flavours with gettimeofday.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 29 Jun 2006 18:49:35 +0200
+
+linux-2.6 (2.6.17-1) unstable; urgency=low
+
+  [ Frederik Schüler ]
+  * New upstream release.
+  * [amd64] Use gcc 4.1.
+  * [amd64] Drop amd64-generic flavor. We will use amd64-k8 for the
+    installer.
+
+  [ Martin Michlmayr ]
+  * [mips] Update patches for 2.6.17.
+  * [arm] Update configs.
+  * [armeb] Update configs.
+
+  [ Thiemo Seufer ]
+  * [mips] Fix SWARM FPU detection.
+  * [mips] Update configurations.
+
+  [ Kyle McMartin ]
+  * [hppa] Set PDC_CHASSIS_WARN to y.
+  * [hppa] Update patchset (2.6.17-pa2) from parisc-linux.org.
+  * [hppa] Change NR_CPUS to 8 from 32 on both SMP flavours.
+  * [hppa] Set PARISC_PAGE_SIZE to 4K on all platforms.
+
+  [ Bastian Blank ]
+  * [s390] Use gcc 4.1.
+  * [i386] Enable REGPARM.
+  * [i386] Use gcc 4.1.
+  * [powerpc] Disable prep.
+
+  [ dann frazier ]
+  * [ia64] Update configs
+  * [ia64] Use gcc 4.1.
+
+  [ maximilian attems ]
+  * Add stable release 2.6.17.1:
+    - xt_sctp: fix endless loop caused by 0 chunk length (CVE-2006-3085)
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 22 Jun 2006 12:13:15 +0200
+
+linux-2.6 (2.6.16+2.6.17-rc3-0experimental.1) experimental; urgency=low
+
+  [ Frederik Schüler ]
+  * New upstream release candidate.
+  * Switch HZ from 1000 to 250, following upstreams default.
+  * Activate CONFIG_BCM43XX_DEBUG.
+
+  [ maximilian attems ]
+  * Disable broken and known unsecure LSM modules: CONFIG_SECURITY_SECLVL,
+    CONFIG_SECURITY_ROOTPLUG. Upstream plans to remove them for 2.6.18
+
+ -- Frederik Schüler <fs@debian.org>  Sun,  7 May 2006 17:06:29 +0200
+
+linux-2.6.16 (2.6.16-18) unstable; urgency=high
+
+  [ Sven Luther ]
+  * [powerpc] Added console=hvsi0 too to CMDLINE to the powerpc64 flavour,
+    for non-virtualized IBM power machines serial console.
+
+  [ dann frazier ]
+  * fs-ext3-bad-nfs-handle.patch: avoid triggering ext3_error on bad NFS
+    file handle (CVE-2006-3468)
+  * cdrom-bad-cgc.buflen-assign.patch: fix buffer overflow in dvd_read_bca
+  * usb-serial-ftdi_sio-dos.patch: fix userspace DoS in ftdi_sio driver
+
+  [ Bastian Blank ]
+  * Update xen patch to changeset 9762.
+
+ -- Frederik Schüler <fs@debian.org>  Fri, 18 Aug 2006 20:29:17 +0200
+
+linux-2.6.16 (2.6.16-17) unstable; urgency=high
+
+  [ Martin Michlmayr ]
+  * Add stable release 2.6.16.22:
+    - powernow-k8 crash workaround
+    - NTFS: Critical bug fix (affects MIPS and possibly others)
+    - JFS: Fix multiple errors in metapage_releasepage
+    - SPARC64: Fix D-cache corruption in mremap
+    - SPARC64: Respect gfp_t argument to dma_alloc_coherent().
+    - SPARC64: Fix missing fold at end of checksums.
+    - scsi_lib.c: properly count the number of pages in scsi_req_map_sg()
+    - I2O: Bugfixes to get I2O working again
+    - Missed error checking for intent's filp in open_namei().
+    - tmpfs: time granularity fix for [acm]time going backwards
+    - USB: Whiteheat: fix firmware spurious errors
+    - fs/namei.c: Call to file_permission() under a spinlock in do_lookup_path()
+  * Add stable release 2.6.16.23:
+    - revert PARPORT_SERIAL should depend on SERIAL_8250_PCI patch
+    - NETFILTER: SCTP conntrack: fix crash triggered by packet without
+      chunks (CVE-2006-2934)
+  * Add stable release 2.6.16.24:
+    - fix prctl privilege escalation and suid_dumpable (CVE-2006-2451)
+  * Add stable release 2.6.16.25:
+    - Fix nasty /proc vulnerability (CVE-2006-3626)
+  * Relax /proc fix a bit (Linus Torvalds)
+
+  * [arm/nslu2] Unset CONFIG_USB_STORAGE_DEBUG.  Closes: #377853.
+  * [mips] SGI ip22 RTC was broken, fixed thanks to Julien Blache.
+  * [mips] Fix SGI ip22 serial console, thanks to Julien Blache.
+
+  [ Bastian Blank ]
+  * Fix vserver patch.
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 15 Jul 2006 17:18:49 +0200
+
+linux-2.6.16 (2.6.16-16) unstable; urgency=low
+
+  [ Sven Luther ]
+  * [powerpc] Added console=hvc0 default commandline option to powerpc64 flavour.
+  * [powerpc] Now THERM_PM72 and all WINDFARMs are builtin, for better fan control.
+
+  [ Martin Michlmayr ]
+  * [arm/nslu2] Disable SE Linux support for now so the kernel fits into
+    flash.  Closes: #376926.
+
+  [ Bastian Blank ]
+  * [powerpc,powerpc-miboot] Enable OpenFirmware device tree support.
+    (closes: #376012)
+
+ -- Bastian Blank <waldi@debian.org>  Sat,  8 Jul 2006 17:57:57 +0200
+
+linux-2.6.16 (2.6.16-15) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Add stable release 2.6.16.18:
+    - NETFILTER: SNMP NAT: fix memory corruption (CVE-2006-2444)
+  * Add stable release 2.6.16.19:
+    - NETFILTER: Fix small information leak in SO_ORIGINAL_DST (CVE-2006-1343)
+  * Add stable release 2.6.16.20:
+    - x86_64: Don't do syscall exit tracing twice
+    - Altix: correct ioc4 port order
+    - Input: psmouse - fix new device detection logic
+    - PowerMac: force only suspend-to-disk to be valid
+    - the latest consensus libata resume fix
+    - Altix: correct ioc3 port order
+    - Cpuset: might sleep checking zones allowed fix
+    - ohci1394, sbp2: fix "scsi_add_device failed" with PL-3507 based devices
+    - sbp2: backport read_capacity workaround for iPod
+    - sbp2: fix check of return value of hpsb_allocate_and_register_addrspace
+    - x86_64: x86_64 add crashdump trigger points
+    - ipw2200: Filter unsupported channels out in ad-hoc mode
+  * Add stable release 2.6.16.21:
+    - check_process_timers: fix possible lockup
+    - run_posix_cpu_timers: remove a bogus BUG_ON() (CVE-2006-2445)
+    - xt_sctp: fix endless loop caused by 0 chunk length (CVE-2006-3085)
+    - powerpc: Fix machine check problem on 32-bit kernels (CVE-2006-2448)
+
+  [ Christian T. Steigies ]
+  * [m68k] Add mac via patch from Finn Thain.
+  * [m68k] Enable INPUT_EVDEV.
+
+  [ Martin Michlmayr ]
+  * [mips/b1-bcm91250a] Enable SMP.
+  * [mips] Add a compile fix for the Maxine fb.
+  * [mipsel] Add a patch that let's you enable serial console on DECstation.
+  * [mipsel] Add a patch to get SCSI working on DECstation.
+  * [mipsel] Handle memory-mapped RTC chips properly.
+  * [mipsel] Add configs for r3k-kn02 and r4k-kn04 DECstation.
+  * [arm] Allow RiscPC machines to boot an initrd (tagged list fix).
+  * [arm/nslu2] Enable many modules.
+  * [arm] Build loop support as a module.
+  * [arm] Use the generic netfilter configuration.
+  * [arm/footbridge] Enable sound.
+
+  [ Kyle McMartin ]
+  * [hppa] Pulled patch from cvs to fix build of kernel/ptrace.c which needs
+    {read,write}_can_lock.
+  * [hppa] Disable CONFIG_DETECT_SOFTLOCKUP to fix boot on pa8800 machines.
+
+  [ Sven Luther ]
+  * [powerpc,prep] Added a new ARCH=ppc PReP flavour, currently mostly a copy
+    of the -powerpc one.
+  * Upgraded mkvmlinuz dependency to mkvmlinuz 21.
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.0.2-rc21.
+  * Bump build-dependency on kernel-package to 10.049.
+
+  [ Jurij Smakov ]
+  * Add dcache-memory-corruption.patch to fix the mremap(), occasionally
+    triggered on sparc in the form of dpkg database corruption. Affects
+    sparc64, mips and generic includes. Thanks to David Miller, original
+    patch is included in 2.6.17.
+    Ref: http://marc.theaimsgroup.com/?l=linux-sparc&m=114920963824047&w=2
+  * Add sparc32-iotlb.patch to fix the DMA errors encountered with latest
+    kernels on sparc32, in particularly HyperSparcs. Thanks to Bob Breuer.
+    Ref: http://marc.theaimsgroup.com/?l=linux-sparc&m=115077649707675&w=2
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 21 Jun 2006 14:09:11 +0200
+
+linux-2.6 (2.6.16-14) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.16.16:
+    - fs/locks.c: Fix lease_init (CVE-2006-1860)
+  * Make i386 xen images recommend libc6-xen.
+  * Update vserver patch to 2.0.2-rc20.
+  * Update xen patch to changeset 9687.
+
+  [ Christian T. Steigies ]
+  * [m68k] Add generic m68k ide fix.
+  * [m68k] Add cross-compile instructions.
+  * [m68k] Enable INPUT_EVDEV for yaird.
+  * [m68k] sun3 general compile and scsi fixes, enable sun3 SCSI again.
+
+  [ dann frazier ]
+  * cs4281 - Fix the check of timeout in probe to deal with variable HZ.
+    (closes: #361197)
+
+  [ Norbert Tretkowski ]
+  * [alpha] Readded patch to support prctl syscall, got lost when upgrading
+    to 2.6.16.
+
+  [ Frederik Schüler ]
+  * Add stable release 2.6.16.17:
+    - SCTP: Validate the parameter length in HB-ACK chunk (CVE-2006-1857)
+    - SCTP: Respect the real chunk length when walking parameters
+      (CVE-2006-1858)
+    - ptrace_attach: fix possible deadlock schenario with irqs
+    - Fix ptrace_attach()/ptrace_traceme()/de_thread() race
+    - page migration: Fix fallback behavior for dirty pages
+    - add migratepage address space op to shmem
+    - Remove cond_resched in gather_stats()
+    - VIA quirk fixup, additional PCI IDs
+    - PCI quirk: VIA IRQ fixup should only run for VIA southbridges
+    - Fix udev device creation
+    - limit request_fn recursion
+    - PCI: correctly allocate return buffers for osc calls
+    - selinux: check for failed kmalloc in security_sid_to_context()
+    - TG3: ethtool always report port is TP.
+    - Netfilter: do_add_counters race, possible oops or info leak
+      (CVE-2006-0039)
+    - scx200_acb: Fix resource name use after free
+    - smbus unhiding kills thermal management
+    - fs/compat.c: fix 'if (a |= b )' typo
+    - smbfs: Fix slab corruption in samba error path
+    - fs/locks.c: Fix sys_flock() race
+    - USB: ub oops in block_uevent
+    - via-rhine: zero pad short packets on Rhine I ethernet cards
+    - md: Avoid oops when attempting to fix read errors on raid10
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 22 May 2006 14:56:11 +0200
+
+linux-2.6 (2.6.16-13) unstable; urgency=low
+
+  [ Frederik Schüler ]
+  * Add stable release 2.6.16.14:
+    - smbfs chroot issue (CVE-2006-1864)
+
+  [ Bastian Blank ]
+  * Don't make headers packages depend on images.
+  * Bump abiname to 2. (closes: #366291)
+  * Update vserver patch to 2.0.2-rc19.
+  * Update xen patch to changeset 9668.
+  * Remove abi fixes.
+  * Add stable release 2.6.16.15:
+    - SCTP: Allow spillover of receive buffer to avoid deadlock. (CVE-2006-2275)
+    - SCTP: Fix panic's when receiving fragmented SCTP control chunks. (CVE-2006-2272)
+    - SCTP: Fix state table entries for chunks received in CLOSED state. (CVE-2006-2271)
+    - SCTP: Prevent possible infinite recursion with multiple bundled DATA. (CVE-2006-2274)
+  * Switch HZ from 1000 to 250.
+
+  [ Christian T. Steigies ]
+  * [m68k] Add patches that allow building images for atari
+  * [m68k] Enable atyfb driver for atari
+
+ -- Bastian Blank <waldi@debian.org>  Wed, 10 May 2006 18:58:44 +0200
+
+linux-2.6 (2.6.16-12) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.16.12:
+    - dm snapshot: fix kcopyd destructor
+    - x86_64: Pass -32 to the assembler when compiling the 32bit vsyscall pages
+    - for_each_possible_cpu
+    - Simplify proc/devices and fix early termination regression
+    - sonypi: correct detection of new ICH7-based laptops
+    - MIPS: Fix tx49_blast_icache32_page_indexed.
+    - NET: e1000: Update truesize with the length of the packet for packet split
+    - i386: fix broken FP exception handling
+    - tipar oops fix
+    - USB: fix array overrun in drivers/usb/serial/option.c
+    - Altix snsc: duplicate kobject fix
+    - Alpha: strncpy() fix
+    - LSM: add missing hook to do_compat_readv_writev()
+    - Fix reiserfs deadlock
+    - make vm86 call audit_syscall_exit
+    - fix saa7129 support in saa7127 module for pvr350 tv out
+    - dm flush queue EINTR
+    - get_dvb_firmware: download nxt2002 firmware from new driver location
+    - cxusb-bluebird: bug-fix: power down corrupts frontend
+    - x86_64: Fix a race in the free_iommu path.
+    - MIPS: Use "R" constraint for cache_op.
+    - MIPS: R2 build fixes for gcc < 3.4.
+    - cs5535_gpio.c: call cdev_del() during module_exit to unmap kobject references and other cleanups
+    - MIPS: Fix branch emulation for floating-point exceptions.
+    - x86/PAE: Fix pte_clear for the >4GB RAM case
+  * Add stable release 2.6.16.13:
+    - NETFILTER: SCTP conntrack: fix infinite loop (CVE-2006-1527)
+  * Remove merged patches.
+  * Rediff xen patch.
+  * Bump build-dependency on kernel-package to 10.047.
+
+  [ Martin Michlmayr ]
+  * [arm] Enable cramfs for ixp4xx and rpc.
+
+ -- Bastian Blank <waldi@debian.org>  Thu,  4 May 2006 11:37:26 +0200
+
+linux-2.6 (2.6.16-11) unstable; urgency=low
+
+  * Update vserver patch to 2.0.2-rc18.
+    - Limit ccaps to root inside a guest (CVE-2006-2110)
+  * Conflict with known broken grub versions. (closes: #361308)
+  * Enable s390 vserver image.
+  * Enable xen and xen-vserver images.
+  * Use localversion for kernel-package images. (closes: #365505)
+
+ -- Bastian Blank <waldi@debian.org>  Mon,  1 May 2006 16:38:45 +0200
+
+linux-2.6 (2.6.16-10) unstable; urgency=low
+
+  [ Norbert Tretkowski ]
+  * [alpha] Added backport of for_each_possible_cpu() to fix alpha build.
+    (closes: #364206)
+  * Add stable release 2.6.16.10:
+    - IPC: access to unmapped vmalloc area in grow_ary()
+    - Add more prevent_tail_call()
+    - alim15x3: ULI M-1573 south Bridge support
+    - apm: fix Armada laptops again
+    - fbdev: Fix return error of fb_write
+    - Fix file lookup without ref
+    - m41t00: fix bitmasks when writing to chip
+    - Open IPMI BT overflow
+    - x86: be careful about tailcall breakage for sys_open[at] too
+    - x86: don't allow tail-calls in sys_ftruncate[64]()
+    - IPV6: XFRM: Fix decoding session with preceding extension header(s).
+    - IPV6: XFRM: Don't use old copy of pointer after pskb_may_pull().
+    - IPV6: Ensure to have hop-by-hop options in our header of &sk_buff.
+    - selinux: Fix MLS compatibility off-by-one bug
+    - PPC: fix oops in alsa powermac driver
+    - MTD_NAND_SHARPSL and MTD_NAND_NANDSIM should be tristate's
+    - i2c-i801: Fix resume when PEC is used
+    - Fix hotplug race during device registration
+    - Fix truesize underflow
+    - efficeon-agp: Add missing memory mask
+    - 3ware 9000 disable local irqs during kmap_atomic
+    - 3ware: kmap_atomic() fix
+
+  [ maximilian attems ]
+  * Add stable release 2.6.16.11:
+    -  Don't allow a backslash in a path component (CVE-2006-1863)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 25 Apr 2006 13:56:19 +0200
+
+linux-2.6 (2.6.16-9) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Add stable release 2.6.16.8:
+    - ip_route_input panic fix (CVE-2006-1525)
+  * Add stable release 2.6.16.9:
+    - i386/x86-64: Fix x87 information leak between processes (CVE-2006-1056)
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.0.2-rc17.
+
+ -- Bastian Blank <waldi@debian.org>  Thu, 20 Apr 2006 15:37:28 +0200
+
+linux-2.6 (2.6.16-8) unstable; urgency=low
+
+  * Fix ABI-breakage introduced in -7. (closes: #363032)
+  * Add stable release 2.6.16.6:
+    - ext3: Fix missed mutex unlock
+    - RLIMIT_CPU: fix handling of a zero limit
+    - alpha: SMP boot fixes
+    - m32r: security fix of {get, put}_user macros
+    - m32r: Fix cpu_possible_map and cpu_present_map initialization for SMP kernel
+    - shmat: stop mprotect from giving write permission to a readonly attachment (CVE-2006-1524)
+    - powerpc: fix incorrect SA_ONSTACK behaviour for 64-bit processes
+    - MPBL0010 driver sysfs permissions wide open
+    - cciss: bug fix for crash when running hpacucli
+    - fuse: fix oops in fuse_send_readpages()
+    - Fix utime(2) in the case that no times parameter was passed in.
+    - Fix buddy list race that could lead to page lru list corruptions
+    - NETFILTER: Fix fragmentation issues with bridge netfilter
+    - USB: remove __init from usb_console_setup
+    - Fix suspend with traced tasks
+    - isd200: limit to BLK_DEV_IDE
+    - edac_752x needs CONFIG_HOTPLUG
+    - fix non-leader exec under ptrace
+    - sky2: bad memory reference on dual port cards
+    - atm: clip causes unregister hang
+    - powerpc: iSeries needs slb_initialize to be called
+    - Fix block device symlink name
+    - Incorrect signature sent on SMB Read
+  * Add stable release 2.6.16.7:
+    - fix MADV_REMOVE vulnerability (CVE-2006-1524 for real this time)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 18 Apr 2006 16:22:31 +0200
+
+linux-2.6 (2.6.16-7) unstable; urgency=low
+
+  [ Frederik Schüler ]
+  * Add stable release 2.6.16.3:
+    - Keys: Fix oops when adding key to non-keyring (CVE-2006-1522)
+
+  [ Bastian Blank ]
+  * Add stable release 2.6.16.4:
+    - RCU signal handling (CVE-2006-1523)
+
+  [ Sven Luther ]
+  * [powerpc] Transitioned mkvmlinuz support patch to the 2.6.16 ARCH=powerpc
+    tree. PReP is broken in 2.6.16 though.
+
+  [ maximilian attems ]
+  * Add stable release 2.6.16.5:
+   - x86_64: Clean up execve
+   - x86_64: When user could have changed RIP always force IRET (CVE-2006-0744)
+  * Disable CONFIG_SECCOMP (adds useless overhead on context-switch) -
+    thanks to fs for checking abi.
+
+  [ Christian T. Steigies ]
+  * [m68k] update m68k patch and config to 2.6.16, temporarily disable atari
+
+ -- Bastian Blank <waldi@debian.org>  Sat, 15 Apr 2006 13:56:05 +0200
+
+linux-2.6 (2.6.16-6) unstable; urgency=medium
+
+  [ Bastian Blank ]
+  * Provide version infos in support package and don't longer rely on the
+    changelog.
+  * [amd64/i386] Enable cpu hotplug support.
+
+  [ maximilian attems ]
+  * Add stable release 2.6.16.2:
+    - PCMCIA_SPECTRUM must select FW_LOADER
+    - drivers/net/wireless/ipw2200.c: fix an array overun
+    - AIRO{,_CS} <-> CRYPTO fixes
+    - tlclk: fix handling of device major
+    - fbcon: Fix big-endian bogosity in slow_imageblit()
+    - Fix NULL pointer dereference in node_read_numastat()
+    - USB: EHCI full speed ISO bugfixes
+    - Mark longhaul driver as broken.
+    - fib_trie.c node freeing fix
+    - USB: Fix irda-usb use after use
+    - sysfs: zero terminate sysfs write buffers (CVE-2006-1055)
+    - USB: usbcore: usb_set_configuration oops (NULL ptr dereference)
+    - pcmcia: permit single-character-identifiers
+    - hostap: Fix EAPOL frame encryption
+    - wrong error path in dup_fd() leading to oopses in RCU
+    - {ip, nf}_conntrack_netlink: fix expectation notifier unregistration
+    - isicom must select FW_LOADER
+    - knfsd: Correct reserved reply space for read requests.
+    - Fix module refcount leak in __set_personality()
+    - sbp2: fix spinlock recursion
+    - powerpc: make ISA floppies work again
+    - opti9x - Fix compile without CONFIG_PNP
+    - Add default entry for CTL Travel Master U553W
+    - Fix the p4-clockmod N60 errata workaround.
+    - kdump proc vmcore size oveflow fix
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 10 Apr 2006 16:09:51 +0200
+
+linux-2.6 (2.6.16-5) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Provide real dependency packages for module building.
+    - Add linux-headers-$version-$abiname-all and
+      linux-headers-$version-$abiname-all-$arch.
+  * Rename support package to linux-support-$version-$abiname.
+  * Fix module package output.
+  * Include .kernelrelease in headers packages. (closes: #359813)
+  * Disable Cumana partition support completely. (closes: #359207)
+  * Update vserver patch to 2.0.2-rc15.
+
+  [ dann frazier ]
+  * [ia64] initramfs-tools works now, no longer restrict initramfs-generators
+
+ -- Bastian Blank <waldi@debian.org>  Mon,  3 Apr 2006 14:00:08 +0200
+
+linux-2.6 (2.6.16-4) unstable; urgency=medium
+
+  [ Martin Michlmayr ]
+  * [arm/armeb] Update nslu2 config.
+  * Add stable release 2.6.16.1:
+    - Fix speedstep-smi assembly bug in speedstep_smi_ownership
+    - DMI: fix DMI onboard device discovery
+    - cciss: fix use-after-free in cciss_init_one
+    - DM: Fix bug: BIO_RW_BARRIER requests to md/raid1 hang.
+    - fix scheduler deadlock
+    - proc: fix duplicate line in /proc/devices
+    - rtc.h broke strace(1) builds
+    - dm: bio split bvec fix
+    - v9fs: assign dentry ops to negative dentries
+    - i810fb_cursor(): use GFP_ATOMIC
+    - NET: Ensure device name passed to SO_BINDTODEVICE is NULL terminated.
+    - XFS writeout fix
+    - sysfs: fix a kobject leak in sysfs_add_link on the error path
+    - get_cpu_sysdev() signedness fix
+    - firmware: fix BUG: in fw_realloc_buffer
+    - sysfs: sysfs_remove_dir() needs to invalidate the dentry
+    - TCP: Do not use inet->id of global tcp_socket when sending RST (CVE-2006-1242)
+    - 2.6.xx: sata_mv: another critical fix
+    - Kconfig: VIDEO_DECODER must select FW_LOADER
+    - V4L/DVB (3324): Fix Samsung tuner frequency ranges
+    - sata_mv: fix irq port status usage
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 28 Mar 2006 17:19:10 +0200
+
+linux-2.6 (2.6.16-3) unstable; urgency=low
+
+  [ Frederik Schüler ]
+  * [amd64] Add asm-i386 to the linux-headers packages.
+
+  [ Jonas Smedegaard ]
+  * Tighten yaird dependency to at least 0.0.12-8 (supporting Linux
+    2.6.16 uppercase hex in Kconfig and new IDE sysfs naming, and VIA
+    IDE on powerpc).
+
+  [ Martin Michlmayr ]
+  * [arm/armeb] Enable CONFIG_NFSD on NSLU2 again.  Closes: #358709.
+  * [arm/footbridge] CONFIG_NE2K_PCI should be a module, not built-in.
+  * [arm/footbridge] Enable CONFIG_BLK_DEV_IDECD=m since the CATS can
+    have a CD-ROM drive.
+  * [mips/sb1*] Use ttyS rather than duart as the name for the serial
+    console since the latter causes problems with debian-installer.
+
+  [ Bastian Blank ]
+  * Update vserver patch to 2.0.2-rc14.
+    - Fix sendfile. (closes: #358391, #358752)
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 27 Mar 2006 16:08:20 +0200
+
+linux-2.6 (2.6.16-2) unstable; urgency=low
+
+  [ dann frazier ]
+  * [ia64] Set unconfigured options:
+      CONFIG_PNP_DEBUG=n and CONFIG_NET_SB1000=m
+  * [hppa] Update config for 2.6.16
+
+  [ Martin Michlmayr ]
+  * [mips/mipsel] Put something in the generic config file because diff
+    will otherwise remove the empty file, causing the build to fail.
+  * [mipsel/r5k-cobalt] Set CONFIG_PACKET=y.
+  * [arm] Set CONFIG_MACLIST=y for ixp4xx because nas100d needs it.
+
+  [ Frederik Schüler ]
+  * Add Maximilian Attems to uploaders list.
+
+ -- Martin Michlmayr <tbm@cyrius.com>  Wed, 22 Mar 2006 15:15:14 +0000
+
+linux-2.6 (2.6.16-1) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * New upstream release.
+  * Default to initramfs-tools 0.55 or higher on s390.
+
+  [ maximilian attems ]
+  * Default to initramfs-tools on arm and armeb.
+
+  [ Martin Michlmayr ]
+  * [mips/mipsel] Add an image for the Broadcom BCM91480B evaluation board
+    (aka "BigSur").
+  * [arm, armeb] Enable the netconsole module.
+  * [mipsel/cobalt] Enable the netconsole module.
+  * [mips] SB1: Fix interrupt disable hazard (Ralf Baechle).
+  * [mips] SB1: Support for 1480 ethernet (Broadcom).
+  * [mips] SB1: Support for NAPI (Tom Rix).
+  * [mips] SB1: DUART support (Broadcom).
+  * [mips] Work around bad code generation for <asm/io.h> (Ralf Baechle).
+  * [mips] Fix VINO drivers when using a 64-bit kernel (Mikael Nousiainen).
+  * [arm/armeb] Update configs for 2.6.16.
+  * [mips/mipsel] Update configs for 2.6.16.
+  * [arm/armeb] Enable the SMB module on NSLU2.
+  * [mipsel] Enable parallel port modules for Cobalt since there are PCI
+    cards that can be used in a Qube.
+  * [mipsel] Enable the JFS module on Cobalt.
+
+  [ dann frazier ]
+  * [ia64] use yaird on ia64 until #357414 is fixed
+  * [ia64] Update configs for 2.6.16
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 21 Mar 2006 16:12:16 +0100
+
+linux-2.6 (2.6.15+2.6.16-rc5-0experimental.1) experimental; urgency=low
+
+  [ Frederik Schüler ]
+  * New upstream release candidate.
+
+  [ Martin Michlmayr ]
+  * Add initial mips/mipsel 2.6 kernels.
+  * Important changes compared to the 2.4 kernels:
+    - Drop the XXS1500 flavour since there's little interest in it.
+    - Drop the LASAT flavour since these machines never went into
+      production.
+    - Drop the IP22 R5K (Indy, Indigo2) flavour since the IP22 R4K
+      image now also works on machines with a R5K CPU.
+    - Add an image for SGI IP32 (O2).
+    - Rename the sb1-swarm-bn flavour to sb1-bcm91250a.
+    - Enable PCI network (and other) modules on Cobalt.  Closes: #315895.
+  * Add various MIPS related patches:
+    - Fix iomap compilation on machines without COW.
+    - Improve gettimeofday on MIPS.
+    - Fix an oops on IP22 zerilog (serial console).
+    - Improve IDE probing so it won't take so long on Cobalt.
+    - Probe for IDE disks on SWARM.
+    - Test whether there's a scache (fixes Cobalt crash).
+    - Add Tulip fixes for Cobalt.
+  * Fix a typo in the description of the linux-doc-* package,
+    thanks Justin Pryzby.  Closes: #343424.
+  * [arm] Enable nfs and nfsd modules.
+  * [arm/footbride] Suggest nwutil (Netwinder utilities).
+
+ -- Frederik Schüler <fs@debian.org>  Thu,  9 Mar 2006 14:13:17 +0000
+
+linux-2.6 (2.6.15+2.6.16-rc4-0experimental.1) experimental; urgency=low
+
+  [ Frederik Schüler ]
+  * New upstream release.
+  * Activate CONFIG_DVB_AV7110_OSD on alpha amd64 and ia64.
+    Closes: #353292
+  * Globally enable NAPI on all network card drivers which support it.
+
+  [ maximilian attems ]
+  * Drop fdutils from i386 and amd64 Suggests.
+  * Swap lilo and grub Suggests for i386 and amd64.
+
+  [ Jurij Smakov ]
+  * Make sure that LOCALVERSION environment variable is not
+    passed to a shell while invoking make-kpkg, since it
+    appends it to the version string, breaking the build.
+    Closes: #349472
+  * [sparc32] Re-enable the building of sparc32 images.
+  * [sparc64] Re-add (partial) sparc64-atyf-xl-gr.patch, since it
+    was only partially applied upstream, so the problem (garbled
+    screen output on SunBlade 100) is still present. Thanks to
+    Luis Ortiz for pointing it out.
+  * Bump the build-dep on kernel-package to 10.035, which fixes
+    the problem with building documentation packages.
+
+  [ Martin Michlmayr ]
+  * [sparc] Add sys_newfstatat -> sys_fstatat64 fix from git.
+  * [arm] Update configs for 2.6.16-rc3.
+  * [armeb] Update configs for 2.6.16-rc3.
+  * [arm/armeb] Fix compilation error on NSLU2 due to recent flash
+    changes.
+  * [arm/armeb] Fix a compilation error in the IXP4xx beeper support
+    (Alessandro Zummo).
+
+  [ Norbert Tretkowski ]
+  * [alpha] Update arch/alpha/config* for 2.6.16-rc3.
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 24 Feb 2006 16:02:11 +0000
+
+linux-2.6 (2.6.15-8) unstable; urgency=high
+
+  [ maximilian attems ]
+  * Add stable Release 2.6.15.5:
+    - Fix deadlock in br_stp_disable_bridge
+    - Fix a severe bug
+    - i386: Move phys_proc_id/early intel workaround to correct function
+    - ramfs: update dir mtime and ctime
+    - sys_mbind sanity checking
+    - Fix s390 build failure.
+    - Revert skb_copy_datagram_iovec() recursion elimination.
+    - s390: add #ifdef __KERNEL__ to asm-s390/setup.h
+    - netfilter missing symbol has_bridge_parent
+    - hugetlbfs mmap ENOMEM failure
+    - IB/mthca: max_inline_data handling tweaks
+    - it87: Fix oops on removal
+    - hwmon it87: Probe i2c 0x2d only
+    - reiserfs: disable automatic enabling of reiserfs inode attributes
+    - Fix snd-usb-audio in 32-bit compat environment
+    - dm: missing bdput/thaw_bdev at removal
+    - dm: free minor after unlink gendisk
+    - gbefb: IP32 gbefb depth change fix
+    - shmdt cannot detach not-alined shm segment cleanly.
+    - Address autoconfiguration does not work after device down/up cycle
+    - gbefb: Set default of FB_GBE_MEM to 4 MB
+    - XFS ftruncate() bug could expose stale data (CVE-2006-0554)
+    - sys_signal: initialize ->sa_mask
+    - do_sigaction: cleanup ->sa_mask manipulation
+    - fix zap_thread's ptrace related problems
+    - fix deadlock in ext2
+    - cfi: init wait queue in chip struct
+    - sd: fix memory corruption with broken mode page headers
+    - sbp2: fix another deadlock after disconnection
+    - skge: speed setting
+    - skge: fix NAPI/irq race
+    - skge: genesis phy initialization fix
+    - skge: fix SMP race
+    - x86_64: Check for bad elf entry address (CVE-2006-0741)
+    - alsa: fix bogus snd_device_free() in opl3-oss.c
+    - ppc32: Put cache flush routines back into .relocate_code section
+    - sys32_signal() forgets to initialize ->sa_mask
+    - Normal user can panic NFS client with direct I/O (CVE-2006-0555)
+  * Deactivate merged duplicates: s390-klibc-buildfix.patch,
+    powerpc-relocate_code.patch.
+  * Add stable Release 2.6.15.6:
+    - Don't reset rskq_defer_accept in reqsk_queue_alloc
+    - fs/nfs/direct.c compile fix
+    - mempolicy.c compile fix, make sure BITS_PER_BYTE is defined
+    - [IA64] die_if_kernel() can return (CVE-2006-0742)
+
+  [ Sven Luther ]
+  * [powerpc] Disabled CONFIG_IEEE1394_SBP2_PHYS_DMA, which was broken on
+    powerpc64, as it used the long deprecated bus_to_virt symbol.
+    (Closes: #330225)
+  * [powerpc] Fixed gettimeofday breakage causing clock drift.
+
+ -- Bastian Blank <waldi@debian.org>  Mon,  6 Mar 2006 11:06:28 +0100
+
+linux-2.6 (2.6.15-7) unstable; urgency=low
+
+  [ Norbert Tretkowski ]
+  * [alpha] Disabled CONFIG_ALPHA_LEGACY_START_ADDRESS for -alpha-generic and
+    -alpha-smp flavours, and introduced a new -alpha-legacy flavour for MILO
+    based machines, which has CONFIG_ALPHA_LEGACY_START_ADDRESS enabled.
+    (closes: #352186)
+  * [alpha] Added new patch to support prctl syscall. (closes: #349765)
+  * [i386] Renamed kernel-image-2.6-486 to kernel-image-2.6-386, it's meant for
+    transition only, and kernel-image-2.6-386 is the package name in sarge.
+
+  [ Jurij Smakov ]
+  * Bump build-dependency on kernel-package to 10.035, which is fixed
+    to build the documentation packages again.
+    Closes: #352000, #348332
+
+  [ Frederik Schüler ]
+  * Activate CONFIG_DVB_AV7110_OSD on alpha amd64 and ia64.
+    Closes: #353292
+  * Deactivate CONFIG_FB_ATY_XL_INIT on all architectures: it is broken and
+    already removed in 2.6.16-rc.
+    Closes: #353310
+
+  [ Christian T. Steigies ]
+  * [m68k] build in cirrusfb driver
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 21 Feb 2006 17:35:21 +0000
+
+linux-2.6 (2.6.15-6) unstable; urgency=low
+
+  [ Bastian Blank ]
+  * Moved the mkvmlinuz support patch modification to a -1 version of the
+    patch.
+
+  [ maximilian attems ]
+  * Add stable treee 2.6.15.4
+    - PCMCIA=m, HOSTAP_CS=y is not a legal configuration
+    - Input: iforce - do not return ENOMEM upon successful allocation
+    - x86_64: Let impossible CPUs point to reference per cpu data
+    - x86_64: Clear more state when ignoring empty node in SRAT parsing
+    - x86_64: Dont record local apic ids when they are disabled in MADT
+    - Fix keyctl usage of strnlen_user()
+    - Kill compat_sys_clock_settime sign extension stub.
+    - Input: grip - fix crash when accessing device
+    - Input: db9 - fix possible crash with Saturn gamepads
+    - Input: iforce - fix detection of USB devices
+    - Fixed hardware RX checksum handling
+    - SCSI: turn off ordered flush barriers
+    - Input: mousedev - fix memory leak
+    - seclvl settime fix
+    - fix regression in xfs_buf_rele
+    - md: remove slashes from disk names when creation dev names in sysfs
+    - d_instantiate_unique / NFS inode leakage
+    - dm-crypt: zero key before freeing it
+    - bridge: netfilter races on device removal
+    - bridge: fix RCU race on device removal
+    - SELinux: fix size-128 slab leak
+    - __cmpxchg() must really always be inlined
+    - emu10k1 - Fix the confliction of 'Front' control
+    - Input: sidewinder - fix an oops
+  * Deactivate merged alpha-cmpxchg-inline.patch, sparc64-clock-settime.patch.
+
+  [ Christian T. Steigies ]
+  * [m68k] Add fix for m68k/buddha IDE and m68k/mac SCSI driver
+  * [m68k] Patch by Peter Krummrich to stop flickering pixels with PicassoII
+  * [m68k] make Amiga keyboard usable again, patch by Roman Zippel
+  * [m68k] prevent wd33c93 SCSI driver from crashing the kernel, patch by Roman Zippel
+  * [m68k] remove SBCs from VME descriptions (closes: #351924)
+
+ -- Frederik Schüler <fs@debian.org>  Fri, 10 Feb 2006 15:33:21 +0000
+
+linux-2.6 (2.6.15-5) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * Add a fix for the input support for the ixp4xx beeper driver from
+    2.6.16-rc2.
+  * Add stable tree 2.6.15.3:
+    - Fix extra dst release when ip_options_echo fails (CVE-2006-0454)
+
+  [ Sven Luther ]
+  * [powerpc] Removed -o root -g root option to mkvmlinuz support patch.
+    (Closes: #351412)
+
+ -- Sven Luther <luther@debian.org>  Tue,  7 Feb 2006 19:23:14 +0000
+
+linux-2.6 (2.6.15-4) unstable; urgency=low
+
+  [ Jurij Smakov ]
+  * [sparc64] Add sparc64-clock-settime.patch to fix the incorrect
+    handling of the clock_settime syscall arguments, which resulted
+    in a hang when trying to set the date using 'date -s'. Patch
+    by David Miller is applied upstream. Thanks to Ludovic Courtes
+    and Frans Pop for reporting and testing.
+    Ref: http://marc.theaimsgroup.com/?t=113861017400002&r=1&w=2
+
+  [ Christian T. Steigies ]
+  * [m68k] update m68k patch and config to 2.6.15
+  * [m68k] SCSI drivers need to be built in until ramdisk generator tools
+    supports loading scsi modules
+  * [m68k] ISCSI and IDE-TAPE don't compile, disabled
+  * [m68k] set CC_OPTIMIZE_FOR_SIZE=n
+  * [m68k] added vmeints patch which fixes building for vme
+
+  [ maximilian attems ]
+  * Use initramfs-tools for ia64 - fixed klibc.
+  * Add stable tree 2.6.15.2:
+    - Fix double decrement of mqueue_mnt->mnt_count in sys_mq_open
+    - (CVE-2005-3356)
+    - Mask off GFP flags before swiotlb_alloc_coherent
+    - usb-audio: don't use empty packets at start of playback
+    - Make second arg to skb_reserved() signed.
+    - Input: HID - fix an oops in PID initialization code
+    - Fix oops in ufs_fill_super at mount time
+    - Kill blk_attempt_remerge()
+    - Fix i2o_scsi oops on abort
+    - Fix mkiss locking bug
+    - Fix timekeeping on sparc64 ultra-IIe machines
+    - Someone broke reiserfs v3 mount options and this fixes it
+  * Deactivate sparc64-jumping-time.patch, amd64-pppd-fix.patch incl in aboves.
+  * Add s390-klibc-buildfix.patch, regression due to header file changes.
+
+  [ Steve Langasek ]
+  * [alpha] set __attribute__((always_inline)) on __cmpxchg(), to avoid
+    wrong optimizations with -Os (Closes: #347556).
+
+  [ Martin Michlmayr ]
+  * Add input support for the ixp4xx beeper driver (Alessandro Zummo).
+  * [arm] Add NSLU2 specific portion of ixp4xx beeper driver (Alessandro Zummo).
+  * [arm/nslu2] Build PPP as a module.
+  * [arm/nslu2] Enable wireless.
+  * [arm/nslu2] Enable most USB modules.
+  * [arm/nslu2] Enable ALSA and USB sound modules.
+  * [arm/nslu2] Set 4 MB as the size of the initrd in the kernel cmd line.
+  * [arm/footbridge] Set CONFIG_BLK_DEV_RAM_SIZE to 8192.
+  * [armeb] Add support for big-endian ARM.
+  * [armeb/nslu2] Use the nslu2 config from arm.
+
+  [ Frederik Schüler ]
+  * [amd64] Add amd64-pppd-fix.patch to fix kernel panic when using pppd.
+    (Closes: #347711)
+  * Add 64bit-vidiocswin-ioctl-fix.patch to fix VIDIOCSWIN ioctl on 64bit
+    kernel 32bit userland setups. (Closes: #349338)
+
+  [ Sven Luther ]
+  * [powerpc] Adapted apus config file to be more modular and in sync with the
+    other powerpc configs. Scsi drivers are disabled as they don't build
+    cleanly though (need some esp stuff).
+  * [powerpc] Default to initramfs-tools as initramfs generator, as klibc
+    build is fixed now.
+
+  [ Bastian Blank ]
+  * [powerpc] Fix dependencies of image packages.
+
+ -- maximilian attems <maks@sternwelten.at>  Wed,  1 Feb 2006 11:34:20 +0100
+
+linux-2.6 (2.6.15-3) unstable; urgency=low
+
+  [ Martin Michlmayr ]
+  * [arm] Update configs for 2.6.15; closes: #347998.
+  * [arm] Activate tmpfs.
+  * [arm] Allow modules to be unloaded.
+  * [arm] Enable CONFIG_INPUT_EVDEV since yaird needs this module in
+    order to generate initrds.
+  * [arm/footbridge] Activate IDEPCI so SL82C105 will really be
+    compiled in.
+  * [arm/footbridge] Activate the right network drivers (Tulip and
+    NE2K).
+  * [arm/footbridge] Enable more framebuffer drivers.
+  * debian/patches/arm-fix-dc21285.patch: Fix compilation of DC21285
+    flash driver.
+  * [arm/footbridge] Enable MTD and the DC21285 flash driver.
+  * [arm/footbridge] Enable RAID and LVM modules.
+  * [arm/footbridge] Enable USB modules.
+  * [arm/nslu2] Add an image for Network Storage Link for USB 2.0 Disk
+    Drives.
+  * debian/patches/arm-memory-h-page-shift.patch: Fix error "PAGE_SHIFT
+    undeclared" (Rod Whitby).
+  * debian/patches/mtdpart-redboot-fis-byteswap.patch: recognise a foreign
+    endian RedBoot partition table (John Bowler).
+  * debian/patches/maclist.patch: Add support for the maclist interface
+    (John Bowler).
+  * debian/patches/arm-nslu2-maclist.patch: Add NSLU2 maclist support
+    (John Bowler).
+  * [arm/nslu2] Activate maclist.
+
+  [ maximilian attems ]
+  * Add stable tree 2.6.15.1:
+    - arch/sparc64/Kconfig: fix HUGETLB_PAGE_SIZE_64K dependencies
+    - moxa serial: add proper capability check
+    - fix /sys/class/net/<if>/wireless without dev->get_wireless_stats
+    - Don't match tcp/udp source/destination port for IP fragments
+    - Fix sys_fstat64() entry in 64-bit syscall table.
+    - UFS: inode->i_sem is not released in error path
+    - netlink oops fix due to incorrect error code
+    - Fix onboard video on SPARC Blade 100 for 2.6.{13,14,15}
+    - Fix DoS in netlink_rcv_skb() (CVE-2006-0035)
+    - fix workqueue oops during cpu offline
+    - Fix crash in ip_nat_pptp (CVE-2006-0036)
+    - Fix another crash in ip_nat_pptp (CVE-2006-0037)
+    - ppc32: Re-add embed_config.c to ml300/ep405
+    - Fix ptrace/strace
+    - vgacon: fix doublescan mode
+    - BRIDGE: Fix faulty check in br_stp_recalculate_bridge_id()
+    - skge: handle out of memory on ring changes
+  * Drop merged patch:
+    - sparc64-atyfb-xl-gr-final.patch
+
+  [ Simon Horman ]
+  * Fix booting on PReP machines
+    (Closes: #348040)
+    powerpc-relocate_code.patch
+
+ -- Simon Horman <horms@verge.net.au>  Tue, 17 Jan 2006 18:01:17 +0900
+
+linux-2.6 (2.6.15-2) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Default to initramfs-tools as initramfs generator for amd64, hppa, i386,
+    alpha and sparc. More archs will be added once klibc matures.
+    (Closes: #346141, #343147, #341524, #346305)
+  * Backport alsa patch for opl3 - Fix the unreleased resources.
+    (Closes: #346273)
+  * Readd buslogic-pci-id-table.patch.
+
+  [ dann frazier ]
+  * [ia64] Update config for 2.6.15.
+
+  [ Frederik Schüler ]
+  * Make CONFIG_IPW2100 a per-architecture option and deactivate it on all
+    architectures but i386. (Closes: #344515)
+
+  [ Sven Luther ]
+  * Removed spurious file from powerpc-apus patch. (Closes: #346159)
+
+  [ Norbert Tretkowski ]
+  * Backport the generic irq framework for alpha. (closes: #339080)
+
+  [ Bastian Blank ]
+  * Remove pre-sarge conflict with hotplug.
+  * Fix hppa diff to apply.
+  * Make the latest packages depend on the corect version of the real images.
+    (closes: #346366)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 10 Jan 2006 16:54:21 +0100
+
+linux-2.6 (2.6.15-1) unstable; urgency=low
+
+  [ Sven Luther ]
+  * New upstream release.
+  * [powerpc] Now use ARCH=powerpc for 64bit powerpc flavours, 32bit still
+    stays with ARCH=ppc for now.
+  * [powerpc] Readded PReP Motorola PowerStack II Utah IDE interrupt
+    (Closes: #345424)
+  * [powerpc] Fixed apus patch.
+  * Added make-kpkg --arch option support to gencontrol.py.
+  * Added debian/bin/kconfig.ml to process config file snipplet, so we can
+    preserve the pre 2.6.15 ordering of config file snipplets. Upto 2.6.15
+    the kernel Kconfig magic apparently kept the later occuring config options,
+    but it seems that this is no more the case. Instead of catting the config
+    files together, not use the kconfig.ml script to read in the files from
+    more generic to more specific, and keep only the more specific.
+
+  [ Bastian Blank ]
+  * [s390] Update configs.
+
+  [ Kyle McMartin ]
+  * [hppa] Snag latest hppa.diff from cvs.parisc-linux.org.
+  * [hppa] Update configs for 2.6.15.
+  * [hppa] Change parisc kernel names to something less ambiguous.
+
+  [ dann frazier ]
+  * [ia64] Update ia64 configs
+
+  [ maximilian attems ]
+  * Drop modular-ide.patch, nacked by ide upstream.  Prevents udev to load
+    ide-generic and those successfull boots with initramfs-tools.
+  * Disable CONFIG_USB_BANDWIDTH, causes major trouble for alsa usb cards.
+
+  [ Norbert Tretkowski ]
+  * [alpha] Removed conflict with initramfs-tools, thanks vorlon for finding
+    the klibc bug!
+
+  [ Jonas Smedegaard ]
+  * Adjust short description of transitional package kernel-image-2.6-
+    486 to mention 2.6 (not 2.6.12).
+  * Clean duplicate Kconfig options.
+
+  [ Frederik Schüler ]
+  * Add updated version of drivers-scsi-megaraid_splitup.patch.
+  * Deactivate CONFIG_IDE_TASK_IOCTL on alpha and ia64 and make it a global
+    option.
+  * Make CONFIG_VIDEO_SAA7134 a global option.
+  * New option CONFIG_CC_OPTIMIZE_FOR_SIZE set per-arch.
+  * Rename i386 368 flavour to 486.
+  * Add myself to uploaders.
+  * Readdition of qla2xxx drivers, as firmware license has been fixed.
+  * Make CONFIG_PACKET, PACKET_MM and UNIX builtin on all architectures:
+    statically linked has better performance then modules due to TLB issue.
+  * clean up debian-patches dir: remove all obsolete patches:
+    - alpha-compile-fix.patch: obsolete
+    - amd64-int3-fix.patch: fixed since 2.6.12
+    - net-ipconntrack-nat-fix.patch: merged upstream after 2.6.14 release
+    - net-nf_queue-oops.patch: merged upstream after 2.6.14 release
+    - qla2xxx-removed.patch: obsolete
+  * Drop M386 support remains from the i386 386 flavour: built with M486
+    from now on.
+
+  [ Martin Michlmayr ]
+  * [arm] Don't define "compiler" since GCC 4.x is the default now anyway.
+  * [arm] Add descriptions for "class" and "longclass".
+  * [arm] Compile CONFIG_BLK_DEV_SL82C105 support into the kernel on
+    Footbridge.
+  * [arm] Compile ext3 support into the kernel on Footbridge.
+  * [arm] Turn on CONFIG_SERIAL_8250 support on Footbridge.
+
+  [ Jurij Smakov ]
+  * [sparc] Correct the patch for the atyfb framebuffer driver
+    (sparc64-atyfb-xl-gr.patch) to finally fix the console and X
+    image defects on Blade 100/150. The new patch is named
+    sparc64-atyfb-xl-gr-final.patch to avoid the confusion.
+    Thanks to Luis F. Ortiz for fixing the patch and Luigi Gangitano
+    for testing it out.
+  * Drop tty-locking-fixes9.patch, which was preventing the oops during
+    shutdown on some sparc machines with serial console. Proper fix has
+    been incorporated upstream.
+
+  [ Simon Horman ]
+  * Enable MKISS globally (closes: #340215)
+  * Add recommends libc6-i686 to 686 and k7 image packages
+    (closes: #278729)
+  * Enable OBSOLETE_OSS_USB_DRIVER and USB_AUDIO
+    as alsa snd-usb-audio still isn't quite there.
+    I expect this to be re-disabled at some stage,
+    possibly soon if it proves to be a source of bugs.
+    (closes: #340388)
+
+ -- Sven Luther <luther@debian.org>  Tue,  3 Jan 2006 06:48:07 +0000
+
+linux-2.6 (2.6.14-7) unstable; urgency=low
+
+  [ maximilian attems ]
+  * Add stable tree 2.6.14.5 fixes:
+    - setting ACLs on readonly mounted NFS filesystems (CVE-2005-3623)
+    - Fix bridge-nf ipv6 length check
+    - Perform SA switchover immediately.
+    - Input: fix an OOPS in HID driver
+    - Fix hardware checksum modification
+    - kernel/params.c: fix sysfs access with CONFIG_MODULES=n
+    - Fix RTNLGRP definitions in rtnetlink.h
+    - Fix CTA_PROTO_NUM attribute size in ctnetlink
+    - Fix unbalanced read_unlock_bh in ctnetlink
+    - Fix NAT init order
+    - Fix incorrect dependency for IP6_NF_TARGET_NFQUEUE
+    - dpt_i2o fix for deadlock condition
+    - SCSI: fix transfer direction in sd (kernel panic when ejecting iPod)
+    - SCSI: fix transfer direction in scsi_lib and st
+    - Fix hardware rx csum errors
+    - Fix route lifetime.
+    - apci: fix NULL deref in video/lcd/brightness
+  * Disable CONFIG_USB_BANDWIDTH, causes major trouble on alsa usb cards.
+    (Closes: #344939)
+
+ -- maximilian attems <maks@sternwelten.at>  Tue, 27 Dec 2005 20:50:28 +0100
+
+linux-2.6 (2.6.14-6) unstable; urgency=low
+
+  [ Kyle McMartin ]
+  * Change parisc kernel names to something less ambiguous.
+
+  [ maximilian attems ]
+  * Drop modular-ide.patch, nacked by ide upstream.  Prevents udev to load
+    ide-generic and those successfull boots with initramfs-tools.
+  * Add stable tree 2.6.14.4 with the following fixes:
+    - drivers/scsi/dpt_i2o.c: fix a user-after-free
+    - drivers/message/i2o/pci.c: fix a use-after-free
+    - drivers/infiniband/core/mad.c: fix a use-after-free
+    - DVB: BUDGET CI card depends on STV0297 demodulator
+    - setkeys needs root
+    - Fix listxattr() for generic security attributes
+    - AGPGART: Fix serverworks TLB flush.
+    - Fix crash when ptrace poking hugepage areas
+    - I8K: fix /proc reporting of blank service tags
+    - i82365: release all resources if no devices are found
+    - bonding: fix feature consolidation
+    - libata: locking rewrite (== fix)
+    - cciss: bug fix for BIG_PASS_THRU
+    - ALSA: nm256: reset workaround for Latitude CSx
+    - cciss: bug fix for hpacucli
+    - V4L/DVB: Fix analog NTSC for Thomson DTT 761X hybrid tuner
+    - BRIDGE: recompute features when adding a new device
+    - 32bit integer overflow in invalidate_inode_pages2()
+    - USB: Adapt microtek driver to new scsi features
+    - ide-floppy: software eject not working with LS-120 drive
+    - Add try_to_freeze to kauditd
+    - V4L/DVB (3135) Fix tuner init for Pinnacle PCTV Stereo
+    - NETLINK: Fix processing of fib_lookup netlink messages
+    - ACPI: fix HP nx8220 boot hang regression
+
+  [ Norbert Tretkowski ]
+  * [alpha] Removed conflict with initramfs-tools, thanks vorlon for finding
+    the klibc bug!
+
+  [ Frederik Schüler ]
+  * Add updated drivers-scsi-megaraid_splitup.patch. (Closes: #317258)
+  * Add ppc64-thermal-overtemp.patch to fix a thermal control bug in G5
+    machines. (Closes: #343980)
+  * Unpatch the following patches which are included in 2.6.14.4:
+    - setkeys-needs-root-1.patch
+    - setkeys-needs-root-2.patch
+    - mm-invalidate_inode_pages2-overflow.patch
+    - net-bonding-consolidation-fix.patch
+
+ -- Frederik Schüler <fs@debian.org>  Tue, 20 Dec 2005 18:50:41 +0000
+
+linux-2.6 (2.6.14-5) unstable; urgency=low
+
+  [ dann frazier ]
+  * ia64-new-assembler-fix.patch
+    Fix ia64 builds with newer assembler (Closes: #341257)
+
+  [ Sven Luther ]
+  * [powerpc] incremented ramdisk size to 24576 from 8192, needed by the
+    graphical installer, maybe we can bring this to 16384 later.
+
+  [ Simon Horman ]
+  * Add recommends libc6-i686 to 686 and k7 image packages
+    (closes: #278729)
+  * Enable OBSOLETE_OSS_USB_DRIVER and USB_AUDIO
+    as alsa snd-usb-audio still isn't quite there.
+    I expect this to be re-disabled at some stage,
+    possibly soon if it proves to be a source of bugs.
+    (closes: #340388)
+
+  [ dann frazier ]
+  * buslogic-pci-id-table.patch
+    add a pci device id table to fix initramfs-tools discovery.
+    (closes #342057)
+  * fix feature consolidation in bonding driver.  (closes #340068)
+
+ -- dann frazier <dannf@debian.org>  Thu,  8 Dec 2005 10:59:31 -0700
+
+linux-2.6 (2.6.14-4) unstable; urgency=low
+
+  [ dann frazier ]
+  * setkeys-needs-root-1.patch, setkeys-needs-root-2.patch:
+    [SECURITY] Require root privilege to write the current
+    function key string entry of other user's terminals.
+    See CVE-2005-3257 (Closes: #334113)
+
+  [ Simon Horman ]
+  * Enable MKISS globally (closes: #340215)
+  * mm-invalidate_inode_pages2-overflow.patch
+    [SECURITY] 32bit integer overflow in invalidate_inode_pages2() (local DoS)
+  * ctnetlink-check-if-protoinfo-is-present.patch
+    [SECURITY] ctnetlink: check if protoinfo is present (local DoS)
+  * ctnetlink-fix-oops-when-no-icmp-id-info-in-message.patch
+    [SECURITY] ctnetlink: Fix oops when no ICMP ID info in message (local DoS)
+
+  [ Sven Luther ]
+  * Re-added powerpc/apus patch, now that Roman Zippel merged it in.
+  * Let's create asm-(ppc|ppc64) -> asm-powerpc symlink farm.  (Closes: #340571)
+
+  [ maximilian attems ]
+  * Add 2.6.14.3 patch - features changelog:
+    - isdn/hardware/eicon/os_4bri.c: correct the xdiLoadFile() signature
+    - x86_64/i386: Compute correct MTRR mask on early Noconas
+    - PPTP helper: Fix endianness bug in GRE key / CallID NAT
+    - nf_queue: Fix Ooops when no queue handler registered
+    - ctnetlink: check if protoinfo is present
+    - ip_conntrack: fix ftp/irc/tftp helpers on ports >= 32768
+    - VFS: Fix memory leak with file leases
+    - hwmon: Fix lm78 VID conversion
+    - hwmon: Fix missing it87 fan div init
+    - ppc64 memory model depends on NUMA
+    - Generic HDLC WAN drivers - disable netif_carrier_off()
+    - ctnetlink: Fix oops when no ICMP ID info in message
+    - Don't auto-reap traced children
+    - packet writing oops fix
+    - PPTP helper: fix PNS-PAC expectation call id
+    - NAT: Fix module refcount dropping too far
+    - Fix soft lockup with ALSA rtc-timer
+    - Fix calculation of AH length during filling ancillary data.
+    - ip_conntrack TCP: Accept SYN+PUSH like SYN
+    - refcount leak of proto when ctnetlink dumping tuple
+    - Fix memory management error during setting up new advapi sockopts.
+    - Fix sending extension headers before and including routing header.
+    - hwmon: Fix missing boundary check when setting W83627THF in0 limits
+  * Remove ctnetlink-check-if-protoinfo-is-present.patch,
+    net-nf_queue-oops.patch - already included in 2.6.14.3.
+
+  [ Frederik Schüler ]
+  * Make CONFIG_PACKET, PACKET_MM and UNIX builtin on all architectures:
+    statically linked has better performance then modules due to TLB issue.
+  * Add myself to uploaders.
+
+ -- Frederik Schüler <fs@debian.org>  Sat, 26 Nov 2005 13:18:41 +0100
+
+linux-2.6 (2.6.14-3) unstable; urgency=low
+
+  [ Norbert Tretkowski ]
+  * [alpha] Switch to gcc 4.0.
+  * [alpha] Conflict with initramfs-tools, klibc is broken on alpha.
+  * [alpha] Enabled CONFIG_KOBJECT_UEVENT in arch/alphaconfig to fix trouble
+    with latest udev, thanks to Uwe Schindler for reporting. (closes: #338911)
+  * Bumped ABI revision:
+    + ABI changes on sparc and alpha because of compiler switch.
+    + 2.6.14.1 changes ABI of procfs.
+
+  [ Sven Luther ]
+  * Set default TCP congestion algorithm to NewReno + BIC (Closes: #337089)
+
+  [ maximilian attems ]
+  * Reenable CONFIG_SOFTWARE_SUSPEND on i386 and ppc, resume=/dev/<other device>
+    must be set by boot loader. (Closes: #267600)
+  * Set CONFIG_USB_SUSPEND on i386. Usefull for suspend to ram and apm suspend.
+  * Add 2.6.14.1 patch:
+    - Al Viro: CVE-2005-2709 sysctl unregistration oops
+  * Add 2.6.14.2 patch:
+    - airo.c/airo_cs.c: correct prototypes
+    - fix XFS_QUOTA for modular XFS (closes: #337072)
+    - USB: always export interface information for modalias
+    - NET: Fix zero-size datagram reception
+    - fix alpha breakage
+    - Oops on suspend after on-the-fly switch to anticipatory i/o scheduler
+    - ipvs: fix connection leak if expire_nodest_conn=1
+    - Fix ptrace self-attach rule
+    - fix signal->live leak in copy_process()
+    - fix de_thread() vs send_group_sigqueue() race
+    - prism54 : Fix frame length
+    - tcp: BIC max increment too large
+  * Remove alpha compile fix as contained in 2.6.14.2
+  * Readd CONFIG_XFS_QUOTA=y.
+  * Disable ACPI cutoff year on i386, was set to 2001.
+    No need for acpi=force on boot.
+
+  [ Jurij Smakov ]
+  * Fix the install-image script to correctly include all the necessary
+    stuff in scripts. (Closes: #336424)
+  * Enable CONFIG_SND_ALI5451 on sparc.
+  * Switch sparc to gcc-4.0. Thanks to Norbert for making sure it successfully
+    builds a working kernel now.
+  * Apply patch to fix ATI framebuffer output corruption on SunBlade 100
+    (sparc64-atyfb-xl-gr.patch). Thanks to Luigi Gangitano. (Closes: #321200)
+  * Disable CONFIG_PARPORT_PC_FIFO on sparc, since it causes a hang whenever
+    something is sent to the parallel port device. Thanks to Attilla
+    (boera at rdslink.ro) for pointing that out.
+
+  [ Simon Horman ]
+  * [386, AMD64] Set CONFIG_FRAMEBUFFER_CONSOLE=y instead of m.
+    As vesadb now built into the kernel, after finally dropping the
+    debian-specific patch to make it modular, make fbcons builtin too, else
+    all sorts of weird stuff happens which is hard for the inird builders to
+    automatically compenste for. (Closes: #336450)
+  * Redisable CONFIG_SOFTWARE_SUSPEND on ppc/miboot as it required
+    CONFIG_PM to compile.
+  * [NETFILTER] nf_queue: Fix Ooops when no queue handler registered
+    This is a regression introduced in 2.6.14.
+    net-nf_queue-oops.patch. (Closes: #337713)
+  * Make manuals with defconfig, as is required for kernel-package 10.008
+
+  [ dann frazier ]
+  * net-ipconntrack-nat-fix.patch - fix compilation of
+    ip_conntrack_helper_pptp.c when NAT is disabled. (Closes: #336431)
+
+  [ Christian T. Steigies ]
+  * update m68k.diff to 2.6.14
+  * add m68k-*vme* patches
+  * disable macsonic driver until the dma patch is fixed
+  * disable IEEE80211 drivers for all of m68k
+
+  [ Frederik Schüler ]
+  * activate CONFIG_SECURITY_NETWORK to fix SElinux operation.
+    (Closes: #338543)
+
+ -- Norbert Tretkowski <nobse@debian.org>  Mon, 14 Nov 2005 10:23:05 +0100
+
+linux-2.6 (2.6.14-2) unstable; urgency=low
+
+  [ Simon Horman ]
+  * [SECURITY] Avoid 'names_cache' memory leak with CONFIG_AUDITSYSCALL
+    This fix, included as part of the 2.6.13.4 patch in
+    2.6.13+2.6.14-rc4-0experimental.1 is CVE-2005-3181
+  * Fix genearation of .extraversion, again (closes: #333842)
+  * Add missing kernel-arch and kernel-header-dirs to defines
+    so headers get included. (closes: #336521)
+    N.B: I only filled in arches where other's hadn't done so alread.
+         Please fix if its wrong.
+  * Allow powerpc64 to compile with AUDIT enabled but
+    AUDITSYSCALL disabled. powerpc64-audit_sysctl-build.patch
+
+  [ dann frazier ]
+  * Update hppa.diff to 2.6.14-pa0
+
+  [ Norbert Tretkowski ]
+  * [alpha] New patch to include compiler.h in barrier.h, barrier() is used in
+    non-SMP case.
+  * [alpha] Added kernel-header-dirs and kernel-arch to debian/arch/alpha/defines
+    to include asm-alpha in linux-headers package.
+  * Added myself to Uploaders.
+
+  [ Frederik Schüler ]
+  * [amd64] use DISCONTIGMEM instead of SPARSEMEM on amd64-k8-smp flavour to
+    fix bootup kernel panic.
+  * [amd64] include asm-x86_64 in linux-headers package.
+  * Deactivate AUDITSYSCALL globally, it slows down the kernel and is not
+    needed for selinux at all.
+
+ -- Simon Horman <horms@debian.org>  Tue,  1 Nov 2005 15:27:40 +0900
+
+linux-2.6 (2.6.14-1) unstable; urgency=low
+
+  [ Sven Luther ]
+  * New upstream release.
+
+  [ Norbert Tretkowski ]
+  * [alpha] Update arch/alpha/config* for 2.6.14.
+
+  [ Simon Horman ]
+  * Fix misformatting of long description of
+    linux-patch-debian-linux-patch-debian-X.Y.Z.
+    templates/control.main.in
+    (closes: #335088)
+  * Make sure version is seeded in apply and unapply scripts.
+    Actually changed in some earlier, post 2.6.12, release,
+    but the changelog seems to be missing.
+    (closes: #324583)
+
+  [ dann frazier ]
+  * [ia64] Disable the CONFIG_IA64_SGI_SN_XP module.  This forces
+    CONFIG_GENERIC_ALLOCATOR and CONFIG_IA64_UNCACHED_ALLOCATOR to y, which
+    appears to break on zx1 systems.
+
+ -- Simon Horman <horms@debian.org>  Fri, 28 Oct 2005 16:26:03 +0900
+
+linux-2.6 (2.6.13+2.6.14-rc5-0experimental.1) experimental; urgency=low
+
+  [ Sven Luther ]
+  * Upgraded to 2.6.14-rc5.
+
+  [ Jonas Smedegaard ]
+  * Quote variables in debian/rules.real and postinstall (making it
+    safer to run with weird characters in path of build environment).
+
+  [ Bastian Blank ]
+  * Add some missing files from scripts to headers packages.
+  * Add new patch powerpc-build-links.patch: Emit relative symlinks in
+    arch/ppc{,64}/include.
+  * Include arch/*/include into headers package.
+
+ -- Sven Luther <luther@debian.org>  Tue, 25 Oct 2005 03:56:11 +0000
+
+linux-2.6 (2.6.13+2.6.14-rc4-0experimental.1) experimental; urgency=low
+
+  [ Sven Luther ]
+  * Upgraded to 2.6.14-rc4.
+
+  [ Simon Horman ]
+  * Fix genearation of .extraversion (closes: #333842)
+
+  [ dann frazier ]
+  * Enhance the linux-source description to explain the types of patches
+    Debian adds to it.  (closes: #258043)
+  * Correct linux-patch-debian description.  It replaces the
+    kernel-patch-debian packages, not the kernel-source packages.
+
+  [ Jonas Smedegaard ]
+  * Fix building from within a very long dir (all patches was applied at
+    once - exhausting shell commandline, now applied one by one).
+  * Add Simon Horman, Sven Luther and myself as Uploaders.
+
+  [ Bastian Blank ]
+  * Use list of revisions in patch scripts.
+  * Use correct names for tarball and scripts.
+
+  [ Jurij Smakov ]
+  * [i386] Set the CONFIG_HPET_EMULATE_RTC option to make the clock
+    work properly on certain Dell machines. This required setting the
+    CONFIG_RTC option to 'y' instead of 'm'. (closes: #309909)
+    [i386] Enable VIDEO_CX88 and VIDEO_CX88_DVB (both set to 'm') by
+    popular demand. (closes: #330916)
+
+  [ Norbert Tretkowski ]
+  * [alpha] Update arch/alpha/config for 2.6.13.
+
+  [ Kyle McMartin ]
+  * [hppa] Oops. Fix linux-headers not including asm-parisc by adding
+    headers_dirs = parisc to Makefile.inc.
+
+  [ maximilian attems ]
+  * Set CONFIG_FB_VESA=y for i386 and amd64 configs. (closes: #333003)
+
+  [ Sven Luther ]
+  * [powerpc] Fixed apus build, now use mkvmlinuz too to generate the vmlinuz
+    kernel.
+  * Fixed control.image.in to depend on :
+      initramfs-tools | yaird | linux-ramdisk-tool
+    where linux-ramdisk-tools is the virtual package provided by all
+    initrd/initramfs generating tools.
+
+  [ Frederik Schüler ]
+  * deactivate FB_RIVA on all architectures.
+  * deactivate BLK_DEV_IDESCSI on all architectures.
+  * Added patch-2.6.13.4:
+    - [SECURITY] key: plug request_key_auth memleak
+      See CAN-2005-3119
+    - [SECURITY] Fix drm 'debug' sysfs permissions
+      See CAN-2005-3179
+    - [SECURITY] Avoid 'names_cache' memory leak with CONFIG_AUDITSYSCALL
+    - [SPARC64] Fix userland FPU state corruption.
+    - BIC coding bug in Linux 2.6.13
+    - [SECURITY] orinoco: Information leakage due to incorrect padding
+      See CAN-2005-3180
+    - ieee1394/sbp2: fixes for hot-unplug and module unloading
+
+  [ Christian T. Steigies ]
+  * disable CONFIG_EXT2_FS_XIP for m68k like on all(?) other arches
+  * deactivate OKTAGON_SCSI for amiga/m68k until it can be compiled again
+  * deactivate CONFIG_KEYBOARD_HIL_OLD, CONFIG_KEYBOARD_HIL, CONFIG_MOUSE_HIL,
+    CONFIG_HIL_MLC, and CONFIG_HP_SDC for hp/m68k
+  * update m68k.diff for 2.6.13
+  * split out patches that do not intefere with other arches to
+    patches-debian/m68k-*
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 21 Oct 2005 12:17:47 +0000
+
+linux-2.6 (2.6.13-1) experimental; urgency=low
+
+  * New upstream release "git booost":
+    - new arch xtensa
+    - kexec/kdump
+    - execute-in-place
+    - inotify (closes: #304387)
+    - time-sharing cfq I/O scheduler
+    - manual driver binding
+    - voluntary preemption
+    - user-space I/O initiation for InfiniBand
+    - new speedy DES (crypto) implementation
+    - uml "almost-skas" mode support
+    - 250 HZ default (closes: #320366)
+    - fixes all over (alsa, archs, ide, input, ntfs, scsi, swsusp, usb, ..)
+    - orinoco driver updates (closes: #291684)
+    - md, dm updates (closes: #317787)
+
+  [ Frederik Schüler ]
+  * [amd64] Added class and longclass descriptions for amd64 flavours.
+  * [amd64] add amd64-tlb-flush-sigsegv-fix.patch: disable tlb flush
+    filtering on smp systems to workaround processor errata.
+  * backport kernel-api-documentation-generation-fix.diff from git to fix
+    documentation build.
+  * Added patch-2.6.13.1:
+    - raw_sendmsg DoS (CAN-2005-2492)
+    - 32bit sendmsg() flaw (CAN-2005-2490)
+    - Reassembly trim not clearing CHECKSUM_HW
+    - Use SA_SHIRQ in sparc specific code.
+    - Fix boundary check in standard multi-block cipher processors
+    - 2.6.13 breaks libpcap (and tcpdump)
+    - x86: pci_assign_unassigned_resources() update
+    - Fix PCI ROM mapping
+    - aacraid: 2.6.13 aacraid bad BUG_ON fix
+    - Kconfig: saa7134-dvb must select tda1004x
+
+  [ Simon Horman ]
+  * Disable BSDv3 accounting on hppa and alpha, it was already
+    disabled on all other architectures. Also unify BSD accounting
+    config into top level config, rather than per flavour configs.
+  * [SECURITY] The seq_file memory leak fix included in 2.6.12-6
+    as part of upstream's 2.6.12.6 patchset is now CAN-2005-2800.
+
+  [ Jurij Smakov, Simon Horman ]
+  * Ensure that only one kernel-manual/linux-manual package can
+    be installed at a time to avoid file conflicts. (closes: #320042)
+
+  [ Bastian Blank ]
+  * Move audit, preempt and security settings to core config file.
+  * Fix powerpc configuration.
+  * Add debian version information to kernel version string.
+  * Drop coreutils | fileutils dependencies.
+  * Drop modular-vesafb patch. (closes: #222374, #289810)
+
+  [ Christian T. Steigies ]
+  * update m68k.diff for linux-2.6.13
+  * add m68k-42_dma.patch and m68k-sonic.patch that will be in upstream 2.6.14
+    (which makes sun3 build fail, needs fixing)
+
+  [ maximilian attems ]
+  * Drop drivers-add-scsi_changer.patch (merged)
+  * Drop drivers-ide-dma-blacklist-toshiba.patch (merged)
+  * Drop drivers-ide-__devinit.patch (merged)
+  * Added patch-2.6.13.2:
+    - USB: ftdi_sio: custom baud rate fix
+    - Fix up more strange byte writes to the PCI_ROM_ADDRESS config word
+    - Fix MPOL_F_VERIFY
+    - jfs: jfs_delete_inode must call clear_inode
+    - Fix DHCP + MASQUERADE problem
+    - Sun HME: enable and map PCI ROM properly
+    - Sun GEM ethernet: enable and map PCI ROM properly
+    - hpt366: write the full 4 bytes of ROM address, not just low 1 byte
+    - forcedeth: Initialize link settings in every nv_open()
+    - Lost sockfd_put() in routing_ioctl()
+    - lost fput in 32bit ioctl on x86-64
+  * Added patch-2.6.13.3:
+    - Fix fs/exec.c:788 (de_thread()) BUG_ON
+    - Don't over-clamp window in tcp_clamp_window()
+    - fix IPv6 per-socket multicast filtering in exact-match case
+    - yenta oops fix
+    - ipvs: ip_vs_ftp breaks connections using persistence
+    - uml - Fix x86_64 page leak
+    - skge: set mac address oops with bonding
+    - tcp: set default congestion control correctly for incoming connections
+
+  [ Sven Luther ]
+  * [powerpc] Added hotplug support to the mv643xx_eth driver :
+      powerpc-mv643xx-hotplug-support.patch
+    thanks go to Nicolas Det for providing the patch.
+  * [powerpc] Modified a couple of configuration options for the powerpc64
+    flavour, fixes and enhances Apple G5 support (Closes: #323724, #328324)
+  * [powerpc] Added powerpc-miboot flavour to use exclusively with oldworld
+    powermac miboot floppies for debian-installer.
+  * [powerpc] Checked upgraded version of the apus patches, separated them in
+    a part which is safe to apply, and one which needs checking, and is thus
+    not applied yet.
+
+  [ Kyle McMartin ]
+  * [hppa] Update hppa.diff to 2.6.13-pa4.
+  * [hppa] Add space register fix to pacache.S to hppa.diff.
+
+  [ dann frazier ]
+  * Add a note to README.Debian that explains where users can find the .config
+    files used to generate the linux-image packages.  Closes: #316809
+  * [ia64] Workaround #325070 until upstream works out an acceptable solution.
+    This bug breaks module loading on non-SMP ia64 kernels.  The workaround
+    is to temporarily use an SMP config for the non-SMP kernels.  (Note that
+    John Wright is running benchmarks to determine the overhead of running
+    an SMP kernel on UP systems to help decide if this should be a
+    permanent change).
+  * [ia64] Update arch/ia64/config for 2.6.13
+
+ -- Simon Horman <horms@debian.org>  Thu,  6 Oct 2005 15:45:21 +0900
+
+linux-2.6 (2.6.12-6) unstable; urgency=high
+
+  [ Andres Salomon, Bastian Blank ]
+  * Change ATM and Classical-IP-over-ATM to be modular, instead of being
+    statically included. (closes: #323143)
+
+  [ Sven Luther ]
+  * [powerpc] powerpc-pmac-sound-check.patch: Added pmac-sound sanity check.
+  * [powerpc] powerpc-apus.patch:
+    Added preliminary apus patch to package, not applied to kernel tree yet.
+
+  [ Simon Horman ]
+  * Unset CC_OPTIMIZE_FOR_SIZE in i386 config,
+    it breaks iproute's (and other netlink users) ability
+    to set routes. (closes: #322723)
+  * Added 2.6.12.6
+    - [SECURITY: CAN-2005-2555] Restrict socket policy loading to
+      CAP_NET_ADMIN.
+    - [SECURITY] Fix DST leak in icmp_push_reply().  Possible remote
+      DoS?
+    - [SECURITY] NPTL signal delivery deadlock fix; possible local
+      DoS.
+    - fix gl_skb/skb type error in genelink driver in usbnet
+    - [SECURITY] fix a memory leak in devices seq_file implementation;
+      local DoS.
+    - [SECURITY] Fix SKB leak in ip6_input_finish(); local DoS.
+
+  [ Andres Salomon ]
+  * [hppa] enable discontiguous memory support for 32bit hppa images, so
+    they build.
+
+ -- Andres Salomon <dilinger@debian.org>  Tue, 06 Sep 2005 10:14:35 -0400
+
+linux-2.6 (2.6.12-5) unstable; urgency=low
+
+  * Change ARM to use GCC 3.3 to avoid FTBFS errors with GCC 4
+   (dann frazier)
+
+  * Remove spurious double quote character from ia64 package descriptions.
+    (dann frazier)
+
+  * Add transitional meta packages (kernel-image-2.6-*) for ia64.
+    (dann frazier)
+
+  * Change fuzz factor to 1, stricter patch appliance. (Maximilian Attems)
+
+  * Enabled CONFIG_THERM_PM72 on powerpc64 flavour. (Sven Luther)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 16 Aug 2005 21:43:31 +0200
+
+linux-2.6 (2.6.12-4) unstable; urgency=low
+
+  * Supply correct subarch values for the powerpc images.
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 15 Aug 2005 21:06:18 +0200
+
+linux-2.6 (2.6.12-3) unstable; urgency=low
+
+  * Added reference to old kernel-* package names to make
+    transition a little more obvious to end users.
+    A Dan Jacobson special. (Simon Horman) Closes: #321167
+
+  * By the time this makes it into the archive, it will
+    be handling kernel-image-2.6-* packages. (Simon Horman)
+    Closes: #321867
+
+  * Link palinfo statically on ia64. (dann frazier) (Closes: #321885)
+
+  * [hppa] :
+    - Add hppa arch specific patch.
+    - Build-Depend on binutils-hppa64 and gcc-4.0-hppa64.
+    (Kyle McMartin)
+
+  * Fix permissions in source tarball. (Bastian Blank) (Closes: #322409)
+
+  * Enable the CONFIG_IP_ADVANCED_ROUTER and related options on
+    sparc64 to sync with other architectures. (Jurij Smakov)
+    Closes: #321236
+
+  * Include all executables as well as *.sh and *.pl files found in
+    scripts directory in the headers package. (Bastian Blank)
+    Closes: #322612, #322680, #322765
+
+  * Include m68k headers into the arch-common headers package on
+    powerpc and make sure that all the directories are linked to
+    properly from the flavour-specific headers packages. (Jurij Smakov)
+    Closes: #322610
+
+  * [powerpc] Enabled the powerpc64 flavour, now that we have a real biarch
+    toolchain in sid. Many thanks go to GOTO Masanori and Matthias Klose as
+    well as any other who worked on the biarch toolchain to make this happen.
+
+  * Added 2.6.12.5 (Simon Horman)
+    - Fix BUG() is triggered by a call to set_mempolicy() with a negativ
+      first argument.
+    - [amd64] Fix a SRAT handling on systems with dual cores.
+    - [amd64] SMP timing problem
+    - [security] Zlib fixes See CAN-2005-2458, CAN-2005-2459
+      http://sources.redhat.com/ml/bug-gnu-utils/1999-06/msg00183.html
+      http://bugs.gentoo.org/show_bug.cgi
+    - Add zlib deflateBound()
+    - [security] Fix error during session join. See CAN-2005-2098
+    - [security] Fix keyring destructor. See CAN-2005-2099
+    - Module per-cpu alignment cannot always be met
+      http://www.ussg.iu.edu/hypermail/linux/kernel/0409.0/0768.html
+    Closes: #323039
+
+ -- Bastian Blank <waldi@debian.org>  Mon, 15 Aug 2005 16:42:05 +0200
+
+linux-2.6 (2.6.12-2) unstable; urgency=low
+
+  * The Kernel Team offers its condolences to the family of Jens Schmalzing
+    (jensen@debian), who died Saturday, July 30, 2005 in a tragic accident in
+    Munich.  Jens was a member of the Kernel Team, and was instrumental in
+    taking the powerpc kernel package to 2.6, as well as maintaining MOL
+    and its kernel modules.
+
+  * Add @longclass@ variable to control file autogeneration. (Andres Salomon)
+
+  * Bump build-depends on kernel-package to a fixed version (>= 9.005).
+    (Jurij Smakov, Sven Luther) (closes: #319657, #320422, #321625)
+
+  * Change default ramdisk size for sparc to 16,384K to accomodate a fatter
+    d-i initrd for netboot installs.
+    (Joshua Kwan)
+
+  * Don't build-depend on console-tools on s390. (Bastian Blank)
+
+  * Add ARM support. (Vincent Sanders)
+
+  * Add ia64 descriptions. (dann frazier)
+
+  * Strip down the scripts dir in the headers packages. (Bastian Blank)
+
+  * Add m68k support. (Christian T. Steigies)
+
+  * Added 2.6.12.4 (Frederik Schüler)
+    - Fix powernow oops on dual-core athlon
+    - Fix early vlan adding leads to not functional device
+    - sys_get_thread_area does not clear the returned argument
+    - bio_clone fix
+    - Fix possible overflow of sock->sk_policy (CAN-2005-2456)
+      (closes: #321401)
+    - Wait until all references to ip_conntrack_untracked are dropped on
+      unload
+    - Fix potential memory corruption in NAT code (aka memory NAT)
+    - Fix deadlock in ip6_queue
+    - Fix signedness issues in net/core/filter.c
+    - x86_64 memleak from malicious 32bit elf program
+    - rocket.c: Fix ldisc ref count handling
+    - kbuild: build TAGS problem with O=
+
+  * Enable CONFIG_6PACK=m for all archs (Andres Salomon)
+    (closes: #319646)
+
+  * Overhaul the generation of the control file. Now it is handled
+    by debian/bin/gencontrol.py. The debian/control target in rules
+    also fails now, since we don't want the control file generated
+    during build. Arch-specific Depends and suggests are now generated
+    correctly. (Bastian Blank) (Closes: #319896)
+
+  * [powerpc] Fixed typo which made asm-ppc and asm-ppc64 not being included
+    in the header package. (Sven Luther) (Closes: #320817)
+
+  * Added list of flavours built to common header package. (Sven Luther)
+
+ -- Bastian Blank <waldi@debian.org>  Tue, 09 Aug 2005 11:12:40 +0200
+
+linux-2.6 (2.6.12-1) unstable; urgency=low
+
+  * New upstream release:
+    - "git rocks"
+    - address space randomization
+    - conversion of ide driver code to the device model
+    - restored Philips webcam driver
+    - new Broadcom bcm5706 gigabit driver
+    - new resource limits for the audio community
+    - Multipath device mapper
+    - Intel HD Audio alsa driver
+    - fixes + arch updates..
+    - readdition of tg3 driver, as firmware license has been fixed
+
+  * Dropped the following patches:
+    - patch-2.6.11.*.patch (merged)
+    - powerpc-ppc64-ibmvscsi.patch (Christoph didn't like it, and it failed
+      to build anyways) (Sven Luther)
+    - doc-post_halloween.patch (unless someone can come up w/ a valid
+      reason for carrying around rapidly bitrotting documentation...)
+      (Andres Salomon)
+    - sparc32-hypersparc-srmmu.patch (dropped until sparc32 is working
+      again, and we can figure out whether it's necessary)
+    - fix-alpha-ext3-oops.patch (no longer needed, fixed by compiler)
+    - x86-i486_emu.patch (buggy and insecure 80486 instruction emulation
+      for 80386; we're no longer supporting this) (closes: #250468)
+    - amd64-outs.patch (according to
+      http://www.ussg.iu.edu/hypermail/linux/kernel/0502.3/1095.html, this
+      is unnecessary for us) (Andres Salomon)
+    - sparc64-rtc-mostek.patch (merged)
+    - sparc64-compat-nanoseconds.patch (merged)
+    - sparc64-sunsu-init-2.6.11.patch (merged)
+    - sunsab-uart-update-timeout.patch (merged)
+    - alpha-read-trylock.patch (different version got merged)
+    - powerpc-prep-motorola-irq-fix.patch (merged)
+    - drivers-media-video-saa7134-update.patch (merged)
+    - drivers-media-video-saa7134-update-2.patch (merged)
+    - drivers-media-video-pll-lib.patch (merged)
+    - drivers-media-video-pll-lib-2.patch (merged)
+    - drivers-media-video-tuner-update-1.patch (merged)
+    - drivers-media-video-tuner-update-2.patch (merged)
+    - drivers-media-video-v4l-mpeg-support.patch (merged)
+    - drivers-media-video-mt352-update.patch (merged)
+    - arch-ppc64-hugepage-aio-panic.patch (merged)
+    - drivers-input-serio-nmouse.patch (merged)
+    - sparc64-sb1500-clock-2.6.patch (merged)
+    - docbook-allow-preprocessor-directives-... (merged)
+    - docbook-fix-function-parameter-descriptin-in-fbmem.patch (merged)
+    - docbook-move-kernel-doc-comment-next-to-function.patch (merged)
+    - powerpc-therm-adt746x-new-i2c-fix.patch (merged)
+    - powerpc-mv643xx-enet.patch (merged)
+    - powerpc-mv643xx-eth-pegasos.patch (merged)
+    - powerpc-pmac-agp-sleep.patch (merged)
+    - drivers-input-serio-8042-resume.patch (merged)
+
+  * Premiere of the common-source kernel package
+    (Jurij Smakov, Andres Salomon)
+    - build all architectures out of kernel source package
+    - rename source and binary packages
+    - create a common config for different architectures, and management
+      tools to allow for easier modification of config options
+    - drop default configs, autogenerate them instead; requires
+      kernel-package >= 9.002.
+
+  * Add 2.6.12.1 (Maximilian Attems)
+    - Clean up subthread exec (CAN-2005-1913)
+    - ia64 ptrace + sigrestore_context (CAN-2005-1761)
+
+  * Add 2.6.12.2 (Frederik Schüler)
+    - Fix two socket hashing bugs.
+    -  ACPI: Make sure we call acpi_register_gsi() even for default PCI
+       interrupt assignment
+    - Add "memory" clobbers to the x86 inline asm of strncmp and friends
+    - e1000: fix spinlock bug
+    - fix remap_pte_range BUG
+    - Fix typo in drivers/pci/pci-driver.c
+
+  * Add 2.6.12.3 (Joshua Kwan)
+    - Fix semaphore handling in __unregister_chrdev
+    - Fix TT mode in UML.
+    - Check for a null return in tty_ldisc_ref.
+    - v4l: cx88 hue offset fix
+    - Fix 8139cp breakage that occurs with tpm driver.
+    - Fix the 6pack driver in SMP environments.
+    - Switch to spinlocks in the shaper driver.
+    - ppc32: stop misusing NTP's time_offset value
+    - netfilter: go back to dropping conntrack references manually
+    - ACPI: don't accept 0 as a PCI IRQ.
+
+  * Enable CONFIG_SCSI_INITIO. (Maximilian Attems) (closes: #318121)
+
+  * [powerpc] :
+    - Added powerpc-mkvmlinuz-support patch which allows, together with
+      kernel-package 9.0002 to add mkvmlinuz support to hand built packages.
+    - Removed powerpc-ppc64-ibmvscsi.patch, FTBFS, and Christoph doesn't like
+      it and thinks it is not needed.
+    - Disabled swim3 on powerpc-smp, FTBFS.
+    - Disabled software-suspend on powerpc-smp, FTBFS, amd64/i386 only smp code.
+    - Rediffed and readded the G4 L2 hardware flush assist patch from Jacob Pan.
+    (Sven Luther)
+
+  * [sparc]
+    - Drop sparc32 flavour for now. sparc32 kernel is currently in the
+      category "too buggy for us to support". In spite of numerous efforts
+      I still see occasional random filesystem corruptions in my tests.
+      That does NOT mean that we are dropping sparc32 support, we will
+      work with upstream trying to solve these problems for the next
+      kernel release. Those interested in helping/testing are encouraged
+      to subscribe to debian-sparc mailing list.
+      (Jurij Smakov)
+
+  * [alpha]
+    - Renamed resulting binary packages for alpha, kernel-image-x.y.z-generic
+      wasn't a generic kernel, it was a generic kernel for alpha machines, so
+      we're now using linux-image-x.y.z-alpha-generic (and of course, the same
+      change for the smp kernel-image). This change was postponed after the
+      sarge release. (closes: #260003)
+    (Norbert Tretkowski)
+
+  * [amd64]
+    - Now using the default compiler (gcc-4.0), thus we get rid of the
+      annoying MAKEFLAGS="CC=gcc-3.4" make-kpkg... invocation for third-party
+      modules.
+      This release lacks 64bit kernels for i386 userland; support will be
+      added in a later release as soon as the toolchain has stabilized again.
+      (Frederik Schüler)
+
+ -- Andres Salomon <dilinger@debian.org>  Wed, 20 Jul 2005 17:16:04 -0400
+
diff --git a/debian/config/alpha/config b/debian/config/alpha/config
new file mode 100644
index 000000000000..7b649fa78d8e
--- /dev/null
+++ b/debian/config/alpha/config
@@ -0,0 +1,954 @@
+##
+## file: arch/alpha/Kconfig
+##
+## choice: Alpha system type
+CONFIG_ALPHA_GENERIC=y
+# CONFIG_ALPHA_ALCOR is not set
+# CONFIG_ALPHA_XL is not set
+# CONFIG_ALPHA_BOOK1 is not set
+# CONFIG_ALPHA_AVANTI_CH is not set
+# CONFIG_ALPHA_CABRIOLET is not set
+# CONFIG_ALPHA_DP264 is not set
+# CONFIG_ALPHA_EB164 is not set
+# CONFIG_ALPHA_EB64P_CH is not set
+# CONFIG_ALPHA_EB66 is not set
+# CONFIG_ALPHA_EB66P is not set
+# CONFIG_ALPHA_EIGER is not set
+# CONFIG_ALPHA_JENSEN is not set
+# CONFIG_ALPHA_LX164 is not set
+# CONFIG_ALPHA_LYNX is not set
+# CONFIG_ALPHA_MARVEL is not set
+# CONFIG_ALPHA_MIATA is not set
+# CONFIG_ALPHA_MIKASA is not set
+# CONFIG_ALPHA_NAUTILUS is not set
+# CONFIG_ALPHA_NONAME_CH is not set
+# CONFIG_ALPHA_NORITAKE is not set
+# CONFIG_ALPHA_PC164 is not set
+# CONFIG_ALPHA_P2K is not set
+# CONFIG_ALPHA_RAWHIDE is not set
+# CONFIG_ALPHA_RUFFIAN is not set
+# CONFIG_ALPHA_RX164 is not set
+# CONFIG_ALPHA_SX164 is not set
+# CONFIG_ALPHA_SABLE is not set
+# CONFIG_ALPHA_SHARK is not set
+# CONFIG_ALPHA_TAKARA is not set
+# CONFIG_ALPHA_TITAN is not set
+# CONFIG_ALPHA_WILDFIRE is not set
+## end choice
+# CONFIG_VERBOSE_MCHECK is not set
+CONFIG_SRM_ENV=m
+
+##
+## file: arch/alpha/Kconfig.debug
+##
+CONFIG_MATHEMU=y
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_ACORN_PARTITION=y
+# CONFIG_ACORN_PARTITION_CUMANA is not set
+# CONFIG_ACORN_PARTITION_EESOX is not set
+CONFIG_ACORN_PARTITION_ICS=y
+# CONFIG_ACORN_PARTITION_ADFS is not set
+# CONFIG_ACORN_PARTITION_POWERTEC is not set
+CONFIG_ACORN_PARTITION_RISCIX=y
+CONFIG_OSF_PARTITION=y
+CONFIG_AMIGA_PARTITION=y
+CONFIG_ATARI_PARTITION=y
+CONFIG_MAC_PARTITION=y
+CONFIG_BSD_DISKLABEL=y
+CONFIG_MINIX_SUBPARTITION=y
+CONFIG_SOLARIS_X86_PARTITION=y
+CONFIG_UNIXWARE_DISKLABEL=y
+CONFIG_LDM_PARTITION=y
+# CONFIG_LDM_DEBUG is not set
+CONFIG_SGI_PARTITION=y
+CONFIG_ULTRIX_PARTITION=y
+CONFIG_SUN_PARTITION=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_ALI=m
+CONFIG_PATA_AMD=m
+CONFIG_PATA_CS5520=m
+CONFIG_PATA_CYPRESS=m
+CONFIG_PATA_EFAR=m
+CONFIG_PATA_HPT366=m
+CONFIG_PATA_HPT37X=m
+CONFIG_PATA_NS87415=m
+CONFIG_PATA_OLDPIIX=m
+CONFIG_PATA_PDC2027X=m
+CONFIG_PATA_PDC_OLD=m
+CONFIG_PATA_SC1200=m
+CONFIG_PATA_SERVERWORKS=m
+CONFIG_PATA_SIL680=m
+CONFIG_PATA_TRIFLEX=m
+CONFIG_PATA_VIA=m
+CONFIG_PATA_ISAPNP=y
+CONFIG_PATA_MPIIX=m
+CONFIG_PATA_OPTI=m
+CONFIG_PATA_LEGACY=m
+
+##
+## file: drivers/atm/Kconfig
+##
+CONFIG_ATM_DRIVERS=y
+CONFIG_ATM_TCP=m
+CONFIG_ATM_LANAI=m
+CONFIG_ATM_ENI=m
+# CONFIG_ATM_ENI_DEBUG is not set
+# CONFIG_ATM_ENI_TUNE_BURST is not set
+CONFIG_ATM_FIRESTREAM=m
+CONFIG_ATM_ZATM=m
+# CONFIG_ATM_ZATM_DEBUG is not set
+CONFIG_ATM_IDT77252=m
+# CONFIG_ATM_IDT77252_DEBUG is not set
+# CONFIG_ATM_IDT77252_RCV_ALL is not set
+CONFIG_ATM_AMBASSADOR=m
+# CONFIG_ATM_AMBASSADOR_DEBUG is not set
+CONFIG_ATM_HORIZON=m
+# CONFIG_ATM_HORIZON_DEBUG is not set
+# CONFIG_ATM_FORE200E_USE_TASKLET is not set
+CONFIG_ATM_FORE200E_TX_RETRY=16
+CONFIG_ATM_FORE200E_DEBUG=0
+CONFIG_ATM_HE=m
+CONFIG_ATM_HE_USE_SUNI=y
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_BLK_DEV_FD=m
+CONFIG_BLK_DEV_SX8=m
+CONFIG_CDROM_PKTCDVD=m
+CONFIG_CDROM_PKTCDVD_BUFFERS=8
+CONFIG_CDROM_PKTCDVD_WCACHE=y
+
+##
+## file: drivers/bluetooth/Kconfig
+##
+CONFIG_BT_HCIUART=m
+CONFIG_BT_HCIUART_H4=y
+CONFIG_BT_HCIUART_BCSP=y
+CONFIG_BT_HCIBCM203X=m
+CONFIG_BT_HCIBPA10X=m
+CONFIG_BT_HCIBFUSB=m
+CONFIG_BT_HCIDTL1=m
+CONFIG_BT_HCIBT3C=m
+CONFIG_BT_HCIBLUECARD=m
+CONFIG_BT_HCIVHCI=m
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_PRINTER=m
+# CONFIG_LP_CONSOLE is not set
+CONFIG_PPDEV=m
+CONFIG_DTLK=m
+CONFIG_APPLICOM=m
+
+##
+## file: drivers/char/agp/Kconfig
+##
+#. Workaround
+CONFIG_AGP=y
+#. Workaround
+CONFIG_AGP_ALPHA_CORE=y
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+CONFIG_IPMI_HANDLER=m
+# CONFIG_IPMI_PANIC_EVENT is not set
+CONFIG_IPMI_DEVICE_INTERFACE=m
+CONFIG_IPMI_SI=m
+CONFIG_IPMI_WATCHDOG=m
+CONFIG_IPMI_POWEROFF=m
+
+##
+## file: drivers/eisa/Kconfig
+##
+CONFIG_EISA=y
+CONFIG_EISA_PCI_EISA=y
+CONFIG_EISA_VIRTUAL_ROOT=y
+CONFIG_EISA_NAMES=y
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+CONFIG_DRM_RADEON=m
+
+##
+## file: drivers/gpu/drm/i2c/Kconfig
+##
+CONFIG_DRM_I2C_CH7006=m
+CONFIG_DRM_I2C_SIL164=m
+
+##
+## file: drivers/gpu/drm/nouveau/Kconfig
+##
+CONFIG_DRM_NOUVEAU=m
+# CONFIG_DRM_NOUVEAU_BACKLIGHT is not set
+
+##
+## file: drivers/hid/usbhid/Kconfig
+##
+CONFIG_USB_HID=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_ADM1021=m
+CONFIG_SENSORS_ADM1025=m
+CONFIG_SENSORS_ADM1026=m
+CONFIG_SENSORS_ADM1031=m
+CONFIG_SENSORS_ASB100=m
+CONFIG_SENSORS_DS1621=m
+CONFIG_SENSORS_F71805F=m
+CONFIG_SENSORS_GL518SM=m
+CONFIG_SENSORS_GL520SM=m
+CONFIG_SENSORS_IT87=m
+CONFIG_SENSORS_MAX1619=m
+CONFIG_SENSORS_LM63=m
+CONFIG_SENSORS_LM75=m
+CONFIG_SENSORS_LM77=m
+CONFIG_SENSORS_LM78=m
+CONFIG_SENSORS_LM80=m
+CONFIG_SENSORS_LM83=m
+CONFIG_SENSORS_LM85=m
+CONFIG_SENSORS_LM87=m
+CONFIG_SENSORS_LM90=m
+CONFIG_SENSORS_LM92=m
+CONFIG_SENSORS_PC87360=m
+CONFIG_SENSORS_PCF8591=m
+CONFIG_SENSORS_SIS5595=m
+CONFIG_SENSORS_SMSC47M1=m
+CONFIG_SENSORS_SMSC47B397=m
+CONFIG_SENSORS_VIA686A=m
+CONFIG_SENSORS_W83781D=m
+CONFIG_SENSORS_W83L785TS=m
+CONFIG_SENSORS_W83627HF=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=m
+CONFIG_I2C_STUB=m
+# CONFIG_I2C_DEBUG_CORE is not set
+# CONFIG_I2C_DEBUG_ALGO is not set
+# CONFIG_I2C_DEBUG_BUS is not set
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_ALI1535=m
+CONFIG_I2C_ALI1563=m
+CONFIG_I2C_ALI15X3=m
+CONFIG_I2C_AMD756=m
+# CONFIG_I2C_AMD756_S4882 is not set
+CONFIG_I2C_AMD8111=m
+CONFIG_I2C_I801=m
+CONFIG_I2C_PIIX4=m
+CONFIG_I2C_NFORCE2=m
+CONFIG_I2C_SIS5595=m
+CONFIG_I2C_SIS630=m
+CONFIG_I2C_SIS96X=m
+CONFIG_I2C_VIA=m
+CONFIG_I2C_VIAPRO=m
+CONFIG_I2C_PARPORT=m
+CONFIG_I2C_ELEKTOR=m
+CONFIG_I2C_PCA_ISA=m
+CONFIG_SCx200_ACB=m
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+CONFIG_GAMEPORT=m
+CONFIG_GAMEPORT_NS558=m
+CONFIG_GAMEPORT_L4=m
+CONFIG_GAMEPORT_EMU10K1=m
+CONFIG_GAMEPORT_FM801=m
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+CONFIG_INPUT_JOYSTICK=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+CONFIG_KEYBOARD_ATKBD=y
+CONFIG_KEYBOARD_LKKBD=m
+CONFIG_KEYBOARD_NEWTON=m
+CONFIG_KEYBOARD_SUNKBD=m
+CONFIG_KEYBOARD_XTKBD=m
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MISC=y
+CONFIG_INPUT_PCSPKR=m
+CONFIG_INPUT_UINPUT=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_INPUT_MOUSE=y
+CONFIG_MOUSE_PS2=m
+CONFIG_MOUSE_SERIAL=m
+CONFIG_MOUSE_INPORT=m
+# CONFIG_MOUSE_ATIXL is not set
+CONFIG_MOUSE_LOGIBM=m
+CONFIG_MOUSE_PC110PAD=m
+CONFIG_MOUSE_VSXXXAA=m
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO=y
+CONFIG_SERIO_I8042=y
+CONFIG_SERIO_SERPORT=m
+CONFIG_SERIO_PARKBD=m
+CONFIG_SERIO_PCIPS2=m
+CONFIG_SERIO_LIBPS2=y
+CONFIG_SERIO_RAW=m
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+CONFIG_INPUT_TOUCHSCREEN=y
+
+##
+## file: drivers/isdn/Kconfig
+##
+CONFIG_ISDN=y
+
+##
+## file: drivers/media/radio/Kconfig
+##
+CONFIG_USB_DSBR=m
+CONFIG_RADIO_MAXIRADIO=m
+CONFIG_V4L_RADIO_ISA_DRIVERS=y
+CONFIG_RADIO_CADET=m
+CONFIG_RADIO_RTRACK=m
+CONFIG_RADIO_RTRACK2=m
+CONFIG_RADIO_AZTECH=m
+CONFIG_RADIO_GEMTEK=m
+CONFIG_RADIO_SF16FMI=m
+CONFIG_RADIO_SF16FMR2=m
+CONFIG_RADIO_TERRATEC=m
+CONFIG_RADIO_TRUST=m
+CONFIG_RADIO_TYPHOON=m
+CONFIG_RADIO_ZOLTRIX=m
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=m
+
+##
+## file: drivers/mmc/core/Kconfig
+##
+CONFIG_MMC_BLOCK=m
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+# CONFIG_MMC_DEBUG is not set
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_FTL=m
+CONFIG_NFTL=m
+CONFIG_NFTL_RW=y
+CONFIG_INFTL=m
+
+##
+## file: drivers/mtd/chips/Kconfig
+##
+CONFIG_MTD_CFI=m
+CONFIG_MTD_JEDECPROBE=m
+CONFIG_MTD_CFI_ADV_OPTIONS=y
+## choice: Flash cmd/query data swapping
+# CONFIG_MTD_CFI_NOSWAP is not set
+CONFIG_MTD_CFI_BE_BYTE_SWAP=y
+# CONFIG_MTD_CFI_LE_BYTE_SWAP is not set
+## end choice
+CONFIG_MTD_CFI_GEOMETRY=y
+CONFIG_MTD_MAP_BANK_WIDTH_1=y
+CONFIG_MTD_MAP_BANK_WIDTH_2=y
+CONFIG_MTD_MAP_BANK_WIDTH_4=y
+CONFIG_MTD_MAP_BANK_WIDTH_8=y
+CONFIG_MTD_MAP_BANK_WIDTH_16=y
+CONFIG_MTD_MAP_BANK_WIDTH_32=y
+CONFIG_MTD_CFI_I1=y
+CONFIG_MTD_CFI_I2=y
+CONFIG_MTD_CFI_I4=y
+CONFIG_MTD_CFI_I8=y
+# CONFIG_MTD_OTP is not set
+CONFIG_MTD_CFI_INTELEXT=m
+CONFIG_MTD_CFI_AMDSTD=m
+CONFIG_MTD_CFI_STAA=m
+CONFIG_MTD_RAM=m
+CONFIG_MTD_ROM=m
+CONFIG_MTD_ABSENT=m
+
+##
+## file: drivers/mtd/devices/Kconfig
+##
+CONFIG_MTD_PMC551=m
+# CONFIG_MTD_PMC551_BUGFIX is not set
+# CONFIG_MTD_PMC551_DEBUG is not set
+CONFIG_MTD_SLRAM=m
+CONFIG_MTD_PHRAM=m
+CONFIG_MTD_MTDRAM=m
+CONFIG_MTDRAM_TOTAL_SIZE=4096
+CONFIG_MTDRAM_ERASE_SIZE=128
+CONFIG_MTD_BLOCK2MTD=m
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+CONFIG_MTD_COMPLEX_MAPPINGS=y
+CONFIG_MTD_PHYSMAP=m
+CONFIG_MTD_PHYSMAP_START=0x8000000
+CONFIG_MTD_PHYSMAP_LEN=0x4000000
+CONFIG_MTD_PHYSMAP_BANKWIDTH=2
+CONFIG_MTD_PCI=m
+
+##
+## file: drivers/mtd/nand/raw/Kconfig
+##
+CONFIG_MTD_RAW_NAND=m
+# CONFIG_MTD_NAND_DISKONCHIP is not set
+
+##
+## file: drivers/mtd/parsers/Kconfig
+##
+CONFIG_MTD_CMDLINE_PARTS=y
+CONFIG_MTD_REDBOOT_PARTS=y
+CONFIG_MTD_REDBOOT_DIRECTORY_BLOCK=-1
+CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED=y
+CONFIG_MTD_REDBOOT_PARTS_READONLY=y
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_NET_FC=y
+CONFIG_NET_SB1000=m
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+CONFIG_ARCNET=m
+CONFIG_ARCNET_1201=m
+CONFIG_ARCNET_1051=m
+CONFIG_ARCNET_RAW=m
+CONFIG_ARCNET_CAP=m
+CONFIG_ARCNET_COM90xx=m
+CONFIG_ARCNET_COM90xxIO=m
+CONFIG_ARCNET_RIM_I=m
+CONFIG_ARCNET_COM20020=m
+CONFIG_ARCNET_COM20020_ISA=m
+CONFIG_ARCNET_COM20020_PCI=m
+CONFIG_ARCNET_COM20020_CS=m
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+CONFIG_FEALNX=m
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_NET_VENDOR_3COM=y
+CONFIG_EL3=m
+CONFIG_3C515=m
+CONFIG_PCMCIA_3C574=m
+CONFIG_PCMCIA_3C589=m
+CONFIG_VORTEX=m
+CONFIG_TYPHOON=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_PCMCIA_AXNET=m
+CONFIG_NE2000=m
+CONFIG_NE2K_PCI=m
+CONFIG_PCMCIA_PCNET=m
+CONFIG_ULTRA=m
+CONFIG_WD80x3=m
+
+##
+## file: drivers/net/ethernet/adaptec/Kconfig
+##
+CONFIG_ADAPTEC_STARFIRE=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_AMD8111_ETH=m
+CONFIG_LANCE=m
+CONFIG_PCMCIA_NMCLAN=m
+CONFIG_NI65=m
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+CONFIG_B44=m
+
+##
+## file: drivers/net/ethernet/cirrus/Kconfig
+##
+CONFIG_CS89x0_ISA=m
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_NET_TULIP=y
+CONFIG_DE2104X=m
+CONFIG_TULIP=m
+# CONFIG_TULIP_MWI is not set
+# CONFIG_TULIP_MMIO is not set
+CONFIG_DE4X5=m
+CONFIG_WINBOND_840=m
+CONFIG_DM9102=m
+CONFIG_PCMCIA_XIRCOM=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_SUNDANCE=m
+# CONFIG_SUNDANCE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/fujitsu/Kconfig
+##
+CONFIG_PCMCIA_FMVJ18X=m
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NATSEMI=m
+
+##
+## file: drivers/net/ethernet/nvidia/Kconfig
+##
+CONFIG_FORCEDETH=m
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_8139CP=m
+CONFIG_8139TOO=m
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+CONFIG_SIS900=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_SMC9194=m
+CONFIG_PCMCIA_SMC91C92=m
+CONFIG_EPIC100=m
+
+##
+## file: drivers/net/ethernet/sun/Kconfig
+##
+CONFIG_HAPPYMEAL=m
+CONFIG_SUNGEM=m
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+CONFIG_VIA_RHINE=m
+# CONFIG_VIA_RHINE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/xircom/Kconfig
+##
+CONFIG_PCMCIA_XIRC2PS=m
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+CONFIG_FDDI=y
+CONFIG_SKFP=m
+
+##
+## file: drivers/net/hippi/Kconfig
+##
+CONFIG_HIPPI=y
+CONFIG_ROADRUNNER=m
+# CONFIG_ROADRUNNER_LARGE_RINGS is not set
+
+##
+## file: drivers/net/plip/Kconfig
+##
+CONFIG_PLIP=m
+
+##
+## file: drivers/net/wan/Kconfig
+##
+CONFIG_WAN=y
+CONFIG_HOSTESS_SV11=m
+CONFIG_COSA=m
+CONFIG_LANMEDIA=m
+CONFIG_SEALEVEL_4021=m
+CONFIG_PCI200SYN=m
+CONFIG_WANXL=m
+CONFIG_N2=m
+CONFIG_C101=m
+CONFIG_FARSYNC=m
+
+##
+## file: drivers/net/wireless/Kconfig
+##
+CONFIG_PCMCIA_RAYCS=m
+CONFIG_PCMCIA_WL3501=m
+
+##
+## file: drivers/net/wireless/atmel/Kconfig
+##
+CONFIG_ATMEL=m
+CONFIG_PCI_ATMEL=m
+CONFIG_PCMCIA_ATMEL=m
+
+##
+## file: drivers/net/wireless/cisco/Kconfig
+##
+CONFIG_AIRO_CS=m
+
+##
+## file: drivers/net/wireless/intel/ipw2x00/Kconfig
+##
+# CONFIG_IPW2100 is not set
+
+##
+## file: drivers/net/wireless/intersil/orinoco/Kconfig
+##
+CONFIG_HERMES=m
+CONFIG_PLX_HERMES=m
+CONFIG_TMD_HERMES=m
+CONFIG_PCI_HERMES=m
+CONFIG_PCMCIA_HERMES=m
+
+##
+## file: drivers/net/wireless/marvell/mwifiex/Kconfig
+##
+CONFIG_MWIFIEX=m
+CONFIG_MWIFIEX_SDIO=m
+
+##
+## file: drivers/net/wireless/zydas/Kconfig
+##
+CONFIG_USB_ZD1201=m
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+CONFIG_PCCARD=m
+CONFIG_PCMCIA=m
+CONFIG_CARDBUS=y
+CONFIG_YENTA=m
+CONFIG_PD6729=m
+CONFIG_I82092=m
+CONFIG_I82365=m
+CONFIG_TCIC=m
+CONFIG_PCMCIA_DEBUG=y
+
+##
+## file: drivers/pnp/Kconfig
+##
+CONFIG_PNP=y
+
+##
+## file: drivers/pnp/isapnp/Kconfig
+##
+CONFIG_ISAPNP=y
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_CLASS=y
+CONFIG_RTC_DRV_ALPHA=y
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_ARCMSR=m
+CONFIG_SCSI_BUSLOGIC=m
+CONFIG_SCSI_MYRB=m
+CONFIG_SCSI_MYRS=m
+CONFIG_SCSI_DMX3191D=m
+CONFIG_SCSI_GENERIC_NCR5380=m
+CONFIG_SCSI_IPS=m
+CONFIG_SCSI_INITIO=m
+CONFIG_SCSI_INIA100=m
+CONFIG_SCSI_IZIP_EPP16=y
+CONFIG_SCSI_IZIP_SLOW_CTR=y
+CONFIG_SCSI_SYM53C8XX_DMA_ADDRESSING_MODE=1
+CONFIG_SCSI_SYM53C8XX_DEFAULT_TAGS=16
+CONFIG_SCSI_SYM53C8XX_MAX_TAGS=64
+CONFIG_SCSI_IPR=m
+CONFIG_SCSI_IPR_TRACE=y
+CONFIG_SCSI_IPR_DUMP=y
+CONFIG_SCSI_QLOGIC_FAS=m
+CONFIG_SCSI_QLOGIC_1280=m
+CONFIG_SCSI_SIM710=m
+CONFIG_SCSI_DC395x=m
+CONFIG_SCSI_AM53C974=m
+CONFIG_SCSI_DEBUG=m
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic7xxx
+##
+CONFIG_AIC7XXX_CMDS_PER_DEVICE=8
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+CONFIG_MEGARAID_NEWGEN=y
+CONFIG_MEGARAID_MM=m
+CONFIG_MEGARAID_MAILBOX=m
+CONFIG_MEGARAID_LEGACY=m
+
+##
+## file: drivers/scsi/pcmcia/Kconfig
+##
+CONFIG_PCMCIA_QLOGIC=m
+CONFIG_PCMCIA_SYM53C500=m
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_VT=y
+CONFIG_VT_CONSOLE=y
+# CONFIG_SERIAL_NONSTANDARD is not set
+CONFIG_MOXA_INTELLIO=m
+CONFIG_N_HDLC=m
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_JSM=m
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_CS=m
+CONFIG_SERIAL_8250_NR_UARTS=32
+CONFIG_SERIAL_8250_RUNTIME_UARTS=4
+CONFIG_SERIAL_8250_EXTENDED=y
+CONFIG_SERIAL_8250_MANY_PORTS=y
+CONFIG_SERIAL_8250_SHARE_IRQ=y
+# CONFIG_SERIAL_8250_DETECT_IRQ is not set
+CONFIG_SERIAL_8250_RSA=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=m
+CONFIG_USB_USS720=m
+
+##
+## file: drivers/usb/atm/Kconfig
+##
+CONFIG_USB_ATM=m
+CONFIG_USB_SPEEDTOUCH=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_OHCI_HCD=m
+CONFIG_USB_UHCI_HCD=m
+CONFIG_USB_SL811_HCD=m
+CONFIG_USB_SL811_CS=m
+
+##
+## file: drivers/video/backlight/Kconfig
+##
+CONFIG_LCD_CLASS_DEVICE=m
+
+##
+## file: drivers/video/console/Kconfig
+##
+CONFIG_VGA_CONSOLE=y
+CONFIG_MDA_CONSOLE=m
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_MODE_HELPERS=y
+CONFIG_FB_TILEBLITTING=y
+CONFIG_FB_CIRRUS=m
+CONFIG_FB_PM2=m
+CONFIG_FB_PM2_FIFO_DISCONNECT=y
+CONFIG_FB_CYBER2000=m
+# CONFIG_FB_ASILIANT is not set
+# CONFIG_FB_IMSTT is not set
+CONFIG_FB_TGA=m
+CONFIG_FB_S1D13XXX=m
+CONFIG_FB_MATROX=m
+CONFIG_FB_MATROX_MILLENIUM=y
+CONFIG_FB_MATROX_MYSTIQUE=y
+CONFIG_FB_MATROX_G=y
+CONFIG_FB_MATROX_I2C=m
+CONFIG_FB_MATROX_MAVEN=m
+CONFIG_FB_RADEON=m
+CONFIG_FB_RADEON_I2C=y
+# CONFIG_FB_RADEON_DEBUG is not set
+CONFIG_FB_ATY128=m
+CONFIG_FB_ATY=m
+CONFIG_FB_ATY_CT=y
+# CONFIG_FB_ATY_GENERIC_LCD is not set
+CONFIG_FB_ATY_GX=y
+CONFIG_FB_SAVAGE=m
+# CONFIG_FB_SAVAGE_I2C is not set
+# CONFIG_FB_SAVAGE_ACCEL is not set
+CONFIG_FB_SIS=m
+CONFIG_FB_SIS_300=y
+CONFIG_FB_SIS_315=y
+CONFIG_FB_NEOMAGIC=m
+CONFIG_FB_KYRO=m
+CONFIG_FB_VOODOO1=m
+CONFIG_FB_TRIDENT=m
+CONFIG_FB_VIRTUAL=m
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_PCWATCHDOG=m
+CONFIG_MIXCOMWD=m
+CONFIG_WDT=m
+CONFIG_PCIPCWATCHDOG=m
+CONFIG_WDTPCI=m
+CONFIG_USBPCWATCHDOG=m
+
+##
+## file: init/Kconfig
+##
+CONFIG_USELIB=y
+#. TODO
+# CONFIG_AUDIT is not set
+CONFIG_SYSFS_SYSCALL=y
+
+##
+## file: lib/Kconfig
+##
+#. TODO
+CONFIG_CRC32=m
+
+##
+## file: net/decnet/Kconfig
+##
+CONFIG_DECNET=m
+# CONFIG_DECNET_ROUTER is not set
+
+##
+## file: net/lapb/Kconfig
+##
+CONFIG_LAPB=m
+
+##
+## file: sound/drivers/Kconfig
+##
+CONFIG_SND_DUMMY=m
+CONFIG_SND_VIRMIDI=m
+CONFIG_SND_MTPAV=m
+CONFIG_SND_SERIAL_U16550=m
+CONFIG_SND_MPU401=m
+
+##
+## file: sound/isa/Kconfig
+##
+CONFIG_SND_ADLIB=m
+CONFIG_SND_AD1816A=m
+CONFIG_SND_AD1848=m
+CONFIG_SND_ALS100=m
+CONFIG_SND_AZT2320=m
+CONFIG_SND_CMI8330=m
+CONFIG_SND_CS4231=m
+CONFIG_SND_CS4236=m
+CONFIG_SND_ES1688=m
+CONFIG_SND_ES18XX=m
+CONFIG_SND_GUSCLASSIC=m
+CONFIG_SND_GUSEXTREME=m
+CONFIG_SND_GUSMAX=m
+CONFIG_SND_INTERWAVE=m
+CONFIG_SND_INTERWAVE_STB=m
+CONFIG_SND_OPL3SA2=m
+CONFIG_SND_OPTI92X_AD1848=m
+CONFIG_SND_OPTI92X_CS4231=m
+CONFIG_SND_OPTI93X=m
+CONFIG_SND_MIRO=m
+CONFIG_SND_SB8=m
+CONFIG_SND_SB16=m
+CONFIG_SND_SBAWE=m
+CONFIG_SND_SB16_CSP=y
+CONFIG_SND_SSCAPE=m
+CONFIG_SND_WAVEFRONT=m
+
+##
+## file: sound/pci/Kconfig
+##
+CONFIG_SND_ALS4000=m
+CONFIG_SND_ALI5451=m
+CONFIG_SND_ATIIXP=m
+CONFIG_SND_ATIIXP_MODEM=m
+CONFIG_SND_AU8810=m
+CONFIG_SND_AU8820=m
+CONFIG_SND_AU8830=m
+CONFIG_SND_AZT3328=m
+CONFIG_SND_BT87X=m
+# CONFIG_SND_BT87X_OVERCLOCK is not set
+CONFIG_SND_CA0106=m
+CONFIG_SND_CMIPCI=m
+CONFIG_SND_CS4281=m
+CONFIG_SND_CS46XX=m
+CONFIG_SND_CS46XX_NEW_DSP=y
+CONFIG_SND_EMU10K1=m
+CONFIG_SND_EMU10K1X=m
+CONFIG_SND_ENS1370=m
+CONFIG_SND_ENS1371=m
+CONFIG_SND_ES1938=m
+CONFIG_SND_ES1968=m
+CONFIG_SND_FM801=m
+CONFIG_SND_FM801_TEA575X_BOOL=y
+CONFIG_SND_HDSP=m
+CONFIG_SND_ICE1712=m
+CONFIG_SND_ICE1724=m
+CONFIG_SND_INTEL8X0=m
+CONFIG_SND_INTEL8X0M=m
+CONFIG_SND_KORG1212=m
+CONFIG_SND_MAESTRO3=m
+# CONFIG_SND_MIXART is not set
+CONFIG_SND_NM256=m
+CONFIG_SND_RME32=m
+CONFIG_SND_RME96=m
+CONFIG_SND_RME9652=m
+CONFIG_SND_SONICVIBES=m
+CONFIG_SND_TRIDENT=m
+CONFIG_SND_VIA82XX=m
+CONFIG_SND_VIA82XX_MODEM=m
+CONFIG_SND_VX222=m
+CONFIG_SND_YMFPCI=m
+
+##
+## file: sound/pci/hda/Kconfig
+##
+CONFIG_SND_HDA_INTEL=m
diff --git a/debian/config/alpha/config.alpha-generic b/debian/config/alpha/config.alpha-generic
new file mode 100644
index 000000000000..50398c7a8f3a
--- /dev/null
+++ b/debian/config/alpha/config.alpha-generic
@@ -0,0 +1,9 @@
+##
+## file: arch/alpha/Kconfig
+##
+# CONFIG_SMP is not set
+
+##
+## file: arch/alpha/Kconfig.debug
+##
+# CONFIG_ALPHA_LEGACY_START_ADDRESS is not set
diff --git a/debian/config/alpha/config.alpha-smp b/debian/config/alpha/config.alpha-smp
new file mode 100644
index 000000000000..7b53986dbc6d
--- /dev/null
+++ b/debian/config/alpha/config.alpha-smp
@@ -0,0 +1,15 @@
+##
+## file: arch/alpha/Kconfig
+##
+CONFIG_SMP=y
+CONFIG_NR_CPUS=64
+
+##
+## file: arch/alpha/Kconfig.debug
+##
+# CONFIG_ALPHA_LEGACY_START_ADDRESS is not set
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI=y
diff --git a/debian/config/alpha/defines b/debian/config/alpha/defines
new file mode 100644
index 000000000000..5f2034e7669a
--- /dev/null
+++ b/debian/config/alpha/defines
@@ -0,0 +1,19 @@
+[base]
+flavours: alpha-generic alpha-smp
+default-flavour: alpha-smp
+kernel-arch: alpha
+
+[build]
+image-file: arch/alpha/boot/vmlinux.gz
+
+[image]
+suggests: aboot, fdutils
+install-stem: vmlinuz
+
+[alpha-generic_description]
+hardware: Alpha
+hardware-long: DEC Alpha systems with extended kernel start address (Wildfire, Titan, Marvel)
+
+[alpha-smp_description]
+hardware: Alpha SMP
+hardware-long: DEC Alpha SMP systems with extended kernel start address (Wildfire, Titan, Marvel)
diff --git a/debian/config/amd64/config b/debian/config/amd64/config
new file mode 100644
index 000000000000..ed380d167020
--- /dev/null
+++ b/debian/config/amd64/config
@@ -0,0 +1,262 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_ARCH_MMAP_RND_BITS=28
+CONFIG_ARCH_MMAP_RND_COMPAT_BITS=8
+
+##
+## file: arch/x86/Kconfig
+##
+CONFIG_64BIT=y
+CONFIG_SMP=y
+CONFIG_X86_X2APIC=y
+CONFIG_MAXSMP=y
+CONFIG_X86_16BIT=y
+CONFIG_X86_VSYSCALL_EMULATION=y
+# CONFIG_X86_5LEVEL is not set
+CONFIG_NUMA=y
+CONFIG_AMD_NUMA=y
+CONFIG_X86_64_ACPI_NUMA=y
+CONFIG_NUMA_EMU=y
+CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y
+CONFIG_EFI_MIXED=y
+CONFIG_KEXEC_FILE=y
+CONFIG_KEXEC_SIG=y
+CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y
+CONFIG_RANDOMIZE_MEMORY=y
+## choice: vsyscall table for legacy applications
+# CONFIG_LEGACY_VSYSCALL_EMULATE is not set
+CONFIG_LEGACY_VSYSCALL_NONE=y
+## end choice
+CONFIG_PCI_MMCONFIG=y
+CONFIG_ISA_DMA_API=y
+# CONFIG_IA32_AOUT is not set
+CONFIG_X86_X32=y
+CONFIG_X86_X32_DISABLED=y
+
+##
+## file: arch/x86/Kconfig.cpu
+##
+## choice: Processor family
+# CONFIG_MK8 is not set
+# CONFIG_MPSC is not set
+# CONFIG_MCORE2 is not set
+# CONFIG_MATOM is not set
+CONFIG_GENERIC_CPU=y
+## end choice
+
+##
+## file: arch/x86/xen/Kconfig
+##
+CONFIG_XEN_512GB=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_AEGIS128_AESNI_SSE2=m
+CONFIG_CRYPTO_CRCT10DIF_PCLMUL=m
+CONFIG_CRYPTO_POLY1305_X86_64=m
+CONFIG_CRYPTO_SHA1_SSSE3=m
+CONFIG_CRYPTO_SHA256_SSSE3=m
+CONFIG_CRYPTO_SHA512_SSSE3=m
+CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL=m
+CONFIG_CRYPTO_BLOWFISH_X86_64=m
+CONFIG_CRYPTO_CAMELLIA_X86_64=m
+CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64=m
+CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64=m
+CONFIG_CRYPTO_CAST5_AVX_X86_64=m
+CONFIG_CRYPTO_CAST6_AVX_X86_64=m
+CONFIG_CRYPTO_DES3_EDE_X86_64=m
+CONFIG_CRYPTO_CHACHA20_X86_64=m
+CONFIG_CRYPTO_SERPENT_SSE2_X86_64=m
+CONFIG_CRYPTO_SERPENT_AVX_X86_64=m
+CONFIG_CRYPTO_SERPENT_AVX2_X86_64=m
+CONFIG_CRYPTO_TWOFISH_X86_64=m
+CONFIG_CRYPTO_TWOFISH_X86_64_3WAY=m
+CONFIG_CRYPTO_TWOFISH_AVX_X86_64=m
+
+##
+## file: crypto/asymmetric_keys/Kconfig
+##
+CONFIG_SIGNED_PE_FILE_VERIFICATION=y
+
+##
+## file: drivers/acpi/Kconfig
+##
+CONFIG_ACPI_BGRT=y
+
+##
+## file: drivers/android/Kconfig
+##
+CONFIG_ANDROID=y
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_BLK_DEV_RSXX=m
+
+##
+## file: drivers/char/agp/Kconfig
+##
+CONFIG_AGP=y
+#. Needed by GART_IOMMU
+CONFIG_AGP_AMD64=y
+
+##
+## file: drivers/edac/Kconfig
+##
+CONFIG_EDAC_SBRIDGE=m
+
+##
+## file: drivers/gpu/drm/i915/Kconfig
+##
+CONFIG_DRM_I915_GVT=y
+CONFIG_DRM_I915_GVT_KVMGT=m
+
+##
+## file: drivers/hid/amd-sfh-hid/Kconfig
+##
+CONFIG_AMD_SFH_HID=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C_STUB=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_MOUSE_PS2_LOGIPS2PP=y
+CONFIG_MOUSE_PS2_SYNAPTICS=y
+CONFIG_MOUSE_PS2_LIFEBOOK=y
+CONFIG_MOUSE_PS2_TRACKPOINT=y
+
+##
+## file: drivers/iommu/amd/Kconfig
+##
+CONFIG_AMD_IOMMU=y
+#. Can be built as a module, but nothing will trigger loading
+CONFIG_AMD_IOMMU_V2=y
+
+##
+## file: drivers/macintosh/Kconfig
+##
+CONFIG_MACINTOSH_DRIVERS=y
+CONFIG_MAC_EMUMOUSEBTN=y
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_FUJITSU_ES=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_AMD_XGBE=m
+
+##
+## file: drivers/net/ethernet/google/Kconfig
+##
+CONFIG_NET_VENDOR_GOOGLE=y
+CONFIG_GVE=m
+
+##
+## file: drivers/net/ethernet/microsoft/Kconfig
+##
+CONFIG_NET_VENDOR_MICROSOFT=y
+CONFIG_MICROSOFT_MANA=m
+
+##
+## file: drivers/net/wireless/intel/ipw2x00/Kconfig
+##
+# CONFIG_IPW2100 is not set
+
+##
+## file: drivers/nvdimm/Kconfig
+##
+CONFIG_NVDIMM_PFN=y
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI_HYPERV=y
+
+##
+## file: drivers/pinctrl/Kconfig
+##
+CONFIG_PINCTRL_AMD=y
+
+##
+## file: drivers/platform/x86/Kconfig
+##
+CONFIG_AMD_PMC=m
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_INIA100=m
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI_PXA2XX=m
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_MOXA_INTELLIO=m
+
+##
+## file: drivers/vfio/mdev/Kconfig
+##
+CONFIG_VFIO_MDEV=m
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_MATROX_G=y
+CONFIG_FB_MATROX_MAVEN=m
+# CONFIG_FB_ATY_GENERIC_LCD is not set
+# CONFIG_FB_SAVAGE_I2C is not set
+
+##
+## file: init/Kconfig
+##
+CONFIG_KALLSYMS_ALL=y
+
+##
+## file: kernel/livepatch/Kconfig
+##
+CONFIG_LIVEPATCH=y
+
+##
+## file: kernel/rcu/Kconfig
+##
+CONFIG_RCU_FANOUT=64
+
+##
+## file: lib/Kconfig.debug
+##
+CONFIG_DEBUG_INFO_BTF=y
+CONFIG_FRAME_WARN=2048
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+CONFIG_SPARSEMEM_MANUAL=y
+## end choice
+CONFIG_SPARSEMEM_VMEMMAP=y
+CONFIG_ZONE_DEVICE=y
+
+##
+## file: security/Kconfig
+##
+CONFIG_LSM_MMAP_MIN_ADDR=65536
+
+##
+## file: sound/soc/amd/Kconfig
+##
+CONFIG_SND_SOC_AMD_ACP3x=m
+CONFIG_SND_SOC_AMD_RENOIR=m
+CONFIG_SND_SOC_AMD_RENOIR_MACH=m
diff --git a/debian/config/amd64/config.cloud-amd64 b/debian/config/amd64/config.cloud-amd64
new file mode 100644
index 000000000000..da78f3d31f98
--- /dev/null
+++ b/debian/config/amd64/config.cloud-amd64
@@ -0,0 +1,45 @@
+##
+## file: arch/x86/Kconfig
+##
+# CONFIG_X86_MPPARSE is not set
+# CONFIG_X86_EXTENDED_PLATFORM is not set
+# CONFIG_X86_INTEL_LPSS is not set
+# CONFIG_X86_AMD_PLATFORM_DEVICE is not set
+# CONFIG_IOSF_MBI is not set
+# CONFIG_GART_IOMMU is not set
+#. XXX
+# CONFIG_X86_MCE is not set
+# CONFIG_X86_16BIT is not set
+# CONFIG_I8K is not set
+# CONFIG_MICROCODE is not set
+# CONFIG_AMD_NUMA is not set
+# CONFIG_NUMA_EMU is not set
+# CONFIG_ISA_DMA_API is not set
+# CONFIG_ISA is not set
+# CONFIG_X86_X32 is not set
+
+##
+## file: arch/x86/xen/Kconfig
+##
+# CONFIG_XEN_DOM0 is not set
+
+##
+## file: drivers/infiniband/hw/usnic/Kconfig
+##
+# CONFIG_INFINIBAND_USNIC is not set
+
+##
+## file: drivers/platform/x86/Kconfig
+##
+# CONFIG_X86_PLATFORM_DEVICES is not set
+
+##
+## file: drivers/platform/x86/dell/Kconfig
+##
+# CONFIG_DCDBAS is not set
+# CONFIG_DELL_RBU is not set
+
+##
+## file: drivers/watchdog/Kconfig
+##
+# CONFIG_PCIPCWATCHDOG is not set
diff --git a/debian/config/amd64/defines b/debian/config/amd64/defines
new file mode 100644
index 000000000000..975efaa90b9c
--- /dev/null
+++ b/debian/config/amd64/defines
@@ -0,0 +1,26 @@
+[base]
+featuresets:
+ none
+ rt
+kernel-arch: x86
+
+[build]
+image-file: arch/x86/boot/bzImage
+signed-code: true
+vdso: true
+
+[image]
+bootloaders: grub-pc grub-efi-amd64 extlinux
+install-stem: vmlinuz
+breaks: xserver-xorg-input-vmmouse (<< 1:13.0.99)
+
+[relations]
+headers%gcc-11: linux-compiler-gcc-11-x86
+
+[amd64_description]
+hardware: 64-bit PCs
+hardware-long: PCs with AMD64, Intel 64 or VIA Nano processors
+
+[cloud-amd64_description]
+hardware: x86-64 cloud
+hardware-long: cloud platforms including Amazon EC2, Microsoft Azure, and Google Compute Engine
diff --git a/debian/config/amd64/none/defines b/debian/config/amd64/none/defines
new file mode 100644
index 000000000000..ada23557a6ad
--- /dev/null
+++ b/debian/config/amd64/none/defines
@@ -0,0 +1,10 @@
+[base]
+flavours:
+ amd64
+ cloud-amd64
+default-flavour: amd64
+
+[cloud-amd64_image]
+configs:
+ config.cloud
+ amd64/config.cloud-amd64
diff --git a/debian/config/amd64/rt/defines b/debian/config/amd64/rt/defines
new file mode 100644
index 000000000000..090dc41bfb9f
--- /dev/null
+++ b/debian/config/amd64/rt/defines
@@ -0,0 +1,3 @@
+[base]
+flavours:
+ amd64
diff --git a/debian/config/arm64/config b/debian/config/arm64/config
new file mode 100644
index 000000000000..b37ee9fa1f01
--- /dev/null
+++ b/debian/config/arm64/config
@@ -0,0 +1,1696 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_SECCOMP=y
+
+##
+## file: arch/arm64/Kconfig
+##
+CONFIG_ARM64_ERRATUM_834220=y
+CONFIG_ARM64_ERRATUM_843419=y
+CONFIG_ARM64_ERRATUM_1418040=y
+## choice: Virtual address space size
+CONFIG_ARM64_VA_BITS_48=y
+## end choice
+CONFIG_SCHED_MC=y
+CONFIG_SCHED_SMT=y
+CONFIG_NR_CPUS=256
+CONFIG_NUMA=y
+CONFIG_KEXEC=y
+CONFIG_CRASH_DUMP=y
+CONFIG_XEN=y
+CONFIG_COMPAT=y
+CONFIG_COMPAT_VDSO=y
+CONFIG_ARMV8_DEPRECATED=y
+CONFIG_SWP_EMULATION=y
+CONFIG_CP15_BARRIER_EMULATION=y
+CONFIG_SETEND_EMULATION=y
+CONFIG_ARM64_USE_LSE_ATOMICS=y
+CONFIG_ARM64_PMEM=y
+CONFIG_RANDOMIZE_BASE=y
+CONFIG_RANDOMIZE_MODULE_REGION_FULL=y
+CONFIG_ARM64_ACPI_PARKING_PROTOCOL=y
+
+##
+## file: arch/arm64/Kconfig.platforms
+##
+CONFIG_ARCH_SUNXI=y
+CONFIG_ARCH_BCM2835=y
+CONFIG_ARCH_LAYERSCAPE=y
+CONFIG_ARCH_HISI=y
+CONFIG_ARCH_MESON=y
+CONFIG_ARCH_MVEBU=y
+CONFIG_ARCH_MXC=y
+CONFIG_ARCH_QCOM=y
+CONFIG_ARCH_ROCKCHIP=y
+CONFIG_ARCH_SEATTLE=y
+CONFIG_ARCH_SYNQUACER=y
+CONFIG_ARCH_TEGRA=y
+CONFIG_ARCH_THUNDER=y
+CONFIG_ARCH_THUNDER2=y
+CONFIG_ARCH_VEXPRESS=y
+CONFIG_ARCH_XGENE=y
+CONFIG_ARCH_ZYNQMP=y
+
+##
+## file: arch/arm64/crypto/Kconfig
+##
+CONFIG_ARM64_CRYPTO=y
+CONFIG_CRYPTO_SHA512_ARM64=m
+CONFIG_CRYPTO_SHA1_ARM64_CE=m
+CONFIG_CRYPTO_SHA2_ARM64_CE=m
+CONFIG_CRYPTO_SHA512_ARM64_CE=m
+CONFIG_CRYPTO_SHA3_ARM64=m
+CONFIG_CRYPTO_GHASH_ARM64_CE=m
+CONFIG_CRYPTO_CRCT10DIF_ARM64_CE=m
+CONFIG_CRYPTO_AES_ARM64_CE=m
+CONFIG_CRYPTO_AES_ARM64_CE_CCM=m
+CONFIG_CRYPTO_AES_ARM64_CE_BLK=m
+# CONFIG_CRYPTO_AES_ARM64_NEON_BLK is not set
+CONFIG_CRYPTO_NHPOLY1305_NEON=m
+CONFIG_CRYPTO_AES_ARM64_BS=m
+
+##
+## file: arch/arm64/kvm/Kconfig
+##
+CONFIG_VIRTUALIZATION=y
+CONFIG_KVM=y
+
+##
+## file: drivers/acpi/Kconfig
+##
+CONFIG_ACPI=y
+CONFIG_ACPI_SPCR_TABLE=y
+CONFIG_ACPI_IPMI=m
+CONFIG_ACPI_PCI_SLOT=y
+CONFIG_ACPI_HED=y
+CONFIG_ACPI_BGRT=y
+
+##
+## file: drivers/acpi/apei/Kconfig
+##
+CONFIG_ACPI_APEI=y
+CONFIG_ACPI_APEI_GHES=y
+CONFIG_ACPI_APEI_PCIEAER=y
+CONFIG_ACPI_APEI_MEMORY_FAILURE=y
+CONFIG_ACPI_APEI_EINJ=m
+
+##
+## file: drivers/acpi/numa/Kconfig
+##
+CONFIG_ACPI_NUMA=y
+
+##
+## file: drivers/android/Kconfig
+##
+CONFIG_ANDROID=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_SATA_AHCI_PLATFORM=m
+CONFIG_AHCI_CEVA=m
+CONFIG_AHCI_MVEBU=m
+CONFIG_AHCI_TEGRA=m
+CONFIG_AHCI_XGENE=m
+CONFIG_AHCI_QORIQ=m
+CONFIG_SATA_AHCI_SEATTLE=m
+
+##
+## file: drivers/bluetooth/Kconfig
+##
+CONFIG_BT_HCIUART=m
+CONFIG_BT_MRVL_SDIO=m
+CONFIG_BT_QCOMSMD=m
+
+##
+## file: drivers/bus/Kconfig
+##
+CONFIG_MOXTET=m
+CONFIG_HISILICON_LPC=y
+CONFIG_QCOM_EBI2=y
+CONFIG_TEGRA_ACONNECT=y
+
+##
+## file: drivers/bus/fsl-mc/Kconfig
+##
+CONFIG_FSL_MC_BUS=y
+CONFIG_FSL_MC_UAPI_SUPPORT=y
+
+##
+## file: drivers/char/hw_random/Kconfig
+##
+CONFIG_HW_RANDOM_BCM2835=m
+CONFIG_HW_RANDOM_OMAP=m
+CONFIG_HW_RANDOM_HISI=m
+CONFIG_HW_RANDOM_XGENE=m
+CONFIG_HW_RANDOM_MESON=m
+CONFIG_HW_RANDOM_CAVIUM=m
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+CONFIG_IPMI_HANDLER=m
+CONFIG_IPMI_DEVICE_INTERFACE=m
+CONFIG_IPMI_SSIF=m
+CONFIG_IPMI_WATCHDOG=m
+CONFIG_IPMI_POWEROFF=m
+
+##
+## file: drivers/char/tpm/Kconfig
+##
+CONFIG_TCG_TPM=m
+CONFIG_TCG_TIS_I2C_INFINEON=m
+
+##
+## file: drivers/clk/Kconfig
+##
+CONFIG_COMMON_CLK_RK808=y
+CONFIG_COMMON_CLK_HI655X=y
+CONFIG_COMMON_CLK_FSL_SAI=y
+CONFIG_CLK_QORIQ=y
+CONFIG_CLK_LS1028A_PLLDIG=y
+CONFIG_COMMON_CLK_XGENE=y
+
+##
+## file: drivers/clk/bcm/Kconfig
+##
+CONFIG_CLK_RASPBERRYPI=y
+
+##
+## file: drivers/clk/hisilicon/Kconfig
+##
+CONFIG_STUB_CLK_HI6220=y
+
+##
+## file: drivers/clk/imx/Kconfig
+##
+CONFIG_CLK_IMX8MM=y
+CONFIG_CLK_IMX8MN=y
+CONFIG_CLK_IMX8MP=y
+CONFIG_CLK_IMX8MQ=y
+
+##
+## file: drivers/clk/qcom/Kconfig
+##
+CONFIG_COMMON_CLK_QCOM=y
+CONFIG_QCOM_CLK_RPM=m
+CONFIG_QCOM_CLK_SMD_RPM=m
+CONFIG_MSM_GCC_8916=y
+CONFIG_MSM_GCC_8996=y
+CONFIG_MSM_MMCC_8996=y
+
+##
+## file: drivers/clk/sunxi-ng/Kconfig
+##
+CONFIG_SUN8I_DE2_CCU=y
+
+##
+## file: drivers/clk/zynqmp/Kconfig
+##
+CONFIG_COMMON_CLK_ZYNQMP=y
+
+##
+## file: drivers/cpufreq/Kconfig
+##
+## choice: Default CPUFreq governor
+# CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE is not set
+CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL=y
+## end choice
+CONFIG_CPUFREQ_DT=m
+CONFIG_QORIQ_CPUFREQ=m
+
+##
+## file: drivers/cpufreq/Kconfig.arm
+##
+CONFIG_ACPI_CPPC_CPUFREQ=m
+CONFIG_ARM_ARMADA_37XX_CPUFREQ=m
+CONFIG_ARM_IMX_CPUFREQ_DT=m
+CONFIG_ARM_RASPBERRYPI_CPUFREQ=m
+
+##
+## file: drivers/cpuidle/Kconfig.arm
+##
+CONFIG_ARM_CPUIDLE=y
+
+##
+## file: drivers/crypto/Kconfig
+##
+CONFIG_CRYPTO_DEV_QCE=m
+CONFIG_CRYPTO_DEV_QCOM_RNG=m
+CONFIG_CRYPTO_DEV_SAFEXCEL=m
+
+##
+## file: drivers/crypto/allwinner/Kconfig
+##
+CONFIG_CRYPTO_DEV_SUN8I_CE=m
+
+##
+## file: drivers/crypto/caam/Kconfig
+##
+CONFIG_CRYPTO_DEV_FSL_CAAM=m
+CONFIG_CRYPTO_DEV_FSL_CAAM_JR=m
+CONFIG_CRYPTO_DEV_FSL_DPAA2_CAAM=m
+
+##
+## file: drivers/crypto/cavium/cpt/Kconfig
+##
+CONFIG_CAVIUM_CPT=m
+
+##
+## file: drivers/crypto/cavium/nitrox/Kconfig
+##
+CONFIG_CRYPTO_DEV_NITROX_CNN55XX=m
+
+##
+## file: drivers/crypto/marvell/Kconfig
+##
+CONFIG_CRYPTO_DEV_MARVELL_CESA=m
+
+##
+## file: drivers/devfreq/Kconfig
+##
+CONFIG_ARM_IMX_BUS_DEVFREQ=m
+CONFIG_ARM_IMX8M_DDRC_DEVFREQ=m
+CONFIG_ARM_RK3399_DMC_DEVFREQ=m
+
+##
+## file: drivers/devfreq/event/Kconfig
+##
+CONFIG_PM_DEVFREQ_EVENT=y
+CONFIG_DEVFREQ_EVENT_ROCKCHIP_DFI=m
+
+##
+## file: drivers/dma/Kconfig
+##
+CONFIG_DMADEVICES=y
+CONFIG_DMA_BCM2835=y
+CONFIG_DMA_SUN6I=m
+CONFIG_FSL_EDMA=m
+CONFIG_FSL_QDMA=m
+CONFIG_IMX_SDMA=m
+CONFIG_K3_DMA=m
+CONFIG_MV_XOR=y
+CONFIG_MV_XOR_V2=y
+CONFIG_PL330_DMA=m
+CONFIG_TEGRA20_APB_DMA=y
+CONFIG_TEGRA210_ADMA=y
+CONFIG_XGENE_DMA=m
+
+##
+## file: drivers/dma/qcom/Kconfig
+##
+CONFIG_QCOM_BAM_DMA=m
+CONFIG_QCOM_HIDMA_MGMT=m
+CONFIG_QCOM_HIDMA=m
+
+##
+## file: drivers/edac/Kconfig
+##
+CONFIG_EDAC=y
+CONFIG_EDAC_LAYERSCAPE=m
+CONFIG_EDAC_THUNDERX=m
+CONFIG_EDAC_XGENE=m
+
+##
+## file: drivers/extcon/Kconfig
+##
+CONFIG_EXTCON=m
+CONFIG_EXTCON_PTN5150=m
+CONFIG_EXTCON_QCOM_SPMI_MISC=m
+CONFIG_EXTCON_USB_GPIO=m
+CONFIG_EXTCON_USBC_CROS_EC=m
+
+##
+## file: drivers/firmware/Kconfig
+##
+CONFIG_ARM_SCPI_PROTOCOL=m
+CONFIG_RASPBERRYPI_FIRMWARE=y
+CONFIG_TURRIS_MOX_RWTM=m
+
+##
+## file: drivers/gpio/Kconfig
+##
+CONFIG_GPIOLIB=y
+CONFIG_GPIO_MB86S7X=m
+CONFIG_GPIO_MPC8XXX=y
+CONFIG_GPIO_MXC=y
+CONFIG_GPIO_PL061=y
+CONFIG_GPIO_XGENE=y
+CONFIG_GPIO_XGENE_SB=m
+CONFIG_GPIO_XLP=y
+CONFIG_GPIO_ZYNQ=m
+CONFIG_GPIO_PCA953X=y
+CONFIG_GPIO_PCA953X_IRQ=y
+CONFIG_GPIO_MAX77620=y
+CONFIG_GPIO_SL28CPLD=m
+CONFIG_GPIO_MOXTET=m
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+CONFIG_DRM_RADEON=m
+CONFIG_DRM_AMDGPU=m
+
+##
+## file: drivers/gpu/drm/arm/Kconfig
+##
+CONFIG_DRM_HDLCD=m
+CONFIG_DRM_MALI_DISPLAY=m
+
+##
+## file: drivers/gpu/drm/ast/Kconfig
+##
+CONFIG_DRM_AST=m
+
+##
+## file: drivers/gpu/drm/bridge/Kconfig
+##
+CONFIG_DRM_NWL_MIPI_DSI=m
+CONFIG_DRM_NXP_PTN3460=m
+
+##
+## file: drivers/gpu/drm/bridge/adv7511/Kconfig
+##
+CONFIG_DRM_I2C_ADV7511=m
+CONFIG_DRM_I2C_ADV7511_AUDIO=y
+
+##
+## file: drivers/gpu/drm/bridge/analogix/Kconfig
+##
+CONFIG_DRM_ANALOGIX_ANX6345=m
+
+##
+## file: drivers/gpu/drm/bridge/synopsys/Kconfig
+##
+CONFIG_DRM_DW_HDMI_CEC=m
+
+##
+## file: drivers/gpu/drm/etnaviv/Kconfig
+##
+CONFIG_DRM_ETNAVIV=m
+
+##
+## file: drivers/gpu/drm/hisilicon/hibmc/Kconfig
+##
+CONFIG_DRM_HISI_HIBMC=m
+
+##
+## file: drivers/gpu/drm/hisilicon/kirin/Kconfig
+##
+CONFIG_DRM_HISI_KIRIN=m
+
+##
+## file: drivers/gpu/drm/lima/Kconfig
+##
+CONFIG_DRM_LIMA=m
+
+##
+## file: drivers/gpu/drm/meson/Kconfig
+##
+CONFIG_DRM_MESON=m
+
+##
+## file: drivers/gpu/drm/msm/Kconfig
+##
+CONFIG_DRM_MSM=m
+CONFIG_DRM_MSM_DSI=y
+CONFIG_DRM_MSM_DSI_28NM_PHY=y
+CONFIG_DRM_MSM_DSI_20NM_PHY=y
+
+##
+## file: drivers/gpu/drm/mxsfb/Kconfig
+##
+CONFIG_DRM_MXSFB=m
+
+##
+## file: drivers/gpu/drm/nouveau/Kconfig
+##
+CONFIG_NOUVEAU_PLATFORM_DRIVER=y
+
+##
+## file: drivers/gpu/drm/panel/Kconfig
+##
+CONFIG_DRM_PANEL_SIMPLE=m
+CONFIG_DRM_PANEL_RASPBERRYPI_TOUCHSCREEN=m
+CONFIG_DRM_PANEL_SITRONIX_ST7703=m
+
+##
+## file: drivers/gpu/drm/panfrost/Kconfig
+##
+CONFIG_DRM_PANFROST=m
+
+##
+## file: drivers/gpu/drm/rockchip/Kconfig
+##
+CONFIG_DRM_ROCKCHIP=m
+CONFIG_ROCKCHIP_ANALOGIX_DP=y
+CONFIG_ROCKCHIP_CDN_DP=y
+CONFIG_ROCKCHIP_DW_HDMI=y
+CONFIG_ROCKCHIP_DW_MIPI_DSI=y
+
+##
+## file: drivers/gpu/drm/sun4i/Kconfig
+##
+CONFIG_DRM_SUN4I=m
+CONFIG_DRM_SUN8I_DW_HDMI=m
+CONFIG_DRM_SUN8I_MIXER=m
+
+##
+## file: drivers/gpu/drm/tegra/Kconfig
+##
+CONFIG_DRM_TEGRA=m
+CONFIG_DRM_TEGRA_STAGING=y
+
+##
+## file: drivers/gpu/drm/vc4/Kconfig
+##
+CONFIG_DRM_VC4=m
+CONFIG_DRM_VC4_HDMI_CEC=y
+
+##
+## file: drivers/gpu/drm/vmwgfx/Kconfig
+##
+CONFIG_DRM_VMWGFX=m
+
+##
+## file: drivers/gpu/host1x/Kconfig
+##
+CONFIG_TEGRA_HOST1X=m
+
+##
+## file: drivers/hid/i2c-hid/Kconfig
+##
+CONFIG_I2C_HID_ACPI=m
+CONFIG_I2C_HID_OF=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_ARM_SCPI=m
+CONFIG_SENSORS_GPIO_FAN=m
+CONFIG_SENSORS_LM75=m
+CONFIG_SENSORS_LM90=m
+CONFIG_SENSORS_PWM_FAN=m
+CONFIG_SENSORS_SL28CPLD=m
+CONFIG_SENSORS_XGENE=m
+
+##
+## file: drivers/hwspinlock/Kconfig
+##
+CONFIG_HWSPINLOCK_QCOM=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=y
+CONFIG_I2C_MUX=m
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_BCM2835=m
+CONFIG_I2C_DESIGNWARE_PLATFORM=m
+CONFIG_I2C_GPIO=m
+CONFIG_I2C_IMX=m
+CONFIG_I2C_MESON=m
+CONFIG_I2C_MV64XXX=m
+CONFIG_I2C_PXA=m
+CONFIG_I2C_QCOM_GENI=m
+CONFIG_I2C_QUP=m
+CONFIG_I2C_RK3X=m
+CONFIG_I2C_TEGRA=m
+CONFIG_I2C_THUNDERX=m
+CONFIG_I2C_XLP9XX=m
+CONFIG_I2C_CROS_EC_TUNNEL=m
+CONFIG_I2C_XGENE_SLIMPRO=m
+
+##
+## file: drivers/i2c/muxes/Kconfig
+##
+CONFIG_I2C_MUX_PCA954x=m
+
+##
+## file: drivers/iio/common/cros_ec_sensors/Kconfig
+##
+CONFIG_IIO_CROS_EC_SENSORS_CORE=m
+CONFIG_IIO_CROS_EC_SENSORS=m
+
+##
+## file: drivers/iio/humidity/Kconfig
+##
+CONFIG_DHT11=m
+
+##
+## file: drivers/infiniband/hw/hns/Kconfig
+##
+CONFIG_INFINIBAND_HNS=m
+CONFIG_INFINIBAND_HNS_HIP06=y
+CONFIG_INFINIBAND_HNS_HIP08=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_KEYBOARD_ADC=m
+CONFIG_KEYBOARD_GPIO=m
+CONFIG_KEYBOARD_SNVS_PWRKEY=m
+CONFIG_KEYBOARD_TEGRA=m
+CONFIG_KEYBOARD_CROS_EC=m
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MISC=y
+CONFIG_INPUT_PM8941_PWRKEY=m
+CONFIG_INPUT_GPIO_BEEPER=m
+CONFIG_INPUT_GPIO_VIBRA=m
+CONFIG_INPUT_AXP20X_PEK=m
+CONFIG_INPUT_UINPUT=m
+CONFIG_INPUT_RK805_PWRKEY=m
+CONFIG_INPUT_HISI_POWERKEY=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_MOUSE_ELAN_I2C=m
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+CONFIG_INPUT_TOUCHSCREEN=y
+CONFIG_TOUCHSCREEN_ELAN=m
+CONFIG_TOUCHSCREEN_EDT_FT5X06=m
+CONFIG_TOUCHSCREEN_RASPBERRYPI_FW=m
+
+##
+## file: drivers/iommu/Kconfig
+##
+CONFIG_ROCKCHIP_IOMMU=y
+CONFIG_TEGRA_IOMMU_SMMU=y
+CONFIG_ARM_SMMU=y
+CONFIG_ARM_SMMU_V3=y
+CONFIG_QCOM_IOMMU=y
+
+##
+## file: drivers/irqchip/Kconfig
+##
+CONFIG_SL28CPLD_INTC=y
+CONFIG_QCOM_IRQ_COMBINER=y
+
+##
+## file: drivers/leds/Kconfig
+##
+CONFIG_LEDS_GPIO=m
+CONFIG_LEDS_PWM=m
+
+##
+## file: drivers/leds/trigger/Kconfig
+##
+CONFIG_LEDS_TRIGGER_HEARTBEAT=y
+
+##
+## file: drivers/mailbox/Kconfig
+##
+CONFIG_MAILBOX=y
+CONFIG_ARM_MHU=m
+CONFIG_IMX_MBOX=m
+CONFIG_PLATFORM_MHU=m
+CONFIG_ARMADA_37XX_RWTM_MBOX=m
+CONFIG_BCM2835_MBOX=y
+CONFIG_HI6220_MBOX=y
+CONFIG_QCOM_APCS_IPC=m
+CONFIG_XGENE_SLIMPRO_MBOX=m
+
+##
+## file: drivers/media/platform/Kconfig
+##
+CONFIG_VIDEO_QCOM_VENUS=m
+
+##
+## file: drivers/media/rc/Kconfig
+##
+CONFIG_IR_MESON=m
+
+##
+## file: drivers/memory/tegra/Kconfig
+##
+CONFIG_TEGRA_MC=y
+
+##
+## file: drivers/mfd/Kconfig
+##
+CONFIG_MFD_AXP20X_I2C=m
+CONFIG_MFD_AXP20X_RSB=m
+CONFIG_MFD_CROS_EC_DEV=m
+CONFIG_MFD_HI655X_PMIC=m
+CONFIG_MFD_MAX77620=y
+CONFIG_MFD_QCOM_RPM=m
+CONFIG_MFD_SPMI_PMIC=m
+CONFIG_MFD_RK808=y
+CONFIG_MFD_SL28CPLD=y
+CONFIG_MFD_ROHM_BD718XX=m
+
+##
+## file: drivers/misc/Kconfig
+##
+CONFIG_QCOM_COINCELL=m
+
+##
+## file: drivers/misc/ti-st/Kconfig
+##
+CONFIG_TI_ST=m
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=y
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+CONFIG_MMC_ARMMMCI=m
+CONFIG_MMC_QCOM_DML=y
+CONFIG_MMC_SDHCI_ACPI=m
+CONFIG_MMC_SDHCI_PLTFM=m
+CONFIG_MMC_SDHCI_OF_ARASAN=m
+CONFIG_MMC_SDHCI_OF_ESDHC=m
+CONFIG_MMC_SDHCI_ESDHC_IMX=m
+CONFIG_MMC_SDHCI_TEGRA=m
+CONFIG_MMC_SDHCI_F_SDH30=m
+CONFIG_MMC_SDHCI_IPROC=m
+CONFIG_MMC_MESON_GX=m
+CONFIG_MMC_SDHCI_MSM=m
+CONFIG_MMC_SPI=m
+CONFIG_MMC_CAVIUM_THUNDERX=m
+CONFIG_MMC_DW=m
+CONFIG_MMC_DW_K3=m
+CONFIG_MMC_DW_ROCKCHIP=m
+CONFIG_MMC_SUNXI=m
+CONFIG_MMC_BCM2835=m
+CONFIG_MMC_SDHCI_XENON=m
+
+##
+## file: drivers/mtd/spi-nor/Kconfig
+##
+CONFIG_MTD_SPI_NOR=m
+
+##
+## file: drivers/mtd/spi-nor/controllers/Kconfig
+##
+CONFIG_SPI_HISI_SFC=m
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_VMXNET3=m
+
+##
+## file: drivers/net/can/Kconfig
+##
+CONFIG_CAN_FLEXCAN=m
+
+##
+## file: drivers/net/can/spi/Kconfig
+##
+CONFIG_CAN_MCP251X=m
+
+##
+## file: drivers/net/dsa/Kconfig
+##
+CONFIG_NET_DSA_MV88E6060=m
+
+##
+## file: drivers/net/dsa/mv88e6xxx/Kconfig
+##
+CONFIG_NET_DSA_MV88E6XXX=m
+
+##
+## file: drivers/net/dsa/ocelot/Kconfig
+##
+CONFIG_NET_DSA_MSCC_FELIX=m
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+CONFIG_FEALNX=m
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_NET_VENDOR_3COM=y
+CONFIG_VORTEX=m
+CONFIG_TYPHOON=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_NET_VENDOR_8390=y
+CONFIG_NE2K_PCI=m
+
+##
+## file: drivers/net/ethernet/adaptec/Kconfig
+##
+CONFIG_NET_VENDOR_ADAPTEC=y
+CONFIG_ADAPTEC_STARFIRE=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_AMD_XGBE=m
+
+##
+## file: drivers/net/ethernet/apm/xgene/Kconfig
+##
+CONFIG_NET_XGENE=m
+
+##
+## file: drivers/net/ethernet/apm/xgene-v2/Kconfig
+##
+CONFIG_NET_XGENE_V2=m
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+CONFIG_BCMGENET=m
+
+##
+## file: drivers/net/ethernet/cadence/Kconfig
+##
+CONFIG_NET_VENDOR_CADENCE=y
+CONFIG_MACB=m
+
+##
+## file: drivers/net/ethernet/cavium/Kconfig
+##
+CONFIG_NET_VENDOR_CAVIUM=y
+CONFIG_THUNDER_NIC_PF=m
+CONFIG_THUNDER_NIC_VF=m
+CONFIG_THUNDER_NIC_BGX=m
+CONFIG_THUNDER_NIC_RGX=m
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_NET_TULIP=y
+CONFIG_DE2104X=m
+CONFIG_TULIP=m
+# CONFIG_TULIP_MWI is not set
+# CONFIG_TULIP_MMIO is not set
+CONFIG_WINBOND_840=m
+CONFIG_DM9102=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_NET_VENDOR_DLINK=y
+CONFIG_SUNDANCE=m
+# CONFIG_SUNDANCE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/freescale/Kconfig
+##
+CONFIG_NET_VENDOR_FREESCALE=y
+CONFIG_FEC=m
+CONFIG_FSL_XGMAC_MDIO=m
+
+##
+## file: drivers/net/ethernet/freescale/dpaa2/Kconfig
+##
+CONFIG_FSL_DPAA2_ETH=m
+CONFIG_FSL_DPAA2_PTP_CLOCK=m
+
+##
+## file: drivers/net/ethernet/freescale/enetc/Kconfig
+##
+CONFIG_FSL_ENETC=m
+CONFIG_FSL_ENETC_VF=m
+CONFIG_FSL_ENETC_MDIO=m
+CONFIG_FSL_ENETC_PTP_CLOCK=m
+CONFIG_FSL_ENETC_QOS=y
+
+##
+## file: drivers/net/ethernet/google/Kconfig
+##
+CONFIG_NET_VENDOR_GOOGLE=y
+CONFIG_GVE=m
+
+##
+## file: drivers/net/ethernet/hisilicon/Kconfig
+##
+CONFIG_NET_VENDOR_HISILICON=y
+CONFIG_HIX5HD2_GMAC=m
+CONFIG_HISI_FEMAC=m
+CONFIG_HIP04_ETH=m
+CONFIG_HNS_DSAF=m
+CONFIG_HNS_ENET=m
+CONFIG_HNS3=m
+CONFIG_HNS3_HCLGE=m
+CONFIG_HNS3_DCB=y
+CONFIG_HNS3_HCLGEVF=m
+CONFIG_HNS3_ENET=m
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_NET_VENDOR_INTEL=y
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/marvell/Kconfig
+##
+CONFIG_MVMDIO=m
+CONFIG_MVNETA=m
+CONFIG_MVPP2=m
+
+##
+## file: drivers/net/ethernet/mscc/Kconfig
+##
+CONFIG_NET_VENDOR_MICROSEMI=y
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NET_VENDOR_NATSEMI=y
+CONFIG_NATSEMI=m
+
+##
+## file: drivers/net/ethernet/qualcomm/Kconfig
+##
+CONFIG_QCOM_EMAC=m
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_8139CP=m
+CONFIG_8139TOO=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_NET_VENDOR_SMSC=y
+CONFIG_SMC91X=m
+CONFIG_EPIC100=m
+CONFIG_SMSC911X=m
+
+##
+## file: drivers/net/ethernet/socionext/Kconfig
+##
+CONFIG_SNI_NETSEC=m
+
+##
+## file: drivers/net/ethernet/stmicro/stmmac/Kconfig
+##
+CONFIG_STMMAC_ETH=m
+CONFIG_STMMAC_PLATFORM=m
+CONFIG_DWMAC_GENERIC=m
+CONFIG_DWMAC_IPQ806X=m
+CONFIG_DWMAC_MESON=m
+CONFIG_DWMAC_ROCKCHIP=m
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+CONFIG_FDDI=y
+CONFIG_SKFP=m
+
+##
+## file: drivers/net/mdio/Kconfig
+##
+CONFIG_MDIO_XGENE=m
+CONFIG_MDIO_HISI_FEMAC=m
+CONFIG_MDIO_THUNDER=m
+CONFIG_MDIO_BUS_MUX_MMIOREG=m
+
+##
+## file: drivers/net/phy/Kconfig
+##
+CONFIG_MESON_GXL_PHY=m
+CONFIG_BCM54140_PHY=m
+CONFIG_MARVELL_PHY=m
+CONFIG_MARVELL_10G_PHY=m
+CONFIG_MICROSEMI_PHY=m
+CONFIG_AT803X_PHY=m
+
+##
+## file: drivers/net/usb/Kconfig
+##
+CONFIG_USB_NET_SMSC95XX=m
+
+##
+## file: drivers/net/wireless/ath/wcn36xx/Kconfig
+##
+CONFIG_WCN36XX=m
+
+##
+## file: drivers/net/wireless/broadcom/brcm80211/brcmfmac/Kconfig
+##
+CONFIG_BRCMFMAC_SDIO=y
+
+##
+## file: drivers/net/wireless/marvell/mwifiex/Kconfig
+##
+CONFIG_MWIFIEX=m
+CONFIG_MWIFIEX_SDIO=m
+CONFIG_MWIFIEX_PCIE=m
+
+##
+## file: drivers/net/wireless/ti/Kconfig
+##
+CONFIG_WLAN_VENDOR_TI=y
+CONFIG_WILINK_PLATFORM_DATA=y
+
+##
+## file: drivers/net/wireless/ti/wl1251/Kconfig
+##
+CONFIG_WL1251=m
+CONFIG_WL1251_SPI=m
+CONFIG_WL1251_SDIO=m
+
+##
+## file: drivers/net/wireless/ti/wl12xx/Kconfig
+##
+CONFIG_WL12XX=m
+
+##
+## file: drivers/net/wireless/ti/wl18xx/Kconfig
+##
+CONFIG_WL18XX=m
+
+##
+## file: drivers/net/wireless/ti/wlcore/Kconfig
+##
+CONFIG_WLCORE=m
+CONFIG_WLCORE_SPI=m
+CONFIG_WLCORE_SDIO=m
+
+##
+## file: drivers/nvmem/Kconfig
+##
+CONFIG_NVMEM_IMX_OCOTP=m
+CONFIG_QCOM_QFPROM=m
+CONFIG_ROCKCHIP_EFUSE=m
+CONFIG_NVMEM_SUNXI_SID=m
+CONFIG_MESON_EFUSE=m
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+CONFIG_PCI_PRI=y
+CONFIG_PCI_PASID=y
+
+##
+## file: drivers/pci/controller/Kconfig
+##
+CONFIG_PCI_AARDVARK=y
+CONFIG_PCIE_XILINX_NWL=y
+CONFIG_PCI_TEGRA=y
+CONFIG_PCI_HOST_GENERIC=y
+CONFIG_PCI_XGENE=y
+CONFIG_PCI_HOST_THUNDER_PEM=y
+CONFIG_PCI_HOST_THUNDER_ECAM=y
+CONFIG_PCIE_ROCKCHIP_HOST=y
+CONFIG_PCIE_BRCMSTB=y
+
+##
+## file: drivers/pci/controller/dwc/Kconfig
+##
+CONFIG_PCI_IMX6=y
+CONFIG_PCI_LAYERSCAPE=y
+CONFIG_PCI_HISI=y
+CONFIG_PCIE_QCOM=y
+CONFIG_PCIE_ARMADA_8K=y
+CONFIG_PCIE_KIRIN=y
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+CONFIG_HOTPLUG_PCI=y
+CONFIG_HOTPLUG_PCI_ACPI=y
+CONFIG_HOTPLUG_PCI_ACPI_IBM=m
+CONFIG_HOTPLUG_PCI_CPCI_ZT5550=m
+CONFIG_HOTPLUG_PCI_CPCI_GENERIC=m
+CONFIG_HOTPLUG_PCI_SHPC=y
+
+##
+## file: drivers/pci/pcie/Kconfig
+##
+CONFIG_HOTPLUG_PCI_PCIE=y
+
+##
+## file: drivers/perf/Kconfig
+##
+CONFIG_ARM_CCI_PMU=y
+CONFIG_ARM_CCI400_PMU=y
+CONFIG_ARM_CCI5xx_PMU=y
+CONFIG_ARM_CCN=y
+CONFIG_ARM_CMN=m
+CONFIG_ARM_SMMU_V3_PMU=m
+CONFIG_FSL_IMX8_DDR_PMU=m
+CONFIG_QCOM_L2_PMU=y
+CONFIG_QCOM_L3_PMU=y
+CONFIG_XGENE_PMU=y
+
+##
+## file: drivers/perf/hisilicon/Kconfig
+##
+CONFIG_HISI_PMU=y
+
+##
+## file: drivers/phy/Kconfig
+##
+CONFIG_PHY_XGENE=m
+
+##
+## file: drivers/phy/allwinner/Kconfig
+##
+CONFIG_PHY_SUN4I_USB=m
+
+##
+## file: drivers/phy/amlogic/Kconfig
+##
+CONFIG_PHY_MESON8B_USB2=m
+
+##
+## file: drivers/phy/freescale/Kconfig
+##
+CONFIG_PHY_FSL_IMX8MQ_USB=m
+CONFIG_PHY_MIXEL_MIPI_DPHY=m
+
+##
+## file: drivers/phy/hisilicon/Kconfig
+##
+CONFIG_PHY_HI6220_USB=m
+
+##
+## file: drivers/phy/marvell/Kconfig
+##
+CONFIG_PHY_MVEBU_A3700_COMPHY=m
+CONFIG_PHY_MVEBU_A3700_UTMI=m
+CONFIG_PHY_MVEBU_CP110_COMPHY=m
+
+##
+## file: drivers/phy/qualcomm/Kconfig
+##
+CONFIG_PHY_QCOM_APQ8064_SATA=m
+CONFIG_PHY_QCOM_IPQ806X_SATA=m
+CONFIG_PHY_QCOM_QMP=m
+CONFIG_PHY_QCOM_QUSB2=m
+CONFIG_PHY_QCOM_USB_HS=m
+CONFIG_PHY_QCOM_USB_HSIC=m
+
+##
+## file: drivers/phy/rockchip/Kconfig
+##
+CONFIG_PHY_ROCKCHIP_DP=m
+CONFIG_PHY_ROCKCHIP_EMMC=m
+CONFIG_PHY_ROCKCHIP_INNO_HDMI=m
+CONFIG_PHY_ROCKCHIP_INNO_USB2=m
+CONFIG_PHY_ROCKCHIP_PCIE=m
+CONFIG_PHY_ROCKCHIP_TYPEC=m
+CONFIG_PHY_ROCKCHIP_USB=m
+
+##
+## file: drivers/phy/tegra/Kconfig
+##
+CONFIG_PHY_TEGRA_XUSB=m
+
+##
+## file: drivers/pinctrl/Kconfig
+##
+CONFIG_PINCTRL_AXP209=m
+CONFIG_PINCTRL_AMD=y
+CONFIG_PINCTRL_SINGLE=y
+CONFIG_PINCTRL_MAX77620=y
+CONFIG_PINCTRL_RK805=y
+
+##
+## file: drivers/pinctrl/freescale/Kconfig
+##
+CONFIG_PINCTRL_IMX8MM=y
+CONFIG_PINCTRL_IMX8MN=y
+CONFIG_PINCTRL_IMX8MP=y
+CONFIG_PINCTRL_IMX8MQ=y
+
+##
+## file: drivers/pinctrl/qcom/Kconfig
+##
+CONFIG_PINCTRL_MSM8916=y
+CONFIG_PINCTRL_MSM8996=y
+CONFIG_PINCTRL_QCOM_SPMI_PMIC=y
+CONFIG_PINCTRL_QCOM_SSBI_PMIC=y
+
+##
+## file: drivers/platform/chrome/Kconfig
+##
+CONFIG_CHROME_PLATFORMS=y
+CONFIG_CROS_EC=m
+CONFIG_CROS_EC_I2C=m
+CONFIG_CROS_EC_SPI=m
+CONFIG_CROS_KBD_LED_BACKLIGHT=m
+
+##
+## file: drivers/power/reset/Kconfig
+##
+CONFIG_POWER_RESET_HISI=y
+CONFIG_POWER_RESET_MSM=y
+CONFIG_POWER_RESET_VEXPRESS=y
+CONFIG_POWER_RESET_XGENE=y
+CONFIG_POWER_RESET_SYSCON=y
+CONFIG_POWER_RESET_SYSCON_POWEROFF=y
+
+##
+## file: drivers/power/supply/Kconfig
+##
+CONFIG_BATTERY_CW2015=m
+CONFIG_BATTERY_SBS=m
+CONFIG_BATTERY_BQ27XXX=m
+CONFIG_CHARGER_AXP20X=m
+CONFIG_BATTERY_AXP20X=m
+CONFIG_AXP20X_POWER=m
+CONFIG_AXP288_FUEL_GAUGE=m
+CONFIG_CHARGER_GPIO=m
+CONFIG_CHARGER_QCOM_SMBB=m
+CONFIG_CHARGER_BQ25890=m
+CONFIG_CHARGER_CROS_USBPD=m
+
+##
+## file: drivers/ptp/Kconfig
+##
+CONFIG_PTP_1588_CLOCK_QORIQ=m
+
+##
+## file: drivers/pwm/Kconfig
+##
+CONFIG_PWM=y
+CONFIG_PWM_BCM2835=m
+CONFIG_PWM_CROS_EC=m
+CONFIG_PWM_IMX27=m
+CONFIG_PWM_MESON=m
+CONFIG_PWM_ROCKCHIP=m
+CONFIG_PWM_SL28CPLD=m
+CONFIG_PWM_SUN4I=m
+CONFIG_PWM_TEGRA=m
+
+##
+## file: drivers/regulator/Kconfig
+##
+CONFIG_REGULATOR=y
+CONFIG_REGULATOR_FIXED_VOLTAGE=m
+CONFIG_REGULATOR_AXP20X=m
+CONFIG_REGULATOR_BD718XX=m
+CONFIG_REGULATOR_FAN53555=m
+CONFIG_REGULATOR_GPIO=m
+CONFIG_REGULATOR_HI655X=m
+CONFIG_REGULATOR_MAX77620=m
+CONFIG_REGULATOR_PCA9450=m
+CONFIG_REGULATOR_PFUZE100=m
+CONFIG_REGULATOR_PWM=m
+CONFIG_REGULATOR_QCOM_RPM=m
+CONFIG_REGULATOR_QCOM_SMD_RPM=m
+CONFIG_REGULATOR_QCOM_SPMI=m
+CONFIG_REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY=m
+CONFIG_REGULATOR_RK808=m
+CONFIG_REGULATOR_VCTRL=m
+
+##
+## file: drivers/remoteproc/Kconfig
+##
+CONFIG_QCOM_Q6V5_MSS=m
+#. We want to enable this but it currently results in a dependency loop!
+# CONFIG_QCOM_WCNSS_PIL is not set
+
+##
+## file: drivers/reset/Kconfig
+##
+CONFIG_RESET_CONTROLLER=y
+CONFIG_RESET_IMX7=m
+
+##
+## file: drivers/rpmsg/Kconfig
+##
+CONFIG_RPMSG_QCOM_GLINK_RPM=m
+CONFIG_RPMSG_QCOM_GLINK_SMEM=m
+CONFIG_RPMSG_QCOM_SMD=m
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_DS1307=y
+CONFIG_RTC_DRV_MAX77686=y
+CONFIG_RTC_DRV_RK808=y
+CONFIG_RTC_DRV_PCF85063=y
+CONFIG_RTC_DRV_PCF8563=y
+CONFIG_RTC_DRV_M41T80=m
+CONFIG_RTC_DRV_RV8803=m
+CONFIG_RTC_DRV_PCF2127=m
+CONFIG_RTC_DRV_EFI=y
+CONFIG_RTC_DRV_CROS_EC=m
+CONFIG_RTC_DRV_PL031=y
+CONFIG_RTC_DRV_SUN6I=y
+CONFIG_RTC_DRV_MV=m
+CONFIG_RTC_DRV_ARMADA38X=m
+CONFIG_RTC_DRV_PM8XXX=m
+CONFIG_RTC_DRV_TEGRA=y
+CONFIG_RTC_DRV_SNVS=m
+CONFIG_RTC_DRV_XGENE=y
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_DMX3191D=m
+
+##
+## file: drivers/scsi/hisi_sas/Kconfig
+##
+CONFIG_SCSI_HISI_SAS=m
+CONFIG_SCSI_HISI_SAS_PCI=m
+
+##
+## file: drivers/soc/bcm/Kconfig
+##
+CONFIG_RASPBERRYPI_POWER=y
+
+##
+## file: drivers/soc/fsl/Kconfig
+##
+CONFIG_FSL_MC_DPIO=m
+CONFIG_DPAA2_CONSOLE=m
+
+##
+## file: drivers/soc/qcom/Kconfig
+##
+CONFIG_QCOM_GSBI=m
+CONFIG_QCOM_SMEM=m
+CONFIG_QCOM_SMD_RPM=m
+CONFIG_QCOM_SMP2P=m
+CONFIG_QCOM_SMSM=m
+CONFIG_QCOM_WCNSS_CTRL=m
+
+##
+## file: drivers/soc/rockchip/Kconfig
+##
+CONFIG_ROCKCHIP_IODOMAIN=m
+CONFIG_ROCKCHIP_PM_DOMAINS=y
+
+##
+## file: drivers/soc/tegra/Kconfig
+##
+CONFIG_ARCH_TEGRA_132_SOC=y
+CONFIG_ARCH_TEGRA_210_SOC=y
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI_ARMADA_3700=m
+CONFIG_SPI_BCM2835=m
+CONFIG_SPI_BCM2835AUX=m
+CONFIG_SPI_FSL_QUADSPI=m
+CONFIG_SPI_NXP_FLEXSPI=m
+CONFIG_SPI_IMX=m
+CONFIG_SPI_FSL_DSPI=m
+CONFIG_SPI_MESON_SPICC=m
+CONFIG_SPI_MESON_SPIFC=m
+CONFIG_SPI_ROCKCHIP=m
+CONFIG_SPI_QUP=m
+CONFIG_SPI_TEGRA114=m
+CONFIG_SPI_TEGRA20_SFLASH=m
+CONFIG_SPI_TEGRA20_SLINK=m
+CONFIG_SPI_THUNDERX=m
+CONFIG_SPI_XLP=m
+
+##
+## file: drivers/spmi/Kconfig
+##
+CONFIG_SPMI=y
+CONFIG_SPMI_MSM_PMIC_ARB=y
+
+##
+## file: drivers/staging/media/Kconfig
+##
+CONFIG_STAGING_MEDIA=y
+
+##
+## file: drivers/staging/media/hantro/Kconfig
+##
+CONFIG_VIDEO_HANTRO=m
+
+##
+## file: drivers/staging/media/rkvdec/Kconfig
+##
+CONFIG_VIDEO_ROCKCHIP_VDEC=m
+
+##
+## file: drivers/staging/media/sunxi/Kconfig
+##
+CONFIG_VIDEO_SUNXI=y
+
+##
+## file: drivers/staging/media/sunxi/cedrus/Kconfig
+##
+CONFIG_VIDEO_SUNXI_CEDRUS=m
+
+##
+## file: drivers/staging/rtl8723bs/Kconfig
+##
+CONFIG_RTL8723BS=m
+
+##
+## file: drivers/staging/vc04_services/bcm2835-audio/Kconfig
+##
+CONFIG_SND_BCM2835=m
+
+##
+## file: drivers/staging/vc04_services/bcm2835-camera/Kconfig
+##
+CONFIG_VIDEO_BCM2835=m
+
+##
+## file: drivers/tee/Kconfig
+##
+CONFIG_TEE=m
+
+##
+## file: drivers/tee/optee/Kconfig
+##
+CONFIG_OPTEE=m
+
+##
+## file: drivers/thermal/Kconfig
+##
+CONFIG_THERMAL=y
+CONFIG_CPU_THERMAL=y
+CONFIG_HISI_THERMAL=m
+CONFIG_QORIQ_THERMAL=m
+CONFIG_SUN8I_THERMAL=m
+CONFIG_ROCKCHIP_THERMAL=m
+CONFIG_ARMADA_THERMAL=m
+
+##
+## file: drivers/thermal/broadcom/Kconfig
+##
+CONFIG_BCM2711_THERMAL=m
+CONFIG_BCM2835_THERMAL=m
+
+##
+## file: drivers/thermal/qcom/Kconfig
+##
+CONFIG_QCOM_TSENS=m
+CONFIG_QCOM_SPMI_TEMP_ALARM=m
+
+##
+## file: drivers/thermal/tegra/Kconfig
+##
+CONFIG_TEGRA_SOCTHERM=y
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_AMBA_PL010=y
+CONFIG_SERIAL_AMBA_PL010_CONSOLE=y
+CONFIG_SERIAL_AMBA_PL011=y
+CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
+CONFIG_SERIAL_MESON=y
+CONFIG_SERIAL_MESON_CONSOLE=y
+CONFIG_SERIAL_TEGRA=y
+CONFIG_SERIAL_IMX=y
+CONFIG_SERIAL_IMX_CONSOLE=y
+CONFIG_SERIAL_MSM=y
+CONFIG_SERIAL_MSM_CONSOLE=y
+CONFIG_SERIAL_XILINX_PS_UART=y
+CONFIG_SERIAL_XILINX_PS_UART_CONSOLE=y
+CONFIG_SERIAL_FSL_LPUART=y
+CONFIG_SERIAL_FSL_LPUART_CONSOLE=y
+CONFIG_SERIAL_MVEBU_UART=y
+CONFIG_SERIAL_MVEBU_CONSOLE=y
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_DMA=y
+CONFIG_SERIAL_8250_NR_UARTS=4
+CONFIG_SERIAL_8250_RUNTIME_UARTS=4
+CONFIG_SERIAL_8250_EXTENDED=y
+CONFIG_SERIAL_8250_SHARE_IRQ=y
+CONFIG_SERIAL_8250_BCM2835AUX=y
+CONFIG_SERIAL_8250_DW=y
+# CONFIG_SERIAL_8250_EM is not set
+CONFIG_SERIAL_OF_PLATFORM=y
+
+##
+## file: drivers/usb/chipidea/Kconfig
+##
+CONFIG_USB_CHIPIDEA=m
+CONFIG_USB_CHIPIDEA_UDC=y
+CONFIG_USB_CHIPIDEA_HOST=y
+
+##
+## file: drivers/usb/dwc2/Kconfig
+##
+CONFIG_USB_DWC2=m
+## choice: DWC2 Mode Selection
+CONFIG_USB_DWC2_DUAL_ROLE=y
+## end choice
+
+##
+## file: drivers/usb/dwc3/Kconfig
+##
+CONFIG_USB_DWC3=m
+CONFIG_USB_DWC3_ULPI=y
+## choice: DWC3 Mode Selection
+CONFIG_USB_DWC3_DUAL_ROLE=y
+## end choice
+
+##
+## file: drivers/usb/gadget/Kconfig
+##
+CONFIG_USB_GADGET=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_XHCI_HCD=m
+CONFIG_USB_XHCI_PLATFORM=m
+CONFIG_USB_XHCI_MVEBU=m
+CONFIG_USB_XHCI_TEGRA=m
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_EHCI_HCD_ORION=m
+CONFIG_USB_EHCI_TEGRA=m
+CONFIG_USB_EHCI_HCD_PLATFORM=m
+CONFIG_USB_OHCI_HCD=m
+CONFIG_USB_OHCI_HCD_PLATFORM=m
+
+##
+## file: drivers/usb/isp1760/Kconfig
+##
+CONFIG_USB_ISP1760=m
+## choice: ISP1760 Mode Selection
+# CONFIG_USB_ISP1760_HOST_ROLE is not set
+# CONFIG_USB_ISP1760_GADGET_ROLE is not set
+CONFIG_USB_ISP1760_DUAL_ROLE=y
+## end choice
+
+##
+## file: drivers/usb/misc/Kconfig
+##
+CONFIG_USB_HSIC_USB3503=m
+
+##
+## file: drivers/usb/musb/Kconfig
+##
+CONFIG_USB_MUSB_HDRC=m
+CONFIG_USB_MUSB_SUNXI=m
+
+##
+## file: drivers/usb/phy/Kconfig
+##
+CONFIG_NOP_USB_XCEIV=m
+CONFIG_USB_ULPI=y
+
+##
+## file: drivers/usb/typec/Kconfig
+##
+CONFIG_TYPEC=m
+
+##
+## file: drivers/usb/typec/tcpm/Kconfig
+##
+CONFIG_TYPEC_TCPM=m
+CONFIG_TYPEC_TCPCI=m
+CONFIG_TYPEC_FUSB302=m
+
+##
+## file: drivers/vfio/Kconfig
+##
+CONFIG_VFIO=m
+CONFIG_VFIO_NOIOMMU=y
+
+##
+## file: drivers/vfio/fsl-mc/Kconfig
+##
+CONFIG_VFIO_FSL_MC=m
+
+##
+## file: drivers/vfio/pci/Kconfig
+##
+CONFIG_VFIO_PCI=m
+
+##
+## file: drivers/video/backlight/Kconfig
+##
+CONFIG_BACKLIGHT_LP855X=m
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_ARMCLCD=y
+CONFIG_FB_EFI=y
+CONFIG_FB_SIMPLE=y
+
+##
+## file: drivers/virtio/Kconfig
+##
+CONFIG_VIRTIO_MMIO=m
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_GPIO_WATCHDOG=m
+CONFIG_WDAT_WDT=m
+CONFIG_SL28CPLD_WATCHDOG=m
+CONFIG_ARM_SP805_WATCHDOG=m
+CONFIG_ARM_SBSA_WATCHDOG=m
+CONFIG_ARMADA_37XX_WATCHDOG=m
+CONFIG_DW_WATCHDOG=m
+CONFIG_SUNXI_WATCHDOG=m
+CONFIG_IMX2_WDT=m
+CONFIG_TEGRA_WATCHDOG=m
+CONFIG_QCOM_WDT=m
+CONFIG_MESON_GXBB_WATCHDOG=m
+CONFIG_MESON_WATCHDOG=m
+CONFIG_I6300ESB_WDT=m
+CONFIG_BCM2835_WDT=m
+
+##
+## file: kernel/dma/Kconfig
+##
+CONFIG_DMA_CMA=y
+CONFIG_CMA_SIZE_MBYTES=64
+
+##
+## file: kernel/power/Kconfig
+##
+CONFIG_ENERGY_MODEL=y
+
+##
+## file: lib/Kconfig.debug
+##
+CONFIG_DEBUG_INFO_BTF=y
+
+##
+## file: mm/Kconfig
+##
+CONFIG_CMA=y
+
+##
+## file: mm/Kconfig.debug
+##
+CONFIG_DEBUG_WX=y
+
+##
+## file: net/bluetooth/Kconfig
+##
+CONFIG_BT_LEDS=y
+
+##
+## file: net/dsa/Kconfig
+##
+CONFIG_NET_DSA=m
+
+##
+## file: sound/pci/hda/Kconfig
+##
+CONFIG_SND_HDA_INTEL=m
+CONFIG_SND_HDA_TEGRA=m
+
+##
+## file: sound/soc/Kconfig
+##
+CONFIG_SND_SOC=m
+
+##
+## file: sound/soc/bcm/Kconfig
+##
+CONFIG_SND_BCM2835_SOC_I2S=m
+
+##
+## file: sound/soc/codecs/Kconfig
+##
+CONFIG_SND_SOC_ES8316=m
+CONFIG_SND_SOC_GTM601=m
+CONFIG_SND_SOC_RK3328=m
+CONFIG_SND_SOC_SGTL5000=m
+CONFIG_SND_SOC_SIMPLE_AMPLIFIER=m
+CONFIG_SND_SOC_SPDIF=m
+CONFIG_SND_SOC_WM8904=m
+
+##
+## file: sound/soc/fsl/Kconfig
+##
+CONFIG_SND_SOC_FSL_SAI=m
+CONFIG_SND_SOC_FSL_SPDIF=m
+
+##
+## file: sound/soc/generic/Kconfig
+##
+CONFIG_SND_SIMPLE_CARD=m
+CONFIG_SND_AUDIO_GRAPH_CARD=m
+
+##
+## file: sound/soc/hisilicon/Kconfig
+##
+CONFIG_SND_I2S_HI6210_I2S=m
+
+##
+## file: sound/soc/meson/Kconfig
+##
+CONFIG_SND_MESON_AXG_SOUND_CARD=m
+CONFIG_SND_MESON_GX_SOUND_CARD=m
+
+##
+## file: sound/soc/qcom/Kconfig
+##
+CONFIG_SND_SOC_QCOM=m
+CONFIG_SND_SOC_APQ8016_SBC=m
+
+##
+## file: sound/soc/rockchip/Kconfig
+##
+CONFIG_SND_SOC_ROCKCHIP=m
+CONFIG_SND_SOC_ROCKCHIP_I2S=m
+CONFIG_SND_SOC_ROCKCHIP_PDM=m
+CONFIG_SND_SOC_ROCKCHIP_SPDIF=m
+CONFIG_SND_SOC_ROCKCHIP_RT5645=m
+CONFIG_SND_SOC_RK3399_GRU_SOUND=m
+
+##
+## file: sound/soc/sunxi/Kconfig
+##
+CONFIG_SND_SUN8I_CODEC=m
+CONFIG_SND_SUN50I_CODEC_ANALOG=m
+CONFIG_SND_SUN4I_I2S=m
+
+##
+## file: sound/soc/tegra/Kconfig
+##
+CONFIG_SND_SOC_TEGRA=m
+CONFIG_SND_SOC_TEGRA_RT5640=m
+CONFIG_SND_SOC_TEGRA_WM8753=m
+CONFIG_SND_SOC_TEGRA_WM8903=m
+CONFIG_SND_SOC_TEGRA_TRIMSLICE=m
+CONFIG_SND_SOC_TEGRA_ALC5632=m
+CONFIG_SND_SOC_TEGRA_MAX98090=m
+CONFIG_SND_SOC_TEGRA_RT5677=m
diff --git a/debian/config/arm64/config.cloud-arm64 b/debian/config/arm64/config.cloud-arm64
new file mode 100644
index 000000000000..9091c3b3968d
--- /dev/null
+++ b/debian/config/arm64/config.cloud-arm64
@@ -0,0 +1,112 @@
+##
+## file: arch/arm64/Kconfig.platforms
+##
+# CONFIG_ARCH_ACTIONS is not set
+# CONFIG_ARCH_SUNXI is not set
+CONFIG_ARCH_ALPINE=y
+# CONFIG_ARCH_BCM2835 is not set
+# CONFIG_ARCH_BCM_IPROC is not set
+# CONFIG_ARCH_BERLIN is not set
+# CONFIG_ARCH_BITMAIN is not set
+# CONFIG_ARCH_BRCMSTB is not set
+# CONFIG_ARCH_EXYNOS is not set
+# CONFIG_ARCH_K3 is not set
+# CONFIG_ARCH_LAYERSCAPE is not set
+# CONFIG_ARCH_LG1K is not set
+CONFIG_ARCH_HISI=y
+# CONFIG_ARCH_MEDIATEK is not set
+# CONFIG_ARCH_MESON is not set
+# CONFIG_ARCH_MVEBU is not set
+# CONFIG_ARCH_MXC is not set
+CONFIG_ARCH_QCOM=y
+# CONFIG_ARCH_REALTEK is not set
+# CONFIG_ARCH_RENESAS is not set
+# CONFIG_ARCH_ROCKCHIP is not set
+CONFIG_ARCH_SEATTLE=y
+# CONFIG_ARCH_SYNQUACER is not set
+# CONFIG_ARCH_TEGRA is not set
+# CONFIG_ARCH_SPRD is not set
+CONFIG_ARCH_THUNDER=y
+CONFIG_ARCH_THUNDER2=y
+# CONFIG_ARCH_UNIPHIER is not set
+CONFIG_ARCH_VEXPRESS=y
+CONFIG_ARCH_XGENE=y
+# CONFIG_ARCH_ZYNQMP is not set
+
+##
+## file: drivers/acpi/Kconfig
+##
+CONFIG_ACPI=y
+CONFIG_ACPI_SPCR_TABLE=y
+# CONFIG_ACPI_EC_DEBUGFS is not set
+CONFIG_ACPI_AC=y
+CONFIG_ACPI_BATTERY=y
+CONFIG_ACPI_BUTTON=y
+CONFIG_ACPI_FAN=y
+CONFIG_ACPI_PROCESSOR=y
+CONFIG_ACPI_THERMAL=y
+CONFIG_ACPI_TABLE_UPGRADE=y
+CONFIG_ACPI_PCI_SLOT=y
+CONFIG_ACPI_CONTAINER=y
+CONFIG_ACPI_HOTPLUG_MEMORY=y
+CONFIG_ACPI_HED=y
+
+##
+## file: drivers/acpi/apei/Kconfig
+##
+CONFIG_ACPI_APEI=y
+CONFIG_ACPI_APEI_GHES=y
+CONFIG_ACPI_APEI_PCIEAER=y
+CONFIG_ACPI_APEI_MEMORY_FAILURE=y
+CONFIG_ACPI_APEI_EINJ=m
+
+##
+## file: drivers/acpi/numa/Kconfig
+##
+CONFIG_ACPI_NUMA=y
+
+##
+## file: drivers/ata/Kconfig
+##
+# CONFIG_AHCI_QORIQ is not set
+
+##
+## file: drivers/bus/Kconfig
+##
+CONFIG_VEXPRESS_CONFIG=y
+
+##
+## file: drivers/clk/Kconfig
+##
+# CONFIG_CLK_QORIQ is not set
+
+##
+## file: drivers/cpufreq/Kconfig.arm
+##
+CONFIG_ACPI_CPPC_CPUFREQ=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_ACPI_I2C_OPREGION=y
+
+##
+## file: drivers/power/reset/Kconfig
+##
+CONFIG_POWER_RESET=y
+CONFIG_POWER_RESET_GPIO=y
+CONFIG_POWER_RESET_GPIO_RESTART=y
+CONFIG_POWER_RESET_HISI=y
+CONFIG_POWER_RESET_RESTART=y
+CONFIG_POWER_RESET_VEXPRESS=y
+CONFIG_POWER_RESET_SYSCON=y
+
+##
+## file: drivers/power/supply/Kconfig
+##
+CONFIG_POWER_SUPPLY_HWMON=y
+
+##
+## file: kernel/power/Kconfig
+##
+CONFIG_PM=y
diff --git a/debian/config/arm64/defines b/debian/config/arm64/defines
new file mode 100644
index 000000000000..dec69491a59c
--- /dev/null
+++ b/debian/config/arm64/defines
@@ -0,0 +1,28 @@
+[base]
+cross-compile-compat: arm-linux-gnueabihf-
+kernel-arch: arm64
+featuresets:
+ none
+ rt
+
+[build]
+image-file: arch/arm64/boot/Image
+signed-code: true
+vdso: true
+
+[image]
+install-stem: vmlinuz
+breaks: libmozjs185-1.0, libmozjs-24-0 (<< 24.2.0-5.1~)
+
+[arm64_description]
+hardware: 64-bit ARMv8 machines
+
+[cloud-arm64_description]
+hardware: arm64 cloud
+hardware-long: cloud platforms supporting arm64 virtual machines
+
+[arm64_image]
+
+[relations]
+gcc-11: gcc-11 <!stage1 !cross !pkg.linux.nokernel>, gcc-11-aarch64-linux-gnu <!stage1 cross !pkg.linux.nokernel>, gcc-arm-linux-gnueabihf <!stage1 !pkg.linux.nokernel>
+headers%gcc-11: gcc-11
diff --git a/debian/config/arm64/none/defines b/debian/config/arm64/none/defines
new file mode 100644
index 000000000000..19057684528f
--- /dev/null
+++ b/debian/config/arm64/none/defines
@@ -0,0 +1,10 @@
+[base]
+flavours:
+ arm64
+ cloud-arm64
+default-flavour: arm64
+
+[cloud-arm64_image]
+configs:
+ config.cloud
+ arm64/config.cloud-arm64
diff --git a/debian/config/arm64/rt/config b/debian/config/arm64/rt/config
new file mode 100644
index 000000000000..bd5e81c512f8
--- /dev/null
+++ b/debian/config/arm64/rt/config
@@ -0,0 +1,6 @@
+##
+## file: arch/arm64/kvm/Kconfig
+##
+#. ARCH_SUPPORTS_RT depends on HAVE_POSIX_CPU_TIMERS_TASK_WORK
+#. HAVE_POSIX_CPU_TIMERS_TASK_WORK depneds on !KVM
+# CONFIG_KVM is not set
diff --git a/debian/config/arm64/rt/defines b/debian/config/arm64/rt/defines
new file mode 100644
index 000000000000..fdea40cbcafe
--- /dev/null
+++ b/debian/config/arm64/rt/defines
@@ -0,0 +1,3 @@
+[base]
+flavours:
+ arm64
diff --git a/debian/config/arm64ilp32/defines b/debian/config/arm64ilp32/defines
new file mode 100644
index 000000000000..999d4166e553
--- /dev/null
+++ b/debian/config/arm64ilp32/defines
@@ -0,0 +1,5 @@
+[base]
+kernel-arch: arm64
+featuresets:
+# empty; arm64ilp32 must be part of a multiarch installation with an arm64
+# kernel
diff --git a/debian/config/armel/config b/debian/config/armel/config
new file mode 100644
index 000000000000..b3859d5d3bef
--- /dev/null
+++ b/debian/config/armel/config
@@ -0,0 +1,14 @@
+##
+## file: net/netlabel/Kconfig
+##
+# CONFIG_NETLABEL is not set
+
+##
+## file: security/selinux/Kconfig
+##
+# CONFIG_SECURITY_SELINUX is not set
+
+##
+## file: security/tomoyo/Kconfig
+##
+# CONFIG_SECURITY_TOMOYO is not set
diff --git a/debian/config/armel/config.marvell b/debian/config/armel/config.marvell
new file mode 100644
index 000000000000..2d502cc42ac8
--- /dev/null
+++ b/debian/config/armel/config.marvell
@@ -0,0 +1,859 @@
+##
+## file: arch/Kconfig
+##
+# CONFIG_KPROBES is not set
+# CONFIG_STACKPROTECTOR_STRONG is not set
+# CONFIG_STRICT_KERNEL_RWX is not set
+# CONFIG_STRICT_MODULE_RWX is not set
+
+##
+## file: arch/arm/Kconfig
+##
+CONFIG_ARCH_MULTI_V5=y
+# CONFIG_ARCH_MULTI_V7 is not set
+CONFIG_HIGHMEM=y
+CONFIG_UACCESS_WITH_MEMCPY=y
+CONFIG_ZBOOT_ROM_TEXT=0x0
+CONFIG_ZBOOT_ROM_BSS=0x0
+CONFIG_ARM_APPENDED_DTB=y
+CONFIG_ARM_ATAG_DTB_COMPAT=y
+CONFIG_CMDLINE=""
+# CONFIG_XIP_KERNEL is not set
+CONFIG_ATAGS_PROC=y
+# CONFIG_CRASH_DUMP is not set
+CONFIG_VFP=y
+
+##
+## file: arch/arm/Kconfig.debug
+##
+# CONFIG_DEBUG_WX is not set
+## choice: Kernel low-level debugging port
+# CONFIG_DEBUG_ICEDCC is not set
+CONFIG_DEBUG_LL_UART_8250=y
+## end choice
+#. Kirkwood (with new boot loader) and Orion both have an 8250 at
+#. physical address 0xf1012000.
+CONFIG_DEBUG_UART_PHYS=0xf1012000
+#. MVEBU is flexible about the virtual address (relying on
+#. debug_ll_io_init()) but Orion maps the 8250 as part of a larger
+#. block of registers.  So use the VA that Orion requires.
+CONFIG_DEBUG_UART_VIRT=0xfe012000
+
+##
+## file: arch/arm/mach-imx/Kconfig
+##
+# CONFIG_ARCH_MXC is not set
+
+##
+## file: arch/arm/mach-mvebu/Kconfig
+##
+CONFIG_ARCH_MVEBU=y
+CONFIG_MACH_KIRKWOOD=y
+
+##
+## file: arch/arm/mach-orion5x/Kconfig
+##
+CONFIG_ARCH_ORION5X=y
+CONFIG_MACH_DB88F5281=y
+CONFIG_MACH_RD88F5182=y
+CONFIG_MACH_RD88F5182_DT=y
+CONFIG_MACH_KUROBOX_PRO=y
+#. Only 1.5 MB flash available for kernel
+# CONFIG_MACH_DNS323 is not set
+CONFIG_MACH_TS209=y
+CONFIG_MACH_TERASTATION_PRO2=y
+CONFIG_MACH_LINKSTATION_PRO=y
+CONFIG_MACH_LINKSTATION_MINI=y
+CONFIG_MACH_LINKSTATION_LS_HGL=y
+CONFIG_MACH_TS409=y
+CONFIG_MACH_WRT350N_V2=y
+CONFIG_MACH_TS78XX=y
+CONFIG_MACH_MV2120=y
+CONFIG_MACH_NET2BIG=y
+CONFIG_MACH_MSS2_DT=y
+CONFIG_MACH_WNR854T=y
+CONFIG_MACH_RD88F5181L_GE=y
+CONFIG_MACH_RD88F5181L_FXO=y
+CONFIG_MACH_RD88F6183AP_GE=y
+
+##
+## file: arch/arm/mm/Kconfig
+##
+CONFIG_CPU_FEROCEON_OLD_ID=y
+CONFIG_ARM_THUMB=y
+# CONFIG_CPU_ICACHE_DISABLE is not set
+# CONFIG_CPU_DCACHE_DISABLE is not set
+# CONFIG_CPU_DCACHE_WRITETHROUGH is not set
+
+##
+## file: block/Kconfig
+##
+# CONFIG_BLK_DEV_ZONED is not set
+# CONFIG_BLK_SED_OPAL is not set
+
+##
+## file: block/Kconfig.iosched
+##
+CONFIG_MQ_IOSCHED_DEADLINE=m
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_ACORN_PARTITION=y
+# CONFIG_ACORN_PARTITION_CUMANA is not set
+# CONFIG_ACORN_PARTITION_EESOX is not set
+CONFIG_ACORN_PARTITION_ICS=y
+# CONFIG_ACORN_PARTITION_ADFS is not set
+# CONFIG_ACORN_PARTITION_POWERTEC is not set
+CONFIG_ACORN_PARTITION_RISCIX=y
+CONFIG_OSF_PARTITION=y
+CONFIG_AMIGA_PARTITION=y
+CONFIG_ATARI_PARTITION=y
+CONFIG_MAC_PARTITION=y
+CONFIG_BSD_DISKLABEL=y
+CONFIG_MINIX_SUBPARTITION=y
+CONFIG_SOLARIS_X86_PARTITION=y
+CONFIG_UNIXWARE_DISKLABEL=y
+CONFIG_LDM_PARTITION=y
+# CONFIG_LDM_DEBUG is not set
+CONFIG_SGI_PARTITION=y
+CONFIG_ULTRIX_PARTITION=y
+CONFIG_SUN_PARTITION=y
+
+##
+## file: crypto/Kconfig
+##
+# CONFIG_CRYPTO_FIPS is not set
+#. Saves about 95K
+CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
+CONFIG_CRYPTO_SHA256=m
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_ATA=m
+CONFIG_SATA_AHCI=m
+# CONFIG_SATA_SIL24 is not set
+CONFIG_ATA_SFF=y
+# CONFIG_PDC_ADMA is not set
+# CONFIG_SATA_QSTOR is not set
+# CONFIG_SATA_SX4 is not set
+# CONFIG_ATA_PIIX is not set
+CONFIG_SATA_MV=m
+# CONFIG_SATA_NV is not set
+# CONFIG_SATA_PROMISE is not set
+# CONFIG_SATA_SIL is not set
+# CONFIG_SATA_SIS is not set
+# CONFIG_SATA_SVW is not set
+# CONFIG_SATA_ULI is not set
+# CONFIG_SATA_VIA is not set
+# CONFIG_SATA_VITESSE is not set
+# CONFIG_PATA_ALI is not set
+# CONFIG_PATA_AMD is not set
+# CONFIG_PATA_ARTOP is not set
+# CONFIG_PATA_ATIIXP is not set
+# CONFIG_PATA_CMD64X is not set
+# CONFIG_PATA_CS5520 is not set
+# CONFIG_PATA_CYPRESS is not set
+# CONFIG_PATA_EFAR is not set
+# CONFIG_PATA_HPT366 is not set
+# CONFIG_PATA_HPT37X is not set
+# CONFIG_PATA_HPT3X2N is not set
+# CONFIG_PATA_HPT3X3 is not set
+# CONFIG_PATA_IT8213 is not set
+# CONFIG_PATA_IT821X is not set
+# CONFIG_PATA_JMICRON is not set
+# CONFIG_PATA_MARVELL is not set
+# CONFIG_PATA_NETCELL is not set
+# CONFIG_PATA_NINJA32 is not set
+# CONFIG_PATA_NS87415 is not set
+# CONFIG_PATA_OLDPIIX is not set
+# CONFIG_PATA_OPTIDMA is not set
+# CONFIG_PATA_PDC2027X is not set
+# CONFIG_PATA_PDC_OLD is not set
+# CONFIG_PATA_RADISYS is not set
+# CONFIG_PATA_SC1200 is not set
+# CONFIG_PATA_SCH is not set
+# CONFIG_PATA_SERVERWORKS is not set
+# CONFIG_PATA_SIL680 is not set
+# CONFIG_PATA_SIS is not set
+# CONFIG_PATA_TRIFLEX is not set
+# CONFIG_PATA_VIA is not set
+# CONFIG_PATA_WINBOND is not set
+# CONFIG_PATA_CMD640_PCI is not set
+# CONFIG_PATA_MPIIX is not set
+# CONFIG_PATA_NS87410 is not set
+# CONFIG_PATA_OPTI is not set
+# CONFIG_PATA_RZ1000 is not set
+# CONFIG_ATA_GENERIC is not set
+
+##
+## file: drivers/base/firmware_loader/Kconfig
+##
+CONFIG_FW_LOADER=m
+
+##
+## file: drivers/bluetooth/Kconfig
+##
+# CONFIG_BT_HCIUART is not set
+CONFIG_BT_HCIBCM203X=m
+CONFIG_BT_HCIBPA10X=m
+CONFIG_BT_HCIBFUSB=m
+CONFIG_BT_HCIVHCI=m
+
+##
+## file: drivers/char/hw_random/Kconfig
+##
+# CONFIG_HW_RANDOM is not set
+
+##
+## file: drivers/connector/Kconfig
+##
+CONFIG_CONNECTOR=m
+
+##
+## file: drivers/cpuidle/Kconfig
+##
+CONFIG_CPU_IDLE=y
+
+##
+## file: drivers/cpuidle/Kconfig.arm
+##
+CONFIG_ARM_KIRKWOOD_CPUIDLE=y
+
+##
+## file: drivers/crypto/marvell/Kconfig
+##
+CONFIG_CRYPTO_DEV_MARVELL_CESA=m
+
+##
+## file: drivers/dma/Kconfig
+##
+CONFIG_DMADEVICES=y
+CONFIG_MV_XOR=y
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+# CONFIG_DRM is not set
+
+##
+## file: drivers/gpu/vga/Kconfig
+##
+# CONFIG_VGA_ARB is not set
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_HWMON=m
+CONFIG_SENSORS_G760A=m
+CONFIG_SENSORS_G762=m
+CONFIG_SENSORS_GPIO_FAN=m
+CONFIG_SENSORS_LM63=m
+CONFIG_SENSORS_LM75=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=y
+CONFIG_I2C_CHARDEV=y
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_MV64XXX=y
+
+##
+## file: drivers/input/Kconfig
+##
+CONFIG_INPUT_MOUSEDEV=m
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+CONFIG_GAMEPORT=m
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+CONFIG_INPUT_JOYSTICK=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+# CONFIG_KEYBOARD_ATKBD is not set
+CONFIG_KEYBOARD_GPIO=m
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO=m
+CONFIG_SERIO_SERPORT=m
+# CONFIG_SERIO_PCIPS2 is not set
+CONFIG_SERIO_LIBPS2=m
+# CONFIG_SERIO_RAW is not set
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+CONFIG_INPUT_TOUCHSCREEN=y
+
+##
+## file: drivers/isdn/Kconfig
+##
+CONFIG_ISDN=y
+
+##
+## file: drivers/leds/Kconfig
+##
+CONFIG_LEDS_NS2=m
+CONFIG_LEDS_NETXBIG=m
+
+##
+## file: drivers/leds/trigger/Kconfig
+##
+CONFIG_LEDS_TRIGGER_TIMER=y
+CONFIG_LEDS_TRIGGER_DEFAULT_ON=y
+
+##
+## file: drivers/md/Kconfig
+##
+# CONFIG_DM_INTEGRITY is not set
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=m
+
+##
+## file: drivers/mmc/core/Kconfig
+##
+CONFIG_MMC_BLOCK=m
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+CONFIG_MMC_MVSDIO=m
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_MTD=m
+CONFIG_MTD_BLOCK=m
+CONFIG_FTL=m
+CONFIG_NFTL=m
+# CONFIG_NFTL_RW is not set
+# CONFIG_INFTL is not set
+# CONFIG_RFD_FTL is not set
+# CONFIG_SSFDC is not set
+# CONFIG_MTD_OOPS is not set
+
+##
+## file: drivers/mtd/chips/Kconfig
+##
+CONFIG_MTD_CFI=m
+CONFIG_MTD_JEDECPROBE=m
+CONFIG_MTD_CFI_ADV_OPTIONS=y
+## choice: Flash cmd/query data swapping
+CONFIG_MTD_CFI_NOSWAP=y
+# CONFIG_MTD_CFI_BE_BYTE_SWAP is not set
+# CONFIG_MTD_CFI_LE_BYTE_SWAP is not set
+## end choice
+CONFIG_MTD_CFI_GEOMETRY=y
+CONFIG_MTD_MAP_BANK_WIDTH_1=y
+CONFIG_MTD_MAP_BANK_WIDTH_2=y
+CONFIG_MTD_MAP_BANK_WIDTH_4=y
+# CONFIG_MTD_MAP_BANK_WIDTH_8 is not set
+# CONFIG_MTD_MAP_BANK_WIDTH_16 is not set
+# CONFIG_MTD_MAP_BANK_WIDTH_32 is not set
+CONFIG_MTD_CFI_I1=y
+CONFIG_MTD_CFI_I2=y
+CONFIG_MTD_CFI_I4=y
+# CONFIG_MTD_CFI_I8 is not set
+# CONFIG_MTD_OTP is not set
+#. Needed e.g. on QNAP devices
+CONFIG_MTD_CFI_INTELEXT=m
+#. Needed e.g. on D-Link DNS-323, Buffalo KuroBox-Pro, Buffalo Linkstation LS-GL / LS-WTGL, etc
+CONFIG_MTD_CFI_AMDSTD=m
+CONFIG_MTD_CFI_STAA=m
+# CONFIG_MTD_RAM is not set
+# CONFIG_MTD_ROM is not set
+# CONFIG_MTD_ABSENT is not set
+
+##
+## file: drivers/mtd/devices/Kconfig
+##
+# CONFIG_MTD_PMC551 is not set
+# CONFIG_MTD_SLRAM is not set
+# CONFIG_MTD_PHRAM is not set
+# CONFIG_MTD_MTDRAM is not set
+# CONFIG_MTD_BLOCK2MTD is not set
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+# CONFIG_MTD_COMPLEX_MAPPINGS is not set
+CONFIG_MTD_PHYSMAP=m
+CONFIG_MTD_PHYSMAP_OF=y
+# CONFIG_MTD_IMPA7 is not set
+# CONFIG_MTD_INTEL_VR_NOR is not set
+# CONFIG_MTD_PLATRAM is not set
+
+##
+## file: drivers/mtd/nand/onenand/Kconfig
+##
+# CONFIG_MTD_ONENAND is not set
+
+##
+## file: drivers/mtd/nand/raw/Kconfig
+##
+CONFIG_MTD_RAW_NAND=m
+# CONFIG_MTD_NAND_CAFE is not set
+CONFIG_MTD_NAND_ORION=m
+# CONFIG_MTD_NAND_DISKONCHIP is not set
+
+##
+## file: drivers/mtd/parsers/Kconfig
+##
+CONFIG_MTD_CMDLINE_PARTS=m
+CONFIG_MTD_OF_PARTS=m
+# CONFIG_MTD_AFS_PARTS is not set
+# CONFIG_MTD_REDBOOT_PARTS is not set
+
+##
+## file: drivers/mtd/spi-nor/Kconfig
+##
+CONFIG_MTD_SPI_NOR=m
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+# CONFIG_ARCNET is not set
+
+##
+## file: drivers/net/ethernet/atheros/Kconfig
+##
+# CONFIG_ATL1 is not set
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+# CONFIG_BNX2 is not set
+# CONFIG_TIGON3 is not set
+# CONFIG_BNX2X is not set
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+# CONFIG_DL2K is not set
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+# CONFIG_E1000 is not set
+# CONFIG_E1000E is not set
+# CONFIG_IGB is not set
+
+##
+## file: drivers/net/ethernet/marvell/Kconfig
+##
+CONFIG_MV643XX_ETH=m
+CONFIG_MVMDIO=m
+# CONFIG_SKGE is not set
+# CONFIG_SKY2 is not set
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+# CONFIG_NS83820 is not set
+
+##
+## file: drivers/net/ethernet/packetengines/Kconfig
+##
+# CONFIG_HAMACHI is not set
+# CONFIG_YELLOWFIN is not set
+
+##
+## file: drivers/net/ethernet/qlogic/Kconfig
+##
+# CONFIG_QLA3XXX is not set
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+# CONFIG_R8169 is not set
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+# CONFIG_SIS190 is not set
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+# CONFIG_VIA_VELOCITY is not set
+
+##
+## file: drivers/net/wireless/marvell/mwifiex/Kconfig
+##
+CONFIG_MWIFIEX=m
+CONFIG_MWIFIEX_SDIO=m
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+
+##
+## file: drivers/pci/controller/Kconfig
+##
+CONFIG_PCI_MVEBU=y
+
+##
+## file: drivers/pci/pcie/Kconfig
+##
+# CONFIG_PCIEAER is not set
+# CONFIG_PCIEASPM is not set
+# CONFIG_PCIE_DPC is not set
+# CONFIG_PCIE_PTM is not set
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+# CONFIG_PCCARD is not set
+
+##
+## file: drivers/power/reset/Kconfig
+##
+CONFIG_POWER_RESET=y
+CONFIG_POWER_RESET_GPIO=y
+CONFIG_POWER_RESET_QNAP=y
+CONFIG_POWER_RESET_RESTART=y
+
+##
+## file: drivers/regulator/Kconfig
+##
+CONFIG_REGULATOR=y
+CONFIG_REGULATOR_FIXED_VOLTAGE=y
+
+##
+## file: drivers/rtc/Kconfig
+##
+# CONFIG_RTC_NVMEM is not set
+CONFIG_RTC_DRV_DS1307=m
+CONFIG_RTC_DRV_RS5C372=m
+CONFIG_RTC_DRV_PCF8563=m
+CONFIG_RTC_DRV_M41T80=m
+CONFIG_RTC_DRV_S35390A=m
+CONFIG_RTC_DRV_MV=m
+
+##
+## file: drivers/scsi/Kconfig
+##
+# CONFIG_BLK_DEV_3W_XXXX_RAID is not set
+# CONFIG_SCSI_3W_9XXX is not set
+# CONFIG_SCSI_AACRAID is not set
+# CONFIG_SCSI_DPT_I2O is not set
+# CONFIG_SCSI_ARCMSR is not set
+# CONFIG_SCSI_HPTIOP is not set
+# CONFIG_SCSI_DMX3191D is not set
+# CONFIG_SCSI_IPS is not set
+# CONFIG_SCSI_INITIO is not set
+# CONFIG_SCSI_INIA100 is not set
+# CONFIG_SCSI_STEX is not set
+# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_IPR is not set
+# CONFIG_SCSI_QLOGIC_1280 is not set
+# CONFIG_SCSI_LPFC is not set
+# CONFIG_SCSI_DC395x is not set
+# CONFIG_SCSI_NSP32 is not set
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic79xx
+##
+# CONFIG_SCSI_AIC79XX is not set
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic7xxx
+##
+# CONFIG_SCSI_AIC7XXX is not set
+
+##
+## file: drivers/scsi/aic94xx/Kconfig
+##
+# CONFIG_SCSI_AIC94XX is not set
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+# CONFIG_MEGARAID_NEWGEN is not set
+# CONFIG_MEGARAID_LEGACY is not set
+# CONFIG_MEGARAID_SAS is not set
+
+##
+## file: drivers/scsi/mvsas/Kconfig
+##
+# CONFIG_SCSI_MVSAS is not set
+
+##
+## file: drivers/scsi/qla2xxx/Kconfig
+##
+# CONFIG_SCSI_QLA_FC is not set
+
+##
+## file: drivers/scsi/qla4xxx/Kconfig
+##
+# CONFIG_SCSI_QLA_ISCSI is not set
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI_ORION=m
+
+##
+## file: drivers/ssb/Kconfig
+##
+# CONFIG_SSB is not set
+
+##
+## file: drivers/thermal/Kconfig
+##
+CONFIG_THERMAL=y
+CONFIG_KIRKWOOD_THERMAL=m
+
+##
+## file: drivers/tty/Kconfig
+##
+# CONFIG_VT is not set
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_PCI=m
+CONFIG_SERIAL_8250_EXAR=m
+CONFIG_SERIAL_8250_NR_UARTS=4
+CONFIG_SERIAL_8250_RUNTIME_UARTS=2
+# CONFIG_SERIAL_8250_EXTENDED is not set
+# CONFIG_SERIAL_8250_DW is not set
+CONFIG_SERIAL_OF_PLATFORM=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB_SUPPORT=y
+CONFIG_USB=m
+
+##
+## file: drivers/usb/atm/Kconfig
+##
+CONFIG_USB_ATM=m
+CONFIG_USB_SPEEDTOUCH=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_EHCI_HCD_ORION=y
+# CONFIG_USB_ISP116X_HCD is not set
+CONFIG_USB_OHCI_HCD=m
+CONFIG_USB_UHCI_HCD=m
+CONFIG_USB_SL811_HCD=m
+
+##
+## file: drivers/usb/misc/Kconfig
+##
+#. Selects BACKLIGHT_CLASS_DEVICE which is always built-in
+# CONFIG_USB_APPLEDISPLAY is not set
+
+##
+## file: drivers/video/backlight/Kconfig
+##
+# CONFIG_BACKLIGHT_CLASS_DEVICE is not set
+
+##
+## file: drivers/video/console/Kconfig
+##
+# CONFIG_VGA_CONSOLE is not set
+#. We want to enable this as a module, but that's not currently possible
+# CONFIG_FRAMEBUFFER_CONSOLE is not set
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB=m
+
+##
+## file: drivers/virtio/Kconfig
+##
+# CONFIG_VIRTIO_PCI is not set
+# CONFIG_VIRTIO_BALLOON is not set
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_ORION_WATCHDOG=m
+
+##
+## file: fs/Kconfig
+##
+# CONFIG_FS_DAX is not set
+
+##
+## file: fs/crypto/Kconfig
+##
+# CONFIG_FS_ENCRYPTION is not set
+
+##
+## file: fs/nls/Kconfig
+##
+CONFIG_NLS=m
+
+##
+## file: fs/notify/fanotify/Kconfig
+##
+# CONFIG_FANOTIFY_ACCESS_PERMISSIONS is not set
+
+##
+## file: init/Kconfig
+##
+#. Saves about 7K
+# CONFIG_MEMCG is not set
+# CONFIG_CFS_BANDWIDTH is not set
+# CONFIG_CGROUP_RDMA is not set
+# CONFIG_CGROUP_BPF is not set
+# CONFIG_CHECKPOINT_RESTORE is not set
+## choice: Compiler optimization level
+CONFIG_CC_OPTIMIZE_FOR_SIZE=y
+## end choice
+# CONFIG_USERFAULTFD is not set
+# CONFIG_SLUB_DEBUG is not set
+# CONFIG_SLAB_FREELIST_HARDENED is not set
+# CONFIG_PROFILING is not set
+# CONFIG_MODULE_SIG is not set
+
+##
+## file: kernel/bpf/Kconfig
+##
+#. Saves about 3K
+# CONFIG_BPF_JIT is not set
+
+##
+## file: kernel/power/Kconfig
+##
+# CONFIG_SUSPEND is not set
+# CONFIG_HIBERNATION is not set
+# CONFIG_PM is not set
+
+##
+## file: kernel/trace/Kconfig
+##
+# CONFIG_FUNCTION_GRAPH_TRACER is not set
+# CONFIG_STACK_TRACER is not set
+# CONFIG_FTRACE_SYSCALLS is not set
+# CONFIG_UPROBE_EVENTS is not set
+
+##
+## file: lib/Kconfig.debug
+##
+# CONFIG_SCHEDSTATS is not set
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+CONFIG_FLATMEM_MANUAL=y
+# CONFIG_SPARSEMEM_MANUAL is not set
+## end choice
+# CONFIG_KSM is not set
+# CONFIG_ZSWAP is not set
+
+##
+## file: mm/Kconfig.debug
+##
+# CONFIG_PAGE_EXTENSION is not set
+# CONFIG_PAGE_POISONING is not set
+
+##
+## file: net/Kconfig
+##
+# CONFIG_BPF_STREAM_PARSER is not set
+# CONFIG_LWTUNNEL is not set
+
+##
+## file: net/atm/Kconfig
+##
+CONFIG_ATM=m
+
+##
+## file: net/ipv6/Kconfig
+##
+CONFIG_IPV6=m
+#. Can be modular, but selects LWTUNNEL which cannot
+# CONFIG_IPV6_ILA is not set
+
+##
+## file: net/l3mdev/Kconfig
+##
+# CONFIG_NET_L3_MASTER_DEV is not set
+
+##
+## file: net/mpls/Kconfig
+##
+# CONFIG_NET_MPLS_GSO is not set
+
+##
+## file: net/packet/Kconfig
+##
+CONFIG_PACKET=m
+
+##
+## file: net/switchdev/Kconfig
+##
+# CONFIG_NET_SWITCHDEV is not set
+
+##
+## file: net/xdp/Kconfig
+##
+# CONFIG_XDP_SOCKETS is not set
+
+##
+## file: security/integrity/Kconfig
+##
+# CONFIG_INTEGRITY is not set
+
+##
+## file: security/lockdown/Kconfig
+##
+# CONFIG_SECURITY_LOCKDOWN_LSM is not set
+
+##
+## file: sound/soc/Kconfig
+##
+CONFIG_SND_SOC=m
+
+##
+## file: sound/soc/codecs/Kconfig
+##
+# CONFIG_SND_SOC_ALL_CODECS is not set
+CONFIG_SND_SOC_ALC5623=m
+CONFIG_SND_SOC_CS42L51_I2C=m
+
+##
+## file: sound/soc/generic/Kconfig
+##
+CONFIG_SND_SIMPLE_CARD=m
+
+##
+## file: sound/soc/kirkwood/Kconfig
+##
+CONFIG_SND_KIRKWOOD_SOC=m
+
+##
+## file: usr/Kconfig
+##
+# CONFIG_RD_BZIP2 is not set
+# CONFIG_RD_LZMA is not set
+# CONFIG_RD_LZO is not set
+# CONFIG_RD_LZ4 is not set
diff --git a/debian/config/armel/config.rpi b/debian/config/armel/config.rpi
new file mode 100644
index 000000000000..416bb1ba6a69
--- /dev/null
+++ b/debian/config/armel/config.rpi
@@ -0,0 +1,214 @@
+##
+## file: arch/arm/Kconfig
+##
+CONFIG_ARCH_MULTI_V6=y
+# CONFIG_ARCH_MULTI_V7 is not set
+CONFIG_VFP=y
+
+##
+## file: arch/arm/mach-bcm/Kconfig
+##
+CONFIG_ARCH_BCM=y
+CONFIG_ARCH_BCM2835=y
+
+##
+## file: drivers/bluetooth/Kconfig
+##
+CONFIG_BT_HCIUART=m
+
+##
+## file: drivers/clk/bcm/Kconfig
+##
+CONFIG_CLK_RASPBERRYPI=y
+
+##
+## file: drivers/cpufreq/Kconfig
+##
+## choice: Default CPUFreq governor
+# CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE is not set
+CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND=y
+## end choice
+CONFIG_CPU_FREQ_GOV_ONDEMAND=y
+CONFIG_CPUFREQ_DT=m
+
+##
+## file: drivers/cpufreq/Kconfig.arm
+##
+CONFIG_ARM_RASPBERRYPI_CPUFREQ=m
+
+##
+## file: drivers/dma/Kconfig
+##
+CONFIG_DMADEVICES=y
+CONFIG_DMA_BCM2835=y
+
+##
+## file: drivers/firmware/Kconfig
+##
+CONFIG_RASPBERRYPI_FIRMWARE=y
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=y
+
+##
+## file: drivers/gpu/drm/vc4/Kconfig
+##
+CONFIG_DRM_VC4=y
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_RASPBERRYPI_HWMON=m
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_BCM2835=y
+
+##
+## file: drivers/iommu/Kconfig
+##
+# CONFIG_IOMMU_SUPPORT is not set
+
+##
+## file: drivers/mailbox/Kconfig
+##
+CONFIG_MAILBOX=y
+CONFIG_BCM2835_MBOX=y
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=y
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+CONFIG_MMC_SDHCI_PLTFM=y
+CONFIG_MMC_SDHCI_IPROC=y
+CONFIG_MMC_BCM2835=y
+
+##
+## file: drivers/net/wireless/broadcom/brcm80211/brcmfmac/Kconfig
+##
+CONFIG_BRCMFMAC_SDIO=y
+
+##
+## file: drivers/pwm/Kconfig
+##
+CONFIG_PWM=y
+CONFIG_PWM_BCM2835=y
+
+##
+## file: drivers/soc/bcm/Kconfig
+##
+CONFIG_RASPBERRYPI_POWER=y
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI_BCM2835=y
+CONFIG_SPI_BCM2835AUX=y
+
+##
+## file: drivers/staging/vc04_services/bcm2835-audio/Kconfig
+##
+CONFIG_SND_BCM2835=m
+
+##
+## file: drivers/staging/vc04_services/bcm2835-camera/Kconfig
+##
+CONFIG_VIDEO_BCM2835=m
+
+##
+## file: drivers/thermal/broadcom/Kconfig
+##
+CONFIG_BCM2835_THERMAL=y
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_AMBA_PL011=y
+CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_EXTENDED=y
+CONFIG_SERIAL_8250_SHARE_IRQ=y
+CONFIG_SERIAL_8250_BCM2835AUX=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=y
+
+##
+## file: drivers/usb/core/Kconfig
+##
+CONFIG_USB_OTG=y
+
+##
+## file: drivers/usb/dwc2/Kconfig
+##
+CONFIG_USB_DWC2=y
+
+##
+## file: drivers/usb/gadget/Kconfig
+##
+CONFIG_USB_GADGET=y
+
+##
+## file: drivers/usb/gadget/legacy/Kconfig
+##
+CONFIG_USB_ETH_EEM=y
+
+##
+## file: drivers/usb/phy/Kconfig
+##
+CONFIG_NOP_USB_XCEIV=y
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_SIMPLE=y
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_BCM2835_WDT=y
+
+##
+## file: kernel/dma/Kconfig
+##
+CONFIG_DMA_CMA=y
+CONFIG_CMA_SIZE_MBYTES=32
+
+##
+## file: kernel/power/Kconfig
+##
+# CONFIG_SUSPEND is not set
+
+##
+## file: lib/xz/Kconfig
+##
+# CONFIG_XZ_DEC_ARMTHUMB is not set
+
+##
+## file: mm/Kconfig
+##
+CONFIG_CMA=y
+
+##
+## file: sound/soc/Kconfig
+##
+CONFIG_SND_SOC=y
+
+##
+## file: sound/soc/bcm/Kconfig
+##
+CONFIG_SND_BCM2835_SOC_I2S=y
diff --git a/debian/config/armel/defines b/debian/config/armel/defines
new file mode 100644
index 000000000000..031067afd01b
--- /dev/null
+++ b/debian/config/armel/defines
@@ -0,0 +1,40 @@
+[base]
+flavours:
+ marvell
+ rpi
+kernel-arch: arm
+
+[build]
+image-file: arch/arm/boot/zImage
+# uncompressed-image is just for size checking
+uncompressed-image-file: arch/arm/boot/Image
+
+[image]
+install-stem: vmlinuz
+
+[relations]
+headers%gcc-11: linux-compiler-gcc-11-arm
+
+[marvell_description]
+hardware: Marvell Kirkwood/Orion
+hardware-long: Marvell Kirkwood and Orion based systems (https://wiki.debian.org/ArmEabiPort#Supported_hardware)
+
+[rpi_description]
+hardware: Raspberry Pi Zero, Zero W and 1
+hardware-long: Raspberry Pi Zero, Zero W and 1 based systems
+
+[marvell_image]
+recommends: u-boot-tools
+## Maximum kernel size for supported devices (64 bytes is the u-boot header)
+# SheevaPlug: 4194304 - 64 = 4194240
+# QNAP TS-119/TS-219: 2097152 - 64 = 2097088
+# D-Link DNS-323: 1572864 - 8 - 64 = 1572792 (too small, no longer supported)
+# HP Media Vault mv2120: 2097152 - 8 - 64 = 2097080
+# QNAP TS-109/TS-209 & TS-409: 2097152 - 8 - 64 = 2097080
+# Buffalo Linkstation LS-WSXL/WXL/WVL (from stock kernel): 2729776 - 64 = 2729712
+check-size: 2729712
+check-size-with-dtb: true
+## Maximum uncompressed kernel size for supported devices
+# Buffalo Linkstation LS-WSXL/WXL/WVL: 7340032
+#TODO# check-uncompressed-size: 7340032
+breaks: flash-kernel (<< 3.57~)
diff --git a/debian/config/armhf/config b/debian/config/armhf/config
new file mode 100644
index 000000000000..64122e61875e
--- /dev/null
+++ b/debian/config/armhf/config
@@ -0,0 +1,1676 @@
+##
+## file: arch/arm/Kconfig
+##
+## choice: ARM system type
+CONFIG_ARCH_MULTIPLATFORM=y
+## end choice
+# CONFIG_ARCH_MULTI_V6 is not set
+CONFIG_ARCH_MULTI_V7=y
+CONFIG_ARCH_VIRT=y
+CONFIG_ARM_ERRATA_430973=y
+CONFIG_ARM_ERRATA_643719=y
+CONFIG_ARM_ERRATA_754327=y
+CONFIG_ARM_ERRATA_773022=y
+CONFIG_SMP=y
+CONFIG_SMP_ON_UP=y
+CONFIG_MCPM=y
+CONFIG_NR_CPUS=8
+CONFIG_HIGHMEM=y
+CONFIG_XEN=y
+CONFIG_ARM_APPENDED_DTB=y
+CONFIG_ARM_ATAG_DTB_COMPAT=y
+## choice: Kernel command line type
+CONFIG_ARM_ATAG_DTB_COMPAT_CMDLINE_FROM_BOOTLOADER=y
+# CONFIG_ARM_ATAG_DTB_COMPAT_CMDLINE_EXTEND is not set
+## end choice
+CONFIG_ATAGS_PROC=y
+CONFIG_EFI=y
+#. Enable floating point unit
+CONFIG_VFP=y
+CONFIG_NEON=y
+CONFIG_KERNEL_MODE_NEON=y
+
+##
+## file: arch/arm/Kconfig.debug
+##
+#. DEBUG_LL is incompatible with multiplatform
+# CONFIG_DEBUG_LL is not set
+
+##
+## file: arch/arm/crypto/Kconfig
+##
+CONFIG_CRYPTO_SHA1_ARM_NEON=m
+CONFIG_CRYPTO_SHA1_ARM_CE=m
+CONFIG_CRYPTO_SHA2_ARM_CE=m
+CONFIG_CRYPTO_BLAKE2B_NEON=m
+CONFIG_CRYPTO_AES_ARM_BS=m
+CONFIG_CRYPTO_AES_ARM_CE=m
+CONFIG_CRYPTO_GHASH_ARM_CE=m
+CONFIG_CRYPTO_CRCT10DIF_ARM_CE=m
+CONFIG_CRYPTO_CRC32_ARM_CE=m
+CONFIG_CRYPTO_NHPOLY1305_NEON=m
+
+##
+## file: arch/arm/mach-aspeed/Kconfig
+##
+CONFIG_ARCH_ASPEED=y
+CONFIG_MACH_ASPEED_G6=y
+
+##
+## file: arch/arm/mach-bcm/Kconfig
+##
+CONFIG_ARCH_BCM=y
+CONFIG_ARCH_BCM2835=y
+
+##
+## file: arch/arm/mach-exynos/Kconfig
+##
+CONFIG_ARCH_EXYNOS=y
+# CONFIG_ARCH_EXYNOS3 is not set
+CONFIG_ARCH_EXYNOS4=y
+CONFIG_ARCH_EXYNOS5=y
+
+##
+## file: arch/arm/mach-highbank/Kconfig
+##
+CONFIG_ARCH_HIGHBANK=y
+
+##
+## file: arch/arm/mach-imx/Kconfig
+##
+CONFIG_ARCH_MXC=y
+CONFIG_SOC_IMX51=y
+CONFIG_SOC_IMX53=y
+CONFIG_SOC_IMX6Q=y
+CONFIG_SOC_IMX6SL=y
+CONFIG_SOC_IMX6SLL=y
+CONFIG_SOC_IMX6SX=y
+CONFIG_SOC_IMX6UL=y
+
+##
+## file: arch/arm/mach-meson/Kconfig
+##
+CONFIG_ARCH_MESON=y
+
+##
+## file: arch/arm/mach-mmp/Kconfig
+##
+CONFIG_ARCH_MMP=y
+CONFIG_MACH_MMP2_DT=y
+CONFIG_MACH_MMP3_DT=y
+
+##
+## file: arch/arm/mach-mvebu/Kconfig
+##
+CONFIG_ARCH_MVEBU=y
+CONFIG_MACH_ARMADA_370=y
+CONFIG_MACH_ARMADA_375=y
+CONFIG_MACH_ARMADA_38X=y
+CONFIG_MACH_ARMADA_39X=y
+CONFIG_MACH_ARMADA_XP=y
+CONFIG_MACH_DOVE=y
+
+##
+## file: arch/arm/mach-omap1/Kconfig
+##
+CONFIG_OMAP_MUX=y
+# CONFIG_OMAP_MUX_DEBUG is not set
+CONFIG_OMAP_MUX_WARNINGS=y
+
+##
+## file: arch/arm/mach-omap2/Kconfig
+##
+# CONFIG_ARCH_OMAP2 is not set
+CONFIG_ARCH_OMAP3=y
+CONFIG_ARCH_OMAP4=y
+CONFIG_SOC_OMAP5=y
+CONFIG_SOC_AM33XX=y
+CONFIG_SOC_DRA7XX=y
+CONFIG_ARCH_OMAP2PLUS_TYPICAL=y
+CONFIG_SOC_OMAP3430=y
+CONFIG_SOC_TI81XX=y
+
+##
+## file: arch/arm/mach-rockchip/Kconfig
+##
+CONFIG_ARCH_ROCKCHIP=y
+
+##
+## file: arch/arm/mach-socfpga/Kconfig
+##
+CONFIG_ARCH_INTEL_SOCFPGA=y
+
+##
+## file: arch/arm/mach-stm32/Kconfig
+##
+CONFIG_ARCH_STM32=y
+
+##
+## file: arch/arm/mach-sunxi/Kconfig
+##
+CONFIG_ARCH_SUNXI=y
+
+##
+## file: arch/arm/mach-tegra/Kconfig
+##
+CONFIG_ARCH_TEGRA=y
+
+##
+## file: arch/arm/mach-vexpress/Kconfig
+##
+CONFIG_ARCH_VEXPRESS=y
+CONFIG_ARCH_VEXPRESS_CORTEX_A5_A9_ERRATA=y
+
+##
+## file: arch/arm/mach-vt8500/Kconfig
+##
+CONFIG_ARCH_WM8850=y
+
+##
+## file: arch/arm/mm/Kconfig
+##
+CONFIG_ARM_THUMBEE=y
+CONFIG_CACHE_TAUROS2=y
+
+##
+## file: arch/arm/plat-omap/Kconfig
+##
+CONFIG_POWER_AVS_OMAP=y
+CONFIG_POWER_AVS_OMAP_CLASS3=y
+CONFIG_OMAP_RESET_CLOCKS=y
+# CONFIG_OMAP_MPU_TIMER is not set
+CONFIG_OMAP_32K_TIMER=y
+# CONFIG_OMAP3_L2_AUX_SECURE_SAVE_RESTORE is not set
+CONFIG_OMAP_SERIAL_WAKE=y
+
+##
+## file: drivers/android/Kconfig
+##
+CONFIG_ANDROID=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_SATA_AHCI_PLATFORM=m
+CONFIG_AHCI_IMX=m
+CONFIG_AHCI_MVEBU=m
+CONFIG_AHCI_SUNXI=m
+CONFIG_AHCI_TEGRA=m
+CONFIG_SATA_HIGHBANK=m
+CONFIG_PATA_IMX=m
+CONFIG_PATA_PLATFORM=m
+CONFIG_PATA_OF_PLATFORM=m
+
+##
+## file: drivers/auxdisplay/Kconfig
+##
+CONFIG_ARM_CHARLCD=y
+
+##
+## file: drivers/bluetooth/Kconfig
+##
+CONFIG_BT_HCIUART=m
+
+##
+## file: drivers/bus/Kconfig
+##
+CONFIG_OMAP_INTERCONNECT=m
+CONFIG_OMAP_OCP2SCP=m
+
+##
+## file: drivers/char/hw_random/Kconfig
+##
+CONFIG_HW_RANDOM_BCM2835=m
+CONFIG_HW_RANDOM_OMAP=m
+CONFIG_HW_RANDOM_STM32=m
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+CONFIG_ASPEED_KCS_IPMI_BMC=m
+CONFIG_ASPEED_BT_IPMI_BMC=m
+
+##
+## file: drivers/clk/Kconfig
+##
+CONFIG_COMMON_CLK_MAX77686=m
+CONFIG_COMMON_CLK_RK808=m
+CONFIG_COMMON_CLK_SI5351=m
+CONFIG_COMMON_CLK_ASPEED=y
+CONFIG_COMMON_CLK_S2MPS11=m
+CONFIG_CLK_TWL6040=m
+CONFIG_COMMON_CLK_MMP2_AUDIO=m
+
+##
+## file: drivers/clk/bcm/Kconfig
+##
+CONFIG_CLK_RASPBERRYPI=y
+
+##
+## file: drivers/clk/sunxi-ng/Kconfig
+##
+CONFIG_SUNXI_CCU=y
+CONFIG_SUN8I_DE2_CCU=y
+
+##
+## file: drivers/cpufreq/Kconfig
+##
+## choice: Default CPUFreq governor
+# CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE is not set
+CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL=y
+## end choice
+CONFIG_CPUFREQ_DT=m
+
+##
+## file: drivers/cpufreq/Kconfig.arm
+##
+CONFIG_ARM_IMX6Q_CPUFREQ=m
+CONFIG_ARM_RASPBERRYPI_CPUFREQ=m
+CONFIG_ARM_TEGRA20_CPUFREQ=y
+
+##
+## file: drivers/cpuidle/Kconfig.arm
+##
+CONFIG_ARM_EXYNOS_CPUIDLE=y
+
+##
+## file: drivers/crypto/Kconfig
+##
+CONFIG_CRYPTO_DEV_OMAP_SHAM=m
+CONFIG_CRYPTO_DEV_OMAP_AES=m
+
+##
+## file: drivers/crypto/allwinner/Kconfig
+##
+CONFIG_CRYPTO_DEV_SUN4I_SS=m
+
+##
+## file: drivers/crypto/marvell/Kconfig
+##
+CONFIG_CRYPTO_DEV_MARVELL_CESA=m
+
+##
+## file: drivers/crypto/stm32/Kconfig
+##
+CONFIG_CRYPTO_DEV_STM32_CRC=m
+CONFIG_CRYPTO_DEV_STM32_HASH=m
+CONFIG_CRYPTO_DEV_STM32_CRYP=m
+
+##
+## file: drivers/devfreq/Kconfig
+##
+CONFIG_PM_DEVFREQ=y
+CONFIG_ARM_TEGRA_DEVFREQ=m
+
+##
+## file: drivers/dma/Kconfig
+##
+CONFIG_DMADEVICES=y
+CONFIG_AMBA_PL08X=y
+CONFIG_DMA_BCM2835=y
+CONFIG_DMA_SUN6I=m
+CONFIG_IMX_DMA=y
+CONFIG_IMX_SDMA=y
+CONFIG_MV_XOR=y
+CONFIG_MXS_DMA=y
+CONFIG_PL330_DMA=y
+CONFIG_STM32_DMA=y
+CONFIG_STM32_DMAMUX=y
+CONFIG_STM32_MDMA=y
+CONFIG_TEGRA20_APB_DMA=y
+
+##
+## file: drivers/dma/ti/Kconfig
+##
+CONFIG_TI_CPPI41=m
+CONFIG_TI_EDMA=y
+CONFIG_DMA_OMAP=y
+
+##
+## file: drivers/extcon/Kconfig
+##
+CONFIG_EXTCON=m
+CONFIG_EXTCON_AXP288=m
+CONFIG_EXTCON_PALMAS=m
+CONFIG_EXTCON_USB_GPIO=m
+
+##
+## file: drivers/firmware/Kconfig
+##
+CONFIG_RASPBERRYPI_FIRMWARE=y
+
+##
+## file: drivers/fsi/Kconfig
+##
+CONFIG_FSI=m
+# CONFIG_FSI_NEW_DEV_NODE is not set
+CONFIG_FSI_MASTER_GPIO=m
+CONFIG_FSI_MASTER_HUB=m
+CONFIG_FSI_MASTER_ASPEED=m
+CONFIG_FSI_SCOM=m
+CONFIG_FSI_SBEFIFO=m
+CONFIG_FSI_OCC=m
+
+##
+## file: drivers/gpio/Kconfig
+##
+CONFIG_GPIOLIB=y
+CONFIG_GPIO_ASPEED=m
+CONFIG_GPIO_GENERIC_PLATFORM=m
+CONFIG_GPIO_MXC=m
+CONFIG_GPIO_PCA953X=m
+CONFIG_GPIO_PCA953X_IRQ=y
+CONFIG_GPIO_PCF857X=m
+CONFIG_GPIO_DA9052=m
+CONFIG_GPIO_PALMAS=y
+CONFIG_GPIO_TWL4030=y
+CONFIG_GPIO_TWL6040=y
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+
+##
+## file: drivers/gpu/drm/armada/Kconfig
+##
+CONFIG_DRM_ARMADA=m
+
+##
+## file: drivers/gpu/drm/aspeed/Kconfig
+##
+CONFIG_DRM_ASPEED_GFX=m
+
+##
+## file: drivers/gpu/drm/bridge/Kconfig
+##
+CONFIG_DRM_DISPLAY_CONNECTOR=m
+CONFIG_DRM_SII902X=m
+CONFIG_DRM_TI_TPD12S015=m
+
+##
+## file: drivers/gpu/drm/bridge/synopsys/Kconfig
+##
+CONFIG_DRM_DW_HDMI_AHB_AUDIO=m
+CONFIG_DRM_DW_HDMI_I2S_AUDIO=m
+CONFIG_DRM_DW_HDMI_CEC=m
+
+##
+## file: drivers/gpu/drm/etnaviv/Kconfig
+##
+CONFIG_DRM_ETNAVIV=m
+
+##
+## file: drivers/gpu/drm/exynos/Kconfig
+##
+CONFIG_DRM_EXYNOS=m
+CONFIG_DRM_EXYNOS_FIMD=y
+CONFIG_DRM_EXYNOS_MIXER=y
+CONFIG_DRM_EXYNOS_DSI=y
+CONFIG_DRM_EXYNOS_DP=y
+CONFIG_DRM_EXYNOS_HDMI=y
+
+##
+## file: drivers/gpu/drm/i2c/Kconfig
+##
+CONFIG_DRM_I2C_NXP_TDA998X=m
+
+##
+## file: drivers/gpu/drm/imx/Kconfig
+##
+CONFIG_DRM_IMX=m
+CONFIG_DRM_IMX_PARALLEL_DISPLAY=m
+CONFIG_DRM_IMX_LDB=m
+CONFIG_DRM_IMX_HDMI=m
+
+##
+## file: drivers/gpu/drm/lima/Kconfig
+##
+CONFIG_DRM_LIMA=m
+
+##
+## file: drivers/gpu/drm/nouveau/Kconfig
+##
+CONFIG_NOUVEAU_PLATFORM_DRIVER=y
+
+##
+## file: drivers/gpu/drm/omapdrm/Kconfig
+##
+CONFIG_DRM_OMAP=m
+CONFIG_OMAP2_DSS_VENC=y
+CONFIG_OMAP4_DSS_HDMI=y
+CONFIG_OMAP5_DSS_HDMI=y
+CONFIG_OMAP2_DSS_SDI=y
+CONFIG_OMAP2_DSS_DSI=y
+
+##
+## file: drivers/gpu/drm/panel/Kconfig
+##
+CONFIG_DRM_PANEL_SIMPLE=m
+CONFIG_DRM_PANEL_ORISETECH_OTM8009A=m
+CONFIG_DRM_PANEL_RASPBERRYPI_TOUCHSCREEN=m
+CONFIG_DRM_PANEL_SONY_ACX565AKM=m
+CONFIG_DRM_PANEL_TPO_TD028TTEC1=m
+CONFIG_DRM_PANEL_TPO_TD043MTEA1=m
+
+##
+## file: drivers/gpu/drm/panfrost/Kconfig
+##
+CONFIG_DRM_PANFROST=m
+
+##
+## file: drivers/gpu/drm/rockchip/Kconfig
+##
+CONFIG_DRM_ROCKCHIP=m
+CONFIG_ROCKCHIP_ANALOGIX_DP=y
+CONFIG_ROCKCHIP_DW_HDMI=y
+CONFIG_ROCKCHIP_DW_MIPI_DSI=y
+
+##
+## file: drivers/gpu/drm/stm/Kconfig
+##
+CONFIG_DRM_STM=m
+CONFIG_DRM_STM_DSI=m
+
+##
+## file: drivers/gpu/drm/sun4i/Kconfig
+##
+CONFIG_DRM_SUN4I=m
+CONFIG_DRM_SUN4I_HDMI=m
+CONFIG_DRM_SUN4I_HDMI_CEC=y
+CONFIG_DRM_SUN4I_BACKEND=m
+CONFIG_DRM_SUN8I_DW_HDMI=m
+CONFIG_DRM_SUN8I_MIXER=m
+
+##
+## file: drivers/gpu/drm/tegra/Kconfig
+##
+CONFIG_DRM_TEGRA=m
+# CONFIG_DRM_TEGRA_DEBUG is not set
+CONFIG_DRM_TEGRA_STAGING=y
+
+##
+## file: drivers/gpu/drm/tilcdc/Kconfig
+##
+CONFIG_DRM_TILCDC=m
+
+##
+## file: drivers/gpu/host1x/Kconfig
+##
+CONFIG_TEGRA_HOST1X=m
+CONFIG_TEGRA_HOST1X_FIREWALL=y
+
+##
+## file: drivers/gpu/ipu-v3/Kconfig
+##
+CONFIG_IMX_IPUV3_CORE=m
+
+##
+## file: drivers/hsi/Kconfig
+##
+CONFIG_HSI=m
+
+##
+## file: drivers/hsi/clients/Kconfig
+##
+CONFIG_NOKIA_MODEM=m
+CONFIG_CMT_SPEECH=m
+CONFIG_SSI_PROTOCOL=m
+
+##
+## file: drivers/hsi/controllers/Kconfig
+##
+CONFIG_OMAP_SSI=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_ASPEED=m
+CONFIG_SENSORS_G762=m
+CONFIG_SENSORS_GPIO_FAN=m
+CONFIG_SENSORS_LM75=m
+CONFIG_SENSORS_PWM_FAN=m
+
+##
+## file: drivers/hwmon/occ/Kconfig
+##
+CONFIG_SENSORS_OCC_P9_SBE=m
+
+##
+## file: drivers/hwmon/pmbus/Kconfig
+##
+CONFIG_PMBUS=m
+CONFIG_SENSORS_PMBUS=m
+CONFIG_SENSORS_IBM_CFFPS=m
+CONFIG_SENSORS_MAX31785=m
+
+##
+## file: drivers/hwspinlock/Kconfig
+##
+CONFIG_HWSPINLOCK_OMAP=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C_MUX=m
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_ASPEED=m
+CONFIG_I2C_BCM2835=m
+CONFIG_I2C_EXYNOS5=m
+CONFIG_I2C_GPIO=y
+CONFIG_I2C_IMX=m
+CONFIG_I2C_MESON=m
+CONFIG_I2C_MV64XXX=m
+CONFIG_I2C_OMAP=y
+CONFIG_I2C_PXA=m
+CONFIG_I2C_RK3X=m
+CONFIG_I2C_S3C2410=y
+CONFIG_I2C_STM32F7=m
+CONFIG_I2C_SUN6I_P2WI=m
+CONFIG_I2C_TEGRA=y
+CONFIG_I2C_VERSATILE=m
+CONFIG_I2C_CROS_EC_TUNNEL=m
+CONFIG_I2C_FSI=m
+
+##
+## file: drivers/i2c/muxes/Kconfig
+##
+CONFIG_I2C_ARB_GPIO_CHALLENGE=m
+CONFIG_I2C_MUX_PCA954x=m
+CONFIG_I2C_MUX_PINCTRL=m
+
+##
+## file: drivers/iio/Kconfig
+##
+CONFIG_IIO=m
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_KEYBOARD_GPIO=y
+CONFIG_KEYBOARD_IMX=m
+CONFIG_KEYBOARD_TEGRA=m
+CONFIG_KEYBOARD_SUN4I_LRADC=m
+CONFIG_KEYBOARD_OMAP4=m
+CONFIG_KEYBOARD_TWL4030=m
+CONFIG_KEYBOARD_CROS_EC=m
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MMA8450=m
+CONFIG_INPUT_TPS65218_PWRBUTTON=m
+CONFIG_INPUT_AXP20X_PEK=m
+CONFIG_INPUT_TWL4030_PWRBUTTON=m
+CONFIG_INPUT_TWL4030_VIBRA=m
+CONFIG_INPUT_TWL6040_VIBRA=m
+CONFIG_INPUT_RK805_PWRKEY=m
+CONFIG_INPUT_STPMIC1_ONKEY=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_MOUSE_PS2_LOGIPS2PP=y
+CONFIG_MOUSE_PS2_SYNAPTICS=y
+CONFIG_MOUSE_PS2_TRACKPOINT=y
+CONFIG_MOUSE_ELAN_I2C=m
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO_AMBAKMI=m
+CONFIG_SERIO_OLPC_APSP=m
+CONFIG_SERIO_SUN4I_PS2=m
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+CONFIG_INPUT_TOUCHSCREEN=y
+CONFIG_TOUCHSCREEN_EDT_FT5X06=m
+CONFIG_TOUCHSCREEN_TI_AM335X_TSC=m
+CONFIG_TOUCHSCREEN_TSC2005=m
+CONFIG_TOUCHSCREEN_STMPE=m
+CONFIG_TOUCHSCREEN_SUN4I=m
+
+##
+## file: drivers/iommu/Kconfig
+##
+CONFIG_OMAP_IOMMU=y
+# CONFIG_OMAP_IOMMU_DEBUG is not set
+CONFIG_ROCKCHIP_IOMMU=y
+CONFIG_TEGRA_IOMMU_SMMU=y
+
+##
+## file: drivers/leds/Kconfig
+##
+CONFIG_LEDS_CLASS=y
+CONFIG_LEDS_ARIEL=m
+CONFIG_LEDS_LP5523=m
+CONFIG_LEDS_PCA963X=m
+CONFIG_LEDS_DA9052=m
+CONFIG_LEDS_PWM=m
+CONFIG_LEDS_TCA6507=m
+
+##
+## file: drivers/leds/trigger/Kconfig
+##
+CONFIG_LEDS_TRIGGER_GPIO=m
+
+##
+## file: drivers/mailbox/Kconfig
+##
+CONFIG_MAILBOX=y
+CONFIG_OMAP2PLUS_MBOX=y
+CONFIG_OMAP_MBOX_KFIFO_SIZE=256
+CONFIG_BCM2835_MBOX=y
+
+##
+## file: drivers/media/Kconfig
+##
+CONFIG_MEDIA_SUPPORT=y
+CONFIG_MEDIA_CONTROLLER=y
+
+##
+## file: drivers/media/platform/Kconfig
+##
+CONFIG_VIDEO_ASPEED=m
+CONFIG_VIDEO_MUX=m
+CONFIG_VIDEO_OMAP3=m
+CONFIG_VIDEO_CODA=m
+CONFIG_VIDEO_IMX_PXP=m
+CONFIG_VIDEO_TI_VPE=m
+
+##
+## file: drivers/media/platform/marvell-ccic/Kconfig
+##
+CONFIG_VIDEO_MMP_CAMERA=m
+
+##
+## file: drivers/media/platform/omap/Kconfig
+##
+CONFIG_VIDEO_OMAP2_VOUT=m
+
+##
+## file: drivers/media/radio/Kconfig
+##
+CONFIG_RADIO_ADAPTERS=y
+CONFIG_RADIO_SI4713=m
+
+##
+## file: drivers/media/radio/si4713/Kconfig
+##
+CONFIG_I2C_SI4713=m
+
+##
+## file: drivers/media/radio/wl128x/Kconfig
+##
+CONFIG_RADIO_WL128X=m
+
+##
+## file: drivers/media/rc/Kconfig
+##
+CONFIG_IR_GPIO_CIR=m
+CONFIG_IR_SUNXI=m
+
+##
+## file: drivers/media/v4l2-core/Kconfig
+##
+CONFIG_VIDEO_V4L2_SUBDEV_API=y
+
+##
+## file: drivers/memory/Kconfig
+##
+CONFIG_TI_EMIF=m
+
+##
+## file: drivers/memory/tegra/Kconfig
+##
+CONFIG_TEGRA_MC=y
+CONFIG_TEGRA124_EMC=y
+
+##
+## file: drivers/mfd/Kconfig
+##
+CONFIG_MFD_AS3722=y
+CONFIG_MFD_AC100=y
+CONFIG_MFD_AXP20X_I2C=y
+CONFIG_MFD_AXP20X_RSB=y
+# CONFIG_MFD_CROS_EC_DEV is not set
+CONFIG_MFD_DA9052_SPI=y
+CONFIG_MFD_DA9052_I2C=y
+CONFIG_MFD_ENE_KB3930=m
+CONFIG_MFD_MC13XXX_SPI=m
+CONFIG_MFD_MC13XXX_I2C=m
+CONFIG_MFD_MAX77686=y
+CONFIG_MFD_RK808=y
+CONFIG_MFD_SEC_CORE=y
+CONFIG_MFD_STMPE=y
+CONFIG_MFD_TI_AM335X_TSCADC=m
+CONFIG_MFD_PALMAS=y
+CONFIG_MFD_TPS65217=m
+CONFIG_TWL4030_CORE=y
+CONFIG_TWL6040_CORE=y
+CONFIG_MFD_STM32_LPTIMER=m
+CONFIG_MFD_STPMIC1=m
+
+##
+## file: drivers/misc/ti-st/Kconfig
+##
+CONFIG_TI_ST=m
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=y
+
+##
+## file: drivers/mmc/core/Kconfig
+##
+CONFIG_PWRSEQ_SD8787=m
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+CONFIG_MMC_ARMMMCI=m
+CONFIG_MMC_SDHCI=m
+CONFIG_MMC_SDHCI_PLTFM=m
+CONFIG_MMC_SDHCI_OF_ASPEED=m
+CONFIG_MMC_SDHCI_ESDHC_IMX=m
+CONFIG_MMC_SDHCI_DOVE=m
+CONFIG_MMC_SDHCI_TEGRA=m
+CONFIG_MMC_SDHCI_S3C=m
+CONFIG_MMC_SDHCI_PXAV3=m
+CONFIG_MMC_SDHCI_IPROC=m
+CONFIG_MMC_MESON_MX_SDIO=m
+CONFIG_MMC_OMAP=m
+CONFIG_MMC_OMAP_HS=m
+CONFIG_MMC_MVSDIO=m
+CONFIG_MMC_SPI=m
+CONFIG_MMC_DW=m
+CONFIG_MMC_DW_EXYNOS=m
+CONFIG_MMC_DW_ROCKCHIP=m
+CONFIG_MMC_WMT=m
+CONFIG_MMC_SUNXI=m
+CONFIG_MMC_BCM2835=m
+CONFIG_MMC_SDHCI_OMAP=m
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_MTD=y
+
+##
+## file: drivers/mtd/nand/onenand/Kconfig
+##
+CONFIG_MTD_ONENAND=y
+CONFIG_MTD_ONENAND_OMAP2=m
+
+##
+## file: drivers/mtd/nand/raw/Kconfig
+##
+CONFIG_MTD_RAW_NAND=y
+CONFIG_MTD_NAND_OMAP2=m
+CONFIG_MTD_NAND_ORION=m
+CONFIG_MTD_NAND_MARVELL=m
+CONFIG_MTD_NAND_GPMI_NAND=m
+CONFIG_MTD_NAND_MXC=m
+CONFIG_MTD_NAND_SUNXI=m
+CONFIG_MTD_NAND_STM32_FMC2=m
+
+##
+## file: drivers/mtd/spi-nor/controllers/Kconfig
+##
+CONFIG_SPI_ASPEED_SMC=m
+
+##
+## file: drivers/mux/Kconfig
+##
+CONFIG_MUX_MMIO=m
+
+##
+## file: drivers/net/can/Kconfig
+##
+CONFIG_CAN_FLEXCAN=m
+CONFIG_CAN_SUN4I=m
+
+##
+## file: drivers/net/can/c_can/Kconfig
+##
+CONFIG_CAN_C_CAN=m
+CONFIG_CAN_C_CAN_PLATFORM=m
+
+##
+## file: drivers/net/dsa/Kconfig
+##
+CONFIG_NET_DSA_BCM_SF2=m
+CONFIG_NET_DSA_MV88E6060=m
+
+##
+## file: drivers/net/dsa/b53/Kconfig
+##
+CONFIG_B53=m
+CONFIG_B53_MDIO_DRIVER=m
+
+##
+## file: drivers/net/dsa/mv88e6xxx/Kconfig
+##
+CONFIG_NET_DSA_MV88E6XXX=m
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+CONFIG_FEALNX=m
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_NET_VENDOR_3COM=y
+CONFIG_TYPHOON=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_NET_VENDOR_8390=y
+CONFIG_NE2K_PCI=m
+
+##
+## file: drivers/net/ethernet/adaptec/Kconfig
+##
+CONFIG_NET_VENDOR_ADAPTEC=y
+CONFIG_ADAPTEC_STARFIRE=m
+
+##
+## file: drivers/net/ethernet/allwinner/Kconfig
+##
+CONFIG_SUN4I_EMAC=m
+
+##
+## file: drivers/net/ethernet/arc/Kconfig
+##
+CONFIG_EMAC_ROCKCHIP=m
+
+##
+## file: drivers/net/ethernet/calxeda/Kconfig
+##
+CONFIG_NET_CALXEDA_XGMAC=m
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_NET_TULIP=y
+CONFIG_DE2104X=m
+CONFIG_TULIP=m
+# CONFIG_TULIP_MWI is not set
+# CONFIG_TULIP_MMIO is not set
+CONFIG_WINBOND_840=m
+CONFIG_DM9102=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_NET_VENDOR_DLINK=y
+CONFIG_SUNDANCE=m
+# CONFIG_SUNDANCE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/faraday/Kconfig
+##
+CONFIG_FTGMAC100=m
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_NET_VENDOR_INTEL=y
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/marvell/Kconfig
+##
+CONFIG_MV643XX_ETH=m
+CONFIG_MVMDIO=m
+CONFIG_MVNETA=m
+CONFIG_MVPP2=m
+
+##
+## file: drivers/net/ethernet/microchip/Kconfig
+##
+CONFIG_ENC28J60=m
+# CONFIG_ENC28J60_WRITEVERIFY is not set
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NET_VENDOR_NATSEMI=y
+CONFIG_NATSEMI=m
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_8139CP=m
+CONFIG_8139TOO=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_NET_VENDOR_SMSC=y
+CONFIG_SMC91X=m
+CONFIG_EPIC100=m
+CONFIG_SMC911X=m
+CONFIG_SMSC911X=m
+
+##
+## file: drivers/net/ethernet/stmicro/stmmac/Kconfig
+##
+CONFIG_STMMAC_ETH=m
+CONFIG_DWMAC_GENERIC=m
+CONFIG_DWMAC_ROCKCHIP=m
+CONFIG_DWMAC_SOCFPGA=m
+CONFIG_DWMAC_SUNXI=m
+
+##
+## file: drivers/net/ethernet/ti/Kconfig
+##
+CONFIG_TI_DAVINCI_EMAC=m
+CONFIG_TI_DAVINCI_MDIO=m
+CONFIG_TI_CPSW=m
+CONFIG_TI_CPSW_SWITCHDEV=m
+CONFIG_TI_CPTS=y
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+CONFIG_FDDI=y
+CONFIG_SKFP=m
+
+##
+## file: drivers/net/mdio/Kconfig
+##
+CONFIG_MDIO_SUN4I=y
+CONFIG_MDIO_ASPEED=m
+
+##
+## file: drivers/net/wireless/broadcom/brcm80211/brcmfmac/Kconfig
+##
+CONFIG_BRCMFMAC=m
+CONFIG_BRCMFMAC_SDIO=y
+
+##
+## file: drivers/net/wireless/ti/Kconfig
+##
+CONFIG_WLAN_VENDOR_TI=y
+CONFIG_WILINK_PLATFORM_DATA=y
+
+##
+## file: drivers/net/wireless/ti/wl1251/Kconfig
+##
+CONFIG_WL1251=m
+CONFIG_WL1251_SPI=m
+CONFIG_WL1251_SDIO=m
+
+##
+## file: drivers/net/wireless/ti/wl12xx/Kconfig
+##
+CONFIG_WL12XX=m
+
+##
+## file: drivers/net/wireless/ti/wl18xx/Kconfig
+##
+CONFIG_WL18XX=m
+
+##
+## file: drivers/net/wireless/ti/wlcore/Kconfig
+##
+CONFIG_WLCORE_SPI=m
+CONFIG_WLCORE_SDIO=m
+
+##
+## file: drivers/nvmem/Kconfig
+##
+CONFIG_NVMEM_IMX_OCOTP=m
+CONFIG_ROCKCHIP_EFUSE=m
+CONFIG_NVMEM_SUNXI_SID=m
+CONFIG_MESON_MX_EFUSE=m
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+
+##
+## file: drivers/pci/controller/Kconfig
+##
+CONFIG_PCI_MVEBU=y
+CONFIG_PCI_TEGRA=y
+CONFIG_PCI_HOST_GENERIC=y
+
+##
+## file: drivers/pci/controller/dwc/Kconfig
+##
+CONFIG_PCI_DRA7XX_HOST=y
+CONFIG_PCI_IMX6=y
+
+##
+## file: drivers/phy/allwinner/Kconfig
+##
+CONFIG_PHY_SUN4I_USB=m
+CONFIG_PHY_SUN9I_USB=m
+
+##
+## file: drivers/phy/marvell/Kconfig
+##
+CONFIG_PHY_MVEBU_A38X_COMPHY=m
+CONFIG_PHY_PXA_USB=m
+CONFIG_PHY_MMP3_USB=m
+
+##
+## file: drivers/phy/rockchip/Kconfig
+##
+CONFIG_PHY_ROCKCHIP_DP=m
+CONFIG_PHY_ROCKCHIP_EMMC=m
+CONFIG_PHY_ROCKCHIP_INNO_HDMI=m
+CONFIG_PHY_ROCKCHIP_USB=m
+
+##
+## file: drivers/phy/samsung/Kconfig
+##
+CONFIG_PHY_EXYNOS_DP_VIDEO=m
+CONFIG_PHY_EXYNOS_MIPI_VIDEO=m
+CONFIG_PHY_SAMSUNG_USB2=m
+CONFIG_PHY_EXYNOS5_USBDRD=m
+CONFIG_PHY_EXYNOS5250_SATA=m
+
+##
+## file: drivers/phy/st/Kconfig
+##
+CONFIG_PHY_STM32_USBPHYC=m
+
+##
+## file: drivers/phy/tegra/Kconfig
+##
+CONFIG_PHY_TEGRA_XUSB=m
+
+##
+## file: drivers/phy/ti/Kconfig
+##
+CONFIG_OMAP_CONTROL_PHY=m
+CONFIG_OMAP_USB2=m
+CONFIG_TI_PIPE3=y
+CONFIG_TWL4030_USB=m
+
+##
+## file: drivers/pinctrl/Kconfig
+##
+CONFIG_PINCTRL_AS3722=y
+CONFIG_PINCTRL_AXP209=m
+CONFIG_PINCTRL_MCP23S08=m
+CONFIG_PINCTRL_SINGLE=y
+CONFIG_PINCTRL_PALMAS=y
+CONFIG_PINCTRL_RK805=y
+
+##
+## file: drivers/pinctrl/aspeed/Kconfig
+##
+CONFIG_PINCTRL_ASPEED_G6=y
+
+##
+## file: drivers/pinctrl/vt8500/Kconfig
+##
+CONFIG_PINCTRL_WM8850=y
+
+##
+## file: drivers/platform/chrome/Kconfig
+##
+CONFIG_CHROME_PLATFORMS=y
+CONFIG_CROS_EC=m
+CONFIG_CROS_EC_SPI=m
+
+##
+## file: drivers/platform/olpc/Kconfig
+##
+CONFIG_OLPC_XO175=y
+CONFIG_OLPC_XO175_EC=m
+
+##
+## file: drivers/power/reset/Kconfig
+##
+CONFIG_POWER_RESET=y
+CONFIG_POWER_RESET_AS3722=y
+CONFIG_POWER_RESET_GPIO=y
+CONFIG_POWER_RESET_GPIO_RESTART=y
+CONFIG_POWER_RESET_RESTART=y
+CONFIG_POWER_RESET_SYSCON=y
+CONFIG_POWER_RESET_SYSCON_POWEROFF=y
+
+##
+## file: drivers/power/supply/Kconfig
+##
+CONFIG_BATTERY_OLPC=m
+CONFIG_BATTERY_SBS=m
+CONFIG_BATTERY_BQ27XXX=m
+CONFIG_CHARGER_AXP20X=m
+CONFIG_BATTERY_AXP20X=m
+CONFIG_AXP20X_POWER=m
+CONFIG_AXP288_CHARGER=m
+CONFIG_AXP288_FUEL_GAUGE=m
+CONFIG_BATTERY_TWL4030_MADC=m
+CONFIG_BATTERY_RX51=m
+CONFIG_CHARGER_ISP1704=m
+CONFIG_CHARGER_TWL4030=m
+CONFIG_CHARGER_GPIO=m
+CONFIG_CHARGER_BQ2415X=m
+
+##
+## file: drivers/pwm/Kconfig
+##
+CONFIG_PWM=y
+CONFIG_PWM_BCM2835=m
+CONFIG_PWM_IMX27=m
+CONFIG_PWM_MESON=m
+CONFIG_PWM_OMAP_DMTIMER=m
+CONFIG_PWM_ROCKCHIP=m
+CONFIG_PWM_SAMSUNG=m
+CONFIG_PWM_STM32_LP=m
+CONFIG_PWM_SUN4I=m
+CONFIG_PWM_TEGRA=m
+CONFIG_PWM_TIECAP=m
+CONFIG_PWM_TIEHRPWM=m
+CONFIG_PWM_TWL=m
+CONFIG_PWM_TWL_LED=m
+CONFIG_PWM_VT8500=m
+
+##
+## file: drivers/regulator/Kconfig
+##
+CONFIG_REGULATOR=y
+CONFIG_REGULATOR_ACT8865=m
+CONFIG_REGULATOR_ANATOP=m
+CONFIG_REGULATOR_AS3722=y
+CONFIG_REGULATOR_AXP20X=m
+CONFIG_REGULATOR_DA9052=m
+CONFIG_REGULATOR_FAN53555=m
+CONFIG_REGULATOR_GPIO=m
+CONFIG_REGULATOR_MAX77686=m
+CONFIG_REGULATOR_MC13783=m
+CONFIG_REGULATOR_MC13892=m
+CONFIG_REGULATOR_PALMAS=y
+CONFIG_REGULATOR_PBIAS=m
+CONFIG_REGULATOR_PFUZE100=m
+CONFIG_REGULATOR_RK808=m
+CONFIG_REGULATOR_S2MPA01=m
+CONFIG_REGULATOR_S2MPS11=m
+CONFIG_REGULATOR_S5M8767=m
+CONFIG_REGULATOR_STM32_BOOSTER=m
+CONFIG_REGULATOR_STM32_VREFBUF=m
+CONFIG_REGULATOR_STM32_PWR=y
+CONFIG_REGULATOR_STPMIC1=m
+CONFIG_REGULATOR_TI_ABB=m
+CONFIG_REGULATOR_SY8106A=m
+CONFIG_REGULATOR_TPS65910=m
+CONFIG_REGULATOR_TWL4030=y
+CONFIG_REGULATOR_VEXPRESS=m
+
+##
+## file: drivers/remoteproc/Kconfig
+##
+CONFIG_REMOTEPROC=y
+CONFIG_STM32_RPROC=m
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_AC100=y
+CONFIG_RTC_DRV_AS3722=y
+CONFIG_RTC_DRV_DS1307=y
+CONFIG_RTC_DRV_MAX77686=y
+CONFIG_RTC_DRV_RK808=y
+CONFIG_RTC_DRV_PCF8523=y
+CONFIG_RTC_DRV_PCF8563=y
+CONFIG_RTC_DRV_TWL4030=y
+CONFIG_RTC_DRV_PALMAS=y
+CONFIG_RTC_DRV_S5M=y
+CONFIG_RTC_DRV_DA9052=y
+CONFIG_RTC_DRV_EFI=y
+CONFIG_RTC_DRV_IMXDI=y
+CONFIG_RTC_DRV_OMAP=y
+CONFIG_RTC_DRV_PL030=y
+CONFIG_RTC_DRV_PL031=y
+CONFIG_RTC_DRV_VT8500=y
+CONFIG_RTC_DRV_SUN6I=y
+CONFIG_RTC_DRV_SUNXI=y
+CONFIG_RTC_DRV_MV=y
+CONFIG_RTC_DRV_ARMADA38X=y
+CONFIG_RTC_DRV_MC13XXX=y
+CONFIG_RTC_DRV_TEGRA=y
+CONFIG_RTC_DRV_MXC=y
+CONFIG_RTC_DRV_SNVS=y
+CONFIG_RTC_DRV_STM32=y
+CONFIG_RTC_DRV_ASPEED=m
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_DMX3191D=m
+CONFIG_SCSI_AM53C974=m
+
+##
+## file: drivers/soc/aspeed/Kconfig
+##
+CONFIG_ASPEED_LPC_CTRL=m
+CONFIG_ASPEED_LPC_SNOOP=m
+CONFIG_ASPEED_P2A_CTRL=m
+
+##
+## file: drivers/soc/bcm/Kconfig
+##
+CONFIG_RASPBERRYPI_POWER=y
+
+##
+## file: drivers/soc/rockchip/Kconfig
+##
+CONFIG_ROCKCHIP_IODOMAIN=m
+CONFIG_ROCKCHIP_PM_DOMAINS=y
+
+##
+## file: drivers/soc/tegra/Kconfig
+##
+# CONFIG_ARCH_TEGRA_2x_SOC is not set
+# CONFIG_ARCH_TEGRA_3x_SOC is not set
+# CONFIG_ARCH_TEGRA_114_SOC is not set
+CONFIG_ARCH_TEGRA_124_SOC=y
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI=y
+CONFIG_SPI_BCM2835=m
+CONFIG_SPI_BCM2835AUX=m
+CONFIG_SPI_GPIO=y
+CONFIG_SPI_IMX=m
+CONFIG_SPI_MESON_SPICC=m
+CONFIG_SPI_MESON_SPIFC=m
+CONFIG_SPI_OMAP24XX=m
+CONFIG_SPI_TI_QSPI=m
+CONFIG_SPI_ORION=m
+CONFIG_SPI_PL022=m
+CONFIG_SPI_PXA2XX=m
+CONFIG_SPI_ROCKCHIP=m
+CONFIG_SPI_STM32=m
+CONFIG_SPI_STM32_QSPI=m
+CONFIG_SPI_SUN4I=m
+CONFIG_SPI_SUN6I=m
+CONFIG_SPI_TEGRA114=m
+CONFIG_SPI_TEGRA20_SFLASH=m
+CONFIG_SPI_SLAVE=y
+
+##
+## file: drivers/staging/media/Kconfig
+##
+CONFIG_STAGING_MEDIA=y
+
+##
+## file: drivers/staging/media/imx/Kconfig
+##
+CONFIG_VIDEO_IMX_MEDIA=m
+CONFIG_VIDEO_IMX_CSI=m
+
+##
+## file: drivers/staging/media/sunxi/Kconfig
+##
+CONFIG_VIDEO_SUNXI=y
+
+##
+## file: drivers/staging/media/sunxi/cedrus/Kconfig
+##
+CONFIG_VIDEO_SUNXI_CEDRUS=m
+
+##
+## file: drivers/staging/vc04_services/bcm2835-audio/Kconfig
+##
+CONFIG_SND_BCM2835=m
+
+##
+## file: drivers/staging/vc04_services/bcm2835-camera/Kconfig
+##
+CONFIG_VIDEO_BCM2835=m
+
+##
+## file: drivers/thermal/Kconfig
+##
+CONFIG_IMX_THERMAL=m
+CONFIG_ROCKCHIP_THERMAL=m
+CONFIG_DOVE_THERMAL=m
+CONFIG_ARMADA_THERMAL=y
+
+##
+## file: drivers/thermal/broadcom/Kconfig
+##
+CONFIG_BCM2835_THERMAL=m
+
+##
+## file: drivers/thermal/tegra/Kconfig
+##
+CONFIG_TEGRA_SOCTHERM=y
+
+##
+## file: drivers/thermal/ti-soc-thermal/Kconfig
+##
+CONFIG_TI_SOC_THERMAL=m
+CONFIG_TI_THERMAL=y
+CONFIG_OMAP4_THERMAL=y
+CONFIG_OMAP5_THERMAL=y
+CONFIG_DRA752_THERMAL=y
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_AMBA_PL010=y
+CONFIG_SERIAL_AMBA_PL010_CONSOLE=y
+CONFIG_SERIAL_AMBA_PL011=y
+CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
+CONFIG_SERIAL_MESON=y
+CONFIG_SERIAL_MESON_CONSOLE=y
+CONFIG_SERIAL_SAMSUNG=y
+CONFIG_SERIAL_SAMSUNG_CONSOLE=y
+CONFIG_SERIAL_TEGRA=y
+CONFIG_SERIAL_IMX=y
+CONFIG_SERIAL_IMX_CONSOLE=y
+CONFIG_SERIAL_VT8500=y
+CONFIG_SERIAL_VT8500_CONSOLE=y
+CONFIG_SERIAL_OMAP=y
+CONFIG_SERIAL_OMAP_CONSOLE=y
+CONFIG_SERIAL_ARC=y
+CONFIG_SERIAL_ARC_CONSOLE=y
+CONFIG_SERIAL_ARC_NR_PORTS=1
+CONFIG_SERIAL_STM32=y
+CONFIG_SERIAL_STM32_CONSOLE=y
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_DMA=y
+CONFIG_SERIAL_8250_NR_UARTS=5
+CONFIG_SERIAL_8250_RUNTIME_UARTS=5
+CONFIG_SERIAL_8250_EXTENDED=y
+CONFIG_SERIAL_8250_ASPEED_VUART=m
+CONFIG_SERIAL_8250_SHARE_IRQ=y
+CONFIG_SERIAL_8250_BCM2835AUX=y
+CONFIG_SERIAL_8250_DW=y
+# CONFIG_SERIAL_8250_EM is not set
+CONFIG_SERIAL_OF_PLATFORM=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=m
+
+##
+## file: drivers/usb/chipidea/Kconfig
+##
+CONFIG_USB_CHIPIDEA=m
+CONFIG_USB_CHIPIDEA_UDC=y
+CONFIG_USB_CHIPIDEA_HOST=y
+
+##
+## file: drivers/usb/dwc2/Kconfig
+##
+CONFIG_USB_DWC2=m
+## choice: DWC2 Mode Selection
+CONFIG_USB_DWC2_DUAL_ROLE=y
+## end choice
+
+##
+## file: drivers/usb/dwc3/Kconfig
+##
+CONFIG_USB_DWC3=m
+## choice: DWC3 Mode Selection
+CONFIG_USB_DWC3_DUAL_ROLE=y
+## end choice
+CONFIG_USB_DWC3_OMAP=m
+CONFIG_USB_DWC3_EXYNOS=m
+# CONFIG_USB_DWC3_PCI is not set
+
+##
+## file: drivers/usb/gadget/Kconfig
+##
+CONFIG_USB_GADGET=m
+
+##
+## file: drivers/usb/gadget/legacy/Kconfig
+##
+CONFIG_USB_G_NOKIA=m
+
+##
+## file: drivers/usb/gadget/udc/aspeed-vhub/Kconfig
+##
+CONFIG_USB_ASPEED_VHUB=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_XHCI_MVEBU=m
+CONFIG_USB_XHCI_TEGRA=m
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_EHCI_HCD_OMAP=y
+CONFIG_USB_EHCI_TEGRA=m
+CONFIG_USB_EHCI_EXYNOS=m
+CONFIG_USB_EHCI_MV=m
+CONFIG_USB_EHCI_HCD_PLATFORM=m
+CONFIG_USB_OHCI_HCD=m
+CONFIG_USB_OHCI_HCD_OMAP3=y
+CONFIG_USB_OHCI_EXYNOS=m
+CONFIG_USB_OHCI_HCD_PLATFORM=m
+
+##
+## file: drivers/usb/misc/Kconfig
+##
+CONFIG_USB_HSIC_USB3503=m
+
+##
+## file: drivers/usb/musb/Kconfig
+##
+CONFIG_USB_MUSB_HDRC=m
+## choice: MUSB Mode Selection
+# CONFIG_USB_MUSB_HOST is not set
+# CONFIG_USB_MUSB_GADGET is not set
+CONFIG_USB_MUSB_DUAL_ROLE=y
+## end choice
+CONFIG_USB_MUSB_SUNXI=m
+CONFIG_USB_MUSB_TUSB6010=m
+CONFIG_USB_MUSB_OMAP2PLUS=m
+CONFIG_USB_MUSB_AM35X=m
+CONFIG_USB_MUSB_DSPS=m
+# CONFIG_MUSB_PIO_ONLY is not set
+CONFIG_USB_INVENTRA_DMA=y
+CONFIG_USB_TI_CPPI41_DMA=y
+CONFIG_USB_TUSB_OMAP_DMA=y
+
+##
+## file: drivers/usb/phy/Kconfig
+##
+CONFIG_NOP_USB_XCEIV=m
+CONFIG_AM335X_PHY_USB=m
+CONFIG_TWL6030_USB=m
+CONFIG_USB_MXS_PHY=m
+
+##
+## file: drivers/video/backlight/Kconfig
+##
+CONFIG_BACKLIGHT_PANDORA=m
+CONFIG_BACKLIGHT_GPIO=m
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_ARMCLCD=y
+CONFIG_FB_EFI=y
+CONFIG_FB_VT8500=y
+CONFIG_FB_WM8505=y
+CONFIG_FB_SIMPLE=y
+
+##
+## file: drivers/video/fbdev/omap2/omapfb/Kconfig
+##
+#. Redundant and conflicting with DRM_OMAP
+# CONFIG_FB_OMAP2 is not set
+
+##
+## file: drivers/virtio/Kconfig
+##
+CONFIG_VIRTIO_MMIO=m
+
+##
+## file: drivers/w1/masters/Kconfig
+##
+CONFIG_HDQ_MASTER_OMAP=m
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_DA9052_WATCHDOG=m
+CONFIG_ARM_SP805_WATCHDOG=m
+CONFIG_S3C2410_WATCHDOG=m
+CONFIG_DW_WATCHDOG=m
+CONFIG_OMAP_WATCHDOG=m
+CONFIG_ORION_WATCHDOG=m
+CONFIG_SUNXI_WATCHDOG=m
+CONFIG_TWL4030_WATCHDOG=m
+CONFIG_IMX2_WDT=m
+CONFIG_TEGRA_WATCHDOG=m
+CONFIG_MESON_WATCHDOG=m
+CONFIG_STPMIC1_WATCHDOG=m
+CONFIG_BCM2835_WDT=m
+
+##
+## file: kernel/dma/Kconfig
+##
+CONFIG_DMA_CMA=y
+
+##
+## file: kernel/power/Kconfig
+##
+CONFIG_SUSPEND=y
+CONFIG_APM_EMULATION=y
+CONFIG_ENERGY_MODEL=y
+
+##
+## file: mm/Kconfig
+##
+CONFIG_CMA=y
+
+##
+## file: net/dsa/Kconfig
+##
+CONFIG_NET_DSA=m
+
+##
+## file: net/ncsi/Kconfig
+##
+CONFIG_NET_NCSI=y
+
+##
+## file: net/phonet/Kconfig
+##
+CONFIG_PHONET=m
+
+##
+## file: sound/pci/hda/Kconfig
+##
+CONFIG_SND_HDA_TEGRA=m
+
+##
+## file: sound/soc/Kconfig
+##
+CONFIG_SND_SOC=m
+
+##
+## file: sound/soc/bcm/Kconfig
+##
+CONFIG_SND_BCM2835_SOC_I2S=m
+
+##
+## file: sound/soc/codecs/Kconfig
+##
+CONFIG_SND_SOC_CS42L51_I2C=m
+CONFIG_SND_SOC_SPDIF=y
+
+##
+## file: sound/soc/fsl/Kconfig
+##
+CONFIG_SND_IMX_SOC=m
+CONFIG_SND_SOC_EUKREA_TLV320=m
+CONFIG_SND_SOC_IMX_ES8328=m
+CONFIG_SND_SOC_IMX_SGTL5000=m
+CONFIG_SND_SOC_IMX_SPDIF=m
+
+##
+## file: sound/soc/generic/Kconfig
+##
+CONFIG_SND_SIMPLE_CARD=m
+CONFIG_SND_AUDIO_GRAPH_CARD=m
+
+##
+## file: sound/soc/kirkwood/Kconfig
+##
+CONFIG_SND_KIRKWOOD_SOC=m
+
+##
+## file: sound/soc/meson/Kconfig
+##
+CONFIG_SND_MESON_GX_SOUND_CARD=m
+
+##
+## file: sound/soc/pxa/Kconfig
+##
+CONFIG_SND_MMP_SOC_SSPA=m
+
+##
+## file: sound/soc/rockchip/Kconfig
+##
+CONFIG_SND_SOC_ROCKCHIP=m
+CONFIG_SND_SOC_ROCKCHIP_I2S=m
+CONFIG_SND_SOC_ROCKCHIP_SPDIF=m
+CONFIG_SND_SOC_ROCKCHIP_MAX98090=m
+CONFIG_SND_SOC_ROCKCHIP_RT5645=m
+
+##
+## file: sound/soc/stm/Kconfig
+##
+CONFIG_SND_SOC_STM32_SAI=m
+CONFIG_SND_SOC_STM32_I2S=m
+CONFIG_SND_SOC_STM32_SPDIFRX=m
+CONFIG_SND_SOC_STM32_DFSDM=m
+
+##
+## file: sound/soc/sunxi/Kconfig
+##
+CONFIG_SND_SUN4I_CODEC=m
+CONFIG_SND_SUN8I_CODEC=m
+CONFIG_SND_SUN8I_CODEC_ANALOG=m
+CONFIG_SND_SUN4I_I2S=m
+CONFIG_SND_SUN4I_SPDIF=m
+
+##
+## file: sound/soc/tegra/Kconfig
+##
+CONFIG_SND_SOC_TEGRA=m
+CONFIG_SND_SOC_TEGRA_RT5640=m
+CONFIG_SND_SOC_TEGRA_WM8753=m
+CONFIG_SND_SOC_TEGRA_WM8903=m
+CONFIG_SND_SOC_TEGRA_TRIMSLICE=m
+CONFIG_SND_SOC_TEGRA_ALC5632=m
+CONFIG_SND_SOC_TEGRA_MAX98090=m
+CONFIG_SND_SOC_TEGRA_RT5677=m
+
+##
+## file: sound/soc/ti/Kconfig
+##
+CONFIG_SND_SOC_DAVINCI_MCASP=m
+CONFIG_SND_SOC_NOKIA_RX51=m
+CONFIG_SND_SOC_OMAP3_PANDORA=m
+CONFIG_SND_SOC_OMAP3_TWL4030=m
+CONFIG_SND_SOC_OMAP_ABE_TWL6040=m
diff --git a/debian/config/armhf/config.armmp-lpae b/debian/config/armhf/config.armmp-lpae
new file mode 100644
index 000000000000..a23edc64b40b
--- /dev/null
+++ b/debian/config/armhf/config.armmp-lpae
@@ -0,0 +1,14 @@
+##
+## file: arch/arm/Kconfig
+##
+CONFIG_ARM_DMA_IOMMU_ALIGNMENT=8
+
+##
+## file: arch/arm/mm/Kconfig
+##
+CONFIG_ARM_LPAE=y
+
+##
+## file: drivers/iommu/Kconfig
+##
+CONFIG_ARM_SMMU=y
diff --git a/debian/config/armhf/defines b/debian/config/armhf/defines
new file mode 100644
index 000000000000..7607ea2d9f59
--- /dev/null
+++ b/debian/config/armhf/defines
@@ -0,0 +1,27 @@
+[base]
+featuresets:
+ none
+ rt
+kernel-arch: arm
+
+[build]
+image-file: arch/arm/boot/zImage
+vdso: true
+
+[image]
+install-stem: vmlinuz
+
+[relations]
+headers%gcc-11: linux-compiler-gcc-11-arm
+
+[armmp_description]
+hardware: ARMv7 multiplatform compatible SoCs
+hardware-long: ARMv7 multiplatform kernel. See
+  https://wiki.debian.org/DebianKernel/ARMMP for details of supported
+  platforms
+
+[armmp-lpae_description]
+hardware: ARMv7 multiplatform compatible SoCs supporting LPAE
+hardware-long: ARMv7 multiplatform kernel supporting LPAE. See
+  https://wiki.debian.org/DebianKernel/ARMMP for details of supported
+  platforms.
diff --git a/debian/config/armhf/none/defines b/debian/config/armhf/none/defines
new file mode 100644
index 000000000000..8a3c95b20118
--- /dev/null
+++ b/debian/config/armhf/none/defines
@@ -0,0 +1,5 @@
+[base]
+flavours:
+ armmp
+ armmp-lpae
+default-flavour: armmp
diff --git a/debian/config/armhf/rt/defines b/debian/config/armhf/rt/defines
new file mode 100644
index 000000000000..897e415f89e5
--- /dev/null
+++ b/debian/config/armhf/rt/defines
@@ -0,0 +1,3 @@
+[base]
+flavours:
+ armmp
diff --git a/debian/config/config b/debian/config/config
new file mode 100644
index 000000000000..f8c03a8d1baf
--- /dev/null
+++ b/debian/config/config
@@ -0,0 +1,8164 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_KPROBES=y
+CONFIG_JUMP_LABEL=y
+# CONFIG_STATIC_KEYS_SELFTEST is not set
+CONFIG_STACKPROTECTOR=y
+CONFIG_STACKPROTECTOR_STRONG=y
+CONFIG_VMAP_STACK=y
+CONFIG_STRICT_KERNEL_RWX=y
+CONFIG_STRICT_MODULE_RWX=y
+
+##
+## file: block/Kconfig
+##
+CONFIG_BLOCK=y
+CONFIG_BLK_DEV_INTEGRITY=y
+CONFIG_BLK_DEV_ZONED=y
+CONFIG_BLK_DEV_THROTTLING=y
+# CONFIG_BLK_DEV_THROTTLING_LOW is not set
+CONFIG_BLK_WBT=y
+CONFIG_BLK_WBT_MQ=y
+# CONFIG_BLK_CGROUP_IOLATENCY is not set
+CONFIG_BLK_CGROUP_IOCOST=y
+CONFIG_BLK_DEBUG_FS=y
+CONFIG_BLK_SED_OPAL=y
+
+##
+## file: block/Kconfig.iosched
+##
+CONFIG_MQ_IOSCHED_DEADLINE=y
+CONFIG_MQ_IOSCHED_KYBER=m
+CONFIG_IOSCHED_BFQ=m
+CONFIG_BFQ_GROUP_IOSCHED=y
+# CONFIG_BFQ_CGROUP_DEBUG is not set
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_PARTITION_ADVANCED=y
+# CONFIG_ACORN_PARTITION is not set
+# CONFIG_AIX_PARTITION is not set
+# CONFIG_OSF_PARTITION is not set
+# CONFIG_AMIGA_PARTITION is not set
+# CONFIG_ATARI_PARTITION is not set
+# CONFIG_MAC_PARTITION is not set
+CONFIG_MSDOS_PARTITION=y
+# CONFIG_BSD_DISKLABEL is not set
+# CONFIG_MINIX_SUBPARTITION is not set
+# CONFIG_SOLARIS_X86_PARTITION is not set
+# CONFIG_UNIXWARE_DISKLABEL is not set
+# CONFIG_LDM_PARTITION is not set
+# CONFIG_SGI_PARTITION is not set
+# CONFIG_ULTRIX_PARTITION is not set
+# CONFIG_SUN_PARTITION is not set
+CONFIG_KARMA_PARTITION=y
+CONFIG_EFI_PARTITION=y
+# CONFIG_SYSV68_PARTITION is not set
+# CONFIG_CMDLINE_PARTITION is not set
+
+##
+## file: certs/Kconfig
+##
+#. Signatures are added in linux-signed
+CONFIG_MODULE_SIG_KEY=""
+#. Add secondary keyring with keys from UEFI db and MOK.
+CONFIG_SECONDARY_TRUSTED_KEYRING=y
+CONFIG_SYSTEM_BLACKLIST_KEYRING=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO=y
+CONFIG_CRYPTO_FIPS=y
+CONFIG_CRYPTO_MANAGER=y
+CONFIG_CRYPTO_USER=m
+# CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set
+CONFIG_CRYPTO_NULL=m
+CONFIG_CRYPTO_PCRYPT=m
+# CONFIG_CRYPTO_CRYPTD is not set
+CONFIG_CRYPTO_AUTHENC=m
+CONFIG_CRYPTO_TEST=m
+CONFIG_CRYPTO_RSA=m
+CONFIG_CRYPTO_DH=m
+CONFIG_CRYPTO_ECDH=m
+CONFIG_CRYPTO_ECRDSA=m
+# CONFIG_CRYPTO_SM2 is not set
+CONFIG_CRYPTO_CURVE25519=m
+CONFIG_CRYPTO_CCM=m
+CONFIG_CRYPTO_GCM=m
+CONFIG_CRYPTO_CHACHA20POLY1305=m
+CONFIG_CRYPTO_AEGIS128=m
+CONFIG_CRYPTO_SEQIV=m
+CONFIG_CRYPTO_ECHAINIV=m
+CONFIG_CRYPTO_CBC=m
+CONFIG_CRYPTO_CFB=m
+CONFIG_CRYPTO_CTR=m
+CONFIG_CRYPTO_CTS=m
+CONFIG_CRYPTO_ECB=m
+CONFIG_CRYPTO_LRW=m
+CONFIG_CRYPTO_OFB=m
+CONFIG_CRYPTO_PCBC=m
+CONFIG_CRYPTO_XTS=m
+CONFIG_CRYPTO_KEYWRAP=m
+CONFIG_CRYPTO_ADIANTUM=m
+CONFIG_CRYPTO_CMAC=m
+CONFIG_CRYPTO_HMAC=m
+CONFIG_CRYPTO_XCBC=m
+CONFIG_CRYPTO_VMAC=m
+CONFIG_CRYPTO_CRC32C=m
+CONFIG_CRYPTO_CRC32=m
+CONFIG_CRYPTO_BLAKE2S=m
+CONFIG_CRYPTO_CRCT10DIF=m
+CONFIG_CRYPTO_GHASH=m
+CONFIG_CRYPTO_POLY1305=m
+CONFIG_CRYPTO_MD4=m
+CONFIG_CRYPTO_MD5=y
+CONFIG_CRYPTO_MICHAEL_MIC=m
+CONFIG_CRYPTO_RMD160=m
+CONFIG_CRYPTO_SHA1=m
+#. Must be built-in for IMA_DEFAULT_HASH_SHA256
+CONFIG_CRYPTO_SHA256=y
+CONFIG_CRYPTO_SHA512=m
+CONFIG_CRYPTO_SHA3=m
+# CONFIG_CRYPTO_SM3 is not set
+CONFIG_CRYPTO_WP512=m
+CONFIG_CRYPTO_AES=m
+CONFIG_CRYPTO_AES_TI=m
+CONFIG_CRYPTO_ANUBIS=m
+CONFIG_CRYPTO_ARC4=m
+CONFIG_CRYPTO_BLOWFISH=m
+CONFIG_CRYPTO_CAMELLIA=m
+CONFIG_CRYPTO_CAST5=m
+CONFIG_CRYPTO_CAST6=m
+CONFIG_CRYPTO_DES=m
+CONFIG_CRYPTO_FCRYPT=m
+CONFIG_CRYPTO_KHAZAD=m
+CONFIG_CRYPTO_CHACHA20=m
+CONFIG_CRYPTO_SEED=m
+CONFIG_CRYPTO_SERPENT=m
+# CONFIG_CRYPTO_SM4 is not set
+CONFIG_CRYPTO_TEA=m
+CONFIG_CRYPTO_TWOFISH=m
+CONFIG_CRYPTO_DEFLATE=m
+CONFIG_CRYPTO_LZO=m
+# CONFIG_CRYPTO_842 is not set
+CONFIG_CRYPTO_LZ4=m
+CONFIG_CRYPTO_LZ4HC=m
+CONFIG_CRYPTO_ZSTD=m
+CONFIG_CRYPTO_ANSI_CPRNG=m
+CONFIG_CRYPTO_DRBG_MENU=m
+CONFIG_CRYPTO_DRBG_HASH=y
+CONFIG_CRYPTO_DRBG_CTR=y
+CONFIG_CRYPTO_JITTERENTROPY=m
+CONFIG_CRYPTO_USER_API_HASH=m
+CONFIG_CRYPTO_USER_API_SKCIPHER=m
+CONFIG_CRYPTO_USER_API_RNG=m
+CONFIG_CRYPTO_USER_API_AEAD=m
+# CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE is not set
+
+##
+## file: crypto/asymmetric_keys/Kconfig
+##
+CONFIG_ASYMMETRIC_KEY_TYPE=y
+CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y
+CONFIG_PKCS8_PRIVATE_KEY_PARSER=m
+
+##
+## file: drivers/accessibility/Kconfig
+##
+CONFIG_ACCESSIBILITY=y
+CONFIG_A11Y_BRAILLE_CONSOLE=y
+
+##
+## file: drivers/accessibility/speakup/Kconfig
+##
+CONFIG_SPEAKUP=m
+CONFIG_SPEAKUP_SYNTH_ACNTSA=m
+CONFIG_SPEAKUP_SYNTH_ACNTPC=m
+CONFIG_SPEAKUP_SYNTH_APOLLO=m
+CONFIG_SPEAKUP_SYNTH_AUDPTR=m
+CONFIG_SPEAKUP_SYNTH_BNS=m
+CONFIG_SPEAKUP_SYNTH_DECTLK=m
+CONFIG_SPEAKUP_SYNTH_DECEXT=m
+CONFIG_SPEAKUP_SYNTH_DTLK=m
+CONFIG_SPEAKUP_SYNTH_KEYPC=m
+CONFIG_SPEAKUP_SYNTH_LTLK=m
+CONFIG_SPEAKUP_SYNTH_SOFT=m
+CONFIG_SPEAKUP_SYNTH_SPKOUT=m
+CONFIG_SPEAKUP_SYNTH_TXPRT=m
+CONFIG_SPEAKUP_SYNTH_DUMMY=m
+
+##
+## file: drivers/acpi/Kconfig
+##
+# CONFIG_ACPI_DEBUGGER is not set
+CONFIG_ACPI_TAD=m
+CONFIG_ACPI_TABLE_UPGRADE=y
+# CONFIG_ACPI_BGRT is not set
+# CONFIG_ACPI_REDUCED_HARDWARE_ONLY is not set
+# CONFIG_ACPI_CONFIGFS is not set
+
+##
+## file: drivers/acpi/nfit/Kconfig
+##
+CONFIG_ACPI_NFIT=m
+
+##
+## file: drivers/acpi/numa/Kconfig
+##
+CONFIG_ACPI_HMAT=y
+
+##
+## file: drivers/acpi/pmic/Kconfig
+##
+# CONFIG_PMIC_OPREGION is not set
+
+##
+## file: drivers/android/Kconfig
+##
+# CONFIG_ANDROID is not set
+CONFIG_ANDROID_BINDER_IPC=m
+#. This configuration should support Anbox
+CONFIG_ANDROID_BINDER_DEVICES="binder"
+# CONFIG_ANDROID_BINDER_IPC_SELFTEST is not set
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_ATA=m
+CONFIG_ATA_VERBOSE_ERROR=y
+CONFIG_ATA_ACPI=y
+CONFIG_SATA_ZPODD=y
+CONFIG_SATA_PMP=y
+CONFIG_SATA_AHCI=m
+CONFIG_SATA_MOBILE_LPM_POLICY=3
+# CONFIG_SATA_AHCI_PLATFORM is not set
+# CONFIG_AHCI_CEVA is not set
+# CONFIG_AHCI_QORIQ is not set
+#. This driver loses data (#714295)
+# CONFIG_SATA_INIC162X is not set
+CONFIG_SATA_ACARD_AHCI=m
+CONFIG_SATA_SIL24=m
+CONFIG_ATA_SFF=y
+CONFIG_PDC_ADMA=m
+CONFIG_SATA_QSTOR=m
+CONFIG_SATA_SX4=m
+CONFIG_ATA_BMDMA=y
+CONFIG_ATA_PIIX=m
+# CONFIG_SATA_DWC is not set
+# CONFIG_SATA_HIGHBANK is not set
+CONFIG_SATA_MV=m
+CONFIG_SATA_NV=m
+CONFIG_SATA_PROMISE=m
+# CONFIG_SATA_RCAR is not set
+CONFIG_SATA_SIL=m
+CONFIG_SATA_SIS=m
+CONFIG_SATA_SVW=m
+CONFIG_SATA_ULI=m
+CONFIG_SATA_VIA=m
+CONFIG_SATA_VITESSE=m
+# CONFIG_PATA_ALI is not set
+# CONFIG_PATA_AMD is not set
+# CONFIG_PATA_ARASAN_CF is not set
+CONFIG_PATA_ARTOP=m
+# CONFIG_PATA_ATIIXP is not set
+CONFIG_PATA_ATP867X=m
+CONFIG_PATA_CMD64X=m
+# CONFIG_PATA_CS5536 is not set
+# CONFIG_PATA_CYPRESS is not set
+# CONFIG_PATA_EFAR is not set
+# CONFIG_PATA_HPT366 is not set
+# CONFIG_PATA_HPT37X is not set
+# CONFIG_PATA_HPT3X2N is not set
+# CONFIG_PATA_HPT3X3 is not set
+CONFIG_PATA_IT8213=m
+CONFIG_PATA_IT821X=m
+CONFIG_PATA_JMICRON=m
+CONFIG_PATA_MARVELL=m
+# CONFIG_PATA_NETCELL is not set
+CONFIG_PATA_NINJA32=m
+# CONFIG_PATA_NS87415 is not set
+# CONFIG_PATA_OLDPIIX is not set
+# CONFIG_PATA_OPTIDMA is not set
+# CONFIG_PATA_PDC2027X is not set
+# CONFIG_PATA_PDC_OLD is not set
+# CONFIG_PATA_RADISYS is not set
+CONFIG_PATA_RDC=m
+CONFIG_PATA_SCH=m
+# CONFIG_PATA_SERVERWORKS is not set
+# CONFIG_PATA_SIL680 is not set
+CONFIG_PATA_SIS=m
+CONFIG_PATA_TOSHIBA=m
+# CONFIG_PATA_TRIFLEX is not set
+# CONFIG_PATA_VIA is not set
+# CONFIG_PATA_WINBOND is not set
+# CONFIG_PATA_CMD640_PCI is not set
+# CONFIG_PATA_ISAPNP is not set
+# CONFIG_PATA_MPIIX is not set
+# CONFIG_PATA_NS87410 is not set
+# CONFIG_PATA_OPTI is not set
+# CONFIG_PATA_PCMCIA is not set
+# CONFIG_PATA_PLATFORM is not set
+# CONFIG_PATA_QDI is not set
+# CONFIG_PATA_RZ1000 is not set
+# CONFIG_PATA_WINBOND_VLB is not set
+# CONFIG_PATA_ACPI is not set
+CONFIG_ATA_GENERIC=m
+# CONFIG_PATA_LEGACY is not set
+
+##
+## file: drivers/atm/Kconfig
+##
+CONFIG_ATM_DUMMY=m
+CONFIG_ATM_NICSTAR=m
+CONFIG_ATM_NICSTAR_USE_SUNI=y
+CONFIG_ATM_NICSTAR_USE_IDT77105=y
+CONFIG_ATM_IA=m
+# CONFIG_ATM_IA_DEBUG is not set
+CONFIG_ATM_FORE200E=m
+CONFIG_ATM_SOLOS=m
+
+##
+## file: drivers/auxdisplay/Kconfig
+##
+# CONFIG_AUXDISPLAY is not set
+# CONFIG_PANEL is not set
+
+##
+## file: drivers/base/Kconfig
+##
+# CONFIG_UEVENT_HELPER is not set
+CONFIG_DEVTMPFS=y
+# CONFIG_DEVTMPFS_MOUNT is not set
+CONFIG_STANDALONE=y
+CONFIG_PREVENT_FIRMWARE_BUILD=y
+CONFIG_ALLOW_DEV_COREDUMP=y
+# CONFIG_DEBUG_DRIVER is not set
+# CONFIG_DEBUG_DEVRES is not set
+# CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
+# CONFIG_DMA_FENCE_TRACE is not set
+
+##
+## file: drivers/base/firmware_loader/Kconfig
+##
+CONFIG_FW_LOADER=y
+CONFIG_EXTRA_FIRMWARE=""
+# CONFIG_FW_LOADER_USER_HELPER_FALLBACK is not set
+
+##
+## file: drivers/base/test/Kconfig
+##
+# CONFIG_TEST_ASYNC_DRIVER_PROBE is not set
+
+##
+## file: drivers/bcma/Kconfig
+##
+CONFIG_BCMA=m
+CONFIG_BCMA_HOST_PCI=y
+# CONFIG_BCMA_HOST_SOC is not set
+# CONFIG_BCMA_DRIVER_PCI_HOSTMODE is not set
+# CONFIG_BCMA_DRIVER_GMAC_CMN is not set
+# CONFIG_BCMA_DRIVER_GPIO is not set
+# CONFIG_BCMA_DEBUG is not set
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_BLK_DEV=y
+# CONFIG_PARIDE is not set
+CONFIG_BLK_DEV_LOOP=m
+CONFIG_BLK_DEV_LOOP_MIN_COUNT=8
+CONFIG_BLK_DEV_NBD=m
+CONFIG_BLK_DEV_RAM=m
+CONFIG_BLK_DEV_RAM_COUNT=16
+CONFIG_BLK_DEV_RAM_SIZE=16384
+CONFIG_ATA_OVER_ETH=m
+CONFIG_XEN_BLKDEV_FRONTEND=m
+CONFIG_XEN_BLKDEV_BACKEND=m
+CONFIG_VIRTIO_BLK=m
+CONFIG_BLK_DEV_RBD=m
+# CONFIG_BLK_DEV_RSXX is not set
+
+##
+## file: drivers/block/drbd/Kconfig
+##
+CONFIG_BLK_DEV_DRBD=m
+# CONFIG_DRBD_FAULT_INJECTION is not set
+
+##
+## file: drivers/block/mtip32xx/Kconfig
+##
+CONFIG_BLK_DEV_PCIESSD_MTIP32XX=m
+
+##
+## file: drivers/block/null_blk/Kconfig
+##
+CONFIG_BLK_DEV_NULL_BLK=m
+
+##
+## file: drivers/block/zram/Kconfig
+##
+CONFIG_ZRAM=m
+CONFIG_ZRAM_WRITEBACK=y
+CONFIG_ZRAM_MEMORY_TRACKING=y
+
+##
+## file: drivers/bluetooth/Kconfig
+##
+CONFIG_BT_HCIBTUSB=m
+CONFIG_BT_HCIBTUSB_AUTOSUSPEND=y
+CONFIG_BT_HCIBTUSB_BCM=y
+CONFIG_BT_HCIBTUSB_MTK=y
+CONFIG_BT_HCIBTUSB_RTL=y
+CONFIG_BT_HCIBTSDIO=m
+CONFIG_BT_HCIUART_NOKIA=m
+CONFIG_BT_HCIUART_ATH3K=y
+CONFIG_BT_HCIUART_LL=y
+CONFIG_BT_HCIUART_3WIRE=y
+CONFIG_BT_HCIUART_INTEL=y
+CONFIG_BT_HCIUART_BCM=y
+CONFIG_BT_HCIUART_RTL=y
+CONFIG_BT_HCIUART_QCA=y
+CONFIG_BT_HCIUART_AG6XX=y
+CONFIG_BT_HCIUART_MRVL=y
+CONFIG_BT_MRVL=m
+CONFIG_BT_MRVL_SDIO=m
+CONFIG_BT_ATH3K=m
+CONFIG_BT_MTKUART=m
+
+##
+## file: drivers/bus/Kconfig
+##
+# CONFIG_OMAP_OCP2SCP is not set
+
+##
+## file: drivers/bus/mhi/Kconfig
+##
+CONFIG_MHI_BUS=m
+CONFIG_MHI_BUS_PCI_GENERIC=m
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_TTY_PRINTK=m
+CONFIG_VIRTIO_CONSOLE=m
+CONFIG_PC8736x_GPIO=m
+CONFIG_NSC_GPIO=m
+CONFIG_DEVMEM=y
+CONFIG_DEVPORT=y
+CONFIG_HANGCHECK_TIMER=m
+CONFIG_TELCLOCK=m
+CONFIG_RANDOM_TRUST_CPU=y
+# CONFIG_RANDOM_TRUST_BOOTLOADER is not set
+
+##
+## file: drivers/char/hw_random/Kconfig
+##
+CONFIG_HW_RANDOM=m
+# CONFIG_HW_RANDOM_TIMERIOMEM is not set
+CONFIG_HW_RANDOM_VIRTIO=m
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+CONFIG_IPMI_SSIF=m
+
+##
+## file: drivers/char/pcmcia/Kconfig
+##
+CONFIG_SYNCLINK_CS=m
+CONFIG_CARDMAN_4000=m
+CONFIG_CARDMAN_4040=m
+CONFIG_SCR24X=m
+CONFIG_IPWIRELESS=m
+
+##
+## file: drivers/char/tpm/Kconfig
+##
+CONFIG_HW_RANDOM_TPM=y
+CONFIG_TCG_TIS_SPI=m
+CONFIG_TCG_VTPM_PROXY=m
+
+##
+## file: drivers/char/tpm/st33zp24/Kconfig
+##
+# CONFIG_TCG_TIS_ST33ZP24_SPI is not set
+
+##
+## file: drivers/char/xillybus/Kconfig
+##
+# CONFIG_XILLYBUS is not set
+
+##
+## file: drivers/clk/Kconfig
+##
+# CONFIG_COMMON_CLK_SI5351 is not set
+# CONFIG_COMMON_CLK_SI514 is not set
+# CONFIG_COMMON_CLK_SI570 is not set
+# CONFIG_COMMON_CLK_CDCE706 is not set
+# CONFIG_COMMON_CLK_CDCE925 is not set
+# CONFIG_COMMON_CLK_CS2000_CP is not set
+
+##
+## file: drivers/comedi/Kconfig
+##
+# CONFIG_COMEDI is not set
+
+##
+## file: drivers/connector/Kconfig
+##
+CONFIG_CONNECTOR=y
+CONFIG_PROC_EVENTS=y
+
+##
+## file: drivers/cpufreq/Kconfig
+##
+CONFIG_CPU_FREQ=y
+CONFIG_CPU_FREQ_STAT=y
+## choice: Default CPUFreq governor
+CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE=y
+# CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE is not set
+# CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE is not set
+# CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND is not set
+# CONFIG_CPU_FREQ_DEFAULT_GOV_CONSERVATIVE is not set
+# CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL is not set
+## end choice
+CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
+CONFIG_CPU_FREQ_GOV_POWERSAVE=m
+CONFIG_CPU_FREQ_GOV_USERSPACE=m
+CONFIG_CPU_FREQ_GOV_ONDEMAND=m
+CONFIG_CPU_FREQ_GOV_CONSERVATIVE=m
+CONFIG_CPU_FREQ_GOV_SCHEDUTIL=y
+# CONFIG_CPUFREQ_DT is not set
+
+##
+## file: drivers/cpuidle/Kconfig
+##
+CONFIG_CPU_IDLE_GOV_LADDER=y
+CONFIG_CPU_IDLE_GOV_MENU=y
+
+##
+## file: drivers/crypto/Kconfig
+##
+CONFIG_CRYPTO_HW=y
+CONFIG_CRYPTO_DEV_HIFN_795X=m
+CONFIG_CRYPTO_DEV_HIFN_795X_RNG=y
+
+##
+## file: drivers/crypto/chelsio/Kconfig
+##
+CONFIG_CRYPTO_DEV_CHELSIO=m
+
+##
+## file: drivers/crypto/virtio/Kconfig
+##
+CONFIG_CRYPTO_DEV_VIRTIO=m
+
+##
+## file: drivers/dax/Kconfig
+##
+CONFIG_DEV_DAX=m
+CONFIG_DEV_DAX_PMEM=m
+
+##
+## file: drivers/devfreq/Kconfig
+##
+# CONFIG_PM_DEVFREQ is not set
+CONFIG_DEVFREQ_GOV_SIMPLE_ONDEMAND=m
+# CONFIG_DEVFREQ_GOV_PERFORMANCE is not set
+# CONFIG_DEVFREQ_GOV_POWERSAVE is not set
+# CONFIG_DEVFREQ_GOV_USERSPACE is not set
+
+##
+## file: drivers/devfreq/event/Kconfig
+##
+# CONFIG_PM_DEVFREQ_EVENT is not set
+
+##
+## file: drivers/dma/Kconfig
+##
+# CONFIG_DMADEVICES_DEBUG is not set
+# CONFIG_FSL_EDMA is not set
+# CONFIG_INTEL_IDMA64 is not set
+CONFIG_ASYNC_TX_DMA=y
+# CONFIG_DMATEST is not set
+
+##
+## file: drivers/dma/dw/Kconfig
+##
+# CONFIG_DW_DMAC is not set
+# CONFIG_DW_DMAC_PCI is not set
+
+##
+## file: drivers/dma-buf/Kconfig
+##
+# CONFIG_SYNC_FILE is not set
+
+##
+## file: drivers/edac/Kconfig
+##
+CONFIG_EDAC_LEGACY_SYSFS=y
+
+##
+## file: drivers/extcon/Kconfig
+##
+# CONFIG_EXTCON is not set
+# CONFIG_EXTCON_FSA9480 is not set
+
+##
+## file: drivers/firewire/Kconfig
+##
+CONFIG_FIREWIRE=m
+CONFIG_FIREWIRE_OHCI=m
+CONFIG_FIREWIRE_SBP2=m
+CONFIG_FIREWIRE_NET=m
+CONFIG_FIREWIRE_NOSY=m
+
+##
+## file: drivers/firmware/Kconfig
+##
+CONFIG_DMI_SYSFS=y
+CONFIG_FW_CFG_SYSFS=m
+#. Needs to be disabled under Secure Boot - but should be done at run-time
+# CONFIG_FW_CFG_SYSFS_CMDLINE is not set
+
+##
+## file: drivers/firmware/efi/Kconfig
+##
+CONFIG_EFI_VARS_PSTORE=m
+# CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE is not set
+CONFIG_EFI_SOFT_RESERVE=y
+CONFIG_EFI_BOOTLOADER_CONTROL=m
+CONFIG_EFI_CAPSULE_LOADER=m
+# CONFIG_EFI_TEST is not set
+CONFIG_RESET_ATTACK_MITIGATION=y
+
+##
+## file: drivers/firmware/google/Kconfig
+##
+CONFIG_GOOGLE_FIRMWARE=y
+CONFIG_GOOGLE_COREBOOT_TABLE=m
+CONFIG_GOOGLE_MEMCONSOLE_COREBOOT=m
+
+##
+## file: drivers/fpga/Kconfig
+##
+# CONFIG_FPGA is not set
+
+##
+## file: drivers/gnss/Kconfig
+##
+CONFIG_GNSS=m
+CONFIG_GNSS_SIRF_SERIAL=m
+CONFIG_GNSS_UBX_SERIAL=m
+
+##
+## file: drivers/gpio/Kconfig
+##
+# CONFIG_GPIOLIB is not set
+# CONFIG_DEBUG_GPIO is not set
+CONFIG_GPIO_SYSFS=y
+# CONFIG_GPIO_74XX_MMIO is not set
+# CONFIG_GPIO_ALTERA is not set
+# CONFIG_GPIO_AMDPT is not set
+# CONFIG_GPIO_DWAPB is not set
+CONFIG_GPIO_EXAR=m
+# CONFIG_GPIO_GENERIC_PLATFORM is not set
+# CONFIG_GPIO_GRGPIO is not set
+# CONFIG_GPIO_MB86S7X is not set
+# CONFIG_GPIO_VX855 is not set
+# CONFIG_GPIO_XILINX is not set
+# CONFIG_GPIO_104_IDIO_16 is not set
+# CONFIG_GPIO_IT87 is not set
+# CONFIG_GPIO_SCH311X is not set
+# CONFIG_GPIO_TS5500 is not set
+# CONFIG_GPIO_WINBOND is not set
+# CONFIG_GPIO_WS16C48 is not set
+# CONFIG_GPIO_ADP5588 is not set
+# CONFIG_GPIO_ADNP is not set
+# CONFIG_GPIO_MAX7300 is not set
+# CONFIG_GPIO_MAX732X is not set
+# CONFIG_GPIO_PCA953X is not set
+# CONFIG_GPIO_PCF857X is not set
+# CONFIG_GPIO_TPIC2810 is not set
+# CONFIG_GPIO_TS4900 is not set
+# CONFIG_GPIO_CS5535 is not set
+# CONFIG_GPIO_AMD8111 is not set
+# CONFIG_GPIO_ML_IOH is not set
+CONFIG_GPIO_PCI_IDIO_16=m
+CONFIG_GPIO_PCIE_IDIO_24=m
+# CONFIG_GPIO_RDC321X is not set
+# CONFIG_GPIO_74X164 is not set
+# CONFIG_GPIO_MAX3191X is not set
+# CONFIG_GPIO_MAX7301 is not set
+# CONFIG_GPIO_MC33880 is not set
+# CONFIG_GPIO_PISOSR is not set
+# CONFIG_GPIO_XRA1403 is not set
+CONFIG_GPIO_VIPERBOARD=m
+# CONFIG_GPIO_MOCKUP is not set
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM_DP_AUX_CHARDEV=y
+# CONFIG_DRM_DEBUG_SELFTEST is not set
+CONFIG_DRM_FBDEV_EMULATION=y
+CONFIG_DRM_FBDEV_OVERALLOC=100
+# CONFIG_DRM_FBDEV_LEAK_PHYS_SMEM is not set
+CONFIG_DRM_LOAD_EDID_FIRMWARE=y
+CONFIG_DRM_VGEM=m
+# CONFIG_DRM_VKMS is not set
+# CONFIG_DRM_LEGACY is not set
+
+##
+## file: drivers/gpu/drm/amd/acp/Kconfig
+##
+# CONFIG_DRM_AMD_ACP is not set
+
+##
+## file: drivers/gpu/drm/amd/amdgpu/Kconfig
+##
+CONFIG_DRM_AMDGPU_SI=y
+CONFIG_DRM_AMDGPU_CIK=y
+CONFIG_DRM_AMDGPU_USERPTR=y
+
+##
+## file: drivers/gpu/drm/amd/display/Kconfig
+##
+CONFIG_DRM_AMD_DC=y
+CONFIG_DRM_AMD_DC_HDCP=y
+CONFIG_DRM_AMD_DC_SI=y
+# CONFIG_DEBUG_KERNEL_DC is not set
+
+##
+## file: drivers/gpu/drm/ast/Kconfig
+##
+# CONFIG_DRM_AST is not set
+
+##
+## file: drivers/gpu/drm/bridge/Kconfig
+##
+# CONFIG_DRM_NXP_PTN3460 is not set
+# CONFIG_DRM_PARADE_PS8622 is not set
+
+##
+## file: drivers/gpu/drm/bridge/adv7511/Kconfig
+##
+# CONFIG_DRM_I2C_ADV7511 is not set
+
+##
+## file: drivers/gpu/drm/bridge/analogix/Kconfig
+##
+# CONFIG_DRM_ANALOGIX_ANX78XX is not set
+
+##
+## file: drivers/gpu/drm/hisilicon/hibmc/Kconfig
+##
+# CONFIG_DRM_HISI_HIBMC is not set
+
+##
+## file: drivers/gpu/drm/i2c/Kconfig
+##
+# CONFIG_DRM_I2C_CH7006 is not set
+# CONFIG_DRM_I2C_SIL164 is not set
+# CONFIG_DRM_I2C_NXP_TDA998X is not set
+# CONFIG_DRM_I2C_NXP_TDA9950 is not set
+
+##
+## file: drivers/gpu/drm/i915/Kconfig
+##
+CONFIG_DRM_I915_CAPTURE_ERROR=y
+CONFIG_DRM_I915_COMPRESS_ERROR=y
+CONFIG_DRM_I915_USERPTR=y
+
+##
+## file: drivers/gpu/drm/i915/Kconfig.debug
+##
+# CONFIG_DRM_I915_WERROR is not set
+# CONFIG_DRM_I915_DEBUG is not set
+# CONFIG_DRM_I915_SW_FENCE_DEBUG_OBJECTS is not set
+# CONFIG_DRM_I915_SW_FENCE_CHECK_DAG is not set
+# CONFIG_DRM_I915_DEBUG_GUC is not set
+# CONFIG_DRM_I915_SELFTEST is not set
+# CONFIG_DRM_I915_LOW_LEVEL_TRACEPOINTS is not set
+# CONFIG_DRM_I915_DEBUG_VBLANK_EVADE is not set
+
+##
+## file: drivers/gpu/drm/mgag200/Kconfig
+##
+# CONFIG_DRM_MGAG200 is not set
+
+##
+## file: drivers/gpu/drm/nouveau/Kconfig
+##
+CONFIG_DRM_NOUVEAU=m
+# CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT is not set
+CONFIG_NOUVEAU_DEBUG=5
+CONFIG_NOUVEAU_DEBUG_DEFAULT=3
+# CONFIG_NOUVEAU_DEBUG_MMU is not set
+CONFIG_DRM_NOUVEAU_BACKLIGHT=y
+
+##
+## file: drivers/gpu/drm/panel/Kconfig
+##
+# CONFIG_DRM_PANEL_SAMSUNG_LD9040 is not set
+# CONFIG_DRM_PANEL_LG_LG4573 is not set
+# CONFIG_DRM_PANEL_RASPBERRYPI_TOUCHSCREEN is not set
+# CONFIG_DRM_PANEL_SAMSUNG_S6E8AA0 is not set
+# CONFIG_DRM_PANEL_SHARP_LQ101R1SX01 is not set
+
+##
+## file: drivers/gpu/drm/qxl/Kconfig
+##
+CONFIG_DRM_QXL=m
+
+##
+## file: drivers/gpu/drm/radeon/Kconfig
+##
+# CONFIG_DRM_RADEON_USERPTR is not set
+
+##
+## file: drivers/gpu/drm/tiny/Kconfig
+##
+CONFIG_DRM_BOCHS=m
+CONFIG_DRM_CIRRUS_QEMU=m
+
+##
+## file: drivers/gpu/drm/udl/Kconfig
+##
+CONFIG_DRM_UDL=m
+
+##
+## file: drivers/gpu/drm/virtio/Kconfig
+##
+CONFIG_DRM_VIRTIO_GPU=m
+
+##
+## file: drivers/gpu/drm/vmwgfx/Kconfig
+##
+# CONFIG_DRM_VMWGFX is not set
+
+##
+## file: drivers/gpu/vga/Kconfig
+##
+CONFIG_VGA_ARB=y
+
+##
+## file: drivers/greybus/Kconfig
+##
+# CONFIG_GREYBUS is not set
+
+##
+## file: drivers/hid/Kconfig
+##
+CONFIG_HID=m
+CONFIG_HID_BATTERY_STRENGTH=y
+CONFIG_HIDRAW=y
+CONFIG_UHID=m
+CONFIG_HID_GENERIC=m
+CONFIG_HID_A4TECH=y
+CONFIG_HID_ACCUTOUCH=m
+CONFIG_HID_ACRUX=m
+CONFIG_HID_ACRUX_FF=y
+CONFIG_HID_APPLE=y
+CONFIG_HID_ASUS=m
+CONFIG_HID_AUREAL=m
+CONFIG_HID_BELKIN=y
+CONFIG_HID_BETOP_FF=m
+CONFIG_HID_BIGBEN_FF=m
+CONFIG_HID_CHERRY=y
+CONFIG_HID_CHICONY=y
+CONFIG_HID_CORSAIR=m
+CONFIG_HID_COUGAR=m
+CONFIG_HID_MACALLY=m
+CONFIG_HID_PRODIKEYS=m
+CONFIG_HID_CMEDIA=m
+CONFIG_HID_CP2112=m
+CONFIG_HID_CREATIVE_SB0540=m
+CONFIG_HID_CYPRESS=y
+CONFIG_HID_DRAGONRISE=m
+CONFIG_DRAGONRISE_FF=y
+CONFIG_HID_EMS_FF=m
+CONFIG_HID_ELAN=m
+CONFIG_HID_ELECOM=m
+CONFIG_HID_ELO=m
+CONFIG_HID_EZKEY=y
+CONFIG_HID_FT260=m
+CONFIG_HID_GEMBIRD=m
+CONFIG_HID_GFRM=m
+CONFIG_HID_GLORIOUS=m
+CONFIG_HID_HOLTEK=m
+CONFIG_HOLTEK_FF=y
+CONFIG_HID_GOOGLE_HAMMER=m
+CONFIG_HID_VIVALDI=m
+CONFIG_HID_GT683R=m
+CONFIG_HID_KEYTOUCH=m
+CONFIG_HID_KYE=m
+CONFIG_HID_UCLOGIC=m
+CONFIG_HID_WALTOP=m
+CONFIG_HID_VIEWSONIC=m
+CONFIG_HID_GYRATION=m
+CONFIG_HID_ICADE=m
+CONFIG_HID_ITE=m
+CONFIG_HID_JABRA=m
+CONFIG_HID_TWINHAN=m
+CONFIG_HID_KENSINGTON=y
+CONFIG_HID_LCPOWER=m
+CONFIG_HID_LED=m
+CONFIG_HID_LENOVO=m
+CONFIG_HID_LOGITECH=y
+CONFIG_HID_LOGITECH_DJ=m
+CONFIG_LOGITECH_FF=y
+CONFIG_LOGIRUMBLEPAD2_FF=y
+CONFIG_LOGIG940_FF=y
+CONFIG_LOGIWHEELS_FF=y
+CONFIG_HID_MAGICMOUSE=m
+CONFIG_HID_MALTRON=m
+CONFIG_HID_MAYFLASH=m
+CONFIG_HID_REDRAGON=m
+CONFIG_HID_MICROSOFT=y
+CONFIG_HID_MONTEREY=y
+CONFIG_HID_MULTITOUCH=m
+CONFIG_HID_NTI=m
+CONFIG_HID_NTRIG=m
+CONFIG_HID_ORTEK=m
+CONFIG_HID_PANTHERLORD=m
+CONFIG_PANTHERLORD_FF=y
+CONFIG_HID_PENMOUNT=m
+CONFIG_HID_PETALYNX=m
+CONFIG_HID_PICOLCD=m
+CONFIG_HID_PICOLCD_FB=y
+CONFIG_HID_PICOLCD_BACKLIGHT=y
+CONFIG_HID_PICOLCD_LCD=y
+CONFIG_HID_PICOLCD_LEDS=y
+CONFIG_HID_PICOLCD_CIR=y
+CONFIG_HID_PLANTRONICS=m
+CONFIG_HID_PLAYSTATION=m
+CONFIG_PLAYSTATION_FF=y
+CONFIG_HID_PRIMAX=m
+CONFIG_HID_RETRODE=m
+CONFIG_HID_ROCCAT=m
+CONFIG_HID_SAITEK=m
+CONFIG_HID_SAMSUNG=m
+CONFIG_HID_SEMITEK=m
+CONFIG_HID_SONY=m
+CONFIG_SONY_FF=y
+CONFIG_HID_SPEEDLINK=m
+CONFIG_HID_STEAM=m
+CONFIG_HID_STEELSERIES=m
+CONFIG_HID_SUNPLUS=m
+CONFIG_HID_RMI=m
+CONFIG_HID_GREENASIA=m
+CONFIG_GREENASIA_FF=y
+CONFIG_HID_SMARTJOYPLUS=m
+CONFIG_SMARTJOYPLUS_FF=y
+CONFIG_HID_TIVO=m
+CONFIG_HID_TOPSEED=m
+CONFIG_HID_THINGM=m
+CONFIG_HID_THRUSTMASTER=m
+CONFIG_THRUSTMASTER_FF=y
+CONFIG_HID_UDRAW_PS3=m
+CONFIG_HID_U2FZERO=m
+CONFIG_HID_WACOM=m
+CONFIG_HID_WIIMOTE=m
+CONFIG_HID_XINMO=m
+CONFIG_HID_ZEROPLUS=m
+CONFIG_ZEROPLUS_FF=y
+CONFIG_HID_ZYDACRON=m
+CONFIG_HID_SENSOR_HUB=m
+CONFIG_HID_SENSOR_CUSTOM_SENSOR=m
+CONFIG_HID_ALPS=m
+CONFIG_HID_MCP2221=m
+
+##
+## file: drivers/hid/intel-ish-hid/Kconfig
+##
+# CONFIG_INTEL_ISH_HID is not set
+
+##
+## file: drivers/hid/usbhid/Kconfig
+##
+CONFIG_HID_PID=y
+CONFIG_USB_HIDDEV=y
+#. These are for HID Boot Protocol, not full HID
+# CONFIG_USB_KBD is not set
+# CONFIG_USB_MOUSE is not set
+
+##
+## file: drivers/hsi/Kconfig
+##
+# CONFIG_HSI is not set
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_HWMON=y
+# CONFIG_HWMON_DEBUG_CHIP is not set
+CONFIG_SENSORS_ABITUGURU=m
+CONFIG_SENSORS_ABITUGURU3=m
+# CONFIG_SENSORS_AD7314 is not set
+CONFIG_SENSORS_AD7414=m
+CONFIG_SENSORS_AD7418=m
+CONFIG_SENSORS_ADM1029=m
+CONFIG_SENSORS_ADM9240=m
+# CONFIG_SENSORS_ADT7310 is not set
+CONFIG_SENSORS_ADT7411=m
+CONFIG_SENSORS_ADT7462=m
+CONFIG_SENSORS_ADT7470=m
+CONFIG_SENSORS_ADT7475=m
+CONFIG_SENSORS_ASC7621=m
+CONFIG_SENSORS_APPLESMC=m
+CONFIG_SENSORS_ASPEED=m
+CONFIG_SENSORS_ATXP1=m
+CONFIG_SENSORS_DRIVETEMP=m
+CONFIG_SENSORS_DS620=m
+CONFIG_SENSORS_I5K_AMB=m
+CONFIG_SENSORS_F71882FG=m
+CONFIG_SENSORS_F75375S=m
+CONFIG_SENSORS_MC13783_ADC=m
+CONFIG_SENSORS_FSCHMD=m
+CONFIG_SENSORS_FTSTEUTATES=m
+CONFIG_SENSORS_G760A=m
+# CONFIG_SENSORS_GPIO_FAN is not set
+# CONFIG_SENSORS_HIH6130 is not set
+CONFIG_SENSORS_IBMAEM=m
+CONFIG_SENSORS_IBMPEX=m
+# CONFIG_SENSORS_IIO_HWMON is not set
+CONFIG_SENSORS_CORETEMP=m
+# CONFIG_SENSORS_IT87 is not set
+CONFIG_SENSORS_JC42=m
+CONFIG_SENSORS_LINEAGE=m
+CONFIG_SENSORS_LTC4151=m
+CONFIG_SENSORS_LTC4215=m
+CONFIG_SENSORS_LTC4245=m
+CONFIG_SENSORS_LTC4261=m
+CONFIG_SENSORS_MAX1111=m
+CONFIG_SENSORS_MAX16065=m
+CONFIG_SENSORS_MAX1668=m
+# CONFIG_SENSORS_MAX197 is not set
+CONFIG_SENSORS_MAX6639=m
+CONFIG_SENSORS_MAX6642=m
+CONFIG_SENSORS_MAX6650=m
+# CONFIG_SENSORS_MCP3021 is not set
+CONFIG_SENSORS_ADCXX=m
+CONFIG_SENSORS_LM70=m
+CONFIG_SENSORS_LM73=m
+CONFIG_SENSORS_LM93=m
+CONFIG_SENSORS_LM95241=m
+CONFIG_SENSORS_LM95245=m
+CONFIG_SENSORS_PC87427=m
+CONFIG_SENSORS_NTC_THERMISTOR=m
+CONFIG_SENSORS_NCT6683=m
+CONFIG_SENSORS_NCT6775=m
+CONFIG_SENSORS_NCT7802=m
+CONFIG_SENSORS_NCT7904=m
+CONFIG_SENSORS_NPCM7XX=m
+# CONFIG_SENSORS_SHT15 is not set
+CONFIG_SENSORS_SHT21=m
+CONFIG_SENSORS_DME1737=m
+CONFIG_SENSORS_EMC1403=m
+CONFIG_SENSORS_EMC2103=m
+CONFIG_SENSORS_EMC6W201=m
+CONFIG_SENSORS_SMSC47M192=m
+CONFIG_SENSORS_SCH5627=m
+CONFIG_SENSORS_SMM665=m
+CONFIG_SENSORS_ADS7828=m
+CONFIG_SENSORS_ADS7871=m
+CONFIG_SENSORS_AMC6821=m
+# CONFIG_SENSORS_INA209 is not set
+# CONFIG_SENSORS_INA2XX is not set
+CONFIG_SENSORS_THMC50=m
+CONFIG_SENSORS_TMP102=m
+CONFIG_SENSORS_TMP401=m
+CONFIG_SENSORS_TMP421=m
+CONFIG_SENSORS_VIA_CPUTEMP=m
+CONFIG_SENSORS_VT1211=m
+CONFIG_SENSORS_VT8231=m
+CONFIG_SENSORS_W83773G=m
+CONFIG_SENSORS_W83791D=m
+CONFIG_SENSORS_W83792D=m
+CONFIG_SENSORS_W83793=m
+CONFIG_SENSORS_W83795=m
+# CONFIG_SENSORS_W83795_FANCTRL is not set
+CONFIG_SENSORS_W83L786NG=m
+CONFIG_SENSORS_W83627EHF=m
+CONFIG_SENSORS_WM831X=m
+CONFIG_SENSORS_WM8350=m
+# CONFIG_SENSORS_XGENE is not set
+CONFIG_SENSORS_ATK0110=m
+
+##
+## file: drivers/hwmon/pmbus/Kconfig
+##
+# CONFIG_PMBUS is not set
+
+##
+## file: drivers/hwtracing/intel_th/Kconfig
+##
+# CONFIG_INTEL_TH is not set
+
+##
+## file: drivers/hwtracing/stm/Kconfig
+##
+# CONFIG_STM is not set
+# CONFIG_STM_DUMMY is not set
+# CONFIG_STM_SOURCE_CONSOLE is not set
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C_COMPAT=y
+CONFIG_I2C_CHARDEV=m
+# CONFIG_I2C_MUX is not set
+CONFIG_I2C_HELPER_AUTO=y
+# CONFIG_I2C_SLAVE is not set
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_ISCH=m
+CONFIG_I2C_NFORCE2_S4985=m
+# CONFIG_I2C_CBUS_GPIO is not set
+# CONFIG_I2C_DESIGNWARE_SLAVE is not set
+# CONFIG_I2C_DESIGNWARE_PLATFORM is not set
+# CONFIG_I2C_DESIGNWARE_BAYTRAIL is not set
+# CONFIG_I2C_EMEV2 is not set
+# CONFIG_I2C_GPIO is not set
+CONFIG_I2C_OCORES=m
+CONFIG_I2C_PCA_PLATFORM=m
+# CONFIG_I2C_RK3X is not set
+CONFIG_I2C_SIMTEC=m
+# CONFIG_I2C_XILINX is not set
+CONFIG_I2C_DIOLAN_U2C=m
+CONFIG_I2C_ROBOTFUZZ_OSIF=m
+CONFIG_I2C_TAOS_EVM=m
+CONFIG_I2C_TINY_USB=m
+CONFIG_I2C_VIPERBOARD=m
+# CONFIG_I2C_MLXCPLD is not set
+
+##
+## file: drivers/i2c/muxes/Kconfig
+##
+# CONFIG_I2C_ARB_GPIO_CHALLENGE is not set
+# CONFIG_I2C_MUX_GPIO is not set
+# CONFIG_I2C_MUX_LTC4306 is not set
+# CONFIG_I2C_MUX_PCA9541 is not set
+# CONFIG_I2C_MUX_PCA954x is not set
+# CONFIG_I2C_MUX_PINCTRL is not set
+# CONFIG_I2C_MUX_REG is not set
+# CONFIG_I2C_MUX_MLXCPLD is not set
+
+##
+## file: drivers/iio/Kconfig
+##
+CONFIG_IIO=m
+CONFIG_IIO_BUFFER=y
+# CONFIG_IIO_TRIGGER is not set
+
+##
+## file: drivers/iio/accel/Kconfig
+##
+CONFIG_ADIS16201=m
+CONFIG_ADIS16209=m
+CONFIG_ADXL345_I2C=m
+CONFIG_ADXL345_SPI=m
+CONFIG_ADXL372_SPI=m
+CONFIG_ADXL372_I2C=m
+CONFIG_BMA180=m
+CONFIG_BMA220=m
+CONFIG_BMA400=m
+CONFIG_BMC150_ACCEL=m
+CONFIG_DA280=m
+CONFIG_DA311=m
+CONFIG_DMARD09=m
+CONFIG_DMARD10=m
+CONFIG_HID_SENSOR_ACCEL_3D=m
+CONFIG_IIO_ST_ACCEL_3AXIS=m
+CONFIG_KXSD9=m
+CONFIG_KXCJK1013=m
+CONFIG_MC3230=m
+CONFIG_MMA7455_I2C=m
+CONFIG_MMA7455_SPI=m
+CONFIG_MMA7660=m
+CONFIG_MMA8452=m
+CONFIG_MMA9551=m
+CONFIG_MMA9553=m
+CONFIG_MXC4005=m
+CONFIG_MXC6255=m
+CONFIG_SCA3000=m
+CONFIG_STK8312=m
+CONFIG_STK8BA50=m
+
+##
+## file: drivers/iio/adc/Kconfig
+##
+CONFIG_AD7091R5=m
+CONFIG_AD7124=m
+CONFIG_AD7192=m
+CONFIG_AD7266=m
+CONFIG_AD7291=m
+CONFIG_AD7292=m
+CONFIG_AD7298=m
+CONFIG_AD7476=m
+CONFIG_AD7606_IFACE_PARALLEL=m
+CONFIG_AD7606_IFACE_SPI=m
+CONFIG_AD7766=m
+CONFIG_AD7768_1=m
+CONFIG_AD7780=m
+CONFIG_AD7791=m
+CONFIG_AD7793=m
+CONFIG_AD7887=m
+CONFIG_AD7923=m
+CONFIG_AD7949=m
+CONFIG_AD799X=m
+CONFIG_AD9467=m
+CONFIG_ADI_AXI_ADC=m
+CONFIG_AXP20X_ADC=m
+CONFIG_AXP288_ADC=m
+CONFIG_CC10001_ADC=m
+CONFIG_HI8435=m
+CONFIG_HX711=m
+CONFIG_INA2XX_ADC=m
+CONFIG_LTC2471=m
+CONFIG_LTC2485=m
+CONFIG_LTC2496=m
+CONFIG_LTC2497=m
+CONFIG_MAX1027=m
+CONFIG_MAX11100=m
+CONFIG_MAX1118=m
+CONFIG_MAX1241=m
+CONFIG_MAX1363=m
+CONFIG_MAX9611=m
+CONFIG_MCP320X=m
+CONFIG_MCP3422=m
+CONFIG_MCP3911=m
+CONFIG_NAU7802=m
+CONFIG_TI_ADC081C=m
+CONFIG_TI_ADC0832=m
+CONFIG_TI_ADC084S021=m
+CONFIG_TI_ADC12138=m
+CONFIG_TI_ADC108S102=m
+CONFIG_TI_ADC128S052=m
+CONFIG_TI_ADC161S626=m
+CONFIG_TI_ADS1015=m
+CONFIG_TI_ADS7950=m
+# CONFIG_VF610_ADC is not set
+CONFIG_VIPERBOARD_ADC=m
+
+##
+## file: drivers/iio/amplifiers/Kconfig
+##
+# CONFIG_AD8366 is not set
+
+##
+## file: drivers/iio/buffer/Kconfig
+##
+#. These will be selected by drivers that need them
+# CONFIG_IIO_BUFFER_CB is not set
+# CONFIG_IIO_KFIFO_BUF is not set
+
+##
+## file: drivers/iio/cdc/Kconfig
+##
+# CONFIG_AD7150 is not set
+
+##
+## file: drivers/iio/chemical/Kconfig
+##
+# CONFIG_ATLAS_PH_SENSOR is not set
+# CONFIG_IAQCORE is not set
+# CONFIG_VZ89X is not set
+
+##
+## file: drivers/iio/common/ssp_sensors/Kconfig
+##
+# CONFIG_IIO_SSP_SENSORHUB is not set
+
+##
+## file: drivers/iio/dac/Kconfig
+##
+CONFIG_AD5064=m
+CONFIG_AD5360=m
+CONFIG_AD5380=m
+CONFIG_AD5421=m
+CONFIG_AD5446=m
+CONFIG_AD5449=m
+CONFIG_AD5592R=m
+CONFIG_AD5593R=m
+CONFIG_AD5504=m
+CONFIG_AD5624R_SPI=m
+CONFIG_AD5686_SPI=m
+CONFIG_AD5696_I2C=m
+CONFIG_AD5755=m
+CONFIG_AD5758=m
+CONFIG_AD5761=m
+CONFIG_AD5764=m
+CONFIG_AD5770R=m
+CONFIG_AD5791=m
+CONFIG_AD7303=m
+CONFIG_AD8801=m
+CONFIG_DS4424=m
+CONFIG_LTC1660=m
+CONFIG_LTC2632=m
+CONFIG_M62332=m
+CONFIG_MAX517=m
+# CONFIG_MAX5821 is not set
+CONFIG_MCP4725=m
+CONFIG_MCP4922=m
+CONFIG_TI_DAC082S085=m
+CONFIG_TI_DAC5571=m
+CONFIG_TI_DAC7311=m
+CONFIG_TI_DAC7612=m
+
+##
+## file: drivers/iio/dummy/Kconfig
+##
+# CONFIG_IIO_SIMPLE_DUMMY is not set
+
+##
+## file: drivers/iio/frequency/Kconfig
+##
+# CONFIG_AD9523 is not set
+# CONFIG_ADF4350 is not set
+
+##
+## file: drivers/iio/gyro/Kconfig
+##
+CONFIG_ADIS16080=m
+CONFIG_ADIS16130=m
+CONFIG_ADIS16136=m
+CONFIG_ADIS16260=m
+CONFIG_ADXRS290=m
+CONFIG_ADXRS450=m
+CONFIG_BMG160=m
+CONFIG_FXAS21002C=m
+CONFIG_HID_SENSOR_GYRO_3D=m
+CONFIG_MPU3050_I2C=m
+CONFIG_IIO_ST_GYRO_3AXIS=m
+CONFIG_ITG3200=m
+
+##
+## file: drivers/iio/health/Kconfig
+##
+# CONFIG_AFE4403 is not set
+# CONFIG_AFE4404 is not set
+# CONFIG_MAX30100 is not set
+
+##
+## file: drivers/iio/humidity/Kconfig
+##
+# CONFIG_AM2315 is not set
+# CONFIG_DHT11 is not set
+# CONFIG_HDC100X is not set
+# CONFIG_HTU21 is not set
+# CONFIG_SI7005 is not set
+# CONFIG_SI7020 is not set
+
+##
+## file: drivers/iio/imu/Kconfig
+##
+# CONFIG_ADIS16400 is not set
+CONFIG_ADIS16460=m
+CONFIG_ADIS16475=m
+CONFIG_ADIS16480=m
+CONFIG_FXOS8700_I2C=m
+CONFIG_FXOS8700_SPI=m
+CONFIG_KMX61=m
+
+##
+## file: drivers/iio/imu/bmi160/Kconfig
+##
+CONFIG_BMI160_I2C=m
+CONFIG_BMI160_SPI=m
+
+##
+## file: drivers/iio/imu/inv_icm42600/Kconfig
+##
+CONFIG_INV_ICM42600_I2C=m
+CONFIG_INV_ICM42600_SPI=m
+
+##
+## file: drivers/iio/imu/inv_mpu6050/Kconfig
+##
+CONFIG_INV_MPU6050_I2C=m
+CONFIG_INV_MPU6050_SPI=m
+
+##
+## file: drivers/iio/imu/st_lsm6dsx/Kconfig
+##
+CONFIG_IIO_ST_LSM6DSX=m
+
+##
+## file: drivers/iio/light/Kconfig
+##
+CONFIG_ACPI_ALS=m
+CONFIG_ADJD_S311=m
+CONFIG_ADUX1020=m
+CONFIG_AL3010=m
+CONFIG_AL3320A=m
+CONFIG_APDS9300=m
+CONFIG_APDS9960=m
+CONFIG_AS73211=m
+CONFIG_BH1750=m
+CONFIG_BH1780=m
+CONFIG_CM32181=m
+CONFIG_CM3232=m
+CONFIG_CM3323=m
+CONFIG_CM36651=m
+CONFIG_GP2AP002=m
+CONFIG_GP2AP020A00F=m
+CONFIG_SENSORS_ISL29018=m
+CONFIG_SENSORS_ISL29028=m
+CONFIG_ISL29125=m
+CONFIG_HID_SENSOR_ALS=m
+CONFIG_HID_SENSOR_PROX=m
+CONFIG_JSA1212=m
+CONFIG_RPR0521=m
+CONFIG_LTR501=m
+CONFIG_LV0104CS=m
+CONFIG_MAX44000=m
+CONFIG_MAX44009=m
+CONFIG_NOA1305=m
+CONFIG_OPT3001=m
+CONFIG_PA12203001=m
+CONFIG_SI1133=m
+CONFIG_SI1145=m
+CONFIG_STK3310=m
+CONFIG_ST_UVIS25=m
+CONFIG_TCS3414=m
+CONFIG_TCS3472=m
+CONFIG_SENSORS_TSL2563=m
+CONFIG_TSL2583=m
+CONFIG_TSL2772=m
+CONFIG_TSL4531=m
+CONFIG_US5182D=m
+CONFIG_VCNL4000=m
+CONFIG_VCNL4035=m
+CONFIG_VEML6030=m
+CONFIG_VEML6070=m
+CONFIG_VL6180=m
+CONFIG_ZOPT2201=m
+
+##
+## file: drivers/iio/magnetometer/Kconfig
+##
+CONFIG_AK8975=m
+CONFIG_AK09911=m
+CONFIG_BMC150_MAGN_I2C=m
+CONFIG_BMC150_MAGN_SPI=m
+CONFIG_MAG3110=m
+CONFIG_HID_SENSOR_MAGNETOMETER_3D=m
+CONFIG_MMC35240=m
+CONFIG_IIO_ST_MAGN_3AXIS=m
+CONFIG_SENSORS_HMC5843_I2C=m
+CONFIG_SENSORS_HMC5843_SPI=m
+CONFIG_SENSORS_RM3100_I2C=m
+CONFIG_SENSORS_RM3100_SPI=m
+
+##
+## file: drivers/iio/orientation/Kconfig
+##
+CONFIG_HID_SENSOR_INCLINOMETER_3D=m
+CONFIG_HID_SENSOR_DEVICE_ROTATION=m
+
+##
+## file: drivers/iio/potentiometer/Kconfig
+##
+# CONFIG_DS1803 is not set
+# CONFIG_MAX5487 is not set
+# CONFIG_MCP4131 is not set
+# CONFIG_MCP4531 is not set
+# CONFIG_TPL0102 is not set
+
+##
+## file: drivers/iio/pressure/Kconfig
+##
+CONFIG_ABP060MG=m
+CONFIG_BMP280=m
+CONFIG_DLHL60D=m
+CONFIG_DPS310=m
+CONFIG_HID_SENSOR_PRESS=m
+CONFIG_HP03=m
+CONFIG_ICP10100=m
+CONFIG_MPL115_I2C=m
+CONFIG_MPL115_SPI=m
+CONFIG_MPL3115=m
+CONFIG_MS5611=m
+CONFIG_MS5637=m
+CONFIG_IIO_ST_PRESS=m
+CONFIG_T5403=m
+CONFIG_HP206C=m
+CONFIG_ZPA2326=m
+
+##
+## file: drivers/iio/proximity/Kconfig
+##
+# CONFIG_AS3935 is not set
+CONFIG_ISL29501=m
+CONFIG_LIDAR_LITE_V2=m
+CONFIG_MB1232=m
+CONFIG_PING=m
+CONFIG_RFD77402=m
+CONFIG_SRF04=m
+CONFIG_SX9310=m
+# CONFIG_SX9500 is not set
+CONFIG_SRF08=m
+CONFIG_VCNL3020=m
+CONFIG_VL53L0X_I2C=m
+
+##
+## file: drivers/iio/resolver/Kconfig
+##
+# CONFIG_AD2S90 is not set
+# CONFIG_AD2S1200 is not set
+
+##
+## file: drivers/iio/temperature/Kconfig
+##
+CONFIG_LTC2983=m
+CONFIG_MAXIM_THERMOCOUPLE=m
+CONFIG_HID_SENSOR_TEMP=m
+CONFIG_MLX90614=m
+CONFIG_MLX90632=m
+CONFIG_TMP006=m
+CONFIG_TMP007=m
+CONFIG_TSYS01=m
+CONFIG_TSYS02D=m
+CONFIG_MAX31856=m
+
+##
+## file: drivers/iio/trigger/Kconfig
+##
+# CONFIG_IIO_INTERRUPT_TRIGGER is not set
+# CONFIG_IIO_SYSFS_TRIGGER is not set
+
+##
+## file: drivers/infiniband/Kconfig
+##
+CONFIG_INFINIBAND=m
+CONFIG_INFINIBAND_USER_MAD=m
+CONFIG_INFINIBAND_USER_ACCESS=m
+CONFIG_INFINIBAND_ON_DEMAND_PAGING=y
+
+##
+## file: drivers/infiniband/hw/cxgb4/Kconfig
+##
+CONFIG_INFINIBAND_CXGB4=m
+
+##
+## file: drivers/infiniband/hw/hfi1/Kconfig
+##
+CONFIG_INFINIBAND_HFI1=m
+
+##
+## file: drivers/infiniband/hw/mlx4/Kconfig
+##
+CONFIG_MLX4_INFINIBAND=m
+
+##
+## file: drivers/infiniband/hw/mlx5/Kconfig
+##
+CONFIG_MLX5_INFINIBAND=m
+
+##
+## file: drivers/infiniband/hw/mthca/Kconfig
+##
+CONFIG_INFINIBAND_MTHCA=m
+CONFIG_INFINIBAND_MTHCA_DEBUG=y
+
+##
+## file: drivers/infiniband/hw/ocrdma/Kconfig
+##
+CONFIG_INFINIBAND_OCRDMA=m
+
+##
+## file: drivers/infiniband/hw/qedr/Kconfig
+##
+CONFIG_INFINIBAND_QEDR=m
+
+##
+## file: drivers/infiniband/hw/qib/Kconfig
+##
+CONFIG_INFINIBAND_QIB=m
+CONFIG_INFINIBAND_QIB_DCA=y
+
+##
+## file: drivers/infiniband/sw/rdmavt/Kconfig
+##
+CONFIG_INFINIBAND_RDMAVT=m
+
+##
+## file: drivers/infiniband/sw/rxe/Kconfig
+##
+CONFIG_RDMA_RXE=m
+
+##
+## file: drivers/infiniband/ulp/ipoib/Kconfig
+##
+CONFIG_INFINIBAND_IPOIB=m
+CONFIG_INFINIBAND_IPOIB_CM=y
+CONFIG_INFINIBAND_IPOIB_DEBUG=y
+# CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set
+
+##
+## file: drivers/infiniband/ulp/iser/Kconfig
+##
+CONFIG_INFINIBAND_ISER=m
+
+##
+## file: drivers/infiniband/ulp/isert/Kconfig
+##
+CONFIG_INFINIBAND_ISERT=m
+
+##
+## file: drivers/infiniband/ulp/srp/Kconfig
+##
+CONFIG_INFINIBAND_SRP=m
+
+##
+## file: drivers/infiniband/ulp/srpt/Kconfig
+##
+CONFIG_INFINIBAND_SRPT=m
+
+##
+## file: drivers/input/Kconfig
+##
+CONFIG_INPUT=y
+CONFIG_INPUT_LEDS=y
+CONFIG_INPUT_FF_MEMLESS=m
+CONFIG_INPUT_SPARSEKMAP=m
+# CONFIG_INPUT_MATRIXKMAP is not set
+CONFIG_INPUT_MOUSEDEV=y
+CONFIG_INPUT_MOUSEDEV_PSAUX=y
+CONFIG_INPUT_MOUSEDEV_SCREEN_X=1024
+CONFIG_INPUT_MOUSEDEV_SCREEN_Y=768
+CONFIG_INPUT_JOYDEV=m
+CONFIG_INPUT_EVDEV=m
+# CONFIG_INPUT_EVBUG is not set
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+CONFIG_JOYSTICK_ANALOG=m
+CONFIG_JOYSTICK_A3D=m
+CONFIG_JOYSTICK_ADI=m
+CONFIG_JOYSTICK_COBRA=m
+CONFIG_JOYSTICK_GF2K=m
+CONFIG_JOYSTICK_GRIP=m
+CONFIG_JOYSTICK_GRIP_MP=m
+CONFIG_JOYSTICK_GUILLEMOT=m
+CONFIG_JOYSTICK_INTERACT=m
+CONFIG_JOYSTICK_SIDEWINDER=m
+CONFIG_JOYSTICK_TMDC=m
+CONFIG_JOYSTICK_WARRIOR=m
+CONFIG_JOYSTICK_MAGELLAN=m
+CONFIG_JOYSTICK_SPACEORB=m
+CONFIG_JOYSTICK_SPACEBALL=m
+CONFIG_JOYSTICK_STINGER=m
+CONFIG_JOYSTICK_TWIDJOY=m
+CONFIG_JOYSTICK_ZHENHUA=m
+CONFIG_JOYSTICK_DB9=m
+CONFIG_JOYSTICK_GAMECON=m
+CONFIG_JOYSTICK_TURBOGRAFX=m
+# CONFIG_JOYSTICK_AS5011 is not set
+CONFIG_JOYSTICK_JOYDUMP=m
+CONFIG_JOYSTICK_XPAD=m
+CONFIG_JOYSTICK_XPAD_FF=y
+CONFIG_JOYSTICK_XPAD_LEDS=y
+CONFIG_JOYSTICK_WALKERA0701=m
+# CONFIG_JOYSTICK_PSXPAD_SPI is not set
+CONFIG_JOYSTICK_PXRC=m
+
+##
+## file: drivers/input/joystick/iforce/Kconfig
+##
+CONFIG_JOYSTICK_IFORCE=m
+CONFIG_JOYSTICK_IFORCE_USB=y
+CONFIG_JOYSTICK_IFORCE_232=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+# CONFIG_KEYBOARD_ADC is not set
+CONFIG_KEYBOARD_ADP5588=m
+# CONFIG_KEYBOARD_ADP5589 is not set
+# CONFIG_KEYBOARD_QT1070 is not set
+CONFIG_KEYBOARD_QT2160=m
+# CONFIG_KEYBOARD_DLINK_DIR685 is not set
+# CONFIG_KEYBOARD_GPIO is not set
+# CONFIG_KEYBOARD_GPIO_POLLED is not set
+# CONFIG_KEYBOARD_TCA6416 is not set
+# CONFIG_KEYBOARD_TCA8418 is not set
+# CONFIG_KEYBOARD_MATRIX is not set
+CONFIG_KEYBOARD_LM8323=m
+# CONFIG_KEYBOARD_LM8333 is not set
+CONFIG_KEYBOARD_MAX7359=m
+# CONFIG_KEYBOARD_MCS is not set
+# CONFIG_KEYBOARD_MPR121 is not set
+CONFIG_KEYBOARD_OPENCORES=m
+# CONFIG_KEYBOARD_SAMSUNG is not set
+CONFIG_KEYBOARD_STOWAWAY=m
+# CONFIG_KEYBOARD_OMAP4 is not set
+# CONFIG_KEYBOARD_TM2_TOUCHKEY is not set
+# CONFIG_KEYBOARD_CAP11XX is not set
+# CONFIG_KEYBOARD_BCM is not set
+
+##
+## file: drivers/input/misc/Kconfig
+##
+# CONFIG_INPUT_AD714X is not set
+# CONFIG_INPUT_BMA150 is not set
+# CONFIG_INPUT_E3X0_BUTTON is not set
+# CONFIG_INPUT_MMA8450 is not set
+# CONFIG_INPUT_GPIO_BEEPER is not set
+# CONFIG_INPUT_GPIO_DECODER is not set
+CONFIG_INPUT_ATI_REMOTE2=m
+CONFIG_INPUT_KEYSPAN_REMOTE=m
+# CONFIG_INPUT_KXTJ9 is not set
+CONFIG_INPUT_POWERMATE=m
+CONFIG_INPUT_YEALINK=m
+CONFIG_INPUT_CM109=m
+# CONFIG_INPUT_REGULATOR_HAPTIC is not set
+CONFIG_INPUT_AXP20X_PEK=m
+CONFIG_INPUT_PCF50633_PMU=m
+# CONFIG_INPUT_PCF8574 is not set
+# CONFIG_INPUT_PWM_BEEPER is not set
+# CONFIG_INPUT_PWM_VIBRA is not set
+# CONFIG_INPUT_GPIO_ROTARY_ENCODER is not set
+CONFIG_INPUT_WM831X_ON=m
+# CONFIG_INPUT_ADXL34X is not set
+# CONFIG_INPUT_IMS_PCU is not set
+# CONFIG_INPUT_CMA3000 is not set
+CONFIG_INPUT_XEN_KBDDEV_FRONTEND=y
+# CONFIG_INPUT_DRV260X_HAPTICS is not set
+# CONFIG_INPUT_DRV2665_HAPTICS is not set
+# CONFIG_INPUT_DRV2667_HAPTICS is not set
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_MOUSE_PS2_ALPS=y
+CONFIG_MOUSE_PS2_BYD=y
+CONFIG_MOUSE_PS2_LOGIPS2PP=y
+CONFIG_MOUSE_PS2_SYNAPTICS=y
+CONFIG_MOUSE_PS2_SYNAPTICS_SMBUS=y
+CONFIG_MOUSE_PS2_CYPRESS=y
+CONFIG_MOUSE_PS2_LIFEBOOK=y
+CONFIG_MOUSE_PS2_TRACKPOINT=y
+CONFIG_MOUSE_PS2_ELANTECH=y
+CONFIG_MOUSE_PS2_ELANTECH_SMBUS=y
+CONFIG_MOUSE_PS2_SENTELIC=y
+# CONFIG_MOUSE_PS2_TOUCHKIT is not set
+CONFIG_MOUSE_PS2_FOCALTECH=y
+# CONFIG_MOUSE_ELAN_I2C is not set
+# CONFIG_MOUSE_GPIO is not set
+CONFIG_MOUSE_SYNAPTICS_I2C=m
+CONFIG_MOUSE_SYNAPTICS_USB=m
+
+##
+## file: drivers/input/rmi4/Kconfig
+##
+# CONFIG_RMI4_I2C is not set
+# CONFIG_RMI4_SPI is not set
+CONFIG_RMI4_F03=y
+CONFIG_RMI4_F11=y
+CONFIG_RMI4_F12=y
+CONFIG_RMI4_F30=y
+CONFIG_RMI4_F34=y
+CONFIG_RMI4_F3A=y
+#. Enabling this makes input-modules pull in media/v4l2
+# CONFIG_RMI4_F54 is not set
+CONFIG_RMI4_F55=y
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO_ALTERA_PS2=m
+# CONFIG_SERIO_PS2MULT is not set
+# CONFIG_SERIO_ARC_PS2 is not set
+# CONFIG_SERIO_APBPS2 is not set
+# CONFIG_SERIO_OLPC_APSP is not set
+# CONFIG_USERIO is not set
+
+##
+## file: drivers/input/tablet/Kconfig
+##
+CONFIG_INPUT_TABLET=y
+CONFIG_TABLET_USB_ACECAD=m
+CONFIG_TABLET_USB_AIPTEK=m
+CONFIG_TABLET_USB_HANWANG=m
+CONFIG_TABLET_USB_KBTAB=m
+CONFIG_TABLET_USB_PEGASUS=m
+CONFIG_TABLET_SERIAL_WACOM4=m
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+CONFIG_TOUCHSCREEN_ADS7846=m
+CONFIG_TOUCHSCREEN_AD7877=m
+CONFIG_TOUCHSCREEN_AD7879=m
+CONFIG_TOUCHSCREEN_AD7879_I2C=m
+# CONFIG_TOUCHSCREEN_AD7879_SPI is not set
+# CONFIG_TOUCHSCREEN_ADC is not set
+# CONFIG_TOUCHSCREEN_AR1021_I2C is not set
+#. Chromebook Pixel
+CONFIG_TOUCHSCREEN_ATMEL_MXT=m
+# CONFIG_TOUCHSCREEN_ATMEL_MXT_T37 is not set
+# CONFIG_TOUCHSCREEN_AUO_PIXCIR is not set
+# CONFIG_TOUCHSCREEN_BU21013 is not set
+# CONFIG_TOUCHSCREEN_BU21029 is not set
+# CONFIG_TOUCHSCREEN_CHIPONE_ICN8318 is not set
+# CONFIG_TOUCHSCREEN_CHIPONE_ICN8505 is not set
+# CONFIG_TOUCHSCREEN_CY8CTMG110 is not set
+# CONFIG_TOUCHSCREEN_CYTTSP_CORE is not set
+# CONFIG_TOUCHSCREEN_CYTTSP4_CORE is not set
+CONFIG_TOUCHSCREEN_DYNAPRO=m
+CONFIG_TOUCHSCREEN_HAMPSHIRE=m
+CONFIG_TOUCHSCREEN_EETI=m
+# CONFIG_TOUCHSCREEN_EGALAX is not set
+# CONFIG_TOUCHSCREEN_EGALAX_SERIAL is not set
+# CONFIG_TOUCHSCREEN_EXC3000 is not set
+CONFIG_TOUCHSCREEN_FUJITSU=m
+CONFIG_TOUCHSCREEN_GOODIX=m
+# CONFIG_TOUCHSCREEN_HIDEEP is not set
+# CONFIG_TOUCHSCREEN_ILI210X is not set
+# CONFIG_TOUCHSCREEN_S6SY761 is not set
+CONFIG_TOUCHSCREEN_GUNZE=m
+# CONFIG_TOUCHSCREEN_EKTF2127 is not set
+# CONFIG_TOUCHSCREEN_ELAN is not set
+CONFIG_TOUCHSCREEN_ELO=m
+CONFIG_TOUCHSCREEN_WACOM_W8001=m
+# CONFIG_TOUCHSCREEN_WACOM_I2C is not set
+# CONFIG_TOUCHSCREEN_MAX11801 is not set
+CONFIG_TOUCHSCREEN_MCS5000=m
+# CONFIG_TOUCHSCREEN_MMS114 is not set
+# CONFIG_TOUCHSCREEN_MELFAS_MIP4 is not set
+CONFIG_TOUCHSCREEN_MTOUCH=m
+# CONFIG_TOUCHSCREEN_IMX6UL_TSC is not set
+CONFIG_TOUCHSCREEN_INEXIO=m
+CONFIG_TOUCHSCREEN_MK712=m
+CONFIG_TOUCHSCREEN_HTCPEN=m
+CONFIG_TOUCHSCREEN_PENMOUNT=m
+# CONFIG_TOUCHSCREEN_EDT_FT5X06 is not set
+CONFIG_TOUCHSCREEN_TOUCHRIGHT=m
+CONFIG_TOUCHSCREEN_TOUCHWIN=m
+CONFIG_TOUCHSCREEN_UCB1400=m
+# CONFIG_TOUCHSCREEN_PIXCIR is not set
+# CONFIG_TOUCHSCREEN_WDT87XX_I2C is not set
+CONFIG_TOUCHSCREEN_WM97XX=m
+CONFIG_TOUCHSCREEN_WM9705=y
+CONFIG_TOUCHSCREEN_WM9712=y
+CONFIG_TOUCHSCREEN_WM9713=y
+CONFIG_TOUCHSCREEN_USB_COMPOSITE=m
+CONFIG_TOUCHSCREEN_MC13783=m
+CONFIG_TOUCHSCREEN_USB_EGALAX=y
+CONFIG_TOUCHSCREEN_USB_PANJIT=y
+CONFIG_TOUCHSCREEN_USB_3M=y
+CONFIG_TOUCHSCREEN_USB_ITM=y
+CONFIG_TOUCHSCREEN_USB_ETURBO=y
+CONFIG_TOUCHSCREEN_USB_GUNZE=y
+CONFIG_TOUCHSCREEN_USB_DMC_TSC10=y
+CONFIG_TOUCHSCREEN_USB_IRTOUCH=y
+CONFIG_TOUCHSCREEN_USB_IDEALTEK=y
+CONFIG_TOUCHSCREEN_USB_GENERAL_TOUCH=y
+CONFIG_TOUCHSCREEN_USB_GOTOP=y
+CONFIG_TOUCHSCREEN_USB_JASTEC=y
+CONFIG_TOUCHSCREEN_USB_ELO=y
+CONFIG_TOUCHSCREEN_USB_E2I=y
+CONFIG_TOUCHSCREEN_USB_ZYTRONIC=y
+CONFIG_TOUCHSCREEN_USB_ETT_TC45USB=y
+CONFIG_TOUCHSCREEN_USB_NEXIO=y
+CONFIG_TOUCHSCREEN_USB_EASYTOUCH=y
+CONFIG_TOUCHSCREEN_TOUCHIT213=m
+# CONFIG_TOUCHSCREEN_TSC2004 is not set
+# CONFIG_TOUCHSCREEN_TSC2005 is not set
+CONFIG_TOUCHSCREEN_TSC2007=m
+# CONFIG_TOUCHSCREEN_TSC2007_IIO is not set
+# CONFIG_TOUCHSCREEN_RM_TS is not set
+# CONFIG_TOUCHSCREEN_SILEAD is not set
+# CONFIG_TOUCHSCREEN_SIS_I2C is not set
+# CONFIG_TOUCHSCREEN_ST1232 is not set
+# CONFIG_TOUCHSCREEN_STMFTS is not set
+CONFIG_TOUCHSCREEN_SUR40=m
+# CONFIG_TOUCHSCREEN_SX8654 is not set
+CONFIG_TOUCHSCREEN_TPS6507X=m
+# CONFIG_TOUCHSCREEN_ZET6223 is not set
+# CONFIG_TOUCHSCREEN_ZFORCE is not set
+# CONFIG_TOUCHSCREEN_ROHM_BU21023 is not set
+
+##
+## file: drivers/iommu/Kconfig
+##
+CONFIG_IOMMU_SUPPORT=y
+
+##
+## file: drivers/ipack/Kconfig
+##
+# CONFIG_IPACK_BUS is not set
+
+##
+## file: drivers/isdn/Kconfig
+##
+# CONFIG_ISDN is not set
+
+##
+## file: drivers/isdn/hardware/mISDN/Kconfig
+##
+CONFIG_MISDN_HFCPCI=m
+CONFIG_MISDN_HFCMULTI=m
+CONFIG_MISDN_HFCUSB=m
+CONFIG_MISDN_AVMFRITZ=m
+CONFIG_MISDN_SPEEDFAX=m
+CONFIG_MISDN_INFINEON=m
+CONFIG_MISDN_W6692=m
+#. Binds a generic PCI bridge
+# CONFIG_MISDN_NETJET is not set
+
+##
+## file: drivers/isdn/mISDN/Kconfig
+##
+CONFIG_MISDN=m
+CONFIG_MISDN_DSP=m
+CONFIG_MISDN_L1OIP=m
+
+##
+## file: drivers/leds/Kconfig
+##
+CONFIG_NEW_LEDS=y
+CONFIG_LEDS_CLASS=y
+# CONFIG_LEDS_CLASS_FLASH is not set
+CONFIG_LEDS_BRIGHTNESS_HW_CHANGED=y
+# CONFIG_LEDS_BCM6328 is not set
+# CONFIG_LEDS_BCM6358 is not set
+# CONFIG_LEDS_LM3530 is not set
+# CONFIG_LEDS_LM3642 is not set
+CONFIG_LEDS_NET48XX=m
+# CONFIG_LEDS_PCA9532 is not set
+CONFIG_LEDS_GPIO=m
+CONFIG_LEDS_LP3944=m
+# CONFIG_LEDS_LP3952 is not set
+# CONFIG_LEDS_LP5521 is not set
+# CONFIG_LEDS_LP5523 is not set
+# CONFIG_LEDS_LP5562 is not set
+# CONFIG_LEDS_LP8501 is not set
+# CONFIG_LEDS_LP8860 is not set
+CONFIG_LEDS_PCA955X=m
+# CONFIG_LEDS_PCA963X is not set
+CONFIG_LEDS_WM831X_STATUS=m
+CONFIG_LEDS_WM8350=m
+CONFIG_LEDS_DAC124S085=m
+CONFIG_LEDS_REGULATOR=m
+CONFIG_LEDS_BD2802=m
+CONFIG_LEDS_INTEL_SS4200=m
+CONFIG_LEDS_LT3593=m
+CONFIG_LEDS_MC13783=m
+# CONFIG_LEDS_TCA6507 is not set
+# CONFIG_LEDS_TLC591XX is not set
+# CONFIG_LEDS_LM355x is not set
+# CONFIG_LEDS_OT200 is not set
+# CONFIG_LEDS_BLINKM is not set
+# CONFIG_LEDS_MLXCPLD is not set
+
+##
+## file: drivers/leds/trigger/Kconfig
+##
+CONFIG_LEDS_TRIGGERS=y
+CONFIG_LEDS_TRIGGER_TIMER=m
+CONFIG_LEDS_TRIGGER_ONESHOT=m
+CONFIG_LEDS_TRIGGER_DISK=y
+CONFIG_LEDS_TRIGGER_MTD=y
+CONFIG_LEDS_TRIGGER_HEARTBEAT=m
+CONFIG_LEDS_TRIGGER_BACKLIGHT=m
+CONFIG_LEDS_TRIGGER_CPU=y
+CONFIG_LEDS_TRIGGER_ACTIVITY=m
+CONFIG_LEDS_TRIGGER_GPIO=m
+CONFIG_LEDS_TRIGGER_DEFAULT_ON=m
+CONFIG_LEDS_TRIGGER_TRANSIENT=m
+CONFIG_LEDS_TRIGGER_CAMERA=m
+CONFIG_LEDS_TRIGGER_PANIC=y
+CONFIG_LEDS_TRIGGER_NETDEV=m
+CONFIG_LEDS_TRIGGER_PATTERN=m
+
+##
+## file: drivers/mailbox/Kconfig
+##
+# CONFIG_MAILBOX is not set
+
+##
+## file: drivers/mcb/Kconfig
+##
+# CONFIG_MCB is not set
+
+##
+## file: drivers/md/Kconfig
+##
+CONFIG_MD=y
+CONFIG_BLK_DEV_MD=m
+CONFIG_MD_LINEAR=m
+CONFIG_MD_RAID0=m
+CONFIG_MD_RAID1=m
+CONFIG_MD_RAID10=m
+CONFIG_MD_RAID456=m
+CONFIG_MD_MULTIPATH=m
+CONFIG_MD_FAULTY=m
+CONFIG_MD_CLUSTER=m
+CONFIG_BLK_DEV_DM=m
+# CONFIG_DM_DEBUG is not set
+# CONFIG_DM_DEBUG_BLOCK_MANAGER_LOCKING is not set
+# CONFIG_DM_DEBUG_BLOCK_STACK_TRACING is not set
+CONFIG_DM_UNSTRIPED=m
+CONFIG_DM_CRYPT=m
+CONFIG_DM_SNAPSHOT=m
+CONFIG_DM_THIN_PROVISIONING=m
+CONFIG_DM_CACHE=m
+CONFIG_DM_CACHE_SMQ=m
+CONFIG_DM_WRITECACHE=m
+CONFIG_DM_ERA=m
+CONFIG_DM_MIRROR=m
+CONFIG_DM_LOG_USERSPACE=m
+CONFIG_DM_RAID=m
+CONFIG_DM_ZERO=m
+CONFIG_DM_MULTIPATH=m
+CONFIG_DM_MULTIPATH_QL=m
+CONFIG_DM_MULTIPATH_ST=m
+CONFIG_DM_DELAY=m
+CONFIG_DM_UEVENT=y
+CONFIG_DM_FLAKEY=m
+CONFIG_DM_VERITY=m
+CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG=y
+CONFIG_DM_VERITY_FEC=y
+CONFIG_DM_SWITCH=m
+CONFIG_DM_LOG_WRITES=m
+CONFIG_DM_INTEGRITY=m
+CONFIG_DM_ZONED=m
+
+##
+## file: drivers/md/bcache/Kconfig
+##
+CONFIG_BCACHE=m
+# CONFIG_BCACHE_DEBUG is not set
+# CONFIG_BCACHE_CLOSURES_DEBUG is not set
+
+##
+## file: drivers/media/Kconfig
+##
+CONFIG_MEDIA_SUPPORT=m
+CONFIG_MEDIA_SUBDRV_AUTOSELECT=y
+CONFIG_MEDIA_CAMERA_SUPPORT=y
+CONFIG_MEDIA_ANALOG_TV_SUPPORT=y
+CONFIG_MEDIA_DIGITAL_TV_SUPPORT=y
+CONFIG_MEDIA_RADIO_SUPPORT=y
+CONFIG_MEDIA_SDR_SUPPORT=y
+CONFIG_MEDIA_CONTROLLER=y
+
+##
+## file: drivers/media/cec/Kconfig
+##
+CONFIG_MEDIA_CEC_RC=y
+CONFIG_MEDIA_CEC_SUPPORT=y
+
+##
+## file: drivers/media/cec/usb/pulse8/Kconfig
+##
+CONFIG_USB_PULSE8_CEC=m
+
+##
+## file: drivers/media/cec/usb/rainshadow/Kconfig
+##
+CONFIG_USB_RAINSHADOW_CEC=m
+
+##
+## file: drivers/media/common/siano/Kconfig
+##
+CONFIG_SMS_SIANO_RC=y
+# CONFIG_SMS_SIANO_DEBUGFS is not set
+
+##
+## file: drivers/media/dvb-core/Kconfig
+##
+# CONFIG_DVB_MMAP is not set
+CONFIG_DVB_NET=y
+CONFIG_DVB_DYNAMIC_MINORS=y
+# CONFIG_DVB_DEMUX_SECTION_LOSS_LOG is not set
+# CONFIG_DVB_ULE_DEBUG is not set
+
+##
+## file: drivers/media/dvb-frontends/Kconfig
+##
+CONFIG_DVB_CX24110=m
+CONFIG_DVB_CX24123=m
+CONFIG_DVB_MT312=m
+CONFIG_DVB_S5H1420=m
+CONFIG_DVB_STV0299=m
+CONFIG_DVB_TDA8083=m
+CONFIG_DVB_TDA10086=m
+CONFIG_DVB_VES1X93=m
+CONFIG_DVB_TUNER_ITD1000=m
+CONFIG_DVB_TDA826X=m
+CONFIG_DVB_TUA6100=m
+CONFIG_DVB_SP887X=m
+CONFIG_DVB_CX22700=m
+CONFIG_DVB_CX22702=m
+CONFIG_DVB_L64781=m
+CONFIG_DVB_TDA1004X=m
+CONFIG_DVB_NXT6000=m
+CONFIG_DVB_MT352=m
+CONFIG_DVB_ZL10353=m
+CONFIG_DVB_DIB3000MB=m
+CONFIG_DVB_DIB3000MC=m
+CONFIG_DVB_DIB7000M=m
+CONFIG_DVB_DIB7000P=m
+CONFIG_DVB_VES1820=m
+CONFIG_DVB_TDA10021=m
+CONFIG_DVB_TDA10023=m
+CONFIG_DVB_STV0297=m
+CONFIG_DVB_NXT200X=m
+CONFIG_DVB_OR51211=m
+CONFIG_DVB_OR51132=m
+CONFIG_DVB_BCM3510=m
+CONFIG_DVB_LGDT330X=m
+CONFIG_DVB_S5H1409=m
+CONFIG_DVB_S921=m
+CONFIG_DVB_TC90522=m
+CONFIG_DVB_PLL=m
+CONFIG_DVB_LNBP21=m
+CONFIG_DVB_ISL6405=m
+CONFIG_DVB_ISL6421=m
+CONFIG_DVB_LGS8GXX=m
+CONFIG_DVB_DUMMY_FE=m
+
+##
+## file: drivers/media/firewire/Kconfig
+##
+CONFIG_DVB_FIREDTV=m
+
+##
+## file: drivers/media/i2c/Kconfig
+##
+CONFIG_VIDEO_TVAUDIO=m
+CONFIG_VIDEO_TDA7432=m
+CONFIG_VIDEO_TDA9840=m
+CONFIG_VIDEO_TEA6415C=m
+CONFIG_VIDEO_TEA6420=m
+CONFIG_VIDEO_MSP3400=m
+CONFIG_VIDEO_CS53L32A=m
+CONFIG_VIDEO_TLV320AIC23B=m
+CONFIG_VIDEO_WM8775=m
+CONFIG_VIDEO_WM8739=m
+CONFIG_VIDEO_SAA6588=m
+CONFIG_VIDEO_BT819=m
+CONFIG_VIDEO_BT856=m
+CONFIG_VIDEO_KS0127=m
+CONFIG_VIDEO_SAA7110=m
+CONFIG_VIDEO_SAA711X=m
+CONFIG_VIDEO_TVP5150=m
+# CONFIG_VIDEO_TW9910 is not set
+CONFIG_VIDEO_VPX3220=m
+CONFIG_VIDEO_SAA7127=m
+CONFIG_VIDEO_SAA7185=m
+CONFIG_VIDEO_ADV7170=m
+CONFIG_VIDEO_ADV7175=m
+CONFIG_VIDEO_UPD64031A=m
+CONFIG_VIDEO_UPD64083=m
+# CONFIG_VIDEO_OV2640 is not set
+# CONFIG_VIDEO_OV772X is not set
+CONFIG_VIDEO_OV7670=m
+# CONFIG_VIDEO_OV9640 is not set
+# CONFIG_VIDEO_MT9M001 is not set
+# CONFIG_VIDEO_MT9T112 is not set
+CONFIG_VIDEO_SR030PC30=m
+CONFIG_VIDEO_NOON010PC30=m
+# CONFIG_VIDEO_RJ54N1 is not set
+
+##
+## file: drivers/media/i2c/cx25840/Kconfig
+##
+CONFIG_VIDEO_CX25840=m
+
+##
+## file: drivers/media/mc/Kconfig
+##
+# CONFIG_MEDIA_CONTROLLER_DVB is not set
+
+##
+## file: drivers/media/mmc/siano/Kconfig
+##
+CONFIG_SMS_SDIO_DRV=m
+
+##
+## file: drivers/media/pci/Kconfig
+##
+CONFIG_MEDIA_PCI_SUPPORT=y
+# CONFIG_VIDEO_PCI_SKELETON is not set
+
+##
+## file: drivers/media/pci/b2c2/Kconfig
+##
+CONFIG_DVB_B2C2_FLEXCOP_PCI=m
+# CONFIG_DVB_B2C2_FLEXCOP_PCI_DEBUG is not set
+
+##
+## file: drivers/media/pci/bt8xx/Kconfig
+##
+CONFIG_VIDEO_BT848=m
+CONFIG_DVB_BT8XX=m
+
+##
+## file: drivers/media/pci/cx18/Kconfig
+##
+CONFIG_VIDEO_CX18=m
+CONFIG_VIDEO_CX18_ALSA=m
+
+##
+## file: drivers/media/pci/cx23885/Kconfig
+##
+CONFIG_VIDEO_CX23885=m
+CONFIG_MEDIA_ALTERA_CI=m
+
+##
+## file: drivers/media/pci/cx25821/Kconfig
+##
+# CONFIG_VIDEO_CX25821 is not set
+
+##
+## file: drivers/media/pci/cx88/Kconfig
+##
+CONFIG_VIDEO_CX88=m
+CONFIG_VIDEO_CX88_ALSA=m
+CONFIG_VIDEO_CX88_BLACKBIRD=m
+CONFIG_VIDEO_CX88_DVB=m
+CONFIG_VIDEO_CX88_ENABLE_VP3054=y
+
+##
+## file: drivers/media/pci/ddbridge/Kconfig
+##
+CONFIG_DVB_DDBRIDGE=m
+# CONFIG_DVB_DDBRIDGE_MSIENABLE is not set
+
+##
+## file: drivers/media/pci/dm1105/Kconfig
+##
+CONFIG_DVB_DM1105=m
+
+##
+## file: drivers/media/pci/dt3155/Kconfig
+##
+CONFIG_VIDEO_DT3155=m
+
+##
+## file: drivers/media/pci/ivtv/Kconfig
+##
+CONFIG_VIDEO_IVTV=m
+CONFIG_VIDEO_IVTV_ALSA=m
+CONFIG_VIDEO_FB_IVTV=m
+
+##
+## file: drivers/media/pci/mantis/Kconfig
+##
+CONFIG_MANTIS_CORE=m
+CONFIG_DVB_MANTIS=m
+CONFIG_DVB_HOPPER=m
+
+##
+## file: drivers/media/pci/meye/Kconfig
+##
+CONFIG_VIDEO_MEYE=m
+
+##
+## file: drivers/media/pci/netup_unidvb/Kconfig
+##
+CONFIG_DVB_NETUP_UNIDVB=m
+
+##
+## file: drivers/media/pci/ngene/Kconfig
+##
+CONFIG_DVB_NGENE=m
+
+##
+## file: drivers/media/pci/pluto2/Kconfig
+##
+CONFIG_DVB_PLUTO2=m
+
+##
+## file: drivers/media/pci/pt1/Kconfig
+##
+CONFIG_DVB_PT1=m
+
+##
+## file: drivers/media/pci/pt3/Kconfig
+##
+CONFIG_DVB_PT3=m
+
+##
+## file: drivers/media/pci/saa7134/Kconfig
+##
+CONFIG_VIDEO_SAA7134=m
+CONFIG_VIDEO_SAA7134_ALSA=m
+CONFIG_VIDEO_SAA7134_RC=y
+CONFIG_VIDEO_SAA7134_DVB=m
+
+##
+## file: drivers/media/pci/saa7146/Kconfig
+##
+CONFIG_VIDEO_HEXIUM_GEMINI=m
+CONFIG_VIDEO_HEXIUM_ORION=m
+CONFIG_VIDEO_MXB=m
+
+##
+## file: drivers/media/pci/saa7164/Kconfig
+##
+CONFIG_VIDEO_SAA7164=m
+
+##
+## file: drivers/media/pci/smipcie/Kconfig
+##
+CONFIG_DVB_SMIPCIE=m
+
+##
+## file: drivers/media/pci/solo6x10/Kconfig
+##
+CONFIG_VIDEO_SOLO6X10=m
+
+##
+## file: drivers/media/pci/ttpci/Kconfig
+##
+CONFIG_DVB_BUDGET_CORE=m
+CONFIG_DVB_BUDGET=m
+CONFIG_DVB_BUDGET_CI=m
+CONFIG_DVB_BUDGET_AV=m
+
+##
+## file: drivers/media/pci/tw5864/Kconfig
+##
+CONFIG_VIDEO_TW5864=m
+
+##
+## file: drivers/media/pci/tw68/Kconfig
+##
+CONFIG_VIDEO_TW68=m
+
+##
+## file: drivers/media/pci/tw686x/Kconfig
+##
+CONFIG_VIDEO_TW686X=m
+
+##
+## file: drivers/media/platform/Kconfig
+##
+CONFIG_V4L_PLATFORM_DRIVERS=y
+# CONFIG_VIDEO_RENESAS_CEU is not set
+CONFIG_V4L_MEM2MEM_DRIVERS=y
+# CONFIG_VIDEO_MEM2MEM_DEINTERLACE is not set
+# CONFIG_DVB_PLATFORM_DRIVERS is not set
+# CONFIG_SDR_PLATFORM_DRIVERS is not set
+
+##
+## file: drivers/media/platform/cadence/Kconfig
+##
+# CONFIG_VIDEO_CADENCE is not set
+
+##
+## file: drivers/media/platform/marvell-ccic/Kconfig
+##
+CONFIG_VIDEO_CAFE_CCIC=m
+
+##
+## file: drivers/media/radio/Kconfig
+##
+CONFIG_RADIO_ADAPTERS=y
+# CONFIG_RADIO_SI4713 is not set
+CONFIG_USB_MR800=m
+CONFIG_RADIO_SHARK=m
+CONFIG_RADIO_SHARK2=m
+CONFIG_USB_KEENE=m
+CONFIG_USB_RAREMONO=m
+CONFIG_USB_MA901=m
+# CONFIG_RADIO_TEA5764 is not set
+# CONFIG_RADIO_SAA7706H is not set
+# CONFIG_RADIO_TEF6862 is not set
+# CONFIG_RADIO_WL1273 is not set
+
+##
+## file: drivers/media/radio/si470x/Kconfig
+##
+CONFIG_RADIO_SI470X=y
+CONFIG_USB_SI470X=m
+# CONFIG_I2C_SI470X is not set
+
+##
+## file: drivers/media/radio/si4713/Kconfig
+##
+# CONFIG_I2C_SI4713 is not set
+
+##
+## file: drivers/media/radio/wl128x/Kconfig
+##
+# CONFIG_RADIO_WL128X is not set
+
+##
+## file: drivers/media/rc/Kconfig
+##
+CONFIG_RC_CORE=m
+CONFIG_LIRC=y
+CONFIG_RC_DECODERS=y
+CONFIG_IR_NEC_DECODER=m
+CONFIG_IR_RC5_DECODER=m
+CONFIG_IR_RC6_DECODER=m
+CONFIG_IR_JVC_DECODER=m
+CONFIG_IR_SONY_DECODER=m
+CONFIG_IR_SANYO_DECODER=m
+CONFIG_IR_SHARP_DECODER=m
+CONFIG_IR_MCE_KBD_DECODER=m
+CONFIG_IR_XMP_DECODER=m
+CONFIG_IR_IMON_DECODER=m
+CONFIG_RC_DEVICES=y
+CONFIG_RC_ATI_REMOTE=m
+CONFIG_IR_ENE=m
+# CONFIG_IR_HIX5HD2 is not set
+CONFIG_IR_IMON=m
+CONFIG_IR_IMON_RAW=m
+CONFIG_IR_MCEUSB=m
+# CONFIG_IR_NUVOTON is not set
+CONFIG_IR_REDRAT3=m
+CONFIG_IR_STREAMZAP=m
+CONFIG_IR_IGORPLUGUSB=m
+CONFIG_IR_IGUANA=m
+CONFIG_IR_TTUSBIR=m
+CONFIG_RC_LOOPBACK=m
+# CONFIG_IR_GPIO_CIR is not set
+
+##
+## file: drivers/media/rc/img-ir/Kconfig
+##
+# CONFIG_IR_IMG is not set
+
+##
+## file: drivers/media/rc/keymaps/Kconfig
+##
+CONFIG_RC_MAP=m
+
+##
+## file: drivers/media/spi/Kconfig
+##
+# CONFIG_CXD2880_SPI_DRV is not set
+
+##
+## file: drivers/media/test-drivers/Kconfig
+##
+CONFIG_V4L_TEST_DRIVERS=y
+# CONFIG_VIDEO_VIM2M is not set
+
+##
+## file: drivers/media/test-drivers/vivid/Kconfig
+##
+CONFIG_VIDEO_VIVID=m
+CONFIG_VIDEO_VIVID_CEC=y
+CONFIG_VIDEO_VIVID_MAX_DEVS=64
+
+##
+## file: drivers/media/tuners/Kconfig
+##
+CONFIG_MEDIA_TUNER_TDA827X=m
+CONFIG_MEDIA_TUNER_TEA5761=y
+CONFIG_MEDIA_TUNER_MT2060=m
+CONFIG_MEDIA_TUNER_MT2131=m
+CONFIG_MEDIA_TUNER_QT1010=m
+
+##
+## file: drivers/media/usb/Kconfig
+##
+CONFIG_MEDIA_USB_SUPPORT=y
+
+##
+## file: drivers/media/usb/airspy/Kconfig
+##
+CONFIG_USB_AIRSPY=m
+
+##
+## file: drivers/media/usb/as102/Kconfig
+##
+CONFIG_DVB_AS102=m
+
+##
+## file: drivers/media/usb/au0828/Kconfig
+##
+CONFIG_VIDEO_AU0828=m
+CONFIG_VIDEO_AU0828_V4L2=y
+CONFIG_VIDEO_AU0828_RC=y
+
+##
+## file: drivers/media/usb/b2c2/Kconfig
+##
+CONFIG_DVB_B2C2_FLEXCOP_USB=m
+# CONFIG_DVB_B2C2_FLEXCOP_USB_DEBUG is not set
+
+##
+## file: drivers/media/usb/cpia2/Kconfig
+##
+CONFIG_VIDEO_CPIA2=m
+
+##
+## file: drivers/media/usb/cx231xx/Kconfig
+##
+CONFIG_VIDEO_CX231XX=m
+CONFIG_VIDEO_CX231XX_RC=y
+CONFIG_VIDEO_CX231XX_ALSA=m
+CONFIG_VIDEO_CX231XX_DVB=m
+
+##
+## file: drivers/media/usb/dvb-usb/Kconfig
+##
+CONFIG_DVB_USB=m
+# CONFIG_DVB_USB_DEBUG is not set
+CONFIG_DVB_USB_A800=m
+CONFIG_DVB_USB_DIBUSB_MB=m
+CONFIG_DVB_USB_DIBUSB_MB_FAULTY=y
+CONFIG_DVB_USB_DIBUSB_MC=m
+CONFIG_DVB_USB_DIB0700=m
+CONFIG_DVB_USB_UMT_010=m
+CONFIG_DVB_USB_CXUSB=m
+CONFIG_DVB_USB_M920X=m
+CONFIG_DVB_USB_DIGITV=m
+CONFIG_DVB_USB_VP7045=m
+CONFIG_DVB_USB_VP702X=m
+CONFIG_DVB_USB_GP8PSK=m
+CONFIG_DVB_USB_NOVA_T_USB2=m
+CONFIG_DVB_USB_TTUSB2=m
+CONFIG_DVB_USB_DTT200U=m
+CONFIG_DVB_USB_OPERA1=m
+CONFIG_DVB_USB_AF9005=m
+CONFIG_DVB_USB_AF9005_REMOTE=m
+CONFIG_DVB_USB_PCTV452E=m
+CONFIG_DVB_USB_DW2102=m
+CONFIG_DVB_USB_CINERGY_T2=m
+CONFIG_DVB_USB_DTV5100=m
+CONFIG_DVB_USB_AZ6027=m
+CONFIG_DVB_USB_TECHNISAT_USB2=m
+
+##
+## file: drivers/media/usb/dvb-usb-v2/Kconfig
+##
+CONFIG_DVB_USB_V2=m
+CONFIG_DVB_USB_AF9015=m
+CONFIG_DVB_USB_AF9035=m
+CONFIG_DVB_USB_ANYSEE=m
+CONFIG_DVB_USB_AU6610=m
+CONFIG_DVB_USB_AZ6007=m
+CONFIG_DVB_USB_CE6230=m
+CONFIG_DVB_USB_EC168=m
+CONFIG_DVB_USB_GL861=m
+CONFIG_DVB_USB_LME2510=m
+CONFIG_DVB_USB_MXL111SF=m
+CONFIG_DVB_USB_RTL28XXU=m
+CONFIG_DVB_USB_DVBSKY=m
+CONFIG_DVB_USB_ZD1301=m
+
+##
+## file: drivers/media/usb/em28xx/Kconfig
+##
+CONFIG_VIDEO_EM28XX=m
+CONFIG_VIDEO_EM28XX_V4L2=m
+CONFIG_VIDEO_EM28XX_ALSA=m
+CONFIG_VIDEO_EM28XX_DVB=m
+CONFIG_VIDEO_EM28XX_RC=y
+
+##
+## file: drivers/media/usb/go7007/Kconfig
+##
+CONFIG_VIDEO_GO7007=m
+CONFIG_VIDEO_GO7007_USB=m
+CONFIG_VIDEO_GO7007_LOADER=m
+CONFIG_VIDEO_GO7007_USB_S2250_BOARD=m
+
+##
+## file: drivers/media/usb/gspca/Kconfig
+##
+CONFIG_USB_GSPCA=m
+CONFIG_USB_GSPCA_BENQ=m
+CONFIG_USB_GSPCA_CONEX=m
+CONFIG_USB_GSPCA_CPIA1=m
+CONFIG_USB_GSPCA_DTCS033=m
+CONFIG_USB_GSPCA_ETOMS=m
+CONFIG_USB_GSPCA_FINEPIX=m
+CONFIG_USB_GSPCA_JEILINJ=m
+CONFIG_USB_GSPCA_JL2005BCD=m
+CONFIG_USB_GSPCA_KINECT=m
+CONFIG_USB_GSPCA_KONICA=m
+CONFIG_USB_GSPCA_MARS=m
+CONFIG_USB_GSPCA_MR97310A=m
+CONFIG_USB_GSPCA_NW80X=m
+CONFIG_USB_GSPCA_OV519=m
+CONFIG_USB_GSPCA_OV534=m
+CONFIG_USB_GSPCA_OV534_9=m
+CONFIG_USB_GSPCA_PAC207=m
+CONFIG_USB_GSPCA_PAC7302=m
+CONFIG_USB_GSPCA_PAC7311=m
+CONFIG_USB_GSPCA_SE401=m
+CONFIG_USB_GSPCA_SN9C2028=m
+CONFIG_USB_GSPCA_SN9C20X=m
+CONFIG_USB_GSPCA_SONIXB=m
+CONFIG_USB_GSPCA_SONIXJ=m
+CONFIG_USB_GSPCA_SPCA500=m
+CONFIG_USB_GSPCA_SPCA501=m
+CONFIG_USB_GSPCA_SPCA505=m
+CONFIG_USB_GSPCA_SPCA506=m
+CONFIG_USB_GSPCA_SPCA508=m
+CONFIG_USB_GSPCA_SPCA561=m
+CONFIG_USB_GSPCA_SPCA1528=m
+CONFIG_USB_GSPCA_SQ905=m
+CONFIG_USB_GSPCA_SQ905C=m
+CONFIG_USB_GSPCA_SQ930X=m
+CONFIG_USB_GSPCA_STK014=m
+CONFIG_USB_GSPCA_STK1135=m
+CONFIG_USB_GSPCA_STV0680=m
+CONFIG_USB_GSPCA_SUNPLUS=m
+CONFIG_USB_GSPCA_T613=m
+CONFIG_USB_GSPCA_TOPRO=m
+CONFIG_USB_GSPCA_TOUPTEK=m
+CONFIG_USB_GSPCA_TV8532=m
+CONFIG_USB_GSPCA_VC032X=m
+CONFIG_USB_GSPCA_VICAM=m
+CONFIG_USB_GSPCA_XIRLINK_CIT=m
+CONFIG_USB_GSPCA_ZC3XX=m
+
+##
+## file: drivers/media/usb/gspca/gl860/Kconfig
+##
+CONFIG_USB_GL860=m
+
+##
+## file: drivers/media/usb/gspca/m5602/Kconfig
+##
+CONFIG_USB_M5602=m
+
+##
+## file: drivers/media/usb/gspca/stv06xx/Kconfig
+##
+CONFIG_USB_STV06XX=m
+
+##
+## file: drivers/media/usb/hackrf/Kconfig
+##
+CONFIG_USB_HACKRF=m
+
+##
+## file: drivers/media/usb/hdpvr/Kconfig
+##
+CONFIG_VIDEO_HDPVR=m
+
+##
+## file: drivers/media/usb/msi2500/Kconfig
+##
+CONFIG_USB_MSI2500=m
+
+##
+## file: drivers/media/usb/pvrusb2/Kconfig
+##
+CONFIG_VIDEO_PVRUSB2=m
+CONFIG_VIDEO_PVRUSB2_SYSFS=y
+CONFIG_VIDEO_PVRUSB2_DVB=y
+# CONFIG_VIDEO_PVRUSB2_DEBUGIFC is not set
+
+##
+## file: drivers/media/usb/pwc/Kconfig
+##
+CONFIG_USB_PWC=m
+# CONFIG_USB_PWC_DEBUG is not set
+CONFIG_USB_PWC_INPUT_EVDEV=y
+
+##
+## file: drivers/media/usb/s2255/Kconfig
+##
+CONFIG_USB_S2255=m
+
+##
+## file: drivers/media/usb/siano/Kconfig
+##
+CONFIG_SMS_USB_DRV=m
+
+##
+## file: drivers/media/usb/stk1160/Kconfig
+##
+CONFIG_VIDEO_STK1160_COMMON=m
+
+##
+## file: drivers/media/usb/stkwebcam/Kconfig
+##
+CONFIG_USB_STKWEBCAM=m
+
+##
+## file: drivers/media/usb/ttusb-budget/Kconfig
+##
+CONFIG_DVB_TTUSB_BUDGET=m
+
+##
+## file: drivers/media/usb/ttusb-dec/Kconfig
+##
+CONFIG_DVB_TTUSB_DEC=m
+
+##
+## file: drivers/media/usb/usbtv/Kconfig
+##
+CONFIG_VIDEO_USBTV=m
+
+##
+## file: drivers/media/usb/uvc/Kconfig
+##
+CONFIG_USB_VIDEO_CLASS=m
+CONFIG_USB_VIDEO_CLASS_INPUT_EVDEV=y
+
+##
+## file: drivers/media/usb/zr364xx/Kconfig
+##
+CONFIG_USB_ZR364XX=m
+
+##
+## file: drivers/media/v4l2-core/Kconfig
+##
+# CONFIG_VIDEO_V4L2_SUBDEV_API is not set
+# CONFIG_VIDEO_ADV_DEBUG is not set
+# CONFIG_VIDEO_FIXED_MINOR_RANGES is not set
+
+##
+## file: drivers/memory/Kconfig
+##
+CONFIG_MEMORY=y
+
+##
+## file: drivers/memstick/Kconfig
+##
+CONFIG_MEMSTICK=m
+# CONFIG_MEMSTICK_DEBUG is not set
+
+##
+## file: drivers/memstick/core/Kconfig
+##
+# CONFIG_MEMSTICK_UNSAFE_RESUME is not set
+CONFIG_MSPRO_BLOCK=m
+# CONFIG_MS_BLOCK is not set
+
+##
+## file: drivers/memstick/host/Kconfig
+##
+CONFIG_MEMSTICK_TIFM_MS=m
+CONFIG_MEMSTICK_JMICRON_38X=m
+CONFIG_MEMSTICK_R592=m
+CONFIG_MEMSTICK_REALTEK_PCI=m
+CONFIG_MEMSTICK_REALTEK_USB=m
+
+##
+## file: drivers/message/fusion/Kconfig
+##
+CONFIG_FUSION=y
+CONFIG_FUSION_SPI=m
+CONFIG_FUSION_FC=m
+CONFIG_FUSION_SAS=m
+CONFIG_FUSION_MAX_SGE=128
+CONFIG_FUSION_CTL=m
+CONFIG_FUSION_LAN=m
+# CONFIG_FUSION_LOGGING is not set
+
+##
+## file: drivers/mfd/Kconfig
+##
+# CONFIG_MFD_CS5535 is not set
+# CONFIG_MFD_AS3711 is not set
+# CONFIG_MFD_AS3722 is not set
+# CONFIG_PMIC_ADP5520 is not set
+# CONFIG_MFD_AAT2870_CORE is not set
+# CONFIG_MFD_ATMEL_FLEXCOM is not set
+# CONFIG_MFD_ATMEL_HLCDC is not set
+# CONFIG_MFD_BCM590XX is not set
+# CONFIG_MFD_BD9571MWV is not set
+# CONFIG_MFD_AXP20X_I2C is not set
+# CONFIG_MFD_MADERA is not set
+# CONFIG_PMIC_DA903X is not set
+# CONFIG_MFD_DA9052_SPI is not set
+# CONFIG_MFD_DA9052_I2C is not set
+# CONFIG_MFD_DA9055 is not set
+# CONFIG_MFD_DA9062 is not set
+# CONFIG_MFD_DA9063 is not set
+# CONFIG_MFD_DA9150 is not set
+# CONFIG_MFD_DLN2 is not set
+# CONFIG_MFD_EXYNOS_LPASS is not set
+# CONFIG_MFD_MC13XXX_SPI is not set
+# CONFIG_MFD_MC13XXX_I2C is not set
+# CONFIG_MFD_HI6421_PMIC is not set
+# CONFIG_HTC_PASIC3 is not set
+# CONFIG_HTC_I2CPLD is not set
+CONFIG_LPC_SCH=m
+# CONFIG_INTEL_SOC_PMIC is not set
+# CONFIG_MFD_INTEL_LPSS_ACPI is not set
+# CONFIG_MFD_INTEL_LPSS_PCI is not set
+# CONFIG_MFD_JANZ_CMODIO is not set
+# CONFIG_MFD_KEMPLD is not set
+# CONFIG_MFD_88PM800 is not set
+# CONFIG_MFD_88PM805 is not set
+# CONFIG_MFD_88PM860X is not set
+# CONFIG_MFD_MAX14577 is not set
+# CONFIG_MFD_MAX77686 is not set
+# CONFIG_MFD_MAX77693 is not set
+# CONFIG_MFD_MAX77843 is not set
+# CONFIG_MFD_MAX8907 is not set
+# CONFIG_MFD_MAX8925 is not set
+# CONFIG_MFD_MAX8997 is not set
+# CONFIG_MFD_MAX8998 is not set
+# CONFIG_MFD_MT6397 is not set
+# CONFIG_MFD_MENF21BMC is not set
+# CONFIG_EZX_PCAP is not set
+CONFIG_MFD_VIPERBOARD=m
+# CONFIG_MFD_RETU is not set
+# CONFIG_MFD_PCF50633 is not set
+CONFIG_PCF50633_ADC=m
+CONFIG_PCF50633_GPIO=m
+# CONFIG_UCB1400_CORE is not set
+# CONFIG_MFD_RDC321X is not set
+# CONFIG_MFD_RT5033 is not set
+# CONFIG_MFD_RC5T583 is not set
+# CONFIG_MFD_RK808 is not set
+# CONFIG_MFD_RN5T618 is not set
+# CONFIG_MFD_SEC_CORE is not set
+# CONFIG_MFD_SI476X_CORE is not set
+# CONFIG_MFD_SM501 is not set
+# CONFIG_MFD_SKY81452 is not set
+# CONFIG_ABX500_CORE is not set
+# CONFIG_MFD_STMPE is not set
+# CONFIG_MFD_SYSCON is not set
+# CONFIG_MFD_TI_AM335X_TSCADC is not set
+# CONFIG_MFD_LP3943 is not set
+# CONFIG_MFD_LP8788 is not set
+# CONFIG_MFD_TI_LMU is not set
+# CONFIG_MFD_PALMAS is not set
+# CONFIG_TPS6105X is not set
+# CONFIG_TPS65010 is not set
+# CONFIG_TPS6507X is not set
+# CONFIG_MFD_TPS65086 is not set
+# CONFIG_MFD_TPS65090 is not set
+# CONFIG_MFD_TPS65217 is not set
+# CONFIG_MFD_TI_LP873X is not set
+# CONFIG_MFD_TPS65218 is not set
+# CONFIG_MFD_TPS6586X is not set
+# CONFIG_MFD_TPS65910 is not set
+# CONFIG_MFD_TPS65912_I2C is not set
+# CONFIG_MFD_TPS65912_SPI is not set
+# CONFIG_TWL4030_CORE is not set
+# CONFIG_TWL6040_CORE is not set
+# CONFIG_MFD_WL1273_CORE is not set
+# CONFIG_MFD_LM3533 is not set
+# CONFIG_MFD_TIMBERDALE is not set
+# CONFIG_MFD_TC3589X is not set
+# CONFIG_MFD_VX855 is not set
+# CONFIG_MFD_ARIZONA_I2C is not set
+# CONFIG_MFD_ARIZONA_SPI is not set
+# CONFIG_MFD_WM8400 is not set
+# CONFIG_MFD_WM831X_I2C is not set
+# CONFIG_MFD_WM831X_SPI is not set
+# CONFIG_MFD_WM8350_I2C is not set
+# CONFIG_MFD_WM8994 is not set
+# CONFIG_RAVE_SP_CORE is not set
+
+##
+## file: drivers/misc/Kconfig
+##
+CONFIG_AD525X_DPOT=m
+CONFIG_AD525X_DPOT_I2C=m
+CONFIG_AD525X_DPOT_SPI=m
+# CONFIG_DUMMY_IRQ is not set
+CONFIG_TIFM_CORE=m
+CONFIG_TIFM_7XX1=m
+CONFIG_ICS932S401=m
+# CONFIG_ATMEL_SSC is not set
+CONFIG_ENCLOSURE_SERVICES=m
+CONFIG_SGI_XP=m
+CONFIG_CS5535_CLOCK_EVENT_SRC=m
+CONFIG_SGI_GRU=m
+# CONFIG_SGI_GRU_DEBUG is not set
+CONFIG_APDS9802ALS=m
+CONFIG_ISL29003=m
+CONFIG_ISL29020=m
+CONFIG_SENSORS_TSL2550=m
+CONFIG_SENSORS_BH1770=m
+CONFIG_SENSORS_APDS990X=m
+CONFIG_HMC6352=m
+CONFIG_DS1682=m
+# CONFIG_LATTICE_ECP3_CONFIG is not set
+# CONFIG_SRAM is not set
+# CONFIG_PCI_ENDPOINT_TEST is not set
+
+##
+## file: drivers/misc/altera-stapl/Kconfig
+##
+# CONFIG_ALTERA_STAPL is not set
+
+##
+## file: drivers/misc/c2port/Kconfig
+##
+CONFIG_C2PORT=m
+CONFIG_C2PORT_DURAMAR_2150=m
+
+##
+## file: drivers/misc/cardreader/Kconfig
+##
+CONFIG_MISC_RTSX_PCI=m
+CONFIG_MISC_RTSX_USB=m
+
+##
+## file: drivers/misc/cb710/Kconfig
+##
+CONFIG_CB710_CORE=m
+# CONFIG_CB710_DEBUG is not set
+
+##
+## file: drivers/misc/echo/Kconfig
+##
+# CONFIG_ECHO is not set
+
+##
+## file: drivers/misc/eeprom/Kconfig
+##
+CONFIG_EEPROM_AT24=m
+CONFIG_EEPROM_AT25=m
+CONFIG_EEPROM_LEGACY=m
+CONFIG_EEPROM_MAX6875=m
+CONFIG_EEPROM_93CX6=m
+# CONFIG_EEPROM_93XX46 is not set
+# CONFIG_EEPROM_IDT_89HPESX is not set
+CONFIG_EEPROM_EE1004=m
+
+##
+## file: drivers/misc/genwqe/Kconfig
+##
+# CONFIG_GENWQE is not set
+
+##
+## file: drivers/misc/lis3lv02d/Kconfig
+##
+CONFIG_SENSORS_LIS3_I2C=m
+
+##
+## file: drivers/misc/ti-st/Kconfig
+##
+# CONFIG_TI_ST is not set
+
+##
+## file: drivers/mmc/core/Kconfig
+##
+CONFIG_MMC_BLOCK_MINORS=256
+CONFIG_SDIO_UART=m
+# CONFIG_MMC_TEST is not set
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+CONFIG_MMC_SDHCI=m
+CONFIG_MMC_SDHCI_PCI=m
+CONFIG_MMC_RICOH_MMC=y
+# CONFIG_MMC_SDHCI_PLTFM is not set
+CONFIG_MMC_WBSD=m
+CONFIG_MMC_TIFM_SD=m
+# CONFIG_MMC_SPI is not set
+CONFIG_MMC_SDRICOH_CS=m
+CONFIG_MMC_CB710=m
+CONFIG_MMC_VIA_SDMMC=m
+CONFIG_MMC_VUB300=m
+CONFIG_MMC_USHC=m
+# CONFIG_MMC_USDHI6ROL0 is not set
+CONFIG_MMC_REALTEK_PCI=m
+CONFIG_MMC_REALTEK_USB=m
+CONFIG_MMC_TOSHIBA_PCI=m
+# CONFIG_MMC_MTK is not set
+
+##
+## file: drivers/most/Kconfig
+##
+# CONFIG_MOST is not set
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_MTD=m
+# CONFIG_MTD_TESTS is not set
+CONFIG_MTD_BLOCK=m
+CONFIG_MTD_BLOCK_RO=m
+CONFIG_RFD_FTL=m
+CONFIG_SSFDC=m
+# CONFIG_SM_FTL is not set
+CONFIG_MTD_OOPS=m
+CONFIG_MTD_SWAP=m
+# CONFIG_MTD_PARTITIONED_MASTER is not set
+
+##
+## file: drivers/mtd/devices/Kconfig
+##
+CONFIG_MTD_DATAFLASH=m
+# CONFIG_MTD_DATAFLASH_WRITE_VERIFY is not set
+# CONFIG_MTD_DATAFLASH_OTP is not set
+# CONFIG_MTD_MCHP23K256 is not set
+CONFIG_MTD_SST25L=m
+# CONFIG_MTD_DOCG3 is not set
+
+##
+## file: drivers/mtd/lpddr/Kconfig
+##
+CONFIG_MTD_LPDDR=m
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+# CONFIG_MTD_PHYSMAP_OF is not set
+# CONFIG_MTD_PHYSMAP_GPIO_ADDR is not set
+# CONFIG_MTD_ESB2ROM is not set
+# CONFIG_MTD_CK804XROM is not set
+CONFIG_MTD_PCMCIA=m
+# CONFIG_MTD_PCMCIA_ANONYMOUS is not set
+CONFIG_MTD_INTEL_VR_NOR=m
+CONFIG_MTD_PLATRAM=m
+
+##
+## file: drivers/mtd/nand/Kconfig
+##
+# CONFIG_MTD_NAND_ECC_SW_HAMMING_SMC is not set
+CONFIG_MTD_NAND_ECC_SW_BCH=y
+
+##
+## file: drivers/mtd/nand/onenand/Kconfig
+##
+CONFIG_MTD_ONENAND=m
+CONFIG_MTD_ONENAND_VERIFY_WRITE=y
+# CONFIG_MTD_ONENAND_GENERIC is not set
+# CONFIG_MTD_ONENAND_OTP is not set
+CONFIG_MTD_ONENAND_2X_PROGRAM=y
+
+##
+## file: drivers/mtd/nand/raw/Kconfig
+##
+# CONFIG_MTD_NAND_DENALI_PCI is not set
+# CONFIG_MTD_NAND_DENALI_DT is not set
+CONFIG_MTD_NAND_CAFE=m
+CONFIG_MTD_NAND_CS553X=m
+# CONFIG_MTD_NAND_HISI504 is not set
+# CONFIG_MTD_NAND_MTK is not set
+# CONFIG_MTD_NAND_GPIO is not set
+# CONFIG_MTD_NAND_PLATFORM is not set
+CONFIG_MTD_NAND_NANDSIM=m
+CONFIG_MTD_NAND_RICOH=m
+
+##
+## file: drivers/mtd/nand/spi/Kconfig
+##
+# CONFIG_MTD_SPI_NAND is not set
+
+##
+## file: drivers/mtd/parsers/Kconfig
+##
+CONFIG_MTD_AR7_PARTS=m
+CONFIG_MTD_OF_PARTS=m
+
+##
+## file: drivers/mtd/spi-nor/Kconfig
+##
+CONFIG_MTD_SPI_NOR=m
+CONFIG_MTD_SPI_NOR_USE_4K_SECTORS=y
+
+##
+## file: drivers/mtd/ubi/Kconfig
+##
+CONFIG_MTD_UBI=m
+CONFIG_MTD_UBI_WL_THRESHOLD=4096
+CONFIG_MTD_UBI_BEB_LIMIT=20
+# CONFIG_MTD_UBI_FASTMAP is not set
+# CONFIG_MTD_UBI_GLUEBI is not set
+CONFIG_MTD_UBI_BLOCK=y
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_NETDEVICES=y
+CONFIG_NET_CORE=y
+CONFIG_BONDING=m
+CONFIG_DUMMY=m
+CONFIG_WIREGUARD=m
+# CONFIG_WIREGUARD_DEBUG is not set
+CONFIG_EQUALIZER=m
+CONFIG_IFB=m
+CONFIG_MACVLAN=m
+CONFIG_MACVTAP=m
+CONFIG_IPVLAN=m
+CONFIG_IPVTAP=m
+CONFIG_VXLAN=m
+CONFIG_GENEVE=m
+CONFIG_GTP=m
+CONFIG_MACSEC=m
+CONFIG_NETCONSOLE=m
+CONFIG_NETCONSOLE_DYNAMIC=y
+CONFIG_TUN=m
+# CONFIG_TUN_VNET_CROSS_LE is not set
+CONFIG_VETH=m
+CONFIG_VIRTIO_NET=m
+CONFIG_NLMON=m
+CONFIG_NET_VRF=m
+CONFIG_VSOCKMON=m
+CONFIG_MHI_NET=m
+CONFIG_XEN_NETDEV_FRONTEND=m
+CONFIG_XEN_NETDEV_BACKEND=m
+# CONFIG_VMXNET3 is not set
+# CONFIG_FUJITSU_ES is not set
+# CONFIG_NETDEVSIM is not set
+CONFIG_NET_FAILOVER=m
+
+##
+## file: drivers/net/appletalk/Kconfig
+##
+CONFIG_ATALK=m
+CONFIG_DEV_APPLETALK=y
+CONFIG_LTPC=m
+CONFIG_IPDDP=m
+CONFIG_IPDDP_ENCAP=y
+
+##
+## file: drivers/net/can/Kconfig
+##
+CONFIG_CAN_VCAN=m
+CONFIG_CAN_VXCAN=m
+CONFIG_CAN_SLCAN=m
+CONFIG_CAN_DEV=m
+CONFIG_CAN_CALC_BITTIMING=y
+# CONFIG_CAN_LEDS is not set
+# CONFIG_CAN_GRCAN is not set
+# CONFIG_CAN_DEBUG_DEVICES is not set
+
+##
+## file: drivers/net/can/c_can/Kconfig
+##
+# CONFIG_CAN_C_CAN is not set
+
+##
+## file: drivers/net/can/cc770/Kconfig
+##
+# CONFIG_CAN_CC770 is not set
+
+##
+## file: drivers/net/can/ifi_canfd/Kconfig
+##
+# CONFIG_CAN_IFI_CANFD is not set
+
+##
+## file: drivers/net/can/m_can/Kconfig
+##
+# CONFIG_CAN_M_CAN is not set
+
+##
+## file: drivers/net/can/peak_canfd/Kconfig
+##
+CONFIG_CAN_PEAK_PCIEFD=m
+
+##
+## file: drivers/net/can/sja1000/Kconfig
+##
+CONFIG_CAN_SJA1000=m
+CONFIG_CAN_EMS_PCI=m
+CONFIG_CAN_EMS_PCMCIA=m
+CONFIG_CAN_KVASER_PCI=m
+CONFIG_CAN_PEAK_PCI=m
+CONFIG_CAN_PEAK_PCIEC=y
+CONFIG_CAN_PEAK_PCMCIA=m
+CONFIG_CAN_PLX_PCI=m
+CONFIG_CAN_SJA1000_ISA=m
+# CONFIG_CAN_SJA1000_PLATFORM is not set
+CONFIG_CAN_TSCAN1=m
+
+##
+## file: drivers/net/can/softing/Kconfig
+##
+CONFIG_CAN_SOFTING=m
+CONFIG_CAN_SOFTING_CS=m
+
+##
+## file: drivers/net/can/spi/Kconfig
+##
+# CONFIG_CAN_HI311X is not set
+# CONFIG_CAN_MCP251X is not set
+
+##
+## file: drivers/net/can/usb/Kconfig
+##
+CONFIG_CAN_8DEV_USB=m
+CONFIG_CAN_EMS_USB=m
+CONFIG_CAN_ESD_USB2=m
+CONFIG_CAN_GS_USB=m
+CONFIG_CAN_KVASER_USB=m
+CONFIG_CAN_MCBA_USB=m
+CONFIG_CAN_PEAK_USB=m
+CONFIG_CAN_UCAN=m
+
+##
+## file: drivers/net/dsa/Kconfig
+##
+# CONFIG_NET_DSA_BCM_SF2 is not set
+# CONFIG_NET_DSA_MV88E6060 is not set
+
+##
+## file: drivers/net/dsa/mv88e6xxx/Kconfig
+##
+# CONFIG_NET_DSA_MV88E6XXX is not set
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+CONFIG_ETHERNET=y
+# CONFIG_DNET is not set
+CONFIG_JME=m
+# CONFIG_ETHOC is not set
+
+##
+## file: drivers/net/ethernet/agere/Kconfig
+##
+CONFIG_NET_VENDOR_AGERE=y
+CONFIG_ET131X=m
+
+##
+## file: drivers/net/ethernet/alacritech/Kconfig
+##
+CONFIG_NET_VENDOR_ALACRITECH=y
+# CONFIG_SLICOSS is not set
+
+##
+## file: drivers/net/ethernet/alteon/Kconfig
+##
+CONFIG_NET_VENDOR_ALTEON=y
+CONFIG_ACENIC=m
+# CONFIG_ACENIC_OMIT_TIGON_I is not set
+
+##
+## file: drivers/net/ethernet/amazon/Kconfig
+##
+CONFIG_NET_VENDOR_AMAZON=y
+CONFIG_ENA_ETHERNET=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_NET_VENDOR_AMD=y
+CONFIG_PCNET32=m
+CONFIG_AMD_XGBE_DCB=y
+
+##
+## file: drivers/net/ethernet/apm/xgene/Kconfig
+##
+# CONFIG_NET_XGENE is not set
+
+##
+## file: drivers/net/ethernet/aquantia/Kconfig
+##
+CONFIG_NET_VENDOR_AQUANTIA=y
+CONFIG_AQTION=m
+
+##
+## file: drivers/net/ethernet/arc/Kconfig
+##
+# CONFIG_NET_VENDOR_ARC is not set
+
+##
+## file: drivers/net/ethernet/atheros/Kconfig
+##
+CONFIG_NET_VENDOR_ATHEROS=y
+CONFIG_ATL2=m
+CONFIG_ATL1=m
+CONFIG_ATL1E=m
+CONFIG_ATL1C=m
+CONFIG_ALX=m
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+CONFIG_NET_VENDOR_BROADCOM=y
+# CONFIG_BCMGENET is not set
+CONFIG_BNX2=m
+CONFIG_CNIC=m
+CONFIG_TIGON3=m
+CONFIG_TIGON3_HWMON=y
+CONFIG_BNX2X=m
+CONFIG_BNX2X_SRIOV=y
+# CONFIG_SYSTEMPORT is not set
+CONFIG_BNXT=m
+CONFIG_BNXT_SRIOV=y
+CONFIG_BNXT_FLOWER_OFFLOAD=y
+CONFIG_BNXT_DCB=y
+CONFIG_BNXT_HWMON=y
+
+##
+## file: drivers/net/ethernet/brocade/Kconfig
+##
+CONFIG_NET_VENDOR_BROCADE=y
+
+##
+## file: drivers/net/ethernet/brocade/bna/Kconfig
+##
+CONFIG_BNA=m
+
+##
+## file: drivers/net/ethernet/cadence/Kconfig
+##
+CONFIG_NET_VENDOR_CADENCE=y
+# CONFIG_MACB is not set
+
+##
+## file: drivers/net/ethernet/calxeda/Kconfig
+##
+# CONFIG_NET_CALXEDA_XGMAC is not set
+
+##
+## file: drivers/net/ethernet/cavium/Kconfig
+##
+CONFIG_NET_VENDOR_CAVIUM=y
+# CONFIG_THUNDER_NIC_PF is not set
+# CONFIG_THUNDER_NIC_VF is not set
+# CONFIG_THUNDER_NIC_BGX is not set
+# CONFIG_THUNDER_NIC_RGX is not set
+CONFIG_CAVIUM_PTP=m
+CONFIG_LIQUIDIO=m
+CONFIG_LIQUIDIO_VF=m
+
+##
+## file: drivers/net/ethernet/chelsio/Kconfig
+##
+CONFIG_NET_VENDOR_CHELSIO=y
+CONFIG_CHELSIO_T1=m
+CONFIG_CHELSIO_T1_1G=y
+CONFIG_CHELSIO_T3=m
+CONFIG_CHELSIO_T4=m
+CONFIG_CHELSIO_T4_DCB=y
+CONFIG_CHELSIO_T4_FCOE=y
+CONFIG_CHELSIO_T4VF=m
+
+##
+## file: drivers/net/ethernet/cirrus/Kconfig
+##
+# CONFIG_CS89x0_PLATFORM is not set
+
+##
+## file: drivers/net/ethernet/cisco/Kconfig
+##
+CONFIG_NET_VENDOR_CISCO=y
+
+##
+## file: drivers/net/ethernet/cisco/enic/Kconfig
+##
+CONFIG_ENIC=m
+
+##
+## file: drivers/net/ethernet/cortina/Kconfig
+##
+CONFIG_NET_VENDOR_CORTINA=y
+
+##
+## file: drivers/net/ethernet/dec/Kconfig
+##
+CONFIG_NET_VENDOR_DEC=y
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_DE2104X_DSL=0
+CONFIG_TULIP_NAPI=y
+CONFIG_TULIP_NAPI_HW_MITIGATION=y
+# CONFIG_DE4X5 is not set
+CONFIG_ULI526X=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_NET_VENDOR_DLINK=y
+CONFIG_DL2K=m
+
+##
+## file: drivers/net/ethernet/emulex/Kconfig
+##
+CONFIG_NET_VENDOR_EMULEX=y
+
+##
+## file: drivers/net/ethernet/emulex/benet/Kconfig
+##
+CONFIG_BE2NET=m
+CONFIG_BE2NET_HWMON=y
+CONFIG_BE2NET_BE2=y
+CONFIG_BE2NET_BE3=y
+CONFIG_BE2NET_LANCER=y
+CONFIG_BE2NET_SKYHAWK=y
+
+##
+## file: drivers/net/ethernet/ezchip/Kconfig
+##
+CONFIG_NET_VENDOR_EZCHIP=y
+# CONFIG_EZCHIP_NPS_MANAGEMENT_ENET is not set
+
+##
+## file: drivers/net/ethernet/huawei/Kconfig
+##
+CONFIG_NET_VENDOR_HUAWEI=y
+
+##
+## file: drivers/net/ethernet/huawei/hinic/Kconfig
+##
+CONFIG_HINIC=m
+
+##
+## file: drivers/net/ethernet/i825xx/Kconfig
+##
+CONFIG_NET_VENDOR_I825XX=y
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_NET_VENDOR_INTEL=y
+CONFIG_E1000=m
+CONFIG_E1000E=m
+CONFIG_E1000E_HWTS=y
+CONFIG_IGB=m
+CONFIG_IGB_HWMON=y
+CONFIG_IGB_DCA=y
+CONFIG_IGBVF=m
+CONFIG_IXGB=m
+CONFIG_IXGBE=m
+CONFIG_IXGBE_HWMON=y
+CONFIG_IXGBE_DCA=y
+CONFIG_IXGBE_DCB=y
+CONFIG_IXGBEVF=m
+CONFIG_I40E=m
+CONFIG_I40E_DCB=y
+CONFIG_I40EVF=m
+CONFIG_ICE=m
+# CONFIG_FM10K is not set
+CONFIG_IGC=m
+
+##
+## file: drivers/net/ethernet/marvell/Kconfig
+##
+CONFIG_NET_VENDOR_MARVELL=y
+# CONFIG_MVMDIO is not set
+CONFIG_SKGE=m
+# CONFIG_SKGE_DEBUG is not set
+CONFIG_SKGE_GENESIS=y
+CONFIG_SKY2=m
+# CONFIG_SKY2_DEBUG is not set
+
+##
+## file: drivers/net/ethernet/mellanox/Kconfig
+##
+CONFIG_NET_VENDOR_MELLANOX=y
+
+##
+## file: drivers/net/ethernet/mellanox/mlx4/Kconfig
+##
+CONFIG_MLX4_EN=m
+CONFIG_MLX4_EN_DCB=y
+CONFIG_MLX4_DEBUG=y
+CONFIG_MLX4_CORE_GEN2=y
+
+##
+## file: drivers/net/ethernet/mellanox/mlx5/core/Kconfig
+##
+CONFIG_MLX5_CORE=m
+CONFIG_MLX5_FPGA=y
+CONFIG_MLX5_CORE_EN=y
+CONFIG_MLX5_EN_ARFS=y
+CONFIG_MLX5_EN_RXNFC=y
+CONFIG_MLX5_MPFS=y
+CONFIG_MLX5_ESWITCH=y
+CONFIG_MLX5_CORE_EN_DCB=y
+CONFIG_MLX5_CORE_IPOIB=y
+CONFIG_MLX5_SW_STEERING=y
+
+##
+## file: drivers/net/ethernet/mellanox/mlxfw/Kconfig
+##
+CONFIG_MLXFW=m
+
+##
+## file: drivers/net/ethernet/mellanox/mlxsw/Kconfig
+##
+# CONFIG_MLXSW_CORE is not set
+
+##
+## file: drivers/net/ethernet/micrel/Kconfig
+##
+CONFIG_NET_VENDOR_MICREL=y
+# CONFIG_KS8842 is not set
+# CONFIG_KS8851 is not set
+# CONFIG_KS8851_MLL is not set
+CONFIG_KSZ884X_PCI=m
+
+##
+## file: drivers/net/ethernet/microchip/Kconfig
+##
+CONFIG_NET_VENDOR_MICROCHIP=y
+# CONFIG_ENC28J60 is not set
+# CONFIG_ENC28J60_WRITEVERIFY is not set
+# CONFIG_ENCX24J600 is not set
+CONFIG_LAN743X=m
+
+##
+## file: drivers/net/ethernet/mscc/Kconfig
+##
+CONFIG_NET_VENDOR_MICROSEMI=y
+# CONFIG_MSCC_OCELOT_SWITCH is not set
+
+##
+## file: drivers/net/ethernet/myricom/Kconfig
+##
+CONFIG_NET_VENDOR_MYRI=y
+CONFIG_MYRI10GE=m
+CONFIG_MYRI10GE_DCA=y
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NET_VENDOR_NATSEMI=y
+CONFIG_NS83820=m
+
+##
+## file: drivers/net/ethernet/neterion/Kconfig
+##
+CONFIG_NET_VENDOR_NETERION=y
+CONFIG_S2IO=m
+CONFIG_VXGE=m
+# CONFIG_VXGE_DEBUG_TRACE_ALL is not set
+
+##
+## file: drivers/net/ethernet/netronome/Kconfig
+##
+CONFIG_NET_VENDOR_NETRONOME=y
+CONFIG_NFP=m
+CONFIG_NFP_APP_FLOWER=y
+CONFIG_NFP_APP_ABM_NIC=y
+# CONFIG_NFP_DEBUG is not set
+
+##
+## file: drivers/net/ethernet/ni/Kconfig
+##
+CONFIG_NET_VENDOR_NI=y
+
+##
+## file: drivers/net/ethernet/oki-semi/Kconfig
+##
+CONFIG_NET_VENDOR_OKI=y
+
+##
+## file: drivers/net/ethernet/packetengines/Kconfig
+##
+CONFIG_NET_VENDOR_PACKET_ENGINES=y
+CONFIG_HAMACHI=m
+CONFIG_YELLOWFIN=m
+
+##
+## file: drivers/net/ethernet/qlogic/Kconfig
+##
+CONFIG_NET_VENDOR_QLOGIC=y
+CONFIG_QLA3XXX=m
+CONFIG_QLCNIC=m
+CONFIG_QLCNIC_SRIOV=y
+CONFIG_QLCNIC_DCB=y
+CONFIG_QLCNIC_HWMON=y
+CONFIG_NETXEN_NIC=m
+CONFIG_QED=m
+CONFIG_QED_SRIOV=y
+CONFIG_QEDE=m
+
+##
+## file: drivers/net/ethernet/qualcomm/Kconfig
+##
+CONFIG_NET_VENDOR_QUALCOMM=y
+# CONFIG_QCA7000_SPI is not set
+# CONFIG_QCOM_EMAC is not set
+
+##
+## file: drivers/net/ethernet/qualcomm/rmnet/Kconfig
+##
+# CONFIG_RMNET is not set
+
+##
+## file: drivers/net/ethernet/rdc/Kconfig
+##
+CONFIG_NET_VENDOR_RDC=y
+CONFIG_R6040=m
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_NET_VENDOR_REALTEK=y
+# CONFIG_8139TOO_PIO is not set
+CONFIG_8139TOO_TUNE_TWISTER=y
+CONFIG_8139TOO_8129=y
+# CONFIG_8139_OLD_RX_RESET is not set
+CONFIG_R8169=m
+
+##
+## file: drivers/net/ethernet/renesas/Kconfig
+##
+CONFIG_NET_VENDOR_RENESAS=y
+# CONFIG_SH_ETH is not set
+
+##
+## file: drivers/net/ethernet/rocker/Kconfig
+##
+CONFIG_NET_VENDOR_ROCKER=y
+# CONFIG_ROCKER is not set
+
+##
+## file: drivers/net/ethernet/samsung/Kconfig
+##
+CONFIG_NET_VENDOR_SAMSUNG=y
+# CONFIG_SXGBE_ETH is not set
+
+##
+## file: drivers/net/ethernet/seeq/Kconfig
+##
+# CONFIG_NET_VENDOR_SEEQ is not set
+
+##
+## file: drivers/net/ethernet/sfc/Kconfig
+##
+CONFIG_NET_VENDOR_SOLARFLARE=y
+CONFIG_SFC=m
+CONFIG_SFC_MTD=y
+CONFIG_SFC_MCDI_MON=y
+CONFIG_SFC_SRIOV=y
+CONFIG_SFC_MCDI_LOGGING=y
+
+##
+## file: drivers/net/ethernet/sfc/falcon/Kconfig
+##
+CONFIG_SFC_FALCON=m
+CONFIG_SFC_FALCON_MTD=y
+
+##
+## file: drivers/net/ethernet/silan/Kconfig
+##
+CONFIG_NET_VENDOR_SILAN=y
+CONFIG_SC92031=m
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+CONFIG_NET_VENDOR_SIS=y
+CONFIG_SIS190=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_NET_VENDOR_SMSC=y
+# CONFIG_SMSC911X is not set
+CONFIG_SMSC9420=m
+
+##
+## file: drivers/net/ethernet/socionext/Kconfig
+##
+CONFIG_NET_VENDOR_SOCIONEXT=y
+
+##
+## file: drivers/net/ethernet/stmicro/Kconfig
+##
+CONFIG_NET_VENDOR_STMICRO=y
+
+##
+## file: drivers/net/ethernet/stmicro/stmmac/Kconfig
+##
+# CONFIG_STMMAC_ETH is not set
+
+##
+## file: drivers/net/ethernet/sun/Kconfig
+##
+CONFIG_NET_VENDOR_SUN=y
+CONFIG_CASSINI=m
+CONFIG_NIU=m
+
+##
+## file: drivers/net/ethernet/synopsys/Kconfig
+##
+CONFIG_NET_VENDOR_SYNOPSYS=y
+# CONFIG_DWC_XLGMAC is not set
+
+##
+## file: drivers/net/ethernet/tehuti/Kconfig
+##
+CONFIG_NET_VENDOR_TEHUTI=y
+CONFIG_TEHUTI=m
+
+##
+## file: drivers/net/ethernet/ti/Kconfig
+##
+CONFIG_NET_VENDOR_TI=y
+CONFIG_TLAN=m
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+CONFIG_NET_VENDOR_VIA=y
+CONFIG_VIA_VELOCITY=m
+
+##
+## file: drivers/net/ethernet/wiznet/Kconfig
+##
+CONFIG_NET_VENDOR_WIZNET=y
+# CONFIG_WIZNET_W5100 is not set
+# CONFIG_WIZNET_W5300 is not set
+
+##
+## file: drivers/net/ethernet/xscale/Kconfig
+##
+CONFIG_PTP_1588_CLOCK_IXP46X=y
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+CONFIG_DEFXX=m
+
+##
+## file: drivers/net/hamradio/Kconfig
+##
+CONFIG_MKISS=m
+CONFIG_6PACK=m
+CONFIG_BPQETHER=m
+CONFIG_DMASCC=m
+CONFIG_SCC=m
+# CONFIG_SCC_DELAY is not set
+# CONFIG_SCC_TRXECHO is not set
+CONFIG_BAYCOM_SER_FDX=m
+CONFIG_BAYCOM_SER_HDX=m
+CONFIG_BAYCOM_PAR=m
+CONFIG_BAYCOM_EPP=m
+CONFIG_YAM=m
+
+##
+## file: drivers/net/ieee802154/Kconfig
+##
+CONFIG_IEEE802154_DRIVERS=m
+CONFIG_IEEE802154_FAKELB=m
+CONFIG_IEEE802154_AT86RF230=m
+# CONFIG_IEEE802154_AT86RF230_DEBUGFS is not set
+CONFIG_IEEE802154_MRF24J40=m
+CONFIG_IEEE802154_CC2520=m
+CONFIG_IEEE802154_ATUSB=m
+CONFIG_IEEE802154_ADF7242=m
+# CONFIG_IEEE802154_CA8210 is not set
+# CONFIG_IEEE802154_MCR20A is not set
+CONFIG_IEEE802154_HWSIM=m
+
+##
+## file: drivers/net/mdio/Kconfig
+##
+CONFIG_MDIO_DEVICE=m
+# CONFIG_MDIO_BITBANG is not set
+# CONFIG_MDIO_BCM_UNIMAC is not set
+# CONFIG_MDIO_GPIO is not set
+# CONFIG_MDIO_MSCC_MIIM is not set
+# CONFIG_MDIO_OCTEON is not set
+# CONFIG_MDIO_THUNDER is not set
+# CONFIG_MDIO_BUS_MUX_GPIO is not set
+# CONFIG_MDIO_BUS_MUX_MMIOREG is not set
+
+##
+## file: drivers/net/phy/Kconfig
+##
+CONFIG_PHYLIB=m
+CONFIG_LED_TRIGGER_PHY=y
+#. Must only be enabled for specific flavours
+# CONFIG_FIXED_PHY is not set
+CONFIG_SFP=m
+CONFIG_AMD_PHY=m
+CONFIG_AQUANTIA_PHY=m
+# CONFIG_AX88796B_PHY is not set
+CONFIG_BROADCOM_PHY=m
+# CONFIG_BCM63XX_PHY is not set
+# CONFIG_BCM7XXX_PHY is not set
+CONFIG_BCM87XX_PHY=m
+CONFIG_CICADA_PHY=m
+CONFIG_CORTINA_PHY=m
+CONFIG_DAVICOM_PHY=m
+CONFIG_ICPLUS_PHY=m
+CONFIG_LXT_PHY=m
+# CONFIG_INTEL_XWAY_PHY is not set
+CONFIG_LSI_ET1011C_PHY=m
+CONFIG_MARVELL_PHY=m
+CONFIG_MARVELL_10G_PHY=m
+CONFIG_MICREL_PHY=m
+CONFIG_MICROCHIP_PHY=m
+CONFIG_MICROCHIP_T1_PHY=m
+CONFIG_MICROSEMI_PHY=m
+CONFIG_NATIONAL_PHY=m
+CONFIG_AT803X_PHY=m
+CONFIG_QSEMI_PHY=m
+CONFIG_REALTEK_PHY=m
+CONFIG_RENESAS_PHY=m
+CONFIG_ROCKCHIP_PHY=m
+CONFIG_SMSC_PHY=m
+CONFIG_STE10XP=m
+CONFIG_TERANETICS_PHY=m
+CONFIG_DP83822_PHY=m
+CONFIG_DP83TC811_PHY=m
+CONFIG_DP83848_PHY=m
+CONFIG_DP83867_PHY=m
+CONFIG_VITESSE_PHY=m
+# CONFIG_XILINX_GMII2RGMII is not set
+# CONFIG_MICREL_KS8995MA is not set
+
+##
+## file: drivers/net/ppp/Kconfig
+##
+CONFIG_PPP=m
+CONFIG_PPP_BSDCOMP=m
+CONFIG_PPP_DEFLATE=m
+CONFIG_PPP_FILTER=y
+CONFIG_PPP_MPPE=m
+CONFIG_PPP_MULTILINK=y
+CONFIG_PPPOATM=m
+CONFIG_PPPOE=m
+CONFIG_PPTP=m
+CONFIG_PPPOL2TP=m
+CONFIG_PPP_ASYNC=m
+CONFIG_PPP_SYNC_TTY=m
+
+##
+## file: drivers/net/slip/Kconfig
+##
+CONFIG_SLIP=m
+CONFIG_SLIP_COMPRESSED=y
+CONFIG_SLIP_SMART=y
+CONFIG_SLIP_MODE_SLIP6=y
+
+##
+## file: drivers/net/team/Kconfig
+##
+CONFIG_NET_TEAM=m
+CONFIG_NET_TEAM_MODE_BROADCAST=m
+CONFIG_NET_TEAM_MODE_ROUNDROBIN=m
+CONFIG_NET_TEAM_MODE_RANDOM=m
+CONFIG_NET_TEAM_MODE_ACTIVEBACKUP=m
+CONFIG_NET_TEAM_MODE_LOADBALANCE=m
+
+##
+## file: drivers/net/usb/Kconfig
+##
+CONFIG_USB_CATC=m
+CONFIG_USB_KAWETH=m
+CONFIG_USB_PEGASUS=m
+CONFIG_USB_RTL8150=m
+CONFIG_USB_RTL8152=m
+CONFIG_USB_LAN78XX=m
+CONFIG_USB_USBNET=m
+CONFIG_USB_NET_AX8817X=m
+CONFIG_USB_NET_AX88179_178A=m
+CONFIG_USB_NET_CDCETHER=m
+CONFIG_USB_NET_CDC_EEM=m
+CONFIG_USB_NET_CDC_NCM=m
+CONFIG_USB_NET_HUAWEI_CDC_NCM=m
+CONFIG_USB_NET_CDC_MBIM=m
+CONFIG_USB_NET_DM9601=m
+CONFIG_USB_NET_SR9700=m
+CONFIG_USB_NET_SR9800=m
+CONFIG_USB_NET_SMSC75XX=m
+CONFIG_USB_NET_SMSC95XX=m
+CONFIG_USB_NET_GL620A=m
+CONFIG_USB_NET_NET1080=m
+CONFIG_USB_NET_PLUSB=m
+CONFIG_USB_NET_MCS7830=m
+CONFIG_USB_NET_RNDIS_HOST=m
+CONFIG_USB_NET_CDC_SUBSET=m
+CONFIG_USB_ALI_M5632=y
+CONFIG_USB_AN2720=y
+CONFIG_USB_BELKIN=y
+CONFIG_USB_ARMLINUX=y
+CONFIG_USB_EPSON2888=y
+CONFIG_USB_KC2190=y
+CONFIG_USB_NET_ZAURUS=m
+CONFIG_USB_NET_CX82310_ETH=m
+CONFIG_USB_NET_KALMIA=m
+CONFIG_USB_NET_QMI_WWAN=m
+CONFIG_USB_HSO=m
+CONFIG_USB_NET_INT51X1=m
+CONFIG_USB_CDC_PHONET=m
+CONFIG_USB_IPHETH=m
+CONFIG_USB_SIERRA_NET=m
+CONFIG_USB_VL600=m
+CONFIG_USB_NET_CH9200=m
+CONFIG_USB_NET_AQC111=m
+
+##
+## file: drivers/net/wan/Kconfig
+##
+CONFIG_HDLC=m
+CONFIG_HDLC_RAW=m
+CONFIG_HDLC_RAW_ETH=m
+CONFIG_HDLC_CISCO=m
+CONFIG_HDLC_FR=m
+CONFIG_HDLC_PPP=m
+# CONFIG_HDLC_X25 is not set
+# CONFIG_PC300TOO is not set
+
+##
+## file: drivers/net/wireless/Kconfig
+##
+CONFIG_WLAN=y
+CONFIG_MAC80211_HWSIM=m
+CONFIG_USB_NET_RNDIS_WLAN=m
+
+##
+## file: drivers/net/wireless/admtek/Kconfig
+##
+CONFIG_WLAN_VENDOR_ADMTEK=y
+CONFIG_ADM8211=m
+
+##
+## file: drivers/net/wireless/ath/Kconfig
+##
+CONFIG_WLAN_VENDOR_ATH=y
+# CONFIG_ATH_DEBUG is not set
+
+##
+## file: drivers/net/wireless/ath/ar5523/Kconfig
+##
+CONFIG_AR5523=m
+
+##
+## file: drivers/net/wireless/ath/ath10k/Kconfig
+##
+CONFIG_ATH10K=m
+CONFIG_ATH10K_PCI=m
+# CONFIG_ATH10K_SDIO is not set
+CONFIG_ATH10K_USB=m
+# CONFIG_ATH10K_DEBUG is not set
+# CONFIG_ATH10K_DEBUGFS is not set
+# CONFIG_ATH10K_TRACING is not set
+
+##
+## file: drivers/net/wireless/ath/ath11k/Kconfig
+##
+CONFIG_ATH11K=m
+CONFIG_ATH11K_AHB=m
+CONFIG_ATH11K_PCI=m
+# CONFIG_ATH11K_DEBUG is not set
+# CONFIG_ATH11K_DEBUGFS is not set
+# CONFIG_ATH11K_TRACING is not set
+
+##
+## file: drivers/net/wireless/ath/ath5k/Kconfig
+##
+CONFIG_ATH5K=m
+# CONFIG_ATH5K_DEBUG is not set
+# CONFIG_ATH5K_TRACER is not set
+
+##
+## file: drivers/net/wireless/ath/ath6kl/Kconfig
+##
+CONFIG_ATH6KL=m
+CONFIG_ATH6KL_SDIO=m
+CONFIG_ATH6KL_USB=m
+# CONFIG_ATH6KL_DEBUG is not set
+# CONFIG_ATH6KL_TRACING is not set
+
+##
+## file: drivers/net/wireless/ath/ath9k/Kconfig
+##
+CONFIG_ATH9K_BTCOEX_SUPPORT=y
+CONFIG_ATH9K=m
+CONFIG_ATH9K_PCI=y
+# CONFIG_ATH9K_AHB is not set
+# CONFIG_ATH9K_DEBUGFS is not set
+# CONFIG_ATH9K_DYNACK is not set
+# CONFIG_ATH9K_WOW is not set
+CONFIG_ATH9K_RFKILL=y
+CONFIG_ATH9K_CHANNEL_CONTEXT=y
+CONFIG_ATH9K_PCOEM=y
+CONFIG_ATH9K_HTC=m
+# CONFIG_ATH9K_HTC_DEBUGFS is not set
+# CONFIG_ATH9K_HWRNG is not set
+
+##
+## file: drivers/net/wireless/ath/carl9170/Kconfig
+##
+CONFIG_CARL9170=m
+CONFIG_CARL9170_LEDS=y
+# CONFIG_CARL9170_DEBUGFS is not set
+# CONFIG_CARL9170_HWRNG is not set
+
+##
+## file: drivers/net/wireless/ath/wcn36xx/Kconfig
+##
+# CONFIG_WCN36XX is not set
+
+##
+## file: drivers/net/wireless/ath/wil6210/Kconfig
+##
+CONFIG_WIL6210=m
+CONFIG_WIL6210_ISR_COR=y
+CONFIG_WIL6210_TRACING=y
+CONFIG_WIL6210_DEBUGFS=y
+
+##
+## file: drivers/net/wireless/atmel/Kconfig
+##
+CONFIG_WLAN_VENDOR_ATMEL=y
+CONFIG_AT76C50X_USB=m
+
+##
+## file: drivers/net/wireless/broadcom/Kconfig
+##
+CONFIG_WLAN_VENDOR_BROADCOM=y
+
+##
+## file: drivers/net/wireless/broadcom/b43/Kconfig
+##
+CONFIG_B43=m
+## choice: Supported bus types
+CONFIG_B43_BUSES_BCMA_AND_SSB=y
+# CONFIG_B43_BUSES_BCMA is not set
+# CONFIG_B43_BUSES_SSB is not set
+## end choice
+CONFIG_B43_SDIO=y
+CONFIG_B43_PHY_G=y
+CONFIG_B43_PHY_N=y
+CONFIG_B43_PHY_LP=y
+CONFIG_B43_PHY_HT=y
+# CONFIG_B43_DEBUG is not set
+
+##
+## file: drivers/net/wireless/broadcom/b43legacy/Kconfig
+##
+CONFIG_B43LEGACY=m
+CONFIG_B43LEGACY_DEBUG=y
+## choice: Broadcom 43xx-legacy data transfer mode
+CONFIG_B43LEGACY_DMA_AND_PIO_MODE=y
+# CONFIG_B43LEGACY_DMA_MODE is not set
+# CONFIG_B43LEGACY_PIO_MODE is not set
+## end choice
+
+##
+## file: drivers/net/wireless/broadcom/brcm80211/Kconfig
+##
+CONFIG_BRCMSMAC=m
+# CONFIG_BRCM_TRACING is not set
+# CONFIG_BRCMDBG is not set
+
+##
+## file: drivers/net/wireless/broadcom/brcm80211/brcmfmac/Kconfig
+##
+CONFIG_BRCMFMAC=m
+# CONFIG_BRCMFMAC_SDIO is not set
+CONFIG_BRCMFMAC_USB=y
+CONFIG_BRCMFMAC_PCIE=y
+
+##
+## file: drivers/net/wireless/cisco/Kconfig
+##
+CONFIG_WLAN_VENDOR_CISCO=y
+CONFIG_AIRO=m
+
+##
+## file: drivers/net/wireless/intel/Kconfig
+##
+CONFIG_WLAN_VENDOR_INTEL=y
+
+##
+## file: drivers/net/wireless/intel/ipw2x00/Kconfig
+##
+CONFIG_IPW2200=m
+CONFIG_IPW2200_MONITOR=y
+CONFIG_IPW2200_RADIOTAP=y
+CONFIG_IPW2200_PROMISCUOUS=y
+CONFIG_IPW2200_QOS=y
+# CONFIG_IPW2200_DEBUG is not set
+# CONFIG_LIBIPW_DEBUG is not set
+
+##
+## file: drivers/net/wireless/intel/iwlegacy/Kconfig
+##
+CONFIG_IWL4965=m
+CONFIG_IWL3945=m
+# CONFIG_IWLEGACY_DEBUG is not set
+
+##
+## file: drivers/net/wireless/intel/iwlwifi/Kconfig
+##
+CONFIG_IWLWIFI=m
+CONFIG_IWLDVM=m
+CONFIG_IWLMVM=m
+# CONFIG_IWLWIFI_BCAST_FILTERING is not set
+# CONFIG_IWLWIFI_DEBUG is not set
+# CONFIG_IWLWIFI_DEVICE_TRACING is not set
+
+##
+## file: drivers/net/wireless/intersil/Kconfig
+##
+CONFIG_WLAN_VENDOR_INTERSIL=y
+
+##
+## file: drivers/net/wireless/intersil/hostap/Kconfig
+##
+CONFIG_HOSTAP=m
+CONFIG_HOSTAP_FIRMWARE=y
+# CONFIG_HOSTAP_FIRMWARE_NVRAM is not set
+CONFIG_HOSTAP_PLX=m
+CONFIG_HOSTAP_PCI=m
+CONFIG_HOSTAP_CS=m
+
+##
+## file: drivers/net/wireless/intersil/orinoco/Kconfig
+##
+# CONFIG_HERMES_PRISM is not set
+CONFIG_HERMES_CACHE_FW_ON_INIT=y
+CONFIG_NORTEL_HERMES=m
+CONFIG_PCMCIA_SPECTRUM=m
+CONFIG_ORINOCO_USB=m
+
+##
+## file: drivers/net/wireless/intersil/p54/Kconfig
+##
+CONFIG_P54_COMMON=m
+CONFIG_P54_USB=m
+CONFIG_P54_PCI=m
+# CONFIG_P54_SPI is not set
+# CONFIG_P54_SPI_DEFAULT_EEPROM is not set
+
+##
+## file: drivers/net/wireless/marvell/Kconfig
+##
+CONFIG_WLAN_VENDOR_MARVELL=y
+CONFIG_MWL8K=m
+
+##
+## file: drivers/net/wireless/marvell/libertas/Kconfig
+##
+CONFIG_LIBERTAS=m
+CONFIG_LIBERTAS_USB=m
+CONFIG_LIBERTAS_CS=m
+CONFIG_LIBERTAS_SDIO=m
+# CONFIG_LIBERTAS_SPI is not set
+# CONFIG_LIBERTAS_DEBUG is not set
+CONFIG_LIBERTAS_MESH=y
+
+##
+## file: drivers/net/wireless/marvell/libertas_tf/Kconfig
+##
+CONFIG_LIBERTAS_THINFIRM=m
+# CONFIG_LIBERTAS_THINFIRM_DEBUG is not set
+CONFIG_LIBERTAS_THINFIRM_USB=m
+
+##
+## file: drivers/net/wireless/mediatek/Kconfig
+##
+CONFIG_WLAN_VENDOR_MEDIATEK=y
+
+##
+## file: drivers/net/wireless/mediatek/mt76/mt7615/Kconfig
+##
+CONFIG_MT7615E=m
+CONFIG_MT7663U=m
+
+##
+## file: drivers/net/wireless/mediatek/mt76/mt76x0/Kconfig
+##
+CONFIG_MT76x0U=m
+CONFIG_MT76x0E=m
+
+##
+## file: drivers/net/wireless/mediatek/mt76/mt76x2/Kconfig
+##
+CONFIG_MT76x2E=m
+CONFIG_MT76x2U=m
+
+##
+## file: drivers/net/wireless/mediatek/mt76/mt7915/Kconfig
+##
+CONFIG_MT7915E=m
+
+##
+## file: drivers/net/wireless/mediatek/mt76/mt7921/Kconfig
+##
+CONFIG_MT7921E=m
+
+##
+## file: drivers/net/wireless/mediatek/mt7601u/Kconfig
+##
+CONFIG_MT7601U=m
+
+##
+## file: drivers/net/wireless/quantenna/Kconfig
+##
+CONFIG_WLAN_VENDOR_QUANTENNA=y
+
+##
+## file: drivers/net/wireless/ralink/Kconfig
+##
+CONFIG_WLAN_VENDOR_RALINK=y
+
+##
+## file: drivers/net/wireless/ralink/rt2x00/Kconfig
+##
+CONFIG_RT2X00=m
+CONFIG_RT2400PCI=m
+CONFIG_RT2500PCI=m
+CONFIG_RT61PCI=m
+CONFIG_RT2800PCI=m
+CONFIG_RT2800PCI_RT33XX=y
+CONFIG_RT2800PCI_RT35XX=y
+CONFIG_RT2800PCI_RT53XX=y
+CONFIG_RT2800PCI_RT3290=y
+CONFIG_RT2500USB=m
+CONFIG_RT73USB=m
+CONFIG_RT2800USB=m
+CONFIG_RT2800USB_RT33XX=y
+CONFIG_RT2800USB_RT35XX=y
+CONFIG_RT2800USB_RT3573=y
+CONFIG_RT2800USB_RT53XX=y
+CONFIG_RT2800USB_RT55XX=y
+# CONFIG_RT2800USB_UNKNOWN is not set
+# CONFIG_RT2X00_DEBUG is not set
+
+##
+## file: drivers/net/wireless/realtek/Kconfig
+##
+CONFIG_WLAN_VENDOR_REALTEK=y
+
+##
+## file: drivers/net/wireless/realtek/rtl818x/Kconfig
+##
+CONFIG_RTL8180=m
+CONFIG_RTL8187=m
+
+##
+## file: drivers/net/wireless/realtek/rtl8xxxu/Kconfig
+##
+CONFIG_RTL8XXXU=m
+# CONFIG_RTL8XXXU_UNTESTED is not set
+
+##
+## file: drivers/net/wireless/realtek/rtlwifi/Kconfig
+##
+CONFIG_RTL_CARDS=m
+CONFIG_RTL8192CE=m
+CONFIG_RTL8192SE=m
+CONFIG_RTL8192DE=m
+CONFIG_RTL8723AE=m
+CONFIG_RTL8723BE=m
+CONFIG_RTL8188EE=m
+CONFIG_RTL8192EE=m
+CONFIG_RTL8821AE=m
+CONFIG_RTL8192CU=m
+# CONFIG_RTLWIFI_DEBUG is not set
+
+##
+## file: drivers/net/wireless/realtek/rtw88/Kconfig
+##
+CONFIG_RTW88=m
+CONFIG_RTW88_8822BE=m
+CONFIG_RTW88_8822CE=m
+CONFIG_RTW88_8723DE=m
+CONFIG_RTW88_8821CE=m
+
+##
+## file: drivers/net/wireless/rsi/Kconfig
+##
+CONFIG_WLAN_VENDOR_RSI=y
+CONFIG_RSI_91X=m
+CONFIG_RSI_DEBUGFS=y
+# CONFIG_RSI_SDIO is not set
+CONFIG_RSI_USB=m
+CONFIG_RSI_COEX=y
+
+##
+## file: drivers/net/wireless/st/Kconfig
+##
+CONFIG_WLAN_VENDOR_ST=y
+
+##
+## file: drivers/net/wireless/st/cw1200/Kconfig
+##
+# CONFIG_CW1200 is not set
+
+##
+## file: drivers/net/wireless/ti/Kconfig
+##
+# CONFIG_WLAN_VENDOR_TI is not set
+
+##
+## file: drivers/net/wireless/zydas/Kconfig
+##
+CONFIG_WLAN_VENDOR_ZYDAS=y
+
+##
+## file: drivers/net/wireless/zydas/zd1211rw/Kconfig
+##
+CONFIG_ZD1211RW=m
+# CONFIG_ZD1211RW_DEBUG is not set
+
+##
+## file: drivers/net/wwan/Kconfig
+##
+CONFIG_WWAN=m
+CONFIG_MHI_WWAN_CTRL=m
+
+##
+## file: drivers/nfc/Kconfig
+##
+# CONFIG_NFC_TRF7970A is not set
+CONFIG_NFC_SIM=m
+CONFIG_NFC_PORT100=m
+
+##
+## file: drivers/nfc/microread/Kconfig
+##
+# CONFIG_NFC_MICROREAD_I2C is not set
+# CONFIG_NFC_MICROREAD_MEI is not set
+
+##
+## file: drivers/nfc/pn533/Kconfig
+##
+CONFIG_NFC_PN533_USB=m
+# CONFIG_NFC_PN533_I2C is not set
+
+##
+## file: drivers/nfc/st21nfca/Kconfig
+##
+# CONFIG_NFC_ST21NFCA_I2C is not set
+
+##
+## file: drivers/nfc/st95hf/Kconfig
+##
+# CONFIG_NFC_ST95HF is not set
+
+##
+## file: drivers/ntb/Kconfig
+##
+# CONFIG_NTB is not set
+
+##
+## file: drivers/nvdimm/Kconfig
+##
+CONFIG_NVDIMM_DAX=y
+
+##
+## file: drivers/nvme/host/Kconfig
+##
+CONFIG_BLK_DEV_NVME=m
+CONFIG_NVME_MULTIPATH=y
+CONFIG_NVME_HWMON=y
+CONFIG_NVME_RDMA=m
+CONFIG_NVME_FC=m
+CONFIG_NVME_TCP=m
+
+##
+## file: drivers/nvme/target/Kconfig
+##
+CONFIG_NVME_TARGET=m
+# CONFIG_NVME_TARGET_LOOP is not set
+CONFIG_NVME_TARGET_RDMA=m
+CONFIG_NVME_TARGET_FC=m
+# CONFIG_NVME_TARGET_FCLOOP is not set
+CONFIG_NVME_TARGET_TCP=m
+
+##
+## file: drivers/of/Kconfig
+##
+# CONFIG_OF is not set
+# CONFIG_OF_UNITTEST is not set
+# CONFIG_OF_OVERLAY is not set
+
+##
+## file: drivers/parport/Kconfig
+##
+CONFIG_PARPORT=m
+CONFIG_PARPORT_PC=m
+CONFIG_PARPORT_SERIAL=m
+# CONFIG_PARPORT_PC_FIFO is not set
+# CONFIG_PARPORT_PC_SUPERIO is not set
+CONFIG_PARPORT_PC_PCMCIA=m
+# CONFIG_PARPORT_AX88796 is not set
+CONFIG_PARPORT_1284=y
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI_MSI=y
+CONFIG_PCI_QUIRKS=y
+# CONFIG_PCI_DEBUG is not set
+CONFIG_PCI_REALLOC_ENABLE_AUTO=y
+CONFIG_PCI_STUB=m
+CONFIG_PCI_PF_STUB=m
+CONFIG_XEN_PCIDEV_FRONTEND=m
+CONFIG_PCI_IOV=y
+# CONFIG_PCI_PRI is not set
+# CONFIG_PCI_PASID is not set
+
+##
+## file: drivers/pci/controller/dwc/Kconfig
+##
+# CONFIG_PCIE_DW_PLAT_HOST is not set
+
+##
+## file: drivers/pci/endpoint/Kconfig
+##
+# CONFIG_PCI_ENDPOINT is not set
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+CONFIG_HOTPLUG_PCI_CPCI=y
+
+##
+## file: drivers/pci/pcie/Kconfig
+##
+CONFIG_PCIEPORTBUS=y
+CONFIG_HOTPLUG_PCI_PCIE=y
+CONFIG_PCIEAER=y
+CONFIG_PCIEAER_INJECT=m
+# CONFIG_PCIE_ECRC is not set
+CONFIG_PCIEASPM=y
+## choice: Default ASPM policy
+CONFIG_PCIEASPM_DEFAULT=y
+# CONFIG_PCIEASPM_POWERSAVE is not set
+# CONFIG_PCIEASPM_POWER_SUPERSAVE is not set
+# CONFIG_PCIEASPM_PERFORMANCE is not set
+## end choice
+CONFIG_PCIE_DPC=y
+CONFIG_PCIE_PTM=y
+
+##
+## file: drivers/pci/switch/Kconfig
+##
+# CONFIG_PCI_SW_SWITCHTEC is not set
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+CONFIG_PCMCIA_LOAD_CIS=y
+CONFIG_YENTA_O2=y
+CONFIG_YENTA_RICOH=y
+CONFIG_YENTA_TI=y
+CONFIG_YENTA_ENE_TUNE=y
+CONFIG_YENTA_TOSHIBA=y
+
+##
+## file: drivers/phy/Kconfig
+##
+# CONFIG_GENERIC_PHY is not set
+
+##
+## file: drivers/phy/broadcom/Kconfig
+##
+# CONFIG_BCM_KONA_USB2_PHY is not set
+
+##
+## file: drivers/phy/marvell/Kconfig
+##
+# CONFIG_PHY_PXA_28NM_HSIC is not set
+# CONFIG_PHY_PXA_28NM_USB2 is not set
+
+##
+## file: drivers/phy/samsung/Kconfig
+##
+# CONFIG_PHY_EXYNOS_DP_VIDEO is not set
+# CONFIG_PHY_EXYNOS_MIPI_VIDEO is not set
+# CONFIG_PHY_SAMSUNG_USB2 is not set
+
+##
+## file: drivers/phy/ti/Kconfig
+##
+# CONFIG_OMAP_CONTROL_PHY is not set
+# CONFIG_OMAP_USB2 is not set
+# CONFIG_TWL4030_USB is not set
+
+##
+## file: drivers/pinctrl/Kconfig
+##
+# CONFIG_PINMUX is not set
+# CONFIG_PINCONF is not set
+# CONFIG_DEBUG_PINCTRL is not set
+# CONFIG_PINCTRL_AMD is not set
+# CONFIG_PINCTRL_MCP23S08 is not set
+# CONFIG_PINCTRL_SINGLE is not set
+# CONFIG_PINCTRL_SX150X is not set
+
+##
+## file: drivers/pinctrl/intel/Kconfig
+##
+# CONFIG_PINCTRL_BAYTRAIL is not set
+# CONFIG_PINCTRL_CHERRYVIEW is not set
+# CONFIG_PINCTRL_BROXTON is not set
+# CONFIG_PINCTRL_SUNRISEPOINT is not set
+
+##
+## file: drivers/platform/chrome/Kconfig
+##
+# CONFIG_CHROME_PLATFORMS is not set
+
+##
+## file: drivers/platform/goldfish/Kconfig
+##
+# CONFIG_GOLDFISH is not set
+
+##
+## file: drivers/pnp/Kconfig
+##
+# CONFIG_PNP_DEBUG_MESSAGES is not set
+
+##
+## file: drivers/power/reset/Kconfig
+##
+# CONFIG_POWER_RESET is not set
+
+##
+## file: drivers/power/supply/Kconfig
+##
+CONFIG_POWER_SUPPLY=y
+# CONFIG_POWER_SUPPLY_DEBUG is not set
+# CONFIG_PDA_POWER is not set
+# CONFIG_GENERIC_ADC_BATTERY is not set
+CONFIG_WM831X_POWER=m
+CONFIG_WM8350_POWER=m
+# CONFIG_TEST_POWER is not set
+# CONFIG_CHARGER_ADP5061 is not set
+CONFIG_BATTERY_DS2760=m
+# CONFIG_BATTERY_DS2780 is not set
+# CONFIG_BATTERY_DS2781 is not set
+# CONFIG_BATTERY_DS2782 is not set
+# CONFIG_CHARGER_SBS is not set
+# CONFIG_MANAGER_SBS is not set
+CONFIG_BATTERY_BQ27XXX=m
+# CONFIG_BATTERY_BQ27XXX_I2C is not set
+CONFIG_BATTERY_BQ27XXX_HDQ=m
+# CONFIG_BATTERY_MAX17040 is not set
+# CONFIG_BATTERY_MAX17042 is not set
+# CONFIG_BATTERY_MAX1721X is not set
+CONFIG_CHARGER_PCF50633=m
+# CONFIG_CHARGER_ISP1704 is not set
+# CONFIG_CHARGER_MAX8903 is not set
+# CONFIG_CHARGER_LP8727 is not set
+# CONFIG_CHARGER_GPIO is not set
+# CONFIG_CHARGER_MANAGER is not set
+# CONFIG_CHARGER_LT3651 is not set
+# CONFIG_CHARGER_BQ2415X is not set
+# CONFIG_CHARGER_BQ24190 is not set
+# CONFIG_CHARGER_BQ24257 is not set
+# CONFIG_CHARGER_BQ24735 is not set
+# CONFIG_CHARGER_BQ25890 is not set
+# CONFIG_CHARGER_SMB347 is not set
+# CONFIG_BATTERY_GAUGE_LTC2941 is not set
+# CONFIG_CHARGER_RT9455 is not set
+
+##
+## file: drivers/pps/Kconfig
+##
+CONFIG_PPS=m
+# CONFIG_PPS_DEBUG is not set
+# CONFIG_NTP_PPS is not set
+
+##
+## file: drivers/pps/clients/Kconfig
+##
+# CONFIG_PPS_CLIENT_KTIMER is not set
+CONFIG_PPS_CLIENT_LDISC=m
+CONFIG_PPS_CLIENT_PARPORT=m
+# CONFIG_PPS_CLIENT_GPIO is not set
+
+##
+## file: drivers/ptp/Kconfig
+##
+CONFIG_PTP_1588_CLOCK=m
+CONFIG_PTP_1588_CLOCK_DTE=m
+CONFIG_PTP_1588_CLOCK_QORIQ=m
+CONFIG_DP83640_PHY=m
+CONFIG_PTP_1588_CLOCK_INES=m
+CONFIG_PTP_1588_CLOCK_IDT82P33=m
+CONFIG_PTP_1588_CLOCK_IDTCM=m
+CONFIG_PTP_1588_CLOCK_OCP=m
+
+##
+## file: drivers/pwm/Kconfig
+##
+# CONFIG_PWM is not set
+
+##
+## file: drivers/regulator/Kconfig
+##
+# CONFIG_REGULATOR is not set
+# CONFIG_REGULATOR_DEBUG is not set
+# CONFIG_REGULATOR_FIXED_VOLTAGE is not set
+# CONFIG_REGULATOR_VIRTUAL_CONSUMER is not set
+# CONFIG_REGULATOR_USERSPACE_CONSUMER is not set
+# CONFIG_REGULATOR_88PG86X is not set
+# CONFIG_REGULATOR_ACT8865 is not set
+# CONFIG_REGULATOR_AD5398 is not set
+# CONFIG_REGULATOR_AXP20X is not set
+# CONFIG_REGULATOR_DA9210 is not set
+# CONFIG_REGULATOR_DA9211 is not set
+# CONFIG_REGULATOR_FAN53555 is not set
+# CONFIG_REGULATOR_GPIO is not set
+# CONFIG_REGULATOR_ISL9305 is not set
+# CONFIG_REGULATOR_ISL6271A is not set
+# CONFIG_REGULATOR_LP3971 is not set
+# CONFIG_REGULATOR_LP3972 is not set
+# CONFIG_REGULATOR_LP872X is not set
+# CONFIG_REGULATOR_LP8755 is not set
+# CONFIG_REGULATOR_LTC3589 is not set
+# CONFIG_REGULATOR_LTC3676 is not set
+# CONFIG_REGULATOR_MAX1586 is not set
+# CONFIG_REGULATOR_MAX8649 is not set
+# CONFIG_REGULATOR_MAX8660 is not set
+# CONFIG_REGULATOR_MAX8952 is not set
+# CONFIG_REGULATOR_MT6311 is not set
+# CONFIG_REGULATOR_PFUZE100 is not set
+# CONFIG_REGULATOR_PV88060 is not set
+# CONFIG_REGULATOR_PV88080 is not set
+# CONFIG_REGULATOR_PV88090 is not set
+# CONFIG_REGULATOR_PWM is not set
+# CONFIG_REGULATOR_TPS51632 is not set
+# CONFIG_REGULATOR_TPS62360 is not set
+# CONFIG_REGULATOR_TPS65023 is not set
+# CONFIG_REGULATOR_TPS6507X is not set
+# CONFIG_REGULATOR_TPS65132 is not set
+# CONFIG_REGULATOR_TPS6524X is not set
+
+##
+## file: drivers/reset/Kconfig
+##
+# CONFIG_RESET_CONTROLLER is not set
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_CLASS=y
+CONFIG_RTC_HCTOSYS=y
+CONFIG_RTC_HCTOSYS_DEVICE="rtc0"
+CONFIG_RTC_SYSTOHC=y
+CONFIG_RTC_SYSTOHC_DEVICE="rtc0"
+# CONFIG_RTC_DEBUG is not set
+CONFIG_RTC_NVMEM=y
+CONFIG_RTC_INTF_SYSFS=y
+CONFIG_RTC_INTF_PROC=y
+CONFIG_RTC_INTF_DEV=y
+# CONFIG_RTC_INTF_DEV_UIE_EMUL is not set
+# CONFIG_RTC_DRV_TEST is not set
+# CONFIG_RTC_DRV_ABB5ZES3 is not set
+# CONFIG_RTC_DRV_ABX80X is not set
+# CONFIG_RTC_DRV_DS1307 is not set
+# CONFIG_RTC_DRV_DS1374 is not set
+# CONFIG_RTC_DRV_DS1672 is not set
+# CONFIG_RTC_DRV_HYM8563 is not set
+# CONFIG_RTC_DRV_MAX6900 is not set
+# CONFIG_RTC_DRV_RS5C372 is not set
+# CONFIG_RTC_DRV_ISL1208 is not set
+# CONFIG_RTC_DRV_ISL12022 is not set
+# CONFIG_RTC_DRV_X1205 is not set
+# CONFIG_RTC_DRV_PCF8523 is not set
+# CONFIG_RTC_DRV_PCF85063 is not set
+# CONFIG_RTC_DRV_PCF8563 is not set
+# CONFIG_RTC_DRV_PCF8583 is not set
+# CONFIG_RTC_DRV_M41T80 is not set
+# CONFIG_RTC_DRV_M41T80_WDT is not set
+# CONFIG_RTC_DRV_BQ32K is not set
+# CONFIG_RTC_DRV_S35390A is not set
+# CONFIG_RTC_DRV_FM3130 is not set
+# CONFIG_RTC_DRV_RX8010 is not set
+# CONFIG_RTC_DRV_RX8581 is not set
+# CONFIG_RTC_DRV_RX8025 is not set
+# CONFIG_RTC_DRV_EM3027 is not set
+# CONFIG_RTC_DRV_RV8803 is not set
+# CONFIG_RTC_DRV_M41T93 is not set
+# CONFIG_RTC_DRV_M41T94 is not set
+# CONFIG_RTC_DRV_DS1302 is not set
+# CONFIG_RTC_DRV_DS1305 is not set
+# CONFIG_RTC_DRV_DS1343 is not set
+# CONFIG_RTC_DRV_DS1347 is not set
+# CONFIG_RTC_DRV_DS1390 is not set
+# CONFIG_RTC_DRV_MAX6916 is not set
+# CONFIG_RTC_DRV_R9701 is not set
+# CONFIG_RTC_DRV_RX4581 is not set
+# CONFIG_RTC_DRV_RS5C348 is not set
+# CONFIG_RTC_DRV_MAX6902 is not set
+# CONFIG_RTC_DRV_PCF2123 is not set
+# CONFIG_RTC_DRV_MCP795 is not set
+# CONFIG_RTC_DRV_DS3232 is not set
+# CONFIG_RTC_DRV_PCF2127 is not set
+# CONFIG_RTC_DRV_RV3029C2 is not set
+# CONFIG_RTC_DRV_RX6110 is not set
+CONFIG_RTC_DRV_CMOS=m
+# CONFIG_RTC_DRV_DS1286 is not set
+# CONFIG_RTC_DRV_DS1511 is not set
+# CONFIG_RTC_DRV_DS1553 is not set
+# CONFIG_RTC_DRV_DS1685_FAMILY is not set
+# CONFIG_RTC_DRV_DS1742 is not set
+# CONFIG_RTC_DRV_DS2404 is not set
+# CONFIG_RTC_DRV_STK17TA8 is not set
+# CONFIG_RTC_DRV_M48T86 is not set
+# CONFIG_RTC_DRV_M48T35 is not set
+# CONFIG_RTC_DRV_M48T59 is not set
+# CONFIG_RTC_DRV_MSM6242 is not set
+# CONFIG_RTC_DRV_BQ4802 is not set
+# CONFIG_RTC_DRV_RP5C01 is not set
+# CONFIG_RTC_DRV_V3020 is not set
+CONFIG_RTC_DRV_WM831X=m
+CONFIG_RTC_DRV_WM8350=m
+CONFIG_RTC_DRV_PCF50633=m
+# CONFIG_RTC_DRV_ZYNQMP is not set
+# CONFIG_RTC_DRV_SNVS is not set
+# CONFIG_RTC_DRV_MOXART is not set
+# CONFIG_RTC_DRV_XGENE is not set
+# CONFIG_RTC_DRV_HID_SENSOR_TIME is not set
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_RAID_ATTRS=m
+CONFIG_SCSI=m
+# CONFIG_SCSI_PROC_FS is not set
+CONFIG_BLK_DEV_SD=m
+CONFIG_CHR_DEV_ST=m
+CONFIG_BLK_DEV_SR=m
+CONFIG_CHR_DEV_SG=m
+CONFIG_BLK_DEV_BSG=y
+CONFIG_CHR_DEV_SCH=m
+CONFIG_SCSI_ENCLOSURE=m
+CONFIG_SCSI_CONSTANTS=y
+CONFIG_SCSI_LOGGING=y
+CONFIG_SCSI_SCAN_ASYNC=y
+CONFIG_SCSI_SPI_ATTRS=m
+CONFIG_SCSI_FC_ATTRS=m
+CONFIG_SCSI_ISCSI_ATTRS=m
+CONFIG_SCSI_SAS_ATTRS=m
+CONFIG_SCSI_LOWLEVEL=y
+CONFIG_ISCSI_TCP=m
+CONFIG_BLK_DEV_3W_XXXX_RAID=m
+CONFIG_SCSI_HPSA=m
+CONFIG_SCSI_3W_9XXX=m
+CONFIG_SCSI_3W_SAS=m
+CONFIG_SCSI_ACARD=m
+CONFIG_SCSI_AHA152X=m
+CONFIG_SCSI_AHA1542=m
+CONFIG_SCSI_AHA1740=m
+CONFIG_SCSI_AACRAID=m
+CONFIG_SCSI_MVUMI=m
+CONFIG_SCSI_ADVANSYS=m
+CONFIG_SCSI_HPTIOP=m
+CONFIG_XEN_SCSI_FRONTEND=m
+CONFIG_LIBFC=m
+CONFIG_LIBFCOE=m
+CONFIG_FCOE=m
+CONFIG_FCOE_FNIC=m
+CONFIG_SCSI_SNIC=m
+# CONFIG_SCSI_SNIC_DEBUG_FS is not set
+# CONFIG_SCSI_PPA is not set
+# CONFIG_SCSI_IMM is not set
+# CONFIG_SCSI_IZIP_EPP16 is not set
+# CONFIG_SCSI_IZIP_SLOW_CTR is not set
+CONFIG_SCSI_STEX=m
+CONFIG_SCSI_SYM53C8XX_2=m
+CONFIG_SCSI_SYM53C8XX_MMIO=y
+# CONFIG_SCSI_IPR is not set
+CONFIG_SCSI_LPFC=m
+# CONFIG_SCSI_LPFC_DEBUG_FS is not set
+CONFIG_SCSI_WD719X=m
+# CONFIG_SCSI_DEBUG is not set
+CONFIG_SCSI_PMCRAID=m
+CONFIG_SCSI_PM8001=m
+CONFIG_SCSI_BFA_FC=m
+CONFIG_SCSI_VIRTIO=m
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic79xx
+##
+CONFIG_SCSI_AIC79XX=m
+CONFIG_AIC79XX_CMDS_PER_DEVICE=32
+CONFIG_AIC79XX_RESET_DELAY_MS=15000
+CONFIG_AIC79XX_DEBUG_ENABLE=y
+CONFIG_AIC79XX_DEBUG_MASK=0
+CONFIG_AIC79XX_REG_PRETTY_PRINT=y
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic7xxx
+##
+CONFIG_SCSI_AIC7XXX=m
+CONFIG_AIC7XXX_CMDS_PER_DEVICE=32
+CONFIG_AIC7XXX_RESET_DELAY_MS=15000
+CONFIG_AIC7XXX_DEBUG_ENABLE=y
+CONFIG_AIC7XXX_DEBUG_MASK=0
+CONFIG_AIC7XXX_REG_PRETTY_PRINT=y
+
+##
+## file: drivers/scsi/aic94xx/Kconfig
+##
+CONFIG_SCSI_AIC94XX=m
+# CONFIG_AIC94XX_DEBUG is not set
+
+##
+## file: drivers/scsi/be2iscsi/Kconfig
+##
+CONFIG_BE2ISCSI=m
+
+##
+## file: drivers/scsi/bnx2fc/Kconfig
+##
+CONFIG_SCSI_BNX2X_FCOE=m
+
+##
+## file: drivers/scsi/bnx2i/Kconfig
+##
+CONFIG_SCSI_BNX2_ISCSI=m
+
+##
+## file: drivers/scsi/csiostor/Kconfig
+##
+CONFIG_SCSI_CHELSIO_FCOE=m
+
+##
+## file: drivers/scsi/cxgbi/cxgb3i/Kconfig
+##
+CONFIG_SCSI_CXGB3_ISCSI=m
+
+##
+## file: drivers/scsi/cxgbi/cxgb4i/Kconfig
+##
+CONFIG_SCSI_CXGB4_ISCSI=m
+
+##
+## file: drivers/scsi/device_handler/Kconfig
+##
+CONFIG_SCSI_DH=y
+CONFIG_SCSI_DH_RDAC=m
+CONFIG_SCSI_DH_HP_SW=m
+CONFIG_SCSI_DH_EMC=m
+CONFIG_SCSI_DH_ALUA=m
+
+##
+## file: drivers/scsi/esas2r/Kconfig
+##
+CONFIG_SCSI_ESAS2R=m
+
+##
+## file: drivers/scsi/libsas/Kconfig
+##
+CONFIG_SCSI_SAS_LIBSAS=m
+CONFIG_SCSI_SAS_ATA=y
+CONFIG_SCSI_SAS_HOST_SMP=y
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+CONFIG_MEGARAID_SAS=m
+
+##
+## file: drivers/scsi/mpt3sas/Kconfig
+##
+CONFIG_SCSI_MPT3SAS=m
+CONFIG_SCSI_MPT2SAS_MAX_SGE=128
+CONFIG_SCSI_MPT3SAS_MAX_SGE=128
+CONFIG_SCSI_MPT2SAS=m
+
+##
+## file: drivers/scsi/mvsas/Kconfig
+##
+CONFIG_SCSI_MVSAS=m
+# CONFIG_SCSI_MVSAS_DEBUG is not set
+# CONFIG_SCSI_MVSAS_TASKLET is not set
+
+##
+## file: drivers/scsi/pcmcia/Kconfig
+##
+CONFIG_SCSI_LOWLEVEL_PCMCIA=y
+
+##
+## file: drivers/scsi/qedf/Kconfig
+##
+CONFIG_QEDF=m
+
+##
+## file: drivers/scsi/qedi/Kconfig
+##
+CONFIG_QEDI=m
+
+##
+## file: drivers/scsi/qla2xxx/Kconfig
+##
+CONFIG_SCSI_QLA_FC=m
+CONFIG_TCM_QLA2XXX=m
+# CONFIG_TCM_QLA2XXX_DEBUG is not set
+
+##
+## file: drivers/scsi/qla4xxx/Kconfig
+##
+CONFIG_SCSI_QLA_ISCSI=m
+
+##
+## file: drivers/scsi/smartpqi/Kconfig
+##
+CONFIG_SCSI_SMARTPQI=m
+
+##
+## file: drivers/scsi/ufs/Kconfig
+##
+CONFIG_SCSI_UFSHCD=m
+CONFIG_SCSI_UFSHCD_PCI=m
+# CONFIG_SCSI_UFS_DWC_TC_PCI is not set
+# CONFIG_SCSI_UFSHCD_PLATFORM is not set
+
+##
+## file: drivers/soc/ti/Kconfig
+##
+# CONFIG_SOC_TI is not set
+
+##
+## file: drivers/soundwire/Kconfig
+##
+CONFIG_SOUNDWIRE=m
+CONFIG_SOUNDWIRE_INTEL=m
+CONFIG_SOUNDWIRE_QCOM=m
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI=y
+# CONFIG_SPI_DEBUG is not set
+# CONFIG_SPI_ALTERA is not set
+# CONFIG_SPI_AXI_SPI_ENGINE is not set
+CONFIG_SPI_BITBANG=m
+CONFIG_SPI_BUTTERFLY=m
+# CONFIG_SPI_CADENCE is not set
+# CONFIG_SPI_DESIGNWARE is not set
+# CONFIG_SPI_GPIO is not set
+CONFIG_SPI_LM70_LLP=m
+# CONFIG_SPI_FSL_SPI is not set
+# CONFIG_SPI_FSL_DSPI is not set
+# CONFIG_SPI_MTK_NOR is not set
+# CONFIG_SPI_OC_TINY is not set
+# CONFIG_SPI_PXA2XX is not set
+# CONFIG_SPI_ROCKCHIP is not set
+# CONFIG_SPI_SC18IS602 is not set
+# CONFIG_SPI_TOPCLIFF_PCH is not set
+# CONFIG_SPI_XCOMM is not set
+# CONFIG_SPI_XILINX is not set
+# CONFIG_SPI_ZYNQMP_GQSPI is not set
+CONFIG_SPI_SPIDEV=y
+# CONFIG_SPI_LOOPBACK_TEST is not set
+# CONFIG_SPI_TLE62X0 is not set
+# CONFIG_SPI_SLAVE is not set
+
+##
+## file: drivers/spmi/Kconfig
+##
+# CONFIG_SPMI is not set
+
+##
+## file: drivers/ssb/Kconfig
+##
+CONFIG_SSB=m
+CONFIG_SSB_PCMCIAHOST=y
+# CONFIG_SSB_HOST_SOC is not set
+# CONFIG_SSB_DRIVER_GPIO is not set
+
+##
+## file: drivers/staging/Kconfig
+##
+CONFIG_STAGING=y
+
+##
+## file: drivers/staging/android/Kconfig
+##
+CONFIG_ASHMEM=m
+
+##
+## file: drivers/staging/board/Kconfig
+##
+# CONFIG_STAGING_BOARD is not set
+
+##
+## file: drivers/staging/clocking-wizard/Kconfig
+##
+# CONFIG_COMMON_CLK_XLNX_CLKWZRD is not set
+
+##
+## file: drivers/staging/fbtft/Kconfig
+##
+# CONFIG_FB_TFT is not set
+
+##
+## file: drivers/staging/gdm724x/Kconfig
+##
+# CONFIG_LTE_GDM724X is not set
+
+##
+## file: drivers/staging/gs_fpgaboot/Kconfig
+##
+# CONFIG_GS_FPGABOOT is not set
+
+##
+## file: drivers/staging/iio/accel/Kconfig
+##
+# CONFIG_ADIS16203 is not set
+# CONFIG_ADIS16240 is not set
+
+##
+## file: drivers/staging/iio/adc/Kconfig
+##
+# CONFIG_AD7816 is not set
+# CONFIG_AD7280 is not set
+
+##
+## file: drivers/staging/iio/addac/Kconfig
+##
+# CONFIG_ADT7316 is not set
+
+##
+## file: drivers/staging/iio/cdc/Kconfig
+##
+# CONFIG_AD7746 is not set
+
+##
+## file: drivers/staging/iio/frequency/Kconfig
+##
+# CONFIG_AD9832 is not set
+# CONFIG_AD9834 is not set
+
+##
+## file: drivers/staging/iio/impedance-analyzer/Kconfig
+##
+# CONFIG_AD5933 is not set
+
+##
+## file: drivers/staging/iio/meter/Kconfig
+##
+# CONFIG_ADE7854 is not set
+
+##
+## file: drivers/staging/iio/resolver/Kconfig
+##
+# CONFIG_AD2S1210 is not set
+
+##
+## file: drivers/staging/media/Kconfig
+##
+# CONFIG_STAGING_MEDIA is not set
+
+##
+## file: drivers/staging/media/av7110/Kconfig
+##
+CONFIG_DVB_AV7110=m
+CONFIG_DVB_AV7110_OSD=y
+CONFIG_DVB_BUDGET_PATCH=m
+CONFIG_DVB_SP8870=m
+
+##
+## file: drivers/staging/qlge/Kconfig
+##
+CONFIG_QLGE=m
+
+##
+## file: drivers/staging/r8188eu/Kconfig
+##
+CONFIG_R8188EU=m
+
+##
+## file: drivers/staging/rtl8192e/Kconfig
+##
+# CONFIG_RTLLIB is not set
+
+##
+## file: drivers/staging/rtl8192e/rtl8192e/Kconfig
+##
+# CONFIG_RTL8192E is not set
+
+##
+## file: drivers/staging/rtl8192u/Kconfig
+##
+# CONFIG_RTL8192U is not set
+
+##
+## file: drivers/staging/rtl8712/Kconfig
+##
+CONFIG_R8712U=m
+
+##
+## file: drivers/staging/rts5208/Kconfig
+##
+# CONFIG_RTS5208 is not set
+
+##
+## file: drivers/staging/sm750fb/Kconfig
+##
+# CONFIG_FB_SM750 is not set
+
+##
+## file: drivers/staging/vt6655/Kconfig
+##
+# CONFIG_VT6655 is not set
+
+##
+## file: drivers/staging/vt6656/Kconfig
+##
+# CONFIG_VT6656 is not set
+
+##
+## file: drivers/staging/wlan-ng/Kconfig
+##
+# CONFIG_PRISM2_USB is not set
+
+##
+## file: drivers/target/Kconfig
+##
+CONFIG_TARGET_CORE=m
+CONFIG_TCM_IBLOCK=m
+CONFIG_TCM_FILEIO=m
+CONFIG_TCM_PSCSI=m
+CONFIG_TCM_USER2=m
+
+##
+## file: drivers/target/iscsi/Kconfig
+##
+CONFIG_ISCSI_TARGET=m
+
+##
+## file: drivers/target/iscsi/cxgbit/Kconfig
+##
+CONFIG_ISCSI_TARGET_CXGB4=m
+
+##
+## file: drivers/target/loopback/Kconfig
+##
+CONFIG_LOOPBACK_TARGET=m
+
+##
+## file: drivers/target/sbp/Kconfig
+##
+CONFIG_SBP_TARGET=m
+
+##
+## file: drivers/target/tcm_fc/Kconfig
+##
+CONFIG_TCM_FC=m
+
+##
+## file: drivers/thermal/Kconfig
+##
+CONFIG_THERMAL_STATISTICS=y
+CONFIG_THERMAL_EMERGENCY_POWEROFF_DELAY_MS=0
+CONFIG_THERMAL_HWMON=y
+## choice: Default Thermal governor
+CONFIG_THERMAL_DEFAULT_GOV_STEP_WISE=y
+# CONFIG_THERMAL_DEFAULT_GOV_FAIR_SHARE is not set
+# CONFIG_THERMAL_DEFAULT_GOV_USER_SPACE is not set
+# CONFIG_THERMAL_DEFAULT_GOV_POWER_ALLOCATOR is not set
+## end choice
+CONFIG_THERMAL_GOV_FAIR_SHARE=y
+CONFIG_THERMAL_GOV_STEP_WISE=y
+CONFIG_THERMAL_GOV_BANG_BANG=y
+CONFIG_THERMAL_GOV_USER_SPACE=y
+CONFIG_THERMAL_GOV_POWER_ALLOCATOR=y
+CONFIG_DEVFREQ_THERMAL=y
+# CONFIG_THERMAL_EMULATION is not set
+# CONFIG_GENERIC_ADC_THERMAL is not set
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_TTY=y
+CONFIG_VT=y
+CONFIG_CONSOLE_TRANSLATIONS=y
+CONFIG_VT_CONSOLE=y
+CONFIG_VT_HW_CONSOLE_BINDING=y
+CONFIG_UNIX98_PTYS=y
+# CONFIG_LEGACY_PTYS is not set
+CONFIG_MOXA_SMARTIO=m
+CONFIG_SYNCLINK_GT=m
+CONFIG_N_GSM=m
+CONFIG_NOZOMI=m
+
+##
+## file: drivers/tty/hvc/Kconfig
+##
+CONFIG_HVC_XEN=y
+CONFIG_HVC_XEN_FRONTEND=y
+
+##
+## file: drivers/tty/serdev/Kconfig
+##
+CONFIG_SERIAL_DEV_BUS=y
+CONFIG_SERIAL_DEV_CTRL_TTYPORT=y
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+# CONFIG_SERIAL_MAX3100 is not set
+# CONFIG_SERIAL_MAX310X is not set
+# CONFIG_SERIAL_UARTLITE is not set
+# CONFIG_SERIAL_SCCNXP is not set
+# CONFIG_SERIAL_SC16IS7XX is not set
+# CONFIG_SERIAL_TIMBERDALE is not set
+# CONFIG_SERIAL_ALTERA_JTAGUART is not set
+# CONFIG_SERIAL_ALTERA_UART is not set
+# CONFIG_SERIAL_XILINX_PS_UART is not set
+# CONFIG_SERIAL_ARC is not set
+CONFIG_SERIAL_RP2=m
+CONFIG_SERIAL_RP2_NR_UARTS=32
+# CONFIG_SERIAL_FSL_LPUART is not set
+# CONFIG_SERIAL_CONEXANT_DIGICOLOR is not set
+# CONFIG_SERIAL_ST_ASC is not set
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+# CONFIG_SERIAL_8250_DEPRECATED_OPTIONS is not set
+CONFIG_SERIAL_8250_PNP=y
+CONFIG_SERIAL_8250_DMA=y
+CONFIG_SERIAL_8250_PCI=y
+CONFIG_SERIAL_8250_EXAR=m
+CONFIG_SERIAL_8250_FOURPORT=m
+CONFIG_SERIAL_8250_ACCENT=m
+CONFIG_SERIAL_8250_BOCA=m
+CONFIG_SERIAL_8250_HUB6=m
+# CONFIG_SERIAL_8250_DW is not set
+# CONFIG_SERIAL_8250_RT288X is not set
+# CONFIG_SERIAL_8250_MID is not set
+CONFIG_SERIAL_OF_PLATFORM=m
+
+##
+## file: drivers/uio/Kconfig
+##
+CONFIG_UIO=m
+CONFIG_UIO_CIF=m
+# CONFIG_UIO_PDRV_GENIRQ is not set
+# CONFIG_UIO_DMEM_GENIRQ is not set
+CONFIG_UIO_AEC=m
+CONFIG_UIO_SERCOS3=m
+CONFIG_UIO_PCI_GENERIC=m
+CONFIG_UIO_NETX=m
+# CONFIG_UIO_PRUSS is not set
+CONFIG_UIO_MF624=m
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB_SUPPORT=y
+CONFIG_USB_PCI=y
+
+##
+## file: drivers/usb/atm/Kconfig
+##
+CONFIG_USB_CXACRU=m
+CONFIG_USB_UEAGLEATM=m
+CONFIG_USB_XUSBATM=m
+
+##
+## file: drivers/usb/chipidea/Kconfig
+##
+# CONFIG_USB_CHIPIDEA is not set
+
+##
+## file: drivers/usb/class/Kconfig
+##
+CONFIG_USB_ACM=m
+CONFIG_USB_PRINTER=m
+CONFIG_USB_WDM=m
+CONFIG_USB_TMC=m
+
+##
+## file: drivers/usb/common/Kconfig
+##
+CONFIG_USB_LED_TRIG=y
+# CONFIG_USB_ULPI_BUS is not set
+
+##
+## file: drivers/usb/core/Kconfig
+##
+CONFIG_USB_ANNOUNCE_NEW_DEVICES=y
+CONFIG_USB_DEFAULT_PERSIST=y
+CONFIG_USB_DYNAMIC_MINORS=y
+# CONFIG_USB_OTG is not set
+# CONFIG_USB_OTG_FSM is not set
+CONFIG_USB_LEDS_TRIGGER_USBPORT=m
+
+##
+## file: drivers/usb/dwc2/Kconfig
+##
+# CONFIG_USB_DWC2 is not set
+
+##
+## file: drivers/usb/dwc3/Kconfig
+##
+# CONFIG_USB_DWC3 is not set
+
+##
+## file: drivers/usb/gadget/Kconfig
+##
+# CONFIG_USB_GADGET is not set
+# CONFIG_USB_GADGET_DEBUG is not set
+# CONFIG_USB_GADGET_DEBUG_FILES is not set
+# CONFIG_USB_GADGET_DEBUG_FS is not set
+CONFIG_USB_GADGET_STORAGE_NUM_BUFFERS=2
+CONFIG_USB_CONFIGFS=m
+CONFIG_USB_CONFIGFS_SERIAL=y
+CONFIG_USB_CONFIGFS_ACM=y
+CONFIG_USB_CONFIGFS_OBEX=y
+CONFIG_USB_CONFIGFS_NCM=y
+CONFIG_USB_CONFIGFS_ECM=y
+CONFIG_USB_CONFIGFS_ECM_SUBSET=y
+CONFIG_USB_CONFIGFS_RNDIS=y
+CONFIG_USB_CONFIGFS_EEM=y
+CONFIG_USB_CONFIGFS_PHONET=y
+CONFIG_USB_CONFIGFS_MASS_STORAGE=y
+CONFIG_USB_CONFIGFS_F_LB_SS=y
+CONFIG_USB_CONFIGFS_F_FS=y
+CONFIG_USB_CONFIGFS_F_UAC1=y
+CONFIG_USB_CONFIGFS_F_UAC2=y
+CONFIG_USB_CONFIGFS_F_MIDI=y
+CONFIG_USB_CONFIGFS_F_HID=y
+CONFIG_USB_CONFIGFS_F_UVC=y
+CONFIG_USB_CONFIGFS_F_PRINTER=y
+
+##
+## file: drivers/usb/gadget/legacy/Kconfig
+##
+CONFIG_USB_ETH=m
+CONFIG_USB_ETH_RNDIS=y
+CONFIG_USB_GADGETFS=m
+CONFIG_USB_FUNCTIONFS=m
+CONFIG_USB_FUNCTIONFS_ETH=y
+CONFIG_USB_FUNCTIONFS_RNDIS=y
+CONFIG_USB_FUNCTIONFS_GENERIC=y
+CONFIG_USB_G_SERIAL=m
+
+##
+## file: drivers/usb/gadget/udc/Kconfig
+##
+# CONFIG_USB_FUSB300 is not set
+# CONFIG_USB_FOTG210_UDC is not set
+# CONFIG_USB_GR_UDC is not set
+# CONFIG_USB_R8A66597 is not set
+# CONFIG_USB_PXA27X is not set
+# CONFIG_USB_MV_UDC is not set
+# CONFIG_USB_MV_U3D is not set
+# CONFIG_USB_M66592 is not set
+# CONFIG_USB_AMD5536UDC is not set
+# CONFIG_USB_NET2272 is not set
+CONFIG_USB_NET2280=m
+# CONFIG_USB_GOKU is not set
+# CONFIG_USB_GADGET_XILINX is not set
+CONFIG_USB_DUMMY_HCD=m
+
+##
+## file: drivers/usb/gadget/udc/bdc/Kconfig
+##
+# CONFIG_USB_BDC_UDC is not set
+
+##
+## file: drivers/usb/host/Kconfig
+##
+# CONFIG_USB_C67X00_HCD is not set
+CONFIG_USB_XHCI_HCD=m
+# CONFIG_USB_XHCI_DBGCAP is not set
+# CONFIG_USB_XHCI_PLATFORM is not set
+CONFIG_USB_EHCI_ROOT_HUB_TT=y
+CONFIG_USB_EHCI_TT_NEWSCHED=y
+# CONFIG_USB_EHCI_HCD_PLATFORM is not set
+# CONFIG_USB_OXU210HP_HCD is not set
+# CONFIG_USB_ISP116X_HCD is not set
+# CONFIG_USB_ISP1362_HCD is not set
+# CONFIG_USB_FOTG210_HCD is not set
+# CONFIG_USB_MAX3421_HCD is not set
+CONFIG_USB_OHCI_HCD_PCI=y
+# CONFIG_USB_OHCI_HCD_PLATFORM is not set
+CONFIG_USB_U132_HCD=m
+# CONFIG_USB_R8A66597_HCD is not set
+# CONFIG_USB_HCD_BCMA is not set
+# CONFIG_USB_HCD_SSB is not set
+# CONFIG_USB_HCD_TEST_MODE is not set
+
+##
+## file: drivers/usb/image/Kconfig
+##
+CONFIG_USB_MDC800=m
+CONFIG_USB_MICROTEK=m
+
+##
+## file: drivers/usb/isp1760/Kconfig
+##
+# CONFIG_USB_ISP1760 is not set
+
+##
+## file: drivers/usb/misc/Kconfig
+##
+CONFIG_USB_EMI62=m
+CONFIG_USB_EMI26=m
+CONFIG_USB_ADUTUX=m
+CONFIG_USB_SEVSEG=m
+CONFIG_USB_LEGOTOWER=m
+CONFIG_USB_LCD=m
+CONFIG_USB_CYPRESS_CY7C63=m
+CONFIG_USB_CYTHERM=m
+CONFIG_USB_IDMOUSE=m
+CONFIG_USB_FTDI_ELAN=m
+CONFIG_USB_APPLEDISPLAY=m
+CONFIG_APPLE_MFI_FASTCHARGE=m
+CONFIG_USB_LD=m
+CONFIG_USB_TRANCEVIBRATOR=m
+CONFIG_USB_IOWARRIOR=m
+CONFIG_USB_TEST=m
+CONFIG_USB_EHSET_TEST_FIXTURE=m
+CONFIG_USB_ISIGHTFW=m
+CONFIG_USB_YUREX=m
+# CONFIG_USB_HSIC_USB3503 is not set
+# CONFIG_USB_HSIC_USB4604 is not set
+# CONFIG_USB_LINK_LAYER_TEST is not set
+CONFIG_USB_CHAOSKEY=m
+
+##
+## file: drivers/usb/misc/sisusbvga/Kconfig
+##
+CONFIG_USB_SISUSBVGA=m
+CONFIG_USB_SISUSBVGA_CON=y
+
+##
+## file: drivers/usb/mon/Kconfig
+##
+CONFIG_USB_MON=y
+
+##
+## file: drivers/usb/musb/Kconfig
+##
+# CONFIG_USB_MUSB_HDRC is not set
+
+##
+## file: drivers/usb/phy/Kconfig
+##
+# CONFIG_AB8500_USB is not set
+# CONFIG_FSL_USB2_OTG is not set
+# CONFIG_ISP1301_OMAP is not set
+# CONFIG_NOP_USB_XCEIV is not set
+# CONFIG_AM335X_PHY_USB is not set
+# CONFIG_TWL6030_USB is not set
+# CONFIG_USB_GPIO_VBUS is not set
+# CONFIG_USB_ISP1301 is not set
+# CONFIG_USB_MV_OTG is not set
+# CONFIG_USB_MXS_PHY is not set
+# CONFIG_USB_ULPI is not set
+
+##
+## file: drivers/usb/renesas_usbhs/Kconfig
+##
+# CONFIG_USB_RENESAS_USBHS is not set
+
+##
+## file: drivers/usb/serial/Kconfig
+##
+CONFIG_USB_SERIAL=m
+CONFIG_USB_SERIAL_GENERIC=y
+CONFIG_USB_SERIAL_SIMPLE=m
+CONFIG_USB_SERIAL_AIRCABLE=m
+CONFIG_USB_SERIAL_ARK3116=m
+CONFIG_USB_SERIAL_BELKIN=m
+CONFIG_USB_SERIAL_CH341=m
+CONFIG_USB_SERIAL_WHITEHEAT=m
+CONFIG_USB_SERIAL_DIGI_ACCELEPORT=m
+CONFIG_USB_SERIAL_CP210X=m
+CONFIG_USB_SERIAL_CYPRESS_M8=m
+CONFIG_USB_SERIAL_EMPEG=m
+CONFIG_USB_SERIAL_FTDI_SIO=m
+CONFIG_USB_SERIAL_VISOR=m
+CONFIG_USB_SERIAL_IPAQ=m
+CONFIG_USB_SERIAL_IR=m
+CONFIG_USB_SERIAL_EDGEPORT=m
+CONFIG_USB_SERIAL_EDGEPORT_TI=m
+CONFIG_USB_SERIAL_F81232=m
+CONFIG_USB_SERIAL_F8153X=m
+CONFIG_USB_SERIAL_GARMIN=m
+CONFIG_USB_SERIAL_IPW=m
+CONFIG_USB_SERIAL_IUU=m
+CONFIG_USB_SERIAL_KEYSPAN_PDA=m
+CONFIG_USB_SERIAL_KEYSPAN=m
+CONFIG_USB_SERIAL_KLSI=m
+CONFIG_USB_SERIAL_KOBIL_SCT=m
+CONFIG_USB_SERIAL_MCT_U232=m
+CONFIG_USB_SERIAL_METRO=m
+CONFIG_USB_SERIAL_MOS7720=m
+CONFIG_USB_SERIAL_MOS7715_PARPORT=y
+CONFIG_USB_SERIAL_MOS7840=m
+CONFIG_USB_SERIAL_MXUPORT=m
+CONFIG_USB_SERIAL_NAVMAN=m
+CONFIG_USB_SERIAL_PL2303=m
+CONFIG_USB_SERIAL_OTI6858=m
+CONFIG_USB_SERIAL_QCAUX=m
+CONFIG_USB_SERIAL_QUALCOMM=m
+CONFIG_USB_SERIAL_SPCP8X5=m
+CONFIG_USB_SERIAL_SAFE=m
+# CONFIG_USB_SERIAL_SAFE_PADDED is not set
+CONFIG_USB_SERIAL_SIERRAWIRELESS=m
+CONFIG_USB_SERIAL_SYMBOL=m
+CONFIG_USB_SERIAL_TI=m
+CONFIG_USB_SERIAL_CYBERJACK=m
+CONFIG_USB_SERIAL_OPTION=m
+CONFIG_USB_SERIAL_OMNINET=m
+CONFIG_USB_SERIAL_OPTICON=m
+CONFIG_USB_SERIAL_XSENS_MT=m
+CONFIG_USB_SERIAL_WISHBONE=m
+CONFIG_USB_SERIAL_SSU100=m
+CONFIG_USB_SERIAL_QT2=m
+CONFIG_USB_SERIAL_UPD78F0730=m
+CONFIG_USB_SERIAL_XR=m
+CONFIG_USB_SERIAL_DEBUG=m
+
+##
+## file: drivers/usb/storage/Kconfig
+##
+CONFIG_USB_STORAGE=m
+# CONFIG_USB_STORAGE_DEBUG is not set
+CONFIG_USB_STORAGE_REALTEK=m
+CONFIG_REALTEK_AUTOPM=y
+CONFIG_USB_STORAGE_DATAFAB=m
+CONFIG_USB_STORAGE_FREECOM=m
+CONFIG_USB_STORAGE_ISD200=m
+CONFIG_USB_STORAGE_USBAT=m
+CONFIG_USB_STORAGE_SDDR09=m
+CONFIG_USB_STORAGE_SDDR55=m
+CONFIG_USB_STORAGE_JUMPSHOT=m
+CONFIG_USB_STORAGE_ALAUDA=m
+CONFIG_USB_STORAGE_ONETOUCH=m
+CONFIG_USB_STORAGE_KARMA=m
+CONFIG_USB_STORAGE_CYPRESS_ATACB=m
+CONFIG_USB_STORAGE_ENE_UB6250=m
+CONFIG_USB_UAS=m
+
+##
+## file: drivers/usb/typec/altmodes/Kconfig
+##
+CONFIG_TYPEC_DP_ALTMODE=m
+CONFIG_TYPEC_NVIDIA_ALTMODE=m
+
+##
+## file: drivers/usb/typec/ucsi/Kconfig
+##
+CONFIG_TYPEC_UCSI=m
+CONFIG_UCSI_ACPI=m
+
+##
+## file: drivers/usb/usbip/Kconfig
+##
+CONFIG_USBIP_CORE=m
+CONFIG_USBIP_VHCI_HCD=m
+CONFIG_USBIP_VHCI_HC_PORTS=15
+CONFIG_USBIP_VHCI_NR_HCS=8
+CONFIG_USBIP_HOST=m
+CONFIG_USBIP_VUDC=m
+# CONFIG_USBIP_DEBUG is not set
+
+##
+## file: drivers/vfio/Kconfig
+##
+# CONFIG_VFIO_NOIOMMU is not set
+
+##
+## file: drivers/vhost/Kconfig
+##
+CONFIG_VHOST_NET=m
+CONFIG_VHOST_SCSI=m
+CONFIG_VHOST_VSOCK=m
+# CONFIG_VHOST_CROSS_ENDIAN_LEGACY is not set
+
+##
+## file: drivers/video/backlight/Kconfig
+##
+# CONFIG_LCD_CLASS_DEVICE is not set
+CONFIG_BACKLIGHT_CLASS_DEVICE=y
+CONFIG_BACKLIGHT_PWM=m
+CONFIG_BACKLIGHT_APPLE=m
+# CONFIG_BACKLIGHT_QCOM_WLED is not set
+# CONFIG_BACKLIGHT_SAHARA is not set
+CONFIG_BACKLIGHT_WM831X=m
+# CONFIG_BACKLIGHT_ADP8860 is not set
+# CONFIG_BACKLIGHT_ADP8870 is not set
+# CONFIG_BACKLIGHT_LM3630A is not set
+# CONFIG_BACKLIGHT_LM3639 is not set
+# CONFIG_BACKLIGHT_LP855X is not set
+# CONFIG_BACKLIGHT_GPIO is not set
+# CONFIG_BACKLIGHT_LV5207LP is not set
+# CONFIG_BACKLIGHT_BD6107 is not set
+# CONFIG_BACKLIGHT_ARCXCNN is not set
+
+##
+## file: drivers/video/console/Kconfig
+##
+CONFIG_DUMMY_CONSOLE_COLUMNS=80
+CONFIG_DUMMY_CONSOLE_ROWS=25
+CONFIG_FRAMEBUFFER_CONSOLE=y
+# CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY is not set
+CONFIG_FRAMEBUFFER_CONSOLE_ROTATION=y
+#. This won't work nicely unless we also hide the boot menu
+# CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER is not set
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB=y
+CONFIG_FIRMWARE_EDID=y
+# CONFIG_FB_FOREIGN_ENDIAN is not set
+CONFIG_FB_ARC=m
+# CONFIG_FB_UVESA is not set
+# CONFIG_FB_OPENCORES is not set
+# CONFIG_FB_S1D13XXX is not set
+# CONFIG_FB_I740 is not set
+# CONFIG_FB_INTEL_DEBUG is not set
+# CONFIG_FB_INTEL_I2C is not set
+CONFIG_FB_S3=m
+CONFIG_FB_S3_DDC=y
+CONFIG_FB_VIA=m
+# CONFIG_FB_VIA_DIRECT_PROCFS is not set
+CONFIG_FB_VIA_X_COMPATIBILITY=y
+CONFIG_FB_3DFX=m
+# CONFIG_FB_3DFX_ACCEL is not set
+CONFIG_FB_3DFX_I2C=y
+CONFIG_FB_VT8623=m
+CONFIG_FB_ARK=m
+CONFIG_FB_PM3=m
+# CONFIG_FB_CARMINE is not set
+# CONFIG_FB_TMIO is not set
+CONFIG_FB_SM501=m
+CONFIG_FB_SMSCUFX=m
+CONFIG_FB_UDL=m
+# CONFIG_FB_IBM_GXT4500 is not set
+# CONFIG_FB_GOLDFISH is not set
+CONFIG_XEN_FBDEV_FRONTEND=y
+# CONFIG_FB_METRONOME is not set
+CONFIG_FB_MB862XX=m
+## choice: GDC variant
+CONFIG_FB_MB862XX_PCI_GDC=y
+## end choice
+CONFIG_FB_MB862XX_I2C=y
+# CONFIG_FB_BROADSHEET is not set
+# CONFIG_FB_SSD1307 is not set
+# CONFIG_FB_SM712 is not set
+
+##
+## file: drivers/video/logo/Kconfig
+##
+# CONFIG_LOGO is not set
+
+##
+## file: drivers/virt/Kconfig
+##
+CONFIG_VIRT_DRIVERS=y
+
+##
+## file: drivers/virtio/Kconfig
+##
+CONFIG_VIRTIO_PCI=m
+CONFIG_VIRTIO_PCI_LEGACY=y
+CONFIG_VIRTIO_PMEM=m
+CONFIG_VIRTIO_BALLOON=m
+CONFIG_VIRTIO_INPUT=m
+CONFIG_VIRTIO_MMIO=m
+# CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES is not set
+
+##
+## file: drivers/vme/Kconfig
+##
+# CONFIG_VME_BUS is not set
+
+##
+## file: drivers/w1/Kconfig
+##
+CONFIG_W1=m
+CONFIG_W1_CON=y
+
+##
+## file: drivers/w1/masters/Kconfig
+##
+# CONFIG_W1_MASTER_MATROX is not set
+CONFIG_W1_MASTER_DS2490=m
+CONFIG_W1_MASTER_DS2482=m
+# CONFIG_W1_MASTER_DS1WM is not set
+CONFIG_W1_MASTER_GPIO=m
+
+##
+## file: drivers/w1/slaves/Kconfig
+##
+CONFIG_W1_SLAVE_THERM=m
+CONFIG_W1_SLAVE_SMEM=m
+CONFIG_W1_SLAVE_DS2405=m
+CONFIG_W1_SLAVE_DS2408=m
+CONFIG_W1_SLAVE_DS2408_READBACK=y
+CONFIG_W1_SLAVE_DS2413=m
+CONFIG_W1_SLAVE_DS2406=m
+CONFIG_W1_SLAVE_DS2423=m
+CONFIG_W1_SLAVE_DS2805=m
+CONFIG_W1_SLAVE_DS2431=m
+CONFIG_W1_SLAVE_DS2433=m
+# CONFIG_W1_SLAVE_DS2433_CRC is not set
+CONFIG_W1_SLAVE_DS2438=m
+CONFIG_W1_SLAVE_DS2780=m
+CONFIG_W1_SLAVE_DS2781=m
+CONFIG_W1_SLAVE_DS28E04=m
+CONFIG_W1_SLAVE_DS28E17=m
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_WATCHDOG=y
+# CONFIG_WATCHDOG_NOWAYOUT is not set
+CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y
+CONFIG_WATCHDOG_SYSFS=y
+CONFIG_WATCHDOG_PRETIMEOUT_GOV=y
+CONFIG_WATCHDOG_PRETIMEOUT_GOV_NOOP=y
+CONFIG_WATCHDOG_PRETIMEOUT_GOV_PANIC=m
+## choice: Default Watchdog Pretimeout Governor
+CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_NOOP=y
+# CONFIG_WATCHDOG_PRETIMEOUT_DEFAULT_GOV_PANIC is not set
+## end choice
+CONFIG_SOFT_WATCHDOG=m
+# CONFIG_GPIO_WATCHDOG is not set
+CONFIG_WDAT_WDT=m
+CONFIG_WM831X_WATCHDOG=m
+CONFIG_WM8350_WATCHDOG=m
+# CONFIG_XILINX_WATCHDOG is not set
+# CONFIG_ZIIRAVE_WATCHDOG is not set
+# CONFIG_CADENCE_WATCHDOG is not set
+# CONFIG_DW_WATCHDOG is not set
+# CONFIG_MAX63XX_WATCHDOG is not set
+# CONFIG_EBC_C384_WDT is not set
+CONFIG_SBC_FITPC2_WATCHDOG=m
+CONFIG_ITCO_WDT=m
+CONFIG_ITCO_VENDOR_SUPPORT=y
+CONFIG_IT87_WDT=m
+CONFIG_PC87413_WDT=m
+CONFIG_SMSC_SCH311X_WDT=m
+CONFIG_SMSC37B787_WDT=m
+CONFIG_SBC_EPX_C3_WATCHDOG=m
+# CONFIG_BCM7038_WDT is not set
+# CONFIG_MEN_A21_WDT is not set
+CONFIG_XEN_WDT=m
+
+##
+## file: drivers/xen/Kconfig
+##
+CONFIG_XEN_BALLOON=y
+CONFIG_XEN_BALLOON_MEMORY_HOTPLUG=y
+CONFIG_XEN_SCRUB_PAGES_DEFAULT=y
+CONFIG_XEN_DEV_EVTCHN=m
+CONFIG_XEN_BACKEND=y
+CONFIG_XENFS=m
+CONFIG_XEN_COMPAT_XENFS=y
+CONFIG_XEN_SYS_HYPERVISOR=y
+CONFIG_XEN_GNTDEV=m
+CONFIG_XEN_GRANT_DEV_ALLOC=m
+CONFIG_XEN_PCIDEV_BACKEND=m
+CONFIG_XEN_SCSI_BACKEND=m
+CONFIG_XEN_MCE_LOG=y
+
+##
+## file: fs/Kconfig
+##
+CONFIG_FS_DAX=y
+CONFIG_FILE_LOCKING=y
+CONFIG_TMPFS=y
+CONFIG_TMPFS_POSIX_ACL=y
+CONFIG_TMPFS_INODE64=y
+CONFIG_HUGETLBFS=y
+CONFIG_MISC_FILESYSTEMS=y
+CONFIG_NETWORK_FILESYSTEMS=y
+
+##
+## file: fs/Kconfig.binfmt
+##
+CONFIG_BINFMT_ELF=y
+CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS=y
+CONFIG_BINFMT_SCRIPT=y
+# CONFIG_BINFMT_AOUT is not set
+CONFIG_BINFMT_MISC=m
+CONFIG_COREDUMP=y
+
+##
+## file: fs/9p/Kconfig
+##
+CONFIG_9P_FS=m
+CONFIG_9P_FSCACHE=y
+CONFIG_9P_FS_POSIX_ACL=y
+CONFIG_9P_FS_SECURITY=y
+
+##
+## file: fs/adfs/Kconfig
+##
+CONFIG_ADFS_FS=m
+# CONFIG_ADFS_FS_RW is not set
+
+##
+## file: fs/affs/Kconfig
+##
+CONFIG_AFFS_FS=m
+
+##
+## file: fs/afs/Kconfig
+##
+CONFIG_AFS_FS=m
+# CONFIG_AFS_DEBUG is not set
+CONFIG_AFS_FSCACHE=y
+
+##
+## file: fs/autofs/Kconfig
+##
+CONFIG_AUTOFS_FS=m
+
+##
+## file: fs/befs/Kconfig
+##
+CONFIG_BEFS_FS=m
+# CONFIG_BEFS_DEBUG is not set
+
+##
+## file: fs/bfs/Kconfig
+##
+CONFIG_BFS_FS=m
+
+##
+## file: fs/btrfs/Kconfig
+##
+CONFIG_BTRFS_FS=m
+CONFIG_BTRFS_FS_POSIX_ACL=y
+# CONFIG_BTRFS_FS_CHECK_INTEGRITY is not set
+# CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set
+# CONFIG_BTRFS_DEBUG is not set
+# CONFIG_BTRFS_ASSERT is not set
+
+##
+## file: fs/cachefiles/Kconfig
+##
+CONFIG_CACHEFILES=m
+# CONFIG_CACHEFILES_DEBUG is not set
+
+##
+## file: fs/ceph/Kconfig
+##
+CONFIG_CEPH_FS=m
+CONFIG_CEPH_FSCACHE=y
+CONFIG_CEPH_FS_POSIX_ACL=y
+
+##
+## file: fs/cifs/Kconfig
+##
+CONFIG_CIFS=m
+CONFIG_CIFS_UPCALL=y
+CONFIG_CIFS_XATTR=y
+CONFIG_CIFS_POSIX=y
+CONFIG_CIFS_DEBUG=y
+# CONFIG_CIFS_DEBUG2 is not set
+CONFIG_CIFS_DFS_UPCALL=y
+CONFIG_CIFS_NFSD_EXPORT=y
+CONFIG_CIFS_FSCACHE=y
+
+##
+## file: fs/coda/Kconfig
+##
+CONFIG_CODA_FS=m
+
+##
+## file: fs/configfs/Kconfig
+##
+CONFIG_CONFIGFS_FS=m
+
+##
+## file: fs/cramfs/Kconfig
+##
+# CONFIG_CRAMFS is not set
+
+##
+## file: fs/crypto/Kconfig
+##
+CONFIG_FS_ENCRYPTION=y
+
+##
+## file: fs/dlm/Kconfig
+##
+CONFIG_DLM=m
+CONFIG_DLM_DEBUG=y
+
+##
+## file: fs/ecryptfs/Kconfig
+##
+CONFIG_ECRYPT_FS=m
+CONFIG_ECRYPT_FS_MESSAGING=y
+
+##
+## file: fs/efivarfs/Kconfig
+##
+CONFIG_EFIVAR_FS=m
+
+##
+## file: fs/efs/Kconfig
+##
+CONFIG_EFS_FS=m
+
+##
+## file: fs/erofs/Kconfig
+##
+CONFIG_EROFS_FS=m
+# CONFIG_EROFS_FS_DEBUG is not set
+CONFIG_EROFS_FS_XATTR=y
+CONFIG_EROFS_FS_POSIX_ACL=y
+CONFIG_EROFS_FS_SECURITY=y
+CONFIG_EROFS_FS_ZIP=y
+
+##
+## file: fs/exfat/Kconfig
+##
+CONFIG_EXFAT_FS=m
+CONFIG_EXFAT_DEFAULT_IOCHARSET="utf8"
+
+##
+## file: fs/ext2/Kconfig
+##
+# CONFIG_EXT2_FS is not set
+
+##
+## file: fs/ext4/Kconfig
+##
+# CONFIG_EXT3_FS is not set
+CONFIG_EXT4_FS=m
+CONFIG_EXT4_USE_FOR_EXT2=y
+CONFIG_EXT4_FS_POSIX_ACL=y
+CONFIG_EXT4_FS_SECURITY=y
+# CONFIG_EXT4_DEBUG is not set
+
+##
+## file: fs/f2fs/Kconfig
+##
+CONFIG_F2FS_FS=m
+CONFIG_F2FS_STAT_FS=y
+CONFIG_F2FS_FS_XATTR=y
+CONFIG_F2FS_FS_POSIX_ACL=y
+CONFIG_F2FS_FS_SECURITY=y
+# CONFIG_F2FS_FAULT_INJECTION is not set
+CONFIG_F2FS_FS_COMPRESSION=y
+CONFIG_F2FS_FS_LZO=y
+CONFIG_F2FS_FS_LZORLE=y
+CONFIG_F2FS_FS_LZ4=y
+CONFIG_F2FS_FS_ZSTD=y
+
+##
+## file: fs/fat/Kconfig
+##
+CONFIG_MSDOS_FS=m
+CONFIG_VFAT_FS=m
+CONFIG_FAT_DEFAULT_CODEPAGE=437
+#. Mitigate the lack of UTF-8 case-folding which makes FAT name lookup
+#. inconsistent (#833238).  This combination enables case-folding the
+#. ASCII subset while still encoding/decoding as UTF-8.
+CONFIG_FAT_DEFAULT_IOCHARSET="ascii"
+CONFIG_FAT_DEFAULT_UTF8=y
+
+##
+## file: fs/freevxfs/Kconfig
+##
+CONFIG_VXFS_FS=m
+
+##
+## file: fs/fscache/Kconfig
+##
+CONFIG_FSCACHE=m
+CONFIG_FSCACHE_STATS=y
+# CONFIG_FSCACHE_DEBUG is not set
+
+##
+## file: fs/fuse/Kconfig
+##
+CONFIG_FUSE_FS=m
+CONFIG_CUSE=m
+CONFIG_VIRTIO_FS=m
+
+##
+## file: fs/gfs2/Kconfig
+##
+CONFIG_GFS2_FS=m
+CONFIG_GFS2_FS_LOCKING_DLM=y
+
+##
+## file: fs/hfs/Kconfig
+##
+CONFIG_HFS_FS=m
+
+##
+## file: fs/hfsplus/Kconfig
+##
+CONFIG_HFSPLUS_FS=m
+
+##
+## file: fs/hpfs/Kconfig
+##
+CONFIG_HPFS_FS=m
+
+##
+## file: fs/isofs/Kconfig
+##
+CONFIG_ISO9660_FS=m
+CONFIG_JOLIET=y
+CONFIG_ZISOFS=y
+
+##
+## file: fs/jbd2/Kconfig
+##
+# CONFIG_JBD2_DEBUG is not set
+
+##
+## file: fs/jffs2/Kconfig
+##
+CONFIG_JFFS2_FS=m
+CONFIG_JFFS2_FS_DEBUG=0
+CONFIG_JFFS2_FS_WRITEBUFFER=y
+# CONFIG_JFFS2_FS_WBUF_VERIFY is not set
+CONFIG_JFFS2_SUMMARY=y
+CONFIG_JFFS2_FS_XATTR=y
+CONFIG_JFFS2_FS_POSIX_ACL=y
+CONFIG_JFFS2_FS_SECURITY=y
+CONFIG_JFFS2_COMPRESSION_OPTIONS=y
+CONFIG_JFFS2_ZLIB=y
+CONFIG_JFFS2_LZO=y
+CONFIG_JFFS2_RTIME=y
+# CONFIG_JFFS2_RUBIN is not set
+## choice: JFFS2 default compression mode
+# CONFIG_JFFS2_CMODE_NONE is not set
+CONFIG_JFFS2_CMODE_PRIORITY=y
+# CONFIG_JFFS2_CMODE_SIZE is not set
+# CONFIG_JFFS2_CMODE_FAVOURLZO is not set
+## end choice
+
+##
+## file: fs/jfs/Kconfig
+##
+CONFIG_JFS_FS=m
+CONFIG_JFS_POSIX_ACL=y
+CONFIG_JFS_SECURITY=y
+# CONFIG_JFS_DEBUG is not set
+# CONFIG_JFS_STATISTICS is not set
+
+##
+## file: fs/ksmbd/Kconfig
+##
+CONFIG_SMB_SERVER=m
+
+##
+## file: fs/minix/Kconfig
+##
+CONFIG_MINIX_FS=m
+
+##
+## file: fs/nfs/Kconfig
+##
+CONFIG_NFS_FS=m
+CONFIG_NFS_V2=y
+CONFIG_NFS_V3=y
+CONFIG_NFS_V3_ACL=y
+CONFIG_NFS_V4=y
+CONFIG_NFS_SWAP=y
+CONFIG_NFS_V4_1=y
+CONFIG_NFS_V4_2=y
+CONFIG_NFS_V4_1_IMPLEMENTATION_ID_DOMAIN="kernel.org"
+# CONFIG_NFS_V4_1_MIGRATION is not set
+CONFIG_NFS_FSCACHE=y
+# CONFIG_NFS_USE_LEGACY_DNS is not set
+
+##
+## file: fs/nfsd/Kconfig
+##
+CONFIG_NFSD=m
+CONFIG_NFSD_V3=y
+CONFIG_NFSD_V3_ACL=y
+CONFIG_NFSD_V4=y
+CONFIG_NFSD_BLOCKLAYOUT=y
+CONFIG_NFSD_V4_SECURITY_LABEL=y
+
+##
+## file: fs/nilfs2/Kconfig
+##
+CONFIG_NILFS2_FS=m
+
+##
+## file: fs/nls/Kconfig
+##
+CONFIG_NLS=y
+CONFIG_NLS_DEFAULT="utf8"
+CONFIG_NLS_CODEPAGE_437=m
+CONFIG_NLS_CODEPAGE_737=m
+CONFIG_NLS_CODEPAGE_775=m
+CONFIG_NLS_CODEPAGE_850=m
+CONFIG_NLS_CODEPAGE_852=m
+CONFIG_NLS_CODEPAGE_855=m
+CONFIG_NLS_CODEPAGE_857=m
+CONFIG_NLS_CODEPAGE_860=m
+CONFIG_NLS_CODEPAGE_861=m
+CONFIG_NLS_CODEPAGE_862=m
+CONFIG_NLS_CODEPAGE_863=m
+CONFIG_NLS_CODEPAGE_864=m
+CONFIG_NLS_CODEPAGE_865=m
+CONFIG_NLS_CODEPAGE_866=m
+CONFIG_NLS_CODEPAGE_869=m
+CONFIG_NLS_CODEPAGE_936=m
+CONFIG_NLS_CODEPAGE_950=m
+CONFIG_NLS_CODEPAGE_932=m
+CONFIG_NLS_CODEPAGE_949=m
+CONFIG_NLS_CODEPAGE_874=m
+CONFIG_NLS_ISO8859_8=m
+CONFIG_NLS_CODEPAGE_1250=m
+CONFIG_NLS_CODEPAGE_1251=m
+CONFIG_NLS_ASCII=m
+CONFIG_NLS_ISO8859_1=m
+CONFIG_NLS_ISO8859_2=m
+CONFIG_NLS_ISO8859_3=m
+CONFIG_NLS_ISO8859_4=m
+CONFIG_NLS_ISO8859_5=m
+CONFIG_NLS_ISO8859_6=m
+CONFIG_NLS_ISO8859_7=m
+CONFIG_NLS_ISO8859_9=m
+CONFIG_NLS_ISO8859_13=m
+CONFIG_NLS_ISO8859_14=m
+CONFIG_NLS_ISO8859_15=m
+CONFIG_NLS_KOI8_R=m
+CONFIG_NLS_KOI8_U=m
+CONFIG_NLS_MAC_ROMAN=m
+CONFIG_NLS_MAC_CELTIC=m
+CONFIG_NLS_MAC_CENTEURO=m
+CONFIG_NLS_MAC_CROATIAN=m
+CONFIG_NLS_MAC_CYRILLIC=m
+CONFIG_NLS_MAC_GAELIC=m
+CONFIG_NLS_MAC_GREEK=m
+CONFIG_NLS_MAC_ICELAND=m
+CONFIG_NLS_MAC_INUIT=m
+CONFIG_NLS_MAC_ROMANIAN=m
+CONFIG_NLS_MAC_TURKISH=m
+CONFIG_NLS_UTF8=m
+
+##
+## file: fs/notify/dnotify/Kconfig
+##
+CONFIG_DNOTIFY=y
+
+##
+## file: fs/notify/fanotify/Kconfig
+##
+CONFIG_FANOTIFY=y
+CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y
+
+##
+## file: fs/notify/inotify/Kconfig
+##
+CONFIG_INOTIFY_USER=y
+
+##
+## file: fs/ntfs/Kconfig
+##
+# CONFIG_NTFS_FS is not set
+
+##
+## file: fs/ocfs2/Kconfig
+##
+CONFIG_OCFS2_FS=m
+CONFIG_OCFS2_FS_O2CB=m
+CONFIG_OCFS2_FS_USERSPACE_CLUSTER=m
+CONFIG_OCFS2_FS_STATS=y
+CONFIG_OCFS2_DEBUG_MASKLOG=y
+# CONFIG_OCFS2_DEBUG_FS is not set
+
+##
+## file: fs/omfs/Kconfig
+##
+CONFIG_OMFS_FS=m
+
+##
+## file: fs/orangefs/Kconfig
+##
+CONFIG_ORANGEFS_FS=m
+
+##
+## file: fs/overlayfs/Kconfig
+##
+CONFIG_OVERLAY_FS=m
+
+##
+## file: fs/proc/Kconfig
+##
+CONFIG_PROC_FS=y
+CONFIG_PROC_KCORE=y
+CONFIG_PROC_VMCORE=y
+CONFIG_PROC_SYSCTL=y
+CONFIG_PROC_PAGE_MONITOR=y
+
+##
+## file: fs/pstore/Kconfig
+##
+# CONFIG_PSTORE_CONSOLE is not set
+# CONFIG_PSTORE_PMSG is not set
+# CONFIG_PSTORE_FTRACE is not set
+CONFIG_PSTORE_RAM=m
+CONFIG_PSTORE_BLK=m
+
+##
+## file: fs/qnx4/Kconfig
+##
+CONFIG_QNX4FS_FS=m
+
+##
+## file: fs/qnx6/Kconfig
+##
+CONFIG_QNX6FS_FS=m
+# CONFIG_QNX6FS_DEBUG is not set
+
+##
+## file: fs/quota/Kconfig
+##
+CONFIG_QUOTA=y
+CONFIG_QUOTA_NETLINK_INTERFACE=y
+CONFIG_PRINT_QUOTA_WARNING=y
+# CONFIG_QUOTA_DEBUG is not set
+CONFIG_QFMT_V1=m
+CONFIG_QFMT_V2=m
+
+##
+## file: fs/reiserfs/Kconfig
+##
+CONFIG_REISERFS_FS=m
+# CONFIG_REISERFS_CHECK is not set
+# CONFIG_REISERFS_PROC_INFO is not set
+CONFIG_REISERFS_FS_XATTR=y
+CONFIG_REISERFS_FS_POSIX_ACL=y
+CONFIG_REISERFS_FS_SECURITY=y
+
+##
+## file: fs/romfs/Kconfig
+##
+CONFIG_ROMFS_FS=m
+## choice: RomFS backing stores
+# CONFIG_ROMFS_BACKED_BY_BLOCK is not set
+# CONFIG_ROMFS_BACKED_BY_MTD is not set
+CONFIG_ROMFS_BACKED_BY_BOTH=y
+## end choice
+
+##
+## file: fs/squashfs/Kconfig
+##
+CONFIG_SQUASHFS=m
+## choice: File decompression options
+CONFIG_SQUASHFS_FILE_DIRECT=y
+## end choice
+## choice: Decompressor parallelisation options
+CONFIG_SQUASHFS_DECOMP_MULTI_PERCPU=y
+## end choice
+CONFIG_SQUASHFS_XATTR=y
+CONFIG_SQUASHFS_ZLIB=y
+CONFIG_SQUASHFS_LZ4=y
+CONFIG_SQUASHFS_LZO=y
+CONFIG_SQUASHFS_XZ=y
+CONFIG_SQUASHFS_ZSTD=y
+# CONFIG_SQUASHFS_4K_DEVBLK_SIZE is not set
+# CONFIG_SQUASHFS_EMBEDDED is not set
+
+##
+## file: fs/sysfs/Kconfig
+##
+CONFIG_SYSFS=y
+
+##
+## file: fs/sysv/Kconfig
+##
+CONFIG_SYSV_FS=m
+
+##
+## file: fs/ubifs/Kconfig
+##
+CONFIG_UBIFS_FS=m
+CONFIG_UBIFS_FS_ADVANCED_COMPR=y
+CONFIG_UBIFS_FS_LZO=y
+CONFIG_UBIFS_FS_ZLIB=y
+
+##
+## file: fs/udf/Kconfig
+##
+CONFIG_UDF_FS=m
+
+##
+## file: fs/ufs/Kconfig
+##
+CONFIG_UFS_FS=m
+# CONFIG_UFS_FS_WRITE is not set
+# CONFIG_UFS_DEBUG is not set
+
+##
+## file: fs/unicode/Kconfig
+##
+CONFIG_UNICODE=y
+
+##
+## file: fs/verity/Kconfig
+##
+CONFIG_FS_VERITY=y
+CONFIG_FS_VERITY_BUILTIN_SIGNATURES=y
+
+##
+## file: fs/xfs/Kconfig
+##
+CONFIG_XFS_FS=m
+CONFIG_XFS_QUOTA=y
+CONFIG_XFS_POSIX_ACL=y
+CONFIG_XFS_RT=y
+# CONFIG_XFS_WARN is not set
+# CONFIG_XFS_DEBUG is not set
+
+##
+## file: fs/zonefs/Kconfig
+##
+CONFIG_ZONEFS_FS=m
+
+##
+## file: init/Kconfig
+##
+# CONFIG_COMPILE_TEST is not set
+CONFIG_LOCALVERSION=""
+# CONFIG_LOCALVERSION_AUTO is not set
+## choice: Kernel compression mode
+# CONFIG_KERNEL_GZIP is not set
+# CONFIG_KERNEL_BZIP2 is not set
+# CONFIG_KERNEL_LZMA is not set
+CONFIG_KERNEL_XZ=y
+# CONFIG_KERNEL_LZO is not set
+# CONFIG_KERNEL_LZ4 is not set
+## end choice
+CONFIG_DEFAULT_HOSTNAME="(none)"
+CONFIG_SWAP=y
+CONFIG_SYSVIPC=y
+CONFIG_POSIX_MQUEUE=y
+CONFIG_CROSS_MEMORY_ATTACH=y
+# CONFIG_USELIB is not set
+CONFIG_AUDIT=y
+## choice: Cputime accounting
+CONFIG_TICK_CPU_ACCOUNTING=y
+# CONFIG_VIRT_CPU_ACCOUNTING_NATIVE is not set
+# CONFIG_VIRT_CPU_ACCOUNTING_GEN is not set
+## end choice
+CONFIG_BSD_PROCESS_ACCT=y
+CONFIG_BSD_PROCESS_ACCT_V3=y
+CONFIG_TASKSTATS=y
+CONFIG_TASK_DELAY_ACCT=y
+CONFIG_TASK_XACCT=y
+CONFIG_TASK_IO_ACCOUNTING=y
+CONFIG_PSI=y
+# CONFIG_PSI_DEFAULT_DISABLED is not set
+CONFIG_CPU_ISOLATION=y
+# CONFIG_IKCONFIG is not set
+CONFIG_LOG_BUF_SHIFT=17
+CONFIG_LOG_CPU_MAX_BUF_SHIFT=12
+CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13
+CONFIG_NUMA_BALANCING=y
+CONFIG_NUMA_BALANCING_DEFAULT_ENABLED=y
+CONFIG_CGROUPS=y
+CONFIG_MEMCG=y
+CONFIG_BLK_CGROUP=y
+CONFIG_CGROUP_SCHED=y
+CONFIG_FAIR_GROUP_SCHED=y
+CONFIG_CFS_BANDWIDTH=y
+# CONFIG_RT_GROUP_SCHED is not set
+CONFIG_CGROUP_PIDS=y
+CONFIG_CGROUP_RDMA=y
+CONFIG_CGROUP_FREEZER=y
+CONFIG_CGROUP_HUGETLB=y
+CONFIG_CPUSETS=y
+CONFIG_PROC_PID_CPUSET=y
+CONFIG_CGROUP_DEVICE=y
+CONFIG_CGROUP_CPUACCT=y
+CONFIG_CGROUP_PERF=y
+CONFIG_CGROUP_BPF=y
+CONFIG_CGROUP_MISC=y
+# CONFIG_CGROUP_DEBUG is not set
+CONFIG_NAMESPACES=y
+CONFIG_UTS_NS=y
+CONFIG_IPC_NS=y
+CONFIG_USER_NS=y
+CONFIG_PID_NS=y
+CONFIG_NET_NS=y
+CONFIG_CHECKPOINT_RESTORE=y
+CONFIG_SCHED_AUTOGROUP=y
+# CONFIG_SYSFS_DEPRECATED is not set
+# CONFIG_SYSFS_DEPRECATED_V2 is not set
+CONFIG_RELAY=y
+CONFIG_BLK_DEV_INITRD=y
+## choice: Compiler optimization level
+CONFIG_CC_OPTIMIZE_FOR_PERFORMANCE=y
+# CONFIG_CC_OPTIMIZE_FOR_SIZE is not set
+## end choice
+#. Unfortunately some useful options are conditional on EXPERT
+CONFIG_EXPERT=y
+CONFIG_UID16=y
+CONFIG_MULTIUSER=y
+# CONFIG_SYSFS_SYSCALL is not set
+CONFIG_FHANDLE=y
+CONFIG_POSIX_TIMERS=y
+CONFIG_PRINTK=y
+CONFIG_BUG=y
+CONFIG_ELF_CORE=y
+CONFIG_PCSPKR_PLATFORM=y
+CONFIG_BASE_FULL=y
+CONFIG_FUTEX=y
+CONFIG_EPOLL=y
+CONFIG_SIGNALFD=y
+CONFIG_TIMERFD=y
+CONFIG_EVENTFD=y
+CONFIG_SHMEM=y
+CONFIG_AIO=y
+CONFIG_ADVISE_SYSCALLS=y
+CONFIG_MEMBARRIER=y
+CONFIG_KALLSYMS=y
+# CONFIG_KALLSYMS_ALL is not set
+CONFIG_USERFAULTFD=y
+CONFIG_RSEQ=y
+# CONFIG_DEBUG_RSEQ is not set
+# CONFIG_EMBEDDED is not set
+# CONFIG_PC104 is not set
+CONFIG_PERF_EVENTS=y
+# CONFIG_DEBUG_PERF_USE_VMALLOC is not set
+CONFIG_VM_EVENT_COUNTERS=y
+CONFIG_SLUB_DEBUG=y
+# CONFIG_COMPAT_BRK is not set
+## choice: Choose SLAB allocator
+# CONFIG_SLAB is not set
+CONFIG_SLUB=y
+# CONFIG_SLOB is not set
+## end choice
+CONFIG_SLAB_MERGE_DEFAULT=y
+CONFIG_SLAB_FREELIST_RANDOM=y
+CONFIG_SLAB_FREELIST_HARDENED=y
+CONFIG_SLUB_CPU_PARTIAL=y
+# CONFIG_MMAP_ALLOW_UNINITIALIZED is not set
+CONFIG_PROFILING=y
+CONFIG_MODULES=y
+CONFIG_MODULE_FORCE_LOAD=y
+CONFIG_MODULE_UNLOAD=y
+CONFIG_MODULE_FORCE_UNLOAD=y
+CONFIG_MODVERSIONS=y
+# CONFIG_MODULE_SRCVERSION_ALL is not set
+#. This is overridden if the [build]signed-code setting is enabled
+# CONFIG_MODULE_SIG is not set
+#. Signature validation is a run-time option
+# CONFIG_MODULE_SIG_FORCE is not set
+#. Signatures are added in linux-signed
+# CONFIG_MODULE_SIG_ALL is not set
+## choice: Which hash algorithm should modules be signed with?
+# CONFIG_MODULE_SIG_SHA1 is not set
+# CONFIG_MODULE_SIG_SHA224 is not set
+CONFIG_MODULE_SIG_SHA256=y
+# CONFIG_MODULE_SIG_SHA384 is not set
+# CONFIG_MODULE_SIG_SHA512 is not set
+## end choice
+# CONFIG_TRIM_UNUSED_KSYMS is not set
+
+##
+## file: kernel/Kconfig.hz
+##
+## choice: Timer frequency
+# CONFIG_HZ_100 is not set
+CONFIG_HZ_250=y
+# CONFIG_HZ_300 is not set
+# CONFIG_HZ_1000 is not set
+## end choice
+
+##
+## file: kernel/Kconfig.preempt
+##
+## choice: Preemption Model
+# CONFIG_PREEMPT_NONE is not set
+CONFIG_PREEMPT_VOLUNTARY=y
+# CONFIG_PREEMPT is not set
+## end choice
+
+##
+## file: kernel/bpf/Kconfig
+##
+CONFIG_BPF_SYSCALL=y
+CONFIG_BPF_JIT=y
+# CONFIG_BPF_JIT_ALWAYS_ON is not set
+#. Debian backport of 08389d888287 ("bpf: Add kconfig knob for disabling unpriv
+#. bpf by default") in 5.13-rc4 adds the configuration option to init/Kconfig
+#. and needs to be moved once rebasing to 5.13-rc4 and later.
+CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
+CONFIG_BPF_LSM=y
+
+##
+## file: kernel/dma/Kconfig
+##
+# CONFIG_DMA_API_DEBUG is not set
+
+##
+## file: kernel/gcov/Kconfig
+##
+# CONFIG_GCOV_KERNEL is not set
+
+##
+## file: kernel/irq/Kconfig
+##
+# CONFIG_GENERIC_IRQ_DEBUGFS is not set
+
+##
+## file: kernel/power/Kconfig
+##
+CONFIG_SUSPEND=y
+# CONFIG_SUSPEND_SKIP_SYNC is not set
+CONFIG_HIBERNATION=y
+CONFIG_PM_STD_PARTITION=""
+# CONFIG_PM_AUTOSLEEP is not set
+# CONFIG_PM_WAKELOCKS is not set
+CONFIG_PM=y
+CONFIG_PM_DEBUG=y
+CONFIG_PM_ADVANCED_DEBUG=y
+#. Could be enabled if it becomes configurable at run-time
+# CONFIG_DPM_WATCHDOG is not set
+# CONFIG_WQ_POWER_EFFICIENT_DEFAULT is not set
+CONFIG_ENERGY_MODEL=y
+
+##
+## file: kernel/rcu/Kconfig
+##
+# CONFIG_RCU_EXPERT is not set
+CONFIG_RCU_FANOUT=32
+CONFIG_RCU_FAST_NO_HZ=y
+
+##
+## file: kernel/rcu/Kconfig.debug
+##
+# CONFIG_RCU_TORTURE_TEST is not set
+CONFIG_RCU_CPU_STALL_TIMEOUT=21
+# CONFIG_RCU_TRACE is not set
+# CONFIG_RCU_EQS_DEBUG is not set
+
+##
+## file: kernel/time/Kconfig
+##
+## choice: Timer tick handling
+# CONFIG_HZ_PERIODIC is not set
+# CONFIG_NO_HZ_IDLE is not set
+CONFIG_NO_HZ_FULL=y
+## end choice
+#. Backward compatibility symbol
+# CONFIG_NO_HZ is not set
+CONFIG_HIGH_RES_TIMERS=y
+
+##
+## file: kernel/trace/Kconfig
+##
+CONFIG_FTRACE=y
+CONFIG_FUNCTION_TRACER=y
+CONFIG_FUNCTION_GRAPH_TRACER=y
+CONFIG_DYNAMIC_FTRACE=y
+# CONFIG_FUNCTION_PROFILER is not set
+CONFIG_STACK_TRACER=y
+# CONFIG_IRQSOFF_TRACER is not set
+# CONFIG_PREEMPT_TRACER is not set
+# CONFIG_SCHED_TRACER is not set
+CONFIG_FTRACE_SYSCALLS=y
+CONFIG_TRACER_SNAPSHOT=y
+# CONFIG_TRACER_SNAPSHOT_PER_CPU_SWAP is not set
+## choice: Branch Profiling
+CONFIG_BRANCH_PROFILE_NONE=y
+# CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
+# CONFIG_PROFILE_ALL_BRANCHES is not set
+## end choice
+CONFIG_BLK_DEV_IO_TRACE=y
+CONFIG_KPROBE_EVENTS=y
+CONFIG_UPROBE_EVENTS=y
+# CONFIG_TRACEPOINT_BENCHMARK is not set
+# CONFIG_RING_BUFFER_BENCHMARK is not set
+# CONFIG_TRACE_EVAL_MAP_FILE is not set
+# CONFIG_FTRACE_STARTUP_TEST is not set
+# CONFIG_RING_BUFFER_STARTUP_TEST is not set
+# CONFIG_MMIOTRACE_TEST is not set
+
+##
+## file: lib/Kconfig
+##
+CONFIG_CRC_CCITT=m
+CONFIG_CRC16=m
+CONFIG_CRC_T10DIF=m
+CONFIG_CRC_ITU_T=m
+CONFIG_CRC32=y
+# CONFIG_CRC32_SELFTEST is not set
+CONFIG_CRC7=m
+CONFIG_LIBCRC32C=m
+# CONFIG_CRC8 is not set
+# CONFIG_RANDOM32_SELFTEST is not set
+# CONFIG_GLOB_SELFTEST is not set
+
+##
+## file: lib/Kconfig.debug
+##
+CONFIG_PRINTK_TIME=y
+CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4
+CONFIG_BOOT_PRINTK_DELAY=y
+CONFIG_DYNAMIC_DEBUG=y
+CONFIG_DEBUG_BUGVERBOSE=y
+# CONFIG_DEBUG_INFO is not set
+# CONFIG_DEBUG_INFO_REDUCED is not set
+# CONFIG_DEBUG_INFO_SPLIT is not set
+# CONFIG_GDB_SCRIPTS is not set
+CONFIG_STRIP_ASM_SYMS=y
+# CONFIG_READABLE_ASM is not set
+# CONFIG_DEBUG_SECTION_MISMATCH is not set
+CONFIG_SECTION_MISMATCH_WARN_ONLY=y
+# CONFIG_DEBUG_FORCE_WEAK_PER_CPU is not set
+CONFIG_MAGIC_SYSRQ=y
+CONFIG_MAGIC_SYSRQ_DEFAULT_ENABLE=0x01b6
+CONFIG_DEBUG_FS=y
+CONFIG_DEBUG_KERNEL=y
+# CONFIG_DEBUG_OBJECTS is not set
+# CONFIG_SLUB_DEBUG_ON is not set
+# CONFIG_SLUB_STATS is not set
+# CONFIG_DEBUG_KMEMLEAK is not set
+CONFIG_SCHED_STACK_END_CHECK=y
+# CONFIG_DEBUG_VM is not set
+# CONFIG_DEBUG_VIRTUAL is not set
+CONFIG_DEBUG_MEMORY_INIT=y
+#. For use by selftests
+CONFIG_MEMORY_NOTIFIER_ERROR_INJECT=m
+# CONFIG_DEBUG_HIGHMEM is not set
+# CONFIG_PANIC_ON_OOPS is not set
+CONFIG_PANIC_TIMEOUT=0
+CONFIG_SOFTLOCKUP_DETECTOR=y
+# CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC is not set
+CONFIG_HARDLOCKUP_DETECTOR=y
+# CONFIG_BOOTPARAM_HARDLOCKUP_PANIC is not set
+CONFIG_DETECT_HUNG_TASK=y
+CONFIG_DEFAULT_HUNG_TASK_TIMEOUT=120
+# CONFIG_BOOTPARAM_HUNG_TASK_PANIC is not set
+CONFIG_SCHED_DEBUG=y
+CONFIG_SCHEDSTATS=y
+# CONFIG_DEBUG_TIMEKEEPING is not set
+CONFIG_DEBUG_PREEMPT=y
+# CONFIG_PROVE_LOCKING is not set
+# CONFIG_LOCK_STAT is not set
+# CONFIG_DEBUG_RT_MUTEXES is not set
+# CONFIG_DEBUG_SPINLOCK is not set
+# CONFIG_DEBUG_MUTEXES is not set
+# CONFIG_DEBUG_WW_MUTEX_SLOWPATH is not set
+# CONFIG_DEBUG_LOCK_ALLOC is not set
+# CONFIG_DEBUG_ATOMIC_SLEEP is not set
+# CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set
+# CONFIG_LOCK_TORTURE_TEST is not set
+# CONFIG_DEBUG_KOBJECT is not set
+CONFIG_DEBUG_LIST=y
+# CONFIG_DEBUG_PLIST is not set
+# CONFIG_DEBUG_SG is not set
+# CONFIG_DEBUG_NOTIFIERS is not set
+CONFIG_BUG_ON_DATA_CORRUPTION=y
+# CONFIG_DEBUG_CREDENTIALS is not set
+# CONFIG_DEBUG_WQ_FORCE_RR_CPU is not set
+# CONFIG_CPU_HOTPLUG_STATE_CONTROL is not set
+# CONFIG_LATENCYTOP is not set
+CONFIG_STRICT_DEVMEM=y
+CONFIG_IO_STRICT_DEVMEM=y
+#. For use by selftests
+CONFIG_NOTIFIER_ERROR_INJECTION=m
+CONFIG_PM_NOTIFIER_ERROR_INJECT=m
+# CONFIG_NETDEV_NOTIFIER_ERROR_INJECT is not set
+# CONFIG_FAULT_INJECTION is not set
+# CONFIG_KCOV is not set
+# CONFIG_LKDTM is not set
+# CONFIG_TEST_LIST_SORT is not set
+# CONFIG_KPROBES_SANITY_TEST is not set
+# CONFIG_BACKTRACE_SELF_TEST is not set
+# CONFIG_RBTREE_TEST is not set
+# CONFIG_INTERVAL_TREE_TEST is not set
+# CONFIG_PERCPU_TEST is not set
+# CONFIG_ATOMIC64_SELFTEST is not set
+#. Self-test
+# CONFIG_ASYNC_RAID6_TEST is not set
+# CONFIG_TEST_HEXDUMP is not set
+# CONFIG_TEST_STRING_HELPERS is not set
+# CONFIG_TEST_KSTRTOX is not set
+# CONFIG_TEST_PRINTF is not set
+# CONFIG_TEST_BITMAP is not set
+# CONFIG_TEST_UUID is not set
+# CONFIG_TEST_RHASHTABLE is not set
+# CONFIG_TEST_HASH is not set
+# CONFIG_TEST_LKM is not set
+#. For use by selftests
+CONFIG_TEST_USER_COPY=m
+CONFIG_TEST_BPF=m
+CONFIG_TEST_FIRMWARE=m
+# CONFIG_TEST_UDELAY is not set
+CONFIG_TEST_STATIC_KEYS=m
+
+##
+## file: lib/Kconfig.kasan
+##
+# CONFIG_KASAN is not set
+
+##
+## file: lib/Kconfig.kgdb
+##
+# CONFIG_KGDB is not set
+
+##
+## file: lib/Kconfig.ubsan
+##
+# CONFIG_UBSAN is not set
+
+##
+## file: lib/fonts/Kconfig
+##
+CONFIG_FONTS=y
+CONFIG_FONT_8x8=y
+CONFIG_FONT_8x16=y
+# CONFIG_FONT_6x11 is not set
+# CONFIG_FONT_7x14 is not set
+# CONFIG_FONT_PEARL_8x8 is not set
+# CONFIG_FONT_ACORN_8x8 is not set
+# CONFIG_FONT_MINI_4x6 is not set
+# CONFIG_FONT_6x10 is not set
+# CONFIG_FONT_10x18 is not set
+# CONFIG_FONT_SUN8x16 is not set
+# CONFIG_FONT_SUN12x22 is not set
+CONFIG_FONT_TER16x32=y
+
+##
+## file: lib/math/Kconfig
+##
+CONFIG_CORDIC=m
+
+##
+## file: lib/xz/Kconfig
+##
+#. These are enabled again by arch config, matching the defaults
+# CONFIG_XZ_DEC_X86 is not set
+# CONFIG_XZ_DEC_POWERPC is not set
+# CONFIG_XZ_DEC_IA64 is not set
+# CONFIG_XZ_DEC_ARM is not set
+# CONFIG_XZ_DEC_ARMTHUMB is not set
+# CONFIG_XZ_DEC_SPARC is not set
+# CONFIG_XZ_DEC_TEST is not set
+
+##
+## file: mm/Kconfig
+##
+CONFIG_MEMORY_HOTPLUG=y
+# CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE is not set
+CONFIG_MEMORY_HOTREMOVE=y
+CONFIG_BALLOON_COMPACTION=y
+CONFIG_COMPACTION=y
+CONFIG_MIGRATION=y
+CONFIG_BOUNCE=y
+CONFIG_KSM=y
+CONFIG_DEFAULT_MMAP_MIN_ADDR=4096
+CONFIG_MEMORY_FAILURE=y
+CONFIG_HWPOISON_INJECT=m
+CONFIG_TRANSPARENT_HUGEPAGE=y
+## choice: Transparent Hugepage Support sysfs defaults
+CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS=y
+# CONFIG_TRANSPARENT_HUGEPAGE_MADVISE is not set
+## end choice
+# CONFIG_CLEANCACHE is not set
+CONFIG_FRONTSWAP=y
+# CONFIG_CMA is not set
+CONFIG_MEM_SOFT_DIRTY=y
+CONFIG_ZSWAP=y
+CONFIG_ZBUD=y
+CONFIG_Z3FOLD=m
+CONFIG_ZSMALLOC=m
+# CONFIG_ZSMALLOC_STAT is not set
+CONFIG_DEFERRED_STRUCT_PAGE_INIT=y
+# CONFIG_IDLE_PAGE_TRACKING is not set
+# CONFIG_PERCPU_STATS is not set
+
+##
+## file: mm/Kconfig.debug
+##
+CONFIG_PAGE_EXTENSION=y
+# CONFIG_DEBUG_PAGEALLOC is not set
+# CONFIG_PAGE_OWNER is not set
+CONFIG_PAGE_POISONING=y
+# CONFIG_DEBUG_PAGE_REF is not set
+# CONFIG_DEBUG_RODATA_TEST is not set
+# CONFIG_PTDUMP_DEBUGFS is not set
+
+##
+## file: net/Kconfig
+##
+CONFIG_NET=y
+CONFIG_INET=y
+CONFIG_NETWORK_SECMARK=y
+CONFIG_NETWORK_PHY_TIMESTAMPING=y
+CONFIG_NETFILTER=y
+CONFIG_NETFILTER_ADVANCED=y
+CONFIG_BRIDGE_NETFILTER=y
+CONFIG_CGROUP_NET_PRIO=y
+CONFIG_BPF_STREAM_PARSER=y
+CONFIG_NET_PKTGEN=m
+CONFIG_NET_DROP_MONITOR=m
+CONFIG_WIRELESS=y
+CONFIG_LWTUNNEL=y
+CONFIG_LWTUNNEL_BPF=y
+CONFIG_FAILOVER=m
+
+##
+## file: net/6lowpan/Kconfig
+##
+CONFIG_6LOWPAN=m
+# CONFIG_6LOWPAN_DEBUGFS is not set
+CONFIG_6LOWPAN_NHC=m
+CONFIG_6LOWPAN_NHC_DEST=m
+CONFIG_6LOWPAN_NHC_FRAGMENT=m
+CONFIG_6LOWPAN_NHC_HOP=m
+CONFIG_6LOWPAN_NHC_IPV6=m
+CONFIG_6LOWPAN_NHC_MOBILITY=m
+CONFIG_6LOWPAN_NHC_ROUTING=m
+CONFIG_6LOWPAN_NHC_UDP=m
+CONFIG_6LOWPAN_GHC_EXT_HDR_HOP=m
+CONFIG_6LOWPAN_GHC_UDP=m
+CONFIG_6LOWPAN_GHC_ICMPV6=m
+CONFIG_6LOWPAN_GHC_EXT_HDR_DEST=m
+CONFIG_6LOWPAN_GHC_EXT_HDR_FRAG=m
+CONFIG_6LOWPAN_GHC_EXT_HDR_ROUTE=m
+
+##
+## file: net/8021q/Kconfig
+##
+CONFIG_VLAN_8021Q=m
+CONFIG_VLAN_8021Q_GVRP=y
+CONFIG_VLAN_8021Q_MVRP=y
+
+##
+## file: net/9p/Kconfig
+##
+CONFIG_NET_9P=m
+CONFIG_NET_9P_VIRTIO=m
+CONFIG_NET_9P_XEN=m
+CONFIG_NET_9P_RDMA=m
+# CONFIG_NET_9P_DEBUG is not set
+
+##
+## file: net/atm/Kconfig
+##
+CONFIG_ATM=m
+CONFIG_ATM_CLIP=m
+# CONFIG_ATM_CLIP_NO_ICMP is not set
+CONFIG_ATM_LANE=m
+CONFIG_ATM_MPOA=m
+CONFIG_ATM_BR2684=m
+# CONFIG_ATM_BR2684_IPFILTER is not set
+
+##
+## file: net/ax25/Kconfig
+##
+CONFIG_HAMRADIO=y
+CONFIG_AX25=m
+CONFIG_AX25_DAMA_SLAVE=y
+CONFIG_NETROM=m
+CONFIG_ROSE=m
+
+##
+## file: net/batman-adv/Kconfig
+##
+CONFIG_BATMAN_ADV=m
+CONFIG_BATMAN_ADV_BATMAN_V=y
+CONFIG_BATMAN_ADV_BLA=y
+CONFIG_BATMAN_ADV_DAT=y
+CONFIG_BATMAN_ADV_NC=y
+CONFIG_BATMAN_ADV_MCAST=y
+# CONFIG_BATMAN_ADV_DEBUG is not set
+
+##
+## file: net/bluetooth/Kconfig
+##
+CONFIG_BT=m
+CONFIG_BT_BREDR=y
+CONFIG_BT_HS=y
+CONFIG_BT_LE=y
+CONFIG_BT_6LOWPAN=m
+CONFIG_BT_LEDS=y
+CONFIG_BT_DEBUGFS=y
+# CONFIG_BT_SELFTEST is not set
+
+##
+## file: net/bluetooth/bnep/Kconfig
+##
+CONFIG_BT_BNEP=m
+CONFIG_BT_BNEP_MC_FILTER=y
+CONFIG_BT_BNEP_PROTO_FILTER=y
+
+##
+## file: net/bluetooth/cmtp/Kconfig
+##
+CONFIG_BT_CMTP=m
+
+##
+## file: net/bluetooth/hidp/Kconfig
+##
+CONFIG_BT_HIDP=m
+
+##
+## file: net/bluetooth/rfcomm/Kconfig
+##
+CONFIG_BT_RFCOMM=m
+CONFIG_BT_RFCOMM_TTY=y
+
+##
+## file: net/bpfilter/Kconfig
+##
+# CONFIG_BPFILTER is not set
+
+##
+## file: net/bridge/Kconfig
+##
+CONFIG_BRIDGE=m
+CONFIG_BRIDGE_IGMP_SNOOPING=y
+CONFIG_BRIDGE_VLAN_FILTERING=y
+
+##
+## file: net/bridge/netfilter/Kconfig
+##
+CONFIG_NF_TABLES_BRIDGE=y
+CONFIG_NFT_BRIDGE_META=m
+CONFIG_NFT_BRIDGE_REJECT=m
+CONFIG_NF_CONNTRACK_BRIDGE=m
+CONFIG_BRIDGE_NF_EBTABLES=m
+CONFIG_BRIDGE_EBT_BROUTE=m
+CONFIG_BRIDGE_EBT_T_FILTER=m
+CONFIG_BRIDGE_EBT_T_NAT=m
+CONFIG_BRIDGE_EBT_802_3=m
+CONFIG_BRIDGE_EBT_AMONG=m
+CONFIG_BRIDGE_EBT_ARP=m
+CONFIG_BRIDGE_EBT_IP=m
+CONFIG_BRIDGE_EBT_IP6=m
+CONFIG_BRIDGE_EBT_LIMIT=m
+CONFIG_BRIDGE_EBT_MARK=m
+CONFIG_BRIDGE_EBT_PKTTYPE=m
+CONFIG_BRIDGE_EBT_STP=m
+CONFIG_BRIDGE_EBT_VLAN=m
+CONFIG_BRIDGE_EBT_ARPREPLY=m
+CONFIG_BRIDGE_EBT_DNAT=m
+CONFIG_BRIDGE_EBT_MARK_T=m
+CONFIG_BRIDGE_EBT_REDIRECT=m
+CONFIG_BRIDGE_EBT_SNAT=m
+CONFIG_BRIDGE_EBT_LOG=m
+CONFIG_BRIDGE_EBT_NFLOG=m
+
+##
+## file: net/caif/Kconfig
+##
+# CONFIG_CAIF is not set
+
+##
+## file: net/can/Kconfig
+##
+CONFIG_CAN=m
+CONFIG_CAN_RAW=m
+CONFIG_CAN_BCM=m
+CONFIG_CAN_GW=m
+CONFIG_CAN_ISOTP=m
+
+##
+## file: net/can/j1939/Kconfig
+##
+CONFIG_CAN_J1939=m
+
+##
+## file: net/ceph/Kconfig
+##
+CONFIG_CEPH_LIB=m
+# CONFIG_CEPH_LIB_PRETTYDEBUG is not set
+# CONFIG_CEPH_LIB_USE_DNS_RESOLVER is not set
+
+##
+## file: net/dcb/Kconfig
+##
+CONFIG_DCB=y
+
+##
+## file: net/dccp/Kconfig
+##
+CONFIG_IP_DCCP=m
+# CONFIG_IP_DCCP_DEBUG is not set
+
+##
+## file: net/dccp/ccids/Kconfig
+##
+# CONFIG_IP_DCCP_CCID2_DEBUG is not set
+CONFIG_IP_DCCP_CCID3=y
+# CONFIG_IP_DCCP_CCID3_DEBUG is not set
+
+##
+## file: net/decnet/Kconfig
+##
+# CONFIG_DECNET is not set
+
+##
+## file: net/dns_resolver/Kconfig
+##
+CONFIG_DNS_RESOLVER=m
+
+##
+## file: net/dsa/Kconfig
+##
+# CONFIG_NET_DSA is not set
+
+##
+## file: net/hsr/Kconfig
+##
+# CONFIG_HSR is not set
+
+##
+## file: net/ieee802154/Kconfig
+##
+CONFIG_IEEE802154=m
+# CONFIG_IEEE802154_NL802154_EXPERIMENTAL is not set
+CONFIG_IEEE802154_SOCKET=m
+
+##
+## file: net/ieee802154/6lowpan/Kconfig
+##
+CONFIG_IEEE802154_6LOWPAN=m
+
+##
+## file: net/ife/Kconfig
+##
+CONFIG_NET_IFE=m
+
+##
+## file: net/ipv4/Kconfig
+##
+CONFIG_IP_MULTICAST=y
+CONFIG_IP_ADVANCED_ROUTER=y
+CONFIG_IP_FIB_TRIE_STATS=y
+CONFIG_IP_MULTIPLE_TABLES=y
+CONFIG_IP_ROUTE_MULTIPATH=y
+CONFIG_IP_ROUTE_VERBOSE=y
+# CONFIG_IP_PNP is not set
+CONFIG_NET_IPIP=m
+CONFIG_NET_IPGRE_DEMUX=m
+CONFIG_NET_IPGRE=m
+CONFIG_NET_IPGRE_BROADCAST=y
+CONFIG_IP_MROUTE=y
+CONFIG_IP_MROUTE_MULTIPLE_TABLES=y
+CONFIG_IP_PIMSM_V1=y
+CONFIG_IP_PIMSM_V2=y
+CONFIG_SYN_COOKIES=y
+CONFIG_NET_IPVTI=m
+CONFIG_NET_FOU=m
+CONFIG_NET_FOU_IP_TUNNELS=y
+CONFIG_INET_AH=m
+CONFIG_INET_ESP=m
+CONFIG_INET_ESP_OFFLOAD=m
+CONFIG_INET_IPCOMP=m
+CONFIG_INET_DIAG=m
+CONFIG_INET_UDP_DIAG=m
+CONFIG_INET_RAW_DIAG=m
+CONFIG_INET_DIAG_DESTROY=y
+CONFIG_TCP_CONG_ADVANCED=y
+CONFIG_TCP_CONG_BIC=m
+CONFIG_TCP_CONG_CUBIC=y
+CONFIG_TCP_CONG_WESTWOOD=m
+CONFIG_TCP_CONG_HTCP=m
+CONFIG_TCP_CONG_HSTCP=m
+CONFIG_TCP_CONG_HYBLA=m
+CONFIG_TCP_CONG_VEGAS=m
+CONFIG_TCP_CONG_NV=m
+CONFIG_TCP_CONG_SCALABLE=m
+CONFIG_TCP_CONG_LP=m
+CONFIG_TCP_CONG_VENO=m
+CONFIG_TCP_CONG_YEAH=m
+CONFIG_TCP_CONG_ILLINOIS=m
+CONFIG_TCP_CONG_DCTCP=m
+CONFIG_TCP_CONG_CDG=m
+CONFIG_TCP_CONG_BBR=m
+## choice: Default TCP congestion control
+# CONFIG_DEFAULT_BIC is not set
+CONFIG_DEFAULT_CUBIC=y
+# CONFIG_DEFAULT_HTCP is not set
+# CONFIG_DEFAULT_VEGAS is not set
+# CONFIG_DEFAULT_WESTWOOD is not set
+# CONFIG_DEFAULT_DCTCP is not set
+# CONFIG_DEFAULT_RENO is not set
+## end choice
+CONFIG_TCP_MD5SIG=y
+
+##
+## file: net/ipv4/netfilter/Kconfig
+##
+CONFIG_NF_SOCKET_IPV4=m
+CONFIG_NF_TPROXY_IPV4=m
+CONFIG_NF_TABLES_IPV4=y
+CONFIG_NFT_DUP_IPV4=m
+CONFIG_NFT_FIB_IPV4=m
+CONFIG_NF_TABLES_ARP=y
+CONFIG_NF_FLOW_TABLE_IPV4=m
+CONFIG_NF_LOG_ARP=m
+CONFIG_NF_LOG_IPV4=m
+CONFIG_NF_REJECT_IPV4=m
+CONFIG_NF_NAT_SNMP_BASIC=m
+CONFIG_IP_NF_IPTABLES=m
+CONFIG_IP_NF_MATCH_AH=m
+CONFIG_IP_NF_MATCH_ECN=m
+CONFIG_IP_NF_MATCH_RPFILTER=m
+CONFIG_IP_NF_MATCH_TTL=m
+CONFIG_IP_NF_FILTER=m
+CONFIG_IP_NF_TARGET_REJECT=m
+CONFIG_IP_NF_TARGET_SYNPROXY=m
+CONFIG_IP_NF_NAT=m
+CONFIG_IP_NF_TARGET_MASQUERADE=m
+CONFIG_IP_NF_TARGET_NETMAP=m
+CONFIG_IP_NF_TARGET_REDIRECT=m
+CONFIG_IP_NF_MANGLE=m
+CONFIG_IP_NF_TARGET_CLUSTERIP=m
+CONFIG_IP_NF_TARGET_ECN=m
+CONFIG_IP_NF_TARGET_TTL=m
+CONFIG_IP_NF_RAW=m
+CONFIG_IP_NF_SECURITY=m
+CONFIG_IP_NF_ARPTABLES=m
+CONFIG_IP_NF_ARPFILTER=m
+CONFIG_IP_NF_ARP_MANGLE=m
+
+##
+## file: net/ipv6/Kconfig
+##
+CONFIG_IPV6=y
+CONFIG_IPV6_ROUTER_PREF=y
+CONFIG_IPV6_ROUTE_INFO=y
+CONFIG_IPV6_OPTIMISTIC_DAD=y
+CONFIG_INET6_AH=m
+CONFIG_INET6_ESP=m
+CONFIG_INET6_ESP_OFFLOAD=m
+CONFIG_INET6_IPCOMP=m
+CONFIG_IPV6_MIP6=y
+CONFIG_IPV6_ILA=m
+CONFIG_IPV6_VTI=m
+CONFIG_IPV6_SIT=m
+CONFIG_IPV6_SIT_6RD=y
+CONFIG_IPV6_TUNNEL=m
+CONFIG_IPV6_GRE=m
+CONFIG_IPV6_MULTIPLE_TABLES=y
+CONFIG_IPV6_SUBTREES=y
+CONFIG_IPV6_MROUTE=y
+CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y
+CONFIG_IPV6_PIMSM_V2=y
+CONFIG_IPV6_SEG6_LWTUNNEL=y
+CONFIG_IPV6_SEG6_HMAC=y
+
+##
+## file: net/ipv6/netfilter/Kconfig
+##
+CONFIG_NF_SOCKET_IPV6=m
+CONFIG_NF_TPROXY_IPV6=m
+CONFIG_NF_TABLES_IPV6=y
+CONFIG_NFT_DUP_IPV6=m
+CONFIG_NFT_FIB_IPV6=m
+CONFIG_NF_FLOW_TABLE_IPV6=m
+CONFIG_NF_REJECT_IPV6=m
+CONFIG_NF_LOG_IPV6=m
+CONFIG_IP6_NF_IPTABLES=m
+CONFIG_IP6_NF_MATCH_AH=m
+CONFIG_IP6_NF_MATCH_EUI64=m
+CONFIG_IP6_NF_MATCH_FRAG=m
+CONFIG_IP6_NF_MATCH_OPTS=m
+CONFIG_IP6_NF_MATCH_HL=m
+CONFIG_IP6_NF_MATCH_IPV6HEADER=m
+CONFIG_IP6_NF_MATCH_MH=m
+CONFIG_IP6_NF_MATCH_RPFILTER=m
+CONFIG_IP6_NF_MATCH_RT=m
+CONFIG_IP6_NF_MATCH_SRH=m
+CONFIG_IP6_NF_TARGET_HL=m
+CONFIG_IP6_NF_FILTER=m
+CONFIG_IP6_NF_TARGET_REJECT=m
+CONFIG_IP6_NF_TARGET_SYNPROXY=m
+CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_RAW=m
+CONFIG_IP6_NF_SECURITY=m
+CONFIG_IP6_NF_NAT=m
+CONFIG_IP6_NF_TARGET_MASQUERADE=m
+CONFIG_IP6_NF_TARGET_NPT=m
+
+##
+## file: net/kcm/Kconfig
+##
+# CONFIG_AF_KCM is not set
+
+##
+## file: net/l2tp/Kconfig
+##
+CONFIG_L2TP=m
+CONFIG_L2TP_DEBUGFS=m
+CONFIG_L2TP_V3=y
+CONFIG_L2TP_IP=m
+CONFIG_L2TP_ETH=m
+
+##
+## file: net/l3mdev/Kconfig
+##
+CONFIG_NET_L3_MASTER_DEV=y
+
+##
+## file: net/llc/Kconfig
+##
+CONFIG_LLC2=m
+
+##
+## file: net/mac80211/Kconfig
+##
+CONFIG_MAC80211=m
+CONFIG_MAC80211_RC_MINSTREL=y
+## choice: Default rate control algorithm
+CONFIG_MAC80211_RC_DEFAULT_MINSTREL=y
+## end choice
+CONFIG_MAC80211_MESH=y
+CONFIG_MAC80211_LEDS=y
+# CONFIG_MAC80211_DEBUGFS is not set
+# CONFIG_MAC80211_MESSAGE_TRACING is not set
+# CONFIG_MAC80211_DEBUG_MENU is not set
+
+##
+## file: net/mac802154/Kconfig
+##
+CONFIG_MAC802154=m
+
+##
+## file: net/mpls/Kconfig
+##
+#. Can be built as a module, but nothing will trigger loading
+CONFIG_NET_MPLS_GSO=y
+CONFIG_MPLS_ROUTING=m
+CONFIG_MPLS_IPTUNNEL=m
+
+##
+## file: net/mptcp/Kconfig
+##
+CONFIG_MPTCP=y
+
+##
+## file: net/ncsi/Kconfig
+##
+# CONFIG_NET_NCSI is not set
+
+##
+## file: net/netfilter/Kconfig
+##
+CONFIG_NETFILTER_INGRESS=y
+CONFIG_NETFILTER_NETLINK_ACCT=m
+CONFIG_NETFILTER_NETLINK_QUEUE=m
+CONFIG_NETFILTER_NETLINK_LOG=m
+CONFIG_NETFILTER_NETLINK_OSF=m
+CONFIG_NF_CONNTRACK=m
+CONFIG_NF_CONNTRACK_MARK=y
+CONFIG_NF_CONNTRACK_SECMARK=y
+CONFIG_NF_CONNTRACK_ZONES=y
+CONFIG_NF_CONNTRACK_PROCFS=y
+CONFIG_NF_CONNTRACK_EVENTS=y
+CONFIG_NF_CONNTRACK_TIMEOUT=y
+CONFIG_NF_CONNTRACK_TIMESTAMP=y
+CONFIG_NF_CT_PROTO_DCCP=y
+CONFIG_NF_CT_PROTO_SCTP=y
+CONFIG_NF_CT_PROTO_UDPLITE=y
+CONFIG_NF_CONNTRACK_AMANDA=m
+CONFIG_NF_CONNTRACK_FTP=m
+CONFIG_NF_CONNTRACK_H323=m
+CONFIG_NF_CONNTRACK_IRC=m
+CONFIG_NF_CONNTRACK_NETBIOS_NS=m
+CONFIG_NF_CONNTRACK_SNMP=m
+CONFIG_NF_CONNTRACK_PPTP=m
+CONFIG_NF_CONNTRACK_SANE=m
+CONFIG_NF_CONNTRACK_SIP=m
+CONFIG_NF_CONNTRACK_TFTP=m
+CONFIG_NF_CT_NETLINK=m
+CONFIG_NF_CT_NETLINK_TIMEOUT=y
+CONFIG_NF_CT_NETLINK_HELPER=m
+CONFIG_NETFILTER_NETLINK_GLUE_CT=y
+CONFIG_NF_NAT=m
+CONFIG_NF_TABLES=m
+CONFIG_NF_TABLES_INET=y
+CONFIG_NF_TABLES_NETDEV=y
+CONFIG_NFT_NUMGEN=m
+CONFIG_NFT_CT=m
+CONFIG_NFT_FLOW_OFFLOAD=m
+CONFIG_NFT_COUNTER=m
+CONFIG_NFT_CONNLIMIT=m
+CONFIG_NFT_LOG=m
+CONFIG_NFT_LIMIT=m
+CONFIG_NFT_MASQ=m
+CONFIG_NFT_REDIR=m
+CONFIG_NFT_NAT=m
+CONFIG_NFT_TUNNEL=m
+CONFIG_NFT_OBJREF=m
+CONFIG_NFT_QUEUE=m
+CONFIG_NFT_QUOTA=m
+CONFIG_NFT_REJECT=m
+CONFIG_NFT_COMPAT=m
+CONFIG_NFT_HASH=m
+CONFIG_NFT_FIB_INET=m
+CONFIG_NFT_XFRM=m
+CONFIG_NFT_SOCKET=m
+CONFIG_NFT_OSF=m
+CONFIG_NFT_TPROXY=m
+CONFIG_NFT_SYNPROXY=m
+CONFIG_NF_DUP_NETDEV=m
+CONFIG_NFT_DUP_NETDEV=m
+CONFIG_NFT_FWD_NETDEV=m
+CONFIG_NFT_FIB_NETDEV=m
+CONFIG_NF_FLOW_TABLE_INET=m
+CONFIG_NF_FLOW_TABLE=m
+CONFIG_NETFILTER_XTABLES=m
+CONFIG_NETFILTER_XT_SET=m
+CONFIG_NETFILTER_XT_TARGET_AUDIT=m
+CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m
+CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m
+CONFIG_NETFILTER_XT_TARGET_CONNMARK=m
+CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=m
+CONFIG_NETFILTER_XT_TARGET_CT=m
+CONFIG_NETFILTER_XT_TARGET_DSCP=m
+CONFIG_NETFILTER_XT_TARGET_HL=m
+CONFIG_NETFILTER_XT_TARGET_HMARK=m
+CONFIG_NETFILTER_XT_TARGET_IDLETIMER=m
+CONFIG_NETFILTER_XT_TARGET_LED=m
+CONFIG_NETFILTER_XT_TARGET_LOG=m
+CONFIG_NETFILTER_XT_TARGET_MARK=m
+CONFIG_NETFILTER_XT_TARGET_NETMAP=m
+CONFIG_NETFILTER_XT_TARGET_NFLOG=m
+CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
+# CONFIG_NETFILTER_XT_TARGET_NOTRACK is not set
+CONFIG_NETFILTER_XT_TARGET_RATEEST=m
+CONFIG_NETFILTER_XT_TARGET_REDIRECT=m
+CONFIG_NETFILTER_XT_TARGET_TEE=m
+CONFIG_NETFILTER_XT_TARGET_TPROXY=m
+CONFIG_NETFILTER_XT_TARGET_TRACE=m
+CONFIG_NETFILTER_XT_TARGET_SECMARK=m
+CONFIG_NETFILTER_XT_TARGET_TCPMSS=m
+CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=m
+CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m
+CONFIG_NETFILTER_XT_MATCH_BPF=m
+CONFIG_NETFILTER_XT_MATCH_CGROUP=m
+CONFIG_NETFILTER_XT_MATCH_CLUSTER=m
+CONFIG_NETFILTER_XT_MATCH_COMMENT=m
+CONFIG_NETFILTER_XT_MATCH_CONNBYTES=m
+CONFIG_NETFILTER_XT_MATCH_CONNLABEL=m
+CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=m
+CONFIG_NETFILTER_XT_MATCH_CONNMARK=m
+CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
+CONFIG_NETFILTER_XT_MATCH_CPU=m
+CONFIG_NETFILTER_XT_MATCH_DCCP=m
+CONFIG_NETFILTER_XT_MATCH_DEVGROUP=m
+CONFIG_NETFILTER_XT_MATCH_DSCP=m
+CONFIG_NETFILTER_XT_MATCH_ECN=m
+CONFIG_NETFILTER_XT_MATCH_ESP=m
+CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m
+CONFIG_NETFILTER_XT_MATCH_HELPER=m
+CONFIG_NETFILTER_XT_MATCH_HL=m
+CONFIG_NETFILTER_XT_MATCH_IPCOMP=m
+CONFIG_NETFILTER_XT_MATCH_IPRANGE=m
+CONFIG_NETFILTER_XT_MATCH_IPVS=m
+CONFIG_NETFILTER_XT_MATCH_L2TP=m
+CONFIG_NETFILTER_XT_MATCH_LENGTH=m
+CONFIG_NETFILTER_XT_MATCH_LIMIT=m
+CONFIG_NETFILTER_XT_MATCH_MAC=m
+CONFIG_NETFILTER_XT_MATCH_MARK=m
+CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m
+CONFIG_NETFILTER_XT_MATCH_NFACCT=m
+CONFIG_NETFILTER_XT_MATCH_OSF=m
+CONFIG_NETFILTER_XT_MATCH_OWNER=m
+CONFIG_NETFILTER_XT_MATCH_POLICY=m
+CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m
+CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m
+CONFIG_NETFILTER_XT_MATCH_QUOTA=m
+CONFIG_NETFILTER_XT_MATCH_RATEEST=m
+CONFIG_NETFILTER_XT_MATCH_REALM=m
+CONFIG_NETFILTER_XT_MATCH_RECENT=m
+CONFIG_NETFILTER_XT_MATCH_SCTP=m
+CONFIG_NETFILTER_XT_MATCH_SOCKET=m
+CONFIG_NETFILTER_XT_MATCH_STATE=m
+CONFIG_NETFILTER_XT_MATCH_STATISTIC=m
+CONFIG_NETFILTER_XT_MATCH_STRING=m
+CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
+CONFIG_NETFILTER_XT_MATCH_TIME=m
+CONFIG_NETFILTER_XT_MATCH_U32=m
+
+##
+## file: net/netfilter/ipset/Kconfig
+##
+CONFIG_IP_SET=m
+CONFIG_IP_SET_MAX=256
+CONFIG_IP_SET_BITMAP_IP=m
+CONFIG_IP_SET_BITMAP_IPMAC=m
+CONFIG_IP_SET_BITMAP_PORT=m
+CONFIG_IP_SET_HASH_IP=m
+CONFIG_IP_SET_HASH_IPMARK=m
+CONFIG_IP_SET_HASH_IPPORT=m
+CONFIG_IP_SET_HASH_IPPORTIP=m
+CONFIG_IP_SET_HASH_IPPORTNET=m
+CONFIG_IP_SET_HASH_IPMAC=m
+CONFIG_IP_SET_HASH_MAC=m
+CONFIG_IP_SET_HASH_NETPORTNET=m
+CONFIG_IP_SET_HASH_NET=m
+CONFIG_IP_SET_HASH_NETNET=m
+CONFIG_IP_SET_HASH_NETPORT=m
+CONFIG_IP_SET_HASH_NETIFACE=m
+CONFIG_IP_SET_LIST_SET=m
+
+##
+## file: net/netfilter/ipvs/Kconfig
+##
+CONFIG_IP_VS=m
+CONFIG_IP_VS_IPV6=y
+# CONFIG_IP_VS_DEBUG is not set
+CONFIG_IP_VS_TAB_BITS=12
+CONFIG_IP_VS_PROTO_TCP=y
+CONFIG_IP_VS_PROTO_UDP=y
+CONFIG_IP_VS_PROTO_ESP=y
+CONFIG_IP_VS_PROTO_AH=y
+CONFIG_IP_VS_PROTO_SCTP=y
+CONFIG_IP_VS_RR=m
+CONFIG_IP_VS_WRR=m
+CONFIG_IP_VS_LC=m
+CONFIG_IP_VS_WLC=m
+CONFIG_IP_VS_FO=m
+CONFIG_IP_VS_OVF=m
+CONFIG_IP_VS_LBLC=m
+CONFIG_IP_VS_LBLCR=m
+CONFIG_IP_VS_DH=m
+CONFIG_IP_VS_SH=m
+CONFIG_IP_VS_MH=m
+CONFIG_IP_VS_SED=m
+CONFIG_IP_VS_NQ=m
+CONFIG_IP_VS_SH_TAB_BITS=8
+CONFIG_IP_VS_FTP=m
+CONFIG_IP_VS_PE_SIP=m
+
+##
+## file: net/netlabel/Kconfig
+##
+CONFIG_NETLABEL=y
+
+##
+## file: net/netlink/Kconfig
+##
+CONFIG_NETLINK_DIAG=m
+
+##
+## file: net/nfc/Kconfig
+##
+CONFIG_NFC=m
+CONFIG_NFC_DIGITAL=m
+
+##
+## file: net/nfc/hci/Kconfig
+##
+# CONFIG_NFC_HCI is not set
+# CONFIG_NFC_SHDLC is not set
+
+##
+## file: net/nfc/nci/Kconfig
+##
+# CONFIG_NFC_NCI is not set
+
+##
+## file: net/nsh/Kconfig
+##
+CONFIG_NET_NSH=m
+
+##
+## file: net/openvswitch/Kconfig
+##
+CONFIG_OPENVSWITCH=m
+CONFIG_OPENVSWITCH_GRE=y
+CONFIG_OPENVSWITCH_VXLAN=y
+CONFIG_OPENVSWITCH_GENEVE=y
+
+##
+## file: net/packet/Kconfig
+##
+CONFIG_PACKET=y
+CONFIG_PACKET_DIAG=m
+
+##
+## file: net/phonet/Kconfig
+##
+CONFIG_PHONET=m
+
+##
+## file: net/psample/Kconfig
+##
+CONFIG_PSAMPLE=m
+
+##
+## file: net/rds/Kconfig
+##
+CONFIG_RDS=m
+CONFIG_RDS_RDMA=m
+CONFIG_RDS_TCP=m
+# CONFIG_RDS_DEBUG is not set
+
+##
+## file: net/rfkill/Kconfig
+##
+CONFIG_RFKILL=m
+CONFIG_RFKILL_INPUT=y
+# CONFIG_RFKILL_GPIO is not set
+
+##
+## file: net/rxrpc/Kconfig
+##
+CONFIG_AF_RXRPC=m
+CONFIG_AF_RXRPC_IPV6=y
+# CONFIG_AF_RXRPC_INJECT_LOSS is not set
+# CONFIG_AF_RXRPC_DEBUG is not set
+CONFIG_RXKAD=y
+
+##
+## file: net/sched/Kconfig
+##
+CONFIG_NET_SCHED=y
+CONFIG_NET_SCH_CBQ=m
+CONFIG_NET_SCH_HTB=m
+CONFIG_NET_SCH_HFSC=m
+CONFIG_NET_SCH_ATM=m
+CONFIG_NET_SCH_PRIO=m
+CONFIG_NET_SCH_MULTIQ=m
+CONFIG_NET_SCH_RED=m
+CONFIG_NET_SCH_SFB=m
+CONFIG_NET_SCH_SFQ=m
+CONFIG_NET_SCH_TEQL=m
+CONFIG_NET_SCH_TBF=m
+CONFIG_NET_SCH_CBS=m
+CONFIG_NET_SCH_ETF=m
+CONFIG_NET_SCH_TAPRIO=m
+CONFIG_NET_SCH_GRED=m
+CONFIG_NET_SCH_DSMARK=m
+CONFIG_NET_SCH_NETEM=m
+CONFIG_NET_SCH_DRR=m
+CONFIG_NET_SCH_MQPRIO=m
+CONFIG_NET_SCH_SKBPRIO=m
+CONFIG_NET_SCH_CHOKE=m
+CONFIG_NET_SCH_QFQ=m
+CONFIG_NET_SCH_CODEL=m
+CONFIG_NET_SCH_FQ_CODEL=m
+CONFIG_NET_SCH_CAKE=m
+CONFIG_NET_SCH_FQ=m
+CONFIG_NET_SCH_HHF=m
+CONFIG_NET_SCH_PIE=m
+CONFIG_NET_SCH_FQ_PIE=m
+CONFIG_NET_SCH_INGRESS=m
+CONFIG_NET_SCH_PLUG=m
+CONFIG_NET_SCH_ETS=m
+# CONFIG_NET_SCH_DEFAULT is not set
+CONFIG_NET_CLS_BASIC=m
+CONFIG_NET_CLS_TCINDEX=m
+CONFIG_NET_CLS_ROUTE4=m
+CONFIG_NET_CLS_FW=m
+CONFIG_NET_CLS_U32=m
+CONFIG_CLS_U32_PERF=y
+CONFIG_CLS_U32_MARK=y
+CONFIG_NET_CLS_RSVP=m
+CONFIG_NET_CLS_RSVP6=m
+CONFIG_NET_CLS_FLOW=m
+CONFIG_NET_CLS_CGROUP=m
+CONFIG_NET_CLS_BPF=m
+CONFIG_NET_CLS_FLOWER=m
+CONFIG_NET_CLS_MATCHALL=m
+CONFIG_NET_EMATCH=y
+CONFIG_NET_EMATCH_STACK=32
+CONFIG_NET_EMATCH_CMP=m
+CONFIG_NET_EMATCH_NBYTE=m
+CONFIG_NET_EMATCH_U32=m
+CONFIG_NET_EMATCH_META=m
+CONFIG_NET_EMATCH_TEXT=m
+CONFIG_NET_EMATCH_CANID=m
+CONFIG_NET_EMATCH_IPSET=m
+CONFIG_NET_EMATCH_IPT=m
+CONFIG_NET_CLS_ACT=y
+CONFIG_NET_ACT_POLICE=m
+CONFIG_NET_ACT_GACT=m
+CONFIG_GACT_PROB=y
+CONFIG_NET_ACT_MIRRED=m
+CONFIG_NET_ACT_SAMPLE=m
+CONFIG_NET_ACT_IPT=m
+CONFIG_NET_ACT_NAT=m
+CONFIG_NET_ACT_PEDIT=m
+CONFIG_NET_ACT_SIMP=m
+CONFIG_NET_ACT_SKBEDIT=m
+CONFIG_NET_ACT_CSUM=m
+CONFIG_NET_ACT_MPLS=m
+CONFIG_NET_ACT_VLAN=m
+CONFIG_NET_ACT_BPF=m
+CONFIG_NET_ACT_CONNMARK=m
+CONFIG_NET_ACT_CTINFO=m
+CONFIG_NET_ACT_SKBMOD=m
+CONFIG_NET_ACT_IFE=m
+CONFIG_NET_ACT_TUNNEL_KEY=m
+CONFIG_NET_ACT_CT=m
+CONFIG_NET_ACT_GATE=m
+CONFIG_NET_IFE_SKBMARK=m
+CONFIG_NET_IFE_SKBPRIO=m
+CONFIG_NET_IFE_SKBTCINDEX=m
+
+##
+## file: net/sctp/Kconfig
+##
+CONFIG_IP_SCTP=m
+# CONFIG_SCTP_DBG_OBJCNT is not set
+## choice: Default SCTP cookie HMAC encoding
+# CONFIG_SCTP_DEFAULT_COOKIE_HMAC_MD5 is not set
+CONFIG_SCTP_DEFAULT_COOKIE_HMAC_SHA1=y
+# CONFIG_SCTP_DEFAULT_COOKIE_HMAC_NONE is not set
+## end choice
+CONFIG_SCTP_COOKIE_HMAC_MD5=y
+CONFIG_SCTP_COOKIE_HMAC_SHA1=y
+
+##
+## file: net/smc/Kconfig
+##
+CONFIG_SMC=m
+CONFIG_SMC_DIAG=m
+
+##
+## file: net/sunrpc/Kconfig
+##
+CONFIG_RPCSEC_GSS_KRB5=m
+CONFIG_SUNRPC_DEBUG=y
+CONFIG_SUNRPC_XPRT_RDMA=m
+
+##
+## file: net/switchdev/Kconfig
+##
+CONFIG_NET_SWITCHDEV=y
+
+##
+## file: net/tipc/Kconfig
+##
+CONFIG_TIPC=m
+CONFIG_TIPC_MEDIA_IB=y
+CONFIG_TIPC_MEDIA_UDP=y
+CONFIG_TIPC_DIAG=m
+
+##
+## file: net/tls/Kconfig
+##
+CONFIG_TLS=m
+
+##
+## file: net/unix/Kconfig
+##
+CONFIG_UNIX=y
+CONFIG_UNIX_DIAG=m
+
+##
+## file: net/vmw_vsock/Kconfig
+##
+CONFIG_VSOCKETS=m
+CONFIG_VSOCKETS_DIAG=m
+# CONFIG_VMWARE_VMCI_VSOCKETS is not set
+CONFIG_VIRTIO_VSOCKETS=m
+
+##
+## file: net/wireless/Kconfig
+##
+CONFIG_CFG80211=m
+# CONFIG_NL80211_TESTMODE is not set
+# CONFIG_CFG80211_DEVELOPER_WARNINGS is not set
+# CONFIG_CFG80211_CERTIFICATION_ONUS is not set
+CONFIG_CFG80211_DEFAULT_PS=y
+# CONFIG_CFG80211_DEBUGFS is not set
+CONFIG_CFG80211_CRDA_SUPPORT=y
+CONFIG_CFG80211_WEXT=y
+# CONFIG_LIB80211_DEBUG is not set
+
+##
+## file: net/x25/Kconfig
+##
+# CONFIG_X25 is not set
+
+##
+## file: net/xdp/Kconfig
+##
+CONFIG_XDP_SOCKETS=y
+
+##
+## file: net/xfrm/Kconfig
+##
+CONFIG_XFRM_USER=m
+CONFIG_XFRM_INTERFACE=m
+CONFIG_XFRM_SUB_POLICY=y
+CONFIG_XFRM_MIGRATE=y
+CONFIG_XFRM_STATISTICS=y
+CONFIG_NET_KEY=m
+CONFIG_NET_KEY_MIGRATE=y
+
+##
+## file: samples/Kconfig
+##
+# CONFIG_SAMPLES is not set
+
+##
+## file: security/Kconfig
+##
+CONFIG_SECURITY_DMESG_RESTRICT=y
+CONFIG_SECURITY_PERF_EVENTS_RESTRICT=y
+CONFIG_SECURITY=y
+CONFIG_SECURITYFS=y
+CONFIG_SECURITY_NETWORK=y
+CONFIG_SECURITY_NETWORK_XFRM=y
+CONFIG_SECURITY_PATH=y
+# CONFIG_INTEL_TXT is not set
+CONFIG_LSM_MMAP_MIN_ADDR=32768
+CONFIG_HARDENED_USERCOPY=y
+# CONFIG_HARDENED_USERCOPY_PAGESPAN is not set
+CONFIG_FORTIFY_SOURCE=y
+## choice: First legacy 'major LSM' to be initialized
+CONFIG_DEFAULT_SECURITY_APPARMOR=y
+## end choice
+CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,apparmor,selinux,smack,tomoyo"
+
+##
+## file: security/Kconfig.hardening
+##
+CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
+
+##
+## file: security/apparmor/Kconfig
+##
+CONFIG_SECURITY_APPARMOR=y
+CONFIG_SECURITY_APPARMOR_HASH=y
+CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
+
+##
+## file: security/integrity/Kconfig
+##
+CONFIG_INTEGRITY=y
+CONFIG_INTEGRITY_SIGNATURE=y
+CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
+# CONFIG_INTEGRITY_TRUSTED_KEYRING is not set
+CONFIG_INTEGRITY_PLATFORM_KEYRING=y
+CONFIG_INTEGRITY_AUDIT=y
+
+##
+## file: security/integrity/evm/Kconfig
+##
+CONFIG_EVM=y
+
+##
+## file: security/integrity/ima/Kconfig
+##
+CONFIG_IMA=y
+## choice: Default template
+CONFIG_IMA_SIG_TEMPLATE=y
+## end choice
+## choice: Default integrity hash algorithm
+# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
+CONFIG_IMA_DEFAULT_HASH_SHA256=y
+# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
+# CONFIG_IMA_DEFAULT_HASH_WP512 is not set
+## end choice
+# CONFIG_IMA_WRITE_POLICY is not set
+# CONFIG_IMA_READ_POLICY is not set
+CONFIG_IMA_APPRAISE=y
+
+##
+## file: security/keys/Kconfig
+##
+CONFIG_KEYS=y
+CONFIG_PERSISTENT_KEYRINGS=y
+# CONFIG_BIG_KEYS is not set
+# CONFIG_TRUSTED_KEYS is not set
+CONFIG_ENCRYPTED_KEYS=y
+CONFIG_KEY_DH_OPERATIONS=y
+
+##
+## file: security/landlock/Kconfig
+##
+CONFIG_SECURITY_LANDLOCK=y
+
+##
+## file: security/loadpin/Kconfig
+##
+# CONFIG_SECURITY_LOADPIN is not set
+
+##
+## file: security/lockdown/Kconfig
+##
+CONFIG_SECURITY_LOCKDOWN_LSM=y
+## choice: Kernel default lockdown mode
+CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
+## end choice
+CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y
+
+##
+## file: security/selinux/Kconfig
+##
+CONFIG_SECURITY_SELINUX=y
+# CONFIG_SECURITY_SELINUX_BOOTPARAM is not set
+# CONFIG_SECURITY_SELINUX_DISABLE is not set
+CONFIG_SECURITY_SELINUX_DEVELOP=y
+CONFIG_SECURITY_SELINUX_AVC_STATS=y
+CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=0
+
+##
+## file: security/smack/Kconfig
+##
+# CONFIG_SECURITY_SMACK is not set
+
+##
+## file: security/tomoyo/Kconfig
+##
+CONFIG_SECURITY_TOMOYO=y
+CONFIG_SECURITY_TOMOYO_MAX_ACCEPT_ENTRY=2048
+CONFIG_SECURITY_TOMOYO_MAX_AUDIT_LOG=1024
+# CONFIG_SECURITY_TOMOYO_OMIT_USERSPACE_LOADER is not set
+#. This is so horrible...
+CONFIG_SECURITY_TOMOYO_POLICY_LOADER="/sbin/tomoyo-init"
+CONFIG_SECURITY_TOMOYO_ACTIVATION_TRIGGER="/sbin/init"
+
+##
+## file: security/yama/Kconfig
+##
+CONFIG_SECURITY_YAMA=y
+
+##
+## file: sound/Kconfig
+##
+CONFIG_SOUND=m
+# CONFIG_SOUND_OSS_CORE_PRECLAIM is not set
+CONFIG_SND=m
+
+##
+## file: sound/core/Kconfig
+##
+CONFIG_SND_OSSEMUL=y
+CONFIG_SND_MIXER_OSS=m
+CONFIG_SND_PCM_OSS=m
+CONFIG_SND_PCM_OSS_PLUGINS=y
+CONFIG_SND_PCM_TIMER=y
+CONFIG_SND_HRTIMER=m
+CONFIG_SND_DYNAMIC_MINORS=y
+CONFIG_SND_MAX_CARDS=32
+CONFIG_SND_SUPPORT_OLD_API=y
+CONFIG_SND_PROC_FS=y
+CONFIG_SND_VERBOSE_PROCFS=y
+# CONFIG_SND_VERBOSE_PRINTK is not set
+# CONFIG_SND_DEBUG is not set
+
+##
+## file: sound/core/seq/Kconfig
+##
+CONFIG_SND_SEQUENCER=m
+CONFIG_SND_SEQ_DUMMY=m
+# CONFIG_SND_SEQUENCER_OSS is not set
+CONFIG_SND_SEQ_HRTIMER_DEFAULT=y
+
+##
+## file: sound/drivers/Kconfig
+##
+CONFIG_SND_DRIVERS=y
+CONFIG_SND_PCSP=m
+CONFIG_SND_ALOOP=m
+CONFIG_SND_MTS64=m
+CONFIG_SND_PORTMAN2X4=m
+CONFIG_SND_AC97_POWER_SAVE=y
+CONFIG_SND_AC97_POWER_SAVE_DEFAULT=0
+
+##
+## file: sound/firewire/Kconfig
+##
+CONFIG_SND_FIREWIRE=y
+CONFIG_SND_DICE=m
+CONFIG_SND_OXFW=m
+CONFIG_SND_ISIGHT=m
+CONFIG_SND_FIREWORKS=m
+CONFIG_SND_BEBOB=m
+CONFIG_SND_FIREWIRE_DIGI00X=m
+CONFIG_SND_FIREWIRE_TASCAM=m
+CONFIG_SND_FIREWIRE_MOTU=m
+CONFIG_SND_FIREFACE=m
+
+##
+## file: sound/hda/Kconfig
+##
+CONFIG_SND_HDA_PREALLOC_SIZE=2048
+
+##
+## file: sound/isa/Kconfig
+##
+# CONFIG_SND_CMI8328 is not set
+
+##
+## file: sound/pci/Kconfig
+##
+CONFIG_SND_PCI=y
+CONFIG_SND_AD1889=m
+CONFIG_SND_ALS300=m
+CONFIG_SND_ASIHPI=m
+# CONFIG_SND_AW2 is not set
+CONFIG_SND_OXYGEN=m
+CONFIG_SND_CTXFI=m
+CONFIG_SND_DARLA20=m
+CONFIG_SND_GINA20=m
+CONFIG_SND_LAYLA20=m
+CONFIG_SND_DARLA24=m
+CONFIG_SND_GINA24=m
+CONFIG_SND_LAYLA24=m
+CONFIG_SND_MONA=m
+CONFIG_SND_MIA=m
+CONFIG_SND_ECHO3G=m
+CONFIG_SND_INDIGO=m
+CONFIG_SND_INDIGOIO=m
+CONFIG_SND_INDIGODJ=m
+CONFIG_SND_INDIGOIOX=m
+CONFIG_SND_INDIGODJX=m
+CONFIG_SND_ES1968_INPUT=y
+CONFIG_SND_ES1968_RADIO=y
+CONFIG_SND_HDSPM=m
+CONFIG_SND_LOLA=m
+CONFIG_SND_LX6464ES=m
+CONFIG_SND_MAESTRO3_INPUT=y
+CONFIG_SND_PCXHR=m
+CONFIG_SND_RIPTIDE=m
+CONFIG_SND_VIRTUOSO=m
+
+##
+## file: sound/pci/hda/Kconfig
+##
+CONFIG_SND_HDA_HWDEP=y
+CONFIG_SND_HDA_RECONFIG=y
+CONFIG_SND_HDA_INPUT_BEEP=y
+CONFIG_SND_HDA_INPUT_BEEP_MODE=1
+CONFIG_SND_HDA_PATCH_LOADER=y
+CONFIG_SND_HDA_CODEC_REALTEK=y
+CONFIG_SND_HDA_CODEC_ANALOG=y
+CONFIG_SND_HDA_CODEC_SIGMATEL=y
+CONFIG_SND_HDA_CODEC_VIA=y
+CONFIG_SND_HDA_CODEC_HDMI=y
+CONFIG_SND_HDA_CODEC_CIRRUS=y
+CONFIG_SND_HDA_CODEC_CONEXANT=y
+CONFIG_SND_HDA_CODEC_CA0110=y
+CONFIG_SND_HDA_CODEC_CA0132=y
+CONFIG_SND_HDA_CODEC_CA0132_DSP=y
+CONFIG_SND_HDA_CODEC_CMEDIA=y
+CONFIG_SND_HDA_CODEC_SI3054=y
+CONFIG_SND_HDA_GENERIC=y
+CONFIG_SND_HDA_POWER_SAVE_DEFAULT=1
+
+##
+## file: sound/pcmcia/Kconfig
+##
+CONFIG_SND_PCMCIA=y
+CONFIG_SND_VXPOCKET=m
+CONFIG_SND_PDAUDIOCF=m
+
+##
+## file: sound/soc/Kconfig
+##
+# CONFIG_SND_SOC is not set
+
+##
+## file: sound/soc/amd/Kconfig
+##
+# CONFIG_SND_SOC_AMD_ACP is not set
+
+##
+## file: sound/soc/atmel/Kconfig
+##
+# CONFIG_SND_ATMEL_SOC is not set
+
+##
+## file: sound/soc/codecs/Kconfig
+##
+# CONFIG_SND_SOC_AC97_CODEC is not set
+# CONFIG_SND_SOC_ADAU1701 is not set
+# CONFIG_SND_SOC_ADAU1761_I2C is not set
+# CONFIG_SND_SOC_ADAU1761_SPI is not set
+# CONFIG_SND_SOC_ADAU7002 is not set
+# CONFIG_SND_SOC_AK4104 is not set
+# CONFIG_SND_SOC_AK4458 is not set
+# CONFIG_SND_SOC_AK4554 is not set
+# CONFIG_SND_SOC_AK4613 is not set
+# CONFIG_SND_SOC_AK4642 is not set
+# CONFIG_SND_SOC_AK5386 is not set
+# CONFIG_SND_SOC_AK5558 is not set
+# CONFIG_SND_SOC_ALC5623 is not set
+# CONFIG_SND_SOC_BD28623 is not set
+# CONFIG_SND_SOC_BT_SCO is not set
+# CONFIG_SND_SOC_CS35L32 is not set
+# CONFIG_SND_SOC_CS35L33 is not set
+# CONFIG_SND_SOC_CS35L34 is not set
+# CONFIG_SND_SOC_CS35L35 is not set
+# CONFIG_SND_SOC_CS42L42 is not set
+# CONFIG_SND_SOC_CS42L51_I2C is not set
+# CONFIG_SND_SOC_CS42L52 is not set
+# CONFIG_SND_SOC_CS42L56 is not set
+# CONFIG_SND_SOC_CS42L73 is not set
+# CONFIG_SND_SOC_CS4265 is not set
+# CONFIG_SND_SOC_CS4270 is not set
+# CONFIG_SND_SOC_CS4271_I2C is not set
+# CONFIG_SND_SOC_CS4271_SPI is not set
+# CONFIG_SND_SOC_CS42XX8_I2C is not set
+# CONFIG_SND_SOC_CS43130 is not set
+# CONFIG_SND_SOC_CS4349 is not set
+# CONFIG_SND_SOC_CS53L30 is not set
+# CONFIG_SND_SOC_ES7134 is not set
+# CONFIG_SND_SOC_ES7241 is not set
+# CONFIG_SND_SOC_ES8316 is not set
+# CONFIG_SND_SOC_ES8328_I2C is not set
+# CONFIG_SND_SOC_ES8328_SPI is not set
+# CONFIG_SND_SOC_GTM601 is not set
+# CONFIG_SND_SOC_INNO_RK3036 is not set
+# CONFIG_SND_SOC_MAX98504 is not set
+# CONFIG_SND_SOC_MAX9867 is not set
+# CONFIG_SND_SOC_MAX98927 is not set
+CONFIG_SND_SOC_MAX98373_SDW=m
+# CONFIG_SND_SOC_MAX9860 is not set
+# CONFIG_SND_SOC_MSM8916_WCD_DIGITAL is not set
+# CONFIG_SND_SOC_PCM1681 is not set
+# CONFIG_SND_SOC_PCM1789_I2C is not set
+# CONFIG_SND_SOC_PCM179X_I2C is not set
+# CONFIG_SND_SOC_PCM179X_SPI is not set
+# CONFIG_SND_SOC_PCM186X_I2C is not set
+# CONFIG_SND_SOC_PCM186X_SPI is not set
+# CONFIG_SND_SOC_PCM3168A_I2C is not set
+# CONFIG_SND_SOC_PCM3168A_SPI is not set
+# CONFIG_SND_SOC_PCM512x_I2C is not set
+# CONFIG_SND_SOC_PCM512x_SPI is not set
+CONFIG_SND_SOC_RT1308_SDW=m
+# CONFIG_SND_SOC_RT5616 is not set
+# CONFIG_SND_SOC_RT5631 is not set
+CONFIG_SND_SOC_RT5682_SDW=m
+CONFIG_SND_SOC_RT700_SDW=m
+CONFIG_SND_SOC_RT711_SDW=m
+CONFIG_SND_SOC_RT715_SDW=m
+# CONFIG_SND_SOC_SGTL5000 is not set
+# CONFIG_SND_SOC_SIMPLE_AMPLIFIER is not set
+# CONFIG_SND_SOC_SPDIF is not set
+# CONFIG_SND_SOC_SSM2305 is not set
+# CONFIG_SND_SOC_SSM2602_SPI is not set
+# CONFIG_SND_SOC_SSM2602_I2C is not set
+# CONFIG_SND_SOC_SSM4567 is not set
+# CONFIG_SND_SOC_STA32X is not set
+# CONFIG_SND_SOC_STA350 is not set
+# CONFIG_SND_SOC_STI_SAS is not set
+# CONFIG_SND_SOC_TAS2552 is not set
+# CONFIG_SND_SOC_TAS5086 is not set
+# CONFIG_SND_SOC_TAS571X is not set
+# CONFIG_SND_SOC_TAS5720 is not set
+# CONFIG_SND_SOC_TAS6424 is not set
+# CONFIG_SND_SOC_TDA7419 is not set
+# CONFIG_SND_SOC_TFA9879 is not set
+# CONFIG_SND_SOC_TLV320AIC23_I2C is not set
+# CONFIG_SND_SOC_TLV320AIC23_SPI is not set
+# CONFIG_SND_SOC_TLV320AIC31XX is not set
+# CONFIG_SND_SOC_TLV320AIC32X4_I2C is not set
+# CONFIG_SND_SOC_TLV320AIC32X4_SPI is not set
+# CONFIG_SND_SOC_TS3A227E is not set
+# CONFIG_SND_SOC_TSCS42XX is not set
+# CONFIG_SND_SOC_TSCS454 is not set
+# CONFIG_SND_SOC_WM8510 is not set
+# CONFIG_SND_SOC_WM8523 is not set
+# CONFIG_SND_SOC_WM8524 is not set
+# CONFIG_SND_SOC_WM8580 is not set
+# CONFIG_SND_SOC_WM8711 is not set
+# CONFIG_SND_SOC_WM8728 is not set
+# CONFIG_SND_SOC_WM8731 is not set
+# CONFIG_SND_SOC_WM8737 is not set
+# CONFIG_SND_SOC_WM8741 is not set
+# CONFIG_SND_SOC_WM8750 is not set
+# CONFIG_SND_SOC_WM8753 is not set
+# CONFIG_SND_SOC_WM8770 is not set
+# CONFIG_SND_SOC_WM8776 is not set
+# CONFIG_SND_SOC_WM8782 is not set
+# CONFIG_SND_SOC_WM8804_I2C is not set
+# CONFIG_SND_SOC_WM8804_SPI is not set
+# CONFIG_SND_SOC_WM8903 is not set
+# CONFIG_SND_SOC_WM8960 is not set
+# CONFIG_SND_SOC_WM8962 is not set
+# CONFIG_SND_SOC_WM8974 is not set
+# CONFIG_SND_SOC_WM8978 is not set
+# CONFIG_SND_SOC_WM8985 is not set
+# CONFIG_SND_SOC_MAX9759 is not set
+# CONFIG_SND_SOC_MT6351 is not set
+# CONFIG_SND_SOC_NAU8540 is not set
+# CONFIG_SND_SOC_NAU8810 is not set
+# CONFIG_SND_SOC_NAU8824 is not set
+# CONFIG_SND_SOC_TPA6130A2 is not set
+
+##
+## file: sound/soc/dwc/Kconfig
+##
+# CONFIG_SND_DESIGNWARE_I2S is not set
+
+##
+## file: sound/soc/fsl/Kconfig
+##
+# CONFIG_SND_SOC_FSL_ASRC is not set
+# CONFIG_SND_SOC_FSL_SAI is not set
+# CONFIG_SND_SOC_FSL_SSI is not set
+# CONFIG_SND_SOC_FSL_SPDIF is not set
+# CONFIG_SND_SOC_FSL_ESAI is not set
+# CONFIG_SND_SOC_IMX_AUDMUX is not set
+
+##
+## file: sound/soc/generic/Kconfig
+##
+# CONFIG_SND_SIMPLE_CARD is not set
+
+##
+## file: sound/soc/hisilicon/Kconfig
+##
+# CONFIG_SND_I2S_HI6210_I2S is not set
+
+##
+## file: sound/soc/img/Kconfig
+##
+# CONFIG_SND_SOC_IMG is not set
+
+##
+## file: sound/soc/sunxi/Kconfig
+##
+# CONFIG_SND_SUN4I_CODEC is not set
+
+##
+## file: sound/soc/xtensa/Kconfig
+##
+# CONFIG_SND_SOC_XTFPGA_I2S is not set
+
+##
+## file: sound/spi/Kconfig
+##
+CONFIG_SND_SPI=y
+
+##
+## file: sound/usb/Kconfig
+##
+CONFIG_SND_USB=y
+CONFIG_SND_USB_AUDIO=m
+CONFIG_SND_USB_UA101=m
+CONFIG_SND_USB_USX2Y=m
+CONFIG_SND_USB_CAIAQ=m
+CONFIG_SND_USB_CAIAQ_INPUT=y
+CONFIG_SND_USB_US122L=m
+CONFIG_SND_USB_6FIRE=m
+CONFIG_SND_USB_HIFACE=m
+CONFIG_SND_BCD2000=m
+
+##
+## file: sound/usb/line6/Kconfig
+##
+CONFIG_SND_USB_POD=m
+CONFIG_SND_USB_PODHD=m
+CONFIG_SND_USB_TONEPORT=m
+CONFIG_SND_USB_VARIAX=m
+
+##
+## file: sound/xen/Kconfig
+##
+CONFIG_SND_XEN_FRONTEND=m
+
+##
+## file: usr/Kconfig
+##
+CONFIG_INITRAMFS_SOURCE=""
+CONFIG_RD_GZIP=y
+CONFIG_RD_BZIP2=y
+CONFIG_RD_LZMA=y
+CONFIG_RD_XZ=y
+CONFIG_RD_LZO=y
+CONFIG_RD_LZ4=y
diff --git a/debian/config/config.cloud b/debian/config/config.cloud
new file mode 100644
index 000000000000..31fba49eaf8e
--- /dev/null
+++ b/debian/config/config.cloud
@@ -0,0 +1,1699 @@
+##
+## file: block/Kconfig.iosched
+##
+CONFIG_MQ_IOSCHED_DEADLINE=m
+
+##
+## file: block/partitions/Kconfig
+##
+# CONFIG_PARTITION_ADVANCED is not set
+
+##
+## file: drivers/accessibility/Kconfig
+##
+# CONFIG_ACCESSIBILITY is not set
+
+##
+## file: drivers/acpi/Kconfig
+##
+# CONFIG_ACPI_AC is not set
+# CONFIG_ACPI_BATTERY is not set
+# CONFIG_ACPI_DOCK is not set
+# CONFIG_ACPI_PROCESSOR is not set
+# CONFIG_ACPI_IPMI is not set
+# CONFIG_ACPI_BGRT is not set
+
+##
+## file: drivers/android/Kconfig
+##
+# CONFIG_ANDROID is not set
+
+##
+## file: drivers/ata/Kconfig
+##
+# CONFIG_ATA_ACPI is not set
+# CONFIG_SATA_ZPODD is not set
+# CONFIG_SATA_PMP is not set
+# CONFIG_SATA_AHCI is not set
+# CONFIG_SATA_ACARD_AHCI is not set
+# CONFIG_SATA_SIL24 is not set
+CONFIG_ATA_SFF=y
+# CONFIG_PDC_ADMA is not set
+# CONFIG_SATA_QSTOR is not set
+# CONFIG_SATA_SX4 is not set
+CONFIG_ATA_BMDMA=y
+CONFIG_ATA_PIIX=m
+# CONFIG_SATA_MV is not set
+# CONFIG_SATA_NV is not set
+# CONFIG_SATA_PROMISE is not set
+# CONFIG_SATA_SIL is not set
+# CONFIG_SATA_SIS is not set
+# CONFIG_SATA_SVW is not set
+# CONFIG_SATA_ULI is not set
+# CONFIG_SATA_VIA is not set
+# CONFIG_SATA_VITESSE is not set
+# CONFIG_PATA_ALI is not set
+# CONFIG_PATA_AMD is not set
+# CONFIG_PATA_ARTOP is not set
+# CONFIG_PATA_ATIIXP is not set
+# CONFIG_PATA_ATP867X is not set
+# CONFIG_PATA_CMD64X is not set
+# CONFIG_PATA_CYPRESS is not set
+# CONFIG_PATA_EFAR is not set
+# CONFIG_PATA_HPT366 is not set
+# CONFIG_PATA_HPT37X is not set
+# CONFIG_PATA_HPT3X2N is not set
+# CONFIG_PATA_HPT3X3 is not set
+# CONFIG_PATA_IT8213 is not set
+# CONFIG_PATA_IT821X is not set
+# CONFIG_PATA_JMICRON is not set
+# CONFIG_PATA_MARVELL is not set
+# CONFIG_PATA_NETCELL is not set
+# CONFIG_PATA_NINJA32 is not set
+# CONFIG_PATA_NS87415 is not set
+# CONFIG_PATA_OLDPIIX is not set
+# CONFIG_PATA_OPTIDMA is not set
+# CONFIG_PATA_PDC2027X is not set
+# CONFIG_PATA_PDC_OLD is not set
+# CONFIG_PATA_RADISYS is not set
+# CONFIG_PATA_RDC is not set
+# CONFIG_PATA_SCH is not set
+# CONFIG_PATA_SERVERWORKS is not set
+# CONFIG_PATA_SIL680 is not set
+# CONFIG_PATA_SIS is not set
+# CONFIG_PATA_TOSHIBA is not set
+# CONFIG_PATA_TRIFLEX is not set
+# CONFIG_PATA_VIA is not set
+# CONFIG_PATA_MPIIX is not set
+# CONFIG_PATA_NS87410 is not set
+# CONFIG_PATA_OPTI is not set
+# CONFIG_PATA_PLATFORM is not set
+# CONFIG_PATA_RZ1000 is not set
+
+##
+## file: drivers/atm/Kconfig
+##
+# CONFIG_ATM_DRIVERS is not set
+
+##
+## file: drivers/auxdisplay/Kconfig
+##
+# CONFIG_AUXDISPLAY is not set
+
+##
+## file: drivers/bcma/Kconfig
+##
+# CONFIG_BCMA is not set
+
+##
+## file: drivers/block/Kconfig
+##
+# CONFIG_BLK_DEV_FD is not set
+# CONFIG_BLK_DEV_SX8 is not set
+# CONFIG_CDROM_PKTCDVD is not set
+CONFIG_XEN_BLKDEV_FRONTEND=m
+# CONFIG_BLK_DEV_RSXX is not set
+
+##
+## file: drivers/block/mtip32xx/Kconfig
+##
+# CONFIG_BLK_DEV_PCIESSD_MTIP32XX is not set
+
+##
+## file: drivers/char/Kconfig
+##
+# CONFIG_APPLICOM is not set
+# CONFIG_MWAVE is not set
+# CONFIG_DEVPORT is not set
+# CONFIG_TELCLOCK is not set
+CONFIG_RANDOM_TRUST_BOOTLOADER=y
+
+##
+## file: drivers/char/agp/Kconfig
+##
+# CONFIG_AGP is not set
+
+##
+## file: drivers/char/hw_random/Kconfig
+##
+# CONFIG_HW_RANDOM_INTEL is not set
+# CONFIG_HW_RANDOM_AMD is not set
+# CONFIG_HW_RANDOM_GEODE is not set
+# CONFIG_HW_RANDOM_VIA is not set
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+# CONFIG_IPMI_HANDLER is not set
+
+##
+## file: drivers/char/tpm/Kconfig
+##
+CONFIG_TCG_TPM=m
+# CONFIG_HW_RANDOM_TPM is not set
+CONFIG_TCG_TIS=m
+# CONFIG_TCG_TIS_SPI is not set
+# CONFIG_TCG_TIS_I2C_ATMEL is not set
+# CONFIG_TCG_TIS_I2C_INFINEON is not set
+# CONFIG_TCG_TIS_I2C_NUVOTON is not set
+# CONFIG_TCG_NSC is not set
+# CONFIG_TCG_ATMEL is not set
+# CONFIG_TCG_INFINEON is not set
+CONFIG_TCG_XEN=m
+CONFIG_TCG_CRB=m
+CONFIG_TCG_VTPM_PROXY=m
+
+##
+## file: drivers/char/xillybus/Kconfig
+##
+# CONFIG_XILLYBUS is not set
+
+##
+## file: drivers/cpufreq/Kconfig
+##
+# CONFIG_CPU_FREQ is not set
+
+##
+## file: drivers/cpuidle/Kconfig
+##
+# CONFIG_CPU_IDLE is not set
+
+##
+## file: drivers/crypto/Kconfig
+##
+# CONFIG_CRYPTO_HW is not set
+
+##
+## file: drivers/dax/Kconfig
+##
+# CONFIG_DAX is not set
+
+##
+## file: drivers/devfreq/Kconfig
+##
+# CONFIG_PM_DEVFREQ is not set
+
+##
+## file: drivers/dma/Kconfig
+##
+# CONFIG_DMADEVICES is not set
+
+##
+## file: drivers/edac/Kconfig
+##
+# CONFIG_EDAC is not set
+
+##
+## file: drivers/eisa/Kconfig
+##
+# CONFIG_EISA is not set
+
+##
+## file: drivers/extcon/Kconfig
+##
+# CONFIG_EXTCON is not set
+
+##
+## file: drivers/firewire/Kconfig
+##
+# CONFIG_FIREWIRE is not set
+# CONFIG_FIREWIRE_NOSY is not set
+
+##
+## file: drivers/fpga/Kconfig
+##
+# CONFIG_FPGA is not set
+
+##
+## file: drivers/fsi/Kconfig
+##
+# CONFIG_FSI is not set
+
+##
+## file: drivers/gnss/Kconfig
+##
+# CONFIG_GNSS is not set
+
+##
+## file: drivers/gpio/Kconfig
+##
+# CONFIG_GPIOLIB is not set
+# CONFIG_GPIO_KEMPLD is not set
+# CONFIG_GPIO_ML_IOH is not set
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+# CONFIG_DRM is not set
+
+##
+## file: drivers/gpu/vga/Kconfig
+##
+# CONFIG_VGA_SWITCHEROO is not set
+
+##
+## file: drivers/hid/Kconfig
+##
+# CONFIG_HID is not set
+# CONFIG_HID_RMI is not set
+
+##
+## file: drivers/hid/intel-ish-hid/Kconfig
+##
+# CONFIG_INTEL_ISH_HID is not set
+
+##
+## file: drivers/hsi/Kconfig
+##
+# CONFIG_HSI is not set
+
+##
+## file: drivers/hv/Kconfig
+##
+CONFIG_HYPERV=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+# CONFIG_HWMON is not set
+
+##
+## file: drivers/hwtracing/intel_th/Kconfig
+##
+# CONFIG_INTEL_TH is not set
+
+##
+## file: drivers/i2c/Kconfig
+##
+# CONFIG_I2C is not set
+
+##
+## file: drivers/idle/Kconfig
+##
+# CONFIG_INTEL_IDLE is not set
+
+##
+## file: drivers/iio/Kconfig
+##
+# CONFIG_IIO is not set
+
+##
+## file: drivers/infiniband/Kconfig
+##
+CONFIG_INFINIBAND=m
+CONFIG_INFINIBAND_USER_MAD=m
+CONFIG_INFINIBAND_USER_ACCESS=m
+CONFIG_INFINIBAND_ON_DEMAND_PAGING=y
+CONFIG_INFINIBAND_ADDR_TRANS=y
+
+##
+## file: drivers/infiniband/hw/cxgb4/Kconfig
+##
+# CONFIG_INFINIBAND_CXGB4 is not set
+
+##
+## file: drivers/infiniband/hw/hfi1/Kconfig
+##
+# CONFIG_INFINIBAND_HFI1 is not set
+
+##
+## file: drivers/infiniband/hw/mlx4/Kconfig
+##
+CONFIG_MLX4_INFINIBAND=m
+
+##
+## file: drivers/infiniband/hw/mlx5/Kconfig
+##
+CONFIG_MLX5_INFINIBAND=m
+
+##
+## file: drivers/infiniband/hw/mthca/Kconfig
+##
+# CONFIG_INFINIBAND_MTHCA is not set
+# CONFIG_INFINIBAND_MTHCA_DEBUG is not set
+
+##
+## file: drivers/infiniband/hw/ocrdma/Kconfig
+##
+# CONFIG_INFINIBAND_OCRDMA is not set
+
+##
+## file: drivers/infiniband/hw/qedr/Kconfig
+##
+# CONFIG_INFINIBAND_QEDR is not set
+
+##
+## file: drivers/infiniband/hw/qib/Kconfig
+##
+# CONFIG_INFINIBAND_QIB is not set
+# CONFIG_INFINIBAND_QIB_DCA is not set
+
+##
+## file: drivers/infiniband/sw/rdmavt/Kconfig
+##
+# CONFIG_INFINIBAND_RDMAVT is not set
+
+##
+## file: drivers/infiniband/sw/rxe/Kconfig
+##
+# CONFIG_RDMA_RXE is not set
+
+##
+## file: drivers/infiniband/ulp/ipoib/Kconfig
+##
+# CONFIG_INFINIBAND_IPOIB is not set
+# CONFIG_INFINIBAND_IPOIB_CM is not set
+# CONFIG_INFINIBAND_IPOIB_DEBUG is not set
+# CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set
+
+##
+## file: drivers/infiniband/ulp/iser/Kconfig
+##
+# CONFIG_INFINIBAND_ISER is not set
+
+##
+## file: drivers/infiniband/ulp/isert/Kconfig
+##
+# CONFIG_INFINIBAND_ISERT is not set
+
+##
+## file: drivers/infiniband/ulp/srp/Kconfig
+##
+# CONFIG_INFINIBAND_SRP is not set
+
+##
+## file: drivers/infiniband/ulp/srpt/Kconfig
+##
+# CONFIG_INFINIBAND_SRPT is not set
+
+##
+## file: drivers/input/Kconfig
+##
+# CONFIG_INPUT_FF_MEMLESS is not set
+# CONFIG_INPUT_SPARSEKMAP is not set
+CONFIG_INPUT_MOUSEDEV=m
+# CONFIG_INPUT_JOYDEV is not set
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+# CONFIG_GAMEPORT is not set
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+# CONFIG_INPUT_JOYSTICK is not set
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+# CONFIG_KEYBOARD_LKKBD is not set
+# CONFIG_KEYBOARD_GPIO is not set
+# CONFIG_KEYBOARD_NEWTON is not set
+# CONFIG_KEYBOARD_OPENCORES is not set
+# CONFIG_KEYBOARD_SAMSUNG is not set
+# CONFIG_KEYBOARD_STOWAWAY is not set
+# CONFIG_KEYBOARD_SUNKBD is not set
+# CONFIG_KEYBOARD_XTKBD is not set
+
+##
+## file: drivers/input/misc/Kconfig
+##
+# CONFIG_INPUT_MISC is not set
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+# CONFIG_INPUT_MOUSE is not set
+
+##
+## file: drivers/input/serio/Kconfig
+##
+# CONFIG_SERIO_SERPORT is not set
+# CONFIG_SERIO_CT82C710 is not set
+# CONFIG_SERIO_PCIPS2 is not set
+CONFIG_SERIO_RAW=m
+# CONFIG_SERIO_ALTERA_PS2 is not set
+CONFIG_HYPERV_KEYBOARD=m
+
+##
+## file: drivers/input/tablet/Kconfig
+##
+# CONFIG_INPUT_TABLET is not set
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+# CONFIG_INPUT_TOUCHSCREEN is not set
+
+##
+## file: drivers/iommu/amd/Kconfig
+##
+# CONFIG_AMD_IOMMU is not set
+
+##
+## file: drivers/ipack/Kconfig
+##
+# CONFIG_IPACK_BUS is not set
+
+##
+## file: drivers/isdn/Kconfig
+##
+# CONFIG_ISDN is not set
+
+##
+## file: drivers/leds/Kconfig
+##
+# CONFIG_NEW_LEDS is not set
+
+##
+## file: drivers/macintosh/Kconfig
+##
+# CONFIG_MACINTOSH_DRIVERS is not set
+
+##
+## file: drivers/mailbox/Kconfig
+##
+# CONFIG_MAILBOX is not set
+
+##
+## file: drivers/mcb/Kconfig
+##
+# CONFIG_MCB is not set
+
+##
+## file: drivers/media/Kconfig
+##
+# CONFIG_MEDIA_SUPPORT is not set
+
+##
+## file: drivers/media/rc/Kconfig
+##
+# CONFIG_RC_CORE is not set
+
+##
+## file: drivers/memory/Kconfig
+##
+# CONFIG_MEMORY is not set
+
+##
+## file: drivers/memstick/Kconfig
+##
+# CONFIG_MEMSTICK is not set
+
+##
+## file: drivers/message/fusion/Kconfig
+##
+# CONFIG_FUSION is not set
+
+##
+## file: drivers/mfd/Kconfig
+##
+# CONFIG_LPC_ICH is not set
+# CONFIG_LPC_SCH is not set
+# CONFIG_MFD_INTEL_LPSS_ACPI is not set
+# CONFIG_MFD_INTEL_LPSS_PCI is not set
+# CONFIG_MFD_KEMPLD is not set
+
+##
+## file: drivers/misc/Kconfig
+##
+# CONFIG_IBM_ASM is not set
+# CONFIG_PHANTOM is not set
+# CONFIG_TIFM_CORE is not set
+# CONFIG_TIFM_7XX1 is not set
+# CONFIG_ENCLOSURE_SERVICES is not set
+# CONFIG_HP_ILO is not set
+
+##
+## file: drivers/misc/c2port/Kconfig
+##
+# CONFIG_C2PORT is not set
+
+##
+## file: drivers/misc/cardreader/Kconfig
+##
+# CONFIG_MISC_RTSX_PCI is not set
+
+##
+## file: drivers/misc/cb710/Kconfig
+##
+# CONFIG_CB710_CORE is not set
+
+##
+## file: drivers/misc/eeprom/Kconfig
+##
+# CONFIG_EEPROM_93CX6 is not set
+
+##
+## file: drivers/misc/mei/Kconfig
+##
+# CONFIG_INTEL_MEI is not set
+# CONFIG_INTEL_MEI_ME is not set
+
+##
+## file: drivers/mmc/Kconfig
+##
+# CONFIG_MMC is not set
+
+##
+## file: drivers/mtd/Kconfig
+##
+# CONFIG_MTD is not set
+
+##
+## file: drivers/net/Kconfig
+##
+# CONFIG_GTP is not set
+# CONFIG_NET_SB1000 is not set
+CONFIG_XEN_NETDEV_FRONTEND=m
+# CONFIG_FUJITSU_ES is not set
+
+##
+## file: drivers/net/appletalk/Kconfig
+##
+# CONFIG_ATALK is not set
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+# CONFIG_ARCNET is not set
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+# CONFIG_JME is not set
+# CONFIG_FEALNX is not set
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+# CONFIG_NET_VENDOR_3COM is not set
+
+##
+## file: drivers/net/ethernet/adaptec/Kconfig
+##
+# CONFIG_NET_VENDOR_ADAPTEC is not set
+
+##
+## file: drivers/net/ethernet/agere/Kconfig
+##
+# CONFIG_NET_VENDOR_AGERE is not set
+
+##
+## file: drivers/net/ethernet/alacritech/Kconfig
+##
+# CONFIG_NET_VENDOR_ALACRITECH is not set
+
+##
+## file: drivers/net/ethernet/alteon/Kconfig
+##
+# CONFIG_NET_VENDOR_ALTEON is not set
+
+##
+## file: drivers/net/ethernet/altera/Kconfig
+##
+# CONFIG_ALTERA_TSE is not set
+
+##
+## file: drivers/net/ethernet/amazon/Kconfig
+##
+CONFIG_NET_VENDOR_AMAZON=y
+#. Amazon EC2 uses Elastic Network Adapter (ENA) support
+CONFIG_ENA_ETHERNET=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+# CONFIG_NET_VENDOR_AMD is not set
+
+##
+## file: drivers/net/ethernet/aquantia/Kconfig
+##
+# CONFIG_NET_VENDOR_AQUANTIA is not set
+
+##
+## file: drivers/net/ethernet/atheros/Kconfig
+##
+# CONFIG_NET_VENDOR_ATHEROS is not set
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+# CONFIG_NET_VENDOR_BROADCOM is not set
+# CONFIG_CNIC is not set
+
+##
+## file: drivers/net/ethernet/brocade/Kconfig
+##
+# CONFIG_NET_VENDOR_BROCADE is not set
+
+##
+## file: drivers/net/ethernet/cadence/Kconfig
+##
+# CONFIG_NET_VENDOR_CADENCE is not set
+
+##
+## file: drivers/net/ethernet/cavium/Kconfig
+##
+# CONFIG_NET_VENDOR_CAVIUM is not set
+
+##
+## file: drivers/net/ethernet/chelsio/Kconfig
+##
+# CONFIG_NET_VENDOR_CHELSIO is not set
+
+##
+## file: drivers/net/ethernet/cisco/Kconfig
+##
+# CONFIG_NET_VENDOR_CISCO is not set
+
+##
+## file: drivers/net/ethernet/dec/Kconfig
+##
+# CONFIG_NET_VENDOR_DEC is not set
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+# CONFIG_NET_VENDOR_DLINK is not set
+
+##
+## file: drivers/net/ethernet/emulex/Kconfig
+##
+# CONFIG_NET_VENDOR_EMULEX is not set
+
+##
+## file: drivers/net/ethernet/ezchip/Kconfig
+##
+# CONFIG_NET_VENDOR_EZCHIP is not set
+
+##
+## file: drivers/net/ethernet/google/Kconfig
+##
+CONFIG_NET_VENDOR_GOOGLE=y
+#. Google Cloud specific device
+CONFIG_GVE=m
+
+##
+## file: drivers/net/ethernet/huawei/Kconfig
+##
+# CONFIG_NET_VENDOR_HUAWEI is not set
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_NET_VENDOR_INTEL=y
+# CONFIG_E100 is not set
+# CONFIG_E1000 is not set
+# CONFIG_E1000E is not set
+# CONFIG_IGB is not set
+# CONFIG_IGBVF is not set
+# CONFIG_IXGB is not set
+# CONFIG_IXGBE is not set
+#. Amazon EC2 uses Intel Corporation 82599 Ethernet Controller Virtual Function
+CONFIG_IXGBEVF=m
+# CONFIG_I40E is not set
+# CONFIG_I40EVF is not set
+# CONFIG_ICE is not set
+# CONFIG_IGC is not set
+
+##
+## file: drivers/net/ethernet/marvell/Kconfig
+##
+# CONFIG_NET_VENDOR_MARVELL is not set
+
+##
+## file: drivers/net/ethernet/mellanox/Kconfig
+##
+#. Microsoft Azure uses Mellanox Technologies MT27500/MT27520 Family [ConnectX-3/ConnectX-3 Pro Virtual Function]
+CONFIG_NET_VENDOR_MELLANOX=y
+
+##
+## file: drivers/net/ethernet/micrel/Kconfig
+##
+# CONFIG_NET_VENDOR_MICREL is not set
+
+##
+## file: drivers/net/ethernet/microchip/Kconfig
+##
+# CONFIG_NET_VENDOR_MICROCHIP is not set
+
+##
+## file: drivers/net/ethernet/microsoft/Kconfig
+##
+CONFIG_NET_VENDOR_MICROSOFT=y
+#. Microsoft Azure specific device
+CONFIG_MICROSOFT_MANA=m
+
+##
+## file: drivers/net/ethernet/myricom/Kconfig
+##
+# CONFIG_NET_VENDOR_MYRI is not set
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+# CONFIG_NET_VENDOR_NATSEMI is not set
+
+##
+## file: drivers/net/ethernet/neterion/Kconfig
+##
+# CONFIG_NET_VENDOR_NETERION is not set
+
+##
+## file: drivers/net/ethernet/netronome/Kconfig
+##
+# CONFIG_NET_VENDOR_NETRONOME is not set
+
+##
+## file: drivers/net/ethernet/nvidia/Kconfig
+##
+# CONFIG_NET_VENDOR_NVIDIA is not set
+
+##
+## file: drivers/net/ethernet/oki-semi/Kconfig
+##
+# CONFIG_NET_VENDOR_OKI is not set
+
+##
+## file: drivers/net/ethernet/packetengines/Kconfig
+##
+# CONFIG_NET_VENDOR_PACKET_ENGINES is not set
+
+##
+## file: drivers/net/ethernet/qlogic/Kconfig
+##
+# CONFIG_NET_VENDOR_QLOGIC is not set
+
+##
+## file: drivers/net/ethernet/qualcomm/Kconfig
+##
+# CONFIG_NET_VENDOR_QUALCOMM is not set
+
+##
+## file: drivers/net/ethernet/rdc/Kconfig
+##
+# CONFIG_NET_VENDOR_RDC is not set
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+# CONFIG_NET_VENDOR_REALTEK is not set
+
+##
+## file: drivers/net/ethernet/renesas/Kconfig
+##
+# CONFIG_NET_VENDOR_RENESAS is not set
+
+##
+## file: drivers/net/ethernet/rocker/Kconfig
+##
+# CONFIG_NET_VENDOR_ROCKER is not set
+
+##
+## file: drivers/net/ethernet/samsung/Kconfig
+##
+# CONFIG_NET_VENDOR_SAMSUNG is not set
+
+##
+## file: drivers/net/ethernet/seeq/Kconfig
+##
+# CONFIG_NET_VENDOR_SEEQ is not set
+
+##
+## file: drivers/net/ethernet/sfc/Kconfig
+##
+# CONFIG_NET_VENDOR_SOLARFLARE is not set
+# CONFIG_SFC is not set
+
+##
+## file: drivers/net/ethernet/silan/Kconfig
+##
+# CONFIG_NET_VENDOR_SILAN is not set
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+# CONFIG_NET_VENDOR_SIS is not set
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+# CONFIG_NET_VENDOR_SMSC is not set
+
+##
+## file: drivers/net/ethernet/stmicro/Kconfig
+##
+# CONFIG_NET_VENDOR_STMICRO is not set
+
+##
+## file: drivers/net/ethernet/sun/Kconfig
+##
+# CONFIG_NET_VENDOR_SUN is not set
+
+##
+## file: drivers/net/ethernet/synopsys/Kconfig
+##
+# CONFIG_NET_VENDOR_SYNOPSYS is not set
+
+##
+## file: drivers/net/ethernet/tehuti/Kconfig
+##
+# CONFIG_NET_VENDOR_TEHUTI is not set
+
+##
+## file: drivers/net/ethernet/ti/Kconfig
+##
+# CONFIG_NET_VENDOR_TI is not set
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+# CONFIG_NET_VENDOR_VIA is not set
+
+##
+## file: drivers/net/ethernet/wiznet/Kconfig
+##
+# CONFIG_NET_VENDOR_WIZNET is not set
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+# CONFIG_FDDI is not set
+
+##
+## file: drivers/net/hippi/Kconfig
+##
+# CONFIG_HIPPI is not set
+
+##
+## file: drivers/net/hyperv/Kconfig
+##
+CONFIG_HYPERV_NET=m
+
+##
+## file: drivers/net/mdio/Kconfig
+##
+# CONFIG_MDIO_DEVICE is not set
+
+##
+## file: drivers/net/phy/Kconfig
+##
+# CONFIG_PHYLIB is not set
+
+##
+## file: drivers/net/ppp/Kconfig
+##
+# CONFIG_PPP is not set
+
+##
+## file: drivers/net/slip/Kconfig
+##
+# CONFIG_SLIP is not set
+
+##
+## file: drivers/net/wan/Kconfig
+##
+# CONFIG_WAN is not set
+
+##
+## file: drivers/net/wireless/Kconfig
+##
+# CONFIG_WLAN is not set
+
+##
+## file: drivers/ntb/Kconfig
+##
+# CONFIG_NTB is not set
+
+##
+## file: drivers/nvme/host/Kconfig
+##
+CONFIG_BLK_DEV_NVME=y
+CONFIG_NVME_MULTIPATH=y
+
+##
+## file: drivers/nvmem/Kconfig
+##
+# CONFIG_NVMEM is not set
+
+##
+## file: drivers/of/Kconfig
+##
+# CONFIG_OF is not set
+
+##
+## file: drivers/parport/Kconfig
+##
+# CONFIG_PARPORT is not set
+
+##
+## file: drivers/pci/Kconfig
+##
+# CONFIG_PCI_STUB is not set
+# CONFIG_PCI_PRI is not set
+# CONFIG_PCI_PASID is not set
+
+##
+## file: drivers/pci/controller/Kconfig
+##
+# CONFIG_VMD is not set
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+# CONFIG_HOTPLUG_PCI_ACPI_IBM is not set
+# CONFIG_HOTPLUG_PCI_CPCI is not set
+# CONFIG_HOTPLUG_PCI_SHPC is not set
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+# CONFIG_PCCARD is not set
+
+##
+## file: drivers/platform/chrome/Kconfig
+##
+# CONFIG_CHROME_PLATFORMS is not set
+
+##
+## file: drivers/pnp/Kconfig
+##
+# CONFIG_PNP is not set
+
+##
+## file: drivers/power/supply/Kconfig
+##
+# CONFIG_BATTERY_BQ27XXX is not set
+
+##
+## file: drivers/pwm/Kconfig
+##
+# CONFIG_PWM is not set
+
+##
+## file: drivers/regulator/Kconfig
+##
+# CONFIG_REGULATOR is not set
+
+##
+## file: drivers/remoteproc/Kconfig
+##
+# CONFIG_REMOTEPROC is not set
+
+##
+## file: drivers/reset/Kconfig
+##
+# CONFIG_RESET_CONTROLLER is not set
+
+##
+## file: drivers/rtc/Kconfig
+##
+# CONFIG_RTC_NVMEM is not set
+# CONFIG_RTC_DRV_ABB5ZES3 is not set
+# CONFIG_RTC_DRV_ABX80X is not set
+# CONFIG_RTC_DRV_DS1307 is not set
+# CONFIG_RTC_DRV_DS1374 is not set
+# CONFIG_RTC_DRV_DS1672 is not set
+# CONFIG_RTC_DRV_HYM8563 is not set
+# CONFIG_RTC_DRV_MAX6900 is not set
+# CONFIG_RTC_DRV_RS5C372 is not set
+# CONFIG_RTC_DRV_ISL1208 is not set
+# CONFIG_RTC_DRV_ISL12022 is not set
+# CONFIG_RTC_DRV_X1205 is not set
+# CONFIG_RTC_DRV_PCF8523 is not set
+# CONFIG_RTC_DRV_PCF85063 is not set
+# CONFIG_RTC_DRV_PCF8563 is not set
+# CONFIG_RTC_DRV_PCF8583 is not set
+# CONFIG_RTC_DRV_M41T80 is not set
+# CONFIG_RTC_DRV_M41T80_WDT is not set
+# CONFIG_RTC_DRV_BQ32K is not set
+# CONFIG_RTC_DRV_S35390A is not set
+# CONFIG_RTC_DRV_FM3130 is not set
+# CONFIG_RTC_DRV_RX8010 is not set
+# CONFIG_RTC_DRV_RX8581 is not set
+# CONFIG_RTC_DRV_RX8025 is not set
+# CONFIG_RTC_DRV_EM3027 is not set
+# CONFIG_RTC_DRV_RV8803 is not set
+# CONFIG_RTC_DRV_M41T93 is not set
+# CONFIG_RTC_DRV_M41T94 is not set
+# CONFIG_RTC_DRV_DS1302 is not set
+# CONFIG_RTC_DRV_DS1305 is not set
+# CONFIG_RTC_DRV_DS1343 is not set
+# CONFIG_RTC_DRV_DS1347 is not set
+# CONFIG_RTC_DRV_DS1390 is not set
+# CONFIG_RTC_DRV_MAX6916 is not set
+# CONFIG_RTC_DRV_R9701 is not set
+# CONFIG_RTC_DRV_RX4581 is not set
+# CONFIG_RTC_DRV_RS5C348 is not set
+# CONFIG_RTC_DRV_MAX6902 is not set
+# CONFIG_RTC_DRV_PCF2123 is not set
+# CONFIG_RTC_DRV_MCP795 is not set
+# CONFIG_RTC_DRV_DS3232 is not set
+# CONFIG_RTC_DRV_PCF2127 is not set
+# CONFIG_RTC_DRV_RV3029C2 is not set
+# CONFIG_RTC_DRV_RX6110 is not set
+# CONFIG_RTC_DRV_DS1286 is not set
+# CONFIG_RTC_DRV_DS1511 is not set
+# CONFIG_RTC_DRV_DS1553 is not set
+# CONFIG_RTC_DRV_DS1685_FAMILY is not set
+# CONFIG_RTC_DRV_DS1742 is not set
+# CONFIG_RTC_DRV_DS2404 is not set
+# CONFIG_RTC_DRV_STK17TA8 is not set
+# CONFIG_RTC_DRV_M48T86 is not set
+# CONFIG_RTC_DRV_M48T35 is not set
+# CONFIG_RTC_DRV_M48T59 is not set
+# CONFIG_RTC_DRV_MSM6242 is not set
+# CONFIG_RTC_DRV_BQ4802 is not set
+# CONFIG_RTC_DRV_RP5C01 is not set
+# CONFIG_RTC_DRV_V3020 is not set
+# CONFIG_RTC_DRV_WM831X is not set
+# CONFIG_RTC_DRV_WM8350 is not set
+# CONFIG_RTC_DRV_PCF50633 is not set
+# CONFIG_RTC_DRV_ZYNQMP is not set
+# CONFIG_RTC_DRV_SNVS is not set
+# CONFIG_RTC_DRV_MOXART is not set
+# CONFIG_RTC_DRV_XGENE is not set
+# CONFIG_RTC_DRV_HID_SENSOR_TIME is not set
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI=m
+CONFIG_BLK_DEV_SD=m
+CONFIG_SCSI_FC_ATTRS=m
+# CONFIG_BLK_DEV_3W_XXXX_RAID is not set
+# CONFIG_SCSI_HPSA is not set
+# CONFIG_SCSI_3W_9XXX is not set
+# CONFIG_SCSI_3W_SAS is not set
+# CONFIG_SCSI_ACARD is not set
+# CONFIG_SCSI_AACRAID is not set
+# CONFIG_SCSI_MVUMI is not set
+# CONFIG_SCSI_DPT_I2O is not set
+# CONFIG_SCSI_ADVANSYS is not set
+# CONFIG_SCSI_ARCMSR is not set
+# CONFIG_SCSI_HPTIOP is not set
+# CONFIG_SCSI_MYRB is not set
+# CONFIG_SCSI_MYRS is not set
+CONFIG_HYPERV_STORAGE=m
+# CONFIG_LIBFC is not set
+# CONFIG_SCSI_SNIC is not set
+# CONFIG_SCSI_DMX3191D is not set
+# CONFIG_SCSI_ISCI is not set
+# CONFIG_SCSI_IPS is not set
+# CONFIG_SCSI_INITIO is not set
+# CONFIG_SCSI_INIA100 is not set
+# CONFIG_SCSI_STEX is not set
+# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_QLOGIC_1280 is not set
+# CONFIG_SCSI_LPFC is not set
+# CONFIG_SCSI_DC395x is not set
+# CONFIG_SCSI_AM53C974 is not set
+# CONFIG_SCSI_WD719X is not set
+# CONFIG_SCSI_PMCRAID is not set
+# CONFIG_SCSI_PM8001 is not set
+# CONFIG_SCSI_BFA_FC is not set
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic79xx
+##
+# CONFIG_SCSI_AIC79XX is not set
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic7xxx
+##
+# CONFIG_SCSI_AIC7XXX is not set
+
+##
+## file: drivers/scsi/aic94xx/Kconfig
+##
+# CONFIG_SCSI_AIC94XX is not set
+
+##
+## file: drivers/scsi/be2iscsi/Kconfig
+##
+# CONFIG_BE2ISCSI is not set
+
+##
+## file: drivers/scsi/bnx2fc/Kconfig
+##
+# CONFIG_SCSI_BNX2X_FCOE is not set
+
+##
+## file: drivers/scsi/bnx2i/Kconfig
+##
+# CONFIG_SCSI_BNX2_ISCSI is not set
+
+##
+## file: drivers/scsi/csiostor/Kconfig
+##
+# CONFIG_SCSI_CHELSIO_FCOE is not set
+
+##
+## file: drivers/scsi/cxgbi/cxgb3i/Kconfig
+##
+# CONFIG_SCSI_CXGB3_ISCSI is not set
+
+##
+## file: drivers/scsi/cxgbi/cxgb4i/Kconfig
+##
+# CONFIG_SCSI_CXGB4_ISCSI is not set
+
+##
+## file: drivers/scsi/device_handler/Kconfig
+##
+# CONFIG_SCSI_DH is not set
+
+##
+## file: drivers/scsi/esas2r/Kconfig
+##
+# CONFIG_SCSI_ESAS2R is not set
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+# CONFIG_MEGARAID_NEWGEN is not set
+# CONFIG_MEGARAID_MM is not set
+# CONFIG_MEGARAID_MAILBOX is not set
+# CONFIG_MEGARAID_LEGACY is not set
+# CONFIG_MEGARAID_SAS is not set
+
+##
+## file: drivers/scsi/mpt3sas/Kconfig
+##
+# CONFIG_SCSI_MPT3SAS is not set
+# CONFIG_SCSI_MPT2SAS is not set
+
+##
+## file: drivers/scsi/mvsas/Kconfig
+##
+# CONFIG_SCSI_MVSAS is not set
+
+##
+## file: drivers/scsi/qla2xxx/Kconfig
+##
+# CONFIG_SCSI_QLA_FC is not set
+
+##
+## file: drivers/scsi/qla4xxx/Kconfig
+##
+# CONFIG_SCSI_QLA_ISCSI is not set
+
+##
+## file: drivers/scsi/smartpqi/Kconfig
+##
+# CONFIG_SCSI_SMARTPQI is not set
+
+##
+## file: drivers/scsi/ufs/Kconfig
+##
+# CONFIG_SCSI_UFSHCD is not set
+
+##
+## file: drivers/spi/Kconfig
+##
+# CONFIG_SPI is not set
+
+##
+## file: drivers/spmi/Kconfig
+##
+# CONFIG_SPMI is not set
+
+##
+## file: drivers/ssb/Kconfig
+##
+# CONFIG_SSB is not set
+
+##
+## file: drivers/staging/Kconfig
+##
+# CONFIG_STAGING is not set
+
+##
+## file: drivers/target/iscsi/cxgbit/Kconfig
+##
+# CONFIG_ISCSI_TARGET_CXGB4 is not set
+
+##
+## file: drivers/thermal/Kconfig
+##
+# CONFIG_THERMAL is not set
+
+##
+## file: drivers/thunderbolt/Kconfig
+##
+# CONFIG_USB4 is not set
+
+##
+## file: drivers/tty/Kconfig
+##
+# CONFIG_SERIAL_NONSTANDARD is not set
+# CONFIG_N_HDLC is not set
+# CONFIG_N_GSM is not set
+# CONFIG_NOZOMI is not set
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+# CONFIG_SERIAL_JSM is not set
+# CONFIG_SERIAL_RP2 is not set
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+# CONFIG_SERIAL_8250_FINTEK is not set
+# CONFIG_SERIAL_8250_EXAR is not set
+# CONFIG_SERIAL_8250_RSA is not set
+# CONFIG_SERIAL_8250_MID is not set
+
+##
+## file: drivers/usb/Kconfig
+##
+# CONFIG_USB_SUPPORT is not set
+
+##
+## file: drivers/vfio/mdev/Kconfig
+##
+# CONFIG_VFIO_MDEV is not set
+
+##
+## file: drivers/vfio/pci/Kconfig
+##
+# CONFIG_VFIO_PCI_VGA is not set
+
+##
+## file: drivers/video/backlight/Kconfig
+##
+# CONFIG_LCD_CLASS_DEVICE is not set
+# CONFIG_BACKLIGHT_CLASS_DEVICE is not set
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+# CONFIG_FB_CIRRUS is not set
+# CONFIG_FB_PM2 is not set
+# CONFIG_FB_CYBER2000 is not set
+# CONFIG_FB_ARC is not set
+# CONFIG_FB_ASILIANT is not set
+# CONFIG_FB_IMSTT is not set
+# CONFIG_FB_VGA16 is not set
+# CONFIG_FB_UVESA is not set
+# CONFIG_FB_VESA is not set
+CONFIG_FB_EFI=y
+# CONFIG_FB_N411 is not set
+# CONFIG_FB_HGA is not set
+# CONFIG_FB_OPENCORES is not set
+# CONFIG_FB_S1D13XXX is not set
+# CONFIG_FB_I740 is not set
+# CONFIG_FB_LE80578 is not set
+# CONFIG_FB_CARILLO_RANCH is not set
+# CONFIG_FB_MATROX is not set
+# CONFIG_FB_RADEON is not set
+# CONFIG_FB_ATY128 is not set
+# CONFIG_FB_ATY is not set
+# CONFIG_FB_S3 is not set
+# CONFIG_FB_SAVAGE is not set
+# CONFIG_FB_SIS is not set
+# CONFIG_FB_NEOMAGIC is not set
+# CONFIG_FB_KYRO is not set
+# CONFIG_FB_3DFX is not set
+# CONFIG_FB_VOODOO1 is not set
+# CONFIG_FB_VT8623 is not set
+# CONFIG_FB_TRIDENT is not set
+# CONFIG_FB_ARK is not set
+# CONFIG_FB_PM3 is not set
+# CONFIG_FB_CARMINE is not set
+# CONFIG_FB_IBM_GXT4500 is not set
+# CONFIG_FB_VIRTUAL is not set
+# CONFIG_FB_MB862XX is not set
+CONFIG_FB_HYPERV=m
+# CONFIG_FB_SIMPLE is not set
+# CONFIG_FB_SM712 is not set
+
+##
+## file: drivers/virt/Kconfig
+##
+# CONFIG_VIRT_DRIVERS is not set
+
+##
+## file: drivers/vme/Kconfig
+##
+# CONFIG_VME_BUS is not set
+
+##
+## file: drivers/w1/Kconfig
+##
+# CONFIG_W1 is not set
+
+##
+## file: drivers/watchdog/Kconfig
+##
+# CONFIG_ACQUIRE_WDT is not set
+# CONFIG_ADVANTECH_WDT is not set
+# CONFIG_ALIM1535_WDT is not set
+# CONFIG_ALIM7101_WDT is not set
+# CONFIG_F71808E_WDT is not set
+# CONFIG_SP5100_TCO is not set
+# CONFIG_SBC_FITPC2_WATCHDOG is not set
+# CONFIG_EUROTECH_WDT is not set
+# CONFIG_IB700_WDT is not set
+# CONFIG_IBMASR is not set
+# CONFIG_WAFER_WDT is not set
+# CONFIG_I6300ESB_WDT is not set
+# CONFIG_IE6XX_WDT is not set
+# CONFIG_ITCO_WDT is not set
+# CONFIG_ITCO_VENDOR_SUPPORT is not set
+# CONFIG_IT8712F_WDT is not set
+# CONFIG_IT87_WDT is not set
+# CONFIG_HP_WATCHDOG is not set
+# CONFIG_HPWDT_NMI_DECODING is not set
+# CONFIG_KEMPLD_WDT is not set
+# CONFIG_SC1200_WDT is not set
+# CONFIG_PC87413_WDT is not set
+# CONFIG_NV_TCO is not set
+# CONFIG_60XX_WDT is not set
+# CONFIG_CPU5_WDT is not set
+# CONFIG_SMSC_SCH311X_WDT is not set
+# CONFIG_SMSC37B787_WDT is not set
+# CONFIG_VIA_WDT is not set
+# CONFIG_W83627HF_WDT is not set
+# CONFIG_W83877F_WDT is not set
+# CONFIG_W83977F_WDT is not set
+# CONFIG_MACHZ_WDT is not set
+# CONFIG_SBC_EPX_C3_WATCHDOG is not set
+
+##
+## file: fs/adfs/Kconfig
+##
+# CONFIG_ADFS_FS is not set
+
+##
+## file: fs/affs/Kconfig
+##
+# CONFIG_AFFS_FS is not set
+
+##
+## file: fs/afs/Kconfig
+##
+# CONFIG_AFS_FS is not set
+
+##
+## file: fs/befs/Kconfig
+##
+# CONFIG_BEFS_FS is not set
+
+##
+## file: fs/bfs/Kconfig
+##
+# CONFIG_BFS_FS is not set
+
+##
+## file: fs/coda/Kconfig
+##
+# CONFIG_CODA_FS is not set
+
+##
+## file: fs/dlm/Kconfig
+##
+# CONFIG_DLM is not set
+
+##
+## file: fs/ecryptfs/Kconfig
+##
+# CONFIG_ECRYPT_FS is not set
+
+##
+## file: fs/efs/Kconfig
+##
+# CONFIG_EFS_FS is not set
+
+##
+## file: fs/ext4/Kconfig
+##
+CONFIG_EXT4_FS=y
+
+##
+## file: fs/f2fs/Kconfig
+##
+# CONFIG_F2FS_FS is not set
+
+##
+## file: fs/freevxfs/Kconfig
+##
+# CONFIG_VXFS_FS is not set
+
+##
+## file: fs/gfs2/Kconfig
+##
+# CONFIG_GFS2_FS is not set
+
+##
+## file: fs/hfs/Kconfig
+##
+# CONFIG_HFS_FS is not set
+
+##
+## file: fs/hfsplus/Kconfig
+##
+# CONFIG_HFSPLUS_FS is not set
+
+##
+## file: fs/hpfs/Kconfig
+##
+# CONFIG_HPFS_FS is not set
+
+##
+## file: fs/jfs/Kconfig
+##
+# CONFIG_JFS_FS is not set
+
+##
+## file: fs/minix/Kconfig
+##
+# CONFIG_MINIX_FS is not set
+
+##
+## file: fs/nilfs2/Kconfig
+##
+# CONFIG_NILFS2_FS is not set
+
+##
+## file: fs/ocfs2/Kconfig
+##
+# CONFIG_OCFS2_FS is not set
+
+##
+## file: fs/omfs/Kconfig
+##
+# CONFIG_OMFS_FS is not set
+
+##
+## file: fs/qnx4/Kconfig
+##
+# CONFIG_QNX4FS_FS is not set
+
+##
+## file: fs/qnx6/Kconfig
+##
+# CONFIG_QNX6FS_FS is not set
+
+##
+## file: fs/reiserfs/Kconfig
+##
+# CONFIG_REISERFS_FS is not set
+
+##
+## file: fs/ufs/Kconfig
+##
+# CONFIG_UFS_FS is not set
+
+##
+## file: init/Kconfig
+##
+## choice: Kernel compression mode
+# CONFIG_KERNEL_XZ is not set
+CONFIG_KERNEL_LZ4=y
+## end choice
+
+##
+## file: kernel/power/Kconfig
+##
+# CONFIG_PM is not set
+# CONFIG_PM_DEBUG is not set
+
+##
+## file: lib/Kconfig.debug
+##
+# CONFIG_DEBUG_MEMORY_INIT is not set
+# CONFIG_TEST_USER_COPY is not set
+# CONFIG_TEST_BPF is not set
+# CONFIG_TEST_FIRMWARE is not set
+# CONFIG_TEST_STATIC_KEYS is not set
+# CONFIG_MEMTEST is not set
+
+##
+## file: mm/Kconfig
+##
+# CONFIG_ZSWAP is not set
+
+##
+## file: mm/Kconfig.debug
+##
+# CONFIG_PAGE_EXTENSION is not set
+# CONFIG_PAGE_POISONING is not set
+
+##
+## file: net/Kconfig
+##
+# CONFIG_WIRELESS is not set
+
+##
+## file: net/6lowpan/Kconfig
+##
+# CONFIG_6LOWPAN is not set
+
+##
+## file: net/9p/Kconfig
+##
+# CONFIG_NET_9P is not set
+
+##
+## file: net/atm/Kconfig
+##
+# CONFIG_ATM is not set
+
+##
+## file: net/ax25/Kconfig
+##
+# CONFIG_HAMRADIO is not set
+
+##
+## file: net/batman-adv/Kconfig
+##
+# CONFIG_BATMAN_ADV is not set
+
+##
+## file: net/bluetooth/Kconfig
+##
+# CONFIG_BT is not set
+
+##
+## file: net/caif/Kconfig
+##
+# CONFIG_CAIF is not set
+
+##
+## file: net/can/Kconfig
+##
+# CONFIG_CAN is not set
+
+##
+## file: net/decnet/Kconfig
+##
+# CONFIG_DECNET is not set
+
+##
+## file: net/dsa/Kconfig
+##
+# CONFIG_NET_DSA is not set
+
+##
+## file: net/hsr/Kconfig
+##
+# CONFIG_HSR is not set
+
+##
+## file: net/ieee802154/Kconfig
+##
+# CONFIG_IEEE802154 is not set
+
+##
+## file: net/ife/Kconfig
+##
+# CONFIG_NET_IFE is not set
+
+##
+## file: net/lapb/Kconfig
+##
+# CONFIG_LAPB is not set
+
+##
+## file: net/llc/Kconfig
+##
+# CONFIG_LLC2 is not set
+
+##
+## file: net/mac80211/Kconfig
+##
+# CONFIG_MAC80211 is not set
+
+##
+## file: net/mac802154/Kconfig
+##
+# CONFIG_MAC802154 is not set
+
+##
+## file: net/mpls/Kconfig
+##
+CONFIG_NET_MPLS_GSO=m
+
+##
+## file: net/ncsi/Kconfig
+##
+# CONFIG_NET_NCSI is not set
+
+##
+## file: net/nfc/Kconfig
+##
+# CONFIG_NFC is not set
+
+##
+## file: net/phonet/Kconfig
+##
+# CONFIG_PHONET is not set
+
+##
+## file: net/psample/Kconfig
+##
+# CONFIG_PSAMPLE is not set
+
+##
+## file: net/rfkill/Kconfig
+##
+# CONFIG_RFKILL is not set
+
+##
+## file: net/rxrpc/Kconfig
+##
+# CONFIG_AF_RXRPC is not set
+
+##
+## file: net/switchdev/Kconfig
+##
+# CONFIG_NET_SWITCHDEV is not set
+
+##
+## file: net/wireless/Kconfig
+##
+# CONFIG_CFG80211 is not set
+
+##
+## file: net/x25/Kconfig
+##
+# CONFIG_X25 is not set
+
+##
+## file: security/Kconfig
+##
+CONFIG_SECURITY_INFINIBAND=y
+
+##
+## file: security/integrity/Kconfig
+##
+# CONFIG_INTEGRITY is not set
+
+##
+## file: sound/Kconfig
+##
+# CONFIG_SOUND is not set
diff --git a/debian/config/defines b/debian/config/defines
new file mode 100644
index 000000000000..82e7c09bb89a
--- /dev/null
+++ b/debian/config/defines
@@ -0,0 +1,174 @@
+[abi]
+abiname: trunk
+ignore-changes:
+ __cpuhp_*
+ __udp_gso_segment
+ bpf_analyzer
+ bpf_offload_dev_create
+ bpf_verifier_log_write
+ cxl_*
+ dax_flush
+ ieee80211_nullfunc_get
+ inet_add_protocol
+ inet_del_protocol
+ iommu_device_*
+ mm_iommu_*
+ mv_mbus_*
+ perf_*
+ register_cxl_calls
+ register_key_type
+ unregister_cxl_calls
+ *_hw_breakpoint
+ module:drivers/crypto/ccp/*
+ module:drivers/hv/*
+ module:drivers/gpu/drm/sun4i/*
+ module:drivers/iio/**
+ module:drivers/misc/cxl/*
+ module:drivers/misc/lis3lv02d/*
+ module:drivers/mtd/nand/*
+ module:drivers/net/ethernet/**
+ module:drivers/net/wireless/**
+ module:drivers/nvdimm/*
+ module:drivers/nvme/**
+ module:drivers/power/supply/bq27xxx_battery
+ module:drivers/scsi/cxgbi/*
+ module:drivers/scsi/libiscs*
+ module:drivers/scsi/qla2xxx/qla2xxx
+ module:drivers/scsi/ufs/*
+ module:drivers/target/**
+ module:drivers/usb/chipidea/**
+ module:drivers/usb/gadget/**
+ module:drivers/usb/host/**
+ module:drivers/usb/musb/**
+ module:fs/nfs/**
+ module:net/ceph/libceph
+ module:net/l2tp/**
+ module:net/openvswitch/**
+ module:net/rxrpc/rxrpc
+ module:net/sctp/**
+ module:sound/core/seq/**
+ module:sound/firewire/snd-firewire-lib
+ module:sound/pci/hda/*
+# btree library is only selected by few drivers so not useful OOT
+ btree_*
+ visitor*
+# Exported for related protocols only
+ can_rx_register
+ ip6_xmit
+ module:net/dccp/dccp
+ module:net/rds/rds
+# devfreq is unlikely to be useful for OOT modules
+ devfreq_*
+ devm_devfreq_*
+ update_devfreq
+# Assume IB drivers are added/updated through OFED, which also updates IB core
+ module:drivers/infiniband/**
+# Declared in private header, not usable OOT
+ acpi_ec_add_query_handler
+ acpi_ec_remove_query_handler
+ first_ec
+# Exported for tracefs only
+ debugfs_create_automount
+# ignore changes to inv_mpu6050/*
+ module:drivers/iio/imu/inv_mpu6050/*
+ drm_crtc_accurate_vblank_count
+# ignore acpi_nfit_init, acpi_nfit_desc_init
+ acpi_nfit_desc_init
+ acpi_nfit_init
+# ignore loop_register_transfer (used by cryptoloop, nothing OOT)
+ loop_register_transfer
+# Only used in vmlinux
+ xen_xlate_*
+# Not OOT
+ nf_nat_masquerade_ipv4_register_notifier
+ nf_nat_masquerade_ipv6_register_notifier
+# Not used in OOT (and changed in 5.10.5)
+ dfltcc_*
+# ignore changes to hisi_sas/*
+ module:drivers/scsi/hisi_sas/*
+# KVM internal
+ __gfn_*
+ __kvmhv_*
+ __kvm_*
+ __xive_vm_h_*
+ gfn_*
+ h_ipi_redirect
+ halt_poll_ns*
+ kvm_*
+ kvmhv_*
+ kvmppc_*
+ mark_page_dirty
+ vcpu_*
+ module:arch/powerpc/kvm/*
+ module:arch/s390/kvm/*
+ module:arch/x86/kvm/*
+# used only within arch/s390
+ uv_info
+# Not used in OOT
+ xhci_init_driver
+
+[base]
+arches:
+ alpha
+ amd64
+ arm64
+ arm64ilp32
+ armel
+ armhf
+ hppa
+ i386
+ ia64
+ m68k
+ mips
+ mips64
+ mips64el
+ mips64r6
+ mips64r6el
+ mipsel
+ mipsn32
+ mipsn32el
+ mipsn32r6
+ mipsn32r6el
+ mipsr6
+ mipsr6el
+ powerpc
+ ppc64
+ ppc64el
+ riscv64
+ s390
+ s390x
+ sh3
+ sh4
+ sparc
+ sparc64
+ x32
+compiler: gcc-11
+featuresets:
+ none
+ rt
+
+[build]
+debug-info: true
+# Disable code signing by default; this can be overridden per-architecture
+signed-code: false
+trusted-certs: debian/certs/debian-uefi-certs.pem
+
+[featureset-rt_base]
+enabled: true
+
+[description]
+part-long-up: This kernel is not suitable for SMP (multi-processor,
+ multi-core or hyper-threaded) systems.
+
+[image]
+initramfs-generators: initramfs-tools initramfs-fallback
+breaks: fwupdate (<< 12-7), wireless-regdb (<< 2019.06.03-1~)
+recommends: apparmor
+
+[relations]
+# compilers
+gcc-11: gcc-11 <!stage1 !cross !pkg.linux.nokernel>, gcc-11-@gnu-type-package@ <!stage1 cross !pkg.linux.nokernel>
+
+# initramfs-generators
+initramfs-fallback: linux-initramfs-tool
+initramfs-tools: initramfs-tools (>= 0.120+deb8u2)
diff --git a/debian/config/featureset-rt/config b/debian/config/featureset-rt/config
new file mode 100644
index 000000000000..9996e688931b
--- /dev/null
+++ b/debian/config/featureset-rt/config
@@ -0,0 +1,25 @@
+##
+## file: kernel/Kconfig.preempt
+##
+## choice: Preemption Model
+# CONFIG_PREEMPT_VOLUNTARY is not set
+CONFIG_PREEMPT_RT=y
+## end choice
+
+##
+## file: kernel/rcu/Kconfig
+##
+CONFIG_RCU_EXPERT=y
+
+##
+## file: kernel/trace/Kconfig
+##
+CONFIG_SCHED_TRACER=y
+CONFIG_HWLAT_TRACER=y
+
+##
+## file: unknown
+##
+#. Dropped between 4.9 and 4.11, but might come back
+CONFIG_MISSED_TIMER_OFFSETS_HIST=y
+CONFIG_WAKEUP_LATENCY_HIST=y
diff --git a/debian/config/featureset-rt/defines b/debian/config/featureset-rt/defines
new file mode 100644
index 000000000000..44e2f2b0304a
--- /dev/null
+++ b/debian/config/featureset-rt/defines
@@ -0,0 +1,7 @@
+[abi]
+ignore-changes: *
+
+[description]
+part-long-rt: This kernel includes the PREEMPT_RT realtime patch set.
+part-short-rt: PREEMPT_RT
+parts: rt
diff --git a/debian/config/hppa/config b/debian/config/hppa/config
new file mode 100644
index 000000000000..383fcfbe6f52
--- /dev/null
+++ b/debian/config/hppa/config
@@ -0,0 +1,664 @@
+##
+## file: arch/parisc/Kconfig
+##
+## choice: Processor type
+# CONFIG_PA7100LC is not set
+# CONFIG_PA7200 is not set
+# CONFIG_PA7300LC is not set
+## end choice
+CONFIG_MLONGCALLS=y
+## choice: Kernel page size
+CONFIG_PARISC_PAGE_SIZE_4KB=y
+# CONFIG_PARISC_PAGE_SIZE_16KB is not set
+# CONFIG_PARISC_PAGE_SIZE_64KB is not set
+## end choice
+
+##
+## file: block/partitions/Kconfig
+##
+# CONFIG_PARTITION_ADVANCED is not set
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_NS87415=m
+CONFIG_PATA_LEGACY=m
+
+##
+## file: drivers/block/Kconfig
+##
+# CONFIG_BLK_DEV_FD is not set
+# CONFIG_BLK_DEV_SX8 is not set
+CONFIG_CDROM_PKTCDVD=m
+CONFIG_CDROM_PKTCDVD_BUFFERS=8
+# CONFIG_CDROM_PKTCDVD_WCACHE is not set
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_PRINTER=m
+# CONFIG_LP_CONSOLE is not set
+CONFIG_PPDEV=m
+# CONFIG_DTLK is not set
+# CONFIG_APPLICOM is not set
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+# CONFIG_IPMI_HANDLER is not set
+
+##
+## file: drivers/eisa/Kconfig
+##
+CONFIG_EISA=y
+CONFIG_EISA_NAMES=y
+
+##
+## file: drivers/firewire/Kconfig
+##
+# CONFIG_FIREWIRE is not set
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+# CONFIG_DRM is not set
+
+##
+## file: drivers/hid/usbhid/Kconfig
+##
+CONFIG_USB_HID=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+# CONFIG_SENSORS_F71805F is not set
+
+##
+## file: drivers/i2c/Kconfig
+##
+# CONFIG_I2C is not set
+
+##
+## file: drivers/input/Kconfig
+##
+# CONFIG_INPUT_JOYDEV is not set
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+# CONFIG_GAMEPORT is not set
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+# CONFIG_INPUT_JOYSTICK is not set
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+CONFIG_KEYBOARD_ATKBD=y
+CONFIG_KEYBOARD_ATKBD_HP_KEYCODES=y
+# CONFIG_KEYBOARD_ATKBD_RDI_KEYCODES is not set
+# CONFIG_KEYBOARD_LKKBD is not set
+CONFIG_KEYBOARD_HIL_OLD=m
+CONFIG_KEYBOARD_HIL=m
+# CONFIG_KEYBOARD_NEWTON is not set
+# CONFIG_KEYBOARD_SUNKBD is not set
+# CONFIG_KEYBOARD_XTKBD is not set
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MISC=y
+# CONFIG_HP_SDC_RTC is not set
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_INPUT_MOUSE=y
+CONFIG_MOUSE_PS2=m
+# CONFIG_MOUSE_SERIAL is not set
+# CONFIG_MOUSE_INPORT is not set
+# CONFIG_MOUSE_LOGIBM is not set
+# CONFIG_MOUSE_PC110PAD is not set
+# CONFIG_MOUSE_VSXXXAA is not set
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO=y
+# CONFIG_SERIO_SERPORT is not set
+# CONFIG_SERIO_PARKBD is not set
+CONFIG_SERIO_GSCPS2=y
+CONFIG_HP_SDC=m
+CONFIG_HIL_MLC=m
+# CONFIG_SERIO_PCIPS2 is not set
+CONFIG_SERIO_LIBPS2=y
+CONFIG_SERIO_RAW=m
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+# CONFIG_INPUT_TOUCHSCREEN is not set
+
+##
+## file: drivers/mmc/Kconfig
+##
+# CONFIG_MMC is not set
+
+##
+## file: drivers/mtd/Kconfig
+##
+# CONFIG_MTD is not set
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+# CONFIG_ARCNET is not set
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+CONFIG_FEALNX=m
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_NET_VENDOR_3COM=y
+CONFIG_EL3=m
+# CONFIG_3C515 is not set
+CONFIG_PCMCIA_3C574=m
+CONFIG_PCMCIA_3C589=m
+CONFIG_VORTEX=m
+CONFIG_TYPHOON=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_PCMCIA_AXNET=m
+CONFIG_NE2000=m
+CONFIG_NE2K_PCI=m
+CONFIG_PCMCIA_PCNET=m
+CONFIG_ULTRA=m
+CONFIG_WD80x3=m
+
+##
+## file: drivers/net/ethernet/adaptec/Kconfig
+##
+CONFIG_ADAPTEC_STARFIRE=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_AMD8111_ETH=m
+# CONFIG_LANCE is not set
+CONFIG_PCMCIA_NMCLAN=m
+# CONFIG_NI65 is not set
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+CONFIG_B44=m
+
+##
+## file: drivers/net/ethernet/cirrus/Kconfig
+##
+CONFIG_CS89x0_ISA=m
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_NET_TULIP=y
+# CONFIG_DE2104X is not set
+CONFIG_TULIP=m
+# CONFIG_TULIP_MWI is not set
+CONFIG_TULIP_MMIO=y
+# CONFIG_WINBOND_840 is not set
+# CONFIG_DM9102 is not set
+CONFIG_PCMCIA_XIRCOM=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_SUNDANCE=m
+# CONFIG_SUNDANCE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/fujitsu/Kconfig
+##
+CONFIG_PCMCIA_FMVJ18X=m
+
+##
+## file: drivers/net/ethernet/i825xx/Kconfig
+##
+CONFIG_LASI_82596=m
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NATSEMI=m
+
+##
+## file: drivers/net/ethernet/neterion/Kconfig
+##
+# CONFIG_VXGE is not set
+
+##
+## file: drivers/net/ethernet/nvidia/Kconfig
+##
+CONFIG_FORCEDETH=m
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_8139CP=m
+CONFIG_8139TOO=m
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+CONFIG_SIS900=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_SMC9194=m
+CONFIG_PCMCIA_SMC91C92=m
+CONFIG_EPIC100=m
+
+##
+## file: drivers/net/ethernet/sun/Kconfig
+##
+CONFIG_HAPPYMEAL=m
+CONFIG_SUNGEM=m
+# CONFIG_NIU is not set
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+CONFIG_VIA_RHINE=m
+# CONFIG_VIA_RHINE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/xircom/Kconfig
+##
+CONFIG_PCMCIA_XIRC2PS=m
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+# CONFIG_FDDI is not set
+
+##
+## file: drivers/net/hippi/Kconfig
+##
+# CONFIG_HIPPI is not set
+
+##
+## file: drivers/net/plip/Kconfig
+##
+CONFIG_PLIP=m
+
+##
+## file: drivers/net/wan/Kconfig
+##
+# CONFIG_WAN is not set
+
+##
+## file: drivers/net/wireless/Kconfig
+##
+CONFIG_PCMCIA_RAYCS=m
+CONFIG_PCMCIA_WL3501=m
+
+##
+## file: drivers/net/wireless/atmel/Kconfig
+##
+# CONFIG_ATMEL is not set
+
+##
+## file: drivers/net/wireless/cisco/Kconfig
+##
+CONFIG_AIRO_CS=m
+
+##
+## file: drivers/net/wireless/intel/ipw2x00/Kconfig
+##
+# CONFIG_IPW2100 is not set
+
+##
+## file: drivers/net/wireless/intersil/orinoco/Kconfig
+##
+CONFIG_HERMES=m
+# CONFIG_PLX_HERMES is not set
+# CONFIG_TMD_HERMES is not set
+# CONFIG_PCI_HERMES is not set
+CONFIG_PCMCIA_HERMES=m
+
+##
+## file: drivers/net/wireless/zydas/Kconfig
+##
+# CONFIG_USB_ZD1201 is not set
+
+##
+## file: drivers/parisc/Kconfig
+##
+CONFIG_GSC=y
+CONFIG_HPPB=y
+CONFIG_IOMMU_CCIO=y
+CONFIG_GSC_LASI=y
+CONFIG_GSC_WAX=y
+CONFIG_ISA=y
+CONFIG_GSC_DINO=y
+CONFIG_PCI_LBA=y
+CONFIG_SUPERIO=y
+CONFIG_CHASSIS_LCD_LED=y
+CONFIG_PDC_CHASSIS=y
+CONFIG_PDC_CHASSIS_WARN=y
+CONFIG_PDC_STABLE=y
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+# CONFIG_HOTPLUG_PCI is not set
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+CONFIG_PCCARD=m
+CONFIG_PCMCIA=m
+CONFIG_CARDBUS=y
+CONFIG_YENTA=m
+CONFIG_PD6729=m
+CONFIG_I82092=m
+CONFIG_I82365=m
+# CONFIG_TCIC is not set
+# CONFIG_PCMCIA_DEBUG is not set
+
+##
+## file: drivers/pnp/Kconfig
+##
+# CONFIG_PNP is not set
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_CLASS=y
+CONFIG_RTC_DRV_GENERIC=y
+
+##
+## file: drivers/scsi/Kconfig
+##
+# CONFIG_SCSI_BUSLOGIC is not set
+# CONFIG_SCSI_MYRB is not set
+# CONFIG_SCSI_MYRS is not set
+# CONFIG_SCSI_DMX3191D is not set
+# CONFIG_SCSI_GENERIC_NCR5380 is not set
+# CONFIG_SCSI_IPS is not set
+CONFIG_SCSI_INITIO=m
+# CONFIG_SCSI_INIA100 is not set
+CONFIG_SCSI_LASI700=m
+CONFIG_SCSI_SYM53C8XX_DMA_ADDRESSING_MODE=1
+CONFIG_SCSI_SYM53C8XX_DEFAULT_TAGS=16
+CONFIG_SCSI_SYM53C8XX_MAX_TAGS=64
+# CONFIG_SCSI_IPR is not set
+CONFIG_SCSI_ZALON=m
+CONFIG_SCSI_NCR53C8XX_DEFAULT_TAGS=8
+CONFIG_SCSI_NCR53C8XX_MAX_TAGS=32
+CONFIG_SCSI_NCR53C8XX_SYNC=20
+# CONFIG_SCSI_QLOGIC_FAS is not set
+# CONFIG_SCSI_QLOGIC_1280 is not set
+# CONFIG_SCSI_SIM710 is not set
+# CONFIG_SCSI_DC395x is not set
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+CONFIG_MEGARAID_NEWGEN=y
+CONFIG_MEGARAID_MM=m
+CONFIG_MEGARAID_MAILBOX=m
+# CONFIG_MEGARAID_LEGACY is not set
+
+##
+## file: drivers/scsi/pcmcia/Kconfig
+##
+CONFIG_PCMCIA_QLOGIC=m
+CONFIG_PCMCIA_SYM53C500=m
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_VT=y
+CONFIG_VT_CONSOLE=y
+# CONFIG_SERIAL_NONSTANDARD is not set
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_MUX=y
+CONFIG_SERIAL_MUX_CONSOLE=y
+CONFIG_SERIAL_JSM=m
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_CS=m
+CONFIG_SERIAL_8250_NR_UARTS=32
+CONFIG_SERIAL_8250_RUNTIME_UARTS=4
+CONFIG_SERIAL_8250_EXTENDED=y
+CONFIG_SERIAL_8250_MANY_PORTS=y
+CONFIG_SERIAL_8250_SHARE_IRQ=y
+# CONFIG_SERIAL_8250_DETECT_IRQ is not set
+# CONFIG_SERIAL_8250_RSA is not set
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=m
+# CONFIG_USB_USS720 is not set
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_OHCI_HCD=m
+# CONFIG_USB_UHCI_HCD is not set
+# CONFIG_USB_SL811_HCD is not set
+
+##
+## file: drivers/video/console/Kconfig
+##
+CONFIG_DUMMY_CONSOLE_COLUMNS=160
+CONFIG_DUMMY_CONSOLE_ROWS=64
+CONFIG_STI_CONSOLE=y
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_MODE_HELPERS=y
+# CONFIG_FB_TILEBLITTING is not set
+# CONFIG_FB_CIRRUS is not set
+# CONFIG_FB_PM2 is not set
+# CONFIG_FB_CYBER2000 is not set
+# CONFIG_FB_ASILIANT is not set
+# CONFIG_FB_IMSTT is not set
+CONFIG_FB_STI=y
+# CONFIG_FB_S1D13XXX is not set
+# CONFIG_FB_MATROX is not set
+# CONFIG_FB_RADEON is not set
+# CONFIG_FB_ATY128 is not set
+# CONFIG_FB_ATY is not set
+# CONFIG_FB_S3 is not set
+# CONFIG_FB_SAVAGE is not set
+# CONFIG_FB_SIS is not set
+# CONFIG_FB_NEOMAGIC is not set
+# CONFIG_FB_KYRO is not set
+# CONFIG_FB_3DFX is not set
+# CONFIG_FB_VOODOO1 is not set
+# CONFIG_FB_VT8623 is not set
+# CONFIG_FB_TRIDENT is not set
+# CONFIG_FB_ARK is not set
+# CONFIG_FB_PM3 is not set
+# CONFIG_FB_VIRTUAL is not set
+
+##
+## file: drivers/w1/Kconfig
+##
+# CONFIG_W1 is not set
+
+##
+## file: fs/nfs/Kconfig
+##
+CONFIG_ROOT_NFS=y
+
+##
+## file: init/Kconfig
+##
+CONFIG_SGETMASK_SYSCALL=y
+CONFIG_SYSFS_SYSCALL=y
+
+##
+## file: lib/Kconfig.debug
+##
+CONFIG_DEBUG_STACKOVERFLOW=y
+# CONFIG_SOFTLOCKUP_DETECTOR is not set
+# CONFIG_HARDLOCKUP_DETECTOR is not set
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+CONFIG_FLATMEM_MANUAL=y
+# CONFIG_SPARSEMEM_MANUAL is not set
+## end choice
+
+##
+## file: net/ax25/Kconfig
+##
+# CONFIG_HAMRADIO is not set
+
+##
+## file: net/decnet/Kconfig
+##
+# CONFIG_DECNET is not set
+
+##
+## file: net/ipv4/Kconfig
+##
+# CONFIG_IP_ADVANCED_ROUTER is not set
+CONFIG_IP_PNP=y
+# CONFIG_IP_PNP_DHCP is not set
+CONFIG_IP_PNP_BOOTP=y
+# CONFIG_IP_PNP_RARP is not set
+
+##
+## file: net/lapb/Kconfig
+##
+# CONFIG_LAPB is not set
+
+##
+## file: net/llc/Kconfig
+##
+# CONFIG_LLC2 is not set
+
+##
+## file: sound/drivers/Kconfig
+##
+CONFIG_SND_DUMMY=m
+# CONFIG_SND_VIRMIDI is not set
+# CONFIG_SND_MTPAV is not set
+# CONFIG_SND_SERIAL_U16550 is not set
+# CONFIG_SND_MPU401 is not set
+
+##
+## file: sound/isa/Kconfig
+##
+# CONFIG_SND_AD1848 is not set
+# CONFIG_SND_CMI8330 is not set
+# CONFIG_SND_CS4231 is not set
+# CONFIG_SND_CS4236 is not set
+# CONFIG_SND_ES1688 is not set
+# CONFIG_SND_ES18XX is not set
+# CONFIG_SND_GUSCLASSIC is not set
+# CONFIG_SND_GUSEXTREME is not set
+# CONFIG_SND_GUSMAX is not set
+# CONFIG_SND_INTERWAVE is not set
+# CONFIG_SND_INTERWAVE_STB is not set
+# CONFIG_SND_OPL3SA2 is not set
+# CONFIG_SND_OPTI92X_AD1848 is not set
+# CONFIG_SND_OPTI92X_CS4231 is not set
+# CONFIG_SND_OPTI93X is not set
+# CONFIG_SND_SB8 is not set
+# CONFIG_SND_SB16 is not set
+# CONFIG_SND_SBAWE is not set
+# CONFIG_SND_SSCAPE is not set
+# CONFIG_SND_WAVEFRONT is not set
+
+##
+## file: sound/parisc/Kconfig
+##
+CONFIG_SND_HARMONY=m
+
+##
+## file: sound/pci/Kconfig
+##
+# CONFIG_SND_ALS4000 is not set
+# CONFIG_SND_ALI5451 is not set
+# CONFIG_SND_ATIIXP is not set
+# CONFIG_SND_ATIIXP_MODEM is not set
+# CONFIG_SND_AU8810 is not set
+# CONFIG_SND_AU8820 is not set
+# CONFIG_SND_AU8830 is not set
+# CONFIG_SND_AZT3328 is not set
+# CONFIG_SND_BT87X is not set
+# CONFIG_SND_CA0106 is not set
+# CONFIG_SND_CMIPCI is not set
+# CONFIG_SND_CS4281 is not set
+# CONFIG_SND_CS46XX is not set
+# CONFIG_SND_EMU10K1 is not set
+# CONFIG_SND_EMU10K1X is not set
+# CONFIG_SND_ENS1370 is not set
+# CONFIG_SND_ENS1371 is not set
+# CONFIG_SND_ES1938 is not set
+# CONFIG_SND_ES1968 is not set
+# CONFIG_SND_FM801 is not set
+# CONFIG_SND_HDSP is not set
+# CONFIG_SND_ICE1712 is not set
+# CONFIG_SND_ICE1724 is not set
+# CONFIG_SND_INTEL8X0 is not set
+# CONFIG_SND_INTEL8X0M is not set
+# CONFIG_SND_KORG1212 is not set
+# CONFIG_SND_MAESTRO3 is not set
+# CONFIG_SND_MIXART is not set
+# CONFIG_SND_NM256 is not set
+# CONFIG_SND_RME32 is not set
+# CONFIG_SND_RME96 is not set
+# CONFIG_SND_RME9652 is not set
+# CONFIG_SND_SONICVIBES is not set
+# CONFIG_SND_TRIDENT is not set
+# CONFIG_SND_VIA82XX is not set
+# CONFIG_SND_VIA82XX_MODEM is not set
+# CONFIG_SND_VX222 is not set
+# CONFIG_SND_YMFPCI is not set
+
+##
+## file: sound/pci/hda/Kconfig
+##
+# CONFIG_SND_HDA_INTEL is not set
diff --git a/debian/config/hppa/config.parisc b/debian/config/hppa/config.parisc
new file mode 100644
index 000000000000..5ca2deb2c427
--- /dev/null
+++ b/debian/config/hppa/config.parisc
@@ -0,0 +1,26 @@
+##
+## file: arch/parisc/Kconfig
+##
+## choice: Processor type
+CONFIG_PA7000=y
+# CONFIG_PA8X00 is not set
+## end choice
+CONFIG_SMP=y
+CONFIG_NR_CPUS=4
+
+##
+## file: drivers/net/ethernet/ti/Kconfig
+##
+CONFIG_TLAN=m
+
+##
+## file: drivers/scsi/Kconfig
+##
+# CONFIG_SCSI_DPT_I2O is not set
+# CONFIG_SCSI_NSP32 is not set
+
+##
+## file: drivers/scsi/pcmcia/Kconfig
+##
+CONFIG_PCMCIA_AHA152X=m
+CONFIG_PCMCIA_NINJA_SCSI=m
diff --git a/debian/config/hppa/config.parisc64 b/debian/config/hppa/config.parisc64
new file mode 100644
index 000000000000..5870d9696e32
--- /dev/null
+++ b/debian/config/hppa/config.parisc64
@@ -0,0 +1,56 @@
+##
+## file: arch/parisc/Kconfig
+##
+## choice: Processor type
+# CONFIG_PA7000 is not set
+CONFIG_PA8X00=y
+## end choice
+CONFIG_64BIT=y
+CONFIG_SMP=y
+CONFIG_NR_CPUS=8
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_SIL680=m
+
+##
+## file: drivers/char/agp/Kconfig
+##
+#. for ATI FireGL DRM in C8000 workstation
+CONFIG_AGP=y
+CONFIG_AGP_PARISC=y
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+CONFIG_IPMI_HANDLER=m
+CONFIG_IPMI_DEVICE_INTERFACE=m
+CONFIG_IPMI_SI=m
+CONFIG_IPMI_WATCHDOG=m
+CONFIG_IPMI_POWEROFF=m
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+#. for ATI FireGL DRM in C8000 workstation
+CONFIG_DRM=y
+CONFIG_DRM_RADEON=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=y
+
+##
+## file: drivers/i2c/algos/Kconfig
+##
+CONFIG_I2C_ALGOBIT=y
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+# CONFIG_FLATMEM_MANUAL is not set
+# CONFIG_SPARSEMEM_MANUAL is not set
+## end choice
diff --git a/debian/config/hppa/defines b/debian/config/hppa/defines
new file mode 100644
index 000000000000..a2ee2827648b
--- /dev/null
+++ b/debian/config/hppa/defines
@@ -0,0 +1,29 @@
+[base]
+flavours: parisc parisc64
+default-flavour: parisc
+kernel-arch: parisc
+
+[build]
+image-file: arch/parisc/boot/bzImage
+# temporarily disable debug info: Required disk size exceeds our hppa buildd machines.
+debug-info: false
+
+[image]
+suggests: palo
+install-stem: vmlinuz
+
+[parisc_description]
+hardware: 32-bit PA-RISC
+hardware-long: HP PA-RISC 32-bit systems with max 4 GB RAM
+
+[parisc64_base]
+cflags: -fno-cse-follow-jumps
+override-host-type: hppa64-linux-gnu
+
+[parisc64_description]
+hardware: 64-bit PA-RISC
+hardware-long: HP PA-RISC 64-bit systems with support for more than 4 GB RAM
+
+[relations]
+gcc-11: gcc-11 <!stage1 !cross !pkg.linux.nokernel>, gcc-11-hppa-linux-gnu <!stage1 cross !pkg.linux.nokernel>, binutils-hppa64-linux-gnu <!stage1 !pkg.linux.nokernel>, gcc-11-hppa64-linux-gnu <!stage1 !pkg.linux.nokernel>
+
diff --git a/debian/config/i386/config b/debian/config/i386/config
new file mode 100644
index 000000000000..85cfdfb53138
--- /dev/null
+++ b/debian/config/i386/config
@@ -0,0 +1,506 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_ARCH_MMAP_RND_BITS=8
+
+##
+## file: arch/x86/Kconfig
+##
+# CONFIG_64BIT is not set
+CONFIG_SMP=y
+CONFIG_X86_BIGSMP=y
+CONFIG_NR_CPUS=32
+# CONFIG_X86_LEGACY_VM86 is not set
+CONFIG_TOSHIBA=m
+CONFIG_X86_REBOOTFIXUPS=y
+## choice: High Memory Support
+# CONFIG_NOHIGHMEM is not set
+CONFIG_HIGHMEM4G=y
+# CONFIG_HIGHMEM64G is not set
+## end choice
+## choice: Memory split
+CONFIG_VMSPLIT_3G=y
+# CONFIG_VMSPLIT_3G_OPT is not set
+# CONFIG_VMSPLIT_2G is not set
+# CONFIG_VMSPLIT_2G_OPT is not set
+# CONFIG_VMSPLIT_1G is not set
+## end choice
+# CONFIG_X86_PAE is not set
+# CONFIG_NUMA is not set
+CONFIG_HIGHPTE=y
+CONFIG_PHYSICAL_ALIGN=0x1000000
+CONFIG_APM=m
+# CONFIG_APM_IGNORE_USER_SUSPEND is not set
+# CONFIG_APM_DO_ENABLE is not set
+# CONFIG_APM_CPU_IDLE is not set
+# CONFIG_APM_DISPLAY_BLANK is not set
+# CONFIG_APM_ALLOW_INTS is not set
+## choice: PCI access mode
+# CONFIG_PCI_GOBIOS is not set
+# CONFIG_PCI_GOMMCONFIG is not set
+# CONFIG_PCI_GODIRECT is not set
+# CONFIG_PCI_GOOLPC is not set
+CONFIG_PCI_GOANY=y
+## end choice
+CONFIG_PCI_MMCONFIG=y
+CONFIG_ISA=y
+CONFIG_SCx200=m
+CONFIG_SCx200HR_TIMER=m
+# CONFIG_OLPC is not set
+
+##
+## file: arch/x86/Kconfig.cpu
+##
+CONFIG_X86_GENERIC=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_SERPENT_SSE2_586=m
+CONFIG_CRYPTO_TWOFISH_586=m
+
+##
+## file: drivers/accessibility/speakup/Kconfig
+##
+CONFIG_SPEAKUP_SYNTH_DECPC=m
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_CS5520=m
+CONFIG_PATA_CS5530=m
+CONFIG_PATA_CS5535=m
+CONFIG_PATA_CS5536=m
+CONFIG_PATA_SC1200=m
+CONFIG_PATA_ISAPNP=m
+CONFIG_PATA_OPTI=m
+CONFIG_PATA_LEGACY=m
+
+##
+## file: drivers/atm/Kconfig
+##
+CONFIG_ATM_NICSTAR=m
+# CONFIG_ATM_NICSTAR_USE_SUNI is not set
+# CONFIG_ATM_NICSTAR_USE_IDT77105 is not set
+CONFIG_ATM_IA=m
+# CONFIG_ATM_IA_DEBUG is not set
+
+##
+## file: drivers/auxdisplay/Kconfig
+##
+CONFIG_CFAG12864B=m
+CONFIG_CFAG12864B_RATE=20
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_SONYPI=m
+CONFIG_SCx200_GPIO=m
+
+##
+## file: drivers/char/agp/Kconfig
+##
+#. Workaround
+CONFIG_AGP_ALI=y
+#. Workaround
+CONFIG_AGP_ATI=y
+#. Workaround
+CONFIG_AGP_AMD=y
+#. Workaround
+CONFIG_AGP_NVIDIA=y
+#. Workaround
+CONFIG_AGP_SWORKS=y
+#. Workaround
+CONFIG_AGP_EFFICEON=y
+
+##
+## file: drivers/comedi/Kconfig
+##
+CONFIG_COMEDI_ISA_DRIVERS=y
+CONFIG_COMEDI_PCL711=m
+CONFIG_COMEDI_PCL724=m
+CONFIG_COMEDI_PCL726=m
+CONFIG_COMEDI_PCL730=m
+CONFIG_COMEDI_PCL812=m
+CONFIG_COMEDI_PCL816=m
+CONFIG_COMEDI_PCL818=m
+CONFIG_COMEDI_PCM3724=m
+CONFIG_COMEDI_AMPLC_DIO200_ISA=m
+CONFIG_COMEDI_AMPLC_PC236_ISA=m
+CONFIG_COMEDI_AMPLC_PC263_ISA=m
+CONFIG_COMEDI_RTI800=m
+CONFIG_COMEDI_RTI802=m
+CONFIG_COMEDI_DAC02=m
+CONFIG_COMEDI_DAS16M1=m
+CONFIG_COMEDI_DAS08_ISA=m
+CONFIG_COMEDI_DAS16=m
+CONFIG_COMEDI_DAS800=m
+CONFIG_COMEDI_DAS1800=m
+CONFIG_COMEDI_DAS6402=m
+CONFIG_COMEDI_DT2801=m
+CONFIG_COMEDI_DT2811=m
+CONFIG_COMEDI_DT2814=m
+CONFIG_COMEDI_DT2815=m
+CONFIG_COMEDI_DT2817=m
+CONFIG_COMEDI_DT282X=m
+CONFIG_COMEDI_DMM32AT=m
+CONFIG_COMEDI_FL512=m
+CONFIG_COMEDI_AIO_AIO12_8=m
+CONFIG_COMEDI_AIO_IIRO_16=m
+CONFIG_COMEDI_C6XDIGIO=m
+CONFIG_COMEDI_MPC624=m
+CONFIG_COMEDI_ADQ12B=m
+CONFIG_COMEDI_NI_AT_A2150=m
+CONFIG_COMEDI_NI_AT_AO=m
+CONFIG_COMEDI_NI_ATMIO=m
+CONFIG_COMEDI_NI_ATMIO16D=m
+CONFIG_COMEDI_NI_LABPC_ISA=m
+CONFIG_COMEDI_PCMAD=m
+CONFIG_COMEDI_PCMDA12=m
+CONFIG_COMEDI_PCMMIO=m
+CONFIG_COMEDI_PCMUIO=m
+CONFIG_COMEDI_MULTIQ3=m
+
+##
+## file: drivers/cpufreq/Kconfig.x86
+##
+CONFIG_X86_POWERNOW_K6=m
+CONFIG_X86_POWERNOW_K7=m
+CONFIG_X86_GX_SUSPMOD=m
+CONFIG_X86_SPEEDSTEP_CENTRINO_TABLE=y
+CONFIG_X86_SPEEDSTEP_ICH=m
+CONFIG_X86_SPEEDSTEP_SMI=m
+CONFIG_X86_CPUFREQ_NFORCE2=m
+CONFIG_X86_LONGRUN=m
+CONFIG_X86_LONGHAUL=m
+# CONFIG_X86_E_POWERSAVER is not set
+CONFIG_X86_SPEEDSTEP_RELAXED_CAP_CHECK=y
+
+##
+## file: drivers/crypto/Kconfig
+##
+CONFIG_CRYPTO_DEV_GEODE=m
+
+##
+## file: drivers/dma/Kconfig
+##
+CONFIG_PCH_DMA=m
+
+##
+## file: drivers/gpio/Kconfig
+##
+CONFIG_GPIO_VX855=m
+CONFIG_GPIO_CS5535=m
+CONFIG_GPIO_PCH=m
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_EG20T=m
+CONFIG_I2C_PXA=m
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_WISTRON_BTNS=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+# CONFIG_MOUSE_PS2_OLPC is not set
+CONFIG_MOUSE_INPORT=m
+# CONFIG_MOUSE_ATIXL is not set
+CONFIG_MOUSE_LOGIBM=m
+CONFIG_MOUSE_PC110PAD=m
+
+##
+## file: drivers/iommu/intel/Kconfig
+##
+# CONFIG_INTEL_IOMMU is not set
+
+##
+## file: drivers/leds/Kconfig
+##
+CONFIG_LEDS_WRAP=m
+
+##
+## file: drivers/macintosh/Kconfig
+##
+# CONFIG_MACINTOSH_DRIVERS is not set
+
+##
+## file: drivers/media/radio/Kconfig
+##
+CONFIG_V4L_RADIO_ISA_DRIVERS=y
+CONFIG_RADIO_CADET=m
+CONFIG_RADIO_RTRACK=m
+CONFIG_RADIO_RTRACK2=m
+CONFIG_RADIO_AZTECH=m
+CONFIG_RADIO_GEMTEK=m
+CONFIG_RADIO_MIROPCM20=m
+CONFIG_RADIO_SF16FMI=m
+CONFIG_RADIO_SF16FMR2=m
+CONFIG_RADIO_TERRATEC=m
+CONFIG_RADIO_TRUST=m
+CONFIG_RADIO_TYPHOON=m
+CONFIG_RADIO_ZOLTRIX=m
+
+##
+## file: drivers/mfd/Kconfig
+##
+CONFIG_MFD_CS5535=m
+CONFIG_MFD_VX855=m
+
+##
+## file: drivers/misc/Kconfig
+##
+CONFIG_CS5535_MFGPT=m
+CONFIG_CS5535_CLOCK_EVENT_SRC=m
+CONFIG_PCH_PHUB=m
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+CONFIG_MTD_SCx200_DOCFLASH=m
+CONFIG_MTD_PCMCIA=m
+# CONFIG_MTD_PCMCIA_ANONYMOUS is not set
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+CONFIG_ARCNET_COM20020_ISA=m
+
+##
+## file: drivers/net/can/Kconfig
+##
+CONFIG_PCH_CAN=m
+
+##
+## file: drivers/net/can/cc770/Kconfig
+##
+CONFIG_CAN_CC770=m
+CONFIG_CAN_CC770_ISA=m
+# CONFIG_CAN_CC770_PLATFORM is not set
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_NET_VENDOR_3COM=y
+CONFIG_EL3=m
+CONFIG_3C515=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_NET_VENDOR_8390=y
+CONFIG_NE2000=m
+CONFIG_ULTRA=m
+CONFIG_WD80x3=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_NET_VENDOR_AMD=y
+CONFIG_LANCE=m
+CONFIG_NI65=m
+
+##
+## file: drivers/net/ethernet/cirrus/Kconfig
+##
+CONFIG_NET_VENDOR_CIRRUS=y
+CONFIG_CS89x0_ISA=m
+
+##
+## file: drivers/net/ethernet/dec/Kconfig
+##
+CONFIG_NET_VENDOR_DEC=y
+
+##
+## file: drivers/net/ethernet/fujitsu/Kconfig
+##
+CONFIG_NET_VENDOR_FUJITSU=y
+
+##
+## file: drivers/net/ethernet/oki-semi/pch_gbe/Kconfig
+##
+CONFIG_PCH_GBE=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_NET_VENDOR_SMSC=y
+CONFIG_SMC9194=m
+
+##
+## file: drivers/net/wan/Kconfig
+##
+CONFIG_HOSTESS_SV11=m
+CONFIG_COSA=m
+CONFIG_SEALEVEL_4021=m
+CONFIG_N2=m
+CONFIG_C101=m
+
+##
+## file: drivers/net/wireless/intel/ipw2x00/Kconfig
+##
+CONFIG_IPW2100=m
+CONFIG_IPW2100_MONITOR=y
+# CONFIG_IPW2100_DEBUG is not set
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+CONFIG_HOTPLUG_PCI_COMPAQ=m
+CONFIG_HOTPLUG_PCI_IBM=m
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+CONFIG_I82365=m
+
+##
+## file: drivers/platform/x86/Kconfig
+##
+CONFIG_TC1100_WMI=m
+
+##
+## file: drivers/pnp/isapnp/Kconfig
+##
+CONFIG_ISAPNP=y
+
+##
+## file: drivers/pnp/pnpbios/Kconfig
+##
+CONFIG_PNPBIOS=y
+# CONFIG_PNPBIOS_PROC_FS is not set
+
+##
+## file: drivers/scsi/Kconfig
+##
+# CONFIG_SCSI_GENERIC_NCR5380 is not set
+# CONFIG_SCSI_INIA100 is not set
+CONFIG_SCSI_QLOGIC_FAS=m
+CONFIG_SCSI_NSP32=m
+
+##
+## file: drivers/scsi/pcmcia/Kconfig
+##
+CONFIG_PCMCIA_NINJA_SCSI=m
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI_TOPCLIFF_PCH=m
+
+##
+## file: drivers/staging/olpc_dcon/Kconfig
+##
+CONFIG_FB_OLPC_DCON=m
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_PCH_UART=m
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250_EXAR_ST16C554=m
+
+##
+## file: drivers/usb/gadget/udc/Kconfig
+##
+CONFIG_USB_AMD5536UDC=m
+
+##
+## file: drivers/video/console/Kconfig
+##
+CONFIG_MDA_CONSOLE=m
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_I810=m
+CONFIG_FB_I810_GTF=y
+CONFIG_FB_I810_I2C=y
+CONFIG_FB_MATROX_G=y
+CONFIG_FB_MATROX_MAVEN=m
+CONFIG_FB_ATY_GENERIC_LCD=y
+CONFIG_FB_SAVAGE_I2C=y
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_SCx200_WDT=m
+CONFIG_SBC8360_WDT=m
+CONFIG_SBC7240_WDT=m
+CONFIG_PCWATCHDOG=m
+CONFIG_MIXCOMWD=m
+CONFIG_WDT=m
+
+##
+## file: kernel/irq/Kconfig
+##
+# CONFIG_SPARSE_IRQ is not set
+
+##
+## file: lib/Kconfig.debug
+##
+CONFIG_FRAME_WARN=1024
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+CONFIG_FLATMEM_MANUAL=y
+# CONFIG_SPARSEMEM_MANUAL is not set
+## end choice
+
+##
+## file: security/Kconfig
+##
+CONFIG_LSM_MMAP_MIN_ADDR=0
+
+##
+## file: sound/isa/Kconfig
+##
+CONFIG_SND_ISA=y
+CONFIG_SND_ADLIB=m
+CONFIG_SND_AD1816A=m
+CONFIG_SND_AD1848=m
+CONFIG_SND_ALS100=m
+CONFIG_SND_AZT1605=m
+CONFIG_SND_AZT2316=m
+CONFIG_SND_AZT2320=m
+CONFIG_SND_CMI8330=m
+CONFIG_SND_CS4231=m
+CONFIG_SND_CS4236=m
+CONFIG_SND_ES1688=m
+CONFIG_SND_ES18XX=m
+CONFIG_SND_SC6000=m
+CONFIG_SND_GUSCLASSIC=m
+CONFIG_SND_GUSEXTREME=m
+CONFIG_SND_GUSMAX=m
+CONFIG_SND_INTERWAVE=m
+CONFIG_SND_INTERWAVE_STB=m
+CONFIG_SND_JAZZ16=m
+CONFIG_SND_OPL3SA2=m
+CONFIG_SND_OPTI92X_AD1848=m
+CONFIG_SND_OPTI92X_CS4231=m
+CONFIG_SND_OPTI93X=m
+CONFIG_SND_MIRO=m
+CONFIG_SND_SB8=m
+CONFIG_SND_SB16=m
+CONFIG_SND_SBAWE=m
+CONFIG_SND_SB16_CSP=y
+CONFIG_SND_SSCAPE=m
+CONFIG_SND_WAVEFRONT=m
+CONFIG_SND_MSND_PINNACLE=m
+CONFIG_SND_MSND_CLASSIC=m
+
+##
+## file: sound/pci/Kconfig
+##
+CONFIG_SND_CS5530=m
+CONFIG_SND_CS5535AUDIO=m
+CONFIG_SND_SIS7019=m
diff --git a/debian/config/i386/config.686 b/debian/config/i386/config.686
new file mode 100644
index 000000000000..13b0e7b21ceb
--- /dev/null
+++ b/debian/config/i386/config.686
@@ -0,0 +1,82 @@
+##
+## file: arch/x86/Kconfig
+##
+CONFIG_X86_32_IRIS=m
+# CONFIG_MATH_EMULATION is not set
+CONFIG_OLPC=y
+CONFIG_OLPC_XO1_PM=y
+CONFIG_OLPC_XO1_RTC=y
+CONFIG_OLPC_XO1_SCI=y
+CONFIG_OLPC_XO15_SCI=y
+CONFIG_ALIX=y
+CONFIG_NET5501=y
+CONFIG_GEOS=y
+
+##
+## file: arch/x86/Kconfig.cpu
+##
+## choice: Processor family
+# CONFIG_M486 is not set
+#. We want to support Geode LX and similar AMD family 5 CPUs as well as
+#. family 6+ CPUs
+CONFIG_MGEODE_LX=y
+## end choice
+
+##
+## file: drivers/eisa/Kconfig
+##
+# CONFIG_EISA is not set
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C_STUB=m
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+# CONFIG_I2C_ELEKTOR is not set
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_KEYBOARD_GPIO_POLLED=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_MOUSE_PS2_OLPC=y
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+# CONFIG_HOTPLUG_PCI_COMPAQ_NVRAM is not set
+
+##
+## file: drivers/platform/x86/Kconfig
+##
+CONFIG_XO15_EBOOK=m
+CONFIG_XO1_RFKILL=m
+
+##
+## file: drivers/power/supply/Kconfig
+##
+CONFIG_BATTERY_OLPC=m
+
+##
+## file: drivers/tty/Kconfig
+##
+# CONFIG_MOXA_INTELLIO is not set
+
+##
+## file: drivers/video/fbdev/geode/Kconfig
+##
+CONFIG_FB_GEODE=y
+CONFIG_FB_GEODE_LX=m
+CONFIG_FB_GEODE_GX=m
+CONFIG_FB_GEODE_GX1=m
+
+##
+## file: lib/Kconfig.debug
+##
+# CONFIG_DEBUG_HIGHMEM is not set
diff --git a/debian/config/i386/config.686-pae b/debian/config/i386/config.686-pae
new file mode 100644
index 000000000000..22cce6e926b8
--- /dev/null
+++ b/debian/config/i386/config.686-pae
@@ -0,0 +1,52 @@
+##
+## file: arch/x86/Kconfig
+##
+# CONFIG_X86_32_IRIS is not set
+## choice: High Memory Support
+# CONFIG_NOHIGHMEM is not set
+# CONFIG_HIGHMEM4G is not set
+CONFIG_HIGHMEM64G=y
+## end choice
+CONFIG_X86_PAE=y
+# CONFIG_MATH_EMULATION is not set
+# CONFIG_ALIX is not set
+# CONFIG_NET5501 is not set
+# CONFIG_GEOS is not set
+
+##
+## file: arch/x86/Kconfig.cpu
+##
+## choice: Processor family
+# CONFIG_M486 is not set
+CONFIG_M686=y
+## end choice
+
+##
+## file: drivers/eisa/Kconfig
+##
+# CONFIG_EISA is not set
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C_STUB=m
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+# CONFIG_I2C_ELEKTOR is not set
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+# CONFIG_HOTPLUG_PCI_COMPAQ_NVRAM is not set
+
+##
+## file: drivers/tty/Kconfig
+##
+# CONFIG_MOXA_INTELLIO is not set
+
+##
+## file: lib/Kconfig.debug
+##
+# CONFIG_DEBUG_HIGHMEM is not set
diff --git a/debian/config/i386/defines b/debian/config/i386/defines
new file mode 100644
index 000000000000..d471d747d780
--- /dev/null
+++ b/debian/config/i386/defines
@@ -0,0 +1,33 @@
+[base]
+featuresets:
+ none
+ rt
+kernel-arch: x86
+
+[build]
+image-file: arch/x86/boot/bzImage
+signed-code: true
+vdso: true
+
+[description]
+part-long-pae: This kernel requires PAE (Physical Address Extension).
+ This feature is supported by the Intel Pentium Pro/II/III/4/4M/D, Xeon,
+ Core and Atom; AMD Geode NX, Athlon (K7), Duron, Opteron, Sempron,
+ Turion or Phenom; Transmeta Efficeon; VIA C7; and some other processors.
+
+[image]
+bootloaders: grub-pc grub-efi-ia32 extlinux
+install-stem: vmlinuz
+breaks: xserver-xorg-input-vmmouse (<< 1:13.0.99)
+
+[relations]
+headers%gcc-11: linux-compiler-gcc-11-x86
+
+[686_description]
+hardware: older PCs
+hardware-long: PCs with one or more processors not supporting PAE
+
+[686-pae_description]
+hardware: modern PCs
+hardware-long: PCs with one or more processors supporting PAE
+parts: pae
diff --git a/debian/config/i386/none/defines b/debian/config/i386/none/defines
new file mode 100644
index 000000000000..2ae340898977
--- /dev/null
+++ b/debian/config/i386/none/defines
@@ -0,0 +1,5 @@
+[base]
+flavours:
+ 686
+ 686-pae
+default-flavour: 686-pae
diff --git a/debian/config/i386/rt/defines b/debian/config/i386/rt/defines
new file mode 100644
index 000000000000..358e12d559c5
--- /dev/null
+++ b/debian/config/i386/rt/defines
@@ -0,0 +1,3 @@
+[base]
+flavours:
+ 686-pae
diff --git a/debian/config/ia64/config b/debian/config/ia64/config
new file mode 100644
index 000000000000..5934a7d28cf8
--- /dev/null
+++ b/debian/config/ia64/config
@@ -0,0 +1,735 @@
+##
+## file: arch/ia64/Kconfig
+##
+CONFIG_HOTPLUG_CPU=y
+CONFIG_SCHED_SMT=y
+CONFIG_PERMIT_BSP_REMOVE=y
+CONFIG_NODES_SHIFT=8
+CONFIG_IA64_MCA_RECOVERY=m
+CONFIG_IA64_PALINFO=m
+CONFIG_KEXEC=y
+CONFIG_CRASH_DUMP=y
+CONFIG_MSPEC=m
+
+##
+## file: arch/ia64/Kconfig.debug
+##
+## choice: Physical memory granularity
+CONFIG_IA64_GRANULE_16MB=y
+# CONFIG_IA64_GRANULE_64MB is not set
+## end choice
+CONFIG_IA64_PRINT_HAZARDS=y
+# CONFIG_DISABLE_VHPT is not set
+# CONFIG_IA64_DEBUG_CMPXCHG is not set
+# CONFIG_IA64_DEBUG_IRQ is not set
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_ACORN_PARTITION=y
+# CONFIG_ACORN_PARTITION_CUMANA is not set
+CONFIG_ACORN_PARTITION_EESOX=y
+CONFIG_ACORN_PARTITION_ICS=y
+CONFIG_ACORN_PARTITION_ADFS=y
+CONFIG_ACORN_PARTITION_POWERTEC=y
+CONFIG_ACORN_PARTITION_RISCIX=y
+CONFIG_OSF_PARTITION=y
+CONFIG_AMIGA_PARTITION=y
+CONFIG_ATARI_PARTITION=y
+CONFIG_MAC_PARTITION=y
+CONFIG_BSD_DISKLABEL=y
+CONFIG_MINIX_SUBPARTITION=y
+CONFIG_SOLARIS_X86_PARTITION=y
+CONFIG_UNIXWARE_DISKLABEL=y
+CONFIG_LDM_PARTITION=y
+CONFIG_LDM_DEBUG=y
+CONFIG_SGI_PARTITION=y
+CONFIG_ULTRIX_PARTITION=y
+CONFIG_SUN_PARTITION=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_ZSTD=y
+
+##
+## file: drivers/acpi/Kconfig
+##
+CONFIG_ACPI_DOCK=y
+CONFIG_ACPI_PCI_SLOT=y
+CONFIG_ACPI_CONTAINER=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_ALI=m
+CONFIG_PATA_AMD=m
+CONFIG_PATA_CMD64X=m
+CONFIG_PATA_CS5520=m
+CONFIG_PATA_EFAR=m
+CONFIG_PATA_HPT366=m
+CONFIG_PATA_HPT37X=m
+CONFIG_PATA_NETCELL=m
+CONFIG_PATA_NS87415=m
+CONFIG_PATA_OLDPIIX=m
+CONFIG_PATA_PDC2027X=m
+CONFIG_PATA_PDC_OLD=m
+CONFIG_PATA_SC1200=m
+CONFIG_PATA_SERVERWORKS=m
+CONFIG_PATA_SIL680=m
+CONFIG_PATA_TRIFLEX=m
+CONFIG_PATA_VIA=m
+CONFIG_PATA_MPIIX=m
+CONFIG_PATA_NS87410=m
+CONFIG_PATA_OPTI=m
+CONFIG_PATA_LEGACY=m
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_BLK_DEV_SX8=m
+CONFIG_CDROM_PKTCDVD=m
+CONFIG_CDROM_PKTCDVD_BUFFERS=8
+# CONFIG_CDROM_PKTCDVD_WCACHE is not set
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_PRINTER=m
+# CONFIG_LP_CONSOLE is not set
+CONFIG_PPDEV=m
+CONFIG_DTLK=m
+CONFIG_APPLICOM=m
+CONFIG_HPET=y
+# CONFIG_HPET_MMAP is not set
+
+##
+## file: drivers/char/agp/Kconfig
+##
+#. Workaround
+CONFIG_AGP=y
+#. Workaround
+CONFIG_AGP_I460=y
+#. Workaround
+CONFIG_AGP_HP_ZX1=y
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+CONFIG_IPMI_HANDLER=m
+# CONFIG_IPMI_PANIC_EVENT is not set
+CONFIG_IPMI_DEVICE_INTERFACE=m
+CONFIG_IPMI_SI=m
+CONFIG_IPMI_WATCHDOG=m
+CONFIG_IPMI_POWEROFF=m
+
+##
+## file: drivers/cpufreq/Kconfig
+##
+CONFIG_IA64_ACPI_CPUFREQ=m
+
+##
+## file: drivers/firmware/Kconfig
+##
+CONFIG_DMIID=y
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+CONFIG_DRM_RADEON=m
+
+##
+## file: drivers/gpu/drm/i2c/Kconfig
+##
+CONFIG_DRM_I2C_CH7006=m
+CONFIG_DRM_I2C_SIL164=m
+
+##
+## file: drivers/gpu/drm/nouveau/Kconfig
+##
+CONFIG_DRM_NOUVEAU=m
+# CONFIG_DRM_NOUVEAU_BACKLIGHT is not set
+
+##
+## file: drivers/hid/usbhid/Kconfig
+##
+CONFIG_USB_HID=m
+# CONFIG_HID_PID is not set
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_ADM1021=m
+CONFIG_SENSORS_ADM1025=m
+CONFIG_SENSORS_ADM1026=m
+CONFIG_SENSORS_ADM1031=m
+CONFIG_SENSORS_ASB100=m
+CONFIG_SENSORS_DS1621=m
+CONFIG_SENSORS_F71805F=m
+CONFIG_SENSORS_GL518SM=m
+CONFIG_SENSORS_GL520SM=m
+CONFIG_SENSORS_IT87=m
+CONFIG_SENSORS_MAX1619=m
+CONFIG_SENSORS_LM63=m
+CONFIG_SENSORS_LM75=m
+CONFIG_SENSORS_LM77=m
+CONFIG_SENSORS_LM78=m
+CONFIG_SENSORS_LM80=m
+CONFIG_SENSORS_LM83=m
+CONFIG_SENSORS_LM85=m
+CONFIG_SENSORS_LM87=m
+CONFIG_SENSORS_LM90=m
+CONFIG_SENSORS_LM92=m
+CONFIG_SENSORS_PC87360=m
+CONFIG_SENSORS_PCF8591=m
+CONFIG_SENSORS_SIS5595=m
+CONFIG_SENSORS_SMSC47M1=m
+CONFIG_SENSORS_SMSC47B397=m
+CONFIG_SENSORS_VIA686A=m
+CONFIG_SENSORS_W83781D=m
+CONFIG_SENSORS_W83L785TS=m
+CONFIG_SENSORS_W83627HF=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=m
+CONFIG_I2C_CHARDEV=m
+CONFIG_I2C_STUB=m
+# CONFIG_I2C_DEBUG_CORE is not set
+# CONFIG_I2C_DEBUG_ALGO is not set
+# CONFIG_I2C_DEBUG_BUS is not set
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_ALI1535=m
+CONFIG_I2C_ALI1563=m
+CONFIG_I2C_ALI15X3=m
+CONFIG_I2C_AMD756=m
+CONFIG_I2C_AMD756_S4882=m
+CONFIG_I2C_AMD8111=m
+CONFIG_I2C_I801=m
+CONFIG_I2C_PIIX4=m
+CONFIG_I2C_NFORCE2=m
+CONFIG_I2C_SIS5595=m
+CONFIG_I2C_SIS630=m
+CONFIG_I2C_SIS96X=m
+CONFIG_I2C_VIA=m
+CONFIG_I2C_VIAPRO=m
+CONFIG_I2C_PARPORT=m
+CONFIG_I2C_PCA_ISA=m
+CONFIG_SCx200_ACB=m
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+CONFIG_GAMEPORT=m
+CONFIG_GAMEPORT_NS558=m
+CONFIG_GAMEPORT_L4=m
+CONFIG_GAMEPORT_EMU10K1=m
+CONFIG_GAMEPORT_FM801=m
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+CONFIG_INPUT_JOYSTICK=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+CONFIG_KEYBOARD_ATKBD=y
+CONFIG_KEYBOARD_LKKBD=m
+CONFIG_KEYBOARD_NEWTON=m
+CONFIG_KEYBOARD_SUNKBD=m
+CONFIG_KEYBOARD_XTKBD=m
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MISC=y
+CONFIG_INPUT_UINPUT=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_INPUT_MOUSE=y
+CONFIG_MOUSE_PS2=m
+CONFIG_MOUSE_SERIAL=m
+CONFIG_MOUSE_VSXXXAA=m
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO=y
+CONFIG_SERIO_I8042=y
+CONFIG_SERIO_SERPORT=m
+CONFIG_SERIO_PARKBD=m
+CONFIG_SERIO_PCIPS2=m
+CONFIG_SERIO_LIBPS2=y
+CONFIG_SERIO_RAW=m
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+# CONFIG_INPUT_TOUCHSCREEN is not set
+
+##
+## file: drivers/isdn/Kconfig
+##
+CONFIG_ISDN=y
+
+##
+## file: drivers/media/radio/Kconfig
+##
+CONFIG_USB_DSBR=m
+CONFIG_RADIO_MAXIRADIO=m
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=m
+
+##
+## file: drivers/mmc/core/Kconfig
+##
+CONFIG_MMC_BLOCK=m
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+# CONFIG_MMC_DEBUG is not set
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_NET_FC=y
+CONFIG_NET_SB1000=m
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+CONFIG_ARCNET=m
+CONFIG_ARCNET_1201=m
+CONFIG_ARCNET_1051=m
+CONFIG_ARCNET_RAW=m
+CONFIG_ARCNET_CAP=m
+CONFIG_ARCNET_COM90xx=m
+CONFIG_ARCNET_COM90xxIO=m
+CONFIG_ARCNET_RIM_I=m
+CONFIG_ARCNET_COM20020=m
+CONFIG_ARCNET_COM20020_PCI=m
+CONFIG_ARCNET_COM20020_CS=m
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+CONFIG_FEALNX=m
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_NET_VENDOR_3COM=y
+CONFIG_PCMCIA_3C574=m
+CONFIG_PCMCIA_3C589=m
+CONFIG_VORTEX=m
+CONFIG_TYPHOON=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_PCMCIA_AXNET=m
+CONFIG_NE2K_PCI=m
+CONFIG_PCMCIA_PCNET=m
+
+##
+## file: drivers/net/ethernet/adaptec/Kconfig
+##
+CONFIG_ADAPTEC_STARFIRE=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_AMD8111_ETH=m
+CONFIG_PCMCIA_NMCLAN=m
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+CONFIG_B44=m
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_NET_TULIP=y
+CONFIG_DE2104X=m
+CONFIG_TULIP=m
+# CONFIG_TULIP_MWI is not set
+# CONFIG_TULIP_MMIO is not set
+CONFIG_WINBOND_840=m
+CONFIG_DM9102=m
+CONFIG_PCMCIA_XIRCOM=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_SUNDANCE=m
+# CONFIG_SUNDANCE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/fujitsu/Kconfig
+##
+CONFIG_PCMCIA_FMVJ18X=m
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NATSEMI=m
+
+##
+## file: drivers/net/ethernet/nvidia/Kconfig
+##
+CONFIG_FORCEDETH=m
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_8139CP=m
+CONFIG_8139TOO=m
+# CONFIG_8139TOO_PIO is not set
+# CONFIG_8139TOO_TUNE_TWISTER is not set
+# CONFIG_8139TOO_8129 is not set
+# CONFIG_8139_OLD_RX_RESET is not set
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+CONFIG_SIS900=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_PCMCIA_SMC91C92=m
+CONFIG_EPIC100=m
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+CONFIG_VIA_RHINE=m
+# CONFIG_VIA_RHINE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/xircom/Kconfig
+##
+CONFIG_PCMCIA_XIRC2PS=m
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+CONFIG_FDDI=y
+CONFIG_SKFP=m
+
+##
+## file: drivers/net/hippi/Kconfig
+##
+# CONFIG_HIPPI is not set
+
+##
+## file: drivers/net/plip/Kconfig
+##
+CONFIG_PLIP=m
+
+##
+## file: drivers/net/wan/Kconfig
+##
+CONFIG_WAN=y
+CONFIG_LANMEDIA=m
+CONFIG_PCI200SYN=m
+CONFIG_WANXL=m
+CONFIG_FARSYNC=m
+
+##
+## file: drivers/net/wireless/Kconfig
+##
+CONFIG_PCMCIA_RAYCS=m
+CONFIG_PCMCIA_WL3501=m
+
+##
+## file: drivers/net/wireless/atmel/Kconfig
+##
+CONFIG_ATMEL=m
+CONFIG_PCI_ATMEL=m
+CONFIG_PCMCIA_ATMEL=m
+
+##
+## file: drivers/net/wireless/cisco/Kconfig
+##
+CONFIG_AIRO_CS=m
+
+##
+## file: drivers/net/wireless/intel/ipw2x00/Kconfig
+##
+CONFIG_IPW2100=m
+CONFIG_IPW2100_MONITOR=y
+
+##
+## file: drivers/net/wireless/intersil/orinoco/Kconfig
+##
+CONFIG_HERMES=m
+CONFIG_PLX_HERMES=m
+CONFIG_TMD_HERMES=m
+CONFIG_PCI_HERMES=m
+CONFIG_PCMCIA_HERMES=m
+CONFIG_PCMCIA_SPECTRUM=m
+
+##
+## file: drivers/net/wireless/marvell/mwifiex/Kconfig
+##
+CONFIG_MWIFIEX=m
+CONFIG_MWIFIEX_SDIO=m
+CONFIG_MWIFIEX_PCIE=m
+
+##
+## file: drivers/net/wireless/zydas/Kconfig
+##
+CONFIG_USB_ZD1201=m
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+CONFIG_HOTPLUG_PCI=y
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+CONFIG_PCCARD=m
+CONFIG_PCMCIA=m
+CONFIG_CARDBUS=y
+CONFIG_YENTA=m
+CONFIG_PD6729=m
+CONFIG_I82092=m
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_EFI=y
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_ARCMSR=m
+CONFIG_SCSI_MYRB=m
+CONFIG_SCSI_MYRS=m
+CONFIG_SCSI_DMX3191D=m
+CONFIG_SCSI_IPS=m
+CONFIG_SCSI_INITIO=m
+CONFIG_SCSI_INIA100=m
+CONFIG_SCSI_SYM53C8XX_2=m
+CONFIG_SCSI_SYM53C8XX_DMA_ADDRESSING_MODE=1
+CONFIG_SCSI_SYM53C8XX_DEFAULT_TAGS=16
+CONFIG_SCSI_SYM53C8XX_MAX_TAGS=64
+CONFIG_SCSI_IPR=m
+CONFIG_SCSI_IPR_TRACE=y
+CONFIG_SCSI_IPR_DUMP=y
+CONFIG_SCSI_QLOGIC_1280=m
+CONFIG_SCSI_DC395x=m
+CONFIG_SCSI_AM53C974=m
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+CONFIG_MEGARAID_NEWGEN=y
+CONFIG_MEGARAID_MM=m
+CONFIG_MEGARAID_MAILBOX=m
+CONFIG_MEGARAID_LEGACY=m
+
+##
+## file: drivers/scsi/pcmcia/Kconfig
+##
+CONFIG_PCMCIA_QLOGIC=m
+CONFIG_PCMCIA_SYM53C500=m
+
+##
+## file: drivers/staging/wlan-ng/Kconfig
+##
+# CONFIG_PRISM2_USB is not set
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_VT=y
+CONFIG_VT_CONSOLE=y
+CONFIG_SERIAL_NONSTANDARD=y
+CONFIG_MOXA_INTELLIO=m
+# CONFIG_MOXA_SMARTIO is not set
+CONFIG_N_HDLC=m
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_JSM=m
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_CS=m
+CONFIG_SERIAL_8250_NR_UARTS=32
+CONFIG_SERIAL_8250_RUNTIME_UARTS=4
+CONFIG_SERIAL_8250_EXTENDED=y
+CONFIG_SERIAL_8250_SHARE_IRQ=y
+# CONFIG_SERIAL_8250_DETECT_IRQ is not set
+CONFIG_SERIAL_8250_RSA=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=m
+CONFIG_USB_USS720=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_OHCI_HCD=m
+CONFIG_USB_UHCI_HCD=m
+CONFIG_USB_SL811_HCD=m
+CONFIG_USB_SL811_CS=m
+
+##
+## file: drivers/video/console/Kconfig
+##
+CONFIG_VGA_CONSOLE=y
+CONFIG_FRAMEBUFFER_CONSOLE=y
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB=y
+CONFIG_FB_MODE_HELPERS=y
+CONFIG_FB_TILEBLITTING=y
+CONFIG_FB_CIRRUS=m
+CONFIG_FB_PM2=m
+# CONFIG_FB_PM2_FIFO_DISCONNECT is not set
+CONFIG_FB_CYBER2000=m
+CONFIG_FB_ASILIANT=y
+# CONFIG_FB_IMSTT is not set
+CONFIG_FB_S1D13XXX=m
+CONFIG_FB_MATROX=m
+CONFIG_FB_MATROX_MILLENIUM=y
+CONFIG_FB_MATROX_MYSTIQUE=y
+CONFIG_FB_MATROX_G=y
+CONFIG_FB_MATROX_I2C=m
+CONFIG_FB_MATROX_MAVEN=m
+CONFIG_FB_RADEON=m
+CONFIG_FB_RADEON_I2C=y
+# CONFIG_FB_RADEON_DEBUG is not set
+CONFIG_FB_ATY128=m
+CONFIG_FB_ATY=m
+CONFIG_FB_ATY_CT=y
+CONFIG_FB_ATY_GENERIC_LCD=y
+CONFIG_FB_ATY_GX=y
+CONFIG_FB_SAVAGE=m
+CONFIG_FB_SAVAGE_I2C=y
+# CONFIG_FB_SAVAGE_ACCEL is not set
+CONFIG_FB_SIS=m
+CONFIG_FB_SIS_300=y
+CONFIG_FB_SIS_315=y
+CONFIG_FB_NEOMAGIC=m
+CONFIG_FB_KYRO=m
+CONFIG_FB_VOODOO1=m
+CONFIG_FB_TRIDENT=m
+# CONFIG_FB_VIRTUAL is not set
+
+##
+## file: fs/pstore/Kconfig
+##
+CONFIG_PSTORE=y
+
+##
+## file: lib/Kconfig.debug
+##
+#. Broken here (#905461)
+# CONFIG_SCHED_STACK_END_CHECK is not set
+
+##
+## file: lib/xz/Kconfig
+##
+CONFIG_XZ_DEC_IA64=y
+
+##
+## file: net/ipv6/Kconfig
+##
+CONFIG_IPV6=y
+
+##
+## file: security/Kconfig
+##
+CONFIG_LSM_MMAP_MIN_ADDR=65536
+
+##
+## file: sound/drivers/Kconfig
+##
+CONFIG_SND_DUMMY=m
+CONFIG_SND_VIRMIDI=m
+CONFIG_SND_MTPAV=m
+CONFIG_SND_SERIAL_U16550=m
+CONFIG_SND_MPU401=m
+
+##
+## file: sound/pci/Kconfig
+##
+CONFIG_SND_ALS4000=m
+CONFIG_SND_ALI5451=m
+CONFIG_SND_ATIIXP=m
+CONFIG_SND_ATIIXP_MODEM=m
+CONFIG_SND_AU8810=m
+CONFIG_SND_AU8820=m
+CONFIG_SND_AU8830=m
+CONFIG_SND_AZT3328=m
+CONFIG_SND_BT87X=m
+# CONFIG_SND_BT87X_OVERCLOCK is not set
+CONFIG_SND_CA0106=m
+CONFIG_SND_CMIPCI=m
+CONFIG_SND_CS4281=m
+CONFIG_SND_CS46XX=m
+CONFIG_SND_CS46XX_NEW_DSP=y
+CONFIG_SND_EMU10K1=m
+CONFIG_SND_EMU10K1X=m
+CONFIG_SND_ENS1370=m
+CONFIG_SND_ENS1371=m
+CONFIG_SND_ES1938=m
+CONFIG_SND_ES1968=m
+CONFIG_SND_FM801=m
+CONFIG_SND_FM801_TEA575X_BOOL=y
+CONFIG_SND_HDSP=m
+CONFIG_SND_ICE1712=m
+CONFIG_SND_ICE1724=m
+CONFIG_SND_INTEL8X0=m
+CONFIG_SND_INTEL8X0M=m
+CONFIG_SND_KORG1212=m
+CONFIG_SND_MAESTRO3=m
+CONFIG_SND_MIXART=m
+CONFIG_SND_NM256=m
+CONFIG_SND_RME32=m
+CONFIG_SND_RME96=m
+CONFIG_SND_RME9652=m
+CONFIG_SND_SONICVIBES=m
+CONFIG_SND_TRIDENT=m
+CONFIG_SND_VIA82XX=m
+CONFIG_SND_VIA82XX_MODEM=m
+CONFIG_SND_VX222=m
+CONFIG_SND_YMFPCI=m
+
+##
+## file: sound/pci/hda/Kconfig
+##
+CONFIG_SND_HDA_INTEL=m
diff --git a/debian/config/ia64/config.itanium b/debian/config/ia64/config.itanium
new file mode 100644
index 000000000000..1d1da671fba2
--- /dev/null
+++ b/debian/config/ia64/config.itanium
@@ -0,0 +1,10 @@
+##
+## file: arch/ia64/Kconfig
+##
+## choice: Processor type
+CONFIG_ITANIUM=y
+# CONFIG_MCKINLEY is not set
+## end choice
+CONFIG_SMP=y
+CONFIG_NR_CPUS=64
+# CONFIG_SCHED_SMT is not set
diff --git a/debian/config/ia64/config.mckinley b/debian/config/ia64/config.mckinley
new file mode 100644
index 000000000000..581fcde88c2b
--- /dev/null
+++ b/debian/config/ia64/config.mckinley
@@ -0,0 +1,10 @@
+##
+## file: arch/ia64/Kconfig
+##
+## choice: Processor type
+# CONFIG_ITANIUM is not set
+CONFIG_MCKINLEY=y
+## end choice
+CONFIG_SMP=y
+CONFIG_NR_CPUS=64
+# CONFIG_SCHED_SMT is not set
diff --git a/debian/config/ia64/defines b/debian/config/ia64/defines
new file mode 100644
index 000000000000..70b1aca25f8b
--- /dev/null
+++ b/debian/config/ia64/defines
@@ -0,0 +1,21 @@
+[base]
+flavours:
+ itanium
+ mckinley
+default-flavour: itanium
+kernel-arch: ia64
+
+[build]
+image-file: vmlinux.gz
+
+[image]
+bootloaders: grub-efi-ia64
+install-stem: vmlinuz
+
+[itanium_description]
+hardware: Itanium (Merced)
+hardware-long: systems with original Itanium (Merced) processors
+
+[mckinley_description]
+hardware: Itanium 2+
+hardware-long: systems with Itanium 2 or 9300/9500/9700-series processors
diff --git a/debian/config/kernelarch-arm/config b/debian/config/kernelarch-arm/config
new file mode 100644
index 000000000000..e47a9edd2235
--- /dev/null
+++ b/debian/config/kernelarch-arm/config
@@ -0,0 +1,141 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_SECCOMP=y
+
+##
+## file: arch/arm/Kconfig
+##
+CONFIG_MMU=y
+CONFIG_AEABI=y
+# CONFIG_OABI_COMPAT is not set
+CONFIG_CPU_SW_DOMAIN_PAN=y
+CONFIG_KEXEC=y
+CONFIG_CRASH_DUMP=y
+
+##
+## file: arch/arm/Kconfig.debug
+##
+CONFIG_DEBUG_WX=y
+CONFIG_DEBUG_LL=y
+CONFIG_EARLY_PRINTK=y
+
+##
+## file: arch/arm/crypto/Kconfig
+##
+CONFIG_CRYPTO_SHA1_ARM=m
+CONFIG_CRYPTO_SHA256_ARM=m
+CONFIG_CRYPTO_SHA512_ARM=m
+CONFIG_CRYPTO_BLAKE2S_ARM=m
+CONFIG_CRYPTO_AES_ARM=m
+
+##
+## file: arch/arm/mm/Kconfig
+##
+#. Support Thumb user binaries
+CONFIG_ARM_THUMB=y
+
+##
+## file: drivers/gpu/drm/vc4/Kconfig
+##
+CONFIG_DRM_VC4=m
+CONFIG_DRM_VC4_HDMI_CEC=y
+
+##
+## file: drivers/iio/humidity/Kconfig
+##
+CONFIG_DHT11=m
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MISC=y
+CONFIG_INPUT_UINPUT=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_INPUT_MOUSE=y
+CONFIG_MOUSE_PS2=m
+CONFIG_MOUSE_APPLETOUCH=m
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+# CONFIG_TOUCHSCREEN_EETI is not set
+
+##
+## file: drivers/leds/trigger/Kconfig
+##
+CONFIG_LEDS_TRIGGER_HEARTBEAT=y
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+CONFIG_MTD_PHYSMAP=y
+
+##
+## file: drivers/net/wireless/intel/ipw2x00/Kconfig
+##
+# CONFIG_IPW2100 is not set
+
+##
+## file: drivers/parport/Kconfig
+##
+#. Causes lockups on ARM (see #588164)
+# CONFIG_PARPORT_PC is not set
+
+##
+## file: drivers/pci/Kconfig
+##
+# CONFIG_PCI_IOV is not set
+
+##
+## file: drivers/scsi/Kconfig
+##
+# CONFIG_BLK_DEV_3W_XXXX_RAID is not set
+# CONFIG_SCSI_3W_9XXX is not set
+# CONFIG_SCSI_AACRAID is not set
+# CONFIG_SCSI_HPTIOP is not set
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic79xx
+##
+# CONFIG_SCSI_AIC79XX is not set
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic7xxx
+##
+# CONFIG_SCSI_AIC7XXX is not set
+
+##
+## file: drivers/scsi/aic94xx/Kconfig
+##
+# CONFIG_SCSI_AIC94XX is not set
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+# CONFIG_MEGARAID_SAS is not set
+
+##
+## file: drivers/scsi/qla2xxx/Kconfig
+##
+# CONFIG_SCSI_QLA_FC is not set
+
+##
+## file: drivers/scsi/qla4xxx/Kconfig
+##
+# CONFIG_SCSI_QLA_ISCSI is not set
+
+##
+## file: drivers/thermal/Kconfig
+##
+CONFIG_THERMAL=y
+CONFIG_CPU_THERMAL=y
+
+##
+## file: lib/xz/Kconfig
+##
+CONFIG_XZ_DEC_ARM=y
+CONFIG_XZ_DEC_ARMTHUMB=y
diff --git a/debian/config/kernelarch-mips/config b/debian/config/kernelarch-mips/config
new file mode 100644
index 000000000000..8f02e6a85352
--- /dev/null
+++ b/debian/config/kernelarch-mips/config
@@ -0,0 +1,82 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_SECCOMP=y
+
+##
+## file: arch/mips/Kconfig
+##
+CONFIG_CPU_HAS_MSA=y
+CONFIG_RELOCATABLE=y
+CONFIG_RELOCATION_TABLE_SIZE=0x001c0000
+CONFIG_RANDOMIZE_BASE=y
+CONFIG_KEXEC=y
+CONFIG_MIPS_O32_FP64_SUPPORT=y
+#. Ignored in 32-bit configurations
+CONFIG_MIPS32_O32=y
+CONFIG_MIPS32_N32=y
+
+##
+## file: arch/mips/Kconfig.debug
+##
+CONFIG_EARLY_PRINTK=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_ATA=y
+
+##
+## file: drivers/net/ethernet/sun/Kconfig
+##
+# CONFIG_NIU is not set
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+
+##
+## file: drivers/power/reset/Kconfig
+##
+CONFIG_POWER_RESET=y
+CONFIG_POWER_RESET_SYSCON=y
+
+##
+## file: drivers/rapidio/Kconfig
+##
+# CONFIG_RAPIDIO is not set
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI=y
+CONFIG_BLK_DEV_SD=y
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_OHCI_HCD=m
+
+##
+## file: drivers/video/console/Kconfig
+##
+# CONFIG_VGA_CONSOLE is not set
+
+##
+## file: init/Kconfig
+##
+CONFIG_SGETMASK_SYSCALL=y
+CONFIG_SYSFS_SYSCALL=y
diff --git a/debian/config/kernelarch-mips/config.boston b/debian/config/kernelarch-mips/config.boston
new file mode 100644
index 000000000000..1cbeab204054
--- /dev/null
+++ b/debian/config/kernelarch-mips/config.boston
@@ -0,0 +1,68 @@
+##
+## file: arch/mips/Kconfig
+##
+CONFIG_MIPS_CPS=y
+CONFIG_HIGHMEM=y
+CONFIG_NR_CPUS=16
+
+##
+## file: arch/mips/generic/Kconfig
+##
+CONFIG_FIT_IMAGE_FDT_BOSTON=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_CRC32_MIPS=y
+
+##
+## file: drivers/auxdisplay/Kconfig
+##
+CONFIG_AUXDISPLAY=y
+CONFIG_IMG_ASCII_LCD=y
+
+##
+## file: drivers/clk/imgtec/Kconfig
+##
+CONFIG_COMMON_CLK_BOSTON=y
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_EG20T=y
+
+##
+## file: drivers/misc/Kconfig
+##
+CONFIG_PCH_PHUB=y
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=y
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+CONFIG_MMC_SDHCI=y
+CONFIG_MMC_SDHCI_PCI=y
+
+##
+## file: drivers/pci/controller/Kconfig
+##
+CONFIG_PCIE_XILINX=y
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_M41T80=y
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI_TOPCLIFF_PCH=y
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_OF_PLATFORM=y
diff --git a/debian/config/kernelarch-mips/config.loongson-3 b/debian/config/kernelarch-mips/config.loongson-3
new file mode 100644
index 000000000000..7def9a546d3e
--- /dev/null
+++ b/debian/config/kernelarch-mips/config.loongson-3
@@ -0,0 +1,141 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: System type
+CONFIG_MACH_LOONGSON64=y
+## end choice
+## choice: Kernel code model
+# CONFIG_32BIT is not set
+CONFIG_64BIT=y
+## end choice
+CONFIG_NUMA=y
+CONFIG_SMP=y
+CONFIG_HOTPLUG_CPU=y
+CONFIG_NR_CPUS=16
+
+##
+## file: arch/mips/kvm/Kconfig
+##
+CONFIG_VIRTUALIZATION=y
+CONFIG_KVM=y
+
+##
+## file: arch/mips/loongson64/Kconfig
+##
+CONFIG_RS780_HPET=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_SATA_AHCI=y
+
+##
+## file: drivers/cpuidle/Kconfig
+##
+CONFIG_CPU_IDLE=y
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+CONFIG_DRM_RADEON=m
+CONFIG_DRM_AMDGPU=m
+
+##
+## file: drivers/gpu/drm/ast/Kconfig
+##
+CONFIG_DRM_AST=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=y
+
+##
+## file: drivers/i2c/algos/Kconfig
+##
+CONFIG_I2C_ALGOBIT=y
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_NE2K_PCI=m
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_8139CP=m
+CONFIG_8139TOO=m
+
+##
+## file: drivers/of/Kconfig
+##
+CONFIG_OF=y
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+CONFIG_HOTPLUG_PCI=y
+
+##
+## file: drivers/platform/goldfish/Kconfig
+##
+CONFIG_GOLDFISH=y
+
+##
+## file: drivers/regulator/Kconfig
+##
+CONFIG_REGULATOR=y
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_CMOS=y
+CONFIG_RTC_DRV_GOLDFISH=y
+
+##
+## file: drivers/staging/sm750fb/Kconfig
+##
+CONFIG_FB_SM750=m
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+# CONFIG_SERIAL_8250_EXTENDED is not set
+CONFIG_SERIAL_OF_PLATFORM=y
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_ISP116X_HCD=m
+CONFIG_USB_UHCI_HCD=m
+CONFIG_USB_SL811_HCD=m
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_RADEON=y
+
+##
+## file: kernel/Kconfig.preempt
+##
+## choice: Preemption Model
+# CONFIG_PREEMPT_VOLUNTARY is not set
+CONFIG_PREEMPT=y
+## end choice
+
+##
+## file: mm/Kconfig.debug
+##
+# CONFIG_PAGE_EXTENSION is not set
+# CONFIG_PAGE_POISONING is not set
+
+##
+## file: sound/pci/hda/Kconfig
+##
+CONFIG_SND_HDA_INTEL=m
diff --git a/debian/config/kernelarch-mips/config.malta b/debian/config/kernelarch-mips/config.malta
new file mode 100644
index 000000000000..23ababc4643f
--- /dev/null
+++ b/debian/config/kernelarch-mips/config.malta
@@ -0,0 +1,489 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: System type
+CONFIG_MIPS_MALTA=y
+## end choice
+## choice: Kernel page size
+CONFIG_PAGE_SIZE_4KB=y
+## end choice
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_HPT366=m
+CONFIG_PATA_NETCELL=m
+CONFIG_PATA_OLDPIIX=m
+CONFIG_PATA_PDC2027X=m
+CONFIG_PATA_PDC_OLD=m
+CONFIG_PATA_SIL680=m
+CONFIG_PATA_MPIIX=m
+CONFIG_PATA_NS87410=m
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_BLK_DEV_FD=m
+CONFIG_BLK_DEV_SX8=m
+CONFIG_CDROM_PKTCDVD=m
+
+##
+## file: drivers/bluetooth/Kconfig
+##
+CONFIG_BT_HCIUART=m
+CONFIG_BT_HCIUART_H4=y
+CONFIG_BT_HCIUART_BCSP=y
+CONFIG_BT_HCIBCM203X=m
+CONFIG_BT_HCIBPA10X=m
+CONFIG_BT_HCIBFUSB=m
+CONFIG_BT_HCIVHCI=m
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_PRINTER=m
+CONFIG_PPDEV=m
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+CONFIG_IPMI_HANDLER=m
+CONFIG_IPMI_SI=m
+CONFIG_IPMI_WATCHDOG=m
+CONFIG_IPMI_POWEROFF=m
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+CONFIG_DRM_RADEON=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_ADM1021=m
+CONFIG_SENSORS_ADM1025=m
+CONFIG_SENSORS_ADM1026=m
+CONFIG_SENSORS_ADM1031=m
+CONFIG_SENSORS_DS1621=m
+CONFIG_SENSORS_MAX1619=m
+CONFIG_SENSORS_LM63=m
+CONFIG_SENSORS_LM75=m
+CONFIG_SENSORS_LM77=m
+CONFIG_SENSORS_LM78=m
+CONFIG_SENSORS_LM80=m
+CONFIG_SENSORS_LM83=m
+CONFIG_SENSORS_LM85=m
+CONFIG_SENSORS_LM87=m
+CONFIG_SENSORS_LM90=m
+CONFIG_SENSORS_LM92=m
+CONFIG_SENSORS_PCF8591=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=m
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_PIIX4=m
+CONFIG_I2C_PARPORT=m
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+CONFIG_GAMEPORT=m
+CONFIG_GAMEPORT_EMU10K1=m
+CONFIG_GAMEPORT_FM801=m
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+CONFIG_INPUT_JOYSTICK=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_KEYBOARD_NEWTON=m
+CONFIG_KEYBOARD_SUNKBD=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_MOUSE_PS2=m
+CONFIG_MOUSE_SERIAL=m
+CONFIG_MOUSE_APPLETOUCH=m
+CONFIG_MOUSE_VSXXXAA=m
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO_I8042=y
+CONFIG_SERIO_SERPORT=m
+CONFIG_SERIO_PARKBD=m
+CONFIG_SERIO_PCIPS2=y
+CONFIG_SERIO_LIBPS2=y
+CONFIG_SERIO_RAW=m
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+CONFIG_INPUT_TOUCHSCREEN=y
+
+##
+## file: drivers/mfd/Kconfig
+##
+CONFIG_MFD_SM501=m
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=m
+
+##
+## file: drivers/mmc/core/Kconfig
+##
+CONFIG_MMC_BLOCK=m
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_FTL=m
+CONFIG_NFTL=m
+CONFIG_NFTL_RW=y
+CONFIG_INFTL=m
+
+##
+## file: drivers/mtd/chips/Kconfig
+##
+CONFIG_MTD_CFI=m
+CONFIG_MTD_JEDECPROBE=m
+CONFIG_MTD_CFI_INTELEXT=m
+CONFIG_MTD_CFI_AMDSTD=m
+CONFIG_MTD_CFI_STAA=m
+CONFIG_MTD_ROM=m
+CONFIG_MTD_ABSENT=m
+
+##
+## file: drivers/mtd/devices/Kconfig
+##
+CONFIG_MTD_PMC551=m
+CONFIG_MTD_SLRAM=m
+CONFIG_MTD_PHRAM=m
+CONFIG_MTD_MTDRAM=m
+CONFIG_MTD_BLOCK2MTD=m
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+CONFIG_MTD_COMPLEX_MAPPINGS=y
+CONFIG_MTD_PHYSMAP=m
+CONFIG_MTD_PCI=m
+
+##
+## file: drivers/mtd/nand/raw/Kconfig
+##
+CONFIG_MTD_RAW_NAND=m
+CONFIG_MTD_NAND_DISKONCHIP=m
+
+##
+## file: drivers/mtd/parsers/Kconfig
+##
+CONFIG_MTD_REDBOOT_PARTS=y
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_NET_FC=y
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+CONFIG_FEALNX=m
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_VORTEX=m
+CONFIG_TYPHOON=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_NE2K_PCI=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_AMD8111_ETH=m
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+CONFIG_B44=m
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_NET_TULIP=y
+CONFIG_DE2104X=m
+CONFIG_TULIP=m
+CONFIG_DM9102=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_SUNDANCE=m
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NATSEMI=m
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_8139CP=m
+CONFIG_8139TOO=m
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+CONFIG_SIS900=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_EPIC100=m
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+CONFIG_VIA_RHINE=m
+
+##
+## file: drivers/net/wireless/atmel/Kconfig
+##
+CONFIG_ATMEL=m
+CONFIG_PCI_ATMEL=m
+
+##
+## file: drivers/net/wireless/intel/ipw2x00/Kconfig
+##
+CONFIG_IPW2100=m
+CONFIG_IPW2100_MONITOR=y
+
+##
+## file: drivers/net/wireless/intersil/orinoco/Kconfig
+##
+CONFIG_HERMES=m
+CONFIG_PLX_HERMES=m
+CONFIG_TMD_HERMES=m
+CONFIG_PCI_HERMES=m
+
+##
+## file: drivers/net/wireless/marvell/mwifiex/Kconfig
+##
+CONFIG_MWIFIEX=m
+CONFIG_MWIFIEX_SDIO=m
+
+##
+## file: drivers/net/wireless/zydas/Kconfig
+##
+CONFIG_USB_ZD1201=m
+
+##
+## file: drivers/pci/pcie/Kconfig
+##
+# CONFIG_PCIEPORTBUS is not set
+
+##
+## file: drivers/power/reset/Kconfig
+##
+CONFIG_POWER_RESET_PIIX4_POWEROFF=y
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_DS1307=m
+CONFIG_RTC_DRV_DS1672=m
+CONFIG_RTC_DRV_MAX6900=m
+CONFIG_RTC_DRV_RS5C372=m
+CONFIG_RTC_DRV_ISL1208=m
+CONFIG_RTC_DRV_X1205=m
+CONFIG_RTC_DRV_PCF8563=m
+CONFIG_RTC_DRV_PCF8583=m
+CONFIG_RTC_DRV_RS5C348=m
+CONFIG_RTC_DRV_MAX6902=m
+CONFIG_RTC_DRV_CMOS=y
+CONFIG_RTC_DRV_M48T86=m
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_ARCMSR=m
+CONFIG_SCSI_MYRB=m
+CONFIG_SCSI_MYRS=m
+CONFIG_SCSI_DMX3191D=m
+CONFIG_SCSI_IPS=m
+CONFIG_SCSI_INITIO=m
+CONFIG_SCSI_INIA100=m
+CONFIG_SCSI_QLOGIC_1280=m
+CONFIG_SCSI_DC395x=m
+CONFIG_SCSI_AM53C974=m
+CONFIG_SCSI_DEBUG=m
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+CONFIG_MEGARAID_NEWGEN=y
+CONFIG_MEGARAID_MM=m
+CONFIG_MEGARAID_MAILBOX=m
+CONFIG_MEGARAID_LEGACY=m
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_JSM=m
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250_NR_UARTS=4
+CONFIG_SERIAL_8250_RUNTIME_UARTS=4
+CONFIG_SERIAL_8250_EXTENDED=y
+CONFIG_SERIAL_8250_SHARE_IRQ=y
+CONFIG_SERIAL_8250_RSA=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB_USS720=m
+
+##
+## file: drivers/usb/atm/Kconfig
+##
+CONFIG_USB_ATM=m
+CONFIG_USB_SPEEDTOUCH=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_ISP116X_HCD=m
+CONFIG_USB_UHCI_HCD=m
+CONFIG_USB_SL811_HCD=m
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_MODE_HELPERS=y
+CONFIG_FB_TILEBLITTING=y
+CONFIG_FB_CIRRUS=y
+CONFIG_FB_PM2=m
+CONFIG_FB_PM2_FIFO_DISCONNECT=y
+CONFIG_FB_CYBER2000=m
+CONFIG_FB_S1D13XXX=m
+CONFIG_FB_MATROX=m
+CONFIG_FB_MATROX_MILLENIUM=y
+CONFIG_FB_MATROX_MYSTIQUE=y
+CONFIG_FB_MATROX_G=y
+CONFIG_FB_MATROX_I2C=m
+CONFIG_FB_MATROX_MAVEN=m
+CONFIG_FB_RADEON=m
+CONFIG_FB_RADEON_I2C=y
+CONFIG_FB_RADEON_BACKLIGHT=y
+CONFIG_FB_ATY128=m
+CONFIG_FB_ATY128_BACKLIGHT=y
+CONFIG_FB_ATY=m
+CONFIG_FB_ATY_CT=y
+CONFIG_FB_ATY_GX=y
+CONFIG_FB_ATY_BACKLIGHT=y
+CONFIG_FB_SAVAGE=m
+CONFIG_FB_SIS=m
+CONFIG_FB_SIS_300=y
+CONFIG_FB_SIS_315=y
+CONFIG_FB_NEOMAGIC=m
+CONFIG_FB_KYRO=m
+CONFIG_FB_VOODOO1=m
+CONFIG_FB_TRIDENT=m
+CONFIG_FB_VIRTUAL=m
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_PCIPCWATCHDOG=m
+CONFIG_WDTPCI=m
+CONFIG_USBPCWATCHDOG=m
+
+##
+## file: net/decnet/Kconfig
+##
+CONFIG_DECNET=m
+
+##
+## file: net/decnet/netfilter/Kconfig
+##
+CONFIG_DECNET_NF_GRABULATOR=m
+
+##
+## file: net/lapb/Kconfig
+##
+CONFIG_LAPB=m
+
+##
+## file: sound/drivers/Kconfig
+##
+CONFIG_SND_DUMMY=m
+CONFIG_SND_VIRMIDI=m
+CONFIG_SND_MTPAV=m
+CONFIG_SND_SERIAL_U16550=m
+CONFIG_SND_MPU401=m
+
+##
+## file: sound/pci/Kconfig
+##
+CONFIG_SND_ALI5451=m
+CONFIG_SND_ATIIXP=m
+CONFIG_SND_ATIIXP_MODEM=m
+CONFIG_SND_AU8810=m
+CONFIG_SND_AU8820=m
+CONFIG_SND_AU8830=m
+CONFIG_SND_AZT3328=m
+CONFIG_SND_BT87X=m
+CONFIG_SND_CA0106=m
+CONFIG_SND_CMIPCI=m
+CONFIG_SND_CS4281=m
+CONFIG_SND_CS46XX=m
+CONFIG_SND_CS46XX_NEW_DSP=y
+CONFIG_SND_EMU10K1=m
+CONFIG_SND_EMU10K1X=m
+CONFIG_SND_ENS1370=m
+CONFIG_SND_ENS1371=m
+CONFIG_SND_ES1938=m
+CONFIG_SND_ES1968=m
+CONFIG_SND_FM801=m
+CONFIG_SND_FM801_TEA575X_BOOL=y
+CONFIG_SND_HDSP=m
+CONFIG_SND_ICE1712=m
+CONFIG_SND_ICE1724=m
+CONFIG_SND_INTEL8X0=m
+CONFIG_SND_INTEL8X0M=m
+CONFIG_SND_KORG1212=m
+CONFIG_SND_MAESTRO3=m
+CONFIG_SND_MIXART=m
+CONFIG_SND_NM256=m
+CONFIG_SND_RME32=m
+CONFIG_SND_RME96=m
+CONFIG_SND_RME9652=m
+CONFIG_SND_SONICVIBES=m
+CONFIG_SND_TRIDENT=m
+CONFIG_SND_VIA82XX=m
+CONFIG_SND_VIA82XX_MODEM=m
+CONFIG_SND_VX222=m
+CONFIG_SND_YMFPCI=m
diff --git a/debian/config/kernelarch-mips/config.mips32r2 b/debian/config/kernelarch-mips/config.mips32r2
new file mode 100644
index 000000000000..f8de842c7bcc
--- /dev/null
+++ b/debian/config/kernelarch-mips/config.mips32r2
@@ -0,0 +1,9 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: CPU type
+CONFIG_CPU_MIPS32_R2=y
+## end choice
+## choice: Kernel code model
+CONFIG_32BIT=y
+## end choice
diff --git a/debian/config/kernelarch-mips/config.mips32r6 b/debian/config/kernelarch-mips/config.mips32r6
new file mode 100644
index 000000000000..1771b56be8c3
--- /dev/null
+++ b/debian/config/kernelarch-mips/config.mips32r6
@@ -0,0 +1,9 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: CPU type
+CONFIG_CPU_MIPS32_R6=y
+## end choice
+## choice: Kernel code model
+CONFIG_32BIT=y
+## end choice
diff --git a/debian/config/kernelarch-mips/config.mips64r2 b/debian/config/kernelarch-mips/config.mips64r2
new file mode 100644
index 000000000000..99507b262f4d
--- /dev/null
+++ b/debian/config/kernelarch-mips/config.mips64r2
@@ -0,0 +1,9 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: CPU type
+CONFIG_CPU_MIPS64_R2=y
+## end choice
+## choice: Kernel code model
+CONFIG_64BIT=y
+## end choice
diff --git a/debian/config/kernelarch-mips/config.mips64r6 b/debian/config/kernelarch-mips/config.mips64r6
new file mode 100644
index 000000000000..1f72d372fb6e
--- /dev/null
+++ b/debian/config/kernelarch-mips/config.mips64r6
@@ -0,0 +1,9 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: CPU type
+CONFIG_CPU_MIPS64_R6=y
+## end choice
+## choice: Kernel code model
+CONFIG_64BIT=y
+## end choice
diff --git a/debian/config/kernelarch-mips/config.octeon b/debian/config/kernelarch-mips/config.octeon
new file mode 100644
index 000000000000..ec2327ed2574
--- /dev/null
+++ b/debian/config/kernelarch-mips/config.octeon
@@ -0,0 +1,188 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: System type
+CONFIG_CAVIUM_OCTEON_SOC=y
+## end choice
+## choice: Kernel code model
+# CONFIG_32BIT is not set
+CONFIG_64BIT=y
+## end choice
+# CONFIG_CPU_HAS_MSA is not set
+CONFIG_SMP=y
+# CONFIG_HOTPLUG_CPU is not set
+CONFIG_NR_CPUS=64
+
+##
+## file: arch/mips/cavium-octeon/Kconfig
+##
+CONFIG_CAVIUM_CN63XXP1=y
+CONFIG_CAVIUM_OCTEON_CVMSEG_SIZE=1
+CONFIG_CAVIUM_OCTEON_LOCK_L2=y
+CONFIG_CAVIUM_OCTEON_LOCK_L2_TLB=y
+CONFIG_CAVIUM_OCTEON_LOCK_L2_EXCEPTION=y
+CONFIG_CAVIUM_OCTEON_LOCK_L2_LOW_LEVEL_INTERRUPT=y
+CONFIG_CAVIUM_OCTEON_LOCK_L2_INTERRUPT=y
+CONFIG_CAVIUM_OCTEON_LOCK_L2_MEMCPY=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_MD5_OCTEON=m
+CONFIG_CRYPTO_SHA1_OCTEON=m
+CONFIG_CRYPTO_SHA256_OCTEON=m
+CONFIG_CRYPTO_SHA512_OCTEON=m
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_SATA_AHCI_PLATFORM=m
+CONFIG_AHCI_OCTEON=m
+CONFIG_PATA_OCTEON_CF=y
+
+##
+## file: drivers/char/hw_random/Kconfig
+##
+CONFIG_HW_RANDOM_OCTEON=m
+
+##
+## file: drivers/edac/Kconfig
+##
+CONFIG_EDAC=y
+CONFIG_EDAC_OCTEON_PC=m
+CONFIG_EDAC_OCTEON_L2C=m
+CONFIG_EDAC_OCTEON_LMC=m
+CONFIG_EDAC_OCTEON_PCI=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_ADM1031=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=y
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_OCTEON=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+# CONFIG_KEYBOARD_ATKBD is not set
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+# CONFIG_MOUSE_PS2 is not set
+
+##
+## file: drivers/input/serio/Kconfig
+##
+# CONFIG_SERIO_I8042 is not set
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+# CONFIG_INPUT_TOUCHSCREEN is not set
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=m
+
+##
+## file: drivers/mmc/core/Kconfig
+##
+CONFIG_MMC_BLOCK=m
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+CONFIG_MMC_CAVIUM_OCTEON=m
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_MTD=y
+CONFIG_MTD_BLOCK=y
+
+##
+## file: drivers/mtd/chips/Kconfig
+##
+CONFIG_MTD_CFI=y
+CONFIG_MTD_CFI_AMDSTD=y
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+CONFIG_MTD_PHYSMAP=y
+
+##
+## file: drivers/net/ethernet/cavium/Kconfig
+##
+CONFIG_OCTEON_MGMT_ETHERNET=y
+
+##
+## file: drivers/net/mdio/Kconfig
+##
+CONFIG_MDIO_OCTEON=y
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_DS1307=y
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI_OCTEON=y
+
+##
+## file: drivers/staging/octeon/Kconfig
+##
+CONFIG_OCTEON_ETHERNET=y
+
+##
+## file: drivers/staging/octeon-usb/Kconfig
+##
+CONFIG_OCTEON_USB=y
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250_NR_UARTS=2
+CONFIG_SERIAL_8250_RUNTIME_UARTS=2
+CONFIG_SERIAL_8250_DW=y
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_OCTEON_EHCI=y
+CONFIG_USB_OCTEON_OHCI=y
+
+##
+## file: drivers/video/console/Kconfig
+##
+# CONFIG_FRAMEBUFFER_CONSOLE is not set
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+# CONFIG_FB is not set
+
+##
+## file: kernel/power/Kconfig
+##
+# CONFIG_SUSPEND is not set
+# CONFIG_HIBERNATION is not set
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+CONFIG_SPARSEMEM_MANUAL=y
+## end choice
diff --git a/debian/config/kernelarch-powerpc/config b/debian/config/kernelarch-powerpc/config
new file mode 100644
index 000000000000..ede6f2c687f4
--- /dev/null
+++ b/debian/config/kernelarch-powerpc/config
@@ -0,0 +1,909 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_SECCOMP=y
+
+##
+## file: arch/powerpc/Kconfig
+##
+# CONFIG_HOTPLUG_CPU is not set
+CONFIG_KEXEC=y
+CONFIG_CMDLINE="console=ttyS0,9600 console=tty0"
+# CONFIG_ADVANCED_OPTIONS is not set
+
+##
+## file: arch/powerpc/Kconfig.debug
+##
+CONFIG_PPC_DISABLE_WERROR=y
+# CONFIG_CODE_PATCHING_SELFTEST is not set
+# CONFIG_FTR_FIXUP_SELFTEST is not set
+# CONFIG_MSI_BITMAP_SELFTEST is not set
+CONFIG_XMON=y
+# CONFIG_XMON_DEFAULT is not set
+CONFIG_XMON_DISASSEMBLY=y
+# CONFIG_BDI_SWITCH is not set
+CONFIG_BOOTX_TEXT=y
+
+##
+## file: arch/powerpc/kvm/Kconfig
+##
+CONFIG_VIRTUALIZATION=y
+
+##
+## file: arch/powerpc/platforms/Kconfig
+##
+CONFIG_KVM_GUEST=y
+CONFIG_RTAS_PROC=y
+CONFIG_TAU=y
+# CONFIG_TAU_INT is not set
+# CONFIG_TAU_AVERAGE is not set
+
+##
+## file: arch/powerpc/platforms/Kconfig.cputype
+##
+CONFIG_PPC_KUEP=y
+CONFIG_PPC_KUAP=y
+
+##
+## file: arch/powerpc/platforms/52xx/Kconfig
+##
+# CONFIG_PPC_LITE5200 is not set
+
+##
+## file: arch/powerpc/platforms/82xx/Kconfig
+##
+# CONFIG_PPC_82xx is not set
+
+##
+## file: arch/powerpc/platforms/83xx/Kconfig
+##
+# CONFIG_PPC_83xx is not set
+
+##
+## file: arch/powerpc/platforms/86xx/Kconfig
+##
+# CONFIG_PPC_86xx is not set
+
+##
+## file: arch/powerpc/platforms/powermac/Kconfig
+##
+CONFIG_PPC_PMAC=y
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_AMIGA_PARTITION=y
+CONFIG_MAC_PARTITION=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_SHA1_PPC=m
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_ATA=y
+CONFIG_PATA_HPT366=m
+CONFIG_PATA_HPT37X=m
+CONFIG_PATA_MACIO=y
+CONFIG_PATA_NETCELL=m
+CONFIG_PATA_NS87415=m
+CONFIG_PATA_PDC2027X=m
+CONFIG_PATA_PDC_OLD=m
+CONFIG_PATA_SC1200=m
+CONFIG_PATA_SIL680=m
+CONFIG_PATA_VIA=m
+CONFIG_PATA_WINBOND=m
+CONFIG_PATA_NS87410=m
+CONFIG_PATA_PCMCIA=m
+
+##
+## file: drivers/atm/Kconfig
+##
+CONFIG_ATM_DRIVERS=y
+CONFIG_ATM_TCP=m
+CONFIG_ATM_LANAI=m
+CONFIG_ATM_ENI=m
+# CONFIG_ATM_ENI_DEBUG is not set
+# CONFIG_ATM_ENI_TUNE_BURST is not set
+CONFIG_ATM_FIRESTREAM=m
+CONFIG_ATM_ZATM=m
+CONFIG_ATM_ZATM_DEBUG=y
+CONFIG_ATM_NICSTAR=m
+CONFIG_ATM_NICSTAR_USE_SUNI=y
+CONFIG_ATM_NICSTAR_USE_IDT77105=y
+CONFIG_ATM_IDT77252=m
+# CONFIG_ATM_IDT77252_DEBUG is not set
+# CONFIG_ATM_IDT77252_RCV_ALL is not set
+CONFIG_ATM_AMBASSADOR=m
+# CONFIG_ATM_AMBASSADOR_DEBUG is not set
+CONFIG_ATM_HORIZON=m
+# CONFIG_ATM_HORIZON_DEBUG is not set
+CONFIG_ATM_IA=m
+# CONFIG_ATM_IA_DEBUG is not set
+CONFIG_ATM_FORE200E_USE_TASKLET=y
+CONFIG_ATM_FORE200E_TX_RETRY=16
+CONFIG_ATM_FORE200E_DEBUG=0
+CONFIG_ATM_HE=m
+# CONFIG_ATM_HE_USE_SUNI is not set
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_BLK_DEV_FD=m
+CONFIG_BLK_DEV_SX8=m
+CONFIG_CDROM_PKTCDVD=m
+CONFIG_CDROM_PKTCDVD_BUFFERS=8
+# CONFIG_CDROM_PKTCDVD_WCACHE is not set
+
+##
+## file: drivers/bluetooth/Kconfig
+##
+CONFIG_BT_HCIUART=m
+CONFIG_BT_HCIUART_H4=y
+CONFIG_BT_HCIUART_BCSP=y
+CONFIG_BT_HCIBCM203X=m
+CONFIG_BT_HCIBPA10X=m
+CONFIG_BT_HCIBFUSB=m
+CONFIG_BT_HCIDTL1=m
+CONFIG_BT_HCIBT3C=m
+CONFIG_BT_HCIBLUECARD=m
+CONFIG_BT_HCIVHCI=m
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_PRINTER=m
+CONFIG_DTLK=m
+CONFIG_APPLICOM=m
+CONFIG_NVRAM=y
+
+##
+## file: drivers/char/agp/Kconfig
+##
+#. Workaround
+CONFIG_AGP=y
+#. Workaround
+CONFIG_AGP_UNINORTH=y
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+CONFIG_IPMI_HANDLER=m
+# CONFIG_IPMI_PANIC_EVENT is not set
+CONFIG_IPMI_DEVICE_INTERFACE=m
+CONFIG_IPMI_SI=m
+CONFIG_IPMI_POWERNV=m
+CONFIG_IPMI_WATCHDOG=m
+CONFIG_IPMI_POWEROFF=m
+
+##
+## file: drivers/cpufreq/Kconfig.powerpc
+##
+CONFIG_CPU_FREQ_PMAC=y
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+CONFIG_DRM_RADEON=m
+
+##
+## file: drivers/gpu/drm/i2c/Kconfig
+##
+CONFIG_DRM_I2C_CH7006=m
+CONFIG_DRM_I2C_SIL164=m
+
+##
+## file: drivers/gpu/drm/nouveau/Kconfig
+##
+CONFIG_DRM_NOUVEAU=m
+CONFIG_DRM_NOUVEAU_BACKLIGHT=y
+
+##
+## file: drivers/hid/Kconfig
+##
+CONFIG_HID_APPLEIR=m
+
+##
+## file: drivers/hid/usbhid/Kconfig
+##
+CONFIG_USB_HID=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_ADM1021=m
+CONFIG_SENSORS_ADM1025=m
+CONFIG_SENSORS_ADM1026=m
+CONFIG_SENSORS_ADM1031=m
+CONFIG_SENSORS_ASB100=m
+CONFIG_SENSORS_DS1621=m
+CONFIG_SENSORS_F71805F=m
+CONFIG_SENSORS_GL518SM=m
+CONFIG_SENSORS_GL520SM=m
+CONFIG_SENSORS_IT87=m
+CONFIG_SENSORS_MAX1619=m
+CONFIG_SENSORS_LM63=m
+CONFIG_SENSORS_LM75=m
+CONFIG_SENSORS_LM77=m
+CONFIG_SENSORS_LM78=m
+CONFIG_SENSORS_LM80=m
+CONFIG_SENSORS_LM83=m
+CONFIG_SENSORS_LM85=m
+CONFIG_SENSORS_LM87=m
+CONFIG_SENSORS_LM90=m
+CONFIG_SENSORS_LM92=m
+CONFIG_SENSORS_PC87360=m
+CONFIG_SENSORS_PCF8591=m
+CONFIG_SENSORS_SIS5595=m
+CONFIG_SENSORS_SMSC47M1=m
+CONFIG_SENSORS_SMSC47B397=m
+CONFIG_SENSORS_VIA686A=m
+CONFIG_SENSORS_W83781D=m
+CONFIG_SENSORS_W83L785TS=m
+CONFIG_SENSORS_W83627HF=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=y
+# CONFIG_I2C_STUB is not set
+# CONFIG_I2C_DEBUG_CORE is not set
+# CONFIG_I2C_DEBUG_ALGO is not set
+# CONFIG_I2C_DEBUG_BUS is not set
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+# CONFIG_I2C_ALI1535 is not set
+# CONFIG_I2C_ALI1563 is not set
+# CONFIG_I2C_ALI15X3 is not set
+# CONFIG_I2C_AMD756 is not set
+# CONFIG_I2C_AMD8111 is not set
+# CONFIG_I2C_I801 is not set
+# CONFIG_I2C_PIIX4 is not set
+# CONFIG_I2C_NFORCE2 is not set
+CONFIG_I2C_SIS5595=m
+CONFIG_I2C_SIS630=m
+CONFIG_I2C_SIS96X=m
+CONFIG_I2C_VIA=m
+CONFIG_I2C_VIAPRO=m
+CONFIG_I2C_HYDRA=m
+#. This isn't auto-loaded (#713943)
+CONFIG_I2C_POWERMAC=y
+CONFIG_I2C_MPC=m
+CONFIG_I2C_PARPORT=m
+CONFIG_I2C_PCA_ISA=m
+CONFIG_SCx200_ACB=m
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+CONFIG_GAMEPORT=m
+CONFIG_GAMEPORT_NS558=m
+CONFIG_GAMEPORT_L4=m
+CONFIG_GAMEPORT_EMU10K1=m
+CONFIG_GAMEPORT_FM801=m
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+CONFIG_INPUT_JOYSTICK=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+CONFIG_KEYBOARD_ATKBD=m
+# CONFIG_KEYBOARD_LKKBD is not set
+# CONFIG_KEYBOARD_NEWTON is not set
+# CONFIG_KEYBOARD_SUNKBD is not set
+# CONFIG_KEYBOARD_XTKBD is not set
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MISC=y
+CONFIG_INPUT_PCSPKR=m
+CONFIG_INPUT_UINPUT=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_INPUT_MOUSE=y
+CONFIG_MOUSE_PS2=m
+# CONFIG_MOUSE_SERIAL is not set
+CONFIG_MOUSE_APPLETOUCH=m
+CONFIG_MOUSE_BCM5974=m
+# CONFIG_MOUSE_VSXXXAA is not set
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO=m
+CONFIG_SERIO_I8042=m
+CONFIG_SERIO_SERPORT=m
+# CONFIG_SERIO_PCIPS2 is not set
+CONFIG_SERIO_LIBPS2=m
+CONFIG_SERIO_RAW=m
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+CONFIG_INPUT_TOUCHSCREEN=y
+
+##
+## file: drivers/isdn/Kconfig
+##
+CONFIG_ISDN=y
+
+##
+## file: drivers/macintosh/Kconfig
+##
+CONFIG_MACINTOSH_DRIVERS=y
+CONFIG_ADB=y
+CONFIG_ADB_CUDA=y
+CONFIG_ADB_PMU=y
+CONFIG_ADB_PMU_LED=y
+# CONFIG_ADB_PMU_LED_DISK is not set
+CONFIG_PMAC_SMU=y
+# CONFIG_PMAC_APM_EMU is not set
+CONFIG_PMAC_MEDIABAY=y
+CONFIG_PMAC_BACKLIGHT=y
+CONFIG_ADB_MACIO=y
+CONFIG_INPUT_ADBHID=y
+CONFIG_MAC_EMUMOUSEBTN=y
+CONFIG_THERM_WINDTUNNEL=m
+CONFIG_THERM_ADT746X=m
+CONFIG_WINDFARM=m
+CONFIG_ANSLCD=m
+CONFIG_PMAC_RACKMETER=m
+
+##
+## file: drivers/media/radio/Kconfig
+##
+CONFIG_USB_DSBR=m
+CONFIG_RADIO_MAXIRADIO=m
+
+##
+## file: drivers/misc/Kconfig
+##
+CONFIG_PHANTOM=m
+CONFIG_HP_ILO=m
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=m
+
+##
+## file: drivers/mmc/core/Kconfig
+##
+CONFIG_MMC_BLOCK=m
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+# CONFIG_MMC_DEBUG is not set
+
+##
+## file: drivers/mtd/Kconfig
+##
+# CONFIG_MTD is not set
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_NET_FC=y
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+CONFIG_ARCNET=m
+CONFIG_ARCNET_1201=m
+CONFIG_ARCNET_1051=m
+CONFIG_ARCNET_RAW=m
+CONFIG_ARCNET_CAP=m
+# CONFIG_ARCNET_COM90xx is not set
+CONFIG_ARCNET_COM90xxIO=m
+# CONFIG_ARCNET_RIM_I is not set
+CONFIG_ARCNET_COM20020=m
+CONFIG_ARCNET_COM20020_PCI=m
+CONFIG_ARCNET_COM20020_CS=m
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+CONFIG_FEALNX=m
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_NET_VENDOR_3COM=y
+CONFIG_PCMCIA_3C574=m
+CONFIG_PCMCIA_3C589=m
+CONFIG_VORTEX=m
+CONFIG_TYPHOON=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_PCMCIA_AXNET=m
+CONFIG_NE2K_PCI=m
+CONFIG_PCMCIA_PCNET=m
+
+##
+## file: drivers/net/ethernet/adaptec/Kconfig
+##
+CONFIG_ADAPTEC_STARFIRE=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+# CONFIG_AMD8111_ETH is not set
+CONFIG_PCMCIA_NMCLAN=m
+
+##
+## file: drivers/net/ethernet/apple/Kconfig
+##
+CONFIG_MACE=m
+# CONFIG_MACE_AAUI_PORT is not set
+CONFIG_BMAC=m
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+CONFIG_B44=m
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_NET_TULIP=y
+CONFIG_DE2104X=m
+CONFIG_TULIP=m
+# CONFIG_TULIP_MWI is not set
+# CONFIG_TULIP_MMIO is not set
+CONFIG_WINBOND_840=m
+CONFIG_DM9102=m
+CONFIG_PCMCIA_XIRCOM=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_SUNDANCE=m
+CONFIG_SUNDANCE_MMIO=y
+
+##
+## file: drivers/net/ethernet/fujitsu/Kconfig
+##
+CONFIG_PCMCIA_FMVJ18X=m
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/marvell/Kconfig
+##
+CONFIG_MV643XX_ETH=m
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NATSEMI=m
+
+##
+## file: drivers/net/ethernet/nvidia/Kconfig
+##
+# CONFIG_FORCEDETH is not set
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_8139CP=m
+CONFIG_8139TOO=m
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+CONFIG_SIS900=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_PCMCIA_SMC91C92=m
+CONFIG_EPIC100=m
+
+##
+## file: drivers/net/ethernet/sun/Kconfig
+##
+CONFIG_HAPPYMEAL=m
+CONFIG_SUNGEM=m
+
+##
+## file: drivers/net/ethernet/ti/Kconfig
+##
+CONFIG_TLAN=m
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+CONFIG_VIA_RHINE=m
+CONFIG_VIA_RHINE_MMIO=y
+
+##
+## file: drivers/net/ethernet/xircom/Kconfig
+##
+CONFIG_PCMCIA_XIRC2PS=m
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+CONFIG_FDDI=y
+CONFIG_SKFP=m
+
+##
+## file: drivers/net/hippi/Kconfig
+##
+CONFIG_HIPPI=y
+# CONFIG_ROADRUNNER is not set
+
+##
+## file: drivers/net/wan/Kconfig
+##
+CONFIG_WAN=y
+CONFIG_LANMEDIA=m
+CONFIG_PCI200SYN=m
+CONFIG_WANXL=m
+CONFIG_FARSYNC=m
+
+##
+## file: drivers/net/wireless/Kconfig
+##
+CONFIG_PCMCIA_RAYCS=m
+CONFIG_PCMCIA_WL3501=m
+
+##
+## file: drivers/net/wireless/atmel/Kconfig
+##
+CONFIG_ATMEL=m
+# CONFIG_PCI_ATMEL is not set
+CONFIG_PCMCIA_ATMEL=m
+
+##
+## file: drivers/net/wireless/cisco/Kconfig
+##
+CONFIG_AIRO_CS=m
+
+##
+## file: drivers/net/wireless/intel/ipw2x00/Kconfig
+##
+# CONFIG_IPW2100 is not set
+
+##
+## file: drivers/net/wireless/intersil/orinoco/Kconfig
+##
+CONFIG_HERMES=m
+CONFIG_APPLE_AIRPORT=m
+CONFIG_PLX_HERMES=m
+CONFIG_TMD_HERMES=m
+CONFIG_PCI_HERMES=m
+CONFIG_PCMCIA_HERMES=m
+
+##
+## file: drivers/net/wireless/marvell/mwifiex/Kconfig
+##
+CONFIG_MWIFIEX=m
+CONFIG_MWIFIEX_SDIO=m
+CONFIG_MWIFIEX_PCIE=m
+
+##
+## file: drivers/net/wireless/zydas/Kconfig
+##
+CONFIG_USB_ZD1201=m
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+# CONFIG_HOTPLUG_PCI is not set
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+CONFIG_PCCARD=m
+CONFIG_PCMCIA=m
+CONFIG_CARDBUS=y
+CONFIG_YENTA=m
+CONFIG_PD6729=m
+CONFIG_I82092=m
+CONFIG_TCIC=m
+# CONFIG_PCMCIA_DEBUG is not set
+
+##
+## file: drivers/power/supply/Kconfig
+##
+CONFIG_BATTERY_PMU=m
+
+##
+## file: drivers/rapidio/Kconfig
+##
+# CONFIG_RAPIDIO is not set
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_GENERIC=y
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_DPT_I2O=m
+CONFIG_SCSI_ARCMSR=m
+CONFIG_SCSI_BUSLOGIC=m
+CONFIG_SCSI_MYRB=m
+CONFIG_SCSI_MYRS=m
+CONFIG_SCSI_DMX3191D=m
+CONFIG_SCSI_IPS=m
+# CONFIG_SCSI_INITIO is not set
+CONFIG_SCSI_INIA100=m
+CONFIG_SCSI_SYM53C8XX_DMA_ADDRESSING_MODE=1
+CONFIG_SCSI_SYM53C8XX_DEFAULT_TAGS=16
+CONFIG_SCSI_SYM53C8XX_MAX_TAGS=64
+CONFIG_SCSI_IPR=m
+# CONFIG_SCSI_IPR_TRACE is not set
+# CONFIG_SCSI_IPR_DUMP is not set
+# CONFIG_SCSI_QLOGIC_1280 is not set
+CONFIG_SCSI_DC395x=m
+CONFIG_SCSI_AM53C974=m
+CONFIG_SCSI_NSP32=m
+CONFIG_SCSI_MESH=m
+CONFIG_SCSI_MESH_SYNC_RATE=5
+CONFIG_SCSI_MESH_RESET_DELAY_MS=4000
+CONFIG_SCSI_MAC53C94=m
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+CONFIG_MEGARAID_NEWGEN=y
+CONFIG_MEGARAID_MM=m
+CONFIG_MEGARAID_MAILBOX=m
+# CONFIG_MEGARAID_LEGACY is not set
+
+##
+## file: drivers/scsi/pcmcia/Kconfig
+##
+CONFIG_PCMCIA_AHA152X=m
+CONFIG_PCMCIA_NINJA_SCSI=m
+CONFIG_PCMCIA_QLOGIC=m
+CONFIG_PCMCIA_SYM53C500=m
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_VT=y
+CONFIG_VT_CONSOLE=y
+# CONFIG_SERIAL_NONSTANDARD is not set
+
+##
+## file: drivers/tty/hvc/Kconfig
+##
+CONFIG_HVC_RTAS=y
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_PMACZILOG=y
+CONFIG_SERIAL_PMACZILOG_CONSOLE=y
+CONFIG_SERIAL_JSM=m
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_CS=m
+CONFIG_SERIAL_8250_NR_UARTS=32
+CONFIG_SERIAL_8250_RUNTIME_UARTS=4
+# CONFIG_SERIAL_8250_EXTENDED is not set
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=m
+
+##
+## file: drivers/usb/atm/Kconfig
+##
+CONFIG_USB_ATM=m
+CONFIG_USB_SPEEDTOUCH=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_OHCI_HCD=y
+CONFIG_USB_OHCI_HCD_PPC_OF_BE=y
+CONFIG_USB_OHCI_HCD_PPC_OF_LE=y
+CONFIG_USB_OHCI_HCD_PCI=y
+CONFIG_USB_UHCI_HCD=m
+CONFIG_USB_SL811_HCD=m
+CONFIG_USB_SL811_CS=m
+
+##
+## file: drivers/video/console/Kconfig
+##
+CONFIG_VGA_CONSOLE=y
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_MODE_HELPERS=y
+CONFIG_FB_TILEBLITTING=y
+CONFIG_FB_CIRRUS=m
+# CONFIG_FB_PM2 is not set
+# CONFIG_FB_CYBER2000 is not set
+CONFIG_FB_OF=y
+# CONFIG_FB_ASILIANT is not set
+# CONFIG_FB_VGA16 is not set
+CONFIG_FB_S1D13XXX=m
+CONFIG_FB_MATROX=m
+CONFIG_FB_MATROX_MILLENIUM=y
+CONFIG_FB_MATROX_MYSTIQUE=y
+CONFIG_FB_MATROX_G=y
+CONFIG_FB_MATROX_I2C=m
+CONFIG_FB_MATROX_MAVEN=m
+CONFIG_FB_RADEON=m
+CONFIG_FB_RADEON_I2C=y
+# CONFIG_FB_RADEON_DEBUG is not set
+CONFIG_FB_ATY=m
+CONFIG_FB_ATY_CT=y
+CONFIG_FB_ATY_GENERIC_LCD=y
+CONFIG_FB_ATY_GX=y
+CONFIG_FB_SAVAGE=m
+CONFIG_FB_SAVAGE_I2C=y
+CONFIG_FB_SAVAGE_ACCEL=y
+CONFIG_FB_SIS=m
+CONFIG_FB_SIS_300=y
+CONFIG_FB_SIS_315=y
+CONFIG_FB_NEOMAGIC=m
+CONFIG_FB_KYRO=m
+CONFIG_FB_VOODOO1=m
+CONFIG_FB_TRIDENT=m
+CONFIG_FB_IBM_GXT4500=m
+# CONFIG_FB_VIRTUAL is not set
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_WATCHDOG_RTAS=m
+CONFIG_PCIPCWATCHDOG=m
+CONFIG_WDTPCI=m
+CONFIG_USBPCWATCHDOG=m
+
+##
+## file: init/Kconfig
+##
+CONFIG_SGETMASK_SYSCALL=y
+
+##
+## file: lib/Kconfig.debug
+##
+# CONFIG_DEBUG_STACK_USAGE is not set
+# CONFIG_DEBUG_STACKOVERFLOW is not set
+
+##
+## file: lib/xz/Kconfig
+##
+CONFIG_XZ_DEC_POWERPC=y
+
+##
+## file: net/decnet/Kconfig
+##
+CONFIG_DECNET=m
+CONFIG_DECNET_ROUTER=y
+
+##
+## file: net/decnet/netfilter/Kconfig
+##
+CONFIG_DECNET_NF_GRABULATOR=m
+
+##
+## file: net/lapb/Kconfig
+##
+CONFIG_LAPB=m
+
+##
+## file: sound/aoa/Kconfig
+##
+CONFIG_SND_AOA=m
+
+##
+## file: sound/aoa/codecs/Kconfig
+##
+CONFIG_SND_AOA_ONYX=m
+CONFIG_SND_AOA_TAS=m
+CONFIG_SND_AOA_TOONIE=m
+
+##
+## file: sound/aoa/fabrics/Kconfig
+##
+CONFIG_SND_AOA_FABRIC_LAYOUT=m
+
+##
+## file: sound/aoa/soundbus/Kconfig
+##
+CONFIG_SND_AOA_SOUNDBUS=m
+CONFIG_SND_AOA_SOUNDBUS_I2S=m
+
+##
+## file: sound/drivers/Kconfig
+##
+# CONFIG_SND_DUMMY is not set
+CONFIG_SND_VIRMIDI=m
+# CONFIG_SND_MTPAV is not set
+# CONFIG_SND_SERIAL_U16550 is not set
+# CONFIG_SND_MPU401 is not set
+
+##
+## file: sound/pci/Kconfig
+##
+CONFIG_SND_ALS4000=m
+# CONFIG_SND_ALI5451 is not set
+CONFIG_SND_ATIIXP=m
+CONFIG_SND_ATIIXP_MODEM=m
+CONFIG_SND_AU8810=m
+CONFIG_SND_AU8820=m
+CONFIG_SND_AU8830=m
+CONFIG_SND_AZT3328=m
+CONFIG_SND_BT87X=m
+# CONFIG_SND_BT87X_OVERCLOCK is not set
+CONFIG_SND_CA0106=m
+CONFIG_SND_CMIPCI=m
+CONFIG_SND_CS4281=m
+CONFIG_SND_CS46XX=m
+CONFIG_SND_CS46XX_NEW_DSP=y
+CONFIG_SND_EMU10K1=m
+CONFIG_SND_EMU10K1X=m
+CONFIG_SND_ENS1370=m
+CONFIG_SND_ENS1371=m
+CONFIG_SND_ES1938=m
+CONFIG_SND_ES1968=m
+CONFIG_SND_FM801=m
+CONFIG_SND_FM801_TEA575X_BOOL=y
+CONFIG_SND_HDSP=m
+CONFIG_SND_ICE1712=m
+CONFIG_SND_ICE1724=m
+# CONFIG_SND_INTEL8X0 is not set
+# CONFIG_SND_INTEL8X0M is not set
+CONFIG_SND_KORG1212=m
+CONFIG_SND_MAESTRO3=m
+CONFIG_SND_MIXART=m
+CONFIG_SND_NM256=m
+CONFIG_SND_RME32=m
+CONFIG_SND_RME96=m
+CONFIG_SND_RME9652=m
+CONFIG_SND_SONICVIBES=m
+CONFIG_SND_TRIDENT=m
+CONFIG_SND_VIA82XX=m
+CONFIG_SND_VIA82XX_MODEM=m
+CONFIG_SND_VX222=m
+CONFIG_SND_YMFPCI=m
+
+##
+## file: sound/pci/hda/Kconfig
+##
+CONFIG_SND_HDA_INTEL=m
+
+##
+## file: sound/ppc/Kconfig
+##
+CONFIG_SND_POWERMAC=m
+CONFIG_SND_POWERMAC_AUTO_DRC=y
diff --git a/debian/config/kernelarch-powerpc/config-arch-64 b/debian/config/kernelarch-powerpc/config-arch-64
new file mode 100644
index 000000000000..a24cd6067054
--- /dev/null
+++ b/debian/config/kernelarch-powerpc/config-arch-64
@@ -0,0 +1,207 @@
+##
+## file: arch/powerpc/Kconfig
+##
+#. This feature is broken; see #866122
+# CONFIG_PPC_TRANSACTIONAL_MEM is not set
+CONFIG_CRASH_DUMP=y
+CONFIG_IRQ_ALL_CPUS=y
+CONFIG_NUMA=y
+## choice: Page size
+CONFIG_PPC_64K_PAGES=y
+## end choice
+CONFIG_SCHED_SMT=y
+CONFIG_KERNEL_START=0xc000000000000000
+
+##
+## file: arch/powerpc/kvm/Kconfig
+##
+CONFIG_KVM_BOOK3S_64=m
+CONFIG_KVM_BOOK3S_64_HV=m
+CONFIG_KVM_BOOK3S_64_PR=m
+CONFIG_KVM_XICS=y
+
+##
+## file: arch/powerpc/platforms/Kconfig
+##
+CONFIG_RTAS_PROC=y
+CONFIG_RTAS_FLASH=m
+
+##
+## file: arch/powerpc/platforms/Kconfig.cputype
+##
+CONFIG_PPC64=y
+CONFIG_ALTIVEC=y
+CONFIG_VSX=y
+CONFIG_SMP=y
+CONFIG_NR_CPUS=2048
+
+##
+## file: arch/powerpc/platforms/powernv/Kconfig
+##
+CONFIG_OPAL_PRD=m
+
+##
+## file: arch/powerpc/platforms/pseries/Kconfig
+##
+CONFIG_PPC_PSERIES=y
+CONFIG_PPC_SPLPAR=y
+CONFIG_SCANLOG=m
+# CONFIG_LPARCFG is not set
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_AIX_PARTITION=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_AMD=m
+
+##
+## file: drivers/block/Kconfig
+##
+# CONFIG_MAC_FLOPPY is not set
+CONFIG_BLK_DEV_RSXX=m
+
+##
+## file: drivers/crypto/Kconfig
+##
+CONFIG_CRYPTO_DEV_NX=y
+CONFIG_CRYPTO_DEV_VMX=y
+
+##
+## file: drivers/crypto/nx/Kconfig
+##
+CONFIG_CRYPTO_DEV_NX_ENCRYPT=m
+CONFIG_CRYPTO_DEV_NX_COMPRESS=m
+CONFIG_CRYPTO_DEV_NX_COMPRESS_PSERIES=m
+CONFIG_CRYPTO_DEV_NX_COMPRESS_POWERNV=m
+
+##
+## file: drivers/crypto/vmx/Kconfig
+##
+CONFIG_CRYPTO_DEV_VMX_ENCRYPT=m
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM_AMDGPU=m
+
+##
+## file: drivers/gpu/drm/ast/Kconfig
+##
+CONFIG_DRM_AST=m
+
+##
+## file: drivers/iommu/Kconfig
+##
+CONFIG_SPAPR_TCE_IOMMU=y
+
+##
+## file: drivers/misc/genwqe/Kconfig
+##
+CONFIG_GENWQE=m
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_MTD=m
+
+##
+## file: drivers/mtd/devices/Kconfig
+##
+CONFIG_MTD_POWERNV_FLASH=m
+
+##
+## file: drivers/net/ethernet/ibm/Kconfig
+##
+CONFIG_IBMVETH=m
+
+##
+## file: drivers/net/ethernet/ibm/emac/Kconfig
+##
+CONFIG_IBM_EMAC=m
+CONFIG_IBM_EMAC_RXB=128
+CONFIG_IBM_EMAC_TXB=64
+CONFIG_IBM_EMAC_POLL_WEIGHT=32
+CONFIG_IBM_EMAC_RX_COPY_THRESHOLD=256
+# CONFIG_IBM_EMAC_DEBUG is not set
+
+##
+## file: drivers/net/ethernet/marvell/Kconfig
+##
+# CONFIG_MV643XX_ETH is not set
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+CONFIG_HOTPLUG_PCI=y
+CONFIG_HOTPLUG_PCI_RPA=m
+CONFIG_HOTPLUG_PCI_RPA_DLPAR=m
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_IBMVSCSI=m
+CONFIG_SCSI_IBMVSCSIS=m
+CONFIG_SCSI_IBMVFC=m
+CONFIG_SCSI_QLOGIC_1280=m
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+CONFIG_MEGARAID_LEGACY=m
+
+##
+## file: drivers/tty/hvc/Kconfig
+##
+CONFIG_HVC_CONSOLE=y
+CONFIG_HVCS=m
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+# CONFIG_SERIAL_ICOM is not set
+
+##
+## file: drivers/vfio/Kconfig
+##
+CONFIG_VFIO=m
+
+##
+## file: drivers/vfio/pci/Kconfig
+##
+CONFIG_VFIO_PCI=m
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+# CONFIG_FB_IMSTT is not set
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_WATCHDOG_RTAS=m
+
+##
+## file: init/Kconfig
+##
+## choice: Cputime accounting
+# CONFIG_TICK_CPU_ACCOUNTING is not set
+CONFIG_VIRT_CPU_ACCOUNTING_NATIVE=y
+## end choice
+
+##
+## file: lib/Kconfig
+##
+CONFIG_CPUMASK_OFFSTACK=y
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+# CONFIG_FLATMEM_MANUAL is not set
+CONFIG_SPARSEMEM_MANUAL=y
+## end choice
+CONFIG_SPARSEMEM_VMEMMAP=y
diff --git a/debian/config/kernelarch-powerpc/config-arch-64-be b/debian/config/kernelarch-powerpc/config-arch-64-be
new file mode 100644
index 000000000000..363d14c5b8c0
--- /dev/null
+++ b/debian/config/kernelarch-powerpc/config-arch-64-be
@@ -0,0 +1,110 @@
+##
+## file: arch/powerpc/Kconfig
+##
+CONFIG_CMDLINE="console=hvsi0 console=hvc0 console=ttyS0,9600 console=tty0"
+
+##
+## file: arch/powerpc/platforms/cell/Kconfig
+##
+CONFIG_PPC_IBM_CELL_BLADE=y
+CONFIG_SPU_FS=m
+CONFIG_CBE_RAS=y
+CONFIG_CBE_THERM=m
+
+##
+## file: arch/powerpc/platforms/maple/Kconfig
+##
+CONFIG_PPC_MAPLE=y
+
+##
+## file: arch/powerpc/platforms/pasemi/Kconfig
+##
+CONFIG_PPC_PASEMI=y
+CONFIG_PPC_PASEMI_MDIO=m
+
+##
+## file: arch/powerpc/platforms/ps3/Kconfig
+##
+CONFIG_PPC_PS3=y
+CONFIG_PS3_ADVANCED=y
+CONFIG_PS3_HTAB_SIZE=20
+# CONFIG_PS3_DYNAMIC_DMA is not set
+CONFIG_PS3_PS3AV=y
+CONFIG_PS3_SYS_MANAGER=y
+CONFIG_PS3_DISK=m
+CONFIG_PS3_ROM=m
+CONFIG_PS3_FLASH=m
+CONFIG_PS3_VRAM=m
+CONFIG_PS3_LPM=m
+
+##
+## file: arch/powerpc/platforms/pseries/Kconfig
+##
+CONFIG_IBMEBUS=y
+
+##
+## file: drivers/char/hw_random/Kconfig
+##
+CONFIG_HW_RANDOM_PASEMI=m
+
+##
+## file: drivers/cpufreq/Kconfig.powerpc
+##
+CONFIG_CPU_FREQ_CBE=m
+CONFIG_CPU_FREQ_PMAC64=y
+#. It's a bool
+CONFIG_PPC_PASEMI_CPUFREQ=y
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_PASEMI=m
+
+##
+## file: drivers/macintosh/Kconfig
+##
+CONFIG_WINDFARM_PM81=m
+CONFIG_WINDFARM_PM72=m
+CONFIG_WINDFARM_RM31=m
+CONFIG_WINDFARM_PM91=m
+CONFIG_WINDFARM_PM112=m
+CONFIG_WINDFARM_PM121=m
+
+##
+## file: drivers/net/ethernet/ibm/Kconfig
+##
+CONFIG_EHEA=m
+
+##
+## file: drivers/net/ethernet/pasemi/Kconfig
+##
+CONFIG_PASEMI_MAC=m
+
+##
+## file: drivers/net/ethernet/toshiba/Kconfig
+##
+CONFIG_GELIC_NET=m
+CONFIG_GELIC_WIRELESS=y
+CONFIG_SPIDER_NET=m
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_PS3=m
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_PS3=y
+CONFIG_FB_PS3_DEFAULT_SIZE_M=9
+
+##
+## file: init/Kconfig
+##
+CONFIG_SYSFS_SYSCALL=y
+
+##
+## file: sound/ppc/Kconfig
+##
+CONFIG_SND_PS3=m
+CONFIG_SND_PS3_DEFAULT_START_DELAY=2000
diff --git a/debian/config/kernelarch-powerpc/config-arch-64-le b/debian/config/kernelarch-powerpc/config-arch-64-le
new file mode 100644
index 000000000000..6abccc58e802
--- /dev/null
+++ b/debian/config/kernelarch-powerpc/config-arch-64-le
@@ -0,0 +1,35 @@
+##
+## file: arch/powerpc/platforms/Kconfig.cputype
+##
+## choice: Endianness selection
+# CONFIG_CPU_BIG_ENDIAN is not set
+CONFIG_CPU_LITTLE_ENDIAN=y
+## end choice
+
+##
+## file: arch/powerpc/platforms/powermac/Kconfig
+##
+#. This needs to be explicitly disabled currently (3.15)
+# CONFIG_PPC_PMAC is not set
+
+##
+## file: drivers/cpufreq/Kconfig
+##
+## choice: Default CPUFreq governor
+# CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE is not set
+# CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE is not set
+# CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE is not set
+CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND=y
+# CONFIG_CPU_FREQ_DEFAULT_GOV_CONSERVATIVE is not set
+## end choice
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+# CONFIG_PCMCIA is not set
+
+##
+## file: kernel/power/Kconfig
+##
+#. See #789070
+# CONFIG_HIBERNATION is not set
diff --git a/debian/config/kernelarch-sparc/config b/debian/config/kernelarch-sparc/config
new file mode 100644
index 000000000000..022d612e8e9c
--- /dev/null
+++ b/debian/config/kernelarch-sparc/config
@@ -0,0 +1,604 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_SECCOMP=y
+
+##
+## file: arch/sparc/Kconfig
+##
+CONFIG_64BIT=y
+# CONFIG_CMDLINE_BOOL is not set
+CONFIG_SUN_LDOMS=y
+CONFIG_SUN_OPENPROMFS=m
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_SUN_PARTITION=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_CRC32C_SPARC64=m
+CONFIG_CRYPTO_MD5_SPARC64=m
+CONFIG_CRYPTO_SHA1_SPARC64=m
+CONFIG_CRYPTO_SHA256_SPARC64=m
+CONFIG_CRYPTO_SHA512_SPARC64=m
+CONFIG_CRYPTO_AES_SPARC64=m
+CONFIG_CRYPTO_CAMELLIA_SPARC64=m
+CONFIG_CRYPTO_DES_SPARC64=m
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_ALI=m
+CONFIG_PATA_CS5520=m
+CONFIG_PATA_NETCELL=m
+CONFIG_PATA_NS87415=m
+CONFIG_PATA_PDC2027X=m
+CONFIG_PATA_PDC_OLD=m
+CONFIG_PATA_SERVERWORKS=m
+CONFIG_PATA_SIL680=m
+CONFIG_PATA_VIA=m
+CONFIG_PATA_NS87410=m
+CONFIG_PATA_LEGACY=m
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_BLK_DEV_FD=y
+CONFIG_BLK_DEV_SX8=m
+CONFIG_CDROM_PKTCDVD=m
+CONFIG_CDROM_PKTCDVD_BUFFERS=8
+# CONFIG_CDROM_PKTCDVD_WCACHE is not set
+CONFIG_SUNVDC=m
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_PRINTER=m
+# CONFIG_LP_CONSOLE is not set
+# CONFIG_PPDEV is not set
+# CONFIG_DTLK is not set
+# CONFIG_APPLICOM is not set
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+# CONFIG_IPMI_HANDLER is not set
+
+##
+## file: drivers/crypto/Kconfig
+##
+CONFIG_CRYPTO_DEV_NIAGARA2=m
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+CONFIG_DRM_RADEON=m
+
+##
+## file: drivers/gpu/drm/i2c/Kconfig
+##
+CONFIG_DRM_I2C_CH7006=m
+CONFIG_DRM_I2C_SIL164=m
+
+##
+## file: drivers/gpu/drm/nouveau/Kconfig
+##
+CONFIG_DRM_NOUVEAU=m
+# CONFIG_DRM_NOUVEAU_BACKLIGHT is not set
+
+##
+## file: drivers/hid/usbhid/Kconfig
+##
+CONFIG_USB_HID=y
+
+##
+## file: drivers/hwmon/Kconfig
+##
+# CONFIG_SENSORS_ADM1021 is not set
+# CONFIG_SENSORS_ADM1025 is not set
+# CONFIG_SENSORS_ADM1026 is not set
+# CONFIG_SENSORS_ADM1031 is not set
+# CONFIG_SENSORS_ASB100 is not set
+# CONFIG_SENSORS_DS1621 is not set
+# CONFIG_SENSORS_F71805F is not set
+# CONFIG_SENSORS_GL518SM is not set
+# CONFIG_SENSORS_GL520SM is not set
+# CONFIG_SENSORS_MAX1619 is not set
+# CONFIG_SENSORS_LM63 is not set
+# CONFIG_SENSORS_LM75 is not set
+# CONFIG_SENSORS_LM77 is not set
+# CONFIG_SENSORS_LM78 is not set
+# CONFIG_SENSORS_LM80 is not set
+# CONFIG_SENSORS_LM83 is not set
+# CONFIG_SENSORS_LM85 is not set
+# CONFIG_SENSORS_LM87 is not set
+# CONFIG_SENSORS_LM90 is not set
+# CONFIG_SENSORS_LM92 is not set
+# CONFIG_SENSORS_PC87360 is not set
+# CONFIG_SENSORS_PCF8591 is not set
+# CONFIG_SENSORS_SIS5595 is not set
+# CONFIG_SENSORS_SMSC47M1 is not set
+# CONFIG_SENSORS_SMSC47B397 is not set
+# CONFIG_SENSORS_VIA686A is not set
+# CONFIG_SENSORS_W83781D is not set
+# CONFIG_SENSORS_W83L785TS is not set
+# CONFIG_SENSORS_W83627HF is not set
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=m
+# CONFIG_I2C_STUB is not set
+# CONFIG_I2C_DEBUG_CORE is not set
+# CONFIG_I2C_DEBUG_ALGO is not set
+# CONFIG_I2C_DEBUG_BUS is not set
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+# CONFIG_I2C_ALI1535 is not set
+# CONFIG_I2C_ALI1563 is not set
+# CONFIG_I2C_ALI15X3 is not set
+# CONFIG_I2C_AMD756 is not set
+# CONFIG_I2C_AMD8111 is not set
+# CONFIG_I2C_I801 is not set
+# CONFIG_I2C_PIIX4 is not set
+# CONFIG_I2C_NFORCE2 is not set
+# CONFIG_I2C_SIS5595 is not set
+# CONFIG_I2C_SIS630 is not set
+# CONFIG_I2C_SIS96X is not set
+# CONFIG_I2C_VIA is not set
+# CONFIG_I2C_VIAPRO is not set
+CONFIG_I2C_PARPORT=m
+# CONFIG_I2C_PCA_ISA is not set
+
+##
+## file: drivers/input/Kconfig
+##
+# CONFIG_INPUT_JOYDEV is not set
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+# CONFIG_GAMEPORT is not set
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+# CONFIG_INPUT_JOYSTICK is not set
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+CONFIG_KEYBOARD_ATKBD=y
+CONFIG_KEYBOARD_LKKBD=m
+# CONFIG_KEYBOARD_NEWTON is not set
+CONFIG_KEYBOARD_SUNKBD=y
+# CONFIG_KEYBOARD_XTKBD is not set
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MISC=y
+CONFIG_INPUT_SPARCSPKR=m
+# CONFIG_INPUT_UINPUT is not set
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_INPUT_MOUSE=y
+CONFIG_MOUSE_PS2=y
+CONFIG_MOUSE_SERIAL=y
+# CONFIG_MOUSE_VSXXXAA is not set
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO=y
+CONFIG_SERIO_I8042=y
+# CONFIG_SERIO_SERPORT is not set
+# CONFIG_SERIO_PARKBD is not set
+# CONFIG_SERIO_PCIPS2 is not set
+CONFIG_SERIO_LIBPS2=y
+# CONFIG_SERIO_RAW is not set
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+# CONFIG_INPUT_TOUCHSCREEN is not set
+
+##
+## file: drivers/media/pci/cx88/Kconfig
+##
+# CONFIG_VIDEO_CX88 is not set
+
+##
+## file: drivers/media/pci/saa7146/Kconfig
+##
+# CONFIG_VIDEO_HEXIUM_GEMINI is not set
+# CONFIG_VIDEO_HEXIUM_ORION is not set
+# CONFIG_VIDEO_MXB is not set
+
+##
+## file: drivers/media/radio/Kconfig
+##
+# CONFIG_USB_DSBR is not set
+# CONFIG_RADIO_MAXIRADIO is not set
+
+##
+## file: drivers/mmc/Kconfig
+##
+# CONFIG_MMC is not set
+
+##
+## file: drivers/mtd/Kconfig
+##
+# CONFIG_MTD is not set
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_NET_FC=y
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+# CONFIG_ARCNET is not set
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+CONFIG_FEALNX=m
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_NET_VENDOR_3COM=y
+CONFIG_VORTEX=m
+CONFIG_TYPHOON=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_NE2K_PCI=m
+
+##
+## file: drivers/net/ethernet/adaptec/Kconfig
+##
+CONFIG_ADAPTEC_STARFIRE=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+# CONFIG_AMD8111_ETH is not set
+CONFIG_SUNLANCE=m
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+CONFIG_B44=m
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_NET_TULIP=y
+# CONFIG_DE2104X is not set
+CONFIG_TULIP=m
+# CONFIG_TULIP_MWI is not set
+# CONFIG_TULIP_MMIO is not set
+CONFIG_WINBOND_840=m
+CONFIG_DM9102=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_SUNDANCE=m
+CONFIG_SUNDANCE_MMIO=y
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NATSEMI=m
+
+##
+## file: drivers/net/ethernet/nvidia/Kconfig
+##
+# CONFIG_FORCEDETH is not set
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+# CONFIG_8139CP is not set
+CONFIG_8139TOO=m
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+CONFIG_SIS900=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_EPIC100=m
+
+##
+## file: drivers/net/ethernet/sun/Kconfig
+##
+CONFIG_HAPPYMEAL=m
+CONFIG_SUNBMAC=m
+CONFIG_SUNQE=m
+CONFIG_SUNGEM=m
+CONFIG_SUNVNET=m
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+CONFIG_VIA_RHINE=m
+# CONFIG_VIA_RHINE_MMIO is not set
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+CONFIG_FDDI=y
+CONFIG_SKFP=m
+
+##
+## file: drivers/net/hippi/Kconfig
+##
+# CONFIG_HIPPI is not set
+
+##
+## file: drivers/net/plip/Kconfig
+##
+CONFIG_PLIP=m
+
+##
+## file: drivers/net/wan/Kconfig
+##
+# CONFIG_WAN is not set
+
+##
+## file: drivers/net/wireless/marvell/mwifiex/Kconfig
+##
+CONFIG_MWIFIEX=m
+CONFIG_MWIFIEX_PCIE=m
+
+##
+## file: drivers/parport/Kconfig
+##
+CONFIG_PARPORT_SUNBPP=m
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+
+##
+## file: drivers/sbus/char/Kconfig
+##
+CONFIG_SUN_OPENPROMIO=y
+CONFIG_OBP_FLASH=m
+CONFIG_BBC_I2C=m
+CONFIG_ENVCTRL=m
+CONFIG_DISPLAY7SEG=m
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_ARCMSR=m
+# CONFIG_SCSI_MYRB is not set
+# CONFIG_SCSI_MYRS is not set
+CONFIG_SCSI_DMX3191D=m
+# CONFIG_SCSI_IPS is not set
+CONFIG_SCSI_INITIO=m
+# CONFIG_SCSI_INIA100 is not set
+CONFIG_SCSI_SYM53C8XX_DMA_ADDRESSING_MODE=1
+CONFIG_SCSI_SYM53C8XX_DEFAULT_TAGS=16
+CONFIG_SCSI_SYM53C8XX_MAX_TAGS=64
+CONFIG_SCSI_IPR=m
+# CONFIG_SCSI_IPR_TRACE is not set
+# CONFIG_SCSI_IPR_DUMP is not set
+CONFIG_SCSI_QLOGIC_1280=m
+CONFIG_SCSI_QLOGICPTI=m
+CONFIG_SCSI_DC395x=m
+CONFIG_SCSI_SUNESP=m
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+CONFIG_MEGARAID_NEWGEN=y
+CONFIG_MEGARAID_MM=m
+CONFIG_MEGARAID_MAILBOX=m
+CONFIG_MEGARAID_LEGACY=m
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_VT=y
+CONFIG_VT_CONSOLE=y
+# CONFIG_SERIAL_NONSTANDARD is not set
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_SUNZILOG=y
+CONFIG_SERIAL_SUNZILOG_CONSOLE=y
+CONFIG_SERIAL_SUNSU=y
+CONFIG_SERIAL_SUNSU_CONSOLE=y
+CONFIG_SERIAL_SUNSAB=y
+CONFIG_SERIAL_SUNSAB_CONSOLE=y
+CONFIG_SERIAL_SUNHV=y
+CONFIG_SERIAL_JSM=m
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=m
+# CONFIG_USB_USS720 is not set
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_OHCI_HCD=m
+CONFIG_USB_UHCI_HCD=m
+# CONFIG_USB_SL811_HCD is not set
+
+##
+## file: drivers/video/backlight/Kconfig
+##
+# CONFIG_LCD_CLASS_DEVICE is not set
+# CONFIG_BACKLIGHT_CLASS_DEVICE is not set
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_MODE_HELPERS=y
+# CONFIG_FB_TILEBLITTING is not set
+# CONFIG_FB_CIRRUS is not set
+CONFIG_FB_PM2=y
+# CONFIG_FB_PM2_FIFO_DISCONNECT is not set
+# CONFIG_FB_ASILIANT is not set
+# CONFIG_FB_IMSTT is not set
+CONFIG_FB_SBUS=y
+# CONFIG_FB_BW2 is not set
+# CONFIG_FB_CG3 is not set
+CONFIG_FB_CG6=y
+CONFIG_FB_FFB=y
+# CONFIG_FB_TCX is not set
+# CONFIG_FB_CG14 is not set
+# CONFIG_FB_P9100 is not set
+# CONFIG_FB_LEO is not set
+CONFIG_FB_XVR500=y
+CONFIG_FB_XVR2500=y
+CONFIG_FB_XVR1000=y
+# CONFIG_FB_S1D13XXX is not set
+# CONFIG_FB_MATROX is not set
+CONFIG_FB_RADEON=y
+# CONFIG_FB_RADEON_I2C is not set
+# CONFIG_FB_RADEON_DEBUG is not set
+CONFIG_FB_ATY128=y
+CONFIG_FB_ATY=y
+CONFIG_FB_ATY_CT=y
+# CONFIG_FB_ATY_GENERIC_LCD is not set
+CONFIG_FB_ATY_GX=y
+# CONFIG_FB_SAVAGE is not set
+# CONFIG_FB_SIS is not set
+# CONFIG_FB_NEOMAGIC is not set
+# CONFIG_FB_KYRO is not set
+# CONFIG_FB_3DFX is not set
+# CONFIG_FB_VOODOO1 is not set
+# CONFIG_FB_TRIDENT is not set
+# CONFIG_FB_VIRTUAL is not set
+
+##
+## file: drivers/w1/Kconfig
+##
+# CONFIG_W1 is not set
+
+##
+## file: init/Kconfig
+##
+CONFIG_SGETMASK_SYSCALL=y
+CONFIG_SYSFS_SYSCALL=y
+
+##
+## file: lib/xz/Kconfig
+##
+CONFIG_XZ_DEC_SPARC=y
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+# CONFIG_FLATMEM_MANUAL is not set
+CONFIG_SPARSEMEM_MANUAL=y
+## end choice
+
+##
+## file: net/ax25/Kconfig
+##
+# CONFIG_HAMRADIO is not set
+
+##
+## file: net/decnet/Kconfig
+##
+CONFIG_DECNET=m
+CONFIG_DECNET_ROUTER=y
+
+##
+## file: net/lapb/Kconfig
+##
+# CONFIG_LAPB is not set
+
+##
+## file: sound/drivers/Kconfig
+##
+# CONFIG_SND_DUMMY is not set
+CONFIG_SND_VIRMIDI=m
+# CONFIG_SND_MTPAV is not set
+# CONFIG_SND_SERIAL_U16550 is not set
+# CONFIG_SND_MPU401 is not set
+
+##
+## file: sound/pci/Kconfig
+##
+CONFIG_SND_ALI5451=m
+# CONFIG_SND_ATIIXP is not set
+# CONFIG_SND_ATIIXP_MODEM is not set
+# CONFIG_SND_AU8810 is not set
+# CONFIG_SND_AU8820 is not set
+# CONFIG_SND_AU8830 is not set
+# CONFIG_SND_AZT3328 is not set
+# CONFIG_SND_BT87X is not set
+# CONFIG_SND_CA0106 is not set
+CONFIG_SND_CMIPCI=m
+# CONFIG_SND_CS4281 is not set
+# CONFIG_SND_CS46XX is not set
+CONFIG_SND_EMU10K1=m
+# CONFIG_SND_EMU10K1X is not set
+CONFIG_SND_ENS1370=m
+CONFIG_SND_ENS1371=m
+# CONFIG_SND_ES1938 is not set
+# CONFIG_SND_ES1968 is not set
+# CONFIG_SND_FM801 is not set
+# CONFIG_SND_HDSP is not set
+# CONFIG_SND_ICE1712 is not set
+# CONFIG_SND_ICE1724 is not set
+# CONFIG_SND_INTEL8X0 is not set
+# CONFIG_SND_INTEL8X0M is not set
+# CONFIG_SND_KORG1212 is not set
+CONFIG_SND_MAESTRO3=m
+# CONFIG_SND_MIXART is not set
+# CONFIG_SND_NM256 is not set
+# CONFIG_SND_RME32 is not set
+# CONFIG_SND_RME96 is not set
+# CONFIG_SND_RME9652 is not set
+# CONFIG_SND_SONICVIBES is not set
+# CONFIG_SND_TRIDENT is not set
+# CONFIG_SND_VIA82XX is not set
+# CONFIG_SND_VIA82XX_MODEM is not set
+# CONFIG_SND_VX222 is not set
+# CONFIG_SND_YMFPCI is not set
+
+##
+## file: sound/pci/hda/Kconfig
+##
+# CONFIG_SND_HDA_INTEL is not set
+
+##
+## file: sound/sparc/Kconfig
+##
+CONFIG_SND_SUN_AMD7930=m
+CONFIG_SND_SUN_CS4231=m
+CONFIG_SND_SUN_DBRI=m
diff --git a/debian/config/kernelarch-sparc/config-smp b/debian/config/kernelarch-sparc/config-smp
new file mode 100644
index 000000000000..323cbd074e4e
--- /dev/null
+++ b/debian/config/kernelarch-sparc/config-smp
@@ -0,0 +1,6 @@
+##
+## file: arch/sparc/Kconfig
+##
+CONFIG_SMP=y
+CONFIG_NR_CPUS=256
+CONFIG_SCHED_SMT=y
diff --git a/debian/config/kernelarch-sparc/config-up b/debian/config/kernelarch-sparc/config-up
new file mode 100644
index 000000000000..4ddea70541b9
--- /dev/null
+++ b/debian/config/kernelarch-sparc/config-up
@@ -0,0 +1,4 @@
+##
+## file: arch/sparc/Kconfig
+##
+# CONFIG_SMP is not set
diff --git a/debian/config/kernelarch-x86/config b/debian/config/kernelarch-x86/config
new file mode 100644
index 000000000000..ce56111a2624
--- /dev/null
+++ b/debian/config/kernelarch-x86/config
@@ -0,0 +1,2132 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_SECCOMP=y
+# CONFIG_LOCK_EVENT_COUNTS is not set
+
+##
+## file: arch/x86/Kconfig
+##
+CONFIG_X86_MPPARSE=y
+CONFIG_RETPOLINE=y
+CONFIG_X86_CPU_RESCTRL=y
+# CONFIG_X86_EXTENDED_PLATFORM is not set
+CONFIG_X86_INTEL_LPSS=y
+CONFIG_X86_AMD_PLATFORM_DEVICE=y
+CONFIG_IOSF_MBI=m
+# CONFIG_IOSF_MBI_DEBUG is not set
+CONFIG_SCHED_OMIT_FRAME_POINTER=y
+CONFIG_HYPERVISOR_GUEST=y
+CONFIG_PARAVIRT=y
+# CONFIG_PARAVIRT_DEBUG is not set
+CONFIG_PARAVIRT_SPINLOCKS=y
+CONFIG_KVM_GUEST=y
+# CONFIG_PARAVIRT_TIME_ACCOUNTING is not set
+# CONFIG_JAILHOUSE_GUEST is not set
+CONFIG_HPET_TIMER=y
+CONFIG_DMI=y
+CONFIG_GART_IOMMU=y
+CONFIG_SCHED_MC=y
+CONFIG_SCHED_MC_PRIO=y
+CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y
+CONFIG_X86_MCE=y
+# CONFIG_X86_MCELOG_LEGACY is not set
+CONFIG_X86_MCE_INTEL=y
+CONFIG_X86_MCE_AMD=y
+# CONFIG_X86_ANCIENT_MCE is not set
+CONFIG_X86_MCE_INJECT=m
+CONFIG_X86_16BIT=y
+CONFIG_I8K=m
+CONFIG_MICROCODE=y
+CONFIG_MICROCODE_INTEL=y
+CONFIG_MICROCODE_AMD=y
+CONFIG_X86_MSR=m
+CONFIG_X86_CPUID=m
+CONFIG_AMD_MEM_ENCRYPT=y
+CONFIG_NODES_SHIFT=6
+# CONFIG_ARCH_MEMORY_PROBE is not set
+CONFIG_X86_PMEM_LEGACY=m
+# CONFIG_X86_CHECK_BIOS_CORRUPTION is not set
+CONFIG_MTRR=y
+CONFIG_MTRR_SANITIZER=y
+CONFIG_MTRR_SANITIZER_ENABLE_DEFAULT=0
+CONFIG_MTRR_SANITIZER_SPARE_REG_NR_DEFAULT=1
+CONFIG_X86_PAT=y
+CONFIG_ARCH_RANDOM=y
+CONFIG_X86_SMAP=y
+CONFIG_X86_UMIP=y
+CONFIG_EFI=y
+CONFIG_EFI_STUB=y
+CONFIG_KEXEC=y
+CONFIG_CRASH_DUMP=y
+# CONFIG_KEXEC_JUMP is not set
+CONFIG_RELOCATABLE=y
+CONFIG_RANDOMIZE_BASE=y
+# CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
+# CONFIG_DEBUG_HOTPLUG_CPU0 is not set
+# CONFIG_COMPAT_VDSO is not set
+# CONFIG_CMDLINE_BOOL is not set
+CONFIG_MODIFY_LDT_SYSCALL=y
+# CONFIG_PCI_CNB20LE_QUIRK is not set
+# CONFIG_ISA_BUS is not set
+CONFIG_IA32_EMULATION=y
+
+##
+## file: arch/x86/Kconfig.cpu
+##
+# CONFIG_PROCESSOR_SELECT is not set
+
+##
+## file: arch/x86/Kconfig.debug
+##
+# CONFIG_X86_VERBOSE_BOOTUP is not set
+CONFIG_EARLY_PRINTK=y
+# CONFIG_EARLY_PRINTK_DBGP is not set
+# CONFIG_EFI_PGT_DUMP is not set
+# CONFIG_DEBUG_TLBFLUSH is not set
+# CONFIG_IOMMU_DEBUG is not set
+# CONFIG_X86_DECODER_SELFTEST is not set
+## choice: IO delay type
+CONFIG_IO_DELAY_0X80=y
+# CONFIG_IO_DELAY_0XED is not set
+# CONFIG_IO_DELAY_UDELAY is not set
+# CONFIG_IO_DELAY_NONE is not set
+## end choice
+# CONFIG_DEBUG_BOOT_PARAMS is not set
+# CONFIG_CPA_DEBUG is not set
+# CONFIG_DEBUG_ENTRY is not set
+# CONFIG_DEBUG_NMI_SELFTEST is not set
+# CONFIG_PUNIT_ATOM_DEBUG is not set
+
+##
+## file: arch/x86/events/Kconfig
+##
+CONFIG_PERF_EVENTS_INTEL_UNCORE=m
+CONFIG_PERF_EVENTS_INTEL_RAPL=m
+CONFIG_PERF_EVENTS_INTEL_CSTATE=m
+CONFIG_PERF_EVENTS_AMD_POWER=m
+
+##
+## file: arch/x86/kvm/Kconfig
+##
+CONFIG_VIRTUALIZATION=y
+CONFIG_KVM=m
+CONFIG_KVM_INTEL=m
+CONFIG_KVM_AMD=m
+CONFIG_KVM_AMD_SEV=y
+# CONFIG_KVM_MMU_AUDIT is not set
+
+##
+## file: arch/x86/xen/Kconfig
+##
+CONFIG_XEN=y
+CONFIG_XEN_PV=y
+CONFIG_XEN_PVHVM_GUEST=y
+# CONFIG_XEN_DEBUG_FS is not set
+CONFIG_XEN_PVH=y
+CONFIG_XEN_DOM0=y
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_ACORN_PARTITION=y
+# CONFIG_ACORN_PARTITION_CUMANA is not set
+# CONFIG_ACORN_PARTITION_EESOX is not set
+CONFIG_ACORN_PARTITION_ICS=y
+# CONFIG_ACORN_PARTITION_ADFS is not set
+# CONFIG_ACORN_PARTITION_POWERTEC is not set
+CONFIG_ACORN_PARTITION_RISCIX=y
+CONFIG_OSF_PARTITION=y
+CONFIG_AMIGA_PARTITION=y
+CONFIG_ATARI_PARTITION=y
+CONFIG_MAC_PARTITION=y
+CONFIG_BSD_DISKLABEL=y
+CONFIG_MINIX_SUBPARTITION=y
+CONFIG_SOLARIS_X86_PARTITION=y
+CONFIG_UNIXWARE_DISKLABEL=y
+CONFIG_LDM_PARTITION=y
+# CONFIG_LDM_DEBUG is not set
+CONFIG_SGI_PARTITION=y
+CONFIG_ULTRIX_PARTITION=y
+CONFIG_SUN_PARTITION=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_CRC32C_INTEL=m
+CONFIG_CRYPTO_CRC32_PCLMUL=m
+CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL=m
+CONFIG_CRYPTO_AES_NI_INTEL=m
+
+##
+## file: drivers/acpi/Kconfig
+##
+CONFIG_ACPI=y
+CONFIG_ACPI_SPCR_TABLE=y
+CONFIG_ACPI_REV_OVERRIDE_POSSIBLE=y
+# CONFIG_ACPI_EC_DEBUGFS is not set
+CONFIG_ACPI_AC=m
+CONFIG_ACPI_BATTERY=m
+CONFIG_ACPI_BUTTON=m
+CONFIG_ACPI_VIDEO=m
+CONFIG_ACPI_FAN=m
+CONFIG_ACPI_DOCK=y
+CONFIG_ACPI_PROCESSOR=m
+CONFIG_ACPI_IPMI=m
+CONFIG_ACPI_PROCESSOR_AGGREGATOR=m
+CONFIG_ACPI_THERMAL=y
+# CONFIG_ACPI_DEBUG is not set
+CONFIG_ACPI_PCI_SLOT=y
+CONFIG_ACPI_CONTAINER=y
+CONFIG_ACPI_HOTPLUG_MEMORY=y
+CONFIG_ACPI_SBS=m
+CONFIG_ACPI_HED=m
+# CONFIG_ACPI_CUSTOM_METHOD is not set
+CONFIG_ACPI_EXTLOG=y
+CONFIG_X86_PM_TIMER=y
+
+##
+## file: drivers/acpi/apei/Kconfig
+##
+CONFIG_ACPI_APEI=y
+CONFIG_ACPI_APEI_GHES=y
+CONFIG_ACPI_APEI_PCIEAER=y
+CONFIG_ACPI_APEI_MEMORY_FAILURE=y
+# CONFIG_ACPI_APEI_EINJ is not set
+# CONFIG_ACPI_APEI_ERST_DEBUG is not set
+
+##
+## file: drivers/acpi/dptf/Kconfig
+##
+CONFIG_DPTF_POWER=m
+
+##
+## file: drivers/acpi/pmic/Kconfig
+##
+CONFIG_PMIC_OPREGION=y
+CONFIG_BYTCRC_PMIC_OPREGION=y
+CONFIG_CHTCRC_PMIC_OPREGION=y
+CONFIG_XPOWER_PMIC_OPREGION=y
+CONFIG_BXT_WC_PMIC_OPREGION=y
+CONFIG_CHT_WC_PMIC_OPREGION=y
+CONFIG_CHT_DC_TI_PMIC_OPREGION=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_ALI=m
+CONFIG_PATA_AMD=m
+CONFIG_PATA_ATIIXP=m
+CONFIG_PATA_CMD64X=m
+CONFIG_PATA_EFAR=m
+CONFIG_PATA_HPT366=m
+CONFIG_PATA_HPT37X=m
+CONFIG_PATA_NETCELL=m
+CONFIG_PATA_NS87415=m
+CONFIG_PATA_OLDPIIX=m
+CONFIG_PATA_PDC2027X=m
+CONFIG_PATA_PDC_OLD=m
+CONFIG_PATA_SERVERWORKS=m
+CONFIG_PATA_SIL680=m
+CONFIG_PATA_TRIFLEX=m
+CONFIG_PATA_VIA=m
+CONFIG_PATA_MPIIX=m
+CONFIG_PATA_NS87410=m
+CONFIG_PATA_PCMCIA=m
+CONFIG_PATA_RZ1000=m
+
+##
+## file: drivers/atm/Kconfig
+##
+CONFIG_ATM_DRIVERS=y
+CONFIG_ATM_TCP=m
+CONFIG_ATM_LANAI=m
+CONFIG_ATM_ENI=m
+# CONFIG_ATM_ENI_DEBUG is not set
+# CONFIG_ATM_ENI_TUNE_BURST is not set
+CONFIG_ATM_FIRESTREAM=m
+CONFIG_ATM_ZATM=m
+# CONFIG_ATM_ZATM_DEBUG is not set
+CONFIG_ATM_IDT77252=m
+# CONFIG_ATM_IDT77252_DEBUG is not set
+# CONFIG_ATM_IDT77252_RCV_ALL is not set
+CONFIG_ATM_AMBASSADOR=m
+# CONFIG_ATM_AMBASSADOR_DEBUG is not set
+CONFIG_ATM_HORIZON=m
+# CONFIG_ATM_HORIZON_DEBUG is not set
+# CONFIG_ATM_FORE200E_USE_TASKLET is not set
+CONFIG_ATM_FORE200E_TX_RETRY=16
+CONFIG_ATM_FORE200E_DEBUG=0
+CONFIG_ATM_HE=m
+CONFIG_ATM_HE_USE_SUNI=y
+
+##
+## file: drivers/auxdisplay/Kconfig
+##
+CONFIG_KS0108=m
+CONFIG_KS0108_PORT=0x378
+CONFIG_KS0108_DELAY=2
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_BLK_DEV_FD=m
+CONFIG_BLK_DEV_SX8=m
+CONFIG_CDROM_PKTCDVD=m
+CONFIG_CDROM_PKTCDVD_BUFFERS=8
+# CONFIG_CDROM_PKTCDVD_WCACHE is not set
+
+##
+## file: drivers/bluetooth/Kconfig
+##
+CONFIG_BT_HCIUART=m
+CONFIG_BT_HCIUART_H4=y
+CONFIG_BT_HCIUART_BCSP=y
+CONFIG_BT_HCIBCM203X=m
+CONFIG_BT_HCIBPA10X=m
+CONFIG_BT_HCIBFUSB=m
+CONFIG_BT_HCIDTL1=m
+CONFIG_BT_HCIBT3C=m
+CONFIG_BT_HCIBLUECARD=m
+CONFIG_BT_HCIVHCI=m
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_PRINTER=m
+# CONFIG_LP_CONSOLE is not set
+CONFIG_PPDEV=m
+CONFIG_DTLK=m
+CONFIG_APPLICOM=m
+CONFIG_MWAVE=m
+CONFIG_NVRAM=m
+CONFIG_HPET=y
+CONFIG_HPET_MMAP=y
+CONFIG_HPET_MMAP_DEFAULT=y
+
+##
+## file: drivers/char/agp/Kconfig
+##
+#. Workaround
+CONFIG_AGP=y
+#. Workaround
+CONFIG_AGP_AMD64=y
+#. Workaround
+CONFIG_AGP_INTEL=y
+#. Workaround
+CONFIG_AGP_SIS=y
+#. Workaround
+CONFIG_AGP_VIA=y
+
+##
+## file: drivers/char/hw_random/Kconfig
+##
+CONFIG_HW_RANDOM_INTEL=m
+CONFIG_HW_RANDOM_AMD=m
+CONFIG_HW_RANDOM_GEODE=m
+CONFIG_HW_RANDOM_VIA=m
+
+##
+## file: drivers/char/ipmi/Kconfig
+##
+CONFIG_IPMI_HANDLER=m
+# CONFIG_IPMI_PANIC_EVENT is not set
+CONFIG_IPMI_DEVICE_INTERFACE=m
+CONFIG_IPMI_SI=m
+CONFIG_IPMI_WATCHDOG=m
+CONFIG_IPMI_POWEROFF=m
+
+##
+## file: drivers/char/tpm/Kconfig
+##
+CONFIG_TCG_TPM=m
+CONFIG_TCG_TIS=m
+CONFIG_TCG_TIS_I2C_ATMEL=m
+CONFIG_TCG_TIS_I2C_INFINEON=m
+CONFIG_TCG_TIS_I2C_NUVOTON=m
+CONFIG_TCG_NSC=m
+CONFIG_TCG_ATMEL=m
+CONFIG_TCG_INFINEON=m
+CONFIG_TCG_XEN=m
+CONFIG_TCG_CRB=m
+
+##
+## file: drivers/char/tpm/st33zp24/Kconfig
+##
+CONFIG_TCG_TIS_ST33ZP24_I2C=m
+
+##
+## file: drivers/comedi/Kconfig
+##
+CONFIG_COMEDI=m
+# CONFIG_COMEDI_DEBUG is not set
+CONFIG_COMEDI_DEFAULT_BUF_SIZE_KB=2048
+CONFIG_COMEDI_DEFAULT_BUF_MAXSIZE_KB=20480
+CONFIG_COMEDI_MISC_DRIVERS=y
+CONFIG_COMEDI_BOND=m
+CONFIG_COMEDI_TEST=m
+CONFIG_COMEDI_PARPORT=m
+CONFIG_COMEDI_SSV_DNP=m
+# CONFIG_COMEDI_ISA_DRIVERS is not set
+CONFIG_COMEDI_II_PCI20KC=m
+CONFIG_COMEDI_S526=m
+CONFIG_COMEDI_PCI_DRIVERS=y
+CONFIG_COMEDI_8255_PCI=m
+CONFIG_COMEDI_ADDI_APCI_1032=m
+CONFIG_COMEDI_ADDI_APCI_1500=m
+CONFIG_COMEDI_ADDI_APCI_1516=m
+CONFIG_COMEDI_ADDI_APCI_1564=m
+CONFIG_COMEDI_ADDI_APCI_16XX=m
+CONFIG_COMEDI_ADDI_APCI_2032=m
+CONFIG_COMEDI_ADDI_APCI_2200=m
+CONFIG_COMEDI_ADDI_APCI_3120=m
+CONFIG_COMEDI_ADDI_APCI_3501=m
+CONFIG_COMEDI_ADDI_APCI_3XXX=m
+CONFIG_COMEDI_ADL_PCI6208=m
+CONFIG_COMEDI_ADL_PCI7X3X=m
+CONFIG_COMEDI_ADL_PCI8164=m
+CONFIG_COMEDI_ADL_PCI9111=m
+CONFIG_COMEDI_ADL_PCI9118=m
+CONFIG_COMEDI_ADV_PCI1710=m
+CONFIG_COMEDI_ADV_PCI1720=m
+CONFIG_COMEDI_ADV_PCI1723=m
+CONFIG_COMEDI_ADV_PCI1724=m
+CONFIG_COMEDI_ADV_PCI1760=m
+CONFIG_COMEDI_ADV_PCI_DIO=m
+CONFIG_COMEDI_AMPLC_DIO200_PCI=m
+CONFIG_COMEDI_AMPLC_PC236_PCI=m
+CONFIG_COMEDI_AMPLC_PC263_PCI=m
+CONFIG_COMEDI_AMPLC_PCI224=m
+CONFIG_COMEDI_AMPLC_PCI230=m
+CONFIG_COMEDI_CONTEC_PCI_DIO=m
+CONFIG_COMEDI_DAS08_PCI=m
+CONFIG_COMEDI_DT3000=m
+CONFIG_COMEDI_DYNA_PCI10XX=m
+CONFIG_COMEDI_GSC_HPDI=m
+CONFIG_COMEDI_MF6X4=m
+CONFIG_COMEDI_ICP_MULTI=m
+CONFIG_COMEDI_DAQBOARD2000=m
+CONFIG_COMEDI_JR3_PCI=m
+CONFIG_COMEDI_KE_COUNTER=m
+CONFIG_COMEDI_CB_PCIDAS64=m
+CONFIG_COMEDI_CB_PCIDAS=m
+CONFIG_COMEDI_CB_PCIDDA=m
+CONFIG_COMEDI_CB_PCIMDAS=m
+CONFIG_COMEDI_CB_PCIMDDA=m
+CONFIG_COMEDI_ME4000=m
+CONFIG_COMEDI_ME_DAQ=m
+CONFIG_COMEDI_NI_6527=m
+CONFIG_COMEDI_NI_65XX=m
+CONFIG_COMEDI_NI_660X=m
+CONFIG_COMEDI_NI_670X=m
+CONFIG_COMEDI_NI_LABPC_PCI=m
+CONFIG_COMEDI_NI_PCIDIO=m
+CONFIG_COMEDI_NI_PCIMIO=m
+CONFIG_COMEDI_RTD520=m
+CONFIG_COMEDI_S626=m
+CONFIG_COMEDI_PCMCIA_DRIVERS=y
+CONFIG_COMEDI_CB_DAS16_CS=m
+CONFIG_COMEDI_DAS08_CS=m
+CONFIG_COMEDI_NI_DAQ_700_CS=m
+CONFIG_COMEDI_NI_DAQ_DIO24_CS=m
+CONFIG_COMEDI_NI_LABPC_CS=m
+CONFIG_COMEDI_NI_MIO_CS=m
+CONFIG_COMEDI_QUATECH_DAQP_CS=m
+CONFIG_COMEDI_USB_DRIVERS=y
+CONFIG_COMEDI_DT9812=m
+CONFIG_COMEDI_NI_USB6501=m
+CONFIG_COMEDI_USBDUX=m
+CONFIG_COMEDI_USBDUXFAST=m
+CONFIG_COMEDI_USBDUXSIGMA=m
+CONFIG_COMEDI_VMK80XX=m
+CONFIG_COMEDI_8255_SA=m
+CONFIG_COMEDI_KCOMEDILIB=m
+
+##
+## file: drivers/cpufreq/Kconfig
+##
+## choice: Default CPUFreq governor
+# CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE is not set
+# CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE is not set
+CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND=y
+# CONFIG_CPU_FREQ_DEFAULT_GOV_CONSERVATIVE is not set
+## end choice
+
+##
+## file: drivers/cpufreq/Kconfig.x86
+##
+CONFIG_X86_INTEL_PSTATE=y
+CONFIG_X86_PCC_CPUFREQ=m
+CONFIG_X86_ACPI_CPUFREQ=m
+CONFIG_X86_ACPI_CPUFREQ_CPB=y
+CONFIG_X86_POWERNOW_K8=m
+CONFIG_X86_AMD_FREQ_SENSITIVITY=m
+CONFIG_X86_SPEEDSTEP_CENTRINO=m
+CONFIG_X86_P4_CLOCKMOD=m
+
+##
+## file: drivers/cpuidle/Kconfig
+##
+CONFIG_CPU_IDLE=y
+
+##
+## file: drivers/crypto/Kconfig
+##
+CONFIG_CRYPTO_DEV_PADLOCK=m
+CONFIG_CRYPTO_DEV_PADLOCK_AES=m
+CONFIG_CRYPTO_DEV_PADLOCK_SHA=m
+CONFIG_CRYPTO_DEV_CCP=y
+
+##
+## file: drivers/crypto/ccp/Kconfig
+##
+CONFIG_CRYPTO_DEV_CCP_DD=m
+CONFIG_CRYPTO_DEV_CCP_CRYPTO=m
+
+##
+## file: drivers/crypto/qat/Kconfig
+##
+CONFIG_CRYPTO_DEV_QAT_DH895xCC=m
+CONFIG_CRYPTO_DEV_QAT_C3XXX=m
+CONFIG_CRYPTO_DEV_QAT_C62X=m
+CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=m
+CONFIG_CRYPTO_DEV_QAT_C3XXXVF=m
+CONFIG_CRYPTO_DEV_QAT_C62XVF=m
+
+##
+## file: drivers/dma/Kconfig
+##
+CONFIG_DMADEVICES=y
+CONFIG_INTEL_IDMA64=m
+CONFIG_INTEL_IOATDMA=m
+
+##
+## file: drivers/dma/dw/Kconfig
+##
+CONFIG_DW_DMAC=m
+
+##
+## file: drivers/edac/Kconfig
+##
+CONFIG_EDAC=y
+# CONFIG_EDAC_DEBUG is not set
+CONFIG_EDAC_DECODE_MCE=m
+CONFIG_EDAC_AMD64=m
+CONFIG_EDAC_AMD76X=m
+CONFIG_EDAC_E7XXX=m
+CONFIG_EDAC_E752X=m
+CONFIG_EDAC_I82875P=m
+CONFIG_EDAC_I82975X=m
+CONFIG_EDAC_I3000=m
+CONFIG_EDAC_I3200=m
+CONFIG_EDAC_IE31200=m
+CONFIG_EDAC_X38=m
+CONFIG_EDAC_I5400=m
+CONFIG_EDAC_I7CORE=m
+CONFIG_EDAC_I82860=m
+CONFIG_EDAC_R82600=m
+CONFIG_EDAC_I5000=m
+CONFIG_EDAC_I5100=m
+CONFIG_EDAC_I7300=m
+CONFIG_EDAC_SKX=m
+CONFIG_EDAC_PND2=m
+CONFIG_EDAC_AMD8131=m
+CONFIG_EDAC_AMD8111=m
+
+##
+## file: drivers/extcon/Kconfig
+##
+CONFIG_EXTCON=m
+CONFIG_EXTCON_INTEL_CHT_WC=m
+
+##
+## file: drivers/firmware/Kconfig
+##
+CONFIG_EDD=m
+# CONFIG_EDD_OFF is not set
+CONFIG_FIRMWARE_MEMMAP=y
+CONFIG_DMIID=y
+CONFIG_ISCSI_IBFT_FIND=y
+CONFIG_ISCSI_IBFT=y
+#. Doesn't support handover; see #822575
+# CONFIG_SYSFB_SIMPLEFB is not set
+
+##
+## file: drivers/firmware/efi/Kconfig
+##
+CONFIG_EFI_RUNTIME_MAP=y
+# CONFIG_EFI_FAKE_MEMMAP is not set
+CONFIG_APPLE_PROPERTIES=y
+
+##
+## file: drivers/firmware/google/Kconfig
+##
+# CONFIG_GOOGLE_FIRMWARE is not set
+
+##
+## file: drivers/gpio/Kconfig
+##
+CONFIG_GPIOLIB=y
+CONFIG_GPIO_AMDPT=m
+# CONFIG_GPIO_ICH is not set
+# CONFIG_GPIO_F7188X is not set
+# CONFIG_GPIO_SCH is not set
+CONFIG_GPIO_KEMPLD=m
+CONFIG_GPIO_ML_IOH=m
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+CONFIG_DRM_DP_CEC=y
+CONFIG_DRM_RADEON=m
+CONFIG_DRM_AMDGPU=m
+
+##
+## file: drivers/gpu/drm/amd/acp/Kconfig
+##
+CONFIG_DRM_AMD_ACP=y
+
+##
+## file: drivers/gpu/drm/amd/amdkfd/Kconfig
+##
+CONFIG_HSA_AMD=y
+
+##
+## file: drivers/gpu/drm/ast/Kconfig
+##
+CONFIG_DRM_AST=m
+
+##
+## file: drivers/gpu/drm/gma500/Kconfig
+##
+CONFIG_DRM_GMA500=m
+
+##
+## file: drivers/gpu/drm/i2c/Kconfig
+##
+CONFIG_DRM_I2C_CH7006=m
+CONFIG_DRM_I2C_SIL164=m
+
+##
+## file: drivers/gpu/drm/i915/Kconfig
+##
+CONFIG_DRM_I915=m
+
+##
+## file: drivers/gpu/drm/mgag200/Kconfig
+##
+CONFIG_DRM_MGAG200=m
+
+##
+## file: drivers/gpu/drm/nouveau/Kconfig
+##
+CONFIG_DRM_NOUVEAU=m
+CONFIG_DRM_NOUVEAU_BACKLIGHT=y
+
+##
+## file: drivers/gpu/drm/vboxvideo/Kconfig
+##
+CONFIG_DRM_VBOXVIDEO=m
+
+##
+## file: drivers/gpu/drm/vmwgfx/Kconfig
+##
+CONFIG_DRM_VMWGFX=m
+CONFIG_DRM_VMWGFX_FBCON=y
+
+##
+## file: drivers/gpu/drm/xen/Kconfig
+##
+CONFIG_DRM_XEN_FRONTEND=m
+
+##
+## file: drivers/gpu/vga/Kconfig
+##
+CONFIG_VGA_ARB_MAX_GPUS=16
+CONFIG_VGA_SWITCHEROO=y
+
+##
+## file: drivers/hid/Kconfig
+##
+CONFIG_HID_APPLEIR=m
+CONFIG_HID_HYPERV_MOUSE=m
+
+##
+## file: drivers/hid/i2c-hid/Kconfig
+##
+CONFIG_I2C_HID_ACPI=m
+CONFIG_I2C_HID_OF=m
+
+##
+## file: drivers/hid/intel-ish-hid/Kconfig
+##
+CONFIG_INTEL_ISH_HID=m
+
+##
+## file: drivers/hid/usbhid/Kconfig
+##
+CONFIG_USB_HID=m
+
+##
+## file: drivers/hv/Kconfig
+##
+CONFIG_HYPERV=m
+CONFIG_HYPERV_UTILS=m
+CONFIG_HYPERV_BALLOON=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_ADM1021=m
+CONFIG_SENSORS_ADM1025=m
+CONFIG_SENSORS_ADM1026=m
+CONFIG_SENSORS_ADM1031=m
+CONFIG_SENSORS_K8TEMP=m
+CONFIG_SENSORS_K10TEMP=m
+CONFIG_SENSORS_FAM15H_POWER=m
+CONFIG_SENSORS_ASB100=m
+CONFIG_SENSORS_CORSAIR_PSU=m
+CONFIG_SENSORS_DS1621=m
+CONFIG_SENSORS_DELL_SMM=m
+CONFIG_SENSORS_F71805F=m
+CONFIG_SENSORS_GL518SM=m
+CONFIG_SENSORS_GL520SM=m
+CONFIG_SENSORS_I5500=m
+CONFIG_SENSORS_IT87=m
+CONFIG_SENSORS_MAX1619=m
+CONFIG_SENSORS_MENF21BMC_HWMON=m
+CONFIG_SENSORS_LM63=m
+CONFIG_SENSORS_LM75=m
+CONFIG_SENSORS_LM77=m
+CONFIG_SENSORS_LM78=m
+CONFIG_SENSORS_LM80=m
+CONFIG_SENSORS_LM83=m
+CONFIG_SENSORS_LM85=m
+CONFIG_SENSORS_LM87=m
+CONFIG_SENSORS_LM90=m
+CONFIG_SENSORS_LM92=m
+CONFIG_SENSORS_PC87360=m
+CONFIG_SENSORS_PCF8591=m
+CONFIG_SENSORS_SIS5595=m
+CONFIG_SENSORS_SMSC47M1=m
+CONFIG_SENSORS_SMSC47B397=m
+CONFIG_SENSORS_SCH5636=m
+CONFIG_SENSORS_VIA686A=m
+CONFIG_SENSORS_W83781D=m
+CONFIG_SENSORS_W83L785TS=m
+CONFIG_SENSORS_W83627HF=m
+CONFIG_SENSORS_ACPI_POWER=m
+
+##
+## file: drivers/hwtracing/intel_th/Kconfig
+##
+CONFIG_INTEL_TH=m
+CONFIG_INTEL_TH_PCI=m
+CONFIG_INTEL_TH_GTH=m
+CONFIG_INTEL_TH_MSU=m
+CONFIG_INTEL_TH_PTI=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=y
+CONFIG_ACPI_I2C_OPREGION=y
+# CONFIG_I2C_DEBUG_CORE is not set
+# CONFIG_I2C_DEBUG_ALGO is not set
+# CONFIG_I2C_DEBUG_BUS is not set
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_ALI1535=m
+CONFIG_I2C_ALI1563=m
+CONFIG_I2C_ALI15X3=m
+CONFIG_I2C_AMD756=m
+CONFIG_I2C_AMD756_S4882=m
+CONFIG_I2C_AMD8111=m
+CONFIG_I2C_AMD_MP2=m
+CONFIG_I2C_I801=m
+CONFIG_I2C_ISMT=m
+CONFIG_I2C_PIIX4=m
+CONFIG_I2C_CHT_WC=m
+CONFIG_I2C_NFORCE2=m
+CONFIG_I2C_SIS5595=m
+CONFIG_I2C_SIS630=m
+CONFIG_I2C_SIS96X=m
+CONFIG_I2C_VIA=m
+CONFIG_I2C_VIAPRO=m
+CONFIG_I2C_SCMI=m
+#. Sony Vaio Duo 13".
+CONFIG_I2C_DESIGNWARE_PLATFORM=y
+CONFIG_I2C_DESIGNWARE_BAYTRAIL=y
+CONFIG_I2C_DESIGNWARE_PCI=m
+CONFIG_I2C_KEMPLD=m
+CONFIG_I2C_PARPORT=m
+CONFIG_I2C_PCA_ISA=m
+CONFIG_SCx200_ACB=m
+
+##
+## file: drivers/idle/Kconfig
+##
+CONFIG_INTEL_IDLE=y
+
+##
+## file: drivers/infiniband/hw/usnic/Kconfig
+##
+CONFIG_INFINIBAND_USNIC=m
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+CONFIG_GAMEPORT=m
+CONFIG_GAMEPORT_NS558=m
+CONFIG_GAMEPORT_L4=m
+CONFIG_GAMEPORT_EMU10K1=m
+CONFIG_GAMEPORT_FM801=m
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+CONFIG_INPUT_JOYSTICK=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+CONFIG_KEYBOARD_APPLESPI=m
+CONFIG_KEYBOARD_ATKBD=y
+CONFIG_KEYBOARD_LKKBD=m
+CONFIG_KEYBOARD_GPIO=m
+CONFIG_KEYBOARD_NEWTON=m
+CONFIG_KEYBOARD_SUNKBD=m
+CONFIG_KEYBOARD_XTKBD=m
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MISC=y
+CONFIG_INPUT_PCSPKR=m
+CONFIG_INPUT_APANEL=m
+CONFIG_INPUT_ATLAS_BTNS=m
+CONFIG_INPUT_UINPUT=m
+CONFIG_INPUT_IDEAPAD_SLIDEBAR=m
+CONFIG_INPUT_SOC_BUTTON_ARRAY=m
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_INPUT_MOUSE=y
+CONFIG_MOUSE_PS2=m
+CONFIG_MOUSE_PS2_VMMOUSE=y
+CONFIG_MOUSE_SERIAL=m
+CONFIG_MOUSE_APPLETOUCH=m
+CONFIG_MOUSE_BCM5974=m
+CONFIG_MOUSE_CYAPA=m
+CONFIG_MOUSE_ELAN_I2C=m
+CONFIG_MOUSE_ELAN_I2C_I2C=y
+CONFIG_MOUSE_ELAN_I2C_SMBUS=y
+CONFIG_MOUSE_VSXXXAA=m
+
+##
+## file: drivers/input/rmi4/Kconfig
+##
+CONFIG_RMI4_CORE=m
+CONFIG_RMI4_SMB=m
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO=y
+CONFIG_SERIO_I8042=y
+CONFIG_SERIO_SERPORT=m
+CONFIG_SERIO_CT82C710=m
+CONFIG_SERIO_PARKBD=m
+CONFIG_SERIO_PCIPS2=m
+CONFIG_SERIO_LIBPS2=y
+CONFIG_SERIO_RAW=m
+CONFIG_HYPERV_KEYBOARD=m
+# CONFIG_SERIO_GPIO_PS2 is not set
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+CONFIG_INPUT_TOUCHSCREEN=y
+CONFIG_TOUCHSCREEN_TSC_SERIO=m
+CONFIG_TOUCHSCREEN_SURFACE3_SPI=m
+
+##
+## file: drivers/iommu/Kconfig
+##
+CONFIG_IRQ_REMAP=y
+
+##
+## file: drivers/iommu/intel/Kconfig
+##
+CONFIG_INTEL_IOMMU=y
+CONFIG_INTEL_IOMMU_SVM=y
+## choice: Default state of Intel DMA Remapping Devices
+CONFIG_INTEL_IOMMU_DEFAULT_ON_INTGPU_OFF=y
+## end choice
+
+##
+## file: drivers/isdn/Kconfig
+##
+CONFIG_ISDN=y
+
+##
+## file: drivers/leds/Kconfig
+##
+CONFIG_LEDS_APU=m
+CONFIG_LEDS_CLEVO_MAIL=m
+CONFIG_LEDS_MENF21BMC=m
+
+##
+## file: drivers/media/cec/Kconfig
+##
+CONFIG_MEDIA_CEC_SUPPORT=y
+
+##
+## file: drivers/media/cec/platform/Kconfig
+##
+CONFIG_CEC_SECO=m
+
+##
+## file: drivers/media/dvb-frontends/Kconfig
+##
+CONFIG_DVB_RTL2832_SDR=m
+
+##
+## file: drivers/media/platform/Kconfig
+##
+CONFIG_VIDEO_VIA_CAMERA=m
+
+##
+## file: drivers/media/radio/Kconfig
+##
+CONFIG_USB_DSBR=m
+CONFIG_RADIO_MAXIRADIO=m
+
+##
+## file: drivers/media/rc/Kconfig
+##
+CONFIG_IR_ITE_CIR=m
+CONFIG_IR_FINTEK=m
+CONFIG_IR_NUVOTON=m
+CONFIG_IR_WINBOND_CIR=m
+CONFIG_IR_SERIAL=m
+CONFIG_IR_SERIAL_TRANSMITTER=y
+
+##
+## file: drivers/media/tuners/Kconfig
+##
+CONFIG_MEDIA_TUNER_MSI001=m
+
+##
+## file: drivers/media/usb/as102/Kconfig
+##
+CONFIG_DVB_AS102=m
+
+##
+## file: drivers/media/usb/go7007/Kconfig
+##
+# CONFIG_VIDEO_GO7007 is not set
+
+##
+## file: drivers/media/usb/tm6000/Kconfig
+##
+CONFIG_VIDEO_TM6000=m
+CONFIG_VIDEO_TM6000_ALSA=m
+CONFIG_VIDEO_TM6000_DVB=m
+
+##
+## file: drivers/mfd/Kconfig
+##
+CONFIG_MFD_AXP20X_I2C=m
+# CONFIG_MFD_INTEL_QUARK_I2C_GPIO is not set
+CONFIG_LPC_ICH=m
+CONFIG_INTEL_SOC_PMIC=y
+CONFIG_INTEL_SOC_PMIC_BXTWC=m
+CONFIG_INTEL_SOC_PMIC_CHTWC=y
+CONFIG_INTEL_SOC_PMIC_CHTDC_TI=m
+CONFIG_MFD_INTEL_LPSS_ACPI=m
+CONFIG_MFD_INTEL_LPSS_PCI=m
+CONFIG_MFD_INTEL_PMC_BXT=m
+CONFIG_MFD_KEMPLD=m
+CONFIG_MFD_MENF21BMC=m
+
+##
+## file: drivers/misc/Kconfig
+##
+CONFIG_IBM_ASM=m
+CONFIG_PHANTOM=m
+CONFIG_CS5535_MFGPT=m
+CONFIG_HP_ILO=m
+CONFIG_VMWARE_BALLOON=m
+
+##
+## file: drivers/misc/mei/Kconfig
+##
+CONFIG_INTEL_MEI=m
+CONFIG_INTEL_MEI_ME=m
+CONFIG_INTEL_MEI_TXE=m
+
+##
+## file: drivers/misc/mei/hdcp/Kconfig
+##
+CONFIG_INTEL_MEI_HDCP=m
+
+##
+## file: drivers/misc/pvpanic/Kconfig
+##
+CONFIG_PVPANIC=y
+CONFIG_PVPANIC_MMIO=m
+CONFIG_PVPANIC_PCI=m
+
+##
+## file: drivers/misc/vmw_vmci/Kconfig
+##
+CONFIG_VMWARE_VMCI=m
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=m
+
+##
+## file: drivers/mmc/core/Kconfig
+##
+CONFIG_MMC_BLOCK=m
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+# CONFIG_MMC_DEBUG is not set
+CONFIG_MMC_SDHCI_ACPI=m
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_FTL=m
+CONFIG_NFTL=m
+CONFIG_NFTL_RW=y
+CONFIG_INFTL=m
+
+##
+## file: drivers/mtd/chips/Kconfig
+##
+CONFIG_MTD_CFI=m
+CONFIG_MTD_JEDECPROBE=m
+# CONFIG_MTD_CFI_ADV_OPTIONS is not set
+CONFIG_MTD_MAP_BANK_WIDTH_1=y
+CONFIG_MTD_MAP_BANK_WIDTH_2=y
+CONFIG_MTD_MAP_BANK_WIDTH_4=y
+# CONFIG_MTD_MAP_BANK_WIDTH_8 is not set
+# CONFIG_MTD_MAP_BANK_WIDTH_16 is not set
+# CONFIG_MTD_MAP_BANK_WIDTH_32 is not set
+CONFIG_MTD_CFI_I1=y
+CONFIG_MTD_CFI_I2=y
+# CONFIG_MTD_CFI_I4 is not set
+# CONFIG_MTD_CFI_I8 is not set
+CONFIG_MTD_CFI_INTELEXT=m
+CONFIG_MTD_CFI_AMDSTD=m
+CONFIG_MTD_CFI_STAA=m
+CONFIG_MTD_RAM=m
+CONFIG_MTD_ROM=m
+CONFIG_MTD_ABSENT=m
+
+##
+## file: drivers/mtd/devices/Kconfig
+##
+# CONFIG_MTD_PMC551 is not set
+# CONFIG_MTD_PMC551_BUGFIX is not set
+# CONFIG_MTD_PMC551_DEBUG is not set
+CONFIG_MTD_SLRAM=m
+CONFIG_MTD_PHRAM=m
+CONFIG_MTD_MTDRAM=m
+CONFIG_MTDRAM_TOTAL_SIZE=4096
+CONFIG_MTDRAM_ERASE_SIZE=128
+CONFIG_MTD_BLOCK2MTD=m
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+CONFIG_MTD_COMPLEX_MAPPINGS=y
+CONFIG_MTD_PHYSMAP=m
+# CONFIG_MTD_PHYSMAP_COMPAT is not set
+CONFIG_MTD_PHYSMAP_START=0x8000000
+CONFIG_MTD_PHYSMAP_LEN=0x4000000
+CONFIG_MTD_PHYSMAP_BANKWIDTH=2
+CONFIG_MTD_SBC_GXX=m
+# CONFIG_MTD_AMD76XROM is not set
+# CONFIG_MTD_ICHXROM is not set
+# CONFIG_MTD_SCB2_FLASH is not set
+CONFIG_MTD_NETtel=m
+# CONFIG_MTD_L440GX is not set
+CONFIG_MTD_PCI=m
+
+##
+## file: drivers/mtd/nand/raw/Kconfig
+##
+CONFIG_MTD_RAW_NAND=m
+CONFIG_MTD_NAND_DISKONCHIP=m
+# CONFIG_MTD_NAND_DISKONCHIP_PROBE_ADVANCED is not set
+CONFIG_MTD_NAND_DISKONCHIP_PROBE_ADDRESS=0
+# CONFIG_MTD_NAND_DISKONCHIP_BBTWRITE is not set
+
+##
+## file: drivers/mtd/parsers/Kconfig
+##
+# CONFIG_MTD_CMDLINE_PARTS is not set
+CONFIG_MTD_REDBOOT_PARTS=y
+CONFIG_MTD_REDBOOT_DIRECTORY_BLOCK=-1
+# CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED is not set
+# CONFIG_MTD_REDBOOT_PARTS_READONLY is not set
+
+##
+## file: drivers/mtd/spi-nor/controllers/Kconfig
+##
+# CONFIG_SPI_INTEL_SPI_PCI is not set
+# CONFIG_SPI_INTEL_SPI_PLATFORM is not set
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_DUMMY=m
+CONFIG_NET_FC=y
+CONFIG_NET_SB1000=m
+CONFIG_VMXNET3=m
+CONFIG_USB4_NET=m
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+CONFIG_ARCNET=m
+CONFIG_ARCNET_1201=m
+CONFIG_ARCNET_1051=m
+CONFIG_ARCNET_RAW=m
+CONFIG_ARCNET_CAP=m
+CONFIG_ARCNET_COM90xx=m
+CONFIG_ARCNET_COM90xxIO=m
+CONFIG_ARCNET_RIM_I=m
+CONFIG_ARCNET_COM20020=m
+CONFIG_ARCNET_COM20020_PCI=m
+CONFIG_ARCNET_COM20020_CS=m
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+# CONFIG_CX_ECAT is not set
+CONFIG_FEALNX=m
+
+##
+## file: drivers/net/ethernet/3com/Kconfig
+##
+CONFIG_NET_VENDOR_3COM=y
+CONFIG_PCMCIA_3C574=m
+CONFIG_PCMCIA_3C589=m
+CONFIG_VORTEX=m
+CONFIG_TYPHOON=m
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_NET_VENDOR_8390=y
+CONFIG_PCMCIA_AXNET=m
+CONFIG_NE2K_PCI=m
+CONFIG_PCMCIA_PCNET=m
+
+##
+## file: drivers/net/ethernet/adaptec/Kconfig
+##
+CONFIG_NET_VENDOR_ADAPTEC=y
+CONFIG_ADAPTEC_STARFIRE=m
+
+##
+## file: drivers/net/ethernet/altera/Kconfig
+##
+# CONFIG_ALTERA_TSE is not set
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_NET_VENDOR_AMD=y
+CONFIG_AMD8111_ETH=m
+CONFIG_PCMCIA_NMCLAN=m
+
+##
+## file: drivers/net/ethernet/broadcom/Kconfig
+##
+CONFIG_NET_VENDOR_BROADCOM=y
+CONFIG_B44=m
+
+##
+## file: drivers/net/ethernet/dec/tulip/Kconfig
+##
+CONFIG_NET_TULIP=y
+CONFIG_DE2104X=m
+CONFIG_TULIP=m
+# CONFIG_TULIP_MWI is not set
+# CONFIG_TULIP_MMIO is not set
+CONFIG_WINBOND_840=m
+CONFIG_DM9102=m
+CONFIG_PCMCIA_XIRCOM=m
+
+##
+## file: drivers/net/ethernet/dlink/Kconfig
+##
+CONFIG_NET_VENDOR_DLINK=y
+CONFIG_SUNDANCE=m
+# CONFIG_SUNDANCE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/fujitsu/Kconfig
+##
+CONFIG_NET_VENDOR_FUJITSU=y
+CONFIG_PCMCIA_FMVJ18X=m
+
+##
+## file: drivers/net/ethernet/intel/Kconfig
+##
+CONFIG_NET_VENDOR_INTEL=y
+CONFIG_E100=m
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_NET_VENDOR_NATSEMI=y
+CONFIG_NATSEMI=m
+
+##
+## file: drivers/net/ethernet/nvidia/Kconfig
+##
+CONFIG_NET_VENDOR_NVIDIA=y
+CONFIG_FORCEDETH=m
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_NET_VENDOR_REALTEK=y
+# CONFIG_ATP is not set
+CONFIG_8139CP=m
+CONFIG_8139TOO=m
+
+##
+## file: drivers/net/ethernet/sis/Kconfig
+##
+CONFIG_NET_VENDOR_SIS=y
+CONFIG_SIS900=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_NET_VENDOR_SMSC=y
+CONFIG_PCMCIA_SMC91C92=m
+CONFIG_EPIC100=m
+
+##
+## file: drivers/net/ethernet/stmicro/stmmac/Kconfig
+##
+CONFIG_STMMAC_ETH=m
+CONFIG_DWMAC_INTEL=m
+
+##
+## file: drivers/net/ethernet/sun/Kconfig
+##
+CONFIG_NET_VENDOR_SUN=y
+CONFIG_HAPPYMEAL=m
+CONFIG_SUNGEM=m
+
+##
+## file: drivers/net/ethernet/via/Kconfig
+##
+CONFIG_NET_VENDOR_VIA=y
+CONFIG_VIA_RHINE=m
+# CONFIG_VIA_RHINE_MMIO is not set
+
+##
+## file: drivers/net/ethernet/xircom/Kconfig
+##
+CONFIG_NET_VENDOR_XIRCOM=y
+CONFIG_PCMCIA_XIRC2PS=m
+
+##
+## file: drivers/net/fddi/Kconfig
+##
+CONFIG_FDDI=y
+CONFIG_SKFP=m
+
+##
+## file: drivers/net/hippi/Kconfig
+##
+CONFIG_HIPPI=y
+CONFIG_ROADRUNNER=m
+# CONFIG_ROADRUNNER_LARGE_RINGS is not set
+
+##
+## file: drivers/net/hyperv/Kconfig
+##
+CONFIG_HYPERV_NET=m
+
+##
+## file: drivers/net/plip/Kconfig
+##
+CONFIG_PLIP=m
+
+##
+## file: drivers/net/wan/Kconfig
+##
+CONFIG_WAN=y
+CONFIG_LANMEDIA=m
+CONFIG_PCI200SYN=m
+CONFIG_WANXL=m
+CONFIG_FARSYNC=m
+
+##
+## file: drivers/net/wireless/Kconfig
+##
+CONFIG_PCMCIA_RAYCS=m
+CONFIG_PCMCIA_WL3501=m
+
+##
+## file: drivers/net/wireless/atmel/Kconfig
+##
+CONFIG_ATMEL=m
+CONFIG_PCI_ATMEL=m
+CONFIG_PCMCIA_ATMEL=m
+
+##
+## file: drivers/net/wireless/broadcom/brcm80211/brcmfmac/Kconfig
+##
+#. Sony Vaio laptops
+CONFIG_BRCMFMAC_SDIO=y
+
+##
+## file: drivers/net/wireless/cisco/Kconfig
+##
+CONFIG_AIRO_CS=m
+
+##
+## file: drivers/net/wireless/intersil/orinoco/Kconfig
+##
+CONFIG_HERMES=m
+CONFIG_PLX_HERMES=m
+CONFIG_TMD_HERMES=m
+CONFIG_PCI_HERMES=m
+CONFIG_PCMCIA_HERMES=m
+
+##
+## file: drivers/net/wireless/marvell/mwifiex/Kconfig
+##
+CONFIG_MWIFIEX=m
+CONFIG_MWIFIEX_SDIO=m
+CONFIG_MWIFIEX_PCIE=m
+CONFIG_MWIFIEX_USB=m
+
+##
+## file: drivers/net/wireless/zydas/Kconfig
+##
+CONFIG_USB_ZD1201=m
+
+##
+## file: drivers/nfc/Kconfig
+##
+CONFIG_NFC_MEI_PHY=m
+
+##
+## file: drivers/nfc/pn544/Kconfig
+##
+CONFIG_NFC_PN544_MEI=m
+
+##
+## file: drivers/nvdimm/Kconfig
+##
+CONFIG_LIBNVDIMM=m
+CONFIG_BLK_DEV_PMEM=m
+CONFIG_ND_BLK=m
+CONFIG_BTT=y
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+CONFIG_PCI_PRI=y
+CONFIG_PCI_PASID=y
+
+##
+## file: drivers/pci/controller/Kconfig
+##
+CONFIG_VMD=m
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+CONFIG_HOTPLUG_PCI=y
+CONFIG_HOTPLUG_PCI_ACPI=y
+CONFIG_HOTPLUG_PCI_ACPI_IBM=m
+CONFIG_HOTPLUG_PCI_CPCI_ZT5550=m
+CONFIG_HOTPLUG_PCI_CPCI_GENERIC=m
+CONFIG_HOTPLUG_PCI_SHPC=y
+
+##
+## file: drivers/pcmcia/Kconfig
+##
+CONFIG_PCCARD=m
+CONFIG_PCMCIA=m
+CONFIG_CARDBUS=y
+CONFIG_YENTA=m
+CONFIG_PD6729=m
+CONFIG_I82092=m
+CONFIG_TCIC=m
+# CONFIG_PCMCIA_DEBUG is not set
+
+##
+## file: drivers/pinctrl/Kconfig
+##
+CONFIG_PINCTRL_AMD=y
+
+##
+## file: drivers/pinctrl/intel/Kconfig
+##
+CONFIG_PINCTRL_BAYTRAIL=y
+CONFIG_PINCTRL_CHERRYVIEW=y
+# CONFIG_PINCTRL_LYNXPOINT is not set
+CONFIG_PINCTRL_ALDERLAKE=m
+CONFIG_PINCTRL_BROXTON=y
+CONFIG_PINCTRL_CANNONLAKE=y
+CONFIG_PINCTRL_CEDARFORK=y
+CONFIG_PINCTRL_DENVERTON=y
+CONFIG_PINCTRL_ELKHARTLAKE=m
+CONFIG_PINCTRL_EMMITSBURG=m
+CONFIG_PINCTRL_GEMINILAKE=y
+CONFIG_PINCTRL_ICELAKE=y
+CONFIG_PINCTRL_JASPERLAKE=m
+CONFIG_PINCTRL_LAKEFIELD=m
+CONFIG_PINCTRL_LEWISBURG=y
+CONFIG_PINCTRL_SUNRISEPOINT=y
+CONFIG_PINCTRL_TIGERLAKE=y
+
+##
+## file: drivers/platform/chrome/Kconfig
+##
+CONFIG_CHROME_PLATFORMS=y
+CONFIG_CHROMEOS_LAPTOP=m
+CONFIG_CHROMEOS_PSTORE=m
+CONFIG_CROS_EC=m
+CONFIG_CROS_KBD_LED_BACKLIGHT=m
+
+##
+## file: drivers/platform/surface/Kconfig
+##
+CONFIG_SURFACE3_WMI=m
+CONFIG_SURFACE_3_BUTTON=m
+CONFIG_SURFACE_PRO3_BUTTON=m
+
+##
+## file: drivers/platform/x86/Kconfig
+##
+CONFIG_X86_PLATFORM_DEVICES=y
+CONFIG_ACPI_WMI=m
+CONFIG_HUAWEI_WMI=m
+CONFIG_PEAQ_WMI=m
+CONFIG_XIAOMI_WMI=m
+CONFIG_ACERHDF=m
+CONFIG_ACER_WIRELESS=m
+CONFIG_ACER_WMI=m
+CONFIG_APPLE_GMUX=m
+CONFIG_ASUS_LAPTOP=m
+CONFIG_ASUS_WIRELESS=m
+CONFIG_ASUS_WMI=m
+CONFIG_ASUS_NB_WMI=m
+CONFIG_EEEPC_LAPTOP=m
+CONFIG_EEEPC_WMI=m
+CONFIG_AMILO_RFKILL=m
+CONFIG_FUJITSU_LAPTOP=m
+CONFIG_FUJITSU_TABLET=m
+CONFIG_GPD_POCKET_FAN=m
+CONFIG_HP_ACCEL=m
+CONFIG_HP_WMI=m
+CONFIG_IBM_RTL=m
+CONFIG_IDEAPAD_LAPTOP=m
+CONFIG_SENSORS_HDAPS=m
+CONFIG_THINKPAD_ACPI=m
+CONFIG_THINKPAD_ACPI_ALSA_SUPPORT=y
+# CONFIG_THINKPAD_ACPI_DEBUGFACILITIES is not set
+# CONFIG_THINKPAD_ACPI_DEBUG is not set
+# CONFIG_THINKPAD_ACPI_UNSAFE_LEDS is not set
+CONFIG_THINKPAD_ACPI_VIDEO=y
+CONFIG_THINKPAD_ACPI_HOTKEY_POLL=y
+CONFIG_MSI_LAPTOP=m
+CONFIG_MSI_WMI=m
+CONFIG_PCENGINES_APU2=m
+CONFIG_SAMSUNG_LAPTOP=m
+CONFIG_SAMSUNG_Q10=m
+CONFIG_ACPI_TOSHIBA=m
+CONFIG_TOSHIBA_BT_RFKILL=m
+CONFIG_TOSHIBA_HAPS=m
+CONFIG_TOSHIBA_WMI=m
+CONFIG_ACPI_CMPC=m
+CONFIG_COMPAL_LAPTOP=m
+CONFIG_LG_LAPTOP=m
+CONFIG_PANASONIC_LAPTOP=m
+CONFIG_SONY_LAPTOP=m
+CONFIG_SONYPI_COMPAT=y
+CONFIG_TOPSTAR_LAPTOP=m
+CONFIG_I2C_MULTI_INSTANTIATE=m
+CONFIG_INTEL_IPS=m
+
+##
+## file: drivers/platform/x86/dell/Kconfig
+##
+CONFIG_X86_PLATFORM_DRIVERS_DELL=y
+CONFIG_ALIENWARE_WMI=m
+CONFIG_DCDBAS=m
+CONFIG_DELL_LAPTOP=m
+CONFIG_DELL_RBU=m
+CONFIG_DELL_RBTN=m
+CONFIG_DELL_SMBIOS=m
+CONFIG_DELL_SMBIOS_WMI=y
+CONFIG_DELL_SMBIOS_SMM=y
+CONFIG_DELL_SMO8800=m
+CONFIG_DELL_WMI=m
+CONFIG_DELL_WMI_AIO=m
+CONFIG_DELL_WMI_LED=m
+
+##
+## file: drivers/platform/x86/intel/Kconfig
+##
+CONFIG_INTEL_HID_EVENT=m
+CONFIG_INTEL_VBTN=m
+CONFIG_INTEL_INT0002_VGPIO=m
+CONFIG_INTEL_OAKTRAIL=m
+CONFIG_INTEL_RST=m
+CONFIG_INTEL_SMARTCONNECT=m
+CONFIG_INTEL_TURBO_MAX_3=y
+
+##
+## file: drivers/platform/x86/intel/atomisp2/Kconfig
+##
+CONFIG_INTEL_ATOMISP2_PM=m
+
+##
+## file: drivers/platform/x86/intel/int33fe/Kconfig
+##
+CONFIG_INTEL_CHT_INT33FE=m
+
+##
+## file: drivers/platform/x86/intel/pmc/Kconfig
+##
+CONFIG_INTEL_PMC_CORE=m
+
+##
+## file: drivers/platform/x86/intel/wmi/Kconfig
+##
+CONFIG_INTEL_WMI_THUNDERBOLT=m
+
+##
+## file: drivers/pnp/Kconfig
+##
+CONFIG_PNP=y
+
+##
+## file: drivers/power/supply/Kconfig
+##
+CONFIG_BATTERY_SBS=m
+CONFIG_AXP288_FUEL_GAUGE=m
+CONFIG_BATTERY_MAX17042=m
+CONFIG_CHARGER_BQ24190=m
+
+##
+## file: drivers/powercap/Kconfig
+##
+CONFIG_POWERCAP=y
+CONFIG_INTEL_RAPL=m
+
+##
+## file: drivers/ptp/Kconfig
+##
+CONFIG_PTP_1588_CLOCK_PCH=m
+CONFIG_PTP_1588_CLOCK_KVM=m
+CONFIG_PTP_1588_CLOCK_VMW=m
+
+##
+## file: drivers/pwm/Kconfig
+##
+CONFIG_PWM=y
+CONFIG_PWM_CRC=y
+CONFIG_PWM_LPSS_PLATFORM=m
+
+##
+## file: drivers/rapidio/Kconfig
+##
+# CONFIG_RAPIDIO is not set
+
+##
+## file: drivers/regulator/Kconfig
+##
+CONFIG_REGULATOR=y
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_CMOS=y
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI_DPT_I2O=m
+CONFIG_SCSI_ARCMSR=m
+CONFIG_SCSI_BUSLOGIC=m
+# CONFIG_SCSI_FLASHPOINT is not set
+CONFIG_SCSI_MYRB=m
+CONFIG_SCSI_MYRS=m
+CONFIG_VMWARE_PVSCSI=m
+CONFIG_HYPERV_STORAGE=m
+CONFIG_SCSI_DMX3191D=m
+CONFIG_SCSI_ISCI=m
+CONFIG_SCSI_IPS=m
+CONFIG_SCSI_INITIO=m
+CONFIG_SCSI_SYM53C8XX_DMA_ADDRESSING_MODE=1
+CONFIG_SCSI_SYM53C8XX_DEFAULT_TAGS=16
+CONFIG_SCSI_SYM53C8XX_MAX_TAGS=64
+CONFIG_SCSI_IPR=m
+# CONFIG_SCSI_IPR_TRACE is not set
+# CONFIG_SCSI_IPR_DUMP is not set
+CONFIG_SCSI_QLOGIC_1280=m
+CONFIG_SCSI_DC395x=m
+CONFIG_SCSI_AM53C974=m
+CONFIG_SCSI_DEBUG=m
+
+##
+## file: drivers/scsi/aic7xxx/Kconfig.aic7xxx
+##
+CONFIG_AIC7XXX_CMDS_PER_DEVICE=8
+
+##
+## file: drivers/scsi/megaraid/Kconfig.megaraid
+##
+CONFIG_MEGARAID_NEWGEN=y
+CONFIG_MEGARAID_MM=m
+CONFIG_MEGARAID_MAILBOX=m
+CONFIG_MEGARAID_LEGACY=m
+
+##
+## file: drivers/scsi/pcmcia/Kconfig
+##
+CONFIG_PCMCIA_AHA152X=m
+CONFIG_PCMCIA_QLOGIC=m
+CONFIG_PCMCIA_SYM53C500=m
+
+##
+## file: drivers/staging/media/Kconfig
+##
+CONFIG_STAGING_MEDIA=y
+
+##
+## file: drivers/staging/rtl8192e/Kconfig
+##
+CONFIG_RTLLIB=m
+CONFIG_RTLLIB_CRYPTO_CCMP=m
+CONFIG_RTLLIB_CRYPTO_TKIP=m
+CONFIG_RTLLIB_CRYPTO_WEP=m
+
+##
+## file: drivers/staging/rtl8192e/rtl8192e/Kconfig
+##
+CONFIG_RTL8192E=m
+
+##
+## file: drivers/staging/rtl8192u/Kconfig
+##
+CONFIG_RTL8192U=m
+
+##
+## file: drivers/staging/rtl8723bs/Kconfig
+##
+CONFIG_RTL8723BS=m
+
+##
+## file: drivers/staging/rts5208/Kconfig
+##
+CONFIG_RTS5208=m
+
+##
+## file: drivers/staging/vt6656/Kconfig
+##
+CONFIG_VT6656=m
+
+##
+## file: drivers/staging/wlan-ng/Kconfig
+##
+CONFIG_PRISM2_USB=m
+
+##
+## file: drivers/thermal/Kconfig
+##
+CONFIG_THERMAL=y
+# CONFIG_THERMAL_OF is not set
+# CONFIG_CPU_THERMAL is not set
+
+##
+## file: drivers/thermal/intel/Kconfig
+##
+CONFIG_INTEL_POWERCLAMP=m
+CONFIG_X86_PKG_TEMP_THERMAL=m
+CONFIG_INTEL_SOC_DTS_THERMAL=m
+CONFIG_INTEL_PCH_THERMAL=m
+# CONFIG_INTEL_MENLOW is not set
+
+##
+## file: drivers/thermal/intel/int340x_thermal/Kconfig
+##
+CONFIG_INT340X_THERMAL=m
+CONFIG_INT3406_THERMAL=m
+
+##
+## file: drivers/thunderbolt/Kconfig
+##
+CONFIG_USB4=m
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_VT=y
+CONFIG_VT_CONSOLE=y
+CONFIG_SERIAL_NONSTANDARD=y
+CONFIG_N_HDLC=m
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_JSM=m
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_FINTEK=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_8250_CS=m
+CONFIG_SERIAL_8250_NR_UARTS=32
+CONFIG_SERIAL_8250_RUNTIME_UARTS=4
+CONFIG_SERIAL_8250_EXTENDED=y
+CONFIG_SERIAL_8250_MANY_PORTS=y
+CONFIG_SERIAL_8250_SHARE_IRQ=y
+# CONFIG_SERIAL_8250_DETECT_IRQ is not set
+CONFIG_SERIAL_8250_RSA=y
+CONFIG_SERIAL_8250_DW=y
+CONFIG_SERIAL_8250_LPSS=m
+CONFIG_SERIAL_8250_MID=y
+
+##
+## file: drivers/uio/Kconfig
+##
+CONFIG_UIO_HV_GENERIC=m
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=m
+CONFIG_USB_USS720=m
+
+##
+## file: drivers/usb/atm/Kconfig
+##
+CONFIG_USB_ATM=m
+CONFIG_USB_SPEEDTOUCH=m
+
+##
+## file: drivers/usb/gadget/Kconfig
+##
+CONFIG_USB_GADGET=m
+
+##
+## file: drivers/usb/gadget/udc/Kconfig
+##
+CONFIG_USB_EG20T=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_OHCI_HCD=m
+# CONFIG_USB_OHCI_HCD_SSB is not set
+CONFIG_USB_UHCI_HCD=m
+CONFIG_USB_SL811_HCD=m
+# CONFIG_USB_SL811_HCD_ISO is not set
+CONFIG_USB_SL811_CS=m
+
+##
+## file: drivers/usb/roles/Kconfig
+##
+CONFIG_USB_ROLES_INTEL_XHCI=m
+
+##
+## file: drivers/usb/typec/Kconfig
+##
+CONFIG_TYPEC=m
+
+##
+## file: drivers/usb/typec/mux/Kconfig
+##
+CONFIG_TYPEC_MUX_PI3USB30532=m
+
+##
+## file: drivers/usb/typec/tcpm/Kconfig
+##
+CONFIG_TYPEC_TCPM=m
+CONFIG_TYPEC_FUSB302=m
+
+##
+## file: drivers/usb/typec/tipd/Kconfig
+##
+CONFIG_TYPEC_TPS6598X=m
+
+##
+## file: drivers/vfio/Kconfig
+##
+CONFIG_VFIO=m
+
+##
+## file: drivers/vfio/pci/Kconfig
+##
+CONFIG_VFIO_PCI=m
+CONFIG_VFIO_PCI_VGA=y
+
+##
+## file: drivers/video/console/Kconfig
+##
+CONFIG_VGA_CONSOLE=y
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_MODE_HELPERS=y
+CONFIG_FB_TILEBLITTING=y
+CONFIG_FB_CIRRUS=m
+CONFIG_FB_PM2=m
+CONFIG_FB_PM2_FIFO_DISCONNECT=y
+CONFIG_FB_CYBER2000=m
+CONFIG_FB_CYBER2000_DDC=y
+# CONFIG_FB_ASILIANT is not set
+# CONFIG_FB_IMSTT is not set
+CONFIG_FB_VGA16=m
+CONFIG_FB_UVESA=m
+CONFIG_FB_VESA=y
+CONFIG_FB_EFI=y
+CONFIG_FB_N411=m
+CONFIG_FB_HGA=m
+CONFIG_FB_LE80578=m
+CONFIG_FB_CARILLO_RANCH=m
+# CONFIG_FB_INTEL is not set
+CONFIG_FB_MATROX=m
+CONFIG_FB_MATROX_MILLENIUM=y
+CONFIG_FB_MATROX_MYSTIQUE=y
+CONFIG_FB_MATROX_I2C=m
+CONFIG_FB_RADEON=m
+CONFIG_FB_RADEON_I2C=y
+CONFIG_FB_RADEON_BACKLIGHT=y
+# CONFIG_FB_RADEON_DEBUG is not set
+CONFIG_FB_ATY128=m
+CONFIG_FB_ATY128_BACKLIGHT=y
+CONFIG_FB_ATY=m
+CONFIG_FB_ATY_CT=y
+CONFIG_FB_ATY_GX=y
+CONFIG_FB_ATY_BACKLIGHT=y
+CONFIG_FB_SAVAGE=m
+# CONFIG_FB_SAVAGE_ACCEL is not set
+CONFIG_FB_SIS=m
+CONFIG_FB_SIS_300=y
+CONFIG_FB_SIS_315=y
+CONFIG_FB_NEOMAGIC=m
+CONFIG_FB_KYRO=m
+CONFIG_FB_VOODOO1=m
+CONFIG_FB_TRIDENT=m
+CONFIG_FB_VIRTUAL=m
+CONFIG_FB_HYPERV=m
+#. Doesn't support handover; see #822575
+# CONFIG_FB_SIMPLE is not set
+
+##
+## file: drivers/video/fbdev/geode/Kconfig
+##
+# CONFIG_FB_GEODE is not set
+
+##
+## file: drivers/virt/vboxguest/Kconfig
+##
+CONFIG_VBOXGUEST=m
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_MENF21BMC_WATCHDOG=m
+CONFIG_ACQUIRE_WDT=m
+CONFIG_ADVANTECH_WDT=m
+CONFIG_ALIM1535_WDT=m
+CONFIG_ALIM7101_WDT=m
+CONFIG_F71808E_WDT=m
+CONFIG_SP5100_TCO=m
+CONFIG_GEODE_WDT=m
+CONFIG_EUROTECH_WDT=m
+CONFIG_IB700_WDT=m
+CONFIG_IBMASR=m
+CONFIG_WAFER_WDT=m
+CONFIG_I6300ESB_WDT=m
+CONFIG_IE6XX_WDT=m
+CONFIG_IT8712F_WDT=m
+CONFIG_HP_WATCHDOG=m
+CONFIG_HPWDT_NMI_DECODING=y
+CONFIG_KEMPLD_WDT=m
+CONFIG_SC1200_WDT=m
+CONFIG_NV_TCO=m
+CONFIG_60XX_WDT=m
+CONFIG_CPU5_WDT=m
+CONFIG_VIA_WDT=m
+CONFIG_W83627HF_WDT=m
+CONFIG_W83877F_WDT=m
+CONFIG_W83977F_WDT=m
+CONFIG_MACHZ_WDT=m
+CONFIG_INTEL_MEI_WDT=m
+CONFIG_NI903X_WDT=m
+CONFIG_NIC7018_WDT=m
+CONFIG_PCIPCWATCHDOG=m
+CONFIG_WDTPCI=m
+CONFIG_USBPCWATCHDOG=m
+
+##
+## file: drivers/xen/Kconfig
+##
+CONFIG_XEN_ACPI_PROCESSOR=m
+CONFIG_XEN_SYMS=y
+
+##
+## file: fs/pstore/Kconfig
+##
+CONFIG_PSTORE=y
+
+##
+## file: fs/vboxsf/Kconfig
+##
+CONFIG_VBOXSF_FS=m
+
+##
+## file: init/Kconfig
+##
+CONFIG_USELIB=y
+# CONFIG_IRQ_TIME_ACCOUNTING is not set
+CONFIG_SGETMASK_SYSCALL=y
+CONFIG_SYSFS_SYSCALL=y
+
+##
+## file: kernel/irq/Kconfig
+##
+CONFIG_SPARSE_IRQ=y
+
+##
+## file: kernel/power/Kconfig
+##
+# CONFIG_PM_TEST_SUSPEND is not set
+# CONFIG_PM_TRACE_RTC is not set
+
+##
+## file: kernel/trace/Kconfig
+##
+CONFIG_MMIOTRACE=y
+
+##
+## file: lib/Kconfig.debug
+##
+# CONFIG_FRAME_POINTER is not set
+# CONFIG_DEBUG_STACK_USAGE is not set
+# CONFIG_DEBUG_PER_CPU_MAPS is not set
+# CONFIG_DEBUG_STACKOVERFLOW is not set
+# CONFIG_DEBUG_SHIRQ is not set
+# CONFIG_PROVIDE_OHCI1394_DMA_INIT is not set
+CONFIG_MEMTEST=y
+
+##
+## file: lib/xz/Kconfig
+##
+CONFIG_XZ_DEC_X86=y
+
+##
+## file: mm/Kconfig
+##
+CONFIG_DEFAULT_MMAP_MIN_ADDR=65536
+CONFIG_ZONE_DMA=y
+
+##
+## file: mm/Kconfig.debug
+##
+CONFIG_DEBUG_WX=y
+
+##
+## file: net/decnet/Kconfig
+##
+CONFIG_DECNET=m
+# CONFIG_DECNET_ROUTER is not set
+
+##
+## file: net/decnet/netfilter/Kconfig
+##
+CONFIG_DECNET_NF_GRABULATOR=m
+
+##
+## file: net/lapb/Kconfig
+##
+CONFIG_LAPB=m
+
+##
+## file: net/nfc/hci/Kconfig
+##
+CONFIG_NFC_HCI=m
+
+##
+## file: net/vmw_vsock/Kconfig
+##
+CONFIG_VMWARE_VMCI_VSOCKETS=m
+CONFIG_HYPERV_VSOCKETS=m
+
+##
+## file: security/Kconfig
+##
+CONFIG_INTEL_TXT=y
+
+##
+## file: sound/drivers/Kconfig
+##
+CONFIG_SND_DUMMY=m
+CONFIG_SND_VIRMIDI=m
+CONFIG_SND_MTPAV=m
+CONFIG_SND_SERIAL_U16550=m
+CONFIG_SND_MPU401=m
+
+##
+## file: sound/pci/Kconfig
+##
+CONFIG_SND_ALS4000=m
+CONFIG_SND_ALI5451=m
+CONFIG_SND_ATIIXP=m
+CONFIG_SND_ATIIXP_MODEM=m
+CONFIG_SND_AU8810=m
+CONFIG_SND_AU8820=m
+CONFIG_SND_AU8830=m
+CONFIG_SND_AZT3328=m
+CONFIG_SND_BT87X=m
+# CONFIG_SND_BT87X_OVERCLOCK is not set
+CONFIG_SND_CA0106=m
+CONFIG_SND_CMIPCI=m
+CONFIG_SND_CS4281=m
+CONFIG_SND_CS46XX=m
+CONFIG_SND_CS46XX_NEW_DSP=y
+CONFIG_SND_EMU10K1=m
+CONFIG_SND_EMU10K1X=m
+CONFIG_SND_ENS1370=m
+CONFIG_SND_ENS1371=m
+CONFIG_SND_ES1938=m
+CONFIG_SND_ES1968=m
+CONFIG_SND_FM801=m
+CONFIG_SND_FM801_TEA575X_BOOL=y
+CONFIG_SND_HDSP=m
+CONFIG_SND_ICE1712=m
+CONFIG_SND_ICE1724=m
+CONFIG_SND_INTEL8X0=m
+CONFIG_SND_INTEL8X0M=m
+CONFIG_SND_KORG1212=m
+CONFIG_SND_MAESTRO3=m
+CONFIG_SND_MIXART=m
+CONFIG_SND_NM256=m
+CONFIG_SND_RME32=m
+CONFIG_SND_RME96=m
+CONFIG_SND_RME9652=m
+CONFIG_SND_SONICVIBES=m
+CONFIG_SND_TRIDENT=m
+CONFIG_SND_VIA82XX=m
+CONFIG_SND_VIA82XX_MODEM=m
+CONFIG_SND_VX222=m
+CONFIG_SND_YMFPCI=m
+
+##
+## file: sound/pci/hda/Kconfig
+##
+CONFIG_SND_HDA_INTEL=m
+
+##
+## file: sound/soc/Kconfig
+##
+CONFIG_SND_SOC=m
+
+##
+## file: sound/soc/amd/Kconfig
+##
+CONFIG_SND_SOC_AMD_ACP=m
+CONFIG_SND_SOC_AMD_CZ_DA7219MX98357_MACH=m
+CONFIG_SND_SOC_AMD_CZ_RT5645_MACH=m
+
+##
+## file: sound/soc/codecs/Kconfig
+##
+CONFIG_SND_SOC_ES8316=m
+
+##
+## file: sound/soc/intel/Kconfig
+##
+CONFIG_SND_SOC_INTEL_SST_TOPLEVEL=y
+CONFIG_SND_SOC_INTEL_CATPT=m
+# CONFIG_SND_SST_ATOM_HIFI2_PLATFORM_PCI is not set
+CONFIG_SND_SST_ATOM_HIFI2_PLATFORM_ACPI=m
+CONFIG_SND_SOC_INTEL_SKYLAKE=m
+CONFIG_SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC=y
+
+##
+## file: sound/soc/intel/boards/Kconfig
+##
+CONFIG_SND_SOC_INTEL_USER_FRIENDLY_LONG_NAMES=y
+CONFIG_SND_SOC_INTEL_HASWELL_MACH=m
+CONFIG_SND_SOC_INTEL_BDW_RT5650_MACH=m
+CONFIG_SND_SOC_INTEL_BDW_RT5677_MACH=m
+CONFIG_SND_SOC_INTEL_BROADWELL_MACH=m
+CONFIG_SND_SOC_INTEL_BYTCR_RT5640_MACH=m
+CONFIG_SND_SOC_INTEL_BYTCR_RT5651_MACH=m
+CONFIG_SND_SOC_INTEL_CHT_BSW_RT5672_MACH=m
+CONFIG_SND_SOC_INTEL_CHT_BSW_RT5645_MACH=m
+CONFIG_SND_SOC_INTEL_CHT_BSW_MAX98090_TI_MACH=m
+CONFIG_SND_SOC_INTEL_CHT_BSW_NAU8824_MACH=m
+CONFIG_SND_SOC_INTEL_BYT_CHT_CX2072X_MACH=m
+CONFIG_SND_SOC_INTEL_BYT_CHT_DA7213_MACH=m
+CONFIG_SND_SOC_INTEL_BYT_CHT_ES8316_MACH=m
+# CONFIG_SND_SOC_INTEL_BYT_CHT_NOCODEC_MACH is not set
+CONFIG_SND_SOC_INTEL_SKL_RT286_MACH=m
+CONFIG_SND_SOC_INTEL_SKL_NAU88L25_SSM4567_MACH=m
+CONFIG_SND_SOC_INTEL_SKL_NAU88L25_MAX98357A_MACH=m
+# CONFIG_SND_SOC_INTEL_BXT_DA7219_MAX98357A_MACH is not set
+# CONFIG_SND_SOC_INTEL_BXT_RT298_MACH is not set
+CONFIG_SND_SOC_INTEL_KBL_RT5663_MAX98927_MACH=m
+CONFIG_SND_SOC_INTEL_KBL_RT5663_RT5514_MAX98927_MACH=m
+CONFIG_SND_SOC_INTEL_KBL_DA7219_MAX98357A_MACH=m
+CONFIG_SND_SOC_INTEL_GLK_RT5682_MAX98357A_MACH=m
+CONFIG_SND_SOC_INTEL_SKL_HDA_DSP_GENERIC_MACH=m
+CONFIG_SND_SOC_INTEL_SOF_RT5682_MACH=m
+CONFIG_SND_SOC_INTEL_SOUNDWIRE_SOF_MACH=m
+
+##
+## file: sound/soc/sof/Kconfig
+##
+CONFIG_SND_SOC_SOF_TOPLEVEL=y
+CONFIG_SND_SOC_SOF_PCI=m
+#. The drivers using this conflict with others (see #945914)
+# CONFIG_SND_SOC_SOF_ACPI is not set
+
+##
+## file: sound/soc/sof/intel/Kconfig
+##
+CONFIG_SND_SOC_SOF_INTEL_TOPLEVEL=y
+CONFIG_SND_SOC_SOF_HDA_LINK=y
+CONFIG_SND_SOC_SOF_HDA_AUDIO_CODEC=y
+
+##
+## file: sound/x86/Kconfig
+##
+CONFIG_SND_X86=y
+CONFIG_HDMI_LPE_AUDIO=m
diff --git a/debian/config/m68k/README.build b/debian/config/m68k/README.build
new file mode 100644
index 000000000000..8941608efd7c
--- /dev/null
+++ b/debian/config/m68k/README.build
@@ -0,0 +1,26 @@
+HOWTO cross-build m68k linux-image
+
+Building linux-image packages takes a while, especially on the "slower
+arches", ie m68k. Cross-compiling is an alternative, and it works very well
+for m68k.
+
+You need to set up a cross-compiler. The toolchain-source package has some
+limitations, I prefer using cross-tools, see this page for instructions:
+
+ http://people.debian.org/~cts/debian-m68k/cross-compile/
+
+Now you only have to tell the debian build system, that you do want to build
+packages for m68k. It used to be sufficient to pass an option to debuild,
+since recently you also have to set an environment variable, like this:
+
+ DEB_HOST_ARCH=m68k debuild -B -am68k
+
+If you also want to build source packages, omit the -B. 
+
+If you want to build images for just one of the currently nine subarches,
+you can uncomment some lines in the flavours section in:
+ debian/arch/m68k/defines
+
+The first run of debuild will give you an error message that updating the
+configs suceeded, the second run will build the images.
+
diff --git a/debian/config/m68k/config b/debian/config/m68k/config
new file mode 100644
index 000000000000..319c6928fddc
--- /dev/null
+++ b/debian/config/m68k/config
@@ -0,0 +1,859 @@
+##
+## file: arch/m68k/Kconfig
+##
+# CONFIG_PM is not set
+
+##
+## file: arch/m68k/Kconfig.bus
+##
+CONFIG_ZORRO=y
+CONFIG_AMIGA_PCMCIA=y
+CONFIG_ATARI_ROM_ISA=y
+
+##
+## file: arch/m68k/Kconfig.cpu
+##
+CONFIG_M68020=y
+CONFIG_M68030=y
+CONFIG_M68040=y
+CONFIG_M68060=y
+CONFIG_M68KFPU_EMU=y
+# CONFIG_ADVANCED is not set
+
+##
+## file: arch/m68k/Kconfig.debug
+##
+CONFIG_EARLY_PRINTK=y
+
+##
+## file: arch/m68k/Kconfig.devices
+##
+CONFIG_HEARTBEAT=y
+CONFIG_PROC_HARDWARE=y
+CONFIG_NATFEAT=y
+CONFIG_NFBLOCK=y
+CONFIG_NFCON=y
+CONFIG_NFETH=y
+CONFIG_ATARI_ETHERNAT=y
+CONFIG_ATARI_ETHERNEC=y
+CONFIG_ATARI_DSP56K=m
+CONFIG_AMIGA_BUILTIN_SERIAL=y
+CONFIG_SERIAL_CONSOLE=y
+
+##
+## file: arch/m68k/Kconfig.machine
+##
+CONFIG_AMIGA=y
+CONFIG_ATARI=y
+CONFIG_MAC=y
+CONFIG_APOLLO=y
+CONFIG_VME=y
+CONFIG_MVME147=y
+CONFIG_MVME16x=y
+CONFIG_BVME6000=y
+# CONFIG_HP300 is not set
+# CONFIG_SUN3X is not set
+CONFIG_Q40=y
+# CONFIG_SUN3 is not set
+
+##
+## file: block/Kconfig
+##
+# CONFIG_BLK_DEV_INTEGRITY is not set
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_PARTITION_ADVANCED=y
+CONFIG_AMIGA_PARTITION=y
+CONFIG_ATARI_PARTITION=y
+CONFIG_MAC_PARTITION=y
+CONFIG_MSDOS_PARTITION=y
+CONFIG_BSD_DISKLABEL=y
+CONFIG_MINIX_SUBPARTITION=y
+CONFIG_SOLARIS_X86_PARTITION=y
+CONFIG_UNIXWARE_DISKLABEL=y
+CONFIG_LDM_PARTITION=y
+CONFIG_LDM_DEBUG=y
+CONFIG_SUN_PARTITION=y
+# CONFIG_KARMA_PARTITION is not set
+CONFIG_SYSV68_PARTITION=y
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
+
+##
+## file: crypto/asymmetric_keys/Kconfig
+##
+# CONFIG_ASYMMETRIC_KEY_TYPE is not set
+
+##
+## file: drivers/accessibility/Kconfig
+##
+# CONFIG_ACCESSIBILITY is not set
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_FALCON=m
+CONFIG_PATA_GAYLE=m
+CONFIG_PATA_BUDDHA=m
+
+##
+## file: drivers/bcma/Kconfig
+##
+# CONFIG_BCMA is not set
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_BLK_DEV_FD=m
+CONFIG_AMIGA_FLOPPY=m
+CONFIG_ATARI_FLOPPY=m
+CONFIG_BLK_DEV_SWIM=m
+CONFIG_AMIGA_Z2RAM=y
+CONFIG_CDROM_PKTCDVD=m
+# CONFIG_BLK_DEV_RBD is not set
+
+##
+## file: drivers/block/drbd/Kconfig
+##
+# CONFIG_BLK_DEV_DRBD is not set
+
+##
+## file: drivers/block/mtip32xx/Kconfig
+##
+# CONFIG_BLK_DEV_PCIESSD_MTIP32XX is not set
+
+##
+## file: drivers/char/Kconfig
+##
+CONFIG_PRINTER=m
+# CONFIG_LP_CONSOLE is not set
+# CONFIG_PPDEV is not set
+CONFIG_NVRAM=y
+
+##
+## file: drivers/connector/Kconfig
+##
+CONFIG_CONNECTOR=m
+
+##
+## file: drivers/crypto/Kconfig
+##
+# CONFIG_CRYPTO_HW is not set
+
+##
+## file: drivers/firewire/Kconfig
+##
+# CONFIG_FIREWIRE is not set
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+# CONFIG_DRM is not set
+
+##
+## file: drivers/hwmon/Kconfig
+##
+# CONFIG_HWMON is not set
+
+##
+## file: drivers/i2c/Kconfig
+##
+# CONFIG_I2C is not set
+
+##
+## file: drivers/iio/Kconfig
+##
+# CONFIG_IIO is not set
+
+##
+## file: drivers/infiniband/Kconfig
+##
+# CONFIG_INFINIBAND is not set
+
+##
+## file: drivers/input/Kconfig
+##
+CONFIG_INPUT_MOUSEDEV=y
+
+##
+## file: drivers/input/gameport/Kconfig
+##
+# CONFIG_GAMEPORT is not set
+
+##
+## file: drivers/input/joystick/Kconfig
+##
+CONFIG_INPUT_JOYSTICK=y
+# CONFIG_JOYSTICK_ANALOG is not set
+# CONFIG_JOYSTICK_A3D is not set
+# CONFIG_JOYSTICK_ADI is not set
+# CONFIG_JOYSTICK_COBRA is not set
+# CONFIG_JOYSTICK_GF2K is not set
+# CONFIG_JOYSTICK_GRIP is not set
+# CONFIG_JOYSTICK_GRIP_MP is not set
+# CONFIG_JOYSTICK_GUILLEMOT is not set
+# CONFIG_JOYSTICK_INTERACT is not set
+# CONFIG_JOYSTICK_SIDEWINDER is not set
+# CONFIG_JOYSTICK_TMDC is not set
+# CONFIG_JOYSTICK_WARRIOR is not set
+# CONFIG_JOYSTICK_MAGELLAN is not set
+# CONFIG_JOYSTICK_SPACEORB is not set
+# CONFIG_JOYSTICK_SPACEBALL is not set
+# CONFIG_JOYSTICK_STINGER is not set
+# CONFIG_JOYSTICK_TWIDJOY is not set
+# CONFIG_JOYSTICK_ZHENHUA is not set
+CONFIG_JOYSTICK_DB9=m
+# CONFIG_JOYSTICK_GAMECON is not set
+# CONFIG_JOYSTICK_TURBOGRAFX is not set
+CONFIG_JOYSTICK_AMIGA=m
+# CONFIG_JOYSTICK_JOYDUMP is not set
+
+##
+## file: drivers/input/joystick/iforce/Kconfig
+##
+# CONFIG_JOYSTICK_IFORCE is not set
+# CONFIG_JOYSTICK_IFORCE_232 is not set
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+# CONFIG_KEYBOARD_ADP5588 is not set
+CONFIG_KEYBOARD_AMIGA=y
+CONFIG_KEYBOARD_ATARI=y
+CONFIG_KEYBOARD_ATKBD=y
+# CONFIG_KEYBOARD_QT2160 is not set
+# CONFIG_KEYBOARD_LM8323 is not set
+# CONFIG_KEYBOARD_MAX7359 is not set
+# CONFIG_KEYBOARD_OPENCORES is not set
+# CONFIG_KEYBOARD_STOWAWAY is not set
+
+##
+## file: drivers/input/misc/Kconfig
+##
+CONFIG_INPUT_MISC=y
+CONFIG_INPUT_M68K_BEEP=m
+# CONFIG_INPUT_ATI_REMOTE2 is not set
+# CONFIG_INPUT_KEYSPAN_REMOTE is not set
+# CONFIG_INPUT_POWERMATE is not set
+# CONFIG_INPUT_YEALINK is not set
+# CONFIG_INPUT_CM109 is not set
+CONFIG_INPUT_UINPUT=m
+# CONFIG_INPUT_PCF50633_PMU is not set
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_INPUT_MOUSE=y
+CONFIG_MOUSE_PS2=m
+# CONFIG_MOUSE_PS2_LIFEBOOK is not set
+# CONFIG_MOUSE_PS2_ELANTECH is not set
+# CONFIG_MOUSE_PS2_SENTELIC is not set
+# CONFIG_MOUSE_PS2_TOUCHKIT is not set
+# CONFIG_MOUSE_PS2_OLPC is not set
+CONFIG_MOUSE_SERIAL=m
+# CONFIG_MOUSE_INPORT is not set
+# CONFIG_MOUSE_LOGIBM is not set
+# CONFIG_MOUSE_PC110PAD is not set
+CONFIG_MOUSE_AMIGA=m
+CONFIG_MOUSE_ATARI=m
+# CONFIG_MOUSE_SYNAPTICS_I2C is not set
+# CONFIG_MOUSE_SYNAPTICS_USB is not set
+
+##
+## file: drivers/input/serio/Kconfig
+##
+CONFIG_SERIO=y
+CONFIG_SERIO_SERPORT=y
+CONFIG_SERIO_Q40KBD=y
+CONFIG_SERIO_LIBPS2=y
+# CONFIG_SERIO_ALTERA_PS2 is not set
+
+##
+## file: drivers/input/tablet/Kconfig
+##
+# CONFIG_INPUT_TABLET is not set
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+# CONFIG_INPUT_TOUCHSCREEN is not set
+
+##
+## file: drivers/iommu/Kconfig
+##
+# CONFIG_IOMMU_SUPPORT is not set
+
+##
+## file: drivers/leds/Kconfig
+##
+# CONFIG_NEW_LEDS is not set
+
+##
+## file: drivers/macintosh/Kconfig
+##
+CONFIG_ADB=y
+CONFIG_ADB_MACII=y
+#. switched on for the benefit of IIfx, Q900, Q950
+CONFIG_ADB_IOP=y
+CONFIG_ADB_CUDA=y
+CONFIG_ADB_PMU=y
+CONFIG_INPUT_ADBHID=y
+CONFIG_MAC_EMUMOUSEBTN=m
+
+##
+## file: drivers/media/Kconfig
+##
+# CONFIG_MEDIA_SUPPORT is not set
+
+##
+## file: drivers/memstick/Kconfig
+##
+# CONFIG_MEMSTICK is not set
+
+##
+## file: drivers/mfd/Kconfig
+##
+# CONFIG_HTC_PASIC3 is not set
+# CONFIG_MFD_SM501 is not set
+
+##
+## file: drivers/misc/Kconfig
+##
+# CONFIG_ENCLOSURE_SERVICES is not set
+
+##
+## file: drivers/misc/c2port/Kconfig
+##
+# CONFIG_C2PORT is not set
+
+##
+## file: drivers/misc/eeprom/Kconfig
+##
+# CONFIG_EEPROM_93CX6 is not set
+
+##
+## file: drivers/mmc/Kconfig
+##
+# CONFIG_MMC is not set
+
+##
+## file: drivers/mtd/Kconfig
+##
+# CONFIG_MTD is not set
+
+##
+## file: drivers/net/appletalk/Kconfig
+##
+CONFIG_DEV_APPLETALK=m
+
+##
+## file: drivers/net/arcnet/Kconfig
+##
+# CONFIG_ARCNET is not set
+
+##
+## file: drivers/net/ethernet/Kconfig
+##
+# CONFIG_DNET is not set
+# CONFIG_ETHOC is not set
+
+##
+## file: drivers/net/ethernet/8390/Kconfig
+##
+CONFIG_XSURF100=m
+CONFIG_HYDRA=m
+CONFIG_MAC8390=m
+CONFIG_NE2000=m
+CONFIG_APNE=m
+CONFIG_ZORRO8390=m
+
+##
+## file: drivers/net/ethernet/amd/Kconfig
+##
+CONFIG_A2065=m
+CONFIG_ARIADNE=m
+CONFIG_ATARILANCE=m
+CONFIG_MVME147_NET=m
+
+##
+## file: drivers/net/ethernet/apple/Kconfig
+##
+CONFIG_MACMACE=y
+
+##
+## file: drivers/net/ethernet/cirrus/Kconfig
+##
+CONFIG_MAC89x0=m
+
+##
+## file: drivers/net/ethernet/i825xx/Kconfig
+##
+CONFIG_BVME6000_NET=m
+CONFIG_MVME16x_NET=m
+
+##
+## file: drivers/net/ethernet/micrel/Kconfig
+##
+# CONFIG_KS8851_MLL is not set
+
+##
+## file: drivers/net/ethernet/natsemi/Kconfig
+##
+CONFIG_MACSONIC=m
+
+##
+## file: drivers/net/ethernet/smsc/Kconfig
+##
+CONFIG_SMC91X=m
+
+##
+## file: drivers/net/ethernet/wiznet/Kconfig
+##
+# CONFIG_WIZNET_W5100 is not set
+# CONFIG_WIZNET_W5300 is not set
+
+##
+## file: drivers/net/plip/Kconfig
+##
+CONFIG_PLIP=m
+
+##
+## file: drivers/net/wan/Kconfig
+##
+# CONFIG_WAN is not set
+
+##
+## file: drivers/net/wireless/Kconfig
+##
+# CONFIG_WLAN is not set
+
+##
+## file: drivers/parport/Kconfig
+##
+# CONFIG_PARPORT_PC is not set
+CONFIG_PARPORT_AMIGA=m
+CONFIG_PARPORT_MFC3=m
+CONFIG_PARPORT_ATARI=m
+
+##
+## file: drivers/pnp/Kconfig
+##
+# CONFIG_PNP is not set
+
+##
+## file: drivers/power/supply/Kconfig
+##
+# CONFIG_POWER_SUPPLY is not set
+
+##
+## file: drivers/ptp/Kconfig
+##
+# CONFIG_PTP_1588_CLOCK is not set
+
+##
+## file: drivers/rtc/Kconfig
+##
+# CONFIG_RTC_DRV_DS1286 is not set
+# CONFIG_RTC_DRV_DS1511 is not set
+# CONFIG_RTC_DRV_DS1553 is not set
+# CONFIG_RTC_DRV_DS1742 is not set
+# CONFIG_RTC_DRV_STK17TA8 is not set
+# CONFIG_RTC_DRV_M48T86 is not set
+# CONFIG_RTC_DRV_M48T35 is not set
+# CONFIG_RTC_DRV_M48T59 is not set
+# CONFIG_RTC_DRV_MSM6242 is not set
+# CONFIG_RTC_DRV_BQ4802 is not set
+CONFIG_RTC_DRV_RP5C01=y
+# CONFIG_RTC_DRV_V3020 is not set
+# CONFIG_RTC_DRV_WM831X is not set
+# CONFIG_RTC_DRV_WM8350 is not set
+CONFIG_RTC_DRV_GENERIC=y
+
+##
+## file: drivers/scsi/Kconfig
+##
+#. for MVME147_SCSI that is not tristate
+CONFIG_SCSI=y
+CONFIG_SCSI_SPI_ATTRS=m
+# CONFIG_SCSI_FC_ATTRS is not set
+# CONFIG_SCSI_AHA152X is not set
+# CONFIG_SCSI_ADVANSYS is not set
+# CONFIG_LIBFC is not set
+CONFIG_A3000_SCSI=m
+CONFIG_A2091_SCSI=m
+CONFIG_GVP11_SCSI=m
+CONFIG_SCSI_A4000T=m
+CONFIG_SCSI_ZORRO7XX=m
+CONFIG_SCSI_ZORRO_ESP=m
+CONFIG_ATARI_SCSI=m
+CONFIG_MAC_SCSI=m
+CONFIG_SCSI_MAC_ESP=m
+CONFIG_MVME147_SCSI=y
+CONFIG_MVME16x_SCSI=m
+CONFIG_BVME6000_SCSI=m
+
+##
+## file: drivers/scsi/ufs/Kconfig
+##
+# CONFIG_SCSI_UFSHCD is not set
+
+##
+## file: drivers/spi/Kconfig
+##
+# CONFIG_SPI is not set
+
+##
+## file: drivers/ssb/Kconfig
+##
+# CONFIG_SSB is not set
+
+##
+## file: drivers/staging/Kconfig
+##
+# CONFIG_STAGING is not set
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_VT=y
+CONFIG_VT_CONSOLE=y
+# CONFIG_SERIAL_NONSTANDARD is not set
+# CONFIG_N_GSM is not set
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_PMACZILOG=y
+CONFIG_SERIAL_PMACZILOG_TTYS=y
+CONFIG_SERIAL_PMACZILOG_CONSOLE=y
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=m
+CONFIG_SERIAL_8250_CS=m
+CONFIG_SERIAL_8250_NR_UARTS=4
+CONFIG_SERIAL_8250_RUNTIME_UARTS=4
+# CONFIG_SERIAL_8250_EXTENDED is not set
+
+##
+## file: drivers/usb/Kconfig
+##
+# CONFIG_USB_SUPPORT is not set
+
+##
+## file: drivers/video/backlight/Kconfig
+##
+# CONFIG_LCD_CLASS_DEVICE is not set
+# CONFIG_BACKLIGHT_CLASS_DEVICE is not set
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+# CONFIG_FIRMWARE_EDID is not set
+CONFIG_FB_FOREIGN_ENDIAN=y
+## choice: Choice endianness support
+CONFIG_FB_BOTH_ENDIAN=y
+## end choice
+# CONFIG_FB_MODE_HELPERS is not set
+# CONFIG_FB_TILEBLITTING is not set
+CONFIG_FB_CIRRUS=y
+CONFIG_FB_PM2=m
+CONFIG_FB_AMIGA=y
+CONFIG_FB_AMIGA_OCS=y
+CONFIG_FB_AMIGA_ECS=y
+CONFIG_FB_AMIGA_AGA=y
+CONFIG_FB_FM2=y
+CONFIG_FB_ATARI=y
+CONFIG_FB_VALKYRIE=y
+CONFIG_FB_MAC=y
+# CONFIG_FB_UVESA is not set
+# CONFIG_FB_S1D13XXX is not set
+CONFIG_FB_ATY=y
+# CONFIG_FB_ATY_BACKLIGHT is not set
+# CONFIG_FB_VIRTUAL is not set
+# CONFIG_FB_METRONOME is not set
+
+##
+## file: drivers/video/logo/Kconfig
+##
+# CONFIG_LOGO is not set
+
+##
+## file: drivers/w1/Kconfig
+##
+# CONFIG_W1 is not set
+
+##
+## file: drivers/watchdog/Kconfig
+##
+# CONFIG_WATCHDOG is not set
+
+##
+## file: drivers/zorro/Kconfig
+##
+CONFIG_ZORRO_NAMES=y
+
+##
+## file: fs/Kconfig.binfmt
+##
+CONFIG_BINFMT_ELF=y
+CONFIG_BINFMT_MISC=m
+
+##
+## file: fs/adfs/Kconfig
+##
+# CONFIG_ADFS_FS is not set
+
+##
+## file: fs/afs/Kconfig
+##
+# CONFIG_AFS_FS is not set
+
+##
+## file: fs/befs/Kconfig
+##
+# CONFIG_BEFS_FS is not set
+
+##
+## file: fs/bfs/Kconfig
+##
+# CONFIG_BFS_FS is not set
+
+##
+## file: fs/ceph/Kconfig
+##
+# CONFIG_CEPH_FS is not set
+
+##
+## file: fs/dlm/Kconfig
+##
+# CONFIG_DLM is not set
+
+##
+## file: fs/efs/Kconfig
+##
+# CONFIG_EFS_FS is not set
+
+##
+## file: fs/f2fs/Kconfig
+##
+# CONFIG_F2FS_FS is not set
+
+##
+## file: fs/freevxfs/Kconfig
+##
+# CONFIG_VXFS_FS is not set
+
+##
+## file: fs/gfs2/Kconfig
+##
+# CONFIG_GFS2_FS is not set
+
+##
+## file: fs/jfs/Kconfig
+##
+# CONFIG_JFS_FS is not set
+
+##
+## file: fs/ocfs2/Kconfig
+##
+# CONFIG_OCFS2_FS is not set
+
+##
+## file: fs/omfs/Kconfig
+##
+# CONFIG_OMFS_FS is not set
+
+##
+## file: fs/qnx4/Kconfig
+##
+# CONFIG_QNX4FS_FS is not set
+
+##
+## file: fs/reiserfs/Kconfig
+##
+# CONFIG_REISERFS_FS_SECURITY is not set
+
+##
+## file: fs/ubifs/Kconfig
+##
+# CONFIG_UBIFS_FS is not set
+
+##
+## file: init/Kconfig
+##
+CONFIG_USELIB=y
+# CONFIG_AUDIT is not set
+# CONFIG_IKCONFIG is not set
+CONFIG_LOG_BUF_SHIFT=16
+# CONFIG_SCHED_AUTOGROUP is not set
+## choice: Compiler optimization level
+CONFIG_CC_OPTIMIZE_FOR_SIZE=y
+## end choice
+CONFIG_SGETMASK_SYSCALL=y
+CONFIG_SYSFS_SYSCALL=y
+CONFIG_COMPAT_BRK=y
+# CONFIG_MODULE_SIG is not set
+
+##
+## file: kernel/time/Kconfig
+##
+## choice: Timer tick handling
+CONFIG_HZ_PERIODIC=y
+# CONFIG_NO_HZ_IDLE is not set
+# CONFIG_NO_HZ_FULL is not set
+## end choice
+# CONFIG_NO_HZ is not set
+# CONFIG_HIGH_RES_TIMERS is not set
+
+##
+## file: lib/Kconfig.debug
+##
+# CONFIG_FRAME_POINTER is not set
+# CONFIG_DEBUG_FS is not set
+# CONFIG_SCHED_DEBUG is not set
+
+##
+## file: lib/fonts/Kconfig
+##
+CONFIG_FONT_6x11=y
+CONFIG_FONT_PEARL_8x8=y
+# CONFIG_FONT_TER16x32 is not set
+
+##
+## file: mm/Kconfig
+##
+# CONFIG_COMPACTION is not set
+# CONFIG_MIGRATION is not set
+# CONFIG_KSM is not set
+
+##
+## file: net/Kconfig
+##
+# CONFIG_WIRELESS is not set
+
+##
+## file: net/atm/Kconfig
+##
+# CONFIG_ATM is not set
+
+##
+## file: net/ax25/Kconfig
+##
+# CONFIG_HAMRADIO is not set
+
+##
+## file: net/batman-adv/Kconfig
+##
+# CONFIG_BATMAN_ADV is not set
+
+##
+## file: net/can/Kconfig
+##
+# CONFIG_CAN is not set
+
+##
+## file: net/ceph/Kconfig
+##
+# CONFIG_CEPH_LIB is not set
+
+##
+## file: net/dcb/Kconfig
+##
+# CONFIG_DCB is not set
+
+##
+## file: net/ieee802154/Kconfig
+##
+# CONFIG_IEEE802154 is not set
+
+##
+## file: net/ipv4/Kconfig
+##
+# CONFIG_IP_ADVANCED_ROUTER is not set
+# CONFIG_TCP_MD5SIG is not set
+
+##
+## file: net/ipv6/Kconfig
+##
+CONFIG_IPV6=m
+
+##
+## file: net/lapb/Kconfig
+##
+# CONFIG_LAPB is not set
+
+##
+## file: net/llc/Kconfig
+##
+# CONFIG_LLC2 is not set
+
+##
+## file: net/mac80211/Kconfig
+##
+# CONFIG_MAC80211 is not set
+
+##
+## file: net/nfc/Kconfig
+##
+# CONFIG_NFC is not set
+
+##
+## file: net/phonet/Kconfig
+##
+# CONFIG_PHONET is not set
+
+##
+## file: net/rds/Kconfig
+##
+# CONFIG_RDS is not set
+
+##
+## file: net/rfkill/Kconfig
+##
+# CONFIG_RFKILL is not set
+
+##
+## file: net/rxrpc/Kconfig
+##
+# CONFIG_AF_RXRPC is not set
+
+##
+## file: net/sctp/Kconfig
+##
+# CONFIG_IP_SCTP is not set
+
+##
+## file: net/tipc/Kconfig
+##
+# CONFIG_TIPC is not set
+
+##
+## file: net/wireless/Kconfig
+##
+# CONFIG_CFG80211 is not set
+
+##
+## file: security/Kconfig
+##
+# CONFIG_SECURITY is not set
+# CONFIG_SECURITYFS is not set
+
+##
+## file: sound/Kconfig
+##
+# CONFIG_SND is not set
+
+##
+## file: sound/oss/dmasound/Kconfig
+##
+CONFIG_DMASOUND_ATARI=m
+CONFIG_DMASOUND_PAULA=m
+CONFIG_DMASOUND_Q40=m
diff --git a/debian/config/m68k/defines b/debian/config/m68k/defines
new file mode 100644
index 000000000000..2f32891751c3
--- /dev/null
+++ b/debian/config/m68k/defines
@@ -0,0 +1,16 @@
+[base]
+cflags: -ffreestanding
+flavours:
+ m68k
+default-flavour: m68k
+kernel-arch: m68k
+
+[build]
+image-file: vmlinux
+
+[image]
+suggests: vmelilo, fdutils
+install-stem: vmlinux
+
+[m68k_description]
+hardware: Motorola MC68020+ family
diff --git a/debian/config/mips/config b/debian/config/mips/config
new file mode 100644
index 000000000000..1d92685267c0
--- /dev/null
+++ b/debian/config/mips/config
@@ -0,0 +1,7 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: Endianness selection
+CONFIG_CPU_BIG_ENDIAN=y
+# CONFIG_CPU_LITTLE_ENDIAN is not set
+## end choice
diff --git a/debian/config/mips/defines b/debian/config/mips/defines
new file mode 100644
index 000000000000..20b6bc19bb47
--- /dev/null
+++ b/debian/config/mips/defines
@@ -0,0 +1,41 @@
+[base]
+flavours:
+ 4kc-malta
+ 5kc-malta
+ octeon
+kernel-arch: mips
+
+[build]
+image-file: vmlinuz
+
+[image]
+install-stem: vmlinuz
+
+[4kc-malta_description]
+hardware: MIPS Malta
+hardware-long: MIPS Malta boards
+
+[4kc-malta_image]
+configs:
+ kernelarch-mips/config.malta
+ kernelarch-mips/config.mips32r2
+
+[5kc-malta_description]
+hardware: MIPS Malta (64-bit)
+hardware-long: MIPS Malta boards (64-bit)
+
+[5kc-malta_image]
+configs:
+ kernelarch-mips/config.malta
+ kernelarch-mips/config.mips64r2
+
+[octeon_description]
+hardware: Octeon
+hardware-long: Cavium Networks Octeon
+
+[octeon_build]
+image-file: vmlinux
+
+[octeon_image]
+install-stem: vmlinux
+configs: kernelarch-mips/config.octeon
diff --git a/debian/config/mips64/config b/debian/config/mips64/config
new file mode 100644
index 000000000000..1d92685267c0
--- /dev/null
+++ b/debian/config/mips64/config
@@ -0,0 +1,7 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: Endianness selection
+CONFIG_CPU_BIG_ENDIAN=y
+# CONFIG_CPU_LITTLE_ENDIAN is not set
+## end choice
diff --git a/debian/config/mips64/defines b/debian/config/mips64/defines
new file mode 100644
index 000000000000..3a99fe9fff73
--- /dev/null
+++ b/debian/config/mips64/defines
@@ -0,0 +1,31 @@
+[base]
+flavours:
+ 5kc-malta
+ octeon
+kernel-arch: mips
+
+[build]
+image-file: vmlinuz
+
+[image]
+install-stem: vmlinuz
+
+[5kc-malta_description]
+hardware: MIPS Malta
+hardware-long: MIPS Malta boards
+
+[5kc-malta_image]
+configs:
+ kernelarch-mips/config.malta
+ kernelarch-mips/config.mips64r2
+
+[octeon_description]
+hardware: Octeon
+hardware-long: Cavium Networks Octeon
+
+[octeon_build]
+image-file: vmlinux
+
+[octeon_image]
+install-stem: vmlinux
+configs: kernelarch-mips/config.octeon
diff --git a/debian/config/mips64el/config b/debian/config/mips64el/config
new file mode 100644
index 000000000000..9f3326ab0687
--- /dev/null
+++ b/debian/config/mips64el/config
@@ -0,0 +1,11 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: Endianness selection
+# CONFIG_CPU_BIG_ENDIAN is not set
+CONFIG_CPU_LITTLE_ENDIAN=y
+## end choice
+## choice: CPU type
+# CONFIG_CPU_MIPS64_R1 is not set
+CONFIG_CPU_MIPS64_R2=y
+## end choice
diff --git a/debian/config/mips64el/defines b/debian/config/mips64el/defines
new file mode 100644
index 000000000000..7e126c1875c5
--- /dev/null
+++ b/debian/config/mips64el/defines
@@ -0,0 +1,40 @@
+[base]
+flavours:
+ 5kc-malta
+ loongson-3
+ octeon
+kernel-arch: mips
+
+[build]
+image-file: vmlinuz
+
+[image]
+install-stem: vmlinuz
+
+[5kc-malta_description]
+hardware: MIPS Malta
+hardware-long: MIPS Malta boards
+
+[5kc-malta_image]
+configs:
+ kernelarch-mips/config.malta
+ kernelarch-mips/config.mips64r2
+
+[loongson-3_description]
+hardware: Loongson 3A/3B
+hardware-long: Loongson 3A or 3B based systems (e.g. from Loongson or Lemote)
+
+[loongson-3_image]
+recommends: pmon-update
+configs: kernelarch-mips/config.loongson-3
+
+[octeon_description]
+hardware: Octeon
+hardware-long: Cavium Networks Octeon
+
+[octeon_build]
+image-file: vmlinux
+
+[octeon_image]
+install-stem: vmlinux
+configs: kernelarch-mips/config.octeon
diff --git a/debian/config/mips64r6/config b/debian/config/mips64r6/config
new file mode 100644
index 000000000000..1d92685267c0
--- /dev/null
+++ b/debian/config/mips64r6/config
@@ -0,0 +1,7 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: Endianness selection
+CONFIG_CPU_BIG_ENDIAN=y
+# CONFIG_CPU_LITTLE_ENDIAN is not set
+## end choice
diff --git a/debian/config/mips64r6/defines b/debian/config/mips64r6/defines
new file mode 100644
index 000000000000..9a34fb3f8bef
--- /dev/null
+++ b/debian/config/mips64r6/defines
@@ -0,0 +1,21 @@
+[base]
+flavours:
+ mips64r6
+default-flavour: mips64r6
+kernel-arch: mips
+
+[build]
+image-file: vmlinux
+
+[image]
+install-stem: vmlinux
+
+[mips64r6_description]
+hardware: MIPS R6 (64 bit, big endian)
+hardware-long: MIPS R6 (64 bit, big endian)
+
+[mips64r6_image]
+configs:
+ kernelarch-mips/config.boston
+ kernelarch-mips/config.mips64r6
+
diff --git a/debian/config/mips64r6el/config b/debian/config/mips64r6el/config
new file mode 100644
index 000000000000..bf12a2398d7d
--- /dev/null
+++ b/debian/config/mips64r6el/config
@@ -0,0 +1,7 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: Endianness selection
+# CONFIG_CPU_BIG_ENDIAN is not set
+CONFIG_CPU_LITTLE_ENDIAN=y
+## end choice
diff --git a/debian/config/mips64r6el/defines b/debian/config/mips64r6el/defines
new file mode 100644
index 000000000000..80ae637e9282
--- /dev/null
+++ b/debian/config/mips64r6el/defines
@@ -0,0 +1,21 @@
+[base]
+flavours:
+ mips64r6el
+default-flavour: mips64r6el
+kernel-arch: mips
+
+[build]
+image-file: vmlinux
+
+[image]
+install-stem: vmlinux
+
+[mips64r6el_description]
+hardware: MIPS R6 (64 bit, little endian)
+hardware-long: MIPS R6 (64 bit, little endian)
+
+[mips64r6el_image]
+configs:
+ kernelarch-mips/config.boston
+ kernelarch-mips/config.mips64r6
+
diff --git a/debian/config/mipsel/config b/debian/config/mipsel/config
new file mode 100644
index 000000000000..bf12a2398d7d
--- /dev/null
+++ b/debian/config/mipsel/config
@@ -0,0 +1,7 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: Endianness selection
+# CONFIG_CPU_BIG_ENDIAN is not set
+CONFIG_CPU_LITTLE_ENDIAN=y
+## end choice
diff --git a/debian/config/mipsel/defines b/debian/config/mipsel/defines
new file mode 100644
index 000000000000..2e2a966a3289
--- /dev/null
+++ b/debian/config/mipsel/defines
@@ -0,0 +1,50 @@
+[base]
+flavours:
+ 4kc-malta
+ 5kc-malta
+ loongson-3
+ octeon
+kernel-arch: mips
+
+[build]
+image-file: vmlinuz
+
+[image]
+install-stem: vmlinuz
+
+[4kc-malta_description]
+hardware: MIPS Malta
+hardware-long: MIPS Malta boards
+
+[4kc-malta_image]
+configs:
+ kernelarch-mips/config.malta
+ kernelarch-mips/config.mips32r2
+
+[5kc-malta_description]
+hardware: MIPS Malta (64-bit)
+hardware-long: MIPS Malta boards (64-bit)
+
+[5kc-malta_image]
+configs:
+ kernelarch-mips/config.malta
+ kernelarch-mips/config.mips64r2
+
+[loongson-3_description]
+hardware: Loongson 3A/3B
+hardware-long: Loongson 3A or 3B based systems (e.g. from Loongson or Lemote)
+
+[loongson-3_image]
+recommends: pmon-update
+configs: kernelarch-mips/config.loongson-3
+
+[octeon_description]
+hardware: Octeon
+hardware-long: Cavium Networks Octeon
+
+[octeon_build]
+image-file: vmlinux
+
+[octeon_image]
+install-stem: vmlinux
+configs: kernelarch-mips/config.octeon
diff --git a/debian/config/mipsn32/defines b/debian/config/mipsn32/defines
new file mode 100644
index 000000000000..fa9b8af89ef7
--- /dev/null
+++ b/debian/config/mipsn32/defines
@@ -0,0 +1,4 @@
+[base]
+kernel-arch: mips
+featuresets:
+# empty; mipsn32 must be part of a multiarch installation with a mips64 kernel
diff --git a/debian/config/mipsn32el/defines b/debian/config/mipsn32el/defines
new file mode 100644
index 000000000000..57d6f4922407
--- /dev/null
+++ b/debian/config/mipsn32el/defines
@@ -0,0 +1,4 @@
+[base]
+kernel-arch: mips
+featuresets:
+# empty; mipsn32el must be part of a multiarch installation with a mips64el kernel
diff --git a/debian/config/mipsn32r6/defines b/debian/config/mipsn32r6/defines
new file mode 100644
index 000000000000..2ba5f42bef1a
--- /dev/null
+++ b/debian/config/mipsn32r6/defines
@@ -0,0 +1,4 @@
+[base]
+kernel-arch: mips
+featuresets:
+# empty; mipsn32r6 must be part of a multiarch installation with a mips64r6 kernel
diff --git a/debian/config/mipsn32r6el/defines b/debian/config/mipsn32r6el/defines
new file mode 100644
index 000000000000..f4c8a96d864d
--- /dev/null
+++ b/debian/config/mipsn32r6el/defines
@@ -0,0 +1,4 @@
+[base]
+kernel-arch: mips
+featuresets:
+# empty; mipsn32r6el must be part of a multiarch installation with a mips64r6el kernel
diff --git a/debian/config/mipsr6/config b/debian/config/mipsr6/config
new file mode 100644
index 000000000000..1d92685267c0
--- /dev/null
+++ b/debian/config/mipsr6/config
@@ -0,0 +1,7 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: Endianness selection
+CONFIG_CPU_BIG_ENDIAN=y
+# CONFIG_CPU_LITTLE_ENDIAN is not set
+## end choice
diff --git a/debian/config/mipsr6/defines b/debian/config/mipsr6/defines
new file mode 100644
index 000000000000..f899d23385fa
--- /dev/null
+++ b/debian/config/mipsr6/defines
@@ -0,0 +1,31 @@
+[base]
+flavours:
+ mips32r6
+ mips64r6
+default-flavour: mips32r6
+kernel-arch: mips
+
+[build]
+image-file: vmlinux
+
+[image]
+install-stem: vmlinux
+
+[mips32r6_description]
+hardware: MIPS R6 (32 bit, big endian)
+hardware-long: MIPS R6 (32 bit, big endian)
+
+[mips32r6_image]
+configs:
+ kernelarch-mips/config.boston
+ kernelarch-mips/config.mips32r6
+
+[mips64r6_description]
+hardware: MIPS R6 (64 bit, big endian)
+hardware-long: MIPS R6 (64 bit, big endian)
+
+[mips64r6_image]
+configs:
+ kernelarch-mips/config.boston
+ kernelarch-mips/config.mips64r6
+
diff --git a/debian/config/mipsr6el/config b/debian/config/mipsr6el/config
new file mode 100644
index 000000000000..bf12a2398d7d
--- /dev/null
+++ b/debian/config/mipsr6el/config
@@ -0,0 +1,7 @@
+##
+## file: arch/mips/Kconfig
+##
+## choice: Endianness selection
+# CONFIG_CPU_BIG_ENDIAN is not set
+CONFIG_CPU_LITTLE_ENDIAN=y
+## end choice
diff --git a/debian/config/mipsr6el/defines b/debian/config/mipsr6el/defines
new file mode 100644
index 000000000000..bb9039b3a61c
--- /dev/null
+++ b/debian/config/mipsr6el/defines
@@ -0,0 +1,31 @@
+[base]
+flavours:
+ mips32r6el
+ mips64r6el
+default-flavour: mips32r6el
+kernel-arch: mips
+
+[build]
+image-file: vmlinux
+
+[image]
+install-stem: vmlinux
+
+[mips32r6el_description]
+hardware: MIPS R6 (32 bit, little endian)
+hardware-long: MIPS R6 (32 bit, little endian)
+
+[mips32r6el_image]
+configs:
+ kernelarch-mips/config.boston
+ kernelarch-mips/config.mips32r6
+
+[mips64r6el_description]
+hardware: MIPS R6 (64 bit, little endian)
+hardware-long: MIPS R6 (64 bit, little endian)
+
+[mips64r6el_image]
+configs:
+ kernelarch-mips/config.boston
+ kernelarch-mips/config.mips64r6
+
diff --git a/debian/config/powerpc/config.powerpc b/debian/config/powerpc/config.powerpc
new file mode 100644
index 000000000000..9dc3c24dfce0
--- /dev/null
+++ b/debian/config/powerpc/config.powerpc
@@ -0,0 +1,110 @@
+##
+## file: arch/powerpc/Kconfig
+##
+CONFIG_HIGHMEM=y
+# CONFIG_ISA is not set
+
+##
+## file: arch/powerpc/platforms/Kconfig.cputype
+##
+# CONFIG_PPC64 is not set
+## choice: Processor Type
+# CONFIG_PPC_85xx is not set
+# CONFIG_PPC_8xx is not set
+# CONFIG_40x is not set
+# CONFIG_44x is not set
+## end choice
+CONFIG_ALTIVEC=y
+# CONFIG_SMP is not set
+
+##
+## file: arch/powerpc/platforms/512x/Kconfig
+##
+# CONFIG_MPC5121_ADS is not set
+
+##
+## file: arch/powerpc/platforms/52xx/Kconfig
+##
+CONFIG_PPC_MPC52xx=y
+# CONFIG_PPC_MPC5200_SIMPLE is not set
+CONFIG_PPC_EFIKA=y
+# CONFIG_PPC_LITE5200 is not set
+CONFIG_PPC_MPC5200_BUGFIX=y
+
+##
+## file: arch/powerpc/platforms/chrp/Kconfig
+##
+CONFIG_PPC_CHRP=y
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_PATA_MPC52xx=m
+
+##
+## file: drivers/block/Kconfig
+##
+CONFIG_MAC_FLOPPY=y
+
+##
+## file: drivers/dma/Kconfig
+##
+CONFIG_DMADEVICES=y
+
+##
+## file: drivers/dma/bestcomm/Kconfig
+##
+CONFIG_PPC_BESTCOMM=m
+
+##
+## file: drivers/macintosh/Kconfig
+##
+CONFIG_SENSORS_AMS=m
+CONFIG_SENSORS_AMS_PMU=y
+CONFIG_SENSORS_AMS_I2C=y
+
+##
+## file: drivers/net/ethernet/freescale/Kconfig
+##
+CONFIG_FEC_MPC52xx=m
+CONFIG_FEC_MPC52xx_MDIO=y
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI_MPC52xx_PSC=m
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_MPC52xx=y
+CONFIG_SERIAL_MPC52xx_CONSOLE=y
+CONFIG_SERIAL_MPC52xx_CONSOLE_BAUD=115200
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_CONTROL=y
+CONFIG_FB_PLATINUM=y
+CONFIG_FB_VALKYRIE=y
+CONFIG_FB_CT65550=y
+CONFIG_FB_IMSTT=y
+CONFIG_FB_MATROX=y
+CONFIG_FB_ATY128=y
+CONFIG_FB_ATY=y
+CONFIG_FB_SIS=y
+CONFIG_FB_3DFX=y
+CONFIG_FB_VOODOO1=y
+
+##
+## file: init/Kconfig
+##
+CONFIG_SYSFS_SYSCALL=y
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+CONFIG_FLATMEM_MANUAL=y
+# CONFIG_SPARSEMEM_MANUAL is not set
+## end choice
diff --git a/debian/config/powerpc/config.powerpc-smp b/debian/config/powerpc/config.powerpc-smp
new file mode 100644
index 000000000000..c49683792853
--- /dev/null
+++ b/debian/config/powerpc/config.powerpc-smp
@@ -0,0 +1,5 @@
+##
+## file: arch/powerpc/platforms/Kconfig.cputype
+##
+CONFIG_SMP=y
+CONFIG_NR_CPUS=4
diff --git a/debian/config/powerpc/defines b/debian/config/powerpc/defines
new file mode 100644
index 000000000000..31d6d60fda77
--- /dev/null
+++ b/debian/config/powerpc/defines
@@ -0,0 +1,30 @@
+[base]
+flavours:
+ powerpc
+ powerpc-smp
+ powerpc64
+kernel-arch: powerpc
+
+[build]
+image-file: vmlinux
+
+[image]
+configs:
+bootloaders: grub-ieee1275
+suggests: mkvmlinuz
+install-stem: vmlinux
+
+[powerpc_description]
+hardware: uniprocessor 32-bit PowerPC
+
+[powerpc-smp_description]
+hardware: multiprocessor 32-bit PowerPC
+
+[powerpc-smp_image]
+configs: powerpc/config.powerpc powerpc/config.powerpc-smp
+
+[powerpc64_description]
+hardware: 64-bit PowerPC
+
+[powerpc64_image]
+configs: kernelarch-powerpc/config-arch-64 kernelarch-powerpc/config-arch-64-be
diff --git a/debian/config/ppc64/defines b/debian/config/ppc64/defines
new file mode 100644
index 000000000000..4865e03341d0
--- /dev/null
+++ b/debian/config/ppc64/defines
@@ -0,0 +1,20 @@
+[base]
+flavours:
+ powerpc64
+default-flavour: powerpc64
+kernel-arch: powerpc
+
+[build]
+image-file: vmlinux
+
+[image]
+configs:
+bootloaders: grub-ieee1275
+suggests: mkvmlinuz
+install-stem: vmlinux
+
+[powerpc64_description]
+hardware: 64-bit PowerPC
+
+[powerpc64_image]
+configs: kernelarch-powerpc/config-arch-64 kernelarch-powerpc/config-arch-64-be
diff --git a/debian/config/ppc64el/defines b/debian/config/ppc64el/defines
new file mode 100644
index 000000000000..8907d506749a
--- /dev/null
+++ b/debian/config/ppc64el/defines
@@ -0,0 +1,20 @@
+[base]
+flavours:
+ powerpc64le
+default-flavour: powerpc64le
+kernel-arch: powerpc
+
+[build]
+image-file: vmlinux
+
+[image]
+configs:
+bootloaders: grub-ieee1275
+suggests: mkvmlinuz
+install-stem: vmlinux
+
+[powerpc64le_description]
+hardware: Little-endian 64-bit PowerPC
+
+[powerpc64le_image]
+configs: kernelarch-powerpc/config-arch-64 kernelarch-powerpc/config-arch-64-le
diff --git a/debian/config/riscv64/config b/debian/config/riscv64/config
new file mode 100644
index 000000000000..981f1b40f762
--- /dev/null
+++ b/debian/config/riscv64/config
@@ -0,0 +1,136 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_SECCOMP=y
+
+##
+## file: arch/riscv/Kconfig
+##
+CONFIG_SMP=y
+CONFIG_NUMA=y
+CONFIG_KEXEC=y
+
+##
+## file: arch/riscv/Kconfig.socs
+##
+CONFIG_SOC_MICROCHIP_POLARFIRE=y
+CONFIG_SOC_SIFIVE=y
+CONFIG_SOC_VIRT=y
+
+##
+## file: arch/riscv/kvm/Kconfig
+##
+CONFIG_VIRTUALIZATION=y
+CONFIG_KVM=m
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_SATA_AHCI_PLATFORM=m
+
+##
+## file: drivers/gpio/Kconfig
+##
+CONFIG_GPIOLIB=y
+CONFIG_GPIO_SIFIVE=y
+
+##
+## file: drivers/gpu/drm/Kconfig
+##
+CONFIG_DRM=m
+CONFIG_DRM_RADEON=m
+
+##
+## file: drivers/hwmon/Kconfig
+##
+CONFIG_SENSORS_LM90=m
+
+##
+## file: drivers/mmc/Kconfig
+##
+CONFIG_MMC=m
+
+##
+## file: drivers/mmc/host/Kconfig
+##
+CONFIG_MMC_SDHCI_PLTFM=m
+CONFIG_MMC_SDHCI_CADENCE=m
+CONFIG_MMC_SPI=m
+
+##
+## file: drivers/net/ethernet/cadence/Kconfig
+##
+CONFIG_MACB=m
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+
+##
+## file: drivers/pci/controller/Kconfig
+##
+CONFIG_PCI_HOST_GENERIC=y
+CONFIG_PCIE_XILINX=y
+CONFIG_PCIE_MICROCHIP_HOST=y
+
+##
+## file: drivers/pci/controller/dwc/Kconfig
+##
+CONFIG_PCIE_DW_PLAT_HOST=y
+CONFIG_PCIE_FU740=y
+
+##
+## file: drivers/power/reset/Kconfig
+##
+CONFIG_POWER_RESET=y
+CONFIG_POWER_RESET_GPIO=y
+CONFIG_POWER_RESET_GPIO_RESTART=y
+CONFIG_POWER_RESET_RESTART=y
+
+##
+## file: drivers/pwm/Kconfig
+##
+CONFIG_PWM=y
+CONFIG_PWM_SIFIVE=m
+
+##
+## file: drivers/soc/sifive/Kconfig
+##
+CONFIG_SIFIVE_L2=y
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI_SIFIVE=m
+
+##
+## file: drivers/tty/hvc/Kconfig
+##
+CONFIG_HVC_RISCV_SBI=y
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_EARLYCON_RISCV_SBI=y
+
+##
+## file: drivers/tty/serial/8250/Kconfig
+##
+CONFIG_SERIAL_8250=y
+CONFIG_SERIAL_8250_CONSOLE=y
+CONFIG_SERIAL_OF_PLATFORM=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB=m
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_XHCI_PLATFORM=m
+CONFIG_USB_EHCI_HCD=m
+CONFIG_USB_EHCI_HCD_PLATFORM=m
+CONFIG_USB_OHCI_HCD=m
+CONFIG_USB_OHCI_HCD_PLATFORM=m
diff --git a/debian/config/riscv64/defines b/debian/config/riscv64/defines
new file mode 100644
index 000000000000..1d5a58b7313a
--- /dev/null
+++ b/debian/config/riscv64/defines
@@ -0,0 +1,15 @@
+[base]
+kernel-arch: riscv
+featuresets:
+ none
+
+[build]
+image-file: arch/riscv/boot/Image
+vdso: true
+
+[image]
+install-stem: vmlinux
+
+[riscv64_description]
+hardware: 64-bit RISC-V platforms
+hardware-long: 64-bit RISC-V platforms
diff --git a/debian/config/riscv64/none/defines b/debian/config/riscv64/none/defines
new file mode 100644
index 000000000000..17393d9e04ec
--- /dev/null
+++ b/debian/config/riscv64/none/defines
@@ -0,0 +1,4 @@
+[base]
+flavours:
+ riscv64
+default-flavour: riscv64
diff --git a/debian/config/s390/defines b/debian/config/s390/defines
new file mode 100644
index 000000000000..5b14fa7a4ecb
--- /dev/null
+++ b/debian/config/s390/defines
@@ -0,0 +1,4 @@
+[base]
+kernel-arch: s390
+featuresets:
+# empty; s390 must be part of a multiarch installation with an s390x kernel
diff --git a/debian/config/s390x/config b/debian/config/s390x/config
new file mode 100644
index 000000000000..6a7dbfd98715
--- /dev/null
+++ b/debian/config/s390x/config
@@ -0,0 +1,222 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_SECCOMP=y
+
+##
+## file: arch/s390/Kconfig
+##
+## choice: Processor type
+CONFIG_MARCH_Z900=y
+# CONFIG_MARCH_Z990 is not set
+# CONFIG_MARCH_Z9_109 is not set
+# CONFIG_MARCH_Z10 is not set
+## end choice
+CONFIG_COMPAT=y
+CONFIG_NR_CPUS=256
+CONFIG_SCHED_TOPOLOGY=y
+CONFIG_RELOCATABLE=y
+CONFIG_RANDOMIZE_BASE=y
+CONFIG_PACK_STACK=y
+# CONFIG_CHECK_STACK is not set
+CONFIG_QDIO=y
+CONFIG_PCI_NR_FUNCTIONS=64
+CONFIG_CHSC_SCH=m
+CONFIG_SCM_BUS=y
+CONFIG_EADM_SCH=m
+CONFIG_PFAULT=y
+CONFIG_CMM=y
+CONFIG_CMM_IUCV=y
+CONFIG_APPLDATA_BASE=y
+CONFIG_APPLDATA_MEM=m
+CONFIG_APPLDATA_OS=m
+CONFIG_APPLDATA_NET_SUM=m
+CONFIG_S390_HYPFS_FS=y
+CONFIG_S390_GUEST=y
+
+##
+## file: arch/s390/kvm/Kconfig
+##
+CONFIG_VIRTUALIZATION=y
+CONFIG_KVM=m
+# CONFIG_KVM_S390_UCONTROL is not set
+
+##
+## file: block/partitions/Kconfig
+##
+CONFIG_IBM_PARTITION=y
+CONFIG_BSD_DISKLABEL=y
+
+##
+## file: drivers/block/Kconfig
+##
+# CONFIG_CDROM_PKTCDVD is not set
+
+##
+## file: drivers/crypto/Kconfig
+##
+CONFIG_ZCRYPT=m
+CONFIG_CRYPTO_SHA1_S390=m
+CONFIG_CRYPTO_SHA256_S390=m
+CONFIG_CRYPTO_SHA512_S390=m
+CONFIG_CRYPTO_DES_S390=m
+CONFIG_CRYPTO_AES_S390=m
+CONFIG_S390_PRNG=m
+
+##
+## file: drivers/iio/Kconfig
+##
+# CONFIG_IIO is not set
+
+##
+## file: drivers/input/touchscreen/Kconfig
+##
+# CONFIG_INPUT_TOUCHSCREEN is not set
+
+##
+## file: drivers/memstick/Kconfig
+##
+# CONFIG_MEMSTICK is not set
+
+##
+## file: drivers/net/appletalk/Kconfig
+##
+# CONFIG_ATALK is not set
+
+##
+## file: drivers/net/ppp/Kconfig
+##
+# CONFIG_PPP is not set
+
+##
+## file: drivers/net/slip/Kconfig
+##
+# CONFIG_SLIP is not set
+
+##
+## file: drivers/net/wan/Kconfig
+##
+# CONFIG_WAN is not set
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+# CONFIG_PCI_QUIRKS is not set
+
+##
+## file: drivers/pci/hotplug/Kconfig
+##
+CONFIG_HOTPLUG_PCI=y
+CONFIG_HOTPLUG_PCI_S390=y
+
+##
+## file: drivers/s390/block/Kconfig
+##
+CONFIG_DCSSBLK=m
+CONFIG_DASD=m
+# CONFIG_DASD_PROFILE is not set
+CONFIG_DASD_ECKD=m
+CONFIG_DASD_FBA=m
+CONFIG_DASD_DIAG=m
+# CONFIG_DASD_EER is not set
+CONFIG_SCM_BLOCK=m
+
+##
+## file: drivers/s390/char/Kconfig
+##
+CONFIG_TN3270=y
+CONFIG_TN3270_TTY=y
+CONFIG_TN3270_FS=m
+CONFIG_TN3270_CONSOLE=y
+CONFIG_TN3215=y
+CONFIG_TN3215_CONSOLE=y
+CONFIG_SCLP_TTY=y
+CONFIG_SCLP_CONSOLE=y
+CONFIG_SCLP_VT220_TTY=y
+CONFIG_SCLP_VT220_CONSOLE=y
+CONFIG_S390_TAPE=m
+CONFIG_S390_TAPE_34XX=m
+CONFIG_S390_TAPE_3590=m
+CONFIG_VMLOGRDR=m
+CONFIG_VMCP=y
+CONFIG_MONREADER=m
+CONFIG_MONWRITER=m
+CONFIG_S390_VMUR=m
+
+##
+## file: drivers/s390/net/Kconfig
+##
+CONFIG_LCS=m
+CONFIG_CTCM=m
+CONFIG_NETIUCV=m
+CONFIG_SMSGIUCV=y
+CONFIG_QETH=m
+CONFIG_QETH_L2=m
+CONFIG_QETH_L3=m
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_ZFCP=m
+
+##
+## file: drivers/tty/hvc/Kconfig
+##
+CONFIG_HVC_IUCV=y
+
+##
+## file: drivers/video/console/Kconfig
+##
+# CONFIG_FRAMEBUFFER_CONSOLE is not set
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+# CONFIG_FB is not set
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_DIAG288_WATCHDOG=m
+
+##
+## file: init/Kconfig
+##
+## choice: Cputime accounting
+CONFIG_VIRT_CPU_ACCOUNTING_NATIVE=y
+## end choice
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+# CONFIG_FLATMEM_MANUAL is not set
+CONFIG_SPARSEMEM_MANUAL=y
+## end choice
+
+##
+## file: net/atm/Kconfig
+##
+# CONFIG_ATM is not set
+
+##
+## file: net/decnet/Kconfig
+##
+# CONFIG_DECNET is not set
+
+##
+## file: net/iucv/Kconfig
+##
+CONFIG_IUCV=y
+CONFIG_AFIUCV=m
+
+##
+## file: net/lapb/Kconfig
+##
+# CONFIG_LAPB is not set
+
+##
+## file: net/llc/Kconfig
+##
+# CONFIG_LLC2 is not set
diff --git a/debian/config/s390x/defines b/debian/config/s390x/defines
new file mode 100644
index 000000000000..922bd1acaab5
--- /dev/null
+++ b/debian/config/s390x/defines
@@ -0,0 +1,19 @@
+[base]
+flavours:
+ s390x
+default-flavour: s390x
+kernel-arch: s390
+
+[build]
+image-file: arch/s390/boot/bzImage
+vdso: true
+
+[image]
+bootloaders: s390-tools
+install-stem: vmlinuz
+
+[relations]
+headers%gcc-11: linux-compiler-gcc-11-s390
+
+[s390x_description]
+hardware: IBM zSeries
diff --git a/debian/config/sh3/defines b/debian/config/sh3/defines
new file mode 100644
index 000000000000..71cbe648c4d0
--- /dev/null
+++ b/debian/config/sh3/defines
@@ -0,0 +1,4 @@
+[base]
+kernel-arch: sh
+featuresets:
+# empty; just building headers yet
diff --git a/debian/config/sh4/config b/debian/config/sh4/config
new file mode 100644
index 000000000000..20b09e3fef46
--- /dev/null
+++ b/debian/config/sh4/config
@@ -0,0 +1,66 @@
+##
+## file: arch/Kconfig
+##
+CONFIG_SECCOMP=y
+# CONFIG_STACKPROTECTOR_STRONG is not set
+
+##
+## file: arch/sh/Kconfig
+##
+CONFIG_KEXEC=y
+
+##
+## file: arch/sh/Kconfig.cpu
+##
+## choice: Endianness selection
+CONFIG_CPU_LITTLE_ENDIAN=y
+## end choice
+CONFIG_SH_FPU=y
+CONFIG_SH_STORE_QUEUES=y
+
+##
+## file: arch/sh/drivers/Kconfig
+##
+CONFIG_HEARTBEAT=y
+
+##
+## file: arch/sh/mm/Kconfig
+##
+## choice: Cache mode
+CONFIG_CACHE_WRITEBACK=y
+## end choice
+
+##
+## file: crypto/Kconfig
+##
+CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
+
+##
+## file: drivers/cpufreq/Kconfig
+##
+CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
+CONFIG_SH_CPU_FREQ=y
+
+##
+## file: drivers/pci/pcie/Kconfig
+##
+# CONFIG_PCIEPORTBUS is not set
+
+##
+## file: init/Kconfig
+##
+## choice: Compiler optimization level
+CONFIG_CC_OPTIMIZE_FOR_SIZE=y
+## end choice
+
+##
+## file: kernel/Kconfig.hz
+##
+## choice: Timer frequency
+CONFIG_HZ_250=y
+## end choice
+
+##
+## file: kernel/irq/Kconfig
+##
+CONFIG_SPARSE_IRQ=y
diff --git a/debian/config/sh4/config.sh7751r b/debian/config/sh4/config.sh7751r
new file mode 100644
index 000000000000..6d8381081651
--- /dev/null
+++ b/debian/config/sh4/config.sh7751r
@@ -0,0 +1,171 @@
+##
+## file: arch/sh/Kconfig
+##
+## choice: Processor sub-type selection
+CONFIG_CPU_SUBTYPE_SH7751R=y
+## end choice
+CONFIG_SH_PCLK_FREQ=60000000
+
+##
+## file: arch/sh/Kconfig.cpu
+##
+## choice: Endianness selection
+CONFIG_CPU_LITTLE_ENDIAN=y
+## end choice
+CONFIG_SH_FPU=y
+
+##
+## file: arch/sh/boards/Kconfig
+##
+CONFIG_SH_RTS7751R2D=y
+
+##
+## file: arch/sh/boards/mach-r2d/Kconfig
+##
+CONFIG_RTS7751R2D_PLUS=y
+
+##
+## file: arch/sh/mm/Kconfig
+##
+CONFIG_MMU=y
+CONFIG_FORCE_MAX_ZONEORDER=11
+CONFIG_MEMORY_START=0x0c000000
+CONFIG_MEMORY_SIZE=0x04000000
+CONFIG_VSYSCALL=y
+## choice: Kernel page size
+CONFIG_PAGE_SIZE_4KB=y
+## end choice
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_ATA=y
+CONFIG_ATA_VERBOSE_ERROR=y
+CONFIG_SATA_PMP=y
+CONFIG_ATA_SFF=y
+CONFIG_PATA_PLATFORM=y
+
+##
+## file: drivers/clocksource/Kconfig
+##
+CONFIG_SH_TIMER_TMU=y
+
+##
+## file: drivers/hid/Kconfig
+##
+CONFIG_HID=y
+
+##
+## file: drivers/hid/usbhid/Kconfig
+##
+CONFIG_USB_HID=y
+
+##
+## file: drivers/input/Kconfig
+##
+CONFIG_INPUT=y
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+
+##
+## file: drivers/mfd/Kconfig
+##
+CONFIG_MFD_SM501=y
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_MTD=y
+CONFIG_MTD_BLOCK=y
+
+##
+## file: drivers/mtd/chips/Kconfig
+##
+CONFIG_MTD_CFI=y
+CONFIG_MTD_MAP_BANK_WIDTH_1=y
+CONFIG_MTD_MAP_BANK_WIDTH_2=y
+CONFIG_MTD_MAP_BANK_WIDTH_4=y
+CONFIG_MTD_CFI_I1=y
+CONFIG_MTD_CFI_I2=y
+CONFIG_MTD_CFI_AMDSTD=y
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+CONFIG_MTD_PHYSMAP=y
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_NETDEVICES=y
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_8139CP=y
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_R9701=y
+# CONFIG_RTC_DRV_SH is not set
+# CONFIG_RTC_DRV_GENERIC is not set
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI=y
+CONFIG_BLK_DEV_SD=y
+
+##
+## file: drivers/spi/Kconfig
+##
+CONFIG_SPI=y
+CONFIG_SPI_BITBANG=y
+CONFIG_SPI_SH_SCI=y
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_VT=y
+CONFIG_CONSOLE_TRANSLATIONS=y
+CONFIG_VT_CONSOLE=y
+CONFIG_VT_HW_CONSOLE_BINDING=y
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_SH_SCI=y
+CONFIG_SERIAL_SH_SCI_NR_UARTS=6
+CONFIG_SERIAL_SH_SCI_CONSOLE=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB_SUPPORT=y
+CONFIG_USB=y
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_OHCI_HCD=y
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_SM501=y
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+CONFIG_FLATMEM_MANUAL=y
+## end choice
diff --git a/debian/config/sh4/config.sh7785lcr b/debian/config/sh4/config.sh7785lcr
new file mode 100644
index 000000000000..9c1740f6411e
--- /dev/null
+++ b/debian/config/sh4/config.sh7785lcr
@@ -0,0 +1,238 @@
+##
+## file: arch/sh/Kconfig
+##
+## choice: Processor sub-type selection
+CONFIG_CPU_SUBTYPE_SH7785=y
+## end choice
+CONFIG_SH_PCLK_FREQ=50000000
+
+##
+## file: arch/sh/Kconfig.cpu
+##
+## choice: Endianness selection
+CONFIG_CPU_LITTLE_ENDIAN=y
+## end choice
+CONFIG_SH_FPU=y
+CONFIG_SH_STORE_QUEUES=y
+
+##
+## file: arch/sh/boards/Kconfig
+##
+CONFIG_SH_SH7785LCR=y
+
+##
+## file: arch/sh/mm/Kconfig
+##
+CONFIG_MMU=y
+CONFIG_FORCE_MAX_ZONEORDER=11
+CONFIG_MEMORY_START=0x48000000
+CONFIG_MEMORY_SIZE=0x18000000
+CONFIG_VSYSCALL=y
+## choice: Kernel page size
+CONFIG_PAGE_SIZE_4KB=y
+## end choice
+## choice: HugeTLB page size
+CONFIG_HUGETLB_PAGE_SIZE_64K=y
+## end choice
+
+##
+## file: drivers/ata/Kconfig
+##
+CONFIG_ATA=y
+CONFIG_ATA_VERBOSE_ERROR=y
+CONFIG_SATA_PMP=y
+CONFIG_ATA_SFF=y
+CONFIG_SATA_SIL=y
+
+##
+## file: drivers/clocksource/Kconfig
+##
+CONFIG_SH_TIMER_TMU=y
+
+##
+## file: drivers/dma/Kconfig
+##
+CONFIG_DMADEVICES=y
+
+##
+## file: drivers/hid/Kconfig
+##
+CONFIG_HID=m
+
+##
+## file: drivers/hid/usbhid/Kconfig
+##
+CONFIG_USB_HID=m
+
+##
+## file: drivers/i2c/Kconfig
+##
+CONFIG_I2C=y
+CONFIG_I2C_COMPAT=y
+CONFIG_I2C_HELPER_AUTO=y
+
+##
+## file: drivers/i2c/algos/Kconfig
+##
+CONFIG_I2C_ALGOPCA=y
+
+##
+## file: drivers/i2c/busses/Kconfig
+##
+CONFIG_I2C_PCA_PLATFORM=y
+
+##
+## file: drivers/input/Kconfig
+##
+CONFIG_INPUT=y
+CONFIG_INPUT_MOUSEDEV=y
+CONFIG_INPUT_MOUSEDEV_PSAUX=y
+CONFIG_INPUT_MOUSEDEV_SCREEN_X=1024
+CONFIG_INPUT_MOUSEDEV_SCREEN_Y=768
+CONFIG_INPUT_EVDEV=m
+
+##
+## file: drivers/input/keyboard/Kconfig
+##
+CONFIG_INPUT_KEYBOARD=y
+# CONFIG_KEYBOARD_ATKBD is not set
+
+##
+## file: drivers/input/mouse/Kconfig
+##
+CONFIG_INPUT_MOUSE=y
+# CONFIG_MOUSE_PS2 is not set
+# CONFIG_MOUSE_PS2_ALPS is not set
+# CONFIG_MOUSE_PS2_BYD is not set
+# CONFIG_MOUSE_PS2_LOGIPS2PP is not set
+# CONFIG_MOUSE_PS2_SYNAPTICS is not set
+# CONFIG_MOUSE_PS2_SYNAPTICS_SMBUS is not set
+# CONFIG_MOUSE_PS2_CYPRESS is not set
+# CONFIG_MOUSE_PS2_LIFEBOOK is not set
+# CONFIG_MOUSE_PS2_TRACKPOINT is not set
+# CONFIG_MOUSE_PS2_ELANTECH is not set
+# CONFIG_MOUSE_PS2_ELANTECH_SMBUS is not set
+# CONFIG_MOUSE_PS2_SENTELIC is not set
+# CONFIG_MOUSE_PS2_FOCALTECH is not set
+
+##
+## file: drivers/input/serio/Kconfig
+##
+# CONFIG_SERIO is not set
+# CONFIG_SERIO_I8042 is not set
+# CONFIG_SERIO_SERPORT is not set
+# CONFIG_SERIO_LIBPS2 is not set
+
+##
+## file: drivers/mfd/Kconfig
+##
+CONFIG_MFD_SM501=y
+
+##
+## file: drivers/mtd/Kconfig
+##
+CONFIG_MTD=y
+CONFIG_MTD_BLOCK=y
+
+##
+## file: drivers/mtd/chips/Kconfig
+##
+CONFIG_MTD_CFI=y
+CONFIG_MTD_MAP_BANK_WIDTH_1=y
+CONFIG_MTD_MAP_BANK_WIDTH_2=y
+CONFIG_MTD_MAP_BANK_WIDTH_4=y
+CONFIG_MTD_CFI_I1=y
+CONFIG_MTD_CFI_I2=y
+CONFIG_MTD_CFI_AMDSTD=y
+
+##
+## file: drivers/mtd/maps/Kconfig
+##
+CONFIG_MTD_PHYSMAP=y
+
+##
+## file: drivers/net/Kconfig
+##
+CONFIG_NETDEVICES=y
+
+##
+## file: drivers/net/ethernet/realtek/Kconfig
+##
+CONFIG_R8169=m
+
+##
+## file: drivers/parport/Kconfig
+##
+# CONFIG_PARPORT_1284 is not set
+
+##
+## file: drivers/pci/Kconfig
+##
+CONFIG_PCI=y
+
+##
+## file: drivers/rtc/Kconfig
+##
+CONFIG_RTC_DRV_RS5C372=y
+# CONFIG_RTC_DRV_SH is not set
+# CONFIG_RTC_DRV_GENERIC is not set
+
+##
+## file: drivers/scsi/Kconfig
+##
+CONFIG_SCSI=y
+CONFIG_BLK_DEV_SD=y
+
+##
+## file: drivers/tty/Kconfig
+##
+CONFIG_VT=y
+CONFIG_CONSOLE_TRANSLATIONS=y
+CONFIG_VT_CONSOLE=y
+CONFIG_VT_HW_CONSOLE_BINDING=y
+CONFIG_UNIX98_PTYS=y
+
+##
+## file: drivers/tty/serial/Kconfig
+##
+CONFIG_SERIAL_SH_SCI=y
+CONFIG_SERIAL_SH_SCI_NR_UARTS=6
+CONFIG_SERIAL_SH_SCI_CONSOLE=y
+
+##
+## file: drivers/usb/Kconfig
+##
+CONFIG_USB_SUPPORT=y
+CONFIG_USB=y
+
+##
+## file: drivers/usb/host/Kconfig
+##
+CONFIG_USB_EHCI_HCD=y
+CONFIG_USB_R8A66597_HCD=y
+
+##
+## file: drivers/usb/storage/Kconfig
+##
+CONFIG_USB_STORAGE=y
+
+##
+## file: drivers/video/fbdev/Kconfig
+##
+CONFIG_FB_SM501=y
+
+##
+## file: drivers/watchdog/Kconfig
+##
+CONFIG_WATCHDOG=y
+CONFIG_SH_WDT=y
+# CONFIG_USBPCWATCHDOG is not set
+
+##
+## file: mm/Kconfig
+##
+## choice: Memory model
+CONFIG_SPARSEMEM_MANUAL=y
+## end choice
+CONFIG_MIGRATION=y
+CONFIG_DEFAULT_MMAP_MIN_ADDR=4096
diff --git a/debian/config/sh4/defines b/debian/config/sh4/defines
new file mode 100644
index 000000000000..c38abc821c6e
--- /dev/null
+++ b/debian/config/sh4/defines
@@ -0,0 +1,25 @@
+[base]
+flavours:
+ sh7751r
+ sh7785lcr
+kernel-arch: sh
+
+[build]
+image-file: arch/sh/boot/zImage
+
+[image]
+install-stem: vmlinuz
+
+[sh7751r_description]
+hardware: sh7751r
+hardware-long: Renesas SH7751R R2D plus board
+
+[sh7785lcr_description]
+hardware: sh7785lcr
+hardware-long: Renesas SH7785 reference board
+
+[sh7785lcr_image]
+recommends: u-boot-tools
+# Kernel partition size: 4MB
+check-size: 4194304
+
diff --git a/debian/config/sparc/defines b/debian/config/sparc/defines
new file mode 100644
index 000000000000..c7e0119c292f
--- /dev/null
+++ b/debian/config/sparc/defines
@@ -0,0 +1,4 @@
+[base]
+kernel-arch: sparc
+featuresets:
+# empty; sparc must be part of a multiarch installation with a sparc64 kernel
diff --git a/debian/config/sparc64/defines b/debian/config/sparc64/defines
new file mode 100644
index 000000000000..b3a242e5df28
--- /dev/null
+++ b/debian/config/sparc64/defines
@@ -0,0 +1,27 @@
+[base]
+flavours:
+ sparc64
+ sparc64-smp
+default-flavour: sparc64-smp
+kernel-arch: sparc
+
+[build]
+image-file: vmlinux
+
+[image]
+configs:
+bootloaders: grub-ieee1275
+suggests: fdutils
+install-stem: vmlinux
+
+[sparc64_description]
+hardware: uniprocessor 64-bit UltraSPARC
+
+[sparc64_image]
+configs: kernelarch-sparc/config-up
+
+[sparc64-smp_description]
+hardware: multiprocessor 64-bit UltraSPARC
+
+[sparc64-smp_image]
+configs: kernelarch-sparc/config-smp
diff --git a/debian/config/x32/defines b/debian/config/x32/defines
new file mode 100644
index 000000000000..0a19846d4837
--- /dev/null
+++ b/debian/config/x32/defines
@@ -0,0 +1,4 @@
+[base]
+kernel-arch: x86
+featuresets:
+# empty; x32 must be part of a multiarch installation with an amd64 kernel
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 000000000000..e93b6f4f99fe
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,297 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: Linux kernel
+Source: https://www.kernel.org/pub/linux/kernel/
+Files-Excluded: Documentation/netlabel/draft-ietf-cipso-ipsecurity-01.txt
+ arch/powerpc/platforms/8xx/micropatch.c
+ drivers/media/usb/dvb-usb/af9005-script.h
+ drivers/media/i2c/vs6624.c
+ drivers/net/appletalk/cops*
+ drivers/video/fbdev/nvidia
+ drivers/video/fbdev/riva
+Comment:
+ The 'perf' tool is dynamically linked with the Python interpreter,
+ which is itself dynamically linked with OpenSSL, which is not
+ GPL-compatible.  However, since perf itself does not link with or use
+ OpenSSL, we believe that this indirect linking does not require
+ additional permissions beyond the GPL.
+
+Files: *
+Copyright: 1991-2012 Linus Torvalds and many others
+License: GPL-2
+
+Files: debian/*
+Copyright: 1996-2006 Manoj Srivastava
+           2005-2012 Debian kernel team
+           2006-2009 Bastian Blank <waldi@debian.org>
+License: GPL-2
+
+Files: debian/rules.d/tools/hv/check-hyperv.c
+Copyright: 2011 Lennart Poettering
+License: LGPL-2.1
+
+Files:
+ arch/arm/boot/dts/armada-370.dtsi
+ arch/arm/boot/dts/armada-370-d*.dts*
+ arch/arm/boot/dts/armada-370-mirabox.dts
+ arch/arm/boot/dts/armada-370-netgear*.dts*
+ arch/arm/boot/dts/armada-370-rd.dts
+ arch/arm/boot/dts/armada-370-synology-ds213j.dts
+ arch/arm/boot/dts/armada-375*.dts*
+ arch/arm/boot/dts/armada-38*.dts*
+ arch/arm/boot/dts/armada-39*.dts*
+ arch/arm/boot/dts/armada-xp*.dts*
+ arch/arm/boot/dts/artpec6.dtsi
+ arch/arm/boot/dts/at91sam9260ek.dts
+ arch/arm/boot/dts/at91sam9xe.dtsi
+ arch/arm/boot/dts/axp*.dts*
+ arch/arm/boot/dts/berlin2*.dts*
+ arch/arm/boot/dts/cros-ec-sbs.dtsi
+ arch/arm/boot/dts/cx92755*.dts*
+ arch/arm/boot/dts/imx7*.dts*
+ arch/arm/boot/dts/kirkwood-linkstation*.dts*
+ arch/arm/boot/dts/ls*.dts*
+ arch/arm/boot/dts/meson*.dts*
+ arch/arm/boot/dts/mps2*.dts*
+ arch/arm/boot/dts/mvebu-linkstation-*.dts*
+ arch/arm/boot/dts/orion5x-kuroboxpro.dts
+ arch/arm/boot/dts/orion5x-linkstation*.dts*
+ arch/arm/boot/dts/orion5x-ls*.dts*
+ arch/arm/boot/dts/qcom-mdm9615*.dts*
+ arch/arm/boot/dts/rk*.dts
+ arch/arm/boot/dts/sama5d2.dtsi
+ arch/arm/boot/dts/sama5d4.dtsi
+ arch/arm/boot/dts/socfpga_cyclone5_vining_fpga.dts
+ arch/arm/boot/dts/stm*.dts*
+ arch/arm/boot/dts/sun*.dts*
+ arch/arm/boot/dts/tegra124-apalis*.dts*
+ arch/arm/boot/dts/uniphier-*.dts*
+ arch/arm/boot/dts/vf610-colibri*.dts*
+ arch/arm/boot/dts/vf610m*.dts*
+ arch/arm64/boot/dts/allwinner/*.dts*
+ arch/arm64/boot/dts/amlogic/*.dts*
+ arch/arm64/boot/dts/cavium/thunder-*.dts*
+ arch/arm64/boot/dts/freescale/fsl-*.dts*
+ arch/arm64/boot/dts/marvell/armada-*.dts*
+ arch/arm64/boot/dts/marvell/berlin4ct-*.dts*
+ arch/arm64/boot/dts/rockchip/rk33*.dts*
+ arch/arm64/boot/dts/socionext/uniphier-ld*.dts*
+ arch/arm64/boot/dts/zte/zx296718*.dts*
+ include/dt-bindings/clock/sun*.h
+ include/dt-bindings/dma/axi-dmac.h
+ include/dt-bindings/dma/sun4i-a10.h
+ include/dt-bindings/pinctrl/sun4i-a10.h
+ include/dt-bindings/reset/sun*.h
+Copyright: 2012-2018 Linus Torvalds and many others
+License: GPL-2+ or X11
+
+Files: drivers/crypto/vmx/*.pl
+Copyright: 2006,2014 Andy Polyakov <appro@openssl.org>
+License: CRYPTOGAMS
+ All rights reserved.
+ .
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ .
+ * Redistributions of source code must retain copyright notices, this
+   list of conditions and the following disclaimer.
+ * Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in the
+   documentation and/or other materials provided with the
+   distribution.
+ * Neither the name of the CRYPTOGAMS nor the names of its copyright
+   holder and contributors may be used to endorse or promote products
+   derived from this software without specific prior written
+   permission.
+ .
+ ALTERNATIVELY, provided that this notice is retained in full, this
+ product may be distributed under the terms of the GNU General Public
+ License (GPL), in which case the provisions of the GPL apply INSTEAD
+ OF those given above.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Files: fs/nls/mac-*
+Copyright: 1991-2012 Unicode, Inc.
+License: Unicode-data
+ All rights reserved.  Distributed under the Terms of Use in
+ http://www.unicode.org/copyright.html.
+ .
+ Permission is hereby granted, free of charge, to any person obtaining a
+ copy of the Unicode data files and any associated documentation (the "Data
+ Files") or Unicode software and any associated documentation (the
+ "Software") to deal in the Data Files or Software without restriction,
+ including without limitation the rights to use, copy, modify, merge,
+ publish, distribute, and/or sell copies of the Data Files or Software, and
+ to permit persons to whom the Data Files or Software are furnished to do
+ so, provided that (a) the above copyright notice(s) and this permission
+ notice appear with all copies of the Data Files or Software, (b) both the
+ above copyright notice(s) and this permission notice appear in associated
+ documentation, and (c) there is clear notice in each modified Data File or
+ in the Software as well as in the documentation associated with the Data
+ File(s) or Software that the data or software has been modified.
+ .
+ THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
+ KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
+ THIRD PARTY RIGHTS.  IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS
+ INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT
+ OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
+ USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+ OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ PERFORMANCE OF THE DATA FILES OR SOFTWARE.
+ .
+ Except as contained in this notice, the name of a copyright holder shall
+ not be used in advertising or otherwise to promote the sale, use or other
+ dealings in these Data Files or Software without prior written
+ authorization of the copyright holder.
+
+Files: include/xen/interface/*
+Copyright: 2002-2006 Keir Fraser
+           2004 Tim Deegan
+           2004 Andrew Warfield
+           2005 Nguyen Anh Quynh
+           2005-2006 IBM Corporation
+           2005 Anthony Liguori
+           2005 Rusty Russell
+           2005-2006 XenSource Ltd.
+           2006 Ian Campbell
+           2006 Red Hat, Inc.
+           2010 Ryan Wilson
+License: Xen-interface
+ Permission is hereby granted, free of charge, to any person obtaining a copy
+ of this software and associated documentation files (the "Software"), to
+ deal in the Software without restriction, including without limitation the
+ rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+ sell copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+ .
+ The above copyright notice and this permission notice shall be included in
+ all copies or substantial portions of the Software.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+ FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+ DEALINGS IN THE SOFTWARE.
+
+Files: scripts/extract-cert.c scripts/sign-file.c
+Copyright: 2014-2015 Red Hat, Inc.
+           2015 Intel Corporation
+License: LGPL-2.1
+
+Files: tools/lib/bpf/*
+Copyright: 2015-2020 Linus Torvalds and many others
+License: LGPL-2.1 or BSD-2-clause
+
+Files: tools/bpf/bpftool/*
+Copyright: 2017-2020 Linus Torvalds and many others
+License: GPL-2 or BSD-2-clause
+
+License: BSD-2-clause
+  Redistribution and use in source and binary forms, with or without
+  modification, are permitted provided that the following conditions are met:
+  .
+  1. Redistributions of source code must retain the above copyright notice,
+     this list of conditions and the following disclaimer.
+  .
+  2. Redistributions in binary form must reproduce the above copyright
+     notice, this list of conditions and the following disclaimer in the
+     documentation and/or other materials provided with the distribution.
+  .
+  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+  AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+  IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+  ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
+  LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+  INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+  CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+  ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+  POSSIBILITY OF SUCH DAMAGE.
+
+License: GPL-2
+ This package is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License version 2 as
+ published by the Free Software Foundation.
+ .
+ This package is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this package; if not, write to the Free Software
+ Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301 USA
+ .
+ On Debian systems, the complete text of the GNU General Public License version
+ 2 can be found in `/usr/share/common-licenses/GPL-2'.
+
+License: LGPL-2.1
+ This program is free software; you can redistribute it and/or modify it
+ under the terms of the GNU Lesser General Public License as published by
+ the Free Software Foundation; either version 2.1 of the License, or
+ (at your option) any later version.
+ .
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ Lesser General Public License for more details.
+ .
+ You should have received a copy of the GNU Lesser General Public License
+ along with this program; If not, see <http://www.gnu.org/licenses/>.
+ .
+ On Debian systems, the complete text of the GNU Lesser General Public
+ License version 2.1 can be found in `/usr/share/common-licenses/LGPL-2.1'.
+
+License: GPL-2+ or X11
+ This file is dual-licensed: you can use it either under the terms
+ of the GPL or the X11 license, at your option. Note that this dual
+ licensing only applies to this file, and not this project as a
+ whole.
+ .
+  a) This file is free software; you can redistribute it and/or
+     modify it under the terms of the GNU General Public License as
+     published by the Free Software Foundation; either version 2 of the
+     License, or (at your option) any later version.
+ .
+     This file is distributed in the hope that it will be useful,
+     but WITHOUT ANY WARRANTY; without even the implied warranty of
+     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+     GNU General Public License for more details.
+ .
+ Or, alternatively,
+ .
+  b) Permission is hereby granted, free of charge, to any person
+     obtaining a copy of this software and associated documentation
+     files (the "Software"), to deal in the Software without
+     restriction, including without limitation the rights to use,
+     copy, modify, merge, publish, distribute, sublicense, and/or
+     sell copies of the Software, and to permit persons to whom the
+     Software is furnished to do so, subject to the following
+     conditions:
+ .
+     The above copyright notice and this permission notice shall be
+     included in all copies or substantial portions of the Software.
+ .
+     THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+     EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+     OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+     NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+     HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+     WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+     FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+     OTHER DEALINGS IN THE SOFTWARE.
diff --git a/debian/hyperv-daemons.README.Debian b/debian/hyperv-daemons.README.Debian
new file mode 100644
index 000000000000..8fff2afd3424
--- /dev/null
+++ b/debian/hyperv-daemons.README.Debian
@@ -0,0 +1,14 @@
+hyperv-daemon for Debian
+------------------------
+
+ If you want to change screen resolution on Linux guest, 
+ plese update kernel parameter.
+
+  1. edit /etc/default/grub file
+     - add 'video=hyperv_fb:"horizontal"x"vertical"' to 
+       'GRUB_CMDLINE_LINUX_DEFAULT=' or 'GRUB_CMDLINE_LINUX=' line
+        (e.g. GRUB_CMDLINE_LINUX=video=hyperv_fb:1280x1024)
+  2. then, exec update-grub
+  3. reboot Linux guest
+
+ -- Hideki Yamane <henrich@debian.org>  Thu, 28 May 2015 10:23:52 +0900
diff --git a/debian/hyperv-daemons.hv-fcopy-daemon.init b/debian/hyperv-daemons.hv-fcopy-daemon.init
new file mode 100644
index 000000000000..5866dc60edce
--- /dev/null
+++ b/debian/hyperv-daemons.hv-fcopy-daemon.init
@@ -0,0 +1,109 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides:          hv-fcopy-daemon
+# Required-Start:    $remote_fs $syslog
+# Required-Stop:     $remote_fs $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Hyper-V file copy service (FCOPY) daemon
+### END INIT INFO
+
+PATH=/sbin:/usr/sbin:/bin:/usr/bin
+DESC="Hyper-V file copy service (FCOPY) daemon"
+NAME=hv_fcopy_daemon
+DAEMON=/usr/sbin/$NAME
+PIDFILE=/run/$NAME.pid
+SCRIPTNAME=/etc/init.d/hv-fcopy-daemon
+
+# Exit if the package is not installed
+[ -x "$DAEMON" ] || exit 0
+
+# Exit if the kernel device does not exist
+[ -e "/dev/vmbus/hv_fcopy" ] || exit 0
+
+# Load the VERBOSE setting and other rcS variables
+. /lib/init/vars.sh
+
+# Define LSB log_* functions.
+. /lib/lsb/init-functions
+
+#
+# Function that starts the daemon/service
+#
+do_start()
+{
+	# Return
+	#   0 if daemon has been started
+	#   1 if daemon was already running
+	#   2 if daemon could not be started
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
+		|| return 1
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --background --make-pidfile -- -n \
+		|| return 2
+}
+
+#
+# Function that stops the daemon/service
+#
+do_stop()
+{
+	# Return
+	#   0 if daemon has been stopped
+	#   1 if daemon was already stopped
+	#   2 if daemon could not be stopped
+	#   other if a failure occurred
+	start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE --name $NAME
+	[ "$?" = 2 ] && return 2
+	start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON
+	RETVAL=$?
+	[ "$RETVAL" = 2 ] && return 2
+	# Many daemons don't delete their pidfiles when they exit.
+	rm -f $PIDFILE
+	return "$RETVAL"
+}
+
+case "$1" in
+  start)
+	[ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
+	do_start
+	case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+	;;
+  stop)
+	[ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
+	do_stop
+	case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+	;;
+  status)
+	status_of_proc -p "$PIDFILE" "$DAEMON" "$NAME"
+	;;
+  restart|force-reload)
+	log_daemon_msg "Restarting $DESC" "$NAME"
+	do_stop
+	case "$?" in
+	  0|1)
+		do_start
+		case "$?" in
+			0) log_end_msg 0 ;;
+			1) log_end_msg 1 ;; # Old process is still running
+			*) log_end_msg 1 ;; # Failed to start
+		esac
+		;;
+	  *)
+		# Failed to stop
+		log_end_msg 1
+		;;
+	esac
+	;;
+  *)
+	echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2
+	exit 3
+	;;
+esac
+
+:
diff --git a/debian/hyperv-daemons.hv-fcopy-daemon.service b/debian/hyperv-daemons.hv-fcopy-daemon.service
new file mode 100644
index 000000000000..d8e4d3b8a3e2
--- /dev/null
+++ b/debian/hyperv-daemons.hv-fcopy-daemon.service
@@ -0,0 +1,10 @@
+[Unit]
+Description=Hyper-V file copy service (FCOPY) daemon
+Conflicts=hyperv-daemons.hv-fcopy-daemon.service
+BindsTo=sys-devices-virtual-misc-vmbus\x21hv_fcopy.device
+
+[Service]
+ExecStart=/usr/sbin/hv_fcopy_daemon -n
+
+[Install]
+WantedBy=multi-user.target
diff --git a/debian/hyperv-daemons.hv-kvp-daemon.init b/debian/hyperv-daemons.hv-kvp-daemon.init
new file mode 100644
index 000000000000..6a78f478b2dc
--- /dev/null
+++ b/debian/hyperv-daemons.hv-kvp-daemon.init
@@ -0,0 +1,109 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides:          hv-kvp-daemon
+# Required-Start:    $remote_fs $syslog
+# Required-Stop:     $remote_fs $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Hyper-V key-value pair (KVP) daemon
+### END INIT INFO
+
+PATH=/sbin:/usr/sbin:/bin:/usr/bin
+DESC="Hyper-V key-value pair (KVP) daemon"
+NAME=hv_kvp_daemon
+DAEMON=/usr/sbin/$NAME
+PIDFILE=/run/$NAME.pid
+SCRIPTNAME=/etc/init.d/hv-kvp-daemon
+
+# Exit if the package is not installed
+[ -x "$DAEMON" ] || exit 0
+
+# Exit if the kernel device does not exist
+[ -e "/dev/vmbus/hv_kvp" ] || exit 0
+
+# Load the VERBOSE setting and other rcS variables
+. /lib/init/vars.sh
+
+# Define LSB log_* functions.
+. /lib/lsb/init-functions
+
+#
+# Function that starts the daemon/service
+#
+do_start()
+{
+	# Return
+	#   0 if daemon has been started
+	#   1 if daemon was already running
+	#   2 if daemon could not be started
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
+		|| return 1
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --background --make-pidfile -- -n \
+		|| return 2
+}
+
+#
+# Function that stops the daemon/service
+#
+do_stop()
+{
+	# Return
+	#   0 if daemon has been stopped
+	#   1 if daemon was already stopped
+	#   2 if daemon could not be stopped
+	#   other if a failure occurred
+	start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE --name $NAME
+	[ "$?" = 2 ] && return 2
+	start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON
+	RETVAL=$?
+	[ "$RETVAL" = 2 ] && return 2
+	# Many daemons don't delete their pidfiles when they exit.
+	rm -f $PIDFILE
+	return "$RETVAL"
+}
+
+case "$1" in
+  start)
+	[ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
+	do_start
+	case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+	;;
+  stop)
+	[ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
+	do_stop
+	case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+	;;
+  status)
+	status_of_proc -p "$PIDFILE" "$DAEMON" "$NAME"
+	;;
+  restart|force-reload)
+	log_daemon_msg "Restarting $DESC" "$NAME"
+	do_stop
+	case "$?" in
+	  0|1)
+		do_start
+		case "$?" in
+			0) log_end_msg 0 ;;
+			1) log_end_msg 1 ;; # Old process is still running
+			*) log_end_msg 1 ;; # Failed to start
+		esac
+		;;
+	  *)
+		# Failed to stop
+		log_end_msg 1
+		;;
+	esac
+	;;
+  *)
+	echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2
+	exit 3
+	;;
+esac
+
+:
diff --git a/debian/hyperv-daemons.hv-kvp-daemon.service b/debian/hyperv-daemons.hv-kvp-daemon.service
new file mode 100644
index 000000000000..67496e353729
--- /dev/null
+++ b/debian/hyperv-daemons.hv-kvp-daemon.service
@@ -0,0 +1,22 @@
+[Unit]
+Description=Hyper-V key-value pair (KVP) daemon
+DefaultDependencies=no
+Before=sysinit.target shutdown.target
+Conflicts=hyperv-daemons.hv-kvp-daemon.service shutdown.target
+BindsTo=sys-devices-virtual-misc-vmbus\x21hv_kvp.device
+IgnoreOnIsolate=1
+
+[Service]
+ExecStart=/usr/sbin/hv_kvp_daemon -n
+CapabilityBoundingSet=
+DeviceAllow=/dev/vmbus/hv_kvp
+NoNewPrivileges=true
+ProtectControlGroups=true
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+ProtectSystem=full
+StateDirectory=hyperv
+
+[Install]
+WantedBy=multi-user.target
diff --git a/debian/hyperv-daemons.hv-vss-daemon.init b/debian/hyperv-daemons.hv-vss-daemon.init
new file mode 100644
index 000000000000..31831aabe404
--- /dev/null
+++ b/debian/hyperv-daemons.hv-vss-daemon.init
@@ -0,0 +1,109 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides:          hv-vss-daemon
+# Required-Start:    $remote_fs $syslog
+# Required-Stop:     $remote_fs $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Hyper-V volume shadow copy service (VSS) daemon
+### END INIT INFO
+
+PATH=/sbin:/usr/sbin:/bin:/usr/bin
+DESC="Hyper-V volume shadow copy service (VSS) daemon"
+NAME=hv_vss_daemon
+DAEMON=/usr/sbin/$NAME
+PIDFILE=/run/$NAME.pid
+SCRIPTNAME=/etc/init.d/hv-vss-daemon
+
+# Exit if the package is not installed
+[ -x "$DAEMON" ] || exit 0
+
+# Exit if the kernel device does not exist
+[ -e "/dev/vmbus/hv_vss" ] || exit 0
+
+# Load the VERBOSE setting and other rcS variables
+. /lib/init/vars.sh
+
+# Define LSB log_* functions.
+. /lib/lsb/init-functions
+
+#
+# Function that starts the daemon/service
+#
+do_start()
+{
+	# Return
+	#   0 if daemon has been started
+	#   1 if daemon was already running
+	#   2 if daemon could not be started
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
+		|| return 1
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --background --make-pidfile -- -n \
+		|| return 2
+}
+
+#
+# Function that stops the daemon/service
+#
+do_stop()
+{
+	# Return
+	#   0 if daemon has been stopped
+	#   1 if daemon was already stopped
+	#   2 if daemon could not be stopped
+	#   other if a failure occurred
+	start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE --name $NAME
+	[ "$?" = 2 ] && return 2
+	start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON
+	RETVAL=$?
+	[ "$RETVAL" = 2 ] && return 2
+	# Many daemons don't delete their pidfiles when they exit.
+	rm -f $PIDFILE
+	return "$RETVAL"
+}
+
+case "$1" in
+  start)
+	[ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
+	do_start
+	case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+	;;
+  stop)
+	[ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
+	do_stop
+	case "$?" in
+		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
+		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
+	esac
+	;;
+  status)
+	status_of_proc -p "$PIDFILE" "$DAEMON" "$NAME"
+	;;
+  restart|force-reload)
+	log_daemon_msg "Restarting $DESC" "$NAME"
+	do_stop
+	case "$?" in
+	  0|1)
+		do_start
+		case "$?" in
+			0) log_end_msg 0 ;;
+			1) log_end_msg 1 ;; # Old process is still running
+			*) log_end_msg 1 ;; # Failed to start
+		esac
+		;;
+	  *)
+		# Failed to stop
+		log_end_msg 1
+		;;
+	esac
+	;;
+  *)
+	echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2
+	exit 3
+	;;
+esac
+
+:
diff --git a/debian/hyperv-daemons.hv-vss-daemon.service b/debian/hyperv-daemons.hv-vss-daemon.service
new file mode 100644
index 000000000000..fd3fd6dcd77d
--- /dev/null
+++ b/debian/hyperv-daemons.hv-vss-daemon.service
@@ -0,0 +1,10 @@
+[Unit]
+Description=Hyper-V volume shadow copy service (VSS) daemon
+Conflicts=hyperv-daemons.hv-vss-daemon.service
+BindsTo=sys-devices-virtual-misc-vmbus\x21hv_vss.device
+
+[Service]
+ExecStart=/usr/sbin/hv_vss_daemon -n
+
+[Install]
+WantedBy=multi-user.target
diff --git a/debian/hyperv-daemons.maintscript b/debian/hyperv-daemons.maintscript
new file mode 100644
index 000000000000..a2f28e467727
--- /dev/null
+++ b/debian/hyperv-daemons.maintscript
@@ -0,0 +1,3 @@
+mv_conffile /etc/init.d/hyperv-daemons.hv-fcopy-daemon /etc/init.d/hv-fcopy-daemon 5.8~rc7-1~exp1
+mv_conffile /etc/init.d/hyperv-daemons.hv-kvp-daemon /etc/init.d/hv-kvp-daemon 5.8~rc7-1~exp1
+mv_conffile /etc/init.d/hyperv-daemons.hv-vss-daemon /etc/init.d/hv-vss-daemon 5.8~rc7-1~exp1
diff --git a/debian/hyperv-daemons.postinst b/debian/hyperv-daemons.postinst
new file mode 100644
index 000000000000..3573c9c2edba
--- /dev/null
+++ b/debian/hyperv-daemons.postinst
@@ -0,0 +1,18 @@
+#!/bin/sh
+set -e
+
+if [ "$1" = "configure" ]; then
+    if [ -d /run/systemd/system ]; then
+        if [ -z "$2" ]; then
+            # On initial install make sure udev notifies systemd
+            udevadm trigger || true
+        else
+            # On upgrade make sure running daemons are restarted
+            systemctl try-restart hv-fcopy-daemon.service hv-kvp-daemon.service hv-vss-daemon.service
+        fi
+    fi
+fi
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/hyperv-daemons.preinst b/debian/hyperv-daemons.preinst
new file mode 100644
index 000000000000..5810d294685c
--- /dev/null
+++ b/debian/hyperv-daemons.preinst
@@ -0,0 +1,17 @@
+#!/bin/sh
+set -e
+
+if [ "$1" = "upgrade" ]; then
+    for i in fcopy kvp vss; do
+        if [ -d /run/systemd/system ]; then
+            systemctl stop hyperv-daemons.hv-$i-daemon.service 2>/dev/null || true
+        fi
+        deb-systemd-helper purge hyperv-daemons.hv-$i-daemon.service || true
+        invoke-rc.d --skip-systemd-native hyperv-daemons.hv-$i-daemon stop || true
+        update-rc.d hyperv-daemons.hv-$i-daemon remove || true
+    done
+fi
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/hyperv-daemons.udev b/debian/hyperv-daemons.udev
new file mode 100644
index 000000000000..1daacac696bc
--- /dev/null
+++ b/debian/hyperv-daemons.udev
@@ -0,0 +1,3 @@
+KERNEL=="vmbus/hv_fcopy", TAG+="systemd", ENV{SYSTEMD_WANTS}+="hv-fcopy-daemon.service"
+KERNEL=="vmbus/hv_kvp", TAG+="systemd", ENV{SYSTEMD_WANTS}+="hv-kvp-daemon.service"
+KERNEL=="vmbus/hv_vss", TAG+="systemd", ENV{SYSTEMD_WANTS}+="hv-vss-daemon.service"
diff --git a/debian/installer/kernel-versions b/debian/installer/kernel-versions
new file mode 100644
index 000000000000..62b27f75ff63
--- /dev/null
+++ b/debian/installer/kernel-versions
@@ -0,0 +1,35 @@
+# arch     version flavour       installedname suffix build-depends
+alpha      -       alpha-generic -             y      -
+amd64      -       amd64         -             -      -
+arm64      -       arm64         -             -      -
+armel      -       marvell       -             y      -
+armhf      -       armmp         -             -      -
+hppa       -       parisc        -             y      -
+hppa       -       parisc64      -             y      -
+i386       -       686           -             -      -
+i386       -       686-pae       -             -      -
+ia64       -       itanium       -             -      -
+m68k       -       m68k          -             y      -
+mips       -       4kc-malta     -             y      -
+mips       -       octeon        -             y      -
+mips64     -       5kc-malta     -             y      -
+mips64     -       octeon        -             y      -
+mips64el   -       5kc-malta     -             y      -
+mips64el   -       loongson-3    -             y      -
+mips64el   -       octeon        -             y      -
+mips64r6   -       mips64r6      -             y      -
+mips64r6el -       mips64r6el    -             y      -
+mipsel     -       4kc-malta     -             y      -
+mipsel     -       loongson-3    -             y      -
+mipsel     -       octeon        -             y      -
+mipsr6     -       mips32r6      -             y      -
+mipsr6el   -       mips32r6el    -             y      -
+powerpc    -       powerpc       -             -      -
+powerpc    -       powerpc64     -             -      -
+ppc64      -       powerpc64     -             -      -
+ppc64el    -       powerpc64le   -             -      -
+riscv64    -       riscv64       -             -      -
+s390x      -       s390x         -             -      -
+sh4        -       sh7751r       -             y      -
+sh4        -       sh7785lcr     -             y      -
+sparc64    -       sparc64       -             -      -
diff --git a/debian/installer/modules/acpi-modules b/debian/installer/modules/acpi-modules
new file mode 100644
index 000000000000..d4723a10b54c
--- /dev/null
+++ b/debian/installer/modules/acpi-modules
@@ -0,0 +1,2 @@
+fan
+thermal
diff --git a/debian/installer/modules/affs-modules b/debian/installer/modules/affs-modules
new file mode 100644
index 000000000000..ac282591109e
--- /dev/null
+++ b/debian/installer/modules/affs-modules
@@ -0,0 +1 @@
+affs
diff --git a/debian/installer/modules/alpha-generic/ata-modules b/debian/installer/modules/alpha-generic/ata-modules
new file mode 100644
index 000000000000..b81c0f38b74a
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/ata-modules
@@ -0,0 +1 @@
+#include <ata-modules>
diff --git a/debian/installer/modules/alpha-generic/btrfs-modules b/debian/installer/modules/alpha-generic/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/alpha-generic/cdrom-core-modules b/debian/installer/modules/alpha-generic/cdrom-core-modules
new file mode 100644
index 000000000000..3ff69b48f4fc
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/cdrom-core-modules
@@ -0,0 +1 @@
+#include <cdrom-core-modules>
diff --git a/debian/installer/modules/alpha-generic/crc-modules b/debian/installer/modules/alpha-generic/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/alpha-generic/crypto-dm-modules b/debian/installer/modules/alpha-generic/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/alpha-generic/crypto-modules b/debian/installer/modules/alpha-generic/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/alpha-generic/event-modules b/debian/installer/modules/alpha-generic/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/alpha-generic/ext4-modules b/debian/installer/modules/alpha-generic/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/alpha-generic/f2fs-modules b/debian/installer/modules/alpha-generic/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/alpha-generic/fat-modules b/debian/installer/modules/alpha-generic/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/alpha-generic/fb-modules b/debian/installer/modules/alpha-generic/fb-modules
new file mode 100644
index 000000000000..aba524d9021f
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/fb-modules
@@ -0,0 +1 @@
+#include <fb-modules>
diff --git a/debian/installer/modules/alpha-generic/fuse-modules b/debian/installer/modules/alpha-generic/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/alpha-generic/i2c-modules b/debian/installer/modules/alpha-generic/i2c-modules
new file mode 100644
index 000000000000..203a607e73ce
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/i2c-modules
@@ -0,0 +1 @@
+#include <i2c-modules>
diff --git a/debian/installer/modules/alpha-generic/input-modules b/debian/installer/modules/alpha-generic/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/alpha-generic/isofs-modules b/debian/installer/modules/alpha-generic/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/alpha-generic/jfs-modules b/debian/installer/modules/alpha-generic/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/alpha-generic/kernel-image b/debian/installer/modules/alpha-generic/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/alpha-generic/loop-modules b/debian/installer/modules/alpha-generic/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/alpha-generic/md-modules b/debian/installer/modules/alpha-generic/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/alpha-generic/mouse-modules b/debian/installer/modules/alpha-generic/mouse-modules
new file mode 100644
index 000000000000..15fcb00eaa04
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/mouse-modules
@@ -0,0 +1 @@
+#include <mouse-modules>
diff --git a/debian/installer/modules/alpha-generic/multipath-modules b/debian/installer/modules/alpha-generic/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/alpha-generic/nbd-modules b/debian/installer/modules/alpha-generic/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/alpha-generic/nic-modules b/debian/installer/modules/alpha-generic/nic-modules
new file mode 100644
index 000000000000..2512e83950dd
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/nic-modules
@@ -0,0 +1 @@
+#include <nic-modules>
diff --git a/debian/installer/modules/alpha-generic/nic-pcmcia-modules b/debian/installer/modules/alpha-generic/nic-pcmcia-modules
new file mode 100644
index 000000000000..7a0702cd5585
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/nic-pcmcia-modules
@@ -0,0 +1 @@
+#include <nic-pcmcia-modules>
diff --git a/debian/installer/modules/alpha-generic/nic-shared-modules b/debian/installer/modules/alpha-generic/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/alpha-generic/nic-usb-modules b/debian/installer/modules/alpha-generic/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/alpha-generic/nic-wireless-modules b/debian/installer/modules/alpha-generic/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/alpha-generic/pata-modules b/debian/installer/modules/alpha-generic/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/alpha-generic/pcmcia-modules b/debian/installer/modules/alpha-generic/pcmcia-modules
new file mode 100644
index 000000000000..2bb5350fe14f
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/pcmcia-modules
@@ -0,0 +1 @@
+#include <pcmcia-modules>
diff --git a/debian/installer/modules/alpha-generic/ppp-modules b/debian/installer/modules/alpha-generic/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/alpha-generic/sata-modules b/debian/installer/modules/alpha-generic/sata-modules
new file mode 100644
index 000000000000..01318c258b5a
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/sata-modules
@@ -0,0 +1 @@
+#include <sata-modules>
diff --git a/debian/installer/modules/alpha-generic/scsi-core-modules b/debian/installer/modules/alpha-generic/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/alpha-generic/scsi-modules b/debian/installer/modules/alpha-generic/scsi-modules
new file mode 100644
index 000000000000..8909dfb79487
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/scsi-modules
@@ -0,0 +1 @@
+#include <scsi-modules>
diff --git a/debian/installer/modules/alpha-generic/scsi-nic-modules b/debian/installer/modules/alpha-generic/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/alpha-generic/serial-modules b/debian/installer/modules/alpha-generic/serial-modules
new file mode 100644
index 000000000000..6ab8b8c3551b
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/serial-modules
@@ -0,0 +1 @@
+#include <serial-modules>
diff --git a/debian/installer/modules/alpha-generic/squashfs-modules b/debian/installer/modules/alpha-generic/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/alpha-generic/srm-modules b/debian/installer/modules/alpha-generic/srm-modules
new file mode 100644
index 000000000000..01601199779b
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/srm-modules
@@ -0,0 +1 @@
+srm_env
diff --git a/debian/installer/modules/alpha-generic/usb-modules b/debian/installer/modules/alpha-generic/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/alpha-generic/usb-serial-modules b/debian/installer/modules/alpha-generic/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/alpha-generic/usb-storage-modules b/debian/installer/modules/alpha-generic/usb-storage-modules
new file mode 100644
index 000000000000..8c5e81b55e3a
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/usb-storage-modules
@@ -0,0 +1 @@
+#include <usb-storage-modules>
diff --git a/debian/installer/modules/alpha-generic/xfs-modules b/debian/installer/modules/alpha-generic/xfs-modules
new file mode 100644
index 000000000000..98374e2bbaf8
--- /dev/null
+++ b/debian/installer/modules/alpha-generic/xfs-modules
@@ -0,0 +1 @@
+#include <xfs-modules>
diff --git a/debian/installer/modules/amd64/acpi-modules b/debian/installer/modules/amd64/acpi-modules
new file mode 100644
index 000000000000..307528fb17e9
--- /dev/null
+++ b/debian/installer/modules/amd64/acpi-modules
@@ -0,0 +1,2 @@
+#include <acpi-modules>
+
diff --git a/debian/installer/modules/amd64/ata-modules b/debian/installer/modules/amd64/ata-modules
new file mode 100644
index 000000000000..9409e7cde816
--- /dev/null
+++ b/debian/installer/modules/amd64/ata-modules
@@ -0,0 +1,2 @@
+#include <ata-modules>
+
diff --git a/debian/installer/modules/amd64/btrfs-modules b/debian/installer/modules/amd64/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/amd64/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/amd64/cdrom-core-modules b/debian/installer/modules/amd64/cdrom-core-modules
new file mode 100644
index 000000000000..e264d7aa3488
--- /dev/null
+++ b/debian/installer/modules/amd64/cdrom-core-modules
@@ -0,0 +1,2 @@
+#include <cdrom-core-modules>
+
diff --git a/debian/installer/modules/amd64/crc-modules b/debian/installer/modules/amd64/crc-modules
new file mode 100644
index 000000000000..191b9dfa8fb6
--- /dev/null
+++ b/debian/installer/modules/amd64/crc-modules
@@ -0,0 +1,2 @@
+#include <crc-modules>
+crc32_pclmul
diff --git a/debian/installer/modules/amd64/crypto-dm-modules b/debian/installer/modules/amd64/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/amd64/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/amd64/crypto-modules b/debian/installer/modules/amd64/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/amd64/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/amd64/efi-modules b/debian/installer/modules/amd64/efi-modules
new file mode 100644
index 000000000000..e1dc05e8f247
--- /dev/null
+++ b/debian/installer/modules/amd64/efi-modules
@@ -0,0 +1 @@
+#include <efi-modules>
diff --git a/debian/installer/modules/amd64/event-modules b/debian/installer/modules/amd64/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/amd64/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/amd64/ext4-modules b/debian/installer/modules/amd64/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/amd64/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/amd64/f2fs-modules b/debian/installer/modules/amd64/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/amd64/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/amd64/fat-modules b/debian/installer/modules/amd64/fat-modules
new file mode 100644
index 000000000000..cce8fd30ca4f
--- /dev/null
+++ b/debian/installer/modules/amd64/fat-modules
@@ -0,0 +1,2 @@
+#include <fat-modules>
+
diff --git a/debian/installer/modules/amd64/fb-modules b/debian/installer/modules/amd64/fb-modules
new file mode 100644
index 000000000000..8e9892feacab
--- /dev/null
+++ b/debian/installer/modules/amd64/fb-modules
@@ -0,0 +1,4 @@
+#include <fb-modules>
+
+vesafb ?
+vga16fb
diff --git a/debian/installer/modules/amd64/firewire-core-modules b/debian/installer/modules/amd64/firewire-core-modules
new file mode 100644
index 000000000000..dcac80af9651
--- /dev/null
+++ b/debian/installer/modules/amd64/firewire-core-modules
@@ -0,0 +1 @@
+#include <firewire-core-modules>
diff --git a/debian/installer/modules/amd64/fuse-modules b/debian/installer/modules/amd64/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/amd64/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/amd64/i2c-modules b/debian/installer/modules/amd64/i2c-modules
new file mode 100644
index 000000000000..203a607e73ce
--- /dev/null
+++ b/debian/installer/modules/amd64/i2c-modules
@@ -0,0 +1 @@
+#include <i2c-modules>
diff --git a/debian/installer/modules/amd64/input-modules b/debian/installer/modules/amd64/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/amd64/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/amd64/isofs-modules b/debian/installer/modules/amd64/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/amd64/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/amd64/jfs-modules b/debian/installer/modules/amd64/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/amd64/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/amd64/kernel-image b/debian/installer/modules/amd64/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/amd64/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/amd64/loop-modules b/debian/installer/modules/amd64/loop-modules
new file mode 100644
index 000000000000..164467713763
--- /dev/null
+++ b/debian/installer/modules/amd64/loop-modules
@@ -0,0 +1,2 @@
+#include <loop-modules>
+
diff --git a/debian/installer/modules/amd64/md-modules b/debian/installer/modules/amd64/md-modules
new file mode 100644
index 000000000000..ade088ddbb2f
--- /dev/null
+++ b/debian/installer/modules/amd64/md-modules
@@ -0,0 +1,2 @@
+#include <md-modules>
+
diff --git a/debian/installer/modules/amd64/mmc-core-modules b/debian/installer/modules/amd64/mmc-core-modules
new file mode 100644
index 000000000000..7bf38465cf1b
--- /dev/null
+++ b/debian/installer/modules/amd64/mmc-core-modules
@@ -0,0 +1 @@
+#include <mmc-core-modules>
diff --git a/debian/installer/modules/amd64/mmc-modules b/debian/installer/modules/amd64/mmc-modules
new file mode 100644
index 000000000000..dadfd5334d62
--- /dev/null
+++ b/debian/installer/modules/amd64/mmc-modules
@@ -0,0 +1 @@
+#include <mmc-modules>
diff --git a/debian/installer/modules/amd64/mouse-modules b/debian/installer/modules/amd64/mouse-modules
new file mode 100644
index 000000000000..15fcb00eaa04
--- /dev/null
+++ b/debian/installer/modules/amd64/mouse-modules
@@ -0,0 +1 @@
+#include <mouse-modules>
diff --git a/debian/installer/modules/amd64/mtd-core-modules b/debian/installer/modules/amd64/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/amd64/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/amd64/multipath-modules b/debian/installer/modules/amd64/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/amd64/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/amd64/nbd-modules b/debian/installer/modules/amd64/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/amd64/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/amd64/nic-modules b/debian/installer/modules/amd64/nic-modules
new file mode 100644
index 000000000000..2512e83950dd
--- /dev/null
+++ b/debian/installer/modules/amd64/nic-modules
@@ -0,0 +1 @@
+#include <nic-modules>
diff --git a/debian/installer/modules/amd64/nic-pcmcia-modules b/debian/installer/modules/amd64/nic-pcmcia-modules
new file mode 100644
index 000000000000..7a0702cd5585
--- /dev/null
+++ b/debian/installer/modules/amd64/nic-pcmcia-modules
@@ -0,0 +1 @@
+#include <nic-pcmcia-modules>
diff --git a/debian/installer/modules/amd64/nic-shared-modules b/debian/installer/modules/amd64/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/amd64/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/amd64/nic-usb-modules b/debian/installer/modules/amd64/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/amd64/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/amd64/nic-wireless-modules b/debian/installer/modules/amd64/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/amd64/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/amd64/pata-modules b/debian/installer/modules/amd64/pata-modules
new file mode 100644
index 000000000000..8c4e514ae724
--- /dev/null
+++ b/debian/installer/modules/amd64/pata-modules
@@ -0,0 +1,2 @@
+#include <pata-modules>
+
diff --git a/debian/installer/modules/amd64/pcmcia-modules b/debian/installer/modules/amd64/pcmcia-modules
new file mode 100644
index 000000000000..2bb5350fe14f
--- /dev/null
+++ b/debian/installer/modules/amd64/pcmcia-modules
@@ -0,0 +1 @@
+#include <pcmcia-modules>
diff --git a/debian/installer/modules/amd64/pcmcia-storage-modules b/debian/installer/modules/amd64/pcmcia-storage-modules
new file mode 100644
index 000000000000..f73ae5bb9b42
--- /dev/null
+++ b/debian/installer/modules/amd64/pcmcia-storage-modules
@@ -0,0 +1 @@
+#include <pcmcia-storage-modules>
diff --git a/debian/installer/modules/amd64/ppp-modules b/debian/installer/modules/amd64/ppp-modules
new file mode 100644
index 000000000000..f1ae9b3d15ac
--- /dev/null
+++ b/debian/installer/modules/amd64/ppp-modules
@@ -0,0 +1,2 @@
+#include <ppp-modules>
+
diff --git a/debian/installer/modules/amd64/rfkill-modules b/debian/installer/modules/amd64/rfkill-modules
new file mode 100644
index 000000000000..77a2245cec6e
--- /dev/null
+++ b/debian/installer/modules/amd64/rfkill-modules
@@ -0,0 +1 @@
+#include <rfkill-modules>
diff --git a/debian/installer/modules/amd64/sata-modules b/debian/installer/modules/amd64/sata-modules
new file mode 100644
index 000000000000..01318c258b5a
--- /dev/null
+++ b/debian/installer/modules/amd64/sata-modules
@@ -0,0 +1 @@
+#include <sata-modules>
diff --git a/debian/installer/modules/amd64/scsi-core-modules b/debian/installer/modules/amd64/scsi-core-modules
new file mode 100644
index 000000000000..778a022fa751
--- /dev/null
+++ b/debian/installer/modules/amd64/scsi-core-modules
@@ -0,0 +1,4 @@
+#include <scsi-core-modules>
+
+# Needed by hv_storvsc in hyperv-modules as well as scsi-modules
+scsi_transport_fc
diff --git a/debian/installer/modules/amd64/scsi-modules b/debian/installer/modules/amd64/scsi-modules
new file mode 100644
index 000000000000..9b1fa27b98af
--- /dev/null
+++ b/debian/installer/modules/amd64/scsi-modules
@@ -0,0 +1,3 @@
+#include <scsi-modules>
+# To support nvme
+vmd
diff --git a/debian/installer/modules/amd64/scsi-nic-modules b/debian/installer/modules/amd64/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/amd64/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/amd64/serial-modules b/debian/installer/modules/amd64/serial-modules
new file mode 100644
index 000000000000..6ab8b8c3551b
--- /dev/null
+++ b/debian/installer/modules/amd64/serial-modules
@@ -0,0 +1 @@
+#include <serial-modules>
diff --git a/debian/installer/modules/amd64/sound-modules b/debian/installer/modules/amd64/sound-modules
new file mode 100644
index 000000000000..68395ab3d99a
--- /dev/null
+++ b/debian/installer/modules/amd64/sound-modules
@@ -0,0 +1 @@
+#include <sound-modules>
diff --git a/debian/installer/modules/amd64/speakup-modules b/debian/installer/modules/amd64/speakup-modules
new file mode 100644
index 000000000000..29592721a7aa
--- /dev/null
+++ b/debian/installer/modules/amd64/speakup-modules
@@ -0,0 +1 @@
+#include <speakup-modules>
diff --git a/debian/installer/modules/amd64/squashfs-modules b/debian/installer/modules/amd64/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/amd64/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/amd64/udf-modules b/debian/installer/modules/amd64/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/amd64/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/amd64/uinput-modules b/debian/installer/modules/amd64/uinput-modules
new file mode 100644
index 000000000000..58a833779442
--- /dev/null
+++ b/debian/installer/modules/amd64/uinput-modules
@@ -0,0 +1 @@
+#include <uinput-modules>
diff --git a/debian/installer/modules/amd64/usb-modules b/debian/installer/modules/amd64/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/amd64/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/amd64/usb-serial-modules b/debian/installer/modules/amd64/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/amd64/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/amd64/usb-storage-modules b/debian/installer/modules/amd64/usb-storage-modules
new file mode 100644
index 000000000000..272d95e2e8b1
--- /dev/null
+++ b/debian/installer/modules/amd64/usb-storage-modules
@@ -0,0 +1,2 @@
+#include <usb-storage-modules>
+
diff --git a/debian/installer/modules/amd64/xfs-modules b/debian/installer/modules/amd64/xfs-modules
new file mode 100644
index 000000000000..c020b5d399f9
--- /dev/null
+++ b/debian/installer/modules/amd64/xfs-modules
@@ -0,0 +1,2 @@
+#include <xfs-modules>
+
diff --git a/debian/installer/modules/arm64/ata-modules b/debian/installer/modules/arm64/ata-modules
new file mode 100644
index 000000000000..9409e7cde816
--- /dev/null
+++ b/debian/installer/modules/arm64/ata-modules
@@ -0,0 +1,2 @@
+#include <ata-modules>
+
diff --git a/debian/installer/modules/arm64/btrfs-modules b/debian/installer/modules/arm64/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/arm64/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/arm64/cdrom-core-modules b/debian/installer/modules/arm64/cdrom-core-modules
new file mode 100644
index 000000000000..e264d7aa3488
--- /dev/null
+++ b/debian/installer/modules/arm64/cdrom-core-modules
@@ -0,0 +1,2 @@
+#include <cdrom-core-modules>
+
diff --git a/debian/installer/modules/arm64/crc-modules b/debian/installer/modules/arm64/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/arm64/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/arm64/crypto-dm-modules b/debian/installer/modules/arm64/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/arm64/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/arm64/crypto-modules b/debian/installer/modules/arm64/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/arm64/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/arm64/efi-modules b/debian/installer/modules/arm64/efi-modules
new file mode 100644
index 000000000000..e1dc05e8f247
--- /dev/null
+++ b/debian/installer/modules/arm64/efi-modules
@@ -0,0 +1 @@
+#include <efi-modules>
diff --git a/debian/installer/modules/arm64/event-modules b/debian/installer/modules/arm64/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/arm64/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/arm64/ext4-modules b/debian/installer/modules/arm64/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/arm64/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/arm64/f2fs-modules b/debian/installer/modules/arm64/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/arm64/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/arm64/fat-modules b/debian/installer/modules/arm64/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/arm64/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/arm64/fb-modules b/debian/installer/modules/arm64/fb-modules
new file mode 100644
index 000000000000..f3a9e165b701
--- /dev/null
+++ b/debian/installer/modules/arm64/fb-modules
@@ -0,0 +1,20 @@
+#include <fb-modules>
+
+ast
+tegra-drm
+rockchipdrm
+hibmc-drm
+
+# For panel/backlight on some chromeos devices
+panel-simple
+pwm_bl
+pwm-cros-ec
+
+# For panel/backlight on Pinebook
+analogix-anx6345
+pwm-sun4i
+sun4i-drm
+sun8i-mixer
+
+# For panel/backlight on Pinebook Pro
+pwm-rockchip
diff --git a/debian/installer/modules/arm64/fuse-modules b/debian/installer/modules/arm64/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/arm64/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/arm64/i2c-modules b/debian/installer/modules/arm64/i2c-modules
new file mode 100644
index 000000000000..da7c94938cbe
--- /dev/null
+++ b/debian/installer/modules/arm64/i2c-modules
@@ -0,0 +1,4 @@
+#include <i2c-modules>
+i2c-tegra
+i2c-rk3x
+i2c-mv64xxx
diff --git a/debian/installer/modules/arm64/input-modules b/debian/installer/modules/arm64/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/arm64/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/arm64/isofs-modules b/debian/installer/modules/arm64/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/arm64/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/arm64/jfs-modules b/debian/installer/modules/arm64/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/arm64/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/arm64/kernel-image b/debian/installer/modules/arm64/kernel-image
new file mode 100644
index 000000000000..22ea2ebd3722
--- /dev/null
+++ b/debian/installer/modules/arm64/kernel-image
@@ -0,0 +1,37 @@
+#include <kernel-image>
+
+# Multifunction devices
+drivers/mfd/**
+
+# Regulators
+drivers/regulator/**
+
+# NIC,sata, and USB on Armada 8K
+phy-mvebu-cp110-comphy ?
+
+# SoC modules
+drivers/soc/**
+
+# Watchdog needed for reboot
+sunxi_wdt ?
+
+# For Turris MOX (u-boot enables the watchdog)
+armada_37xx_wdt ?
+
+# SPI devices
+drivers/spi/**
+
+# For cros_ec mfd device
+cros_ec_spi ?
+
+# PCIe PHYs
+phy-rockchip-pcie ?
+
+# For spi-rockchip
+pl330 ?
+
+# Regulator-SoC synchronization
+rockchip-io-domain ?
+
+# Pin controllers
+drivers/pinctrl/**
diff --git a/debian/installer/modules/arm64/leds-modules b/debian/installer/modules/arm64/leds-modules
new file mode 100644
index 000000000000..85d9f2565c1c
--- /dev/null
+++ b/debian/installer/modules/arm64/leds-modules
@@ -0,0 +1 @@
+#include <leds-modules>
diff --git a/debian/installer/modules/arm64/loop-modules b/debian/installer/modules/arm64/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/arm64/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/arm64/md-modules b/debian/installer/modules/arm64/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/arm64/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/arm64/mmc-modules b/debian/installer/modules/arm64/mmc-modules
new file mode 100644
index 000000000000..c9f12f3b9d7b
--- /dev/null
+++ b/debian/installer/modules/arm64/mmc-modules
@@ -0,0 +1,3 @@
+#include <mmc-modules>
+
+phy-rockchip-emmc
diff --git a/debian/installer/modules/arm64/mtd-core-modules b/debian/installer/modules/arm64/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/arm64/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/arm64/multipath-modules b/debian/installer/modules/arm64/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/arm64/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/arm64/nbd-modules b/debian/installer/modules/arm64/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/arm64/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/arm64/nic-modules b/debian/installer/modules/arm64/nic-modules
new file mode 100644
index 000000000000..863652ef741d
--- /dev/null
+++ b/debian/installer/modules/arm64/nic-modules
@@ -0,0 +1,2 @@
+#include <nic-modules>
+mdio-bcm-unimac
diff --git a/debian/installer/modules/arm64/nic-shared-modules b/debian/installer/modules/arm64/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/arm64/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/arm64/nic-usb-modules b/debian/installer/modules/arm64/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/arm64/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/arm64/nic-wireless-modules b/debian/installer/modules/arm64/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/arm64/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/arm64/ppp-modules b/debian/installer/modules/arm64/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/arm64/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/arm64/sata-modules b/debian/installer/modules/arm64/sata-modules
new file mode 100644
index 000000000000..740a93c365a3
--- /dev/null
+++ b/debian/installer/modules/arm64/sata-modules
@@ -0,0 +1,4 @@
+#include <sata-modules>
+phy-qcom-apq8064-sata
+phy-qcom-ipq806x-sata
+phy-xgene
diff --git a/debian/installer/modules/arm64/scsi-core-modules b/debian/installer/modules/arm64/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/arm64/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/arm64/scsi-modules b/debian/installer/modules/arm64/scsi-modules
new file mode 100644
index 000000000000..8909dfb79487
--- /dev/null
+++ b/debian/installer/modules/arm64/scsi-modules
@@ -0,0 +1 @@
+#include <scsi-modules>
diff --git a/debian/installer/modules/arm64/scsi-nic-modules b/debian/installer/modules/arm64/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/arm64/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/arm64/squashfs-modules b/debian/installer/modules/arm64/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/arm64/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/arm64/udf-modules b/debian/installer/modules/arm64/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/arm64/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/arm64/uinput-modules b/debian/installer/modules/arm64/uinput-modules
new file mode 100644
index 000000000000..58a833779442
--- /dev/null
+++ b/debian/installer/modules/arm64/uinput-modules
@@ -0,0 +1 @@
+#include <uinput-modules>
diff --git a/debian/installer/modules/arm64/usb-modules b/debian/installer/modules/arm64/usb-modules
new file mode 100644
index 000000000000..2461e61f3fc0
--- /dev/null
+++ b/debian/installer/modules/arm64/usb-modules
@@ -0,0 +1,11 @@
+#include <usb-modules>
+dwc2
+dwc3
+usb3503
+phy-rockchip-typec
+extcon-usbc-cros-ec
+
+# For USB-C on Pinebook Pro
+fusb302
+tcpm
+typec
diff --git a/debian/installer/modules/arm64/usb-serial-modules b/debian/installer/modules/arm64/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/arm64/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/arm64/usb-storage-modules b/debian/installer/modules/arm64/usb-storage-modules
new file mode 100644
index 000000000000..8c5e81b55e3a
--- /dev/null
+++ b/debian/installer/modules/arm64/usb-storage-modules
@@ -0,0 +1 @@
+#include <usb-storage-modules>
diff --git a/debian/installer/modules/arm64/xfs-modules b/debian/installer/modules/arm64/xfs-modules
new file mode 100644
index 000000000000..98374e2bbaf8
--- /dev/null
+++ b/debian/installer/modules/arm64/xfs-modules
@@ -0,0 +1 @@
+#include <xfs-modules>
diff --git a/debian/installer/modules/armel-marvell/btrfs-modules b/debian/installer/modules/armel-marvell/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/armel-marvell/cdrom-core-modules b/debian/installer/modules/armel-marvell/cdrom-core-modules
new file mode 100644
index 000000000000..e264d7aa3488
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/cdrom-core-modules
@@ -0,0 +1,2 @@
+#include <cdrom-core-modules>
+
diff --git a/debian/installer/modules/armel-marvell/crc-modules b/debian/installer/modules/armel-marvell/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/armel-marvell/crypto-dm-modules b/debian/installer/modules/armel-marvell/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/armel-marvell/crypto-modules b/debian/installer/modules/armel-marvell/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/armel-marvell/event-modules b/debian/installer/modules/armel-marvell/event-modules
new file mode 100644
index 000000000000..0bc9f776daec
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/event-modules
@@ -0,0 +1,2 @@
+#include <event-modules>
+gpio_keys
diff --git a/debian/installer/modules/armel-marvell/ext4-modules b/debian/installer/modules/armel-marvell/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/armel-marvell/f2fs-modules b/debian/installer/modules/armel-marvell/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/armel-marvell/fat-modules b/debian/installer/modules/armel-marvell/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/armel-marvell/fb-modules b/debian/installer/modules/armel-marvell/fb-modules
new file mode 100644
index 000000000000..701ee42c5ff7
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/fb-modules
@@ -0,0 +1 @@
+udlfb
diff --git a/debian/installer/modules/armel-marvell/fuse-modules b/debian/installer/modules/armel-marvell/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/armel-marvell/input-modules b/debian/installer/modules/armel-marvell/input-modules
new file mode 100644
index 000000000000..34183581c0e2
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/input-modules
@@ -0,0 +1,3 @@
+#include <input-modules>
+# Moved to event-modules for use in network-console builds
+gpio_keys -
diff --git a/debian/installer/modules/armel-marvell/ipv6-modules b/debian/installer/modules/armel-marvell/ipv6-modules
new file mode 100644
index 000000000000..1e3fc3388c0b
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/ipv6-modules
@@ -0,0 +1 @@
+#include <ipv6-modules>
diff --git a/debian/installer/modules/armel-marvell/isofs-modules b/debian/installer/modules/armel-marvell/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/armel-marvell/jffs2-modules b/debian/installer/modules/armel-marvell/jffs2-modules
new file mode 100644
index 000000000000..245c7d8a520e
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/jffs2-modules
@@ -0,0 +1 @@
+#include <jffs2-modules>
diff --git a/debian/installer/modules/armel-marvell/jfs-modules b/debian/installer/modules/armel-marvell/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/armel-marvell/kernel-image b/debian/installer/modules/armel-marvell/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/armel-marvell/leds-modules b/debian/installer/modules/armel-marvell/leds-modules
new file mode 100644
index 000000000000..b18bac13fb25
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/leds-modules
@@ -0,0 +1,2 @@
+leds-ns2
+leds-netxbig
diff --git a/debian/installer/modules/armel-marvell/loop-modules b/debian/installer/modules/armel-marvell/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/armel-marvell/md-modules b/debian/installer/modules/armel-marvell/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/armel-marvell/minix-modules b/debian/installer/modules/armel-marvell/minix-modules
new file mode 100644
index 000000000000..82b9843720a1
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/minix-modules
@@ -0,0 +1 @@
+#include <minix-modules>
diff --git a/debian/installer/modules/armel-marvell/mmc-core-modules b/debian/installer/modules/armel-marvell/mmc-core-modules
new file mode 100644
index 000000000000..7bf38465cf1b
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/mmc-core-modules
@@ -0,0 +1 @@
+#include <mmc-core-modules>
diff --git a/debian/installer/modules/armel-marvell/mmc-modules b/debian/installer/modules/armel-marvell/mmc-modules
new file mode 100644
index 000000000000..e8c7b46f5223
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/mmc-modules
@@ -0,0 +1,2 @@
+#include <mmc-modules>
+mvsdio
diff --git a/debian/installer/modules/armel-marvell/mouse-modules b/debian/installer/modules/armel-marvell/mouse-modules
new file mode 100644
index 000000000000..15fcb00eaa04
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/mouse-modules
@@ -0,0 +1 @@
+#include <mouse-modules>
diff --git a/debian/installer/modules/armel-marvell/mtd-core-modules b/debian/installer/modules/armel-marvell/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/armel-marvell/mtd-modules b/debian/installer/modules/armel-marvell/mtd-modules
new file mode 100644
index 000000000000..be36016c97e0
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/mtd-modules
@@ -0,0 +1,12 @@
+#include <mtd-modules>
+spi-nor
+cfi_probe
+gen_probe
+jedec_probe
+nand
+orion_nand
+ofpart
+mtdblock
+physmap
+cmdlinepart
+spi-orion
diff --git a/debian/installer/modules/armel-marvell/multipath-modules b/debian/installer/modules/armel-marvell/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/armel-marvell/nbd-modules b/debian/installer/modules/armel-marvell/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/armel-marvell/nic-modules b/debian/installer/modules/armel-marvell/nic-modules
new file mode 100644
index 000000000000..1a2cdb1fc9fe
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/nic-modules
@@ -0,0 +1,2 @@
+mv643xx_eth
+mvmdio
diff --git a/debian/installer/modules/armel-marvell/nic-shared-modules b/debian/installer/modules/armel-marvell/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/armel-marvell/nic-usb-modules b/debian/installer/modules/armel-marvell/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/armel-marvell/ppp-modules b/debian/installer/modules/armel-marvell/ppp-modules
new file mode 100644
index 000000000000..f1ae9b3d15ac
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/ppp-modules
@@ -0,0 +1,2 @@
+#include <ppp-modules>
+
diff --git a/debian/installer/modules/armel-marvell/sata-modules b/debian/installer/modules/armel-marvell/sata-modules
new file mode 100644
index 000000000000..3adbfa16df88
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/sata-modules
@@ -0,0 +1,2 @@
+ahci
+sata_mv
diff --git a/debian/installer/modules/armel-marvell/scsi-core-modules b/debian/installer/modules/armel-marvell/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/armel-marvell/squashfs-modules b/debian/installer/modules/armel-marvell/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/armel-marvell/udf-modules b/debian/installer/modules/armel-marvell/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/armel-marvell/uinput-modules b/debian/installer/modules/armel-marvell/uinput-modules
new file mode 100644
index 000000000000..58a833779442
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/uinput-modules
@@ -0,0 +1 @@
+#include <uinput-modules>
diff --git a/debian/installer/modules/armel-marvell/usb-modules b/debian/installer/modules/armel-marvell/usb-modules
new file mode 100644
index 000000000000..772c4afee3a5
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/usb-modules
@@ -0,0 +1,2 @@
+#include <usb-modules>
+ehci-orion
diff --git a/debian/installer/modules/armel-marvell/usb-serial-modules b/debian/installer/modules/armel-marvell/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/armel-marvell/usb-storage-modules b/debian/installer/modules/armel-marvell/usb-storage-modules
new file mode 100644
index 000000000000..8c5e81b55e3a
--- /dev/null
+++ b/debian/installer/modules/armel-marvell/usb-storage-modules
@@ -0,0 +1 @@
+#include <usb-storage-modules>
diff --git a/debian/installer/modules/armhf-armmp/ata-modules b/debian/installer/modules/armhf-armmp/ata-modules
new file mode 100644
index 000000000000..04d9c88411a2
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/ata-modules
@@ -0,0 +1 @@
+libata
diff --git a/debian/installer/modules/armhf-armmp/btrfs-modules b/debian/installer/modules/armhf-armmp/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/armhf-armmp/cdrom-core-modules b/debian/installer/modules/armhf-armmp/cdrom-core-modules
new file mode 100644
index 000000000000..3ff69b48f4fc
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/cdrom-core-modules
@@ -0,0 +1 @@
+#include <cdrom-core-modules>
diff --git a/debian/installer/modules/armhf-armmp/crc-modules b/debian/installer/modules/armhf-armmp/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/armhf-armmp/crypto-dm-modules b/debian/installer/modules/armhf-armmp/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/armhf-armmp/crypto-modules b/debian/installer/modules/armhf-armmp/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/armhf-armmp/efi-modules b/debian/installer/modules/armhf-armmp/efi-modules
new file mode 100644
index 000000000000..e1dc05e8f247
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/efi-modules
@@ -0,0 +1 @@
+#include <efi-modules>
diff --git a/debian/installer/modules/armhf-armmp/event-modules b/debian/installer/modules/armhf-armmp/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/armhf-armmp/ext4-modules b/debian/installer/modules/armhf-armmp/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/armhf-armmp/f2fs-modules b/debian/installer/modules/armhf-armmp/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/armhf-armmp/fat-modules b/debian/installer/modules/armhf-armmp/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/armhf-armmp/fb-modules b/debian/installer/modules/armhf-armmp/fb-modules
new file mode 100644
index 000000000000..f3d4b2a64ee1
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/fb-modules
@@ -0,0 +1,5 @@
+#include <fb-modules>
+
+imxdrm
+dw_hdmi-imx
+tegra-drm
diff --git a/debian/installer/modules/armhf-armmp/fuse-modules b/debian/installer/modules/armhf-armmp/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/armhf-armmp/i2c-modules b/debian/installer/modules/armhf-armmp/i2c-modules
new file mode 100644
index 000000000000..5690c2f51f22
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/i2c-modules
@@ -0,0 +1,5 @@
+#include <i2c-modules>
+i2c-exynos5
+i2c-mv64xxx
+i2c-rk3x
+
diff --git a/debian/installer/modules/armhf-armmp/input-modules b/debian/installer/modules/armhf-armmp/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/armhf-armmp/isofs-modules b/debian/installer/modules/armhf-armmp/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/armhf-armmp/jfs-modules b/debian/installer/modules/armhf-armmp/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/armhf-armmp/kernel-image b/debian/installer/modules/armhf-armmp/kernel-image
new file mode 100644
index 000000000000..c089d9a23174
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/kernel-image
@@ -0,0 +1,27 @@
+#include <kernel-image>
+
+# Clocks
+clk-palmas ?
+clk-s2mps11 ?
+clk-twl6040 ?
+
+# GPIO
+gpio-da9052 ?
+gpio-pca953x ?
+gpio-mxc ?
+
+# PCIe PHYs
+phy-omap-control ?
+phy-ti-pipe3 ?
+
+# Regulators
+drivers/regulator/**
+
+# Powersupply
+axp20x_usb_power ?
+
+# Watchdog needed for reboot
+sunxi_wdt ?
+
+# Regulator-SoC synchronization
+rockchip-io-domain ?
diff --git a/debian/installer/modules/armhf-armmp/leds-modules b/debian/installer/modules/armhf-armmp/leds-modules
new file mode 100644
index 000000000000..85d9f2565c1c
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/leds-modules
@@ -0,0 +1 @@
+#include <leds-modules>
diff --git a/debian/installer/modules/armhf-armmp/loop-modules b/debian/installer/modules/armhf-armmp/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/armhf-armmp/md-modules b/debian/installer/modules/armhf-armmp/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/armhf-armmp/mmc-modules b/debian/installer/modules/armhf-armmp/mmc-modules
new file mode 100644
index 000000000000..dadfd5334d62
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/mmc-modules
@@ -0,0 +1 @@
+#include <mmc-modules>
diff --git a/debian/installer/modules/armhf-armmp/mtd-modules b/debian/installer/modules/armhf-armmp/mtd-modules
new file mode 100644
index 000000000000..fb81032eaee1
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/mtd-modules
@@ -0,0 +1,3 @@
+#include <mtd-modules>
+mxc_nand
+marvell_nand
diff --git a/debian/installer/modules/armhf-armmp/multipath-modules b/debian/installer/modules/armhf-armmp/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/armhf-armmp/nbd-modules b/debian/installer/modules/armhf-armmp/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/armhf-armmp/nic-modules b/debian/installer/modules/armhf-armmp/nic-modules
new file mode 100644
index 000000000000..2f94f2d83167
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/nic-modules
@@ -0,0 +1,14 @@
+#include <nic-modules>
+mvneta
+mvmdio
+smsc911x
+stmmac
+stmmac-platform
+dwmac-generic
+dwmac-altr-socfpga
+dwmac-sunxi
+sun4i-emac
+xgmac
+ti_cpsw
+davinci_mdio
+mdio-aspeed
diff --git a/debian/installer/modules/armhf-armmp/nic-shared-modules b/debian/installer/modules/armhf-armmp/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/armhf-armmp/nic-usb-modules b/debian/installer/modules/armhf-armmp/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/armhf-armmp/nic-wireless-modules b/debian/installer/modules/armhf-armmp/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/armhf-armmp/pata-modules b/debian/installer/modules/armhf-armmp/pata-modules
new file mode 100644
index 000000000000..2ff7276d4026
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/pata-modules
@@ -0,0 +1 @@
+pata_imx
diff --git a/debian/installer/modules/armhf-armmp/ppp-modules b/debian/installer/modules/armhf-armmp/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/armhf-armmp/sata-modules b/debian/installer/modules/armhf-armmp/sata-modules
new file mode 100644
index 000000000000..8e7e1ed2c5ea
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/sata-modules
@@ -0,0 +1,5 @@
+#include <sata-modules>
+sata_highbank
+
+# SATA PHYs
+phy-exynos5250-sata
diff --git a/debian/installer/modules/armhf-armmp/scsi-core-modules b/debian/installer/modules/armhf-armmp/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/armhf-armmp/scsi-modules b/debian/installer/modules/armhf-armmp/scsi-modules
new file mode 100644
index 000000000000..675462a141fa
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/scsi-modules
@@ -0,0 +1,2 @@
+#include <scsi-modules>
+
diff --git a/debian/installer/modules/armhf-armmp/scsi-nic-modules b/debian/installer/modules/armhf-armmp/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/armhf-armmp/squashfs-modules b/debian/installer/modules/armhf-armmp/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/armhf-armmp/udf-modules b/debian/installer/modules/armhf-armmp/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/armhf-armmp/uinput-modules b/debian/installer/modules/armhf-armmp/uinput-modules
new file mode 100644
index 000000000000..58a833779442
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/uinput-modules
@@ -0,0 +1 @@
+#include <uinput-modules>
diff --git a/debian/installer/modules/armhf-armmp/usb-modules b/debian/installer/modules/armhf-armmp/usb-modules
new file mode 100644
index 000000000000..5917b7f79aea
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/usb-modules
@@ -0,0 +1,4 @@
+#include <usb-modules>
+omap-ocp2scp
+extcon-usb-gpio
+usb3503
diff --git a/debian/installer/modules/armhf-armmp/usb-serial-modules b/debian/installer/modules/armhf-armmp/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/armhf-armmp/usb-storage-modules b/debian/installer/modules/armhf-armmp/usb-storage-modules
new file mode 100644
index 000000000000..8c5e81b55e3a
--- /dev/null
+++ b/debian/installer/modules/armhf-armmp/usb-storage-modules
@@ -0,0 +1 @@
+#include <usb-storage-modules>
diff --git a/debian/installer/modules/ata-modules b/debian/installer/modules/ata-modules
new file mode 100644
index 000000000000..6ca33ce0a159
--- /dev/null
+++ b/debian/installer/modules/ata-modules
@@ -0,0 +1,2 @@
+libata
+ata_generic
diff --git a/debian/installer/modules/btrfs-modules b/debian/installer/modules/btrfs-modules
new file mode 100644
index 000000000000..00531f654217
--- /dev/null
+++ b/debian/installer/modules/btrfs-modules
@@ -0,0 +1 @@
+btrfs
diff --git a/debian/installer/modules/cdrom-core-modules b/debian/installer/modules/cdrom-core-modules
new file mode 100644
index 000000000000..62e5e83a3be5
--- /dev/null
+++ b/debian/installer/modules/cdrom-core-modules
@@ -0,0 +1,2 @@
+cdrom ?
+sr_mod ?
diff --git a/debian/installer/modules/crc-modules b/debian/installer/modules/crc-modules
new file mode 100644
index 000000000000..349f0afcba7b
--- /dev/null
+++ b/debian/installer/modules/crc-modules
@@ -0,0 +1,7 @@
+crc-ccitt
+libcrc32c
+crc32_generic
+crc32c_generic
+crc-itu-t
+crc16
+crc7 ?
diff --git a/debian/installer/modules/crypto-dm-modules b/debian/installer/modules/crypto-dm-modules
new file mode 100644
index 000000000000..189131fc1cf8
--- /dev/null
+++ b/debian/installer/modules/crypto-dm-modules
@@ -0,0 +1 @@
+dm-crypt
diff --git a/debian/installer/modules/crypto-modules b/debian/installer/modules/crypto-modules
new file mode 100644
index 000000000000..22460e49796c
--- /dev/null
+++ b/debian/installer/modules/crypto-modules
@@ -0,0 +1,14 @@
+aes_generic
+blowfish_generic
+twofish_generic
+serpent_generic
+sha256_generic
+arc4 ?
+cbc ?
+ccm
+ctr
+ecb
+xts
+
+# For LUKS2 in cryptsetup
+algif_skcipher
diff --git a/debian/installer/modules/efi-modules b/debian/installer/modules/efi-modules
new file mode 100644
index 000000000000..f9ec24485ae8
--- /dev/null
+++ b/debian/installer/modules/efi-modules
@@ -0,0 +1 @@
+efivarfs
diff --git a/debian/installer/modules/event-modules b/debian/installer/modules/event-modules
new file mode 100644
index 000000000000..97a5e58aa9c1
--- /dev/null
+++ b/debian/installer/modules/event-modules
@@ -0,0 +1 @@
+evdev
diff --git a/debian/installer/modules/ext4-modules b/debian/installer/modules/ext4-modules
new file mode 100644
index 000000000000..610034258b66
--- /dev/null
+++ b/debian/installer/modules/ext4-modules
@@ -0,0 +1,2 @@
+ext4
+jbd2
diff --git a/debian/installer/modules/f2fs-modules b/debian/installer/modules/f2fs-modules
new file mode 100644
index 000000000000..08e5e7fa192a
--- /dev/null
+++ b/debian/installer/modules/f2fs-modules
@@ -0,0 +1 @@
+f2fs
diff --git a/debian/installer/modules/fat-modules b/debian/installer/modules/fat-modules
new file mode 100644
index 000000000000..0498cf834d44
--- /dev/null
+++ b/debian/installer/modules/fat-modules
@@ -0,0 +1,6 @@
+fat ?
+vfat
+# the default codepage for fat (as of 2.6.8)
+nls_cp437 ?
+# the default i/o character set for fat (as of 4.7.2-1)
+nls_ascii ?
diff --git a/debian/installer/modules/fb-modules b/debian/installer/modules/fb-modules
new file mode 100644
index 000000000000..f17b6e6ae839
--- /dev/null
+++ b/debian/installer/modules/fb-modules
@@ -0,0 +1,6 @@
+# We don't include all DRM drivers here as on many platforms we can
+# call system firmware to get hold of a simple framebuffer
+
+drm
+drm_kms_helper
+virtio-gpu ?
diff --git a/debian/installer/modules/firewire-core-modules b/debian/installer/modules/firewire-core-modules
new file mode 100644
index 000000000000..bcc31d50aa48
--- /dev/null
+++ b/debian/installer/modules/firewire-core-modules
@@ -0,0 +1,3 @@
+firewire-core
+firewire-ohci
+firewire-sbp2
diff --git a/debian/installer/modules/fuse-modules b/debian/installer/modules/fuse-modules
new file mode 100644
index 000000000000..a517c488f349
--- /dev/null
+++ b/debian/installer/modules/fuse-modules
@@ -0,0 +1 @@
+fuse
diff --git a/debian/installer/modules/hfs-modules b/debian/installer/modules/hfs-modules
new file mode 100644
index 000000000000..4a311558e6f2
--- /dev/null
+++ b/debian/installer/modules/hfs-modules
@@ -0,0 +1,2 @@
+hfs
+hfsplus
diff --git a/debian/installer/modules/hppa-parisc64/ata-modules b/debian/installer/modules/hppa-parisc64/ata-modules
new file mode 100644
index 000000000000..08f295ad210d
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/ata-modules
@@ -0,0 +1 @@
+#include "../hppa/ata-modules"
diff --git a/debian/installer/modules/hppa-parisc64/btrfs-modules b/debian/installer/modules/hppa-parisc64/btrfs-modules
new file mode 100644
index 000000000000..677b351f7b98
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/btrfs-modules
@@ -0,0 +1 @@
+#include "../hppa/btrfs-modules"
diff --git a/debian/installer/modules/hppa-parisc64/cdrom-core-modules b/debian/installer/modules/hppa-parisc64/cdrom-core-modules
new file mode 100644
index 000000000000..9656269beb64
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/cdrom-core-modules
@@ -0,0 +1 @@
+#include "../hppa/cdrom-core-modules"
diff --git a/debian/installer/modules/hppa-parisc64/crc-modules b/debian/installer/modules/hppa-parisc64/crc-modules
new file mode 100644
index 000000000000..f75e86b30df5
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/crc-modules
@@ -0,0 +1 @@
+#include "../hppa/crc-modules"
diff --git a/debian/installer/modules/hppa-parisc64/crypto-dm-modules b/debian/installer/modules/hppa-parisc64/crypto-dm-modules
new file mode 100644
index 000000000000..ed740a5513f1
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/crypto-dm-modules
@@ -0,0 +1 @@
+#include "../hppa/crypto-dm-modules"
diff --git a/debian/installer/modules/hppa-parisc64/crypto-modules b/debian/installer/modules/hppa-parisc64/crypto-modules
new file mode 100644
index 000000000000..1c4d2d0cf592
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/crypto-modules
@@ -0,0 +1 @@
+#include "../hppa/crypto-modules"
diff --git a/debian/installer/modules/hppa-parisc64/event-modules b/debian/installer/modules/hppa-parisc64/event-modules
new file mode 100644
index 000000000000..1a5cbb04af9d
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/event-modules
@@ -0,0 +1 @@
+#include "../hppa/event-modules"
diff --git a/debian/installer/modules/hppa-parisc64/ext4-modules b/debian/installer/modules/hppa-parisc64/ext4-modules
new file mode 100644
index 000000000000..00920ace1118
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/ext4-modules
@@ -0,0 +1 @@
+#include "../hppa/ext4-modules"
diff --git a/debian/installer/modules/hppa-parisc64/f2fs-modules b/debian/installer/modules/hppa-parisc64/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/hppa-parisc64/fat-modules b/debian/installer/modules/hppa-parisc64/fat-modules
new file mode 100644
index 000000000000..ef6dd33ff50d
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/fat-modules
@@ -0,0 +1 @@
+#include "../hppa/fat-modules"
diff --git a/debian/installer/modules/hppa-parisc64/fb-modules b/debian/installer/modules/hppa-parisc64/fb-modules
new file mode 100644
index 000000000000..d0424dc9f35b
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/fb-modules
@@ -0,0 +1,4 @@
+#include <fb-modules>
+
+radeon ?
+ttm ?
diff --git a/debian/installer/modules/hppa-parisc64/fuse-modules b/debian/installer/modules/hppa-parisc64/fuse-modules
new file mode 100644
index 000000000000..06f8ccf63172
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/fuse-modules
@@ -0,0 +1 @@
+#include "../hppa/fuse-modules"
diff --git a/debian/installer/modules/hppa-parisc64/input-modules b/debian/installer/modules/hppa-parisc64/input-modules
new file mode 100644
index 000000000000..cdeaa30fed3e
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/input-modules
@@ -0,0 +1 @@
+#include "../hppa/input-modules"
diff --git a/debian/installer/modules/hppa-parisc64/isofs-modules b/debian/installer/modules/hppa-parisc64/isofs-modules
new file mode 100644
index 000000000000..9e8e2dfb1fae
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/isofs-modules
@@ -0,0 +1 @@
+#include "../hppa/isofs-modules"
diff --git a/debian/installer/modules/hppa-parisc64/jfs-modules b/debian/installer/modules/hppa-parisc64/jfs-modules
new file mode 100644
index 000000000000..a3b6beb7d3a7
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/jfs-modules
@@ -0,0 +1 @@
+#include "../hppa/jfs-modules"
diff --git a/debian/installer/modules/hppa-parisc64/kernel-image b/debian/installer/modules/hppa-parisc64/kernel-image
new file mode 100644
index 000000000000..93d59f539817
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/kernel-image
@@ -0,0 +1 @@
+#include "../hppa/kernel-image"
diff --git a/debian/installer/modules/hppa-parisc64/loop-modules b/debian/installer/modules/hppa-parisc64/loop-modules
new file mode 100644
index 000000000000..721ffecf45e4
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/loop-modules
@@ -0,0 +1 @@
+#include "../hppa/loop-modules"
diff --git a/debian/installer/modules/hppa-parisc64/md-modules b/debian/installer/modules/hppa-parisc64/md-modules
new file mode 100644
index 000000000000..d7e97202280e
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/md-modules
@@ -0,0 +1 @@
+#include "../hppa/md-modules"
diff --git a/debian/installer/modules/hppa-parisc64/mouse-modules b/debian/installer/modules/hppa-parisc64/mouse-modules
new file mode 100644
index 000000000000..f9edf83b0163
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/mouse-modules
@@ -0,0 +1 @@
+#include "../hppa/mouse-modules"
diff --git a/debian/installer/modules/hppa-parisc64/multipath-modules b/debian/installer/modules/hppa-parisc64/multipath-modules
new file mode 100644
index 000000000000..46f68a37a48f
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/multipath-modules
@@ -0,0 +1 @@
+#include "../hppa/multipath-modules"
diff --git a/debian/installer/modules/hppa-parisc64/nbd-modules b/debian/installer/modules/hppa-parisc64/nbd-modules
new file mode 100644
index 000000000000..b4c4622c7318
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/nbd-modules
@@ -0,0 +1 @@
+#include "../hppa/nbd-modules"
diff --git a/debian/installer/modules/hppa-parisc64/nic-modules b/debian/installer/modules/hppa-parisc64/nic-modules
new file mode 100644
index 000000000000..e15b2d573904
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/nic-modules
@@ -0,0 +1 @@
+#include "../hppa/nic-modules"
diff --git a/debian/installer/modules/hppa-parisc64/nic-shared-modules b/debian/installer/modules/hppa-parisc64/nic-shared-modules
new file mode 100644
index 000000000000..fd0b19c80712
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/nic-shared-modules
@@ -0,0 +1 @@
+#include "../hppa/nic-shared-modules"
diff --git a/debian/installer/modules/hppa-parisc64/nic-usb-modules b/debian/installer/modules/hppa-parisc64/nic-usb-modules
new file mode 100644
index 000000000000..261192d2e87a
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/nic-usb-modules
@@ -0,0 +1 @@
+#include "../hppa/nic-usb-modules"
diff --git a/debian/installer/modules/hppa-parisc64/pata-modules b/debian/installer/modules/hppa-parisc64/pata-modules
new file mode 100644
index 000000000000..46bc71900e6d
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/pata-modules
@@ -0,0 +1 @@
+#include "../hppa/pata-modules"
diff --git a/debian/installer/modules/hppa-parisc64/ppp-modules b/debian/installer/modules/hppa-parisc64/ppp-modules
new file mode 100644
index 000000000000..b78085c3487e
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/ppp-modules
@@ -0,0 +1 @@
+#include "../hppa/ppp-modules"
diff --git a/debian/installer/modules/hppa-parisc64/sata-modules b/debian/installer/modules/hppa-parisc64/sata-modules
new file mode 100644
index 000000000000..a2ebc29835de
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/sata-modules
@@ -0,0 +1 @@
+#include "../hppa/sata-modules"
diff --git a/debian/installer/modules/hppa-parisc64/scsi-core-modules b/debian/installer/modules/hppa-parisc64/scsi-core-modules
new file mode 100644
index 000000000000..ff84a7089d9b
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/scsi-core-modules
@@ -0,0 +1 @@
+#include "../hppa/scsi-core-modules"
diff --git a/debian/installer/modules/hppa-parisc64/scsi-modules b/debian/installer/modules/hppa-parisc64/scsi-modules
new file mode 100644
index 000000000000..229e060a8f07
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/scsi-modules
@@ -0,0 +1 @@
+#include "../hppa/scsi-modules"
diff --git a/debian/installer/modules/hppa-parisc64/serial-modules b/debian/installer/modules/hppa-parisc64/serial-modules
new file mode 100644
index 000000000000..a84a550e85b7
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/serial-modules
@@ -0,0 +1 @@
+#include "../hppa/serial-modules"
diff --git a/debian/installer/modules/hppa-parisc64/squashfs-modules b/debian/installer/modules/hppa-parisc64/squashfs-modules
new file mode 100644
index 000000000000..f0c79aa4ee92
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/squashfs-modules
@@ -0,0 +1 @@
+#include "../hppa/squashfs-modules"
diff --git a/debian/installer/modules/hppa-parisc64/usb-modules b/debian/installer/modules/hppa-parisc64/usb-modules
new file mode 100644
index 000000000000..df2abbbd9f3c
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/usb-modules
@@ -0,0 +1 @@
+#include "../hppa/usb-modules"
diff --git a/debian/installer/modules/hppa-parisc64/usb-serial-modules b/debian/installer/modules/hppa-parisc64/usb-serial-modules
new file mode 100644
index 000000000000..1dd05036f229
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/usb-serial-modules
@@ -0,0 +1 @@
+#include "../hppa/usb-serial-modules"
diff --git a/debian/installer/modules/hppa-parisc64/usb-storage-modules b/debian/installer/modules/hppa-parisc64/usb-storage-modules
new file mode 100644
index 000000000000..5562ed4c879e
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/usb-storage-modules
@@ -0,0 +1 @@
+#include "../hppa/usb-storage-modules"
diff --git a/debian/installer/modules/hppa-parisc64/xfs-modules b/debian/installer/modules/hppa-parisc64/xfs-modules
new file mode 100644
index 000000000000..7960e0bb2a6a
--- /dev/null
+++ b/debian/installer/modules/hppa-parisc64/xfs-modules
@@ -0,0 +1 @@
+#include "../hppa/xfs-modules"
diff --git a/debian/installer/modules/hppa/ata-modules b/debian/installer/modules/hppa/ata-modules
new file mode 100644
index 000000000000..b81c0f38b74a
--- /dev/null
+++ b/debian/installer/modules/hppa/ata-modules
@@ -0,0 +1 @@
+#include <ata-modules>
diff --git a/debian/installer/modules/hppa/btrfs-modules b/debian/installer/modules/hppa/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/hppa/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/hppa/cdrom-core-modules b/debian/installer/modules/hppa/cdrom-core-modules
new file mode 100644
index 000000000000..e264d7aa3488
--- /dev/null
+++ b/debian/installer/modules/hppa/cdrom-core-modules
@@ -0,0 +1,2 @@
+#include <cdrom-core-modules>
+
diff --git a/debian/installer/modules/hppa/crc-modules b/debian/installer/modules/hppa/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/hppa/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/hppa/crypto-dm-modules b/debian/installer/modules/hppa/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/hppa/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/hppa/crypto-modules b/debian/installer/modules/hppa/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/hppa/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/hppa/event-modules b/debian/installer/modules/hppa/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/hppa/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/hppa/ext4-modules b/debian/installer/modules/hppa/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/hppa/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/hppa/f2fs-modules b/debian/installer/modules/hppa/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/hppa/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/hppa/fat-modules b/debian/installer/modules/hppa/fat-modules
new file mode 100644
index 000000000000..cce8fd30ca4f
--- /dev/null
+++ b/debian/installer/modules/hppa/fat-modules
@@ -0,0 +1,2 @@
+#include <fat-modules>
+
diff --git a/debian/installer/modules/hppa/fuse-modules b/debian/installer/modules/hppa/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/hppa/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/hppa/input-modules b/debian/installer/modules/hppa/input-modules
new file mode 100644
index 000000000000..9d4cbf6fa7ae
--- /dev/null
+++ b/debian/installer/modules/hppa/input-modules
@@ -0,0 +1,6 @@
+#include <input-modules>
+hil_kbd ?
+hilkbd ?
+hp_sdc_mlc ?
+hil_mlc ?
+hp_sdc ?
diff --git a/debian/installer/modules/hppa/isofs-modules b/debian/installer/modules/hppa/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/hppa/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/hppa/jfs-modules b/debian/installer/modules/hppa/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/hppa/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/hppa/kernel-image b/debian/installer/modules/hppa/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/hppa/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/hppa/loop-modules b/debian/installer/modules/hppa/loop-modules
new file mode 100644
index 000000000000..164467713763
--- /dev/null
+++ b/debian/installer/modules/hppa/loop-modules
@@ -0,0 +1,2 @@
+#include <loop-modules>
+
diff --git a/debian/installer/modules/hppa/md-modules b/debian/installer/modules/hppa/md-modules
new file mode 100644
index 000000000000..ade088ddbb2f
--- /dev/null
+++ b/debian/installer/modules/hppa/md-modules
@@ -0,0 +1,2 @@
+#include <md-modules>
+
diff --git a/debian/installer/modules/hppa/mouse-modules b/debian/installer/modules/hppa/mouse-modules
new file mode 100644
index 000000000000..15fcb00eaa04
--- /dev/null
+++ b/debian/installer/modules/hppa/mouse-modules
@@ -0,0 +1 @@
+#include <mouse-modules>
diff --git a/debian/installer/modules/hppa/multipath-modules b/debian/installer/modules/hppa/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/hppa/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/hppa/nbd-modules b/debian/installer/modules/hppa/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/hppa/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/hppa/nic-modules b/debian/installer/modules/hppa/nic-modules
new file mode 100644
index 000000000000..8a4b656c9ad9
--- /dev/null
+++ b/debian/installer/modules/hppa/nic-modules
@@ -0,0 +1,4 @@
+lasi_82596
+tg3
+tulip
+e1000
diff --git a/debian/installer/modules/hppa/nic-shared-modules b/debian/installer/modules/hppa/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/hppa/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/hppa/nic-usb-modules b/debian/installer/modules/hppa/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/hppa/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/hppa/pata-modules b/debian/installer/modules/hppa/pata-modules
new file mode 100644
index 000000000000..8c4e514ae724
--- /dev/null
+++ b/debian/installer/modules/hppa/pata-modules
@@ -0,0 +1,2 @@
+#include <pata-modules>
+
diff --git a/debian/installer/modules/hppa/ppp-modules b/debian/installer/modules/hppa/ppp-modules
new file mode 100644
index 000000000000..f1ae9b3d15ac
--- /dev/null
+++ b/debian/installer/modules/hppa/ppp-modules
@@ -0,0 +1,2 @@
+#include <ppp-modules>
+
diff --git a/debian/installer/modules/hppa/sata-modules b/debian/installer/modules/hppa/sata-modules
new file mode 100644
index 000000000000..071cb860bbc5
--- /dev/null
+++ b/debian/installer/modules/hppa/sata-modules
@@ -0,0 +1,2 @@
+#include <sata-modules>
+
diff --git a/debian/installer/modules/hppa/scsi-core-modules b/debian/installer/modules/hppa/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/hppa/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/hppa/scsi-modules b/debian/installer/modules/hppa/scsi-modules
new file mode 100644
index 000000000000..8f289efb81dc
--- /dev/null
+++ b/debian/installer/modules/hppa/scsi-modules
@@ -0,0 +1,18 @@
+aic79xx
+aic7xxx
+BusLogic ?
+sym53c8xx
+sym53c8xx_2 ?
+53c700
+ch
+lasi700
+sg
+st
+zalon7xx
+megaraid ?
+megaraid_mbox ?
+megaraid_mm ?
+megaraid_sas ?
+qlogicfas408
+mptbase
+mptspi
diff --git a/debian/installer/modules/hppa/serial-modules b/debian/installer/modules/hppa/serial-modules
new file mode 100644
index 000000000000..6ab8b8c3551b
--- /dev/null
+++ b/debian/installer/modules/hppa/serial-modules
@@ -0,0 +1 @@
+#include <serial-modules>
diff --git a/debian/installer/modules/hppa/squashfs-modules b/debian/installer/modules/hppa/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/hppa/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/hppa/usb-modules b/debian/installer/modules/hppa/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/hppa/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/hppa/usb-serial-modules b/debian/installer/modules/hppa/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/hppa/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/hppa/usb-storage-modules b/debian/installer/modules/hppa/usb-storage-modules
new file mode 100644
index 000000000000..272d95e2e8b1
--- /dev/null
+++ b/debian/installer/modules/hppa/usb-storage-modules
@@ -0,0 +1,2 @@
+#include <usb-storage-modules>
+
diff --git a/debian/installer/modules/hppa/xfs-modules b/debian/installer/modules/hppa/xfs-modules
new file mode 100644
index 000000000000..98374e2bbaf8
--- /dev/null
+++ b/debian/installer/modules/hppa/xfs-modules
@@ -0,0 +1 @@
+#include <xfs-modules>
diff --git a/debian/installer/modules/i2c-modules b/debian/installer/modules/i2c-modules
new file mode 100644
index 000000000000..0c4999fa74e2
--- /dev/null
+++ b/debian/installer/modules/i2c-modules
@@ -0,0 +1,3 @@
+i2c-core
+i2c-algo-bit
+i2c-designware-platform ?
diff --git a/debian/installer/modules/i386/acpi-modules b/debian/installer/modules/i386/acpi-modules
new file mode 100644
index 000000000000..307528fb17e9
--- /dev/null
+++ b/debian/installer/modules/i386/acpi-modules
@@ -0,0 +1,2 @@
+#include <acpi-modules>
+
diff --git a/debian/installer/modules/i386/ata-modules b/debian/installer/modules/i386/ata-modules
new file mode 100644
index 000000000000..9409e7cde816
--- /dev/null
+++ b/debian/installer/modules/i386/ata-modules
@@ -0,0 +1,2 @@
+#include <ata-modules>
+
diff --git a/debian/installer/modules/i386/btrfs-modules b/debian/installer/modules/i386/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/i386/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/i386/cdrom-core-modules b/debian/installer/modules/i386/cdrom-core-modules
new file mode 100644
index 000000000000..e264d7aa3488
--- /dev/null
+++ b/debian/installer/modules/i386/cdrom-core-modules
@@ -0,0 +1,2 @@
+#include <cdrom-core-modules>
+
diff --git a/debian/installer/modules/i386/crc-modules b/debian/installer/modules/i386/crc-modules
new file mode 100644
index 000000000000..191b9dfa8fb6
--- /dev/null
+++ b/debian/installer/modules/i386/crc-modules
@@ -0,0 +1,2 @@
+#include <crc-modules>
+crc32_pclmul
diff --git a/debian/installer/modules/i386/crypto-dm-modules b/debian/installer/modules/i386/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/i386/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/i386/crypto-modules b/debian/installer/modules/i386/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/i386/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/i386/efi-modules b/debian/installer/modules/i386/efi-modules
new file mode 100644
index 000000000000..e1dc05e8f247
--- /dev/null
+++ b/debian/installer/modules/i386/efi-modules
@@ -0,0 +1 @@
+#include <efi-modules>
diff --git a/debian/installer/modules/i386/event-modules b/debian/installer/modules/i386/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/i386/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/i386/ext4-modules b/debian/installer/modules/i386/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/i386/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/i386/f2fs-modules b/debian/installer/modules/i386/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/i386/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/i386/fat-modules b/debian/installer/modules/i386/fat-modules
new file mode 100644
index 000000000000..cce8fd30ca4f
--- /dev/null
+++ b/debian/installer/modules/i386/fat-modules
@@ -0,0 +1,2 @@
+#include <fat-modules>
+
diff --git a/debian/installer/modules/i386/fb-modules b/debian/installer/modules/i386/fb-modules
new file mode 100644
index 000000000000..9602502af253
--- /dev/null
+++ b/debian/installer/modules/i386/fb-modules
@@ -0,0 +1,6 @@
+#include <fb-modules>
+
+lxfb ?
+vesafb ?
+vga16fb
+viafb
diff --git a/debian/installer/modules/i386/firewire-core-modules b/debian/installer/modules/i386/firewire-core-modules
new file mode 100644
index 000000000000..dcac80af9651
--- /dev/null
+++ b/debian/installer/modules/i386/firewire-core-modules
@@ -0,0 +1 @@
+#include <firewire-core-modules>
diff --git a/debian/installer/modules/i386/fuse-modules b/debian/installer/modules/i386/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/i386/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/i386/i2c-modules b/debian/installer/modules/i386/i2c-modules
new file mode 100644
index 000000000000..203a607e73ce
--- /dev/null
+++ b/debian/installer/modules/i386/i2c-modules
@@ -0,0 +1 @@
+#include <i2c-modules>
diff --git a/debian/installer/modules/i386/input-modules b/debian/installer/modules/i386/input-modules
new file mode 100644
index 000000000000..cdba2e4a79c6
--- /dev/null
+++ b/debian/installer/modules/i386/input-modules
@@ -0,0 +1,5 @@
+#include <input-modules>
+# Needed on some Geode LX boards - Alix2/3/6, Soekris net5501, Traverse GEOS
+# so only built for 586 flavour
+gpio_keys_polled ?
+leds-gpio ?
diff --git a/debian/installer/modules/i386/isofs-modules b/debian/installer/modules/i386/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/i386/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/i386/jfs-modules b/debian/installer/modules/i386/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/i386/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/i386/kernel-image b/debian/installer/modules/i386/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/i386/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/i386/loop-modules b/debian/installer/modules/i386/loop-modules
new file mode 100644
index 000000000000..164467713763
--- /dev/null
+++ b/debian/installer/modules/i386/loop-modules
@@ -0,0 +1,2 @@
+#include <loop-modules>
+
diff --git a/debian/installer/modules/i386/md-modules b/debian/installer/modules/i386/md-modules
new file mode 100644
index 000000000000..ade088ddbb2f
--- /dev/null
+++ b/debian/installer/modules/i386/md-modules
@@ -0,0 +1,2 @@
+#include <md-modules>
+
diff --git a/debian/installer/modules/i386/mmc-core-modules b/debian/installer/modules/i386/mmc-core-modules
new file mode 100644
index 000000000000..7bf38465cf1b
--- /dev/null
+++ b/debian/installer/modules/i386/mmc-core-modules
@@ -0,0 +1 @@
+#include <mmc-core-modules>
diff --git a/debian/installer/modules/i386/mmc-modules b/debian/installer/modules/i386/mmc-modules
new file mode 100644
index 000000000000..dadfd5334d62
--- /dev/null
+++ b/debian/installer/modules/i386/mmc-modules
@@ -0,0 +1 @@
+#include <mmc-modules>
diff --git a/debian/installer/modules/i386/mouse-modules b/debian/installer/modules/i386/mouse-modules
new file mode 100644
index 000000000000..15fcb00eaa04
--- /dev/null
+++ b/debian/installer/modules/i386/mouse-modules
@@ -0,0 +1 @@
+#include <mouse-modules>
diff --git a/debian/installer/modules/i386/mtd-core-modules b/debian/installer/modules/i386/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/i386/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/i386/multipath-modules b/debian/installer/modules/i386/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/i386/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/i386/nbd-modules b/debian/installer/modules/i386/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/i386/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/i386/nic-modules b/debian/installer/modules/i386/nic-modules
new file mode 100644
index 000000000000..2512e83950dd
--- /dev/null
+++ b/debian/installer/modules/i386/nic-modules
@@ -0,0 +1 @@
+#include <nic-modules>
diff --git a/debian/installer/modules/i386/nic-pcmcia-modules b/debian/installer/modules/i386/nic-pcmcia-modules
new file mode 100644
index 000000000000..7a0702cd5585
--- /dev/null
+++ b/debian/installer/modules/i386/nic-pcmcia-modules
@@ -0,0 +1 @@
+#include <nic-pcmcia-modules>
diff --git a/debian/installer/modules/i386/nic-shared-modules b/debian/installer/modules/i386/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/i386/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/i386/nic-usb-modules b/debian/installer/modules/i386/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/i386/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/i386/nic-wireless-modules b/debian/installer/modules/i386/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/i386/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/i386/pata-modules b/debian/installer/modules/i386/pata-modules
new file mode 100644
index 000000000000..8c4e514ae724
--- /dev/null
+++ b/debian/installer/modules/i386/pata-modules
@@ -0,0 +1,2 @@
+#include <pata-modules>
+
diff --git a/debian/installer/modules/i386/pcmcia-modules b/debian/installer/modules/i386/pcmcia-modules
new file mode 100644
index 000000000000..2bb5350fe14f
--- /dev/null
+++ b/debian/installer/modules/i386/pcmcia-modules
@@ -0,0 +1 @@
+#include <pcmcia-modules>
diff --git a/debian/installer/modules/i386/pcmcia-storage-modules b/debian/installer/modules/i386/pcmcia-storage-modules
new file mode 100644
index 000000000000..f73ae5bb9b42
--- /dev/null
+++ b/debian/installer/modules/i386/pcmcia-storage-modules
@@ -0,0 +1 @@
+#include <pcmcia-storage-modules>
diff --git a/debian/installer/modules/i386/ppp-modules b/debian/installer/modules/i386/ppp-modules
new file mode 100644
index 000000000000..f1ae9b3d15ac
--- /dev/null
+++ b/debian/installer/modules/i386/ppp-modules
@@ -0,0 +1,2 @@
+#include <ppp-modules>
+
diff --git a/debian/installer/modules/i386/rfkill-modules b/debian/installer/modules/i386/rfkill-modules
new file mode 100644
index 000000000000..77a2245cec6e
--- /dev/null
+++ b/debian/installer/modules/i386/rfkill-modules
@@ -0,0 +1 @@
+#include <rfkill-modules>
diff --git a/debian/installer/modules/i386/sata-modules b/debian/installer/modules/i386/sata-modules
new file mode 100644
index 000000000000..071cb860bbc5
--- /dev/null
+++ b/debian/installer/modules/i386/sata-modules
@@ -0,0 +1,2 @@
+#include <sata-modules>
+
diff --git a/debian/installer/modules/i386/scsi-core-modules b/debian/installer/modules/i386/scsi-core-modules
new file mode 100644
index 000000000000..778a022fa751
--- /dev/null
+++ b/debian/installer/modules/i386/scsi-core-modules
@@ -0,0 +1,4 @@
+#include <scsi-core-modules>
+
+# Needed by hv_storvsc in hyperv-modules as well as scsi-modules
+scsi_transport_fc
diff --git a/debian/installer/modules/i386/scsi-modules b/debian/installer/modules/i386/scsi-modules
new file mode 100644
index 000000000000..8909dfb79487
--- /dev/null
+++ b/debian/installer/modules/i386/scsi-modules
@@ -0,0 +1 @@
+#include <scsi-modules>
diff --git a/debian/installer/modules/i386/scsi-nic-modules b/debian/installer/modules/i386/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/i386/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/i386/serial-modules b/debian/installer/modules/i386/serial-modules
new file mode 100644
index 000000000000..6ab8b8c3551b
--- /dev/null
+++ b/debian/installer/modules/i386/serial-modules
@@ -0,0 +1 @@
+#include <serial-modules>
diff --git a/debian/installer/modules/i386/sound-modules b/debian/installer/modules/i386/sound-modules
new file mode 100644
index 000000000000..68395ab3d99a
--- /dev/null
+++ b/debian/installer/modules/i386/sound-modules
@@ -0,0 +1 @@
+#include <sound-modules>
diff --git a/debian/installer/modules/i386/speakup-modules b/debian/installer/modules/i386/speakup-modules
new file mode 100644
index 000000000000..29592721a7aa
--- /dev/null
+++ b/debian/installer/modules/i386/speakup-modules
@@ -0,0 +1 @@
+#include <speakup-modules>
diff --git a/debian/installer/modules/i386/squashfs-modules b/debian/installer/modules/i386/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/i386/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/i386/udf-modules b/debian/installer/modules/i386/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/i386/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/i386/uinput-modules b/debian/installer/modules/i386/uinput-modules
new file mode 100644
index 000000000000..58a833779442
--- /dev/null
+++ b/debian/installer/modules/i386/uinput-modules
@@ -0,0 +1 @@
+#include <uinput-modules>
diff --git a/debian/installer/modules/i386/usb-modules b/debian/installer/modules/i386/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/i386/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/i386/usb-serial-modules b/debian/installer/modules/i386/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/i386/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/i386/usb-storage-modules b/debian/installer/modules/i386/usb-storage-modules
new file mode 100644
index 000000000000..272d95e2e8b1
--- /dev/null
+++ b/debian/installer/modules/i386/usb-storage-modules
@@ -0,0 +1,2 @@
+#include <usb-storage-modules>
+
diff --git a/debian/installer/modules/i386/xfs-modules b/debian/installer/modules/i386/xfs-modules
new file mode 100644
index 000000000000..c020b5d399f9
--- /dev/null
+++ b/debian/installer/modules/i386/xfs-modules
@@ -0,0 +1,2 @@
+#include <xfs-modules>
+
diff --git a/debian/installer/modules/ia64/ata-modules b/debian/installer/modules/ia64/ata-modules
new file mode 100644
index 000000000000..b81c0f38b74a
--- /dev/null
+++ b/debian/installer/modules/ia64/ata-modules
@@ -0,0 +1 @@
+#include <ata-modules>
diff --git a/debian/installer/modules/ia64/btrfs-modules b/debian/installer/modules/ia64/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/ia64/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/ia64/cdrom-core-modules b/debian/installer/modules/ia64/cdrom-core-modules
new file mode 100644
index 000000000000..3ff69b48f4fc
--- /dev/null
+++ b/debian/installer/modules/ia64/cdrom-core-modules
@@ -0,0 +1 @@
+#include <cdrom-core-modules>
diff --git a/debian/installer/modules/ia64/crc-modules b/debian/installer/modules/ia64/crc-modules
new file mode 100644
index 000000000000..a642ead8be53
--- /dev/null
+++ b/debian/installer/modules/ia64/crc-modules
@@ -0,0 +1,2 @@
+#include <crc-modules>
+
diff --git a/debian/installer/modules/ia64/crypto-dm-modules b/debian/installer/modules/ia64/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/ia64/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/ia64/crypto-modules b/debian/installer/modules/ia64/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/ia64/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/ia64/event-modules b/debian/installer/modules/ia64/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/ia64/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/ia64/ext4-modules b/debian/installer/modules/ia64/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/ia64/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/ia64/f2fs-modules b/debian/installer/modules/ia64/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/ia64/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/ia64/fat-modules b/debian/installer/modules/ia64/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/ia64/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/ia64/fb-modules b/debian/installer/modules/ia64/fb-modules
new file mode 100644
index 000000000000..1442c89f9109
--- /dev/null
+++ b/debian/installer/modules/ia64/fb-modules
@@ -0,0 +1,2 @@
+fbcon ?
+vgastate
diff --git a/debian/installer/modules/ia64/firewire-core-modules b/debian/installer/modules/ia64/firewire-core-modules
new file mode 100644
index 000000000000..8e5fff165e6c
--- /dev/null
+++ b/debian/installer/modules/ia64/firewire-core-modules
@@ -0,0 +1,2 @@
+#include <firewire-core-modules>
+
diff --git a/debian/installer/modules/ia64/fuse-modules b/debian/installer/modules/ia64/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/ia64/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/ia64/i2c-modules b/debian/installer/modules/ia64/i2c-modules
new file mode 100644
index 000000000000..203a607e73ce
--- /dev/null
+++ b/debian/installer/modules/ia64/i2c-modules
@@ -0,0 +1 @@
+#include <i2c-modules>
diff --git a/debian/installer/modules/ia64/input-modules b/debian/installer/modules/ia64/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/ia64/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/ia64/isofs-modules b/debian/installer/modules/ia64/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/ia64/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/ia64/jfs-modules b/debian/installer/modules/ia64/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/ia64/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/ia64/kernel-image b/debian/installer/modules/ia64/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/ia64/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/ia64/loop-modules b/debian/installer/modules/ia64/loop-modules
new file mode 100644
index 000000000000..164467713763
--- /dev/null
+++ b/debian/installer/modules/ia64/loop-modules
@@ -0,0 +1,2 @@
+#include <loop-modules>
+
diff --git a/debian/installer/modules/ia64/md-modules b/debian/installer/modules/ia64/md-modules
new file mode 100644
index 000000000000..ade088ddbb2f
--- /dev/null
+++ b/debian/installer/modules/ia64/md-modules
@@ -0,0 +1,2 @@
+#include <md-modules>
+
diff --git a/debian/installer/modules/ia64/mouse-modules b/debian/installer/modules/ia64/mouse-modules
new file mode 100644
index 000000000000..15fcb00eaa04
--- /dev/null
+++ b/debian/installer/modules/ia64/mouse-modules
@@ -0,0 +1 @@
+#include <mouse-modules>
diff --git a/debian/installer/modules/ia64/mtd-core-modules b/debian/installer/modules/ia64/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/ia64/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/ia64/multipath-modules b/debian/installer/modules/ia64/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/ia64/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/ia64/nbd-modules b/debian/installer/modules/ia64/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/ia64/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/ia64/nic-modules b/debian/installer/modules/ia64/nic-modules
new file mode 100644
index 000000000000..2512e83950dd
--- /dev/null
+++ b/debian/installer/modules/ia64/nic-modules
@@ -0,0 +1 @@
+#include <nic-modules>
diff --git a/debian/installer/modules/ia64/nic-shared-modules b/debian/installer/modules/ia64/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/ia64/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/ia64/nic-usb-modules b/debian/installer/modules/ia64/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/ia64/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/ia64/pata-modules b/debian/installer/modules/ia64/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/ia64/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/ia64/pcmcia-modules b/debian/installer/modules/ia64/pcmcia-modules
new file mode 100644
index 000000000000..d7a54f360f41
--- /dev/null
+++ b/debian/installer/modules/ia64/pcmcia-modules
@@ -0,0 +1,4 @@
+pcmcia
+pcmcia_core
+pd6729
+rsrc_nonstatic ?
diff --git a/debian/installer/modules/ia64/ppp-modules b/debian/installer/modules/ia64/ppp-modules
new file mode 100644
index 000000000000..f1ae9b3d15ac
--- /dev/null
+++ b/debian/installer/modules/ia64/ppp-modules
@@ -0,0 +1,2 @@
+#include <ppp-modules>
+
diff --git a/debian/installer/modules/ia64/sata-modules b/debian/installer/modules/ia64/sata-modules
new file mode 100644
index 000000000000..071cb860bbc5
--- /dev/null
+++ b/debian/installer/modules/ia64/sata-modules
@@ -0,0 +1,2 @@
+#include <sata-modules>
+
diff --git a/debian/installer/modules/ia64/scsi-core-modules b/debian/installer/modules/ia64/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/ia64/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/ia64/scsi-modules b/debian/installer/modules/ia64/scsi-modules
new file mode 100644
index 000000000000..8909dfb79487
--- /dev/null
+++ b/debian/installer/modules/ia64/scsi-modules
@@ -0,0 +1 @@
+#include <scsi-modules>
diff --git a/debian/installer/modules/ia64/scsi-nic-modules b/debian/installer/modules/ia64/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/ia64/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/ia64/serial-modules b/debian/installer/modules/ia64/serial-modules
new file mode 100644
index 000000000000..6ab8b8c3551b
--- /dev/null
+++ b/debian/installer/modules/ia64/serial-modules
@@ -0,0 +1 @@
+#include <serial-modules>
diff --git a/debian/installer/modules/ia64/squashfs-modules b/debian/installer/modules/ia64/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/ia64/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/ia64/udf-modules b/debian/installer/modules/ia64/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/ia64/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/ia64/uinput-modules b/debian/installer/modules/ia64/uinput-modules
new file mode 100644
index 000000000000..58a833779442
--- /dev/null
+++ b/debian/installer/modules/ia64/uinput-modules
@@ -0,0 +1 @@
+#include <uinput-modules>
diff --git a/debian/installer/modules/ia64/usb-modules b/debian/installer/modules/ia64/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/ia64/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/ia64/usb-serial-modules b/debian/installer/modules/ia64/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/ia64/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/ia64/usb-storage-modules b/debian/installer/modules/ia64/usb-storage-modules
new file mode 100644
index 000000000000..272d95e2e8b1
--- /dev/null
+++ b/debian/installer/modules/ia64/usb-storage-modules
@@ -0,0 +1,2 @@
+#include <usb-storage-modules>
+
diff --git a/debian/installer/modules/ia64/xfs-modules b/debian/installer/modules/ia64/xfs-modules
new file mode 100644
index 000000000000..c020b5d399f9
--- /dev/null
+++ b/debian/installer/modules/ia64/xfs-modules
@@ -0,0 +1,2 @@
+#include <xfs-modules>
+
diff --git a/debian/installer/modules/input-modules b/debian/installer/modules/input-modules
new file mode 100644
index 000000000000..754d740e9fda
--- /dev/null
+++ b/debian/installer/modules/input-modules
@@ -0,0 +1,44 @@
+# Include HID drivers by default
+drivers/hid/**
+
+# Include keyboards
+drivers/input/keyboard/** ?
+
+# Exclude drivers for anything but keyboard and mouse/trackball/touchpad
+drivers/hid/hid-*ff -
+hid-dr -
+hid-elecom -
+hid-gyration -
+hid-icade -
+hid-lcpower -
+hid-ntrig -
+hid-petalynx -
+hid-picolcd -
+hid-pl -
+hid-prodikeys -
+hid-ps3remote -
+hid-quanta -
+drivers/hid/hid-roccat-ko* -
+hid-roccat-pyra -
+hid-saitek -
+hid-sensor-hub -
+hid-sony -
+hid-tivo -
+hid-twinhan -
+hid-uclogic -
+hid-wacom -
+hid-waltop -
+hid-wiimote -
+hid-zydacron -
+wacom -
+
+# Miscellaneous input drivers
+atmel_mxt_ts ?
+synaptics_usb ?
+wistron_btns ?
+gpio_keys ?
+soc_button_array ?
+hyperv-keyboard ?
+virtio_console ?
+virtio_input ?
+olpc_apsp ?
diff --git a/debian/installer/modules/ipv6-modules b/debian/installer/modules/ipv6-modules
new file mode 100644
index 000000000000..13ac34b44dd8
--- /dev/null
+++ b/debian/installer/modules/ipv6-modules
@@ -0,0 +1 @@
+ipv6
diff --git a/debian/installer/modules/isofs-modules b/debian/installer/modules/isofs-modules
new file mode 100644
index 000000000000..0f41779b7560
--- /dev/null
+++ b/debian/installer/modules/isofs-modules
@@ -0,0 +1 @@
+isofs
diff --git a/debian/installer/modules/jffs2-modules b/debian/installer/modules/jffs2-modules
new file mode 100644
index 000000000000..19f4e109485e
--- /dev/null
+++ b/debian/installer/modules/jffs2-modules
@@ -0,0 +1 @@
+jffs2
diff --git a/debian/installer/modules/jfs-modules b/debian/installer/modules/jfs-modules
new file mode 100644
index 000000000000..aa604c46849f
--- /dev/null
+++ b/debian/installer/modules/jfs-modules
@@ -0,0 +1 @@
+jfs
diff --git a/debian/installer/modules/kernel-image b/debian/installer/modules/kernel-image
new file mode 100644
index 000000000000..eeda50e82ee9
--- /dev/null
+++ b/debian/installer/modules/kernel-image
@@ -0,0 +1,33 @@
+af_packet
+bitrev ?
+eeprom_93cx6 ?
+firmware_class
+led-class ?
+mbcache
+mfd-core ?
+nls_base
+# Default I/O charset for most filesystems that do character conversion
+nls_utf8
+thermal_sys ?
+
+# In case they become modular again
+lz4_compress ?
+lz4hc_compress ?
+lz4_decompress ?
+lzo_compress
+lzo_decompress
+zlib_deflate
+zstd_compress
+zstd_decompress
+
+# Basic paravirtual modules
+hv_utils ?
+hv_vmbus ?
+virtio ?
+virtio_balloon ?
+virtio_mmio ?
+virtio_pci ?
+virtio_ring ?
+
+# The installer generally needs good entropy sources
+drivers/char/hw_random/**
diff --git a/debian/installer/modules/leds-modules b/debian/installer/modules/leds-modules
new file mode 100644
index 000000000000..fef2e5303cc2
--- /dev/null
+++ b/debian/installer/modules/leds-modules
@@ -0,0 +1 @@
+leds-gpio
diff --git a/debian/installer/modules/loop-modules b/debian/installer/modules/loop-modules
new file mode 100644
index 000000000000..1ef2ddf24a4e
--- /dev/null
+++ b/debian/installer/modules/loop-modules
@@ -0,0 +1 @@
+loop
diff --git a/debian/installer/modules/m68k/affs-modules b/debian/installer/modules/m68k/affs-modules
new file mode 100644
index 000000000000..21d616a1cc94
--- /dev/null
+++ b/debian/installer/modules/m68k/affs-modules
@@ -0,0 +1 @@
+#include <affs-modules>
diff --git a/debian/installer/modules/m68k/ata-modules b/debian/installer/modules/m68k/ata-modules
new file mode 100644
index 000000000000..04d9c88411a2
--- /dev/null
+++ b/debian/installer/modules/m68k/ata-modules
@@ -0,0 +1 @@
+libata
diff --git a/debian/installer/modules/m68k/btrfs-modules b/debian/installer/modules/m68k/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/m68k/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/m68k/cdrom-core-modules b/debian/installer/modules/m68k/cdrom-core-modules
new file mode 100644
index 000000000000..3ff69b48f4fc
--- /dev/null
+++ b/debian/installer/modules/m68k/cdrom-core-modules
@@ -0,0 +1 @@
+#include <cdrom-core-modules>
diff --git a/debian/installer/modules/m68k/crc-modules b/debian/installer/modules/m68k/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/m68k/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/m68k/crypto-modules b/debian/installer/modules/m68k/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/m68k/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/m68k/ext4-modules b/debian/installer/modules/m68k/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/m68k/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/m68k/fat-modules b/debian/installer/modules/m68k/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/m68k/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/m68k/fuse-modules b/debian/installer/modules/m68k/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/m68k/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/m68k/hfs-modules b/debian/installer/modules/m68k/hfs-modules
new file mode 100644
index 000000000000..57d12f64921c
--- /dev/null
+++ b/debian/installer/modules/m68k/hfs-modules
@@ -0,0 +1 @@
+#include <hfs-modules>
diff --git a/debian/installer/modules/m68k/isofs-modules b/debian/installer/modules/m68k/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/m68k/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/m68k/kernel-image b/debian/installer/modules/m68k/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/m68k/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/m68k/loop-modules b/debian/installer/modules/m68k/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/m68k/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/m68k/md-modules b/debian/installer/modules/m68k/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/m68k/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/m68k/nbd-modules b/debian/installer/modules/m68k/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/m68k/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/m68k/nic-modules b/debian/installer/modules/m68k/nic-modules
new file mode 100644
index 000000000000..2512e83950dd
--- /dev/null
+++ b/debian/installer/modules/m68k/nic-modules
@@ -0,0 +1 @@
+#include <nic-modules>
diff --git a/debian/installer/modules/m68k/nic-shared-modules b/debian/installer/modules/m68k/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/m68k/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/m68k/pata-modules b/debian/installer/modules/m68k/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/m68k/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/m68k/ppp-modules b/debian/installer/modules/m68k/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/m68k/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/m68k/scsi-core-modules b/debian/installer/modules/m68k/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/m68k/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/m68k/scsi-modules b/debian/installer/modules/m68k/scsi-modules
new file mode 100644
index 000000000000..f2956ef957e9
--- /dev/null
+++ b/debian/installer/modules/m68k/scsi-modules
@@ -0,0 +1,13 @@
+sg
+
+a2091
+a3000
+a4000t
+atari_scsi
+bvme6000_scsi
+gvp11
+mac_esp
+mac_scsi
+mvme16x_scsi
+zorro7xx
+zorro_esp
diff --git a/debian/installer/modules/m68k/squashfs-modules b/debian/installer/modules/m68k/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/m68k/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/m68k/udf-modules b/debian/installer/modules/m68k/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/m68k/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/md-modules b/debian/installer/modules/md-modules
new file mode 100644
index 000000000000..d4f710406d46
--- /dev/null
+++ b/debian/installer/modules/md-modules
@@ -0,0 +1,16 @@
+linear
+md-mod
+dm-mod
+multipath
+raid0
+raid1
+raid456
+raid10
+dm-mirror
+dm-raid
+dm-snapshot
+bcache
+
+# RAID-related libraries, also used by btrfs
+raid6_pq
+xor
diff --git a/debian/installer/modules/minix-modules b/debian/installer/modules/minix-modules
new file mode 100644
index 000000000000..aa6ca5db63da
--- /dev/null
+++ b/debian/installer/modules/minix-modules
@@ -0,0 +1 @@
+minix
diff --git a/debian/installer/modules/mips-4kc-malta/affs-modules b/debian/installer/modules/mips-4kc-malta/affs-modules
new file mode 100644
index 000000000000..21d616a1cc94
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/affs-modules
@@ -0,0 +1 @@
+#include <affs-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/ata-modules b/debian/installer/modules/mips-4kc-malta/ata-modules
new file mode 100644
index 000000000000..b81c0f38b74a
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/ata-modules
@@ -0,0 +1 @@
+#include <ata-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/btrfs-modules b/debian/installer/modules/mips-4kc-malta/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/cdrom-core-modules b/debian/installer/modules/mips-4kc-malta/cdrom-core-modules
new file mode 100644
index 000000000000..3ff69b48f4fc
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/cdrom-core-modules
@@ -0,0 +1 @@
+#include <cdrom-core-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/crc-modules b/debian/installer/modules/mips-4kc-malta/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/crypto-dm-modules b/debian/installer/modules/mips-4kc-malta/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/crypto-modules b/debian/installer/modules/mips-4kc-malta/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/event-modules b/debian/installer/modules/mips-4kc-malta/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/ext4-modules b/debian/installer/modules/mips-4kc-malta/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/f2fs-modules b/debian/installer/modules/mips-4kc-malta/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/fat-modules b/debian/installer/modules/mips-4kc-malta/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/fb-modules b/debian/installer/modules/mips-4kc-malta/fb-modules
new file mode 100644
index 000000000000..aba524d9021f
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/fb-modules
@@ -0,0 +1 @@
+#include <fb-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/fuse-modules b/debian/installer/modules/mips-4kc-malta/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/i2c-modules b/debian/installer/modules/mips-4kc-malta/i2c-modules
new file mode 100644
index 000000000000..203a607e73ce
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/i2c-modules
@@ -0,0 +1 @@
+#include <i2c-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/input-modules b/debian/installer/modules/mips-4kc-malta/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/isofs-modules b/debian/installer/modules/mips-4kc-malta/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/jfs-modules b/debian/installer/modules/mips-4kc-malta/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/kernel-image b/debian/installer/modules/mips-4kc-malta/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/mips-4kc-malta/loop-modules b/debian/installer/modules/mips-4kc-malta/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/md-modules b/debian/installer/modules/mips-4kc-malta/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/minix-modules b/debian/installer/modules/mips-4kc-malta/minix-modules
new file mode 100644
index 000000000000..82b9843720a1
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/minix-modules
@@ -0,0 +1 @@
+#include <minix-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/mmc-core-modules b/debian/installer/modules/mips-4kc-malta/mmc-core-modules
new file mode 100644
index 000000000000..7bf38465cf1b
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/mmc-core-modules
@@ -0,0 +1 @@
+#include <mmc-core-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/mmc-modules b/debian/installer/modules/mips-4kc-malta/mmc-modules
new file mode 100644
index 000000000000..dadfd5334d62
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/mmc-modules
@@ -0,0 +1 @@
+#include <mmc-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/mouse-modules b/debian/installer/modules/mips-4kc-malta/mouse-modules
new file mode 100644
index 000000000000..15fcb00eaa04
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/mouse-modules
@@ -0,0 +1 @@
+#include <mouse-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/mtd-core-modules b/debian/installer/modules/mips-4kc-malta/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/multipath-modules b/debian/installer/modules/mips-4kc-malta/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/nbd-modules b/debian/installer/modules/mips-4kc-malta/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/nic-modules b/debian/installer/modules/mips-4kc-malta/nic-modules
new file mode 100644
index 000000000000..44a607e904cc
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/nic-modules
@@ -0,0 +1,4 @@
+#include <nic-modules>
+skfp -
+starfire -
+winbond-840 -
diff --git a/debian/installer/modules/mips-4kc-malta/nic-shared-modules b/debian/installer/modules/mips-4kc-malta/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/nic-usb-modules b/debian/installer/modules/mips-4kc-malta/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/nic-wireless-modules b/debian/installer/modules/mips-4kc-malta/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/pata-modules b/debian/installer/modules/mips-4kc-malta/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/ppp-modules b/debian/installer/modules/mips-4kc-malta/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/qnx4-modules b/debian/installer/modules/mips-4kc-malta/qnx4-modules
new file mode 100644
index 000000000000..cd0c96d414d0
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/qnx4-modules
@@ -0,0 +1 @@
+#include <qnx4-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/sata-modules b/debian/installer/modules/mips-4kc-malta/sata-modules
new file mode 100644
index 000000000000..01318c258b5a
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/sata-modules
@@ -0,0 +1 @@
+#include <sata-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/scsi-core-modules b/debian/installer/modules/mips-4kc-malta/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/scsi-modules b/debian/installer/modules/mips-4kc-malta/scsi-modules
new file mode 100644
index 000000000000..8909dfb79487
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/scsi-modules
@@ -0,0 +1 @@
+#include <scsi-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/scsi-nic-modules b/debian/installer/modules/mips-4kc-malta/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/sound-modules b/debian/installer/modules/mips-4kc-malta/sound-modules
new file mode 100644
index 000000000000..68395ab3d99a
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/sound-modules
@@ -0,0 +1 @@
+#include <sound-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/squashfs-modules b/debian/installer/modules/mips-4kc-malta/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/udf-modules b/debian/installer/modules/mips-4kc-malta/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/usb-modules b/debian/installer/modules/mips-4kc-malta/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/usb-serial-modules b/debian/installer/modules/mips-4kc-malta/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/usb-storage-modules b/debian/installer/modules/mips-4kc-malta/usb-storage-modules
new file mode 100644
index 000000000000..8c5e81b55e3a
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/usb-storage-modules
@@ -0,0 +1 @@
+#include <usb-storage-modules>
diff --git a/debian/installer/modules/mips-4kc-malta/xfs-modules b/debian/installer/modules/mips-4kc-malta/xfs-modules
new file mode 100644
index 000000000000..98374e2bbaf8
--- /dev/null
+++ b/debian/installer/modules/mips-4kc-malta/xfs-modules
@@ -0,0 +1 @@
+#include <xfs-modules>
diff --git a/debian/installer/modules/mips-octeon/affs-modules b/debian/installer/modules/mips-octeon/affs-modules
new file mode 100644
index 000000000000..21d616a1cc94
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/affs-modules
@@ -0,0 +1 @@
+#include <affs-modules>
diff --git a/debian/installer/modules/mips-octeon/btrfs-modules b/debian/installer/modules/mips-octeon/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/mips-octeon/cdrom-core-modules b/debian/installer/modules/mips-octeon/cdrom-core-modules
new file mode 100644
index 000000000000..3ff69b48f4fc
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/cdrom-core-modules
@@ -0,0 +1 @@
+#include <cdrom-core-modules>
diff --git a/debian/installer/modules/mips-octeon/crc-modules b/debian/installer/modules/mips-octeon/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/mips-octeon/crypto-dm-modules b/debian/installer/modules/mips-octeon/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/mips-octeon/crypto-modules b/debian/installer/modules/mips-octeon/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/mips-octeon/event-modules b/debian/installer/modules/mips-octeon/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/mips-octeon/ext4-modules b/debian/installer/modules/mips-octeon/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/mips-octeon/f2fs-modules b/debian/installer/modules/mips-octeon/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/mips-octeon/fat-modules b/debian/installer/modules/mips-octeon/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/mips-octeon/fuse-modules b/debian/installer/modules/mips-octeon/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/mips-octeon/input-modules b/debian/installer/modules/mips-octeon/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/mips-octeon/isofs-modules b/debian/installer/modules/mips-octeon/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/mips-octeon/jfs-modules b/debian/installer/modules/mips-octeon/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/mips-octeon/kernel-image b/debian/installer/modules/mips-octeon/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/mips-octeon/loop-modules b/debian/installer/modules/mips-octeon/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/mips-octeon/md-modules b/debian/installer/modules/mips-octeon/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/mips-octeon/minix-modules b/debian/installer/modules/mips-octeon/minix-modules
new file mode 100644
index 000000000000..82b9843720a1
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/minix-modules
@@ -0,0 +1 @@
+#include <minix-modules>
diff --git a/debian/installer/modules/mips-octeon/multipath-modules b/debian/installer/modules/mips-octeon/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/mips-octeon/nbd-modules b/debian/installer/modules/mips-octeon/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/mips-octeon/nic-modules b/debian/installer/modules/mips-octeon/nic-modules
new file mode 100644
index 000000000000..3a2814f9ed0c
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/nic-modules
@@ -0,0 +1,15 @@
+#include <nic-modules>
+8139cp -
+8139too -
+dmfe -
+e100 -
+epic100 -
+fealnx -
+natsemi -
+ne2k-pci -
+skfp -
+sundance -
+starfire -
+tulip -
+typhoon -
+winbond-840 -
diff --git a/debian/installer/modules/mips-octeon/nic-shared-modules b/debian/installer/modules/mips-octeon/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/mips-octeon/nic-usb-modules b/debian/installer/modules/mips-octeon/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/mips-octeon/nic-wireless-modules b/debian/installer/modules/mips-octeon/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/mips-octeon/pata-modules b/debian/installer/modules/mips-octeon/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/mips-octeon/ppp-modules b/debian/installer/modules/mips-octeon/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/mips-octeon/qnx4-modules b/debian/installer/modules/mips-octeon/qnx4-modules
new file mode 100644
index 000000000000..cd0c96d414d0
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/qnx4-modules
@@ -0,0 +1 @@
+#include <qnx4-modules>
diff --git a/debian/installer/modules/mips-octeon/rtc-modules b/debian/installer/modules/mips-octeon/rtc-modules
new file mode 100644
index 000000000000..e20e792f206c
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/rtc-modules
@@ -0,0 +1 @@
+#include <rtc-modules>
diff --git a/debian/installer/modules/mips-octeon/sata-modules b/debian/installer/modules/mips-octeon/sata-modules
new file mode 100644
index 000000000000..01318c258b5a
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/sata-modules
@@ -0,0 +1 @@
+#include <sata-modules>
diff --git a/debian/installer/modules/mips-octeon/scsi-core-modules b/debian/installer/modules/mips-octeon/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/mips-octeon/scsi-modules b/debian/installer/modules/mips-octeon/scsi-modules
new file mode 100644
index 000000000000..bf002062ddd0
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/scsi-modules
@@ -0,0 +1,4 @@
+#include <scsi-modules>
+dmx3191d -
+ips -
+sym53c8xx -
diff --git a/debian/installer/modules/mips-octeon/scsi-nic-modules b/debian/installer/modules/mips-octeon/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/mips-octeon/sound-modules b/debian/installer/modules/mips-octeon/sound-modules
new file mode 100644
index 000000000000..68395ab3d99a
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/sound-modules
@@ -0,0 +1 @@
+#include <sound-modules>
diff --git a/debian/installer/modules/mips-octeon/squashfs-modules b/debian/installer/modules/mips-octeon/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/mips-octeon/udf-modules b/debian/installer/modules/mips-octeon/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/mips-octeon/usb-modules b/debian/installer/modules/mips-octeon/usb-modules
new file mode 100644
index 000000000000..6c3464a6c303
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/usb-modules
@@ -0,0 +1,2 @@
+#include <usb-modules>
+octeon-hcd
diff --git a/debian/installer/modules/mips-octeon/usb-serial-modules b/debian/installer/modules/mips-octeon/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/mips-octeon/usb-storage-modules b/debian/installer/modules/mips-octeon/usb-storage-modules
new file mode 100644
index 000000000000..8c5e81b55e3a
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/usb-storage-modules
@@ -0,0 +1 @@
+#include <usb-storage-modules>
diff --git a/debian/installer/modules/mips-octeon/xfs-modules b/debian/installer/modules/mips-octeon/xfs-modules
new file mode 100644
index 000000000000..98374e2bbaf8
--- /dev/null
+++ b/debian/installer/modules/mips-octeon/xfs-modules
@@ -0,0 +1 @@
+#include <xfs-modules>
diff --git a/debian/installer/modules/mips/btrfs-modules b/debian/installer/modules/mips/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/mips/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/mips/crc-modules b/debian/installer/modules/mips/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/mips/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/mips/crypto-dm-modules b/debian/installer/modules/mips/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/mips/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/mips/crypto-modules b/debian/installer/modules/mips/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/mips/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/mips/ext4-modules b/debian/installer/modules/mips/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/mips/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/mips/f2fs-modules b/debian/installer/modules/mips/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/mips/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/mips/fuse-modules b/debian/installer/modules/mips/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/mips/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/mips/isofs-modules b/debian/installer/modules/mips/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/mips/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/mips/jfs-modules b/debian/installer/modules/mips/jfs-modules
new file mode 100644
index 000000000000..925a43a9e2a5
--- /dev/null
+++ b/debian/installer/modules/mips/jfs-modules
@@ -0,0 +1,2 @@
+#include <jfs-modules>
+
diff --git a/debian/installer/modules/mips/kernel-image b/debian/installer/modules/mips/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/mips/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/mips/loop-modules b/debian/installer/modules/mips/loop-modules
new file mode 100644
index 000000000000..164467713763
--- /dev/null
+++ b/debian/installer/modules/mips/loop-modules
@@ -0,0 +1,2 @@
+#include <loop-modules>
+
diff --git a/debian/installer/modules/mips/md-modules b/debian/installer/modules/mips/md-modules
new file mode 100644
index 000000000000..ade088ddbb2f
--- /dev/null
+++ b/debian/installer/modules/mips/md-modules
@@ -0,0 +1,2 @@
+#include <md-modules>
+
diff --git a/debian/installer/modules/mips/multipath-modules b/debian/installer/modules/mips/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/mips/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/mips/nbd-modules b/debian/installer/modules/mips/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/mips/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/mips/nic-shared-modules b/debian/installer/modules/mips/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/mips/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/mips/squashfs-modules b/debian/installer/modules/mips/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/mips/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/mips/udf-modules b/debian/installer/modules/mips/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/mips/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/mips/xfs-modules b/debian/installer/modules/mips/xfs-modules
new file mode 100644
index 000000000000..c020b5d399f9
--- /dev/null
+++ b/debian/installer/modules/mips/xfs-modules
@@ -0,0 +1,2 @@
+#include <xfs-modules>
+
diff --git a/debian/installer/modules/mips32r6 b/debian/installer/modules/mips32r6
new file mode 120000
index 000000000000..af28acbd9aa6
--- /dev/null
+++ b/debian/installer/modules/mips32r6
@@ -0,0 +1 @@
+mips
\ No newline at end of file
diff --git a/debian/installer/modules/mips32r6el b/debian/installer/modules/mips32r6el
new file mode 120000
index 000000000000..af28acbd9aa6
--- /dev/null
+++ b/debian/installer/modules/mips32r6el
@@ -0,0 +1 @@
+mips
\ No newline at end of file
diff --git a/debian/installer/modules/mips64 b/debian/installer/modules/mips64
new file mode 120000
index 000000000000..af28acbd9aa6
--- /dev/null
+++ b/debian/installer/modules/mips64
@@ -0,0 +1 @@
+mips
\ No newline at end of file
diff --git a/debian/installer/modules/mips64-5kc-malta b/debian/installer/modules/mips64-5kc-malta
new file mode 120000
index 000000000000..6bae6ca286ca
--- /dev/null
+++ b/debian/installer/modules/mips64-5kc-malta
@@ -0,0 +1 @@
+mips-4kc-malta
\ No newline at end of file
diff --git a/debian/installer/modules/mips64-octeon b/debian/installer/modules/mips64-octeon
new file mode 120000
index 000000000000..47b1b81abee1
--- /dev/null
+++ b/debian/installer/modules/mips64-octeon
@@ -0,0 +1 @@
+mips-octeon
\ No newline at end of file
diff --git a/debian/installer/modules/mips64el-5kc-malta b/debian/installer/modules/mips64el-5kc-malta
new file mode 120000
index 000000000000..6bae6ca286ca
--- /dev/null
+++ b/debian/installer/modules/mips64el-5kc-malta
@@ -0,0 +1 @@
+mips-4kc-malta
\ No newline at end of file
diff --git a/debian/installer/modules/mips64el-loongson-3 b/debian/installer/modules/mips64el-loongson-3
new file mode 120000
index 000000000000..409be8354f26
--- /dev/null
+++ b/debian/installer/modules/mips64el-loongson-3
@@ -0,0 +1 @@
+mipsel-loongson-3
\ No newline at end of file
diff --git a/debian/installer/modules/mips64el-octeon b/debian/installer/modules/mips64el-octeon
new file mode 120000
index 000000000000..47b1b81abee1
--- /dev/null
+++ b/debian/installer/modules/mips64el-octeon
@@ -0,0 +1 @@
+mips-octeon
\ No newline at end of file
diff --git a/debian/installer/modules/mips64r6 b/debian/installer/modules/mips64r6
new file mode 120000
index 000000000000..af28acbd9aa6
--- /dev/null
+++ b/debian/installer/modules/mips64r6
@@ -0,0 +1 @@
+mips
\ No newline at end of file
diff --git a/debian/installer/modules/mips64r6el b/debian/installer/modules/mips64r6el
new file mode 120000
index 000000000000..af28acbd9aa6
--- /dev/null
+++ b/debian/installer/modules/mips64r6el
@@ -0,0 +1 @@
+mips
\ No newline at end of file
diff --git a/debian/installer/modules/mipsel-4kc-malta b/debian/installer/modules/mipsel-4kc-malta
new file mode 120000
index 000000000000..6bae6ca286ca
--- /dev/null
+++ b/debian/installer/modules/mipsel-4kc-malta
@@ -0,0 +1 @@
+mips-4kc-malta
\ No newline at end of file
diff --git a/debian/installer/modules/mipsel-loongson-3/affs-modules b/debian/installer/modules/mipsel-loongson-3/affs-modules
new file mode 100644
index 000000000000..21d616a1cc94
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/affs-modules
@@ -0,0 +1 @@
+#include <affs-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/ata-modules b/debian/installer/modules/mipsel-loongson-3/ata-modules
new file mode 100644
index 000000000000..b81c0f38b74a
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/ata-modules
@@ -0,0 +1 @@
+#include <ata-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/btrfs-modules b/debian/installer/modules/mipsel-loongson-3/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/cdrom-core-modules b/debian/installer/modules/mipsel-loongson-3/cdrom-core-modules
new file mode 100644
index 000000000000..3ff69b48f4fc
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/cdrom-core-modules
@@ -0,0 +1 @@
+#include <cdrom-core-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/crc-modules b/debian/installer/modules/mipsel-loongson-3/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/crypto-dm-modules b/debian/installer/modules/mipsel-loongson-3/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/crypto-modules b/debian/installer/modules/mipsel-loongson-3/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/event-modules b/debian/installer/modules/mipsel-loongson-3/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/ext4-modules b/debian/installer/modules/mipsel-loongson-3/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/f2fs-modules b/debian/installer/modules/mipsel-loongson-3/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/fat-modules b/debian/installer/modules/mipsel-loongson-3/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/fb-modules b/debian/installer/modules/mipsel-loongson-3/fb-modules
new file mode 100644
index 000000000000..18e82ab57611
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/fb-modules
@@ -0,0 +1,6 @@
+#include <fb-modules>
+
+amdgpu
+radeon
+ast
+sm750fb
diff --git a/debian/installer/modules/mipsel-loongson-3/firewire-core-modules b/debian/installer/modules/mipsel-loongson-3/firewire-core-modules
new file mode 100644
index 000000000000..dcac80af9651
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/firewire-core-modules
@@ -0,0 +1 @@
+#include <firewire-core-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/fuse-modules b/debian/installer/modules/mipsel-loongson-3/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/input-modules b/debian/installer/modules/mipsel-loongson-3/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/isofs-modules b/debian/installer/modules/mipsel-loongson-3/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/jfs-modules b/debian/installer/modules/mipsel-loongson-3/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/kernel-image b/debian/installer/modules/mipsel-loongson-3/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/mipsel-loongson-3/loop-modules b/debian/installer/modules/mipsel-loongson-3/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/md-modules b/debian/installer/modules/mipsel-loongson-3/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/minix-modules b/debian/installer/modules/mipsel-loongson-3/minix-modules
new file mode 100644
index 000000000000..82b9843720a1
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/minix-modules
@@ -0,0 +1 @@
+#include <minix-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/mtd-core-modules b/debian/installer/modules/mipsel-loongson-3/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/multipath-modules b/debian/installer/modules/mipsel-loongson-3/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/nbd-modules b/debian/installer/modules/mipsel-loongson-3/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/nfs-modules b/debian/installer/modules/mipsel-loongson-3/nfs-modules
new file mode 100644
index 000000000000..946fb8e4424c
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/nfs-modules
@@ -0,0 +1 @@
+#include <nfs-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/nic-modules b/debian/installer/modules/mipsel-loongson-3/nic-modules
new file mode 100644
index 000000000000..a2feefcfc5d0
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/nic-modules
@@ -0,0 +1,11 @@
+#include <nic-modules>
+dmfe -
+epic100 -
+fealnx -
+natsemi -
+skfp -
+starfire -
+sundance -
+tulip -
+typhoon -
+winbond-840 -
diff --git a/debian/installer/modules/mipsel-loongson-3/nic-shared-modules b/debian/installer/modules/mipsel-loongson-3/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/nic-usb-modules b/debian/installer/modules/mipsel-loongson-3/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/nic-wireless-modules b/debian/installer/modules/mipsel-loongson-3/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/pata-modules b/debian/installer/modules/mipsel-loongson-3/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/ppp-modules b/debian/installer/modules/mipsel-loongson-3/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/qnx4-modules b/debian/installer/modules/mipsel-loongson-3/qnx4-modules
new file mode 100644
index 000000000000..cd0c96d414d0
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/qnx4-modules
@@ -0,0 +1 @@
+#include <qnx4-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/sata-modules b/debian/installer/modules/mipsel-loongson-3/sata-modules
new file mode 100644
index 000000000000..01318c258b5a
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/sata-modules
@@ -0,0 +1 @@
+#include <sata-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/scsi-core-modules b/debian/installer/modules/mipsel-loongson-3/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/scsi-modules b/debian/installer/modules/mipsel-loongson-3/scsi-modules
new file mode 100644
index 000000000000..bf002062ddd0
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/scsi-modules
@@ -0,0 +1,4 @@
+#include <scsi-modules>
+dmx3191d -
+ips -
+sym53c8xx -
diff --git a/debian/installer/modules/mipsel-loongson-3/scsi-nic-modules b/debian/installer/modules/mipsel-loongson-3/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/sound-modules b/debian/installer/modules/mipsel-loongson-3/sound-modules
new file mode 100644
index 000000000000..68395ab3d99a
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/sound-modules
@@ -0,0 +1 @@
+#include <sound-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/speakup-modules b/debian/installer/modules/mipsel-loongson-3/speakup-modules
new file mode 100644
index 000000000000..29592721a7aa
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/speakup-modules
@@ -0,0 +1 @@
+#include <speakup-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/squashfs-modules b/debian/installer/modules/mipsel-loongson-3/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/udf-modules b/debian/installer/modules/mipsel-loongson-3/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/usb-modules b/debian/installer/modules/mipsel-loongson-3/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/usb-serial-modules b/debian/installer/modules/mipsel-loongson-3/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/usb-storage-modules b/debian/installer/modules/mipsel-loongson-3/usb-storage-modules
new file mode 100644
index 000000000000..8c5e81b55e3a
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/usb-storage-modules
@@ -0,0 +1 @@
+#include <usb-storage-modules>
diff --git a/debian/installer/modules/mipsel-loongson-3/xfs-modules b/debian/installer/modules/mipsel-loongson-3/xfs-modules
new file mode 100644
index 000000000000..98374e2bbaf8
--- /dev/null
+++ b/debian/installer/modules/mipsel-loongson-3/xfs-modules
@@ -0,0 +1 @@
+#include <xfs-modules>
diff --git a/debian/installer/modules/mipsel-octeon b/debian/installer/modules/mipsel-octeon
new file mode 120000
index 000000000000..47b1b81abee1
--- /dev/null
+++ b/debian/installer/modules/mipsel-octeon
@@ -0,0 +1 @@
+mips-octeon
\ No newline at end of file
diff --git a/debian/installer/modules/mmc-core-modules b/debian/installer/modules/mmc-core-modules
new file mode 100644
index 000000000000..67128eac0003
--- /dev/null
+++ b/debian/installer/modules/mmc-core-modules
@@ -0,0 +1 @@
+mmc_core
diff --git a/debian/installer/modules/mmc-modules b/debian/installer/modules/mmc-modules
new file mode 100644
index 000000000000..c7aa372bd735
--- /dev/null
+++ b/debian/installer/modules/mmc-modules
@@ -0,0 +1,8 @@
+mmc_block
+drivers/mmc/host/**
+
+# Multifunction card reader driver
+tifm_7xx1 ?
+
+# Adds a dependency on pcmcia-modules
+sdricoh_cs -
diff --git a/debian/installer/modules/mouse-modules b/debian/installer/modules/mouse-modules
new file mode 100644
index 000000000000..8d65ba4d894d
--- /dev/null
+++ b/debian/installer/modules/mouse-modules
@@ -0,0 +1 @@
+psmouse
diff --git a/debian/installer/modules/mtd-core-modules b/debian/installer/modules/mtd-core-modules
new file mode 100644
index 000000000000..96dc6e77ff56
--- /dev/null
+++ b/debian/installer/modules/mtd-core-modules
@@ -0,0 +1 @@
+mtd
diff --git a/debian/installer/modules/mtd-modules b/debian/installer/modules/mtd-modules
new file mode 100644
index 000000000000..90e6b13f673f
--- /dev/null
+++ b/debian/installer/modules/mtd-modules
@@ -0,0 +1 @@
+mtdblock
diff --git a/debian/installer/modules/multipath-modules b/debian/installer/modules/multipath-modules
new file mode 100644
index 000000000000..3b96ab99cc46
--- /dev/null
+++ b/debian/installer/modules/multipath-modules
@@ -0,0 +1,3 @@
+dm-multipath
+dm-round-robin
+dm-service-time
diff --git a/debian/installer/modules/nbd-modules b/debian/installer/modules/nbd-modules
new file mode 100644
index 000000000000..cb3ca605f1ef
--- /dev/null
+++ b/debian/installer/modules/nbd-modules
@@ -0,0 +1 @@
+nbd
diff --git a/debian/installer/modules/nfs-modules b/debian/installer/modules/nfs-modules
new file mode 100644
index 000000000000..a5bfd2ce6d3f
--- /dev/null
+++ b/debian/installer/modules/nfs-modules
@@ -0,0 +1,3 @@
+nfs
+lockd
+sunrpc
diff --git a/debian/installer/modules/nic-modules b/debian/installer/modules/nic-modules
new file mode 100644
index 000000000000..673db0665a12
--- /dev/null
+++ b/debian/installer/modules/nic-modules
@@ -0,0 +1,30 @@
+# Include Ethernet switch, controller and PHY drivers by default
+drivers/net/dsa/** ?
+drivers/net/ethernet/**
+drivers/net/phy/*
+
+# Include paravirtual network drivers
+hv_netvsc ?
+virtio_net ?
+vmxnet3 ?
+xen-netfront ?
+
+# Include VLAN driver
+8021q
+
+# Include bonding driver
+bonding
+
+# Exclude drivers packaged in nic-pcmcia-modules
+drivers/net/**_cs -
+b44 -
+xircom_cb -
+
+# Exclude libraries packaged in nic-{common,shared} modules
+8390 -
+fixed_phy -
+libphy -
+mdio_devres -
+
+# Exclude iSCSI drivers packaged in scsi-modules
+cnic -
diff --git a/debian/installer/modules/nic-pcmcia-modules b/debian/installer/modules/nic-pcmcia-modules
new file mode 100644
index 000000000000..31c360d5a608
--- /dev/null
+++ b/debian/installer/modules/nic-pcmcia-modules
@@ -0,0 +1,10 @@
+# Include PCMCIA Ethernet and wireless drivers by default
+drivers/net/ethernet/**_cs
+drivers/net/wireless/**_cs
+b44 ?
+hostap_plx ?
+xircom_cb
+
+# Exclude drivers packaged in nic-wireless-modules
+libertas_cs -
+spectrum_cs -
diff --git a/debian/installer/modules/nic-shared-modules b/debian/installer/modules/nic-shared-modules
new file mode 100644
index 000000000000..de15de9f8d84
--- /dev/null
+++ b/debian/installer/modules/nic-shared-modules
@@ -0,0 +1,9 @@
+8390 ?
+fixed_phy ?
+libphy ?
+mdio_devres ?
+mii ?
+of_mdio ?
+pps_core ?
+ptp ?
+selftests ?
diff --git a/debian/installer/modules/nic-usb-modules b/debian/installer/modules/nic-usb-modules
new file mode 100644
index 000000000000..332e0151804f
--- /dev/null
+++ b/debian/installer/modules/nic-usb-modules
@@ -0,0 +1,15 @@
+# Include USB wired drivers by default
+drivers/net/usb/*
+
+# Include rndis_wlan, which depends on rndis_host
+rndis_wlan
+
+# Exclude wireless modem drivers which need extra configuration
+cdc_mbim -
+cdc-phonet -
+hso -
+huawei_cdc_ncm -
+kalmia -
+lg-vl600 -
+qmi_wwan -
+sierra_net -
diff --git a/debian/installer/modules/nic-wireless-modules b/debian/installer/modules/nic-wireless-modules
new file mode 100644
index 000000000000..09a9087415ce
--- /dev/null
+++ b/debian/installer/modules/nic-wireless-modules
@@ -0,0 +1,27 @@
+# Include wireless drivers by default
+drivers/net/wireless/**
+
+# Include staging wireless drivers
+prism2_usb ?
+drivers/staging/rtl8** ?
+vt6656_stage ?
+
+# Exclude drivers packaged in nic-pcmcia-modules
+drivers/net/wireless/**_cs -
+airo -
+hostap_plx -
+
+# Don't separate these from their driver families
+libertas_cs ?
+spectrum_cs ?
+
+# Exclude drivers packaged in nic-usb-modules
+rndis_wlan -
+
+# Exclude debug driver
+mac80211_hwsim -
+
+# lib80211 encryption algorithms
+lib80211_crypt_wep ?
+lib80211_crypt_ccmp ?
+lib80211_crypt_tkip ?
diff --git a/debian/installer/modules/pata-modules b/debian/installer/modules/pata-modules
new file mode 100644
index 000000000000..1d963a18edad
--- /dev/null
+++ b/debian/installer/modules/pata-modules
@@ -0,0 +1,9 @@
+# Include PATA drivers by default
+drivers/ata/pata_*
+
+# Exclude pata_sis, which goes in sata-modules as a dependency of sata_sis
+pata_sis -
+
+# Exclude drivers packaged in pcmcia-storage-modules
+pata_ninja32 -
+pata_pcmcia -
diff --git a/debian/installer/modules/pcmcia-modules b/debian/installer/modules/pcmcia-modules
new file mode 100644
index 000000000000..ab5b4b234cef
--- /dev/null
+++ b/debian/installer/modules/pcmcia-modules
@@ -0,0 +1,8 @@
+pcmcia
+
+i82092
+i82365 ?
+pcmcia_core
+tcic ?
+yenta_socket
+pd6729 ?
diff --git a/debian/installer/modules/pcmcia-storage-modules b/debian/installer/modules/pcmcia-storage-modules
new file mode 100644
index 000000000000..b6b1721644cd
--- /dev/null
+++ b/debian/installer/modules/pcmcia-storage-modules
@@ -0,0 +1,2 @@
+pata_ninja32 ?
+pata_pcmcia ?
diff --git a/debian/installer/modules/powerpc-powerpc64/affs-modules b/debian/installer/modules/powerpc-powerpc64/affs-modules
new file mode 100644
index 000000000000..f12f6ace215a
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/affs-modules
@@ -0,0 +1 @@
+#include "../powerpc/affs-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/ata-modules b/debian/installer/modules/powerpc-powerpc64/ata-modules
new file mode 100644
index 000000000000..39540d4b6a42
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/ata-modules
@@ -0,0 +1 @@
+#include "../powerpc/ata-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/btrfs-modules b/debian/installer/modules/powerpc-powerpc64/btrfs-modules
new file mode 100644
index 000000000000..9eeeb149ab7a
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/btrfs-modules
@@ -0,0 +1 @@
+#include "../powerpc/btrfs-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/cdrom-core-modules b/debian/installer/modules/powerpc-powerpc64/cdrom-core-modules
new file mode 100644
index 000000000000..feed89a1a493
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/cdrom-core-modules
@@ -0,0 +1 @@
+#include "../powerpc/cdrom-core-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/crc-modules b/debian/installer/modules/powerpc-powerpc64/crc-modules
new file mode 100644
index 000000000000..b49dc9eca554
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/crc-modules
@@ -0,0 +1 @@
+#include "../powerpc/crc-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/crypto-dm-modules b/debian/installer/modules/powerpc-powerpc64/crypto-dm-modules
new file mode 100644
index 000000000000..6613c798fb9d
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/crypto-dm-modules
@@ -0,0 +1 @@
+#include "../powerpc/crypto-dm-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/crypto-modules b/debian/installer/modules/powerpc-powerpc64/crypto-modules
new file mode 100644
index 000000000000..8fa818fb87ae
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/crypto-modules
@@ -0,0 +1 @@
+#include "../powerpc/crypto-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/event-modules b/debian/installer/modules/powerpc-powerpc64/event-modules
new file mode 100644
index 000000000000..9e9424c60f6e
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/event-modules
@@ -0,0 +1 @@
+#include "../powerpc/event-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/ext4-modules b/debian/installer/modules/powerpc-powerpc64/ext4-modules
new file mode 100644
index 000000000000..664c3118f39e
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/ext4-modules
@@ -0,0 +1 @@
+#include "../powerpc/ext4-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/f2fs-modules b/debian/installer/modules/powerpc-powerpc64/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/powerpc-powerpc64/fancontrol-modules b/debian/installer/modules/powerpc-powerpc64/fancontrol-modules
new file mode 100644
index 000000000000..a3fc55cca941
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/fancontrol-modules
@@ -0,0 +1,19 @@
+i2c-powermac ?
+windfarm_core ?
+windfarm_cpufreq_clamp ?
+windfarm_lm75_sensor ?
+windfarm_max6690_sensor ?
+windfarm_pid ?
+windfarm_pm121 ?
+windfarm_pm112 ?
+windfarm_pm81 ?
+windfarm_pm91 ?
+windfarm_pm72 ?
+windfarm_rm31 ?
+windfarm_smu_controls ?
+windfarm_smu_sat ?
+windfarm_smu_sensors ?
+windfarm_ad7417_sensor ?
+windfarm_fcu_controls ?
+windfarm_lm87_sensor ?
+windfarm_pid ?
diff --git a/debian/installer/modules/powerpc-powerpc64/fat-modules b/debian/installer/modules/powerpc-powerpc64/fat-modules
new file mode 100644
index 000000000000..043dc5602954
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/fat-modules
@@ -0,0 +1 @@
+#include "../powerpc/fat-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/fb-modules b/debian/installer/modules/powerpc-powerpc64/fb-modules
new file mode 100644
index 000000000000..98c5ecc31b10
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/fb-modules
@@ -0,0 +1,2 @@
+# We *don't* want the extra modules listed in powerpc/fb-modules
+#include <fb-modules>
diff --git a/debian/installer/modules/powerpc-powerpc64/firewire-core-modules b/debian/installer/modules/powerpc-powerpc64/firewire-core-modules
new file mode 100644
index 000000000000..035ab3162504
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/firewire-core-modules
@@ -0,0 +1 @@
+#include "../powerpc/firewire-core-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/fuse-modules b/debian/installer/modules/powerpc-powerpc64/fuse-modules
new file mode 100644
index 000000000000..49bdce41b076
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/fuse-modules
@@ -0,0 +1 @@
+#include "../powerpc/fuse-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/hfs-modules b/debian/installer/modules/powerpc-powerpc64/hfs-modules
new file mode 100644
index 000000000000..a85f6914303d
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/hfs-modules
@@ -0,0 +1 @@
+#include "../powerpc/hfs-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/hypervisor-modules b/debian/installer/modules/powerpc-powerpc64/hypervisor-modules
new file mode 100644
index 000000000000..29ceb6154d7b
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/hypervisor-modules
@@ -0,0 +1,2 @@
+hvcserver
+hvcs
diff --git a/debian/installer/modules/powerpc-powerpc64/i2c-modules b/debian/installer/modules/powerpc-powerpc64/i2c-modules
new file mode 100644
index 000000000000..203a607e73ce
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/i2c-modules
@@ -0,0 +1 @@
+#include <i2c-modules>
diff --git a/debian/installer/modules/powerpc-powerpc64/input-modules b/debian/installer/modules/powerpc-powerpc64/input-modules
new file mode 100644
index 000000000000..38a888940fa7
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/input-modules
@@ -0,0 +1 @@
+#include "../powerpc/input-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/isofs-modules b/debian/installer/modules/powerpc-powerpc64/isofs-modules
new file mode 100644
index 000000000000..5a0326172943
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/isofs-modules
@@ -0,0 +1 @@
+#include "../powerpc/isofs-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/jfs-modules b/debian/installer/modules/powerpc-powerpc64/jfs-modules
new file mode 100644
index 000000000000..b71ebd35e864
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/jfs-modules
@@ -0,0 +1 @@
+#include "../powerpc/jfs-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/kernel-image b/debian/installer/modules/powerpc-powerpc64/kernel-image
new file mode 100644
index 000000000000..a0b7d0cf49cd
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/kernel-image
@@ -0,0 +1 @@
+#include "../powerpc/kernel-image"
diff --git a/debian/installer/modules/powerpc-powerpc64/loop-modules b/debian/installer/modules/powerpc-powerpc64/loop-modules
new file mode 100644
index 000000000000..e2273687f548
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/loop-modules
@@ -0,0 +1 @@
+#include "../powerpc/loop-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/md-modules b/debian/installer/modules/powerpc-powerpc64/md-modules
new file mode 100644
index 000000000000..93be33f95c56
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/md-modules
@@ -0,0 +1 @@
+#include "../powerpc/md-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/mmc-core-modules b/debian/installer/modules/powerpc-powerpc64/mmc-core-modules
new file mode 100644
index 000000000000..5308bc434670
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/mmc-core-modules
@@ -0,0 +1 @@
+#include "../powerpc/mmc-core-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/mouse-modules b/debian/installer/modules/powerpc-powerpc64/mouse-modules
new file mode 100644
index 000000000000..22aca9411c68
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/mouse-modules
@@ -0,0 +1 @@
+#include "../powerpc/mouse-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/mtd-core-modules b/debian/installer/modules/powerpc-powerpc64/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/powerpc-powerpc64/multipath-modules b/debian/installer/modules/powerpc-powerpc64/multipath-modules
new file mode 100644
index 000000000000..fcb0045b0a15
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/multipath-modules
@@ -0,0 +1 @@
+#include "../powerpc/multipath-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/nbd-modules b/debian/installer/modules/powerpc-powerpc64/nbd-modules
new file mode 100644
index 000000000000..ff7fc80eab04
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/nbd-modules
@@ -0,0 +1 @@
+#include "../powerpc/nbd-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/nic-modules b/debian/installer/modules/powerpc-powerpc64/nic-modules
new file mode 100644
index 000000000000..7578f433296c
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/nic-modules
@@ -0,0 +1 @@
+#include "../powerpc/nic-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/nic-pcmcia-modules b/debian/installer/modules/powerpc-powerpc64/nic-pcmcia-modules
new file mode 100644
index 000000000000..3f521e9db033
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/nic-pcmcia-modules
@@ -0,0 +1 @@
+#include "../powerpc/nic-pcmcia-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/nic-shared-modules b/debian/installer/modules/powerpc-powerpc64/nic-shared-modules
new file mode 100644
index 000000000000..5b05e0d43cb9
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/nic-shared-modules
@@ -0,0 +1 @@
+#include "../powerpc/nic-shared-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/nic-usb-modules b/debian/installer/modules/powerpc-powerpc64/nic-usb-modules
new file mode 100644
index 000000000000..790780afc777
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/nic-usb-modules
@@ -0,0 +1 @@
+#include "../powerpc/nic-usb-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/nic-wireless-modules b/debian/installer/modules/powerpc-powerpc64/nic-wireless-modules
new file mode 100644
index 000000000000..b25c130da642
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/nic-wireless-modules
@@ -0,0 +1 @@
+#include "../powerpc/nic-wireless-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/pata-modules b/debian/installer/modules/powerpc-powerpc64/pata-modules
new file mode 100644
index 000000000000..bb9cbe3abe71
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/pata-modules
@@ -0,0 +1 @@
+#include "../powerpc/pata-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/pcmcia-modules b/debian/installer/modules/powerpc-powerpc64/pcmcia-modules
new file mode 100644
index 000000000000..e508df664357
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/pcmcia-modules
@@ -0,0 +1 @@
+#include "../powerpc/pcmcia-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/pcmcia-storage-modules b/debian/installer/modules/powerpc-powerpc64/pcmcia-storage-modules
new file mode 100644
index 000000000000..f00f24605f56
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/pcmcia-storage-modules
@@ -0,0 +1 @@
+#include "../powerpc/pcmcia-storage-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/ppp-modules b/debian/installer/modules/powerpc-powerpc64/ppp-modules
new file mode 100644
index 000000000000..eb7ab74a52f1
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/ppp-modules
@@ -0,0 +1 @@
+#include "../powerpc/ppp-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/sata-modules b/debian/installer/modules/powerpc-powerpc64/sata-modules
new file mode 100644
index 000000000000..591ad741022a
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/sata-modules
@@ -0,0 +1 @@
+#include "../powerpc/sata-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/scsi-core-modules b/debian/installer/modules/powerpc-powerpc64/scsi-core-modules
new file mode 100644
index 000000000000..c972a4717408
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/scsi-core-modules
@@ -0,0 +1 @@
+#include "../powerpc/scsi-core-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/scsi-modules b/debian/installer/modules/powerpc-powerpc64/scsi-modules
new file mode 100644
index 000000000000..74a817729da5
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/scsi-modules
@@ -0,0 +1,7 @@
+#include "../powerpc/scsi-modules"
+
+# Really SATA, but keep it with ps3rom as they both depend on ps3stor_lib
+ps3disk ?
+
+# Exclude target driver
+ibmvscsis -
diff --git a/debian/installer/modules/powerpc-powerpc64/scsi-nic-modules b/debian/installer/modules/powerpc-powerpc64/scsi-nic-modules
new file mode 100644
index 000000000000..edcfa738e26e
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/scsi-nic-modules
@@ -0,0 +1 @@
+#include "../powerpc/scsi-nic-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/serial-modules b/debian/installer/modules/powerpc-powerpc64/serial-modules
new file mode 100644
index 000000000000..349196e30e8b
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/serial-modules
@@ -0,0 +1 @@
+#include "../powerpc/serial-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/squashfs-modules b/debian/installer/modules/powerpc-powerpc64/squashfs-modules
new file mode 100644
index 000000000000..32a1b6ffa559
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/squashfs-modules
@@ -0,0 +1 @@
+#include "../powerpc/squashfs-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/udf-modules b/debian/installer/modules/powerpc-powerpc64/udf-modules
new file mode 100644
index 000000000000..6c72cbc143c4
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/udf-modules
@@ -0,0 +1 @@
+#include "../powerpc/udf-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/uinput-modules b/debian/installer/modules/powerpc-powerpc64/uinput-modules
new file mode 100644
index 000000000000..5020f7cc3748
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/uinput-modules
@@ -0,0 +1 @@
+#include "../powerpc/uinput-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/usb-modules b/debian/installer/modules/powerpc-powerpc64/usb-modules
new file mode 100644
index 000000000000..9c5b10a7b9e0
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/usb-modules
@@ -0,0 +1 @@
+#include "../powerpc/usb-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/usb-serial-modules b/debian/installer/modules/powerpc-powerpc64/usb-serial-modules
new file mode 100644
index 000000000000..e25b5586285f
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/usb-serial-modules
@@ -0,0 +1 @@
+#include "../powerpc/usb-serial-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/usb-storage-modules b/debian/installer/modules/powerpc-powerpc64/usb-storage-modules
new file mode 100644
index 000000000000..5f278e65f838
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/usb-storage-modules
@@ -0,0 +1 @@
+#include "../powerpc/usb-storage-modules"
diff --git a/debian/installer/modules/powerpc-powerpc64/xfs-modules b/debian/installer/modules/powerpc-powerpc64/xfs-modules
new file mode 100644
index 000000000000..c850127e905d
--- /dev/null
+++ b/debian/installer/modules/powerpc-powerpc64/xfs-modules
@@ -0,0 +1 @@
+#include "../powerpc/xfs-modules"
diff --git a/debian/installer/modules/powerpc/affs-modules b/debian/installer/modules/powerpc/affs-modules
new file mode 100644
index 000000000000..3f0e4bb909e2
--- /dev/null
+++ b/debian/installer/modules/powerpc/affs-modules
@@ -0,0 +1,2 @@
+#include <affs-modules>
+
diff --git a/debian/installer/modules/powerpc/ata-modules b/debian/installer/modules/powerpc/ata-modules
new file mode 100644
index 000000000000..b81c0f38b74a
--- /dev/null
+++ b/debian/installer/modules/powerpc/ata-modules
@@ -0,0 +1 @@
+#include <ata-modules>
diff --git a/debian/installer/modules/powerpc/btrfs-modules b/debian/installer/modules/powerpc/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/powerpc/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/powerpc/cdrom-core-modules b/debian/installer/modules/powerpc/cdrom-core-modules
new file mode 100644
index 000000000000..e264d7aa3488
--- /dev/null
+++ b/debian/installer/modules/powerpc/cdrom-core-modules
@@ -0,0 +1,2 @@
+#include <cdrom-core-modules>
+
diff --git a/debian/installer/modules/powerpc/crc-modules b/debian/installer/modules/powerpc/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/powerpc/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/powerpc/crypto-dm-modules b/debian/installer/modules/powerpc/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/powerpc/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/powerpc/crypto-modules b/debian/installer/modules/powerpc/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/powerpc/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/powerpc/event-modules b/debian/installer/modules/powerpc/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/powerpc/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/powerpc/ext4-modules b/debian/installer/modules/powerpc/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/powerpc/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/powerpc/f2fs-modules b/debian/installer/modules/powerpc/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/powerpc/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/powerpc/fat-modules b/debian/installer/modules/powerpc/fat-modules
new file mode 100644
index 000000000000..cce8fd30ca4f
--- /dev/null
+++ b/debian/installer/modules/powerpc/fat-modules
@@ -0,0 +1,2 @@
+#include <fat-modules>
+
diff --git a/debian/installer/modules/powerpc/fb-modules b/debian/installer/modules/powerpc/fb-modules
new file mode 100644
index 000000000000..3a53ab269282
--- /dev/null
+++ b/debian/installer/modules/powerpc/fb-modules
@@ -0,0 +1,7 @@
+#include <fb-modules>
+
+# 32-bit PowerMacs mostly have either ATI Rage 128 or Radeon graphics
+# chips for which the offb driver doesn't work properly.  aty128fb is
+# currently built-in but that could plausibly change in future.
+aty128fb
+radeonfb
diff --git a/debian/installer/modules/powerpc/firewire-core-modules b/debian/installer/modules/powerpc/firewire-core-modules
new file mode 100644
index 000000000000..dcac80af9651
--- /dev/null
+++ b/debian/installer/modules/powerpc/firewire-core-modules
@@ -0,0 +1 @@
+#include <firewire-core-modules>
diff --git a/debian/installer/modules/powerpc/fuse-modules b/debian/installer/modules/powerpc/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/powerpc/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/powerpc/hfs-modules b/debian/installer/modules/powerpc/hfs-modules
new file mode 100644
index 000000000000..57d12f64921c
--- /dev/null
+++ b/debian/installer/modules/powerpc/hfs-modules
@@ -0,0 +1 @@
+#include <hfs-modules>
diff --git a/debian/installer/modules/powerpc/input-modules b/debian/installer/modules/powerpc/input-modules
new file mode 100644
index 000000000000..51e37ced9a77
--- /dev/null
+++ b/debian/installer/modules/powerpc/input-modules
@@ -0,0 +1,3 @@
+#include <input-modules>
+atkbd
+i8042
diff --git a/debian/installer/modules/powerpc/isofs-modules b/debian/installer/modules/powerpc/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/powerpc/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/powerpc/jfs-modules b/debian/installer/modules/powerpc/jfs-modules
new file mode 100644
index 000000000000..925a43a9e2a5
--- /dev/null
+++ b/debian/installer/modules/powerpc/jfs-modules
@@ -0,0 +1,2 @@
+#include <jfs-modules>
+
diff --git a/debian/installer/modules/powerpc/kernel-image b/debian/installer/modules/powerpc/kernel-image
new file mode 100644
index 000000000000..b17bb591a8ab
--- /dev/null
+++ b/debian/installer/modules/powerpc/kernel-image
@@ -0,0 +1,2 @@
+#include <kernel-image>
+bestcomm-core ?
diff --git a/debian/installer/modules/powerpc/loop-modules b/debian/installer/modules/powerpc/loop-modules
new file mode 100644
index 000000000000..164467713763
--- /dev/null
+++ b/debian/installer/modules/powerpc/loop-modules
@@ -0,0 +1,2 @@
+#include <loop-modules>
+
diff --git a/debian/installer/modules/powerpc/md-modules b/debian/installer/modules/powerpc/md-modules
new file mode 100644
index 000000000000..ade088ddbb2f
--- /dev/null
+++ b/debian/installer/modules/powerpc/md-modules
@@ -0,0 +1,2 @@
+#include <md-modules>
+
diff --git a/debian/installer/modules/powerpc/mmc-core-modules b/debian/installer/modules/powerpc/mmc-core-modules
new file mode 100644
index 000000000000..7bf38465cf1b
--- /dev/null
+++ b/debian/installer/modules/powerpc/mmc-core-modules
@@ -0,0 +1 @@
+#include <mmc-core-modules>
diff --git a/debian/installer/modules/powerpc/mouse-modules b/debian/installer/modules/powerpc/mouse-modules
new file mode 100644
index 000000000000..15fcb00eaa04
--- /dev/null
+++ b/debian/installer/modules/powerpc/mouse-modules
@@ -0,0 +1 @@
+#include <mouse-modules>
diff --git a/debian/installer/modules/powerpc/multipath-modules b/debian/installer/modules/powerpc/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/powerpc/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/powerpc/nbd-modules b/debian/installer/modules/powerpc/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/powerpc/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/powerpc/nic-modules b/debian/installer/modules/powerpc/nic-modules
new file mode 100644
index 000000000000..cdf8960d9e1e
--- /dev/null
+++ b/debian/installer/modules/powerpc/nic-modules
@@ -0,0 +1,4 @@
+#include <nic-modules>
+
+# Include AppleTalk-IP driver
+ipddp
diff --git a/debian/installer/modules/powerpc/nic-pcmcia-modules b/debian/installer/modules/powerpc/nic-pcmcia-modules
new file mode 100644
index 000000000000..7a0702cd5585
--- /dev/null
+++ b/debian/installer/modules/powerpc/nic-pcmcia-modules
@@ -0,0 +1 @@
+#include <nic-pcmcia-modules>
diff --git a/debian/installer/modules/powerpc/nic-shared-modules b/debian/installer/modules/powerpc/nic-shared-modules
new file mode 100644
index 000000000000..a6f274a444b7
--- /dev/null
+++ b/debian/installer/modules/powerpc/nic-shared-modules
@@ -0,0 +1,2 @@
+#include <nic-shared-modules>
+llc
diff --git a/debian/installer/modules/powerpc/nic-usb-modules b/debian/installer/modules/powerpc/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/powerpc/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/powerpc/nic-wireless-modules b/debian/installer/modules/powerpc/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/powerpc/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/powerpc/pata-modules b/debian/installer/modules/powerpc/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/powerpc/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/powerpc/pcmcia-modules b/debian/installer/modules/powerpc/pcmcia-modules
new file mode 100644
index 000000000000..2bb5350fe14f
--- /dev/null
+++ b/debian/installer/modules/powerpc/pcmcia-modules
@@ -0,0 +1 @@
+#include <pcmcia-modules>
diff --git a/debian/installer/modules/powerpc/pcmcia-storage-modules b/debian/installer/modules/powerpc/pcmcia-storage-modules
new file mode 100644
index 000000000000..9fbaff306dbd
--- /dev/null
+++ b/debian/installer/modules/powerpc/pcmcia-storage-modules
@@ -0,0 +1,2 @@
+#include <pcmcia-storage-modules>
+
diff --git a/debian/installer/modules/powerpc/ppp-modules b/debian/installer/modules/powerpc/ppp-modules
new file mode 100644
index 000000000000..f1ae9b3d15ac
--- /dev/null
+++ b/debian/installer/modules/powerpc/ppp-modules
@@ -0,0 +1,2 @@
+#include <ppp-modules>
+
diff --git a/debian/installer/modules/powerpc/sata-modules b/debian/installer/modules/powerpc/sata-modules
new file mode 100644
index 000000000000..071cb860bbc5
--- /dev/null
+++ b/debian/installer/modules/powerpc/sata-modules
@@ -0,0 +1,2 @@
+#include <sata-modules>
+
diff --git a/debian/installer/modules/powerpc/scsi-core-modules b/debian/installer/modules/powerpc/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/powerpc/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/powerpc/scsi-modules b/debian/installer/modules/powerpc/scsi-modules
new file mode 100644
index 000000000000..8909dfb79487
--- /dev/null
+++ b/debian/installer/modules/powerpc/scsi-modules
@@ -0,0 +1 @@
+#include <scsi-modules>
diff --git a/debian/installer/modules/powerpc/scsi-nic-modules b/debian/installer/modules/powerpc/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/powerpc/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/powerpc/serial-modules b/debian/installer/modules/powerpc/serial-modules
new file mode 100644
index 000000000000..6ab8b8c3551b
--- /dev/null
+++ b/debian/installer/modules/powerpc/serial-modules
@@ -0,0 +1 @@
+#include <serial-modules>
diff --git a/debian/installer/modules/powerpc/squashfs-modules b/debian/installer/modules/powerpc/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/powerpc/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/powerpc/udf-modules b/debian/installer/modules/powerpc/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/powerpc/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/powerpc/uinput-modules b/debian/installer/modules/powerpc/uinput-modules
new file mode 100644
index 000000000000..58a833779442
--- /dev/null
+++ b/debian/installer/modules/powerpc/uinput-modules
@@ -0,0 +1 @@
+#include <uinput-modules>
diff --git a/debian/installer/modules/powerpc/usb-modules b/debian/installer/modules/powerpc/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/powerpc/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/powerpc/usb-serial-modules b/debian/installer/modules/powerpc/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/powerpc/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/powerpc/usb-storage-modules b/debian/installer/modules/powerpc/usb-storage-modules
new file mode 100644
index 000000000000..272d95e2e8b1
--- /dev/null
+++ b/debian/installer/modules/powerpc/usb-storage-modules
@@ -0,0 +1,2 @@
+#include <usb-storage-modules>
+
diff --git a/debian/installer/modules/powerpc/xfs-modules b/debian/installer/modules/powerpc/xfs-modules
new file mode 100644
index 000000000000..c020b5d399f9
--- /dev/null
+++ b/debian/installer/modules/powerpc/xfs-modules
@@ -0,0 +1,2 @@
+#include <xfs-modules>
+
diff --git a/debian/installer/modules/ppc64 b/debian/installer/modules/ppc64
new file mode 120000
index 000000000000..a3e2a5788e59
--- /dev/null
+++ b/debian/installer/modules/ppc64
@@ -0,0 +1 @@
+powerpc-powerpc64
\ No newline at end of file
diff --git a/debian/installer/modules/ppc64el/ata-modules b/debian/installer/modules/ppc64el/ata-modules
new file mode 100644
index 000000000000..03599667e640
--- /dev/null
+++ b/debian/installer/modules/ppc64el/ata-modules
@@ -0,0 +1 @@
+#include "../ppc64/ata-modules"
diff --git a/debian/installer/modules/ppc64el/btrfs-modules b/debian/installer/modules/ppc64el/btrfs-modules
new file mode 100644
index 000000000000..1d9d7d86f406
--- /dev/null
+++ b/debian/installer/modules/ppc64el/btrfs-modules
@@ -0,0 +1 @@
+#include "../ppc64/btrfs-modules"
diff --git a/debian/installer/modules/ppc64el/cdrom-core-modules b/debian/installer/modules/ppc64el/cdrom-core-modules
new file mode 100644
index 000000000000..4e22480aa742
--- /dev/null
+++ b/debian/installer/modules/ppc64el/cdrom-core-modules
@@ -0,0 +1 @@
+#include "../ppc64/cdrom-core-modules"
diff --git a/debian/installer/modules/ppc64el/crc-modules b/debian/installer/modules/ppc64el/crc-modules
new file mode 100644
index 000000000000..6adf710eec44
--- /dev/null
+++ b/debian/installer/modules/ppc64el/crc-modules
@@ -0,0 +1 @@
+#include "../ppc64/crc-modules"
diff --git a/debian/installer/modules/ppc64el/crypto-dm-modules b/debian/installer/modules/ppc64el/crypto-dm-modules
new file mode 100644
index 000000000000..f00e29325833
--- /dev/null
+++ b/debian/installer/modules/ppc64el/crypto-dm-modules
@@ -0,0 +1 @@
+#include "../ppc64/crypto-dm-modules"
diff --git a/debian/installer/modules/ppc64el/crypto-modules b/debian/installer/modules/ppc64el/crypto-modules
new file mode 100644
index 000000000000..1d84b7f90a34
--- /dev/null
+++ b/debian/installer/modules/ppc64el/crypto-modules
@@ -0,0 +1 @@
+#include "../ppc64/crypto-modules"
diff --git a/debian/installer/modules/ppc64el/event-modules b/debian/installer/modules/ppc64el/event-modules
new file mode 100644
index 000000000000..e4a33897e135
--- /dev/null
+++ b/debian/installer/modules/ppc64el/event-modules
@@ -0,0 +1 @@
+#include "../ppc64/event-modules"
diff --git a/debian/installer/modules/ppc64el/ext4-modules b/debian/installer/modules/ppc64el/ext4-modules
new file mode 100644
index 000000000000..b145b0d960d1
--- /dev/null
+++ b/debian/installer/modules/ppc64el/ext4-modules
@@ -0,0 +1 @@
+#include "../ppc64/ext4-modules"
diff --git a/debian/installer/modules/ppc64el/f2fs-modules b/debian/installer/modules/ppc64el/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/ppc64el/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/ppc64el/fancontrol-modules b/debian/installer/modules/ppc64el/fancontrol-modules
new file mode 100644
index 000000000000..c3ace7562c5b
--- /dev/null
+++ b/debian/installer/modules/ppc64el/fancontrol-modules
@@ -0,0 +1 @@
+#include "../ppc64/fancontrol-modules"
diff --git a/debian/installer/modules/ppc64el/fat-modules b/debian/installer/modules/ppc64el/fat-modules
new file mode 100644
index 000000000000..016d97275344
--- /dev/null
+++ b/debian/installer/modules/ppc64el/fat-modules
@@ -0,0 +1 @@
+#include "../ppc64/fat-modules"
diff --git a/debian/installer/modules/ppc64el/fb-modules b/debian/installer/modules/ppc64el/fb-modules
new file mode 100644
index 000000000000..aba524d9021f
--- /dev/null
+++ b/debian/installer/modules/ppc64el/fb-modules
@@ -0,0 +1 @@
+#include <fb-modules>
diff --git a/debian/installer/modules/ppc64el/firewire-core-modules b/debian/installer/modules/ppc64el/firewire-core-modules
new file mode 100644
index 000000000000..5a7791fe82db
--- /dev/null
+++ b/debian/installer/modules/ppc64el/firewire-core-modules
@@ -0,0 +1 @@
+#include "../ppc64/firewire-core-modules"
diff --git a/debian/installer/modules/ppc64el/fuse-modules b/debian/installer/modules/ppc64el/fuse-modules
new file mode 100644
index 000000000000..c90a988b2064
--- /dev/null
+++ b/debian/installer/modules/ppc64el/fuse-modules
@@ -0,0 +1 @@
+#include "../ppc64/fuse-modules"
diff --git a/debian/installer/modules/ppc64el/hypervisor-modules b/debian/installer/modules/ppc64el/hypervisor-modules
new file mode 100644
index 000000000000..2c8e7d824e40
--- /dev/null
+++ b/debian/installer/modules/ppc64el/hypervisor-modules
@@ -0,0 +1 @@
+#include "../ppc64/hypervisor-modules"
diff --git a/debian/installer/modules/ppc64el/i2c-modules b/debian/installer/modules/ppc64el/i2c-modules
new file mode 100644
index 000000000000..1121952acc81
--- /dev/null
+++ b/debian/installer/modules/ppc64el/i2c-modules
@@ -0,0 +1 @@
+#include "../ppc64/i2c-modules"
diff --git a/debian/installer/modules/ppc64el/input-modules b/debian/installer/modules/ppc64el/input-modules
new file mode 100644
index 000000000000..94d6a1174c3f
--- /dev/null
+++ b/debian/installer/modules/ppc64el/input-modules
@@ -0,0 +1 @@
+#include "../ppc64/input-modules"
diff --git a/debian/installer/modules/ppc64el/isofs-modules b/debian/installer/modules/ppc64el/isofs-modules
new file mode 100644
index 000000000000..ff9a9e5cb501
--- /dev/null
+++ b/debian/installer/modules/ppc64el/isofs-modules
@@ -0,0 +1 @@
+#include "../ppc64/isofs-modules"
diff --git a/debian/installer/modules/ppc64el/jfs-modules b/debian/installer/modules/ppc64el/jfs-modules
new file mode 100644
index 000000000000..86a502bda7b2
--- /dev/null
+++ b/debian/installer/modules/ppc64el/jfs-modules
@@ -0,0 +1 @@
+#include "../ppc64/jfs-modules"
diff --git a/debian/installer/modules/ppc64el/kernel-image b/debian/installer/modules/ppc64el/kernel-image
new file mode 100644
index 000000000000..243665337577
--- /dev/null
+++ b/debian/installer/modules/ppc64el/kernel-image
@@ -0,0 +1 @@
+#include "../ppc64/kernel-image"
diff --git a/debian/installer/modules/ppc64el/loop-modules b/debian/installer/modules/ppc64el/loop-modules
new file mode 100644
index 000000000000..2373df643193
--- /dev/null
+++ b/debian/installer/modules/ppc64el/loop-modules
@@ -0,0 +1 @@
+#include "../ppc64/loop-modules"
diff --git a/debian/installer/modules/ppc64el/md-modules b/debian/installer/modules/ppc64el/md-modules
new file mode 100644
index 000000000000..be97ac8b0e70
--- /dev/null
+++ b/debian/installer/modules/ppc64el/md-modules
@@ -0,0 +1 @@
+#include "../ppc64/md-modules"
diff --git a/debian/installer/modules/ppc64el/mouse-modules b/debian/installer/modules/ppc64el/mouse-modules
new file mode 100644
index 000000000000..fecdd47a4dcd
--- /dev/null
+++ b/debian/installer/modules/ppc64el/mouse-modules
@@ -0,0 +1 @@
+#include "../ppc64/mouse-modules"
diff --git a/debian/installer/modules/ppc64el/mtd-core-modules b/debian/installer/modules/ppc64el/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/ppc64el/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/ppc64el/multipath-modules b/debian/installer/modules/ppc64el/multipath-modules
new file mode 100644
index 000000000000..d6965bdb86f6
--- /dev/null
+++ b/debian/installer/modules/ppc64el/multipath-modules
@@ -0,0 +1 @@
+#include "../ppc64/multipath-modules"
diff --git a/debian/installer/modules/ppc64el/nbd-modules b/debian/installer/modules/ppc64el/nbd-modules
new file mode 100644
index 000000000000..9037d8f6362d
--- /dev/null
+++ b/debian/installer/modules/ppc64el/nbd-modules
@@ -0,0 +1 @@
+#include "../ppc64/nbd-modules"
diff --git a/debian/installer/modules/ppc64el/nic-modules b/debian/installer/modules/ppc64el/nic-modules
new file mode 100644
index 000000000000..f692264177ea
--- /dev/null
+++ b/debian/installer/modules/ppc64el/nic-modules
@@ -0,0 +1 @@
+#include "../ppc64/nic-modules"
diff --git a/debian/installer/modules/ppc64el/nic-shared-modules b/debian/installer/modules/ppc64el/nic-shared-modules
new file mode 100644
index 000000000000..c8ff13b12d46
--- /dev/null
+++ b/debian/installer/modules/ppc64el/nic-shared-modules
@@ -0,0 +1 @@
+#include "../ppc64/nic-shared-modules"
diff --git a/debian/installer/modules/ppc64el/nic-usb-modules b/debian/installer/modules/ppc64el/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/ppc64el/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/ppc64el/nic-wireless-modules b/debian/installer/modules/ppc64el/nic-wireless-modules
new file mode 100644
index 000000000000..68609a32c063
--- /dev/null
+++ b/debian/installer/modules/ppc64el/nic-wireless-modules
@@ -0,0 +1 @@
+#include "../ppc64/nic-wireless-modules"
diff --git a/debian/installer/modules/ppc64el/ppp-modules b/debian/installer/modules/ppc64el/ppp-modules
new file mode 100644
index 000000000000..212615220f21
--- /dev/null
+++ b/debian/installer/modules/ppc64el/ppp-modules
@@ -0,0 +1 @@
+#include "../ppc64/ppp-modules"
diff --git a/debian/installer/modules/ppc64el/sata-modules b/debian/installer/modules/ppc64el/sata-modules
new file mode 100644
index 000000000000..92f711ac9d71
--- /dev/null
+++ b/debian/installer/modules/ppc64el/sata-modules
@@ -0,0 +1 @@
+#include "../ppc64/sata-modules"
diff --git a/debian/installer/modules/ppc64el/scsi-core-modules b/debian/installer/modules/ppc64el/scsi-core-modules
new file mode 100644
index 000000000000..b764c2b2e99a
--- /dev/null
+++ b/debian/installer/modules/ppc64el/scsi-core-modules
@@ -0,0 +1 @@
+#include "../ppc64/scsi-core-modules"
diff --git a/debian/installer/modules/ppc64el/scsi-modules b/debian/installer/modules/ppc64el/scsi-modules
new file mode 100644
index 000000000000..c3979d6735cb
--- /dev/null
+++ b/debian/installer/modules/ppc64el/scsi-modules
@@ -0,0 +1 @@
+#include "../ppc64/scsi-modules"
diff --git a/debian/installer/modules/ppc64el/scsi-nic-modules b/debian/installer/modules/ppc64el/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/ppc64el/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/ppc64el/serial-modules b/debian/installer/modules/ppc64el/serial-modules
new file mode 100644
index 000000000000..111ebcd6dc56
--- /dev/null
+++ b/debian/installer/modules/ppc64el/serial-modules
@@ -0,0 +1 @@
+#include "../ppc64/serial-modules"
diff --git a/debian/installer/modules/ppc64el/squashfs-modules b/debian/installer/modules/ppc64el/squashfs-modules
new file mode 100644
index 000000000000..557d0d204669
--- /dev/null
+++ b/debian/installer/modules/ppc64el/squashfs-modules
@@ -0,0 +1 @@
+#include "../ppc64/squashfs-modules"
diff --git a/debian/installer/modules/ppc64el/udf-modules b/debian/installer/modules/ppc64el/udf-modules
new file mode 100644
index 000000000000..c7471ab0b958
--- /dev/null
+++ b/debian/installer/modules/ppc64el/udf-modules
@@ -0,0 +1 @@
+#include "../ppc64/udf-modules"
diff --git a/debian/installer/modules/ppc64el/uinput-modules b/debian/installer/modules/ppc64el/uinput-modules
new file mode 100644
index 000000000000..4a3898f136de
--- /dev/null
+++ b/debian/installer/modules/ppc64el/uinput-modules
@@ -0,0 +1 @@
+#include "../ppc64/uinput-modules"
diff --git a/debian/installer/modules/ppc64el/usb-modules b/debian/installer/modules/ppc64el/usb-modules
new file mode 100644
index 000000000000..a113185a2118
--- /dev/null
+++ b/debian/installer/modules/ppc64el/usb-modules
@@ -0,0 +1 @@
+#include "../ppc64/usb-modules"
diff --git a/debian/installer/modules/ppc64el/usb-serial-modules b/debian/installer/modules/ppc64el/usb-serial-modules
new file mode 100644
index 000000000000..c7fe81a40275
--- /dev/null
+++ b/debian/installer/modules/ppc64el/usb-serial-modules
@@ -0,0 +1 @@
+#include "../ppc64/usb-serial-modules"
diff --git a/debian/installer/modules/ppc64el/usb-storage-modules b/debian/installer/modules/ppc64el/usb-storage-modules
new file mode 100644
index 000000000000..43d2811a904b
--- /dev/null
+++ b/debian/installer/modules/ppc64el/usb-storage-modules
@@ -0,0 +1 @@
+#include "../ppc64/usb-storage-modules"
diff --git a/debian/installer/modules/ppc64el/xfs-modules b/debian/installer/modules/ppc64el/xfs-modules
new file mode 100644
index 000000000000..3431331e90b8
--- /dev/null
+++ b/debian/installer/modules/ppc64el/xfs-modules
@@ -0,0 +1 @@
+#include "../ppc64/xfs-modules"
diff --git a/debian/installer/modules/ppp-modules b/debian/installer/modules/ppp-modules
new file mode 100644
index 000000000000..0dd77f0b5923
--- /dev/null
+++ b/debian/installer/modules/ppp-modules
@@ -0,0 +1,5 @@
+ppp_async ?
+ppp_deflate
+ppp_synctty ?
+pppoe
+pppox
diff --git a/debian/installer/modules/qnx4-modules b/debian/installer/modules/qnx4-modules
new file mode 100644
index 000000000000..05d4adc62712
--- /dev/null
+++ b/debian/installer/modules/qnx4-modules
@@ -0,0 +1 @@
+qnx4
diff --git a/debian/installer/modules/rfkill-modules b/debian/installer/modules/rfkill-modules
new file mode 100644
index 000000000000..c9eff47f940f
--- /dev/null
+++ b/debian/installer/modules/rfkill-modules
@@ -0,0 +1 @@
+rfkill
diff --git a/debian/installer/modules/riscv64/ata-modules b/debian/installer/modules/riscv64/ata-modules
new file mode 100644
index 000000000000..ab5e7fdf09d1
--- /dev/null
+++ b/debian/installer/modules/riscv64/ata-modules
@@ -0,0 +1 @@
+libata ?
diff --git a/debian/installer/modules/riscv64/btrfs-modules b/debian/installer/modules/riscv64/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/riscv64/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/riscv64/cdrom-core-modules b/debian/installer/modules/riscv64/cdrom-core-modules
new file mode 100644
index 000000000000..3ff69b48f4fc
--- /dev/null
+++ b/debian/installer/modules/riscv64/cdrom-core-modules
@@ -0,0 +1 @@
+#include <cdrom-core-modules>
diff --git a/debian/installer/modules/riscv64/crc-modules b/debian/installer/modules/riscv64/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/riscv64/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/riscv64/crypto-dm-modules b/debian/installer/modules/riscv64/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/riscv64/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/riscv64/crypto-modules b/debian/installer/modules/riscv64/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/riscv64/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/riscv64/event-modules b/debian/installer/modules/riscv64/event-modules
new file mode 100644
index 000000000000..f8819afd361c
--- /dev/null
+++ b/debian/installer/modules/riscv64/event-modules
@@ -0,0 +1 @@
+#include <event-modules>
diff --git a/debian/installer/modules/riscv64/ext4-modules b/debian/installer/modules/riscv64/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/riscv64/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/riscv64/f2fs-modules b/debian/installer/modules/riscv64/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/riscv64/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/riscv64/fat-modules b/debian/installer/modules/riscv64/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/riscv64/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/riscv64/fb-modules b/debian/installer/modules/riscv64/fb-modules
new file mode 100644
index 000000000000..aba524d9021f
--- /dev/null
+++ b/debian/installer/modules/riscv64/fb-modules
@@ -0,0 +1 @@
+#include <fb-modules>
diff --git a/debian/installer/modules/riscv64/fuse-modules b/debian/installer/modules/riscv64/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/riscv64/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/riscv64/i2c-modules b/debian/installer/modules/riscv64/i2c-modules
new file mode 100644
index 000000000000..203a607e73ce
--- /dev/null
+++ b/debian/installer/modules/riscv64/i2c-modules
@@ -0,0 +1 @@
+#include <i2c-modules>
diff --git a/debian/installer/modules/riscv64/input-modules b/debian/installer/modules/riscv64/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/riscv64/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/riscv64/isofs-modules b/debian/installer/modules/riscv64/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/riscv64/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/riscv64/jfs-modules b/debian/installer/modules/riscv64/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/riscv64/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/riscv64/kernel-image b/debian/installer/modules/riscv64/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/riscv64/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/riscv64/loop-modules b/debian/installer/modules/riscv64/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/riscv64/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/riscv64/md-modules b/debian/installer/modules/riscv64/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/riscv64/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/riscv64/mmc-core-modules b/debian/installer/modules/riscv64/mmc-core-modules
new file mode 100644
index 000000000000..7bf38465cf1b
--- /dev/null
+++ b/debian/installer/modules/riscv64/mmc-core-modules
@@ -0,0 +1 @@
+#include <mmc-core-modules>
diff --git a/debian/installer/modules/riscv64/mmc-modules b/debian/installer/modules/riscv64/mmc-modules
new file mode 100644
index 000000000000..dadfd5334d62
--- /dev/null
+++ b/debian/installer/modules/riscv64/mmc-modules
@@ -0,0 +1 @@
+#include <mmc-modules>
diff --git a/debian/installer/modules/riscv64/mtd-core-modules b/debian/installer/modules/riscv64/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/riscv64/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/riscv64/mtd-modules b/debian/installer/modules/riscv64/mtd-modules
new file mode 100644
index 000000000000..5dd7997b2c71
--- /dev/null
+++ b/debian/installer/modules/riscv64/mtd-modules
@@ -0,0 +1 @@
+#include <mtd-modules>
diff --git a/debian/installer/modules/riscv64/multipath-modules b/debian/installer/modules/riscv64/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/riscv64/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/riscv64/nbd-modules b/debian/installer/modules/riscv64/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/riscv64/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/riscv64/nic-modules b/debian/installer/modules/riscv64/nic-modules
new file mode 100644
index 000000000000..2512e83950dd
--- /dev/null
+++ b/debian/installer/modules/riscv64/nic-modules
@@ -0,0 +1 @@
+#include <nic-modules>
diff --git a/debian/installer/modules/riscv64/nic-shared-modules b/debian/installer/modules/riscv64/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/riscv64/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/riscv64/nic-usb-modules b/debian/installer/modules/riscv64/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/riscv64/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/riscv64/nic-wireless-modules b/debian/installer/modules/riscv64/nic-wireless-modules
new file mode 100644
index 000000000000..53fd18d7f4c7
--- /dev/null
+++ b/debian/installer/modules/riscv64/nic-wireless-modules
@@ -0,0 +1 @@
+#include <nic-wireless-modules>
diff --git a/debian/installer/modules/riscv64/pata-modules b/debian/installer/modules/riscv64/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/riscv64/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/riscv64/ppp-modules b/debian/installer/modules/riscv64/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/riscv64/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/riscv64/sata-modules b/debian/installer/modules/riscv64/sata-modules
new file mode 100644
index 000000000000..01318c258b5a
--- /dev/null
+++ b/debian/installer/modules/riscv64/sata-modules
@@ -0,0 +1 @@
+#include <sata-modules>
diff --git a/debian/installer/modules/riscv64/scsi-core-modules b/debian/installer/modules/riscv64/scsi-core-modules
new file mode 100644
index 000000000000..dd65d661433d
--- /dev/null
+++ b/debian/installer/modules/riscv64/scsi-core-modules
@@ -0,0 +1 @@
+#include <scsi-core-modules>
diff --git a/debian/installer/modules/riscv64/scsi-modules b/debian/installer/modules/riscv64/scsi-modules
new file mode 100644
index 000000000000..675462a141fa
--- /dev/null
+++ b/debian/installer/modules/riscv64/scsi-modules
@@ -0,0 +1,2 @@
+#include <scsi-modules>
+
diff --git a/debian/installer/modules/riscv64/scsi-nic-modules b/debian/installer/modules/riscv64/scsi-nic-modules
new file mode 100644
index 000000000000..089dd5dc6b06
--- /dev/null
+++ b/debian/installer/modules/riscv64/scsi-nic-modules
@@ -0,0 +1 @@
+#include <scsi-nic-modules>
diff --git a/debian/installer/modules/riscv64/squashfs-modules b/debian/installer/modules/riscv64/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/riscv64/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/riscv64/udf-modules b/debian/installer/modules/riscv64/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/riscv64/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/riscv64/usb-modules b/debian/installer/modules/riscv64/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/riscv64/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/riscv64/usb-serial-modules b/debian/installer/modules/riscv64/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/riscv64/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/riscv64/usb-storage-modules b/debian/installer/modules/riscv64/usb-storage-modules
new file mode 100644
index 000000000000..8c5e81b55e3a
--- /dev/null
+++ b/debian/installer/modules/riscv64/usb-storage-modules
@@ -0,0 +1 @@
+#include <usb-storage-modules>
diff --git a/debian/installer/modules/rtc-modules b/debian/installer/modules/rtc-modules
new file mode 100644
index 000000000000..0a78e7856345
--- /dev/null
+++ b/debian/installer/modules/rtc-modules
@@ -0,0 +1,2 @@
+rtc ?
+rtc-cmos
diff --git a/debian/installer/modules/s390x/btrfs-modules b/debian/installer/modules/s390x/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/s390x/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/s390x/cdrom-core-modules b/debian/installer/modules/s390x/cdrom-core-modules
new file mode 100644
index 000000000000..3ff69b48f4fc
--- /dev/null
+++ b/debian/installer/modules/s390x/cdrom-core-modules
@@ -0,0 +1 @@
+#include <cdrom-core-modules>
diff --git a/debian/installer/modules/s390x/crc-modules b/debian/installer/modules/s390x/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/s390x/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/s390x/crypto-dm-modules b/debian/installer/modules/s390x/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/s390x/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/s390x/crypto-modules b/debian/installer/modules/s390x/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/s390x/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/s390x/dasd-extra-modules b/debian/installer/modules/s390x/dasd-extra-modules
new file mode 100644
index 000000000000..ddd10cdfb115
--- /dev/null
+++ b/debian/installer/modules/s390x/dasd-extra-modules
@@ -0,0 +1 @@
+dasd_diag_mod
diff --git a/debian/installer/modules/s390x/dasd-modules b/debian/installer/modules/s390x/dasd-modules
new file mode 100644
index 000000000000..d3df219e70fa
--- /dev/null
+++ b/debian/installer/modules/s390x/dasd-modules
@@ -0,0 +1,2 @@
+dasd_eckd_mod
+dasd_fba_mod
diff --git a/debian/installer/modules/s390x/ext4-modules b/debian/installer/modules/s390x/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/s390x/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/s390x/f2fs-modules b/debian/installer/modules/s390x/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/s390x/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/s390x/fat-modules b/debian/installer/modules/s390x/fat-modules
new file mode 100644
index 000000000000..cce8fd30ca4f
--- /dev/null
+++ b/debian/installer/modules/s390x/fat-modules
@@ -0,0 +1,2 @@
+#include <fat-modules>
+
diff --git a/debian/installer/modules/s390x/fuse-modules b/debian/installer/modules/s390x/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/s390x/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/s390x/isofs-modules b/debian/installer/modules/s390x/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/s390x/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/s390x/kernel-image b/debian/installer/modules/s390x/kernel-image
new file mode 100644
index 000000000000..fd8c3a7721ea
--- /dev/null
+++ b/debian/installer/modules/s390x/kernel-image
@@ -0,0 +1,2 @@
+#include <kernel-image>
+vmcp ?
diff --git a/debian/installer/modules/s390x/loop-modules b/debian/installer/modules/s390x/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/s390x/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/s390x/md-modules b/debian/installer/modules/s390x/md-modules
new file mode 100644
index 000000000000..ade088ddbb2f
--- /dev/null
+++ b/debian/installer/modules/s390x/md-modules
@@ -0,0 +1,2 @@
+#include <md-modules>
+
diff --git a/debian/installer/modules/s390x/mtd-core-modules b/debian/installer/modules/s390x/mtd-core-modules
new file mode 100644
index 000000000000..28fdada60419
--- /dev/null
+++ b/debian/installer/modules/s390x/mtd-core-modules
@@ -0,0 +1 @@
+#include <mtd-core-modules>
diff --git a/debian/installer/modules/s390x/multipath-modules b/debian/installer/modules/s390x/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/s390x/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/s390x/nbd-modules b/debian/installer/modules/s390x/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/s390x/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/s390x/nic-modules b/debian/installer/modules/s390x/nic-modules
new file mode 100644
index 000000000000..5e39d1f5efd7
--- /dev/null
+++ b/debian/installer/modules/s390x/nic-modules
@@ -0,0 +1,7 @@
+netiucv
+ctcm
+lcs
+qeth
+qeth_l2
+qeth_l3
+virtio_net
diff --git a/debian/installer/modules/s390x/scsi-core-modules b/debian/installer/modules/s390x/scsi-core-modules
new file mode 100644
index 000000000000..3537f82349ae
--- /dev/null
+++ b/debian/installer/modules/s390x/scsi-core-modules
@@ -0,0 +1,2 @@
+#include <scsi-core-modules>
+
diff --git a/debian/installer/modules/s390x/scsi-modules b/debian/installer/modules/s390x/scsi-modules
new file mode 100644
index 000000000000..0a64e24fe38b
--- /dev/null
+++ b/debian/installer/modules/s390x/scsi-modules
@@ -0,0 +1,2 @@
+#include <scsi-modules>
+zfcp
diff --git a/debian/installer/modules/s390x/udf-modules b/debian/installer/modules/s390x/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/s390x/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/s390x/xfs-modules b/debian/installer/modules/s390x/xfs-modules
new file mode 100644
index 000000000000..c020b5d399f9
--- /dev/null
+++ b/debian/installer/modules/s390x/xfs-modules
@@ -0,0 +1,2 @@
+#include <xfs-modules>
+
diff --git a/debian/installer/modules/sata-modules b/debian/installer/modules/sata-modules
new file mode 100644
index 000000000000..da038b7396c3
--- /dev/null
+++ b/debian/installer/modules/sata-modules
@@ -0,0 +1,13 @@
+# Include SATA drivers by default
+drivers/ata/ahci* ?
+drivers/ata/sata_*
+
+# sata-sis depends on pata-sis; avoid a dependency
+pata_sis ?
+
+# Include more SATA drivers with unusual names
+acard-ahci ?
+ata_piix ?
+sx8 ?
+pdc_adma ?
+mtip32xx ?
diff --git a/debian/installer/modules/scsi-core-modules b/debian/installer/modules/scsi-core-modules
new file mode 100644
index 000000000000..6b95c3a8f8c7
--- /dev/null
+++ b/debian/installer/modules/scsi-core-modules
@@ -0,0 +1,5 @@
+scsi_common
+scsi_mod
+sd_mod
+scsi_transport_sas ?
+scsi_transport_spi ?
diff --git a/debian/installer/modules/scsi-modules b/debian/installer/modules/scsi-modules
new file mode 100644
index 000000000000..dfc866448669
--- /dev/null
+++ b/debian/installer/modules/scsi-modules
@@ -0,0 +1,48 @@
+# Include SCSI controller drivers by default
+drivers/scsi/**
+mptfc
+mptsas
+mptspi
+
+# Include iSCSI boot support
+iscsi_ibft ?
+
+# Include Xen block driver even though it's not SCSI
+xen-blkfront ?
+
+# Exclude PCMCIA drivers, which depend on pcmcia-modules (FIXME)
+drivers/scsi/pcmcia/* -
+
+# Exclude drivers for converged NICs, packaged in scsi-nic-modules
+drivers/scsi/cxgbi/* -
+cxgb3i -
+cxgb4i -
+qedf -
+qedi -
+
+# Exclude enclosure driver
+ses -
+
+# Exclude target drivers
+tcm_qla2xxx -
+
+# Exclude common code packaged in {cdrom,scsi}-core-modules
+scsi_common -
+scsi_mod -
+sd_mod -
+sr_mod -
+scsi_transport_sas -
+scsi_transport_spi -
+
+# Exclude any other common code that isn't pulled in by dependencies
+drivers/scsi/device_handler/* -
+drivers/scsi/lib** -
+drivers/scsi/osd/* -
+drivers/scsi/scsi_transport_* -
+fcoe -
+raid_class -
+scsi_debug -
+
+# XXX not actually SCSI
+nvme ?
+virtio_blk ?
diff --git a/debian/installer/modules/scsi-nic-modules b/debian/installer/modules/scsi-nic-modules
new file mode 100644
index 000000000000..b2b8f5e5d09a
--- /dev/null
+++ b/debian/installer/modules/scsi-nic-modules
@@ -0,0 +1,4 @@
+cxgb3i
+cxgb4i
+qedf
+qedi
diff --git a/debian/installer/modules/serial-modules b/debian/installer/modules/serial-modules
new file mode 100644
index 000000000000..738348dd66a3
--- /dev/null
+++ b/debian/installer/modules/serial-modules
@@ -0,0 +1,3 @@
+rp2 ?
+serial_cs ?
+synclink_cs ?
diff --git a/debian/installer/modules/sh4-sh7751r/btrfs-modules b/debian/installer/modules/sh4-sh7751r/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/cdrom-core-modules b/debian/installer/modules/sh4-sh7751r/cdrom-core-modules
new file mode 100644
index 000000000000..e264d7aa3488
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/cdrom-core-modules
@@ -0,0 +1,2 @@
+#include <cdrom-core-modules>
+
diff --git a/debian/installer/modules/sh4-sh7751r/crc-modules b/debian/installer/modules/sh4-sh7751r/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/crypto-dm-modules b/debian/installer/modules/sh4-sh7751r/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/crypto-modules b/debian/installer/modules/sh4-sh7751r/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/ext4-modules b/debian/installer/modules/sh4-sh7751r/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/f2fs-modules b/debian/installer/modules/sh4-sh7751r/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/fat-modules b/debian/installer/modules/sh4-sh7751r/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/firewire-core-modules b/debian/installer/modules/sh4-sh7751r/firewire-core-modules
new file mode 100644
index 000000000000..dcac80af9651
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/firewire-core-modules
@@ -0,0 +1 @@
+#include <firewire-core-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/fuse-modules b/debian/installer/modules/sh4-sh7751r/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/i2c-modules b/debian/installer/modules/sh4-sh7751r/i2c-modules
new file mode 100644
index 000000000000..203a607e73ce
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/i2c-modules
@@ -0,0 +1 @@
+#include <i2c-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/isofs-modules b/debian/installer/modules/sh4-sh7751r/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/jfs-modules b/debian/installer/modules/sh4-sh7751r/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/kernel-image b/debian/installer/modules/sh4-sh7751r/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/sh4-sh7751r/loop-modules b/debian/installer/modules/sh4-sh7751r/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/md-modules b/debian/installer/modules/sh4-sh7751r/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/minix-modules b/debian/installer/modules/sh4-sh7751r/minix-modules
new file mode 100644
index 000000000000..82b9843720a1
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/minix-modules
@@ -0,0 +1 @@
+#include <minix-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/multipath-modules b/debian/installer/modules/sh4-sh7751r/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/nbd-modules b/debian/installer/modules/sh4-sh7751r/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/nic-modules b/debian/installer/modules/sh4-sh7751r/nic-modules
new file mode 100644
index 000000000000..67761a69cc74
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/nic-modules
@@ -0,0 +1,6 @@
+3c59x ?
+8139too ?
+e100 ?
+e1000 ?
+ne2k-pci ?
+r8169 ?
diff --git a/debian/installer/modules/sh4-sh7751r/nic-shared-modules b/debian/installer/modules/sh4-sh7751r/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/nic-usb-modules b/debian/installer/modules/sh4-sh7751r/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/pata-modules b/debian/installer/modules/sh4-sh7751r/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/ppp-modules b/debian/installer/modules/sh4-sh7751r/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/sata-modules b/debian/installer/modules/sh4-sh7751r/sata-modules
new file mode 100644
index 000000000000..01318c258b5a
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/sata-modules
@@ -0,0 +1 @@
+#include <sata-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/sound-modules b/debian/installer/modules/sh4-sh7751r/sound-modules
new file mode 100644
index 000000000000..68395ab3d99a
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/sound-modules
@@ -0,0 +1 @@
+#include <sound-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/speakup-modules b/debian/installer/modules/sh4-sh7751r/speakup-modules
new file mode 100644
index 000000000000..29592721a7aa
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/speakup-modules
@@ -0,0 +1 @@
+#include <speakup-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/squashfs-modules b/debian/installer/modules/sh4-sh7751r/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/udf-modules b/debian/installer/modules/sh4-sh7751r/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/usb-serial-modules b/debian/installer/modules/sh4-sh7751r/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/usb-storage-modules b/debian/installer/modules/sh4-sh7751r/usb-storage-modules
new file mode 100644
index 000000000000..8c5e81b55e3a
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/usb-storage-modules
@@ -0,0 +1 @@
+#include <usb-storage-modules>
diff --git a/debian/installer/modules/sh4-sh7751r/xfs-modules b/debian/installer/modules/sh4-sh7751r/xfs-modules
new file mode 100644
index 000000000000..98374e2bbaf8
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7751r/xfs-modules
@@ -0,0 +1 @@
+#include <xfs-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/btrfs-modules b/debian/installer/modules/sh4-sh7785lcr/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/cdrom-core-modules b/debian/installer/modules/sh4-sh7785lcr/cdrom-core-modules
new file mode 100644
index 000000000000..e264d7aa3488
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/cdrom-core-modules
@@ -0,0 +1,2 @@
+#include <cdrom-core-modules>
+
diff --git a/debian/installer/modules/sh4-sh7785lcr/crc-modules b/debian/installer/modules/sh4-sh7785lcr/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/crypto-dm-modules b/debian/installer/modules/sh4-sh7785lcr/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/crypto-modules b/debian/installer/modules/sh4-sh7785lcr/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/ext4-modules b/debian/installer/modules/sh4-sh7785lcr/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/f2fs-modules b/debian/installer/modules/sh4-sh7785lcr/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/fat-modules b/debian/installer/modules/sh4-sh7785lcr/fat-modules
new file mode 100644
index 000000000000..274584eb65fb
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/fat-modules
@@ -0,0 +1 @@
+#include <fat-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/firewire-core-modules b/debian/installer/modules/sh4-sh7785lcr/firewire-core-modules
new file mode 100644
index 000000000000..dcac80af9651
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/firewire-core-modules
@@ -0,0 +1 @@
+#include <firewire-core-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/fuse-modules b/debian/installer/modules/sh4-sh7785lcr/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/isofs-modules b/debian/installer/modules/sh4-sh7785lcr/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/jfs-modules b/debian/installer/modules/sh4-sh7785lcr/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/kernel-image b/debian/installer/modules/sh4-sh7785lcr/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/sh4-sh7785lcr/loop-modules b/debian/installer/modules/sh4-sh7785lcr/loop-modules
new file mode 100644
index 000000000000..c1c948fa3316
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/loop-modules
@@ -0,0 +1 @@
+#include <loop-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/md-modules b/debian/installer/modules/sh4-sh7785lcr/md-modules
new file mode 100644
index 000000000000..26115e10b800
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/md-modules
@@ -0,0 +1 @@
+#include <md-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/minix-modules b/debian/installer/modules/sh4-sh7785lcr/minix-modules
new file mode 100644
index 000000000000..82b9843720a1
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/minix-modules
@@ -0,0 +1 @@
+#include <minix-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/multipath-modules b/debian/installer/modules/sh4-sh7785lcr/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/nbd-modules b/debian/installer/modules/sh4-sh7785lcr/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/nic-modules b/debian/installer/modules/sh4-sh7785lcr/nic-modules
new file mode 100644
index 000000000000..67761a69cc74
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/nic-modules
@@ -0,0 +1,6 @@
+3c59x ?
+8139too ?
+e100 ?
+e1000 ?
+ne2k-pci ?
+r8169 ?
diff --git a/debian/installer/modules/sh4-sh7785lcr/nic-shared-modules b/debian/installer/modules/sh4-sh7785lcr/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/nic-usb-modules b/debian/installer/modules/sh4-sh7785lcr/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/pata-modules b/debian/installer/modules/sh4-sh7785lcr/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/ppp-modules b/debian/installer/modules/sh4-sh7785lcr/ppp-modules
new file mode 100644
index 000000000000..1f26aa1ee60e
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/ppp-modules
@@ -0,0 +1 @@
+#include <ppp-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/sata-modules b/debian/installer/modules/sh4-sh7785lcr/sata-modules
new file mode 100644
index 000000000000..01318c258b5a
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/sata-modules
@@ -0,0 +1 @@
+#include <sata-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/sound-modules b/debian/installer/modules/sh4-sh7785lcr/sound-modules
new file mode 100644
index 000000000000..68395ab3d99a
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/sound-modules
@@ -0,0 +1 @@
+#include <sound-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/speakup-modules b/debian/installer/modules/sh4-sh7785lcr/speakup-modules
new file mode 100644
index 000000000000..29592721a7aa
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/speakup-modules
@@ -0,0 +1 @@
+#include <speakup-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/squashfs-modules b/debian/installer/modules/sh4-sh7785lcr/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/udf-modules b/debian/installer/modules/sh4-sh7785lcr/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/usb-serial-modules b/debian/installer/modules/sh4-sh7785lcr/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/sh4-sh7785lcr/xfs-modules b/debian/installer/modules/sh4-sh7785lcr/xfs-modules
new file mode 100644
index 000000000000..98374e2bbaf8
--- /dev/null
+++ b/debian/installer/modules/sh4-sh7785lcr/xfs-modules
@@ -0,0 +1 @@
+#include <xfs-modules>
diff --git a/debian/installer/modules/sound-modules b/debian/installer/modules/sound-modules
new file mode 100644
index 000000000000..7bd30ee8e557
--- /dev/null
+++ b/debian/installer/modules/sound-modules
@@ -0,0 +1,15 @@
+# Include sound drivers by default
+sound/**
+
+# Exclude any core/shared modules that aren't pulled in by dependencies
+sound/core/** -
+sound/drivers/** -
+sound/i2c/** -
+
+# Exclude synthesiser drivers
+snd-adlib -
+sound/**-synth -
+
+# Exclude soft-modem drivers
+sound/**-modem -
+snd-intel8x0m -
diff --git a/debian/installer/modules/sparc64/ata-modules b/debian/installer/modules/sparc64/ata-modules
new file mode 100644
index 000000000000..b81c0f38b74a
--- /dev/null
+++ b/debian/installer/modules/sparc64/ata-modules
@@ -0,0 +1 @@
+#include <ata-modules>
diff --git a/debian/installer/modules/sparc64/btrfs-modules b/debian/installer/modules/sparc64/btrfs-modules
new file mode 100644
index 000000000000..e261e1388380
--- /dev/null
+++ b/debian/installer/modules/sparc64/btrfs-modules
@@ -0,0 +1 @@
+#include <btrfs-modules>
diff --git a/debian/installer/modules/sparc64/cdrom-core-modules b/debian/installer/modules/sparc64/cdrom-core-modules
new file mode 100644
index 000000000000..e264d7aa3488
--- /dev/null
+++ b/debian/installer/modules/sparc64/cdrom-core-modules
@@ -0,0 +1,2 @@
+#include <cdrom-core-modules>
+
diff --git a/debian/installer/modules/sparc64/crc-modules b/debian/installer/modules/sparc64/crc-modules
new file mode 100644
index 000000000000..7e00de705e41
--- /dev/null
+++ b/debian/installer/modules/sparc64/crc-modules
@@ -0,0 +1 @@
+#include <crc-modules>
diff --git a/debian/installer/modules/sparc64/crypto-dm-modules b/debian/installer/modules/sparc64/crypto-dm-modules
new file mode 100644
index 000000000000..4c8f2354cd26
--- /dev/null
+++ b/debian/installer/modules/sparc64/crypto-dm-modules
@@ -0,0 +1 @@
+#include <crypto-dm-modules>
diff --git a/debian/installer/modules/sparc64/crypto-modules b/debian/installer/modules/sparc64/crypto-modules
new file mode 100644
index 000000000000..3a1e862b4cc9
--- /dev/null
+++ b/debian/installer/modules/sparc64/crypto-modules
@@ -0,0 +1 @@
+#include <crypto-modules>
diff --git a/debian/installer/modules/sparc64/ext4-modules b/debian/installer/modules/sparc64/ext4-modules
new file mode 100644
index 000000000000..394c577ce40d
--- /dev/null
+++ b/debian/installer/modules/sparc64/ext4-modules
@@ -0,0 +1 @@
+#include <ext4-modules>
diff --git a/debian/installer/modules/sparc64/f2fs-modules b/debian/installer/modules/sparc64/f2fs-modules
new file mode 100644
index 000000000000..34359e041189
--- /dev/null
+++ b/debian/installer/modules/sparc64/f2fs-modules
@@ -0,0 +1 @@
+#include <f2fs-modules>
diff --git a/debian/installer/modules/sparc64/fat-modules b/debian/installer/modules/sparc64/fat-modules
new file mode 100644
index 000000000000..cce8fd30ca4f
--- /dev/null
+++ b/debian/installer/modules/sparc64/fat-modules
@@ -0,0 +1,2 @@
+#include <fat-modules>
+
diff --git a/debian/installer/modules/sparc64/fb-modules b/debian/installer/modules/sparc64/fb-modules
new file mode 100644
index 000000000000..aba524d9021f
--- /dev/null
+++ b/debian/installer/modules/sparc64/fb-modules
@@ -0,0 +1 @@
+#include <fb-modules>
diff --git a/debian/installer/modules/sparc64/fuse-modules b/debian/installer/modules/sparc64/fuse-modules
new file mode 100644
index 000000000000..0b6ba0c8c8fe
--- /dev/null
+++ b/debian/installer/modules/sparc64/fuse-modules
@@ -0,0 +1 @@
+#include <fuse-modules>
diff --git a/debian/installer/modules/sparc64/i2c-modules b/debian/installer/modules/sparc64/i2c-modules
new file mode 100644
index 000000000000..203a607e73ce
--- /dev/null
+++ b/debian/installer/modules/sparc64/i2c-modules
@@ -0,0 +1 @@
+#include <i2c-modules>
diff --git a/debian/installer/modules/sparc64/input-modules b/debian/installer/modules/sparc64/input-modules
new file mode 100644
index 000000000000..5ecb595a4a49
--- /dev/null
+++ b/debian/installer/modules/sparc64/input-modules
@@ -0,0 +1 @@
+#include <input-modules>
diff --git a/debian/installer/modules/sparc64/isofs-modules b/debian/installer/modules/sparc64/isofs-modules
new file mode 100644
index 000000000000..da4fa9a3c77d
--- /dev/null
+++ b/debian/installer/modules/sparc64/isofs-modules
@@ -0,0 +1 @@
+#include <isofs-modules>
diff --git a/debian/installer/modules/sparc64/jfs-modules b/debian/installer/modules/sparc64/jfs-modules
new file mode 100644
index 000000000000..7e4d912b9529
--- /dev/null
+++ b/debian/installer/modules/sparc64/jfs-modules
@@ -0,0 +1 @@
+#include <jfs-modules>
diff --git a/debian/installer/modules/sparc64/kernel-image b/debian/installer/modules/sparc64/kernel-image
new file mode 100644
index 000000000000..1d11b1921dae
--- /dev/null
+++ b/debian/installer/modules/sparc64/kernel-image
@@ -0,0 +1 @@
+#include <kernel-image>
diff --git a/debian/installer/modules/sparc64/md-modules b/debian/installer/modules/sparc64/md-modules
new file mode 100644
index 000000000000..ade088ddbb2f
--- /dev/null
+++ b/debian/installer/modules/sparc64/md-modules
@@ -0,0 +1,2 @@
+#include <md-modules>
+
diff --git a/debian/installer/modules/sparc64/multipath-modules b/debian/installer/modules/sparc64/multipath-modules
new file mode 100644
index 000000000000..a8b69b2537a0
--- /dev/null
+++ b/debian/installer/modules/sparc64/multipath-modules
@@ -0,0 +1 @@
+#include <multipath-modules>
diff --git a/debian/installer/modules/sparc64/nbd-modules b/debian/installer/modules/sparc64/nbd-modules
new file mode 100644
index 000000000000..3c9b3e5d426d
--- /dev/null
+++ b/debian/installer/modules/sparc64/nbd-modules
@@ -0,0 +1 @@
+#include <nbd-modules>
diff --git a/debian/installer/modules/sparc64/nic-modules b/debian/installer/modules/sparc64/nic-modules
new file mode 100644
index 000000000000..ad212bc8bd70
--- /dev/null
+++ b/debian/installer/modules/sparc64/nic-modules
@@ -0,0 +1,4 @@
+#include <nic-modules>
+
+eql
+skfp
diff --git a/debian/installer/modules/sparc64/nic-shared-modules b/debian/installer/modules/sparc64/nic-shared-modules
new file mode 100644
index 000000000000..cc84b14dcd10
--- /dev/null
+++ b/debian/installer/modules/sparc64/nic-shared-modules
@@ -0,0 +1 @@
+#include <nic-shared-modules>
diff --git a/debian/installer/modules/sparc64/nic-usb-modules b/debian/installer/modules/sparc64/nic-usb-modules
new file mode 100644
index 000000000000..c479669b477e
--- /dev/null
+++ b/debian/installer/modules/sparc64/nic-usb-modules
@@ -0,0 +1 @@
+#include <nic-usb-modules>
diff --git a/debian/installer/modules/sparc64/pata-modules b/debian/installer/modules/sparc64/pata-modules
new file mode 100644
index 000000000000..b0cd6337a28d
--- /dev/null
+++ b/debian/installer/modules/sparc64/pata-modules
@@ -0,0 +1 @@
+#include <pata-modules>
diff --git a/debian/installer/modules/sparc64/ppp-modules b/debian/installer/modules/sparc64/ppp-modules
new file mode 100644
index 000000000000..f1ae9b3d15ac
--- /dev/null
+++ b/debian/installer/modules/sparc64/ppp-modules
@@ -0,0 +1,2 @@
+#include <ppp-modules>
+
diff --git a/debian/installer/modules/sparc64/sata-modules b/debian/installer/modules/sparc64/sata-modules
new file mode 100644
index 000000000000..01318c258b5a
--- /dev/null
+++ b/debian/installer/modules/sparc64/sata-modules
@@ -0,0 +1 @@
+#include <sata-modules>
diff --git a/debian/installer/modules/sparc64/scsi-core-modules b/debian/installer/modules/sparc64/scsi-core-modules
new file mode 100644
index 000000000000..6026fdf46e6c
--- /dev/null
+++ b/debian/installer/modules/sparc64/scsi-core-modules
@@ -0,0 +1,6 @@
+#include <scsi-core-modules>
+
+# Support for virtual disk devices as a client under Sun Logical Domains.
+# Does not really belong here, but it's better than adding a new kernel
+# udeb just for this module.
+sunvdc ?
diff --git a/debian/installer/modules/sparc64/scsi-modules b/debian/installer/modules/sparc64/scsi-modules
new file mode 100644
index 000000000000..263dcc9d4aed
--- /dev/null
+++ b/debian/installer/modules/sparc64/scsi-modules
@@ -0,0 +1,26 @@
+3w-9xxx
+3w-xxxx
+aacraid
+aic79xx
+aic7xxx
+aic94xx
+arcmsr
+atp870u ?
+dc395x
+dmx3191d
+hptiop
+initio
+ipr
+lpfc
+megaraid
+megaraid_sas
+mpt3sas
+mptsas
+mptspi
+qla1280 ?
+qla2xxx ?
+qla4xxx ?
+qlogicpti ?
+stex
+sun_esp
+sym53c8xx
diff --git a/debian/installer/modules/sparc64/squashfs-modules b/debian/installer/modules/sparc64/squashfs-modules
new file mode 100644
index 000000000000..42d77887ad3d
--- /dev/null
+++ b/debian/installer/modules/sparc64/squashfs-modules
@@ -0,0 +1 @@
+#include <squashfs-modules>
diff --git a/debian/installer/modules/sparc64/udf-modules b/debian/installer/modules/sparc64/udf-modules
new file mode 100644
index 000000000000..b90d7ee9b52e
--- /dev/null
+++ b/debian/installer/modules/sparc64/udf-modules
@@ -0,0 +1 @@
+#include <udf-modules>
diff --git a/debian/installer/modules/sparc64/ufs-modules b/debian/installer/modules/sparc64/ufs-modules
new file mode 100644
index 000000000000..163ead095a54
--- /dev/null
+++ b/debian/installer/modules/sparc64/ufs-modules
@@ -0,0 +1 @@
+#include <ufs-modules>
diff --git a/debian/installer/modules/sparc64/usb-modules b/debian/installer/modules/sparc64/usb-modules
new file mode 100644
index 000000000000..c598dedd8112
--- /dev/null
+++ b/debian/installer/modules/sparc64/usb-modules
@@ -0,0 +1 @@
+#include <usb-modules>
diff --git a/debian/installer/modules/sparc64/usb-serial-modules b/debian/installer/modules/sparc64/usb-serial-modules
new file mode 100644
index 000000000000..c0a0dc3bd179
--- /dev/null
+++ b/debian/installer/modules/sparc64/usb-serial-modules
@@ -0,0 +1 @@
+#include <usb-serial-modules>
diff --git a/debian/installer/modules/sparc64/usb-storage-modules b/debian/installer/modules/sparc64/usb-storage-modules
new file mode 100644
index 000000000000..272d95e2e8b1
--- /dev/null
+++ b/debian/installer/modules/sparc64/usb-storage-modules
@@ -0,0 +1,2 @@
+#include <usb-storage-modules>
+
diff --git a/debian/installer/modules/sparc64/xfs-modules b/debian/installer/modules/sparc64/xfs-modules
new file mode 100644
index 000000000000..c020b5d399f9
--- /dev/null
+++ b/debian/installer/modules/sparc64/xfs-modules
@@ -0,0 +1,2 @@
+#include <xfs-modules>
+
diff --git a/debian/installer/modules/speakup-modules b/debian/installer/modules/speakup-modules
new file mode 100644
index 000000000000..16822b914bc1
--- /dev/null
+++ b/debian/installer/modules/speakup-modules
@@ -0,0 +1,15 @@
+speakup
+speakup_acntpc ?
+speakup_acntsa
+speakup_apollo
+speakup_audptr
+speakup_bns
+speakup_decext
+speakup_dectlk
+speakup_dtlk ?
+speakup_dummy
+speakup_keypc ?
+speakup_ltlk
+speakup_soft
+speakup_spkout
+speakup_txprt
diff --git a/debian/installer/modules/squashfs-modules b/debian/installer/modules/squashfs-modules
new file mode 100644
index 000000000000..7c1157fa31e7
--- /dev/null
+++ b/debian/installer/modules/squashfs-modules
@@ -0,0 +1 @@
+squashfs
diff --git a/debian/installer/modules/udf-modules b/debian/installer/modules/udf-modules
new file mode 100644
index 000000000000..97c604ff2f15
--- /dev/null
+++ b/debian/installer/modules/udf-modules
@@ -0,0 +1 @@
+udf
diff --git a/debian/installer/modules/ufs-modules b/debian/installer/modules/ufs-modules
new file mode 100644
index 000000000000..19173e9aac31
--- /dev/null
+++ b/debian/installer/modules/ufs-modules
@@ -0,0 +1 @@
+ufs
diff --git a/debian/installer/modules/uinput-modules b/debian/installer/modules/uinput-modules
new file mode 100644
index 000000000000..42bc0053c785
--- /dev/null
+++ b/debian/installer/modules/uinput-modules
@@ -0,0 +1 @@
+uinput
diff --git a/debian/installer/modules/usb-modules b/debian/installer/modules/usb-modules
new file mode 100644
index 000000000000..68490ca76d48
--- /dev/null
+++ b/debian/installer/modules/usb-modules
@@ -0,0 +1,21 @@
+# Include USB host and dual-role drivers by default
+drivers/usb/host/**
+drivers/usb/c67x00/* ?
+drivers/usb/chipidea/* ?
+drivers/usb/dwc2/* ?
+drivers/usb/dwc3/* ?
+drivers/usb/isp1760/* ?
+drivers/usb/musb/* ?
+drivers/usb/renesas_usbhs/* ?
+
+# Exclude some obscure host drivers
+hwa-hc -
+sl811_cs -
+sl811-hcd -
+u132-hcd -
+whci-hcd -
+
+# Include USB PHY drivers by default
+drivers/phy/phy-*-usb* ?
+drivers/phy/*/phy-*-usb* ?
+drivers/usb/phy/* ?
diff --git a/debian/installer/modules/usb-serial-modules b/debian/installer/modules/usb-serial-modules
new file mode 100644
index 000000000000..28f3aa760060
--- /dev/null
+++ b/debian/installer/modules/usb-serial-modules
@@ -0,0 +1,28 @@
+# Include USB serial drivers by default
+drivers/usb/serial/*
+
+# Exclude drivers that are useless for serial consoles
+aircable -
+cyberjack -
+cypress_m8 -
+empeg -
+garmin_gps -
+ipaq -
+ipw -
+ir-usb -
+iuu_phoenix -
+kobil_sct -
+metro-usb -
+navman -
+omninet -
+opticon -
+option -
+qcaux -
+qcserial -
+sierra -
+symbolserial -
+usb_debug -
+usb_wwan -
+visor -
+wishbone-serial -
+xsens_mt -
diff --git a/debian/installer/modules/usb-storage-modules b/debian/installer/modules/usb-storage-modules
new file mode 100644
index 000000000000..013c58cfc149
--- /dev/null
+++ b/debian/installer/modules/usb-storage-modules
@@ -0,0 +1,2 @@
+# Include USB storage drivers by default
+drivers/usb/storage/*
diff --git a/debian/installer/modules/xfs-modules b/debian/installer/modules/xfs-modules
new file mode 100644
index 000000000000..7bd8fb2ac476
--- /dev/null
+++ b/debian/installer/modules/xfs-modules
@@ -0,0 +1,2 @@
+# Not available currently on all kernel versions, so marked optional.
+xfs ?
diff --git a/debian/installer/package-list b/debian/installer/package-list
new file mode 100644
index 000000000000..51c13b61a82f
--- /dev/null
+++ b/debian/installer/package-list
@@ -0,0 +1,458 @@
+# This file is used to build up the control file. The kernel version and
+# "-di" are appended to the package names. Section can be left out. So can
+# architecture, which is derived from the files in the modules directory.
+#
+Package: kernel-image
+Provides_arm64: mmc-core-modules
+Provides_armel: rtc-modules
+Provides_armmp: mmc-core-modules, mtd-core-modules
+Provides_i386: rtc-modules
+Provides_ia64: efi-modules
+Provides_loongson-3: i2c-modules, rtc-modules
+Provides_mips: rtc-modules
+Provides_mips64: rtc-modules
+Provides_mips64el: rtc-modules
+Provides_mips64r6: rtc-modules
+Provides_mips64r6el: rtc-modules
+Provides_mipsel: rtc-modules
+Provides_mipsr6: rtc-modules
+Provides_mipsr6el: rtc-modules
+Provides_parisc64-smp: i2c-modules
+Provides_powerpc: i2c-modules
+Provides_powerpc64:
+Provides_sh4: event-modules, fb-modules, input-modules, mouse-modules, nic-shared-modules, rtc-modules, uinput-modules, usb-modules
+Priority: standard
+Description: Linux kernel image and core modules for the Debian installer
+ This package contains the kernel image and core modules for the Debian
+ installer boot images. It does _not_ provide a usable kernel for your full
+ Debian system.
+
+Package: nic-modules
+Depends: kernel-image, nic-shared-modules, i2c-modules, crc-modules, mtd-core-modules
+Provides: nic-extra-modules
+Priority: standard
+Description: NIC drivers
+ This package contains Ethernet and some paravirtualised network drivers
+ for the kernel.
+
+Package: nic-wireless-modules
+Depends: kernel-image, nic-shared-modules, usb-modules, mmc-core-modules, pcmcia-modules, crc-modules, rfkill-modules, crypto-modules
+Priority: standard
+Description: Wireless NIC drivers
+ This package contains wireless NIC drivers for the kernel.
+ Includes crypto modules only needed for wireless (WEP, WPA).
+
+Package: nic-shared-modules
+Depends: kernel-image
+Priority: standard
+Description: Shared NIC drivers
+ This package contains NIC drivers needed by combinations of nic-modules,
+ nic-pcmcia-modules, nic-usb-modules and nic-wireless-modules.
+
+Package: serial-modules
+Depends: kernel-image, pcmcia-modules
+Priority: optional
+Description: Serial drivers
+ This package contains serial drivers for the kernel.
+
+Package: usb-serial-modules
+Depends: kernel-image, usb-modules
+Priority: optional
+Description: USB serial drivers
+ This package contains USB serial drivers for the kernel.
+
+Package: ppp-modules
+Depends: kernel-image, serial-modules, crc-modules
+Priority: optional
+Description: PPP drivers
+ This package contains PPP drivers for the kernel.
+
+Package: pata-modules
+Depends: kernel-image, ata-modules
+Priority: standard
+Priority_armhf: optional
+Description: PATA drivers
+ This package contains PATA drivers for the kernel.
+
+Package: cdrom-core-modules
+Depends: kernel-image, scsi-core-modules
+Depends_ia64: kernel-image, scsi-core-modules
+Depends_m68k: kernel-image, scsi-core-modules
+Priority: standard
+Description: CDROM support
+ This package contains core CDROM support for the kernel.
+
+Package: firewire-core-modules
+Depends: kernel-image, scsi-core-modules, crc-modules
+Priority: standard
+Description: Core FireWire drivers
+ This package contains core FireWire drivers for the kernel.
+
+Package: scsi-core-modules
+Depends: kernel-image
+Priority: standard
+Description: Core SCSI subsystem
+ This package contains the core SCSI subsystem for the kernel.
+
+Package: scsi-modules
+Depends: kernel-image, scsi-core-modules, cdrom-core-modules, ata-modules
+Priority: standard
+Description: SCSI drivers
+ This package contains SCSI drivers for the kernel.
+
+Package: scsi-nic-modules
+Depends: scsi-modules, nic-modules
+Priority: optional
+Description: SCSI drivers for converged NICs
+ This package contains SCSI drivers that depend on net drivers.
+
+Package: loop-modules
+Depends: kernel-image
+Priority: standard
+Description: Loopback filesystem support
+ This package contains loopback filesystem support for the kernel.
+
+Package: ipv6-modules
+Depends: kernel-image
+Priority: optional
+Description: IPv6 driver
+ This package contains the IPv6 driver for the kernel.
+
+Package: btrfs-modules
+Depends: kernel-image, crc-modules, md-modules
+Priority: optional
+Description: BTRFS filesystem support
+ This package contains the BTRFS filesystem module for the kernel.
+
+Package: ext4-modules
+Depends: kernel-image, crc-modules
+Provides: ext2-modules, ext3-modules
+Priority: standard
+Description: ext2/ext3/ext4 filesystem support
+ This package contains the ext4 filesystem module for the kernel, which
+ also supports ext2 and ext3.
+
+Package: isofs-modules
+Depends: kernel-image, cdrom-core-modules
+Priority: standard
+Description: ISOFS filesystem support
+ This package contains the ISOFS filesystem module for the kernel.
+
+Package: jffs2-modules
+Depends: kernel-image, mtd-modules
+Priority: optional
+Description: JFFS2 filesystem support
+ This package contains the JFFS2 filesystem module for the kernel.
+
+Package: jfs-modules
+Depends: kernel-image
+Priority: standard
+Description: JFS filesystem support
+ This package contains the JFS filesystem module for the kernel.
+
+Package: ufs-modules
+Depends: kernel-image
+Priority: optional
+Description: UFS filesystem support
+ This package contains the UFS filesystem module for the kernel.
+
+Package: xfs-modules
+Depends: kernel-image, crc-modules
+Priority: standard
+Description: XFS filesystem support
+ This package contains the XFS filesystem module for the kernel.
+
+Package: fat-modules
+Depends: kernel-image
+Priority: optional
+Priority_amd64: standard
+Priority_i386: standard
+Priority_ia64: standard
+Description: FAT filesystem support
+ This package contains the FAT and VFAT filesystem modules for the kernel.
+
+Package: hfs-modules
+Depends: kernel-image, cdrom-core-modules
+Priority: optional
+Description: HFS filesystem support
+ This package contains the HFS and HFS+ filesystem modules for the kernel.
+
+Package: affs-modules
+Depends: kernel-image
+Priority: optional
+Description: Amiga filesystem support
+ This package contains the Amiga filesystem module for the kernel.
+
+Package: minix-modules
+Depends: kernel-image
+Priority: optional
+Description: Minix filesystem support
+ This package contains the Minix filesystem module for the kernel.
+
+Package: nfs-modules
+Depends: kernel-image
+Priority: optional
+Description: NFS filesystem support
+ This package contains the NFS filesystem module for the kernel.
+
+Package: squashfs-modules
+Depends: kernel-image
+Priority: optional
+Description: squashfs modules
+ This package contains squashfs modules.
+
+Package: udf-modules
+Depends: kernel-image, crc-modules, cdrom-core-modules
+Priority: optional
+Description: UDF modules
+ This package contains the UDF filesystem module.
+
+Package: fuse-modules
+Depends: kernel-image
+Priority: optional
+Description: FUSE modules
+ This package contains the Filesystem in Userspace (FUSE) module.
+
+Package: f2fs-modules
+Depends: kernel-image, crc-modules
+Priority: optional
+Description: f2fs filesystem support
+ This package contains the f2fs (Flash-Friendly Filesystem) module.
+
+Package: md-modules
+Depends: kernel-image, crc-modules
+Priority: optional
+Description: RAID and LVM support
+ This package contains RAID and LVM modules for the kernel.
+
+Package: multipath-modules
+Depends: kernel-image, md-modules, scsi-core-modules
+Priority: optional
+Description: Multipath support
+ This package contains DM-Multipath modules for the kernel.
+
+Package: usb-modules
+Depends: kernel-image
+Priority: optional
+Description: USB support
+ This package contains core USB drivers for the kernel.
+
+Package: usb-storage-modules
+Depends: kernel-image, scsi-core-modules, usb-modules
+Priority: standard
+Description: USB storage support
+ This package contains the USB storage driver for the kernel.
+
+Package: pcmcia-storage-modules
+Depends: kernel-image, cdrom-core-modules, pcmcia-modules, ata-modules
+Priority: standard
+Description: PCMCIA storage drivers
+ This package contains PCMCIA storage drivers for the kernel.
+
+Package: fb-modules
+Depends: kernel-image, i2c-modules
+Depends_armel: kernel-image, usb-modules
+Priority: optional
+Priority_hppa: standard
+Description: Frame buffer support
+ This package contains Frame buffer drivers for the kernel.
+
+Package: input-modules
+Depends: kernel-image, usb-modules, i2c-modules, rfkill-modules, crc-modules
+Priority: optional
+Description: Input devices support
+ This package contains input device drivers for the kernel.
+
+Package: event-modules
+Depends: kernel-image
+Priority: optional
+Description: Event support
+ This package contains event drivers for the kernel.
+
+Package: mouse-modules
+Depends: kernel-image, event-modules, input-modules, usb-modules
+Priority: optional
+Description: Mouse support
+ This package contains mouse drivers for the kernel.
+
+Package: nic-pcmcia-modules
+Depends: kernel-image, nic-shared-modules, nic-wireless-modules, pcmcia-modules, mmc-core-modules
+Priority: standard
+Description: Common PCMCIA NIC drivers
+ This package contains common PCMCIA NIC drivers for the kernel.
+
+Package: pcmcia-modules
+Depends: kernel-image
+Priority: standard
+Description: Common PCMCIA drivers
+ This package contains common PCMCIA drivers for the kernel.
+
+Package: nic-usb-modules
+Depends: kernel-image, nic-shared-modules, nic-wireless-modules, usb-modules, crc-modules
+Priority: standard
+Description: USB NIC drivers
+ This package contains USB network adapter drivers for the kernel.
+
+Package: sata-modules
+Depends: kernel-image, scsi-core-modules, ata-modules
+Priority: standard
+Description: SATA drivers
+ This package contains SATA drivers for the kernel.
+
+Package: acpi-modules
+Depends: kernel-image
+Priority: optional
+Description: ACPI support modules
+ This package contains kernel modules for ACPI.
+
+Package: i2c-modules
+Depends: kernel-image
+Priority: optional
+Description: i2c support modules
+ This package contains basic i2c support modules.
+
+Package: crc-modules
+Depends: kernel-image
+Priority: optional
+Description: CRC modules
+ This package contains CRC support modules.
+
+Package: crypto-modules
+Depends: kernel-image
+Priority: optional
+Description: crypto modules
+ This package contains crypto modules.
+
+Package: crypto-dm-modules
+Depends: kernel-image, md-modules
+Priority: optional
+Description: devicemapper crypto module
+ This package contains the devicemapper crypto (dm-crypt) module.
+
+Package: efi-modules
+Depends: kernel-image
+Priority: optional
+Description: EFI modules
+ This package contains EFI modules.
+
+Package: ata-modules
+Depends: kernel-image, scsi-core-modules
+Priority: optional
+Description: ATA disk modules
+ This package contains core ATA disk modules used by both PATA and SATA
+ disk drivers.
+
+Package: mmc-core-modules
+Depends: kernel-image
+Priority: optional
+Description: MMC/SD/SDIO core modules
+ This package contains core modules for MMC/SD/SDIO support.
+
+Package: mmc-modules
+Depends: kernel-image, mmc-core-modules, usb-modules, crc-modules
+Priority: optional
+Description: MMC/SD card modules
+ This package contains modules needed to support MMC (multimedia) and
+ SD cards.
+
+Package: nbd-modules
+Depends: kernel-image
+Priority: optional
+Description: Network Block Device modules
+ This package contains the modules required for support of the Network Block
+ Device
+
+Package: speakup-modules
+Depends: kernel-image
+Priority: optional
+Description: speakup modules
+ This package contains speakup modules.
+
+Package: rtc-modules
+Depends: kernel-image
+Priority: optional
+Description: RTC modules
+ This package contains RTC modules.
+
+Package: uinput-modules
+Depends: kernel-image
+Priority: optional
+Description: uinput support
+ This package contains the uinput module.
+
+Package: sound-modules
+Depends: kernel-image, i2c-modules, usb-modules, pcmcia-modules, firewire-core-modules, crc-modules
+Priority: optional
+Description: sound support
+ This package contains sound modules.
+
+Package: leds-modules
+Depends: kernel-image
+Priority: optional
+Description: LED modules
+ This package contains LED modules.
+
+Package: mtd-modules
+Depends: kernel-image, mtd-core-modules
+Priority: optional
+Description: MTD driver modules
+ This package contains MTD driver modules.
+
+Package: mtd-core-modules
+Depends: kernel-image
+Priority: optional
+Description: MTD core
+ This package contains the MTD core.
+
+Package: rfkill-modules
+Depends: kernel-image
+Priority: optional
+Description: rfkill modules
+ This package contains the rfkill module.
+
+Package: srm-modules
+Depends: kernel-image
+Priority: standard
+Description: SRM modules
+ This package contains the srm_env module which provides access to the SRM
+ environment.
+
+Package: ide-core-modules
+Depends: kernel-image
+Priority: standard
+Description: IDE support
+ This package contains core IDE support for the kernel.
+
+Package: ide-modules
+Depends: kernel-image, ide-core-modules
+Priority: standard
+Description: IDE drivers
+ This package contains IDE drivers for the kernel.
+
+Package: hypervisor-modules
+Depends: kernel-image
+Priority: standard
+Description: IBM 64bit hypervisor console modules
+ Contains drivers for the hypervisor console, used as console for linux
+ running in logical partitions of IBM hardware supporting it.
+
+Package: fancontrol-modules
+Depends: kernel-image
+Priority: standard
+Description: Apple powermac fancontrol modules
+ Contains drivers for macintosh i2c bus as well as for the monitoring devices
+ connected to it. This allows to control the fans during installation.
+
+Package: dasd-modules
+Depends: kernel-image
+Priority: standard
+Description: dasd modules
+ This package contains dasd modules.
+
+Package: dasd-extra-modules
+Depends: kernel-image, dasd-modules
+Priority: optional
+Description: optional dasd DIAG support
+ This package contains the module for dasd DIAG support. The udeb is
+ not loaded by default as the installer does not actually support this.
+ It can however be useful to have available in rescue situations.
diff --git a/debian/lib/python/debian_linux/__init__.py b/debian/lib/python/debian_linux/__init__.py
new file mode 100644
index 000000000000..b785cebf7108
--- /dev/null
+++ b/debian/lib/python/debian_linux/__init__.py
@@ -0,0 +1 @@
+# Module
diff --git a/debian/lib/python/debian_linux/abi.py b/debian/lib/python/debian_linux/abi.py
new file mode 100644
index 000000000000..abaaeeaa9472
--- /dev/null
+++ b/debian/lib/python/debian_linux/abi.py
@@ -0,0 +1,45 @@
+class Symbol(object):
+    def __init__(self, name, namespace, module, version, export):
+        self.name, self.namespace, self.module = name, namespace, module
+        self.version, self.export = version, export
+
+    def __eq__(self, other):
+        if not isinstance(other, Symbol):
+            return NotImplemented
+
+        # Symbols are resolved to modules by depmod at installation/
+        # upgrade time, not compile time, so moving a symbol between
+        # modules is not an ABI change.  Compare everything else.
+        if self.name != other.name:
+            return False
+        if self.namespace != other.namespace:
+            return False
+        if self.version != other.version:
+            return False
+        if self.export != other.export:
+            return False
+
+        return True
+
+    def __ne__(self, other):
+        ret = self.__eq__(other)
+        if ret is NotImplemented:
+            return ret
+        return not ret
+
+
+class Symbols(dict):
+    def __init__(self, file=None):
+        if file:
+            self.read(file)
+
+    def read(self, file):
+        for line in file:
+            version, name, module, export, namespace = \
+                line.strip('\r\n').split('\t')
+            self[name] = Symbol(name, namespace, module, version, export)
+
+    def write(self, file):
+        for s in sorted(self.values(), key=lambda i: i.name):
+            file.write("%s\t%s\t%s\t%s\t%s\n" %
+                       (s.version, s.name, s.module, s.export, s.namespace))
diff --git a/debian/lib/python/debian_linux/config.py b/debian/lib/python/debian_linux/config.py
new file mode 100644
index 000000000000..37e3764ab0f1
--- /dev/null
+++ b/debian/lib/python/debian_linux/config.py
@@ -0,0 +1,256 @@
+import collections
+import os
+import os.path
+import pickle
+import re
+import sys
+
+from configparser import RawConfigParser
+
+__all__ = [
+    'ConfigCoreDump',
+    'ConfigCoreHierarchy',
+    'ConfigParser',
+]
+
+
+class SchemaItemBoolean(object):
+    def __call__(self, i):
+        i = i.strip().lower()
+        if i in ("true", "1"):
+            return True
+        if i in ("false", "0"):
+            return False
+        raise ValueError
+
+
+class SchemaItemInteger(object):
+    def __call__(self, i):
+        return int(i.strip(), 0)
+
+
+class SchemaItemList(object):
+    def __init__(self, type=r"\s+"):
+        self.type = type
+
+    def __call__(self, i):
+        i = i.strip()
+        if not i:
+            return []
+        return [j.strip() for j in re.split(self.type, i)]
+
+
+# Using OrderedDict instead of dict makes the pickled config reproducible
+class ConfigCore(collections.OrderedDict):
+    def get_merge(self, section, arch, featureset, flavour, key, default=None):
+        temp = []
+
+        if arch and featureset and flavour:
+            temp.append(self.get((section, arch, featureset, flavour), {})
+                        .get(key))
+            temp.append(self.get((section, arch, None, flavour), {}).get(key))
+        if arch and featureset:
+            temp.append(self.get((section, arch, featureset), {}).get(key))
+        if arch:
+            temp.append(self.get((section, arch), {}).get(key))
+        if featureset:
+            temp.append(self.get((section, None, featureset), {}).get(key))
+        temp.append(self.get((section,), {}).get(key))
+
+        ret = []
+
+        for i in temp:
+            if i is None:
+                continue
+            elif isinstance(i, (list, tuple)):
+                ret.extend(i)
+            elif ret:
+                # TODO
+                return ret
+            else:
+                return i
+
+        return ret or default
+
+    def merge(self, section, arch=None, featureset=None, flavour=None):
+        ret = {}
+        ret.update(self.get((section,), {}))
+        if featureset:
+            ret.update(self.get((section, None, featureset), {}))
+        if arch:
+            ret.update(self.get((section, arch), {}))
+        if arch and featureset:
+            ret.update(self.get((section, arch, featureset), {}))
+        if arch and featureset and flavour:
+            ret.update(self.get((section, arch, None, flavour), {}))
+            ret.update(self.get((section, arch, featureset, flavour), {}))
+        return ret
+
+    def dump(self, fp):
+        pickle.dump(self, fp, 0)
+
+
+class ConfigCoreDump(object):
+    def __new__(self, fp):
+        return pickle.load(fp)
+
+
+class ConfigCoreHierarchy(object):
+    schema_base = {
+        'base': {
+            'arches': SchemaItemList(),
+            'enabled': SchemaItemBoolean(),
+            'featuresets': SchemaItemList(),
+            'flavours': SchemaItemList(),
+        },
+    }
+
+    def __new__(cls, schema, dirs=[]):
+        schema_complete = cls.schema_base.copy()
+        for key, value in schema.items():
+            schema_complete.setdefault(key, {}).update(value)
+        return cls.Reader(dirs, schema_complete)()
+
+    class Reader(object):
+        config_name = "defines"
+
+        def __init__(self, dirs, schema):
+            self.dirs, self.schema = dirs, schema
+
+        def __call__(self):
+            ret = ConfigCore()
+            self.read(ret)
+            return ret
+
+        def get_files(self, *dirs):
+            dirs = list(dirs)
+            dirs.append(self.config_name)
+            return (os.path.join(i, *dirs) for i in self.dirs if i)
+
+        def read_arch(self, ret, arch):
+            config = ConfigParser(self.schema)
+            config.read(self.get_files(arch))
+
+            featuresets = config['base', ].get('featuresets', [])
+            flavours = config['base', ].get('flavours', [])
+
+            for section in iter(config):
+                if section[0] in featuresets:
+                    real = (section[-1], arch, section[0])
+                elif len(section) > 1:
+                    real = (section[-1], arch, None) + section[:-1]
+                else:
+                    real = (section[-1], arch) + section[:-1]
+                s = ret.get(real, {})
+                s.update(config[section])
+                ret[tuple(real)] = s
+
+            for featureset in featuresets:
+                self.read_arch_featureset(ret, arch, featureset)
+
+            if flavours:
+                base = ret['base', arch]
+                featuresets.insert(0, 'none')
+                base['featuresets'] = featuresets
+                del base['flavours']
+                ret['base', arch] = base
+                ret['base', arch, 'none'] = {'flavours': flavours,
+                                             'implicit-flavour': True}
+
+        def read_arch_featureset(self, ret, arch, featureset):
+            config = ConfigParser(self.schema)
+            config.read(self.get_files(arch, featureset))
+
+            for section in iter(config):
+                real = (section[-1], arch, featureset) + section[:-1]
+                s = ret.get(real, {})
+                s.update(config[section])
+                ret[tuple(real)] = s
+
+        def read(self, ret):
+            config = ConfigParser(self.schema)
+            config.read(self.get_files())
+
+            arches = config['base', ]['arches']
+            featuresets = config['base', ].get('featuresets', [])
+
+            for section in iter(config):
+                if section[0].startswith('featureset-'):
+                    real = (section[-1], None, section[0][11:])
+                else:
+                    real = (section[-1],) + section[1:]
+                ret[real] = config[section]
+
+            for arch in arches:
+                self.read_arch(ret, arch)
+            for featureset in featuresets:
+                self.read_featureset(ret, featureset)
+
+        def read_featureset(self, ret, featureset):
+            config = ConfigParser(self.schema)
+            config.read(self.get_files('featureset-%s' % featureset))
+
+            for section in iter(config):
+                real = (section[-1], None, featureset)
+                s = ret.get(real, {})
+                s.update(config[section])
+                ret[real] = s
+
+
+class ConfigParser(object):
+    __slots__ = '_config', 'schemas'
+
+    def __init__(self, schemas):
+        self.schemas = schemas
+
+        self._config = RawConfigParser()
+
+    def __getitem__(self, key):
+        return self._convert()[key]
+
+    def __iter__(self):
+        return iter(self._convert())
+
+    def __str__(self):
+        return '<%s(%s)>' % (self.__class__.__name__, self._convert())
+
+    def _convert(self):
+        ret = {}
+        for section in self._config.sections():
+            data = {}
+            for key, value in self._config.items(section):
+                data[key] = value
+            section_list = section.split('_')
+            section_base = section_list[-1]
+            if section_base in self.schemas:
+                section_ret = tuple(section_list)
+                data = self._convert_one(self.schemas[section_base], data)
+            else:
+                section_ret = (section, )
+            ret[section_ret] = data
+        return ret
+
+    def _convert_one(self, schema, data):
+        ret = {}
+        for key, value in data.items():
+            if key in schema:
+                value = schema[key](value)
+            ret[key] = value
+        return ret
+
+    def keys(self):
+        return self._convert().keys()
+
+    def read(self, data):
+        return self._config.read(data)
+
+
+if __name__ == '__main__':
+    sys.path.append('debian/lib/python')
+    config = ConfigCoreDump(open('debian/config.defines.dump', 'rb'))
+    for section, items in sorted(config.items(),
+                                 key=(lambda a: tuple(i or '' for i in a[0]))):
+        print(u"[%s]" % (section,))
+        for item, value in sorted(items.items()):
+            print(u"%s: %s" % (item, value))
+        print()
diff --git a/debian/lib/python/debian_linux/debian.py b/debian/lib/python/debian_linux/debian.py
new file mode 100644
index 000000000000..6fb26185df2b
--- /dev/null
+++ b/debian/lib/python/debian_linux/debian.py
@@ -0,0 +1,700 @@
+import collections
+import collections.abc
+import os.path
+import re
+import unittest
+
+from . import utils
+
+
+class Changelog(list):
+    _top_rules = r"""
+^
+(?P<source>
+    \w[-+0-9a-z.]+
+)
+\ 
+\(
+(?P<version>
+    [^\(\)\ \t]+
+)
+\)
+\s+
+(?P<distribution>
+    [-+0-9a-zA-Z.]+
+)
+\;\s+urgency=
+(?P<urgency>
+    \w+
+)
+(?:,|\n)
+"""
+    _top_re = re.compile(_top_rules, re.X)
+    _bottom_rules = r"""
+^
+\ --\ 
+(?P<maintainer>
+    \S(?:\ ?\S)*
+)
+\ \ 
+(?P<date>
+    (.*)
+)
+\n
+"""
+    _bottom_re = re.compile(_bottom_rules, re.X)
+    _ignore_re = re.compile(r'^(?:  |\s*\n)')
+
+    class Entry(object):
+        __slot__ = ('distribution', 'source', 'version', 'urgency',
+                    'maintainer', 'date')
+
+        def __init__(self, **kwargs):
+            for key, value in kwargs.items():
+                setattr(self, key, value)
+
+    def __init__(self, dir='', version=None, file=None):
+        if version is None:
+            version = Version
+        if file:
+            self._parse(version, file)
+        else:
+            with open(os.path.join(dir, "debian/changelog"),
+                      encoding="UTF-8") as f:
+                self._parse(version, f)
+
+    def _parse(self, version, f):
+        top_match = None
+        line_no = 0
+
+        for line in f:
+            line_no += 1
+
+            if self._ignore_re.match(line):
+                pass
+            elif top_match is None:
+                top_match = self._top_re.match(line)
+                if not top_match:
+                    raise Exception('invalid top line %d in changelog' %
+                                    line_no)
+                try:
+                    v = version(top_match.group('version'))
+                except Exception:
+                    if not len(self):
+                        raise
+                    v = Version(top_match.group('version'))
+            else:
+                bottom_match = self._bottom_re.match(line)
+                if not bottom_match:
+                    raise Exception('invalid bottom line %d in changelog' %
+                                    line_no)
+
+                self.append(self.Entry(
+                    distribution=top_match.group('distribution'),
+                    source=top_match.group('source'),
+                    version=v,
+                    urgency=top_match.group('urgency'),
+                    maintainer=bottom_match.group('maintainer'),
+                    date=bottom_match.group('date')))
+                top_match = bottom_match = None
+
+
+class Version(object):
+    _epoch_re = re.compile(r'\d+$')
+    _upstream_re = re.compile(r'[0-9][A-Za-z0-9.+\-:~]*$')
+    _revision_re = re.compile(r'[A-Za-z0-9+.~]+$')
+
+    def __init__(self, version):
+        try:
+            split = version.index(':')
+        except ValueError:
+            epoch, rest = None, version
+        else:
+            epoch, rest = version[0:split], version[split+1:]
+        try:
+            split = rest.rindex('-')
+        except ValueError:
+            upstream, revision = rest, None
+        else:
+            upstream, revision = rest[0:split], rest[split+1:]
+        if (epoch is not None and not self._epoch_re.match(epoch)) or \
+           not self._upstream_re.match(upstream) or \
+           (revision is not None and not self._revision_re.match(revision)):
+            raise RuntimeError(u"Invalid debian version")
+        self.epoch = epoch and int(epoch)
+        self.upstream = upstream
+        self.revision = revision
+
+    def __str__(self):
+        return self.complete
+
+    @property
+    def complete(self):
+        if self.epoch is not None:
+            return u"%d:%s" % (self.epoch, self.complete_noepoch)
+        return self.complete_noepoch
+
+    @property
+    def complete_noepoch(self):
+        if self.revision is not None:
+            return u"%s-%s" % (self.upstream, self.revision)
+        return self.upstream
+
+    @property
+    def debian(self):
+        from warnings import warn
+        warn(u"debian argument was replaced by revision", DeprecationWarning,
+             stacklevel=2)
+        return self.revision
+
+
+class _VersionTest(unittest.TestCase):
+    def test_native(self):
+        v = Version('1.2+c~4')
+        self.assertEqual(v.epoch, None)
+        self.assertEqual(v.upstream, '1.2+c~4')
+        self.assertEqual(v.revision, None)
+        self.assertEqual(v.complete, '1.2+c~4')
+        self.assertEqual(v.complete_noepoch, '1.2+c~4')
+
+    def test_nonnative(self):
+        v = Version('1-2+d~3')
+        self.assertEqual(v.epoch, None)
+        self.assertEqual(v.upstream, '1')
+        self.assertEqual(v.revision, '2+d~3')
+        self.assertEqual(v.complete, '1-2+d~3')
+        self.assertEqual(v.complete_noepoch, '1-2+d~3')
+
+    def test_native_epoch(self):
+        v = Version('5:1.2.3')
+        self.assertEqual(v.epoch, 5)
+        self.assertEqual(v.upstream, '1.2.3')
+        self.assertEqual(v.revision, None)
+        self.assertEqual(v.complete, '5:1.2.3')
+        self.assertEqual(v.complete_noepoch, '1.2.3')
+
+    def test_nonnative_epoch(self):
+        v = Version('5:1.2.3-4')
+        self.assertEqual(v.epoch, 5)
+        self.assertEqual(v.upstream, '1.2.3')
+        self.assertEqual(v.revision, '4')
+        self.assertEqual(v.complete, '5:1.2.3-4')
+        self.assertEqual(v.complete_noepoch, '1.2.3-4')
+
+    def test_multi_hyphen(self):
+        v = Version('1-2-3')
+        self.assertEqual(v.epoch, None)
+        self.assertEqual(v.upstream, '1-2')
+        self.assertEqual(v.revision, '3')
+        self.assertEqual(v.complete, '1-2-3')
+
+    def test_multi_colon(self):
+        v = Version('1:2:3')
+        self.assertEqual(v.epoch, 1)
+        self.assertEqual(v.upstream, '2:3')
+        self.assertEqual(v.revision, None)
+
+    def test_invalid_epoch(self):
+        with self.assertRaises(RuntimeError):
+            Version('a:1')
+        with self.assertRaises(RuntimeError):
+            Version('-1:1')
+        with self.assertRaises(RuntimeError):
+            Version('1a:1')
+
+    def test_invalid_upstream(self):
+        with self.assertRaises(RuntimeError):
+            Version('1_2')
+        with self.assertRaises(RuntimeError):
+            Version('1/2')
+        with self.assertRaises(RuntimeError):
+            Version('a1')
+        with self.assertRaises(RuntimeError):
+            Version('1 2')
+
+    def test_invalid_revision(self):
+        with self.assertRaises(RuntimeError):
+            Version('1-2_3')
+        with self.assertRaises(RuntimeError):
+            Version('1-2/3')
+        with self.assertRaises(RuntimeError):
+            Version('1-2:3')
+
+
+class VersionLinux(Version):
+    _upstream_re = re.compile(r"""
+(?P<version>
+    \d+\.\d+
+)
+(?P<update>
+    (?:\.\d+)?
+    (?:-[a-z]+\d+)?
+)
+(?:
+    ~
+    (?P<modifier>
+        .+?
+    )
+)?
+(?:
+    \.dfsg\.
+    (?P<dfsg>
+        \d+
+    )
+)?
+$
+    """, re.X)
+    _revision_re = re.compile(r"""
+\d+
+(\.\d+)?
+(?:
+    (?P<revision_experimental>
+        ~exp\d+
+    )
+    |
+    (?P<revision_security>
+        (?:[~+]deb\d+u\d+)+
+    )?
+    (?P<revision_backports>
+        ~bpo\d+\+\d+
+    )?
+    |
+    (?P<revision_other>
+        .+?
+    )
+)
+(?:\+b\d+)?
+$
+    """, re.X)
+
+    def __init__(self, version):
+        super(VersionLinux, self).__init__(version)
+        up_match = self._upstream_re.match(self.upstream)
+        rev_match = self._revision_re.match(self.revision)
+        if up_match is None or rev_match is None:
+            raise RuntimeError(u"Invalid debian linux version")
+        d = up_match.groupdict()
+        self.linux_modifier = d['modifier']
+        self.linux_version = d['version']
+        if d['modifier'] is not None:
+            assert not d['update']
+            self.linux_upstream = '-'.join((d['version'], d['modifier']))
+        else:
+            self.linux_upstream = d['version']
+        self.linux_upstream_full = self.linux_upstream + d['update']
+        self.linux_dfsg = d['dfsg']
+        d = rev_match.groupdict()
+        self.linux_revision_experimental = d['revision_experimental'] and True
+        self.linux_revision_security = d['revision_security'] and True
+        self.linux_revision_backports = d['revision_backports'] and True
+        self.linux_revision_other = d['revision_other'] and True
+
+
+class _VersionLinuxTest(unittest.TestCase):
+    def test_stable(self):
+        v = VersionLinux('1.2.3-4')
+        self.assertEqual(v.linux_version, '1.2')
+        self.assertEqual(v.linux_upstream, '1.2')
+        self.assertEqual(v.linux_upstream_full, '1.2.3')
+        self.assertEqual(v.linux_modifier, None)
+        self.assertEqual(v.linux_dfsg, None)
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertFalse(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_rc(self):
+        v = VersionLinux('1.2~rc3-4')
+        self.assertEqual(v.linux_version, '1.2')
+        self.assertEqual(v.linux_upstream, '1.2-rc3')
+        self.assertEqual(v.linux_upstream_full, '1.2-rc3')
+        self.assertEqual(v.linux_modifier, 'rc3')
+        self.assertEqual(v.linux_dfsg, None)
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertFalse(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_dfsg(self):
+        v = VersionLinux('1.2~rc3.dfsg.1-4')
+        self.assertEqual(v.linux_version, '1.2')
+        self.assertEqual(v.linux_upstream, '1.2-rc3')
+        self.assertEqual(v.linux_upstream_full, '1.2-rc3')
+        self.assertEqual(v.linux_modifier, 'rc3')
+        self.assertEqual(v.linux_dfsg, '1')
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertFalse(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_experimental(self):
+        v = VersionLinux('1.2~rc3-4~exp5')
+        self.assertEqual(v.linux_upstream_full, '1.2-rc3')
+        self.assertTrue(v.linux_revision_experimental)
+        self.assertFalse(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_security(self):
+        v = VersionLinux('1.2.3-4+deb10u1')
+        self.assertEqual(v.linux_upstream_full, '1.2.3')
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertTrue(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_backports(self):
+        v = VersionLinux('1.2.3-4~bpo9+10')
+        self.assertEqual(v.linux_upstream_full, '1.2.3')
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertFalse(v.linux_revision_security)
+        self.assertTrue(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_security_backports(self):
+        v = VersionLinux('1.2.3-4+deb10u1~bpo9+10')
+        self.assertEqual(v.linux_upstream_full, '1.2.3')
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertTrue(v.linux_revision_security)
+        self.assertTrue(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_lts_backports(self):
+        # Backport during LTS, as an extra package in the -security
+        # suite.  Since this is not part of a -backports suite it
+        # shouldn't get the linux_revision_backports flag.
+        v = VersionLinux('1.2.3-4~deb9u10')
+        self.assertEqual(v.linux_upstream_full, '1.2.3')
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertTrue(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_lts_backports_2(self):
+        # Same but with two security extensions in the revision.
+        v = VersionLinux('1.2.3-4+deb10u1~deb9u10')
+        self.assertEqual(v.linux_upstream_full, '1.2.3')
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertTrue(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_binnmu(self):
+        v = VersionLinux('1.2.3-4+b1')
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertFalse(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertFalse(v.linux_revision_other)
+
+    def test_other_revision(self):
+        v = VersionLinux('4.16.5-1+revert+crng+ready')  # from #898087
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertFalse(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertTrue(v.linux_revision_other)
+
+    def test_other_revision_binnmu(self):
+        v = VersionLinux('4.16.5-1+revert+crng+ready+b1')
+        self.assertFalse(v.linux_revision_experimental)
+        self.assertFalse(v.linux_revision_security)
+        self.assertFalse(v.linux_revision_backports)
+        self.assertTrue(v.linux_revision_other)
+
+
+class PackageArchitecture(collections.abc.MutableSet):
+    __slots__ = '_data'
+
+    def __init__(self, value=None):
+        self._data = set()
+        if value:
+            self.extend(value)
+
+    def __contains__(self, value):
+        return self._data.__contains__(value)
+
+    def __iter__(self):
+        return self._data.__iter__()
+
+    def __len__(self):
+        return self._data.__len__()
+
+    def __str__(self):
+        return ' '.join(sorted(self))
+
+    def add(self, value):
+        self._data.add(value)
+
+    def discard(self, value):
+        self._data.discard(value)
+
+    def extend(self, value):
+        if isinstance(value, str):
+            for i in re.split(r'\s', value.strip()):
+                self.add(i)
+        else:
+            raise RuntimeError
+
+
+class PackageDescription(object):
+    __slots__ = "short", "long"
+
+    def __init__(self, value=None):
+        self.short = []
+        self.long = []
+        if value is not None:
+            desc_split = value.split("\n", 1)
+            self.append_short(desc_split[0])
+            if len(desc_split) == 2:
+                self.append(desc_split[1])
+
+    def __str__(self):
+        wrap = utils.TextWrapper(width=74, fix_sentence_endings=True).wrap
+        short = ', '.join(self.short)
+        long_pars = []
+        for i in self.long:
+            long_pars.append(wrap(i))
+        long = '\n .\n '.join(['\n '.join(i) for i in long_pars])
+        return short + '\n ' + long if long else short
+
+    def append(self, str):
+        str = str.strip()
+        if str:
+            self.long.extend(str.split(u"\n.\n"))
+
+    def append_short(self, str):
+        for i in [i.strip() for i in str.split(u",")]:
+            if i:
+                self.short.append(i)
+
+    def extend(self, desc):
+        if isinstance(desc, PackageDescription):
+            self.short.extend(desc.short)
+            self.long.extend(desc.long)
+        else:
+            raise TypeError
+
+
+class PackageRelation(list):
+    def __init__(self, value=None, override_arches=None):
+        if value:
+            self.extend(value, override_arches)
+
+    def __str__(self):
+        return ', '.join(str(i) for i in self)
+
+    def _search_value(self, value):
+        for i in self:
+            if i._search_value(value):
+                return i
+        return None
+
+    def append(self, value, override_arches=None):
+        if isinstance(value, str):
+            value = PackageRelationGroup(value, override_arches)
+        elif not isinstance(value, PackageRelationGroup):
+            raise ValueError(u"got %s" % type(value))
+        j = self._search_value(value)
+        if j:
+            j._update_arches(value)
+        else:
+            super(PackageRelation, self).append(value)
+
+    def extend(self, value, override_arches=None):
+        if isinstance(value, str):
+            value = (j.strip() for j in re.split(r',', value.strip()))
+        for i in value:
+            self.append(i, override_arches)
+
+
+class PackageRelationGroup(list):
+    def __init__(self, value=None, override_arches=None):
+        if value:
+            self.extend(value, override_arches)
+
+    def __str__(self):
+        return ' | '.join(str(i) for i in self)
+
+    def _search_value(self, value):
+        for i, j in zip(self, value):
+            if i.name != j.name or i.operator != j.operator or \
+               i.version != j.version or i.restrictions != j.restrictions:
+                return None
+        return self
+
+    def _update_arches(self, value):
+        for i, j in zip(self, value):
+            if i.arches:
+                for arch in j.arches:
+                    if arch not in i.arches:
+                        i.arches.append(arch)
+
+    def append(self, value, override_arches=None):
+        if isinstance(value, str):
+            value = PackageRelationEntry(value, override_arches)
+        elif not isinstance(value, PackageRelationEntry):
+            raise ValueError
+        super(PackageRelationGroup, self).append(value)
+
+    def extend(self, value, override_arches=None):
+        if isinstance(value, str):
+            value = (j.strip() for j in re.split(r'\|', value.strip()))
+        for i in value:
+            self.append(i, override_arches)
+
+
+class PackageRelationEntry(object):
+    __slots__ = "name", "operator", "version", "arches", "restrictions"
+
+    _re = re.compile(r'^(\S+)(?: \((<<|<=|=|!=|>=|>>)\s*([^)]+)\))?'
+                     r'(?: \[([^]]+)\])?(?: <([^>]+)>)?$')
+
+    class _operator(object):
+        OP_LT = 1
+        OP_LE = 2
+        OP_EQ = 3
+        OP_NE = 4
+        OP_GE = 5
+        OP_GT = 6
+
+        operators = {
+                '<<': OP_LT,
+                '<=': OP_LE,
+                '=': OP_EQ,
+                '!=': OP_NE,
+                '>=': OP_GE,
+                '>>': OP_GT,
+        }
+
+        operators_neg = {
+                OP_LT: OP_GE,
+                OP_LE: OP_GT,
+                OP_EQ: OP_NE,
+                OP_NE: OP_EQ,
+                OP_GE: OP_LT,
+                OP_GT: OP_LE,
+        }
+
+        operators_text = dict((b, a) for a, b in operators.items())
+
+        __slots__ = '_op',
+
+        def __init__(self, value):
+            self._op = self.operators[value]
+
+        def __neg__(self):
+            return self.__class__(
+                self.operators_text[self.operators_neg[self._op]])
+
+        def __str__(self):
+            return self.operators_text[self._op]
+
+        def __eq__(self, other):
+            return type(other) == type(self) and self._op == other._op
+
+    def __init__(self, value=None, override_arches=None):
+        if not isinstance(value, str):
+            raise ValueError
+
+        self.parse(value)
+
+        if override_arches:
+            self.arches = list(override_arches)
+
+    def __str__(self):
+        ret = [self.name]
+        if self.operator is not None and self.version is not None:
+            ret.extend((' (', str(self.operator), ' ', self.version, ')'))
+        if self.arches:
+            ret.extend((' [', ' '.join(self.arches), ']'))
+        if self.restrictions:
+            ret.extend((' <', ' '.join(self.restrictions), '>'))
+        return ''.join(ret)
+
+    def parse(self, value):
+        match = self._re.match(value)
+        if match is None:
+            raise RuntimeError(u"Can't parse dependency %s" % value)
+        match = match.groups()
+        self.name = match[0]
+        if match[1] is not None:
+            self.operator = self._operator(match[1])
+        else:
+            self.operator = None
+        self.version = match[2]
+        if match[3] is not None:
+            self.arches = re.split(r'\s+', match[3])
+        else:
+            self.arches = []
+        if match[4] is not None:
+            self.restrictions = re.split(r'\s+', match[4])
+        else:
+            self.restrictions = []
+
+
+class _ControlFileDict(dict):
+    def __setitem__(self, key, value):
+        try:
+            cls = self._fields[key]
+            if not isinstance(value, cls):
+                value = cls(value)
+        except KeyError:
+            pass
+        super(_ControlFileDict, self).__setitem__(key, value)
+
+    def keys(self):
+        keys = set(super(_ControlFileDict, self).keys())
+        for i in self._fields.keys():
+            if i in self:
+                keys.remove(i)
+                yield i
+        for i in sorted(list(keys)):
+            yield i
+
+    def items(self):
+        for i in self.keys():
+            yield (i, self[i])
+
+    def values(self):
+        for i in self.keys():
+            yield self[i]
+
+
+class Package(_ControlFileDict):
+    _fields = collections.OrderedDict((
+        ('Package', str),
+        ('Source', str),
+        ('Architecture', PackageArchitecture),
+        ('Section', str),
+        ('Priority', str),
+        ('Maintainer', str),
+        ('Uploaders', str),
+        ('Standards-Version', str),
+        ('Build-Depends', PackageRelation),
+        ('Build-Depends-Arch', PackageRelation),
+        ('Build-Depends-Indep', PackageRelation),
+        ('Provides', PackageRelation),
+        ('Pre-Depends', PackageRelation),
+        ('Depends', PackageRelation),
+        ('Recommends', PackageRelation),
+        ('Suggests', PackageRelation),
+        ('Replaces', PackageRelation),
+        ('Breaks', PackageRelation),
+        ('Conflicts', PackageRelation),
+        ('Description', PackageDescription),
+    ))
+
+
+class TestsControl(_ControlFileDict):
+    _fields = collections.OrderedDict((
+        ('Tests', str),
+        ('Test-Command', str),
+        ('Restrictions', str),
+        ('Features', str),
+        ('Depends', PackageRelation),
+        ('Tests-Directory', str),
+        ('Classes', str),
+    ))
+
+
+if __name__ == '__main__':
+    unittest.main()
diff --git a/debian/lib/python/debian_linux/firmware.py b/debian/lib/python/debian_linux/firmware.py
new file mode 100644
index 000000000000..592a66a4519f
--- /dev/null
+++ b/debian/lib/python/debian_linux/firmware.py
@@ -0,0 +1,90 @@
+import re
+
+
+class FirmwareFile(object):
+    def __init__(self, binary, desc=None, source=None, version=None):
+        self.binary = binary
+        self.desc = desc
+        self.source = source
+        self.version = version
+
+
+class FirmwareSection(object):
+    def __init__(self, driver, files, licence):
+        self.driver = driver
+        self.files = files
+        self.licence = licence
+
+
+class FirmwareWhence(list):
+    def __init__(self, file):
+        self.read(file)
+
+    def read(self, file):
+        in_header = True
+        driver = None
+        files = {}
+        licence = None
+        binary = []
+        desc = None
+        source = []
+        version = None
+
+        for line in file:
+            if line.startswith('----------'):
+                if in_header:
+                    in_header = False
+                else:
+                    # Finish old section
+                    if driver:
+                        self.append(FirmwareSection(driver, files, licence))
+                    driver = None
+                    files = {}
+                    licence = None
+                continue
+
+            if in_header:
+                continue
+
+            if line == '\n':
+                # End of field; end of file fields
+                for b in binary:
+                    # XXX The WHENCE file isn't yet consistent in its
+                    # association of binaries and their sources and
+                    # metadata.  This associates all sources and
+                    # metadata in a group with each binary.
+                    files[b] = FirmwareFile(b, desc, source, version)
+                binary = []
+                desc = None
+                source = []
+                version = None
+                continue
+
+            match = re.match(
+                r'(Driver|File|Info|Licen[cs]e|Source|Version'
+                r'|Original licen[cs]e info(?:rmation)?):\s*(.*)\n',
+                line)
+            if match:
+                keyword, value = match.group(1, 2)
+                if keyword == 'Driver':
+                    driver = value.split(' ')[0].lower()
+                elif keyword == 'File':
+                    match = re.match(r'(\S+)(?:\s+--\s+(.*))?', value)
+                    binary.append(match.group(1))
+                    desc = match.group(2)
+                elif keyword in ['Info', 'Version']:
+                    version = value
+                elif keyword == 'Source':
+                    source.append(value)
+                else:
+                    licence = value
+            elif licence is not None:
+                licence = (licence + '\n'
+                           + re.sub(r'^(?:[/ ]\*| \*/)?\s*(.*?)\s*$', r'\1',
+                                    line))
+
+        # Finish last section if non-empty
+        for b in binary:
+            files[b] = FirmwareFile(b, desc, source, version)
+        if driver:
+            self.append(FirmwareSection(driver, files, licence))
diff --git a/debian/lib/python/debian_linux/gencontrol.py b/debian/lib/python/debian_linux/gencontrol.py
new file mode 100644
index 000000000000..388fc33f6a86
--- /dev/null
+++ b/debian/lib/python/debian_linux/gencontrol.py
@@ -0,0 +1,437 @@
+import codecs
+import os
+import re
+from collections import OrderedDict
+
+from .debian import Changelog, PackageArchitecture, PackageDescription, \
+    PackageRelation, Version
+
+
+class PackagesList(OrderedDict):
+    def append(self, package):
+        self[package['Package']] = package
+
+    def extend(self, packages):
+        for package in packages:
+            self[package['Package']] = package
+
+
+class Makefile(object):
+    def __init__(self):
+        self.rules = {}
+        self.add('.NOTPARALLEL')
+
+    def add(self, name, deps=None, cmds=None):
+        if name in self.rules:
+            self.rules[name].add(deps, cmds)
+        else:
+            self.rules[name] = self.Rule(name, deps, cmds)
+        if deps is not None:
+            for i in deps:
+                if i not in self.rules:
+                    self.rules[i] = self.Rule(i)
+
+    def write(self, out):
+        for i in sorted(self.rules.keys()):
+            self.rules[i].write(out)
+
+    class Rule(object):
+        def __init__(self, name, deps=None, cmds=None):
+            self.name = name
+            self.deps, self.cmds = set(), []
+            self.add(deps, cmds)
+
+        def add(self, deps=None, cmds=None):
+            if deps is not None:
+                self.deps.update(deps)
+            if cmds is not None:
+                self.cmds.append(cmds)
+
+        def write(self, out):
+            deps_string = ''
+            if self.deps:
+                deps = list(self.deps)
+                deps.sort()
+                deps_string = ' ' + ' '.join(deps)
+
+            if self.cmds:
+                if deps_string:
+                    out.write('%s::%s\n' % (self.name, deps_string))
+                for c in self.cmds:
+                    out.write('%s::\n' % self.name)
+                    for i in c:
+                        out.write('\t%s\n' % i)
+            else:
+                out.write('%s:%s\n' % (self.name, deps_string))
+
+
+class MakeFlags(dict):
+    def __str__(self):
+        return ' '.join("%s='%s'" % i for i in sorted(self.items()))
+
+    def copy(self):
+        return self.__class__(super(MakeFlags, self).copy())
+
+
+def iter_featuresets(config):
+    for featureset in config['base', ]['featuresets']:
+        if config.merge('base', None, featureset).get('enabled', True):
+            yield featureset
+
+
+def iter_arches(config):
+    return iter(config['base', ]['arches'])
+
+
+def iter_arch_featuresets(config, arch):
+    for featureset in config['base', arch].get('featuresets', []):
+        if config.merge('base', arch, featureset).get('enabled', True):
+            yield featureset
+
+
+def iter_flavours(config, arch, featureset):
+    return iter(config['base', arch, featureset]['flavours'])
+
+
+class Gencontrol(object):
+    makefile_targets = ('binary-arch', 'build-arch', 'setup')
+    makefile_targets_indep = ('binary-indep', 'build-indep', 'setup')
+
+    def __init__(self, config, templates, version=Version):
+        self.config, self.templates = config, templates
+        self.changelog = Changelog(version=version)
+        self.vars = {}
+
+    def __call__(self):
+        packages = PackagesList()
+        makefile = Makefile()
+
+        self.do_source(packages)
+        self.do_main(packages, makefile)
+        self.do_extra(packages, makefile)
+
+        self.merge_build_depends(packages)
+        self.write(packages, makefile)
+
+    def do_source(self, packages):
+        source = self.templates["control.source"][0]
+        if not source.get('Source'):
+            source['Source'] = self.changelog[0].source
+        packages['source'] = self.process_package(source, self.vars)
+
+    def do_main(self, packages, makefile):
+        vars = self.vars.copy()
+
+        makeflags = MakeFlags()
+        extra = {}
+
+        self.do_main_setup(vars, makeflags, extra)
+        self.do_main_makefile(makefile, makeflags, extra)
+        self.do_main_packages(packages, vars, makeflags, extra)
+        self.do_main_recurse(packages, makefile, vars, makeflags, extra)
+
+    def do_main_setup(self, vars, makeflags, extra):
+        pass
+
+    def do_main_makefile(self, makefile, makeflags, extra):
+        makefile.add('build-indep',
+                     cmds=["$(MAKE) -f debian/rules.real build-indep %s" %
+                           makeflags])
+        makefile.add('binary-indep',
+                     cmds=["$(MAKE) -f debian/rules.real binary-indep %s" %
+                           makeflags])
+
+    def do_main_packages(self, packages, vars, makeflags, extra):
+        pass
+
+    def do_main_recurse(self, packages, makefile, vars, makeflags, extra):
+        for featureset in iter_featuresets(self.config):
+            self.do_indep_featureset(packages, makefile, featureset,
+                                     vars.copy(), makeflags.copy(), extra)
+        for arch in iter_arches(self.config):
+            self.do_arch(packages, makefile, arch, vars.copy(),
+                         makeflags.copy(), extra)
+
+    def do_extra(self, packages, makefile):
+        templates_extra = self.templates.get("control.extra", None)
+        if templates_extra is None:
+            return
+
+        packages_extra = self.process_packages(templates_extra, self.vars)
+        packages.extend(packages_extra)
+        extra_arches = {}
+        for package in packages_extra:
+            arches = package['Architecture']
+            for arch in arches:
+                i = extra_arches.get(arch, [])
+                i.append(package)
+                extra_arches[arch] = i
+        for arch in sorted(extra_arches.keys()):
+            cmds = []
+            for i in extra_arches[arch]:
+                cmds.append("$(MAKE) -f debian/rules.real install-dummy "
+                            "ARCH='%s' DH_OPTIONS='-p%s'" %
+                            (arch, i['Package']))
+            makefile.add('binary-arch_%s' % arch,
+                         ['binary-arch_%s_extra' % arch])
+            makefile.add("binary-arch_%s_extra" % arch, cmds=cmds)
+
+    def do_indep_featureset(self, packages, makefile, featureset, vars,
+                            makeflags, extra):
+        vars['localversion'] = ''
+        if featureset != 'none':
+            vars['localversion'] = '-' + featureset
+
+        self.do_indep_featureset_setup(vars, makeflags, featureset, extra)
+        self.do_indep_featureset_makefile(makefile, featureset, makeflags,
+                                          extra)
+        self.do_indep_featureset_packages(packages, makefile, featureset,
+                                          vars, makeflags, extra)
+
+    def do_indep_featureset_setup(self, vars, makeflags, featureset, extra):
+        pass
+
+    def do_indep_featureset_makefile(self, makefile, featureset, makeflags,
+                                     extra):
+        makeflags['FEATURESET'] = featureset
+
+        for i in self.makefile_targets_indep:
+            target1 = i
+            target2 = '_'.join((target1, featureset))
+            target3 = '_'.join((target2, 'real'))
+            makefile.add(target1, [target2])
+            makefile.add(target2, [target3])
+
+    def do_indep_featureset_packages(self, packages, makefile, featureset,
+                                     vars, makeflags, extra):
+        pass
+
+    def do_arch(self, packages, makefile, arch, vars, makeflags, extra):
+        vars['arch'] = arch
+
+        self.do_arch_setup(vars, makeflags, arch, extra)
+        self.do_arch_makefile(makefile, arch, makeflags, extra)
+        self.do_arch_packages(packages, makefile, arch, vars, makeflags, extra)
+        self.do_arch_recurse(packages, makefile, arch, vars, makeflags, extra)
+
+    def do_arch_setup(self, vars, makeflags, arch, extra):
+        pass
+
+    def do_arch_makefile(self, makefile, arch, makeflags, extra):
+        makeflags['ARCH'] = arch
+
+        for i in self.makefile_targets:
+            target1 = i
+            target2 = '_'.join((target1, arch))
+            target3 = '_'.join((target2, 'real'))
+            makefile.add(target1, [target2])
+            makefile.add(target2, [target3])
+
+    def do_arch_packages(self, packages, makefile, arch, vars, makeflags,
+                         extra):
+        pass
+
+    def do_arch_recurse(self, packages, makefile, arch, vars, makeflags,
+                        extra):
+        for featureset in iter_arch_featuresets(self.config, arch):
+            self.do_featureset(packages, makefile, arch, featureset,
+                               vars.copy(), makeflags.copy(), extra)
+
+    def do_featureset(self, packages, makefile, arch, featureset, vars,
+                      makeflags, extra):
+        vars['localversion'] = ''
+        if featureset != 'none':
+            vars['localversion'] = '-' + featureset
+
+        self.do_featureset_setup(vars, makeflags, arch, featureset, extra)
+        self.do_featureset_makefile(makefile, arch, featureset, makeflags,
+                                    extra)
+        self.do_featureset_packages(packages, makefile, arch, featureset, vars,
+                                    makeflags, extra)
+        self.do_featureset_recurse(packages, makefile, arch, featureset, vars,
+                                   makeflags, extra)
+
+    def do_featureset_setup(self, vars, makeflags, arch, featureset, extra):
+        pass
+
+    def do_featureset_makefile(self, makefile, arch, featureset, makeflags,
+                               extra):
+        makeflags['FEATURESET'] = featureset
+
+        for i in self.makefile_targets:
+            target1 = '_'.join((i, arch))
+            target2 = '_'.join((target1, featureset))
+            target3 = '_'.join((target2, 'real'))
+            makefile.add(target1, [target2])
+            makefile.add(target2, [target3])
+
+    def do_featureset_packages(self, packages, makefile, arch, featureset,
+                               vars, makeflags, extra):
+        pass
+
+    def do_featureset_recurse(self, packages, makefile, arch, featureset, vars,
+                              makeflags, extra):
+        for flavour in iter_flavours(self.config, arch, featureset):
+            self.do_flavour(packages, makefile, arch, featureset, flavour,
+                            vars.copy(), makeflags.copy(), extra)
+
+    def do_flavour(self, packages, makefile, arch, featureset, flavour, vars,
+                   makeflags, extra):
+        vars['localversion'] += '-' + flavour
+
+        self.do_flavour_setup(vars, makeflags, arch, featureset, flavour,
+                              extra)
+        self.do_flavour_makefile(makefile, arch, featureset, flavour,
+                                 makeflags, extra)
+        self.do_flavour_packages(packages, makefile, arch, featureset, flavour,
+                                 vars, makeflags, extra)
+
+    def do_flavour_setup(self, vars, makeflags, arch, featureset, flavour,
+                         extra):
+        for i in (
+            ('kernel-arch', 'KERNEL_ARCH'),
+            ('localversion', 'LOCALVERSION'),
+        ):
+            if i[0] in vars:
+                makeflags[i[1]] = vars[i[0]]
+
+    def do_flavour_makefile(self, makefile, arch, featureset, flavour,
+                            makeflags, extra):
+        makeflags['FLAVOUR'] = flavour
+
+        for i in self.makefile_targets:
+            target1 = '_'.join((i, arch, featureset))
+            target2 = '_'.join((target1, flavour))
+            target3 = '_'.join((target2, 'real'))
+            makefile.add(target1, [target2])
+            makefile.add(target2, [target3])
+
+    def do_flavour_packages(self, packages, makefile, arch, featureset,
+                            flavour, vars, makeflags, extra):
+        pass
+
+    def process_relation(self, dep, vars):
+        import copy
+        dep = copy.deepcopy(dep)
+        for groups in dep:
+            for item in groups:
+                item.name = self.substitute(item.name, vars)
+                if item.version:
+                    item.version = self.substitute(item.version, vars)
+        return dep
+
+    def process_description(self, in_desc, vars):
+        desc = in_desc.__class__()
+        desc.short = self.substitute(in_desc.short, vars)
+        for i in in_desc.long:
+            desc.append(self.substitute(i, vars))
+        return desc
+
+    def process_package(self, in_entry, vars={}):
+        entry = in_entry.__class__()
+        for key, value in in_entry.items():
+            if isinstance(value, PackageRelation):
+                value = self.process_relation(value, vars)
+            elif isinstance(value, PackageDescription):
+                value = self.process_description(value, vars)
+            else:
+                value = self.substitute(value, vars)
+            entry[key] = value
+        return entry
+
+    def process_packages(self, entries, vars):
+        return [self.process_package(i, vars) for i in entries]
+
+    def substitute(self, s, vars):
+        if isinstance(s, (list, tuple)):
+            return [self.substitute(i, vars) for i in s]
+
+        def subst(match):
+            return vars[match.group(1)]
+
+        return re.sub(r'@([-_a-z0-9]+)@', subst, str(s))
+
+    # Substitute kernel version etc. into maintainer scripts,
+    # bug presubj message and lintian overrides
+    def substitute_debhelper_config(self, prefix, vars, package_name,
+                                    output_dir='debian'):
+        for id in ['bug-presubj', 'lintian-overrides', 'maintscript',
+                   'postinst', 'postrm', 'preinst', 'prerm']:
+            name = '%s.%s' % (prefix, id)
+            try:
+                template = self.templates[name]
+            except KeyError:
+                continue
+            else:
+                target = '%s/%s.%s' % (output_dir, package_name, id)
+                with open(target, 'w') as f:
+                    f.write(self.substitute(template, vars))
+                    os.chmod(f.fileno(),
+                             self.templates.get_mode(name) & 0o777)
+
+    def merge_build_depends(self, packages):
+        # Merge Build-Depends pseudo-fields from binary packages into the
+        # source package
+        source = packages["source"]
+        arch_all = PackageArchitecture("all")
+        for name, package in packages.items():
+            if name == "source":
+                continue
+            dep = package.get("Build-Depends")
+            if not dep:
+                continue
+            del package["Build-Depends"]
+            for group in dep:
+                for item in group:
+                    if package["Architecture"] != arch_all and not item.arches:
+                        item.arches = sorted(package["Architecture"])
+                    if package.get("Build-Profiles") and not item.restrictions:
+                        profiles = package["Build-Profiles"]
+                        assert profiles[0] == "<" and profiles[-1] == ">"
+                        item.restrictions = re.split(r"\s+", profiles[1:-1])
+            if package["Architecture"] == arch_all:
+                dep_type = "Build-Depends-Indep"
+            else:
+                dep_type = "Build-Depends-Arch"
+            if dep_type not in source:
+                source[dep_type] = PackageRelation()
+            source[dep_type].extend(dep)
+
+    def write(self, packages, makefile):
+        self.write_control(packages.values())
+        self.write_makefile(makefile)
+
+    def write_control(self, list, name='debian/control'):
+        self.write_rfc822(codecs.open(name, 'w', 'utf-8'), list)
+
+    def write_makefile(self, makefile, name='debian/rules.gen'):
+        f = open(name, 'w')
+        makefile.write(f)
+        f.close()
+
+    def write_rfc822(self, f, list):
+        for entry in list:
+            for key, value in entry.items():
+                f.write(u"%s: %s\n" % (key, value))
+            f.write('\n')
+
+
+def merge_packages(packages, new, arch):
+    for new_package in new:
+        name = new_package['Package']
+        if name in packages:
+            package = packages.get(name)
+            package['Architecture'].add(arch)
+
+            for field in ('Depends', 'Provides', 'Suggests', 'Recommends',
+                          'Conflicts'):
+                if field in new_package:
+                    if field in package:
+                        v = package[field]
+                        v.extend(new_package[field])
+                    else:
+                        package[field] = new_package[field]
+
+        else:
+            new_package['Architecture'] = arch
+            packages.append(new_package)
diff --git a/debian/lib/python/debian_linux/kconfig.py b/debian/lib/python/debian_linux/kconfig.py
new file mode 100644
index 000000000000..73d491d7ff56
--- /dev/null
+++ b/debian/lib/python/debian_linux/kconfig.py
@@ -0,0 +1,93 @@
+from collections import OrderedDict
+
+__all__ = (
+    "KconfigFile",
+)
+
+
+class KConfigEntry(object):
+    __slots__ = 'name', 'value', 'comments'
+
+    def __init__(self, name, value, comments=None):
+        self.name, self.value = name, value
+        self.comments = comments or []
+
+    def __eq__(self, other):
+        return self.name == other.name and self.value == other.value
+
+    def __hash__(self):
+        return hash(self.name) | hash(self.value)
+
+    def __repr__(self):
+        return ('<{}({!r}, {!r}, {!r})>'
+                .format(self.__class__.__name__, self.name, self.value,
+                        self.comments))
+
+    def __str__(self):
+        return 'CONFIG_{}={}'.format(self.name, self.value)
+
+    def write(self):
+        for comment in self.comments:
+            yield '#. ' + comment
+        yield str(self)
+
+
+class KConfigEntryTristate(KConfigEntry):
+    __slots__ = ()
+
+    VALUE_NO = False
+    VALUE_YES = True
+    VALUE_MOD = object()
+
+    def __init__(self, name, value, comments=None):
+        if value == 'n' or value is None:
+            value = self.VALUE_NO
+        elif value == 'y':
+            value = self.VALUE_YES
+        elif value == 'm':
+            value = self.VALUE_MOD
+        else:
+            raise NotImplementedError
+        super(KConfigEntryTristate, self).__init__(name, value, comments)
+
+    def __str__(self):
+        if self.value is self.VALUE_MOD:
+            return 'CONFIG_{}=m'.format(self.name)
+        if self.value:
+            return 'CONFIG_{}=y'.format(self.name)
+        return '# CONFIG_{} is not set'.format(self.name)
+
+
+class KconfigFile(OrderedDict):
+    def __str__(self):
+        ret = []
+        for i in self.str_iter():
+            ret.append(i)
+        return '\n'.join(ret) + '\n'
+
+    def read(self, f):
+        for line in iter(f.readlines()):
+            line = line.strip()
+            if line.startswith("CONFIG_"):
+                i = line.find('=')
+                option = line[7:i]
+                value = line[i + 1:]
+                self.set(option, value)
+            elif line.startswith("# CONFIG_"):
+                option = line[9:-11]
+                self.set(option, 'n')
+            elif line.startswith("#") or not line:
+                pass
+            else:
+                raise RuntimeError("Can't recognize %s" % line)
+
+    def set(self, key, value):
+        if value in ('y', 'm', 'n'):
+            entry = KConfigEntryTristate(key, value)
+        else:
+            entry = KConfigEntry(key, value)
+        self[key] = entry
+
+    def str_iter(self):
+        for key, value in self.items():
+            yield str(value)
diff --git a/debian/lib/python/debian_linux/utils.py b/debian/lib/python/debian_linux/utils.py
new file mode 100644
index 000000000000..a43e986982b2
--- /dev/null
+++ b/debian/lib/python/debian_linux/utils.py
@@ -0,0 +1,108 @@
+import codecs
+import os
+import re
+import textwrap
+
+
+class Templates(object):
+    def __init__(self, dirs=["debian/templates"]):
+        self.dirs = dirs
+
+        self._cache = {}
+
+    def __getitem__(self, key):
+        ret = self.get(key)
+        if ret is not None:
+            return ret
+        raise KeyError(key)
+
+    def _read(self, name):
+        prefix, id = name.split('.', 1)
+
+        for suffix in ['.in', '']:
+            for dir in self.dirs:
+                filename = "%s/%s%s" % (dir, name, suffix)
+                if os.path.exists(filename):
+                    with codecs.open(filename, 'r', 'utf-8') as f:
+                        mode = os.stat(f.fileno()).st_mode
+                        if prefix == 'control':
+                            return (read_control(f), mode)
+                        if prefix == 'tests-control':
+                            return (read_tests_control(f), mode)
+                        return (f.read(), mode)
+
+    def _get(self, key):
+        try:
+            return self._cache[key]
+        except KeyError:
+            self._cache[key] = value = self._read(key)
+            return value
+
+    def get(self, key, default=None):
+        value = self._get(key)
+        if value is None:
+            return default
+        return value[0]
+
+    def get_mode(self, key):
+        value = self._get(key)
+        if value is None:
+            return None
+        return value[1]
+
+
+def read_control(f):
+    from .debian import Package
+    return _read_rfc822(f, Package)
+
+
+def read_tests_control(f):
+    from .debian import TestsControl
+    return _read_rfc822(f, TestsControl)
+
+
+def _read_rfc822(f, cls):
+    entries = []
+    eof = False
+
+    while not eof:
+        e = cls()
+        last = None
+        lines = []
+        while True:
+            line = f.readline()
+            if not line:
+                eof = True
+                break
+            # Strip comments rather than trying to preserve them
+            if line[0] == '#':
+                continue
+            line = line.strip('\n')
+            if not line:
+                break
+            if line[0] in ' \t':
+                if not last:
+                    raise ValueError(
+                        'Continuation line seen before first header')
+                lines.append(line.lstrip())
+                continue
+            if last:
+                e[last] = '\n'.join(lines)
+            i = line.find(':')
+            if i < 0:
+                raise ValueError(u"Not a header, not a continuation: ``%s''" %
+                                 line)
+            last = line[:i]
+            lines = [line[i + 1:].lstrip()]
+        if last:
+            e[last] = '\n'.join(lines)
+        if e:
+            entries.append(e)
+
+    return entries
+
+
+class TextWrapper(textwrap.TextWrapper):
+    wordsep_re = re.compile(
+        r'(\s+|'                                  # any whitespace
+        r'(?<=[\w\!\"\'\&\.\,\?])-{2,}(?=\w))')   # em-dash
diff --git a/debian/libcpupower-dev.install b/debian/libcpupower-dev.install
new file mode 100644
index 000000000000..f3800aad52cb
--- /dev/null
+++ b/debian/libcpupower-dev.install
@@ -0,0 +1,2 @@
+usr/include/*
+usr/lib/*/lib*.so
diff --git a/debian/libcpupower1.install b/debian/libcpupower1.install
new file mode 100644
index 000000000000..3ddde5841984
--- /dev/null
+++ b/debian/libcpupower1.install
@@ -0,0 +1 @@
+usr/lib/*/lib*.so.*
diff --git a/debian/libcpupower1.symbols b/debian/libcpupower1.symbols
new file mode 100644
index 000000000000..5e98bb32da39
--- /dev/null
+++ b/debian/libcpupower1.symbols
@@ -0,0 +1,42 @@
+libcpupower.so.1 libcpupower1 #MINVER#
+ cpu_topology_release@Base 4.7~rc2-1~exp1
+ cpufreq_get_affected_cpus@Base 4.7~rc2-1~exp1
+ cpufreq_get_available_frequencies@Base 4.7~rc2-1~exp1
+ cpufreq_get_available_governors@Base 4.7~rc2-1~exp1
+ cpufreq_get_boost_frequencies@Base 5.5.8-1~exp1
+ cpufreq_get_driver@Base 4.7~rc2-1~exp1
+ cpufreq_get_freq_hardware@Base 4.7~rc2-1~exp1
+ cpufreq_get_freq_kernel@Base 4.7~rc2-1~exp1
+ cpufreq_get_hardware_limits@Base 4.7~rc2-1~exp1
+ cpufreq_get_policy@Base 4.7~rc2-1~exp1
+ cpufreq_get_related_cpus@Base 4.7~rc2-1~exp1
+ cpufreq_get_stats@Base 4.7~rc2-1~exp1
+ cpufreq_get_transition_latency@Base 4.7~rc2-1~exp1
+ cpufreq_get_transitions@Base 4.7~rc2-1~exp1
+ cpufreq_modify_policy_governor@Base 4.7~rc2-1~exp1
+ cpufreq_modify_policy_max@Base 4.7~rc2-1~exp1
+ cpufreq_modify_policy_min@Base 4.7~rc2-1~exp1
+ cpufreq_put_affected_cpus@Base 4.7~rc2-1~exp1
+ cpufreq_put_available_frequencies@Base 4.7~rc2-1~exp1
+ cpufreq_put_available_governors@Base 4.7~rc2-1~exp1
+ cpufreq_put_boost_frequencies@Base 5.5.8-1~exp1
+ cpufreq_put_driver@Base 4.7~rc2-1~exp1
+ cpufreq_put_policy@Base 4.7~rc2-1~exp1
+ cpufreq_put_related_cpus@Base 4.7~rc2-1~exp1
+ cpufreq_put_stats@Base 4.7~rc2-1~exp1
+ cpufreq_set_frequency@Base 4.7~rc2-1~exp1
+ cpufreq_set_policy@Base 4.7~rc2-1~exp1
+ cpuidle_get_driver@Base 4.7~rc2-1~exp1
+ cpuidle_get_governor@Base 4.7~rc2-1~exp1
+ cpuidle_is_state_disabled@Base 4.7~rc2-1~exp1
+ cpuidle_state_count@Base 4.7~rc2-1~exp1
+ cpuidle_state_desc@Base 4.7~rc2-1~exp1
+ cpuidle_state_disable@Base 4.7~rc2-1~exp1
+ cpuidle_state_latency@Base 4.7~rc2-1~exp1
+ cpuidle_state_name@Base 4.7~rc2-1~exp1
+ cpuidle_state_time@Base 4.7~rc2-1~exp1
+ cpuidle_state_usage@Base 4.7~rc2-1~exp1
+ cpupower_is_cpu_online@Base 4.7~rc2-1~exp1
+ cpupower_read_sysfs@Base 5.13.9-1~exp1
+ cpupower_write_sysfs@Base 5.13.9-1~exp1
+ get_cpu_topology@Base 4.7~rc2-1~exp1
diff --git a/debian/liblockdep-dev.README.Debian b/debian/liblockdep-dev.README.Debian
new file mode 100644
index 000000000000..a0673a1707d7
--- /dev/null
+++ b/debian/liblockdep-dev.README.Debian
@@ -0,0 +1,13 @@
+liblockdep for Debian
+---------------------
+
+liblockdep does not have proper documentation, but these articles
+provide an introduction:
+
+    https://lwn.net/Articles/536363/
+    http://www.vctlabs.com/posts/2014/Jul/09/liblockdep/
+
+'lockdep-design.txt' explains some more detail about what lockdep
+does, both in the kernel and as liblockdep.
+
+ -- Ben Hutchings <ben@decadent.org.uk>, Fri, 14 Aug 2015 14:22:55 +0200
diff --git a/debian/liblockdep-dev.docs b/debian/liblockdep-dev.docs
new file mode 100644
index 000000000000..15b2bbe123e5
--- /dev/null
+++ b/debian/liblockdep-dev.docs
@@ -0,0 +1 @@
+Documentation/locking/lockdep-design.txt
diff --git a/debian/liblockdep-dev.install b/debian/liblockdep-dev.install
new file mode 100644
index 000000000000..bd857244bef9
--- /dev/null
+++ b/debian/liblockdep-dev.install
@@ -0,0 +1,3 @@
+usr/include/liblockdep
+usr/lib/*/liblockdep.a
+usr/lib/*/liblockdep.so
diff --git a/debian/linux-cpupower.install b/debian/linux-cpupower.install
new file mode 100755
index 000000000000..cbed747b987a
--- /dev/null
+++ b/debian/linux-cpupower.install
@@ -0,0 +1,4 @@
+#!/usr/bin/dh-exec
+usr/bin
+[i386 amd64 x32] usr/sbin
+usr/share/
diff --git a/debian/linux-cpupower.manpages b/debian/linux-cpupower.manpages
new file mode 100755
index 000000000000..96f9593efbf7
--- /dev/null
+++ b/debian/linux-cpupower.manpages
@@ -0,0 +1,3 @@
+#!/usr/bin/dh-exec
+[i386 amd64 x32] tools/power/x86/turbostat/turbostat.8
+[i386 amd64 x32] tools/power/x86/x86_energy_perf_policy/x86_energy_perf_policy.8
diff --git a/debian/linux-image.NEWS b/debian/linux-image.NEWS
new file mode 100644
index 000000000000..f8e1fc022907
--- /dev/null
+++ b/debian/linux-image.NEWS
@@ -0,0 +1,83 @@
+linux (5.10.46-4) unstable; urgency=medium
+
+  * From Linux 5.10.46-4, unprivileged calls to bpf() are disabled by
+    default, mitigating several security issues. However, an admin can
+    still change this setting later on, if needed, by writing 0 or 1 to
+    the kernel.unprivileged_bpf_disabled sysctl.
+
+    If you prefer to keep unprivileged calls to bpf() enabled, set the
+    sysctl:
+
+    kernel.unprivileged_bpf_disabled = 0
+
+    which is the upstream default.
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 02 Aug 2021 22:59:24 +0200
+
+linux (5.10~rc7-1~exp2) unstable; urgency=medium
+
+  * From Linux 5.10, all users are allowed to create user namespaces by
+    default.  This will allow programs such as web browsers and container
+    managers to create more restricted sandboxes for untrusted or
+    less-trusted code, without the need to run as root or to use a
+    setuid-root helper.
+
+    The previous Debian default was to restrict this feature to processes
+    running as root, because it exposed more security issues in the
+    kernel.  However, the security benefits of more widespread sandboxing
+    probably now outweigh this risk.
+
+    If you prefer to keep this feature restricted, set the sysctl:
+
+        kernel.unprivileged_userns_clone = 0
+
+ -- Ben Hutchings <benh@debian.org>  Sun, 13 Dec 2020 17:11:36 +0100
+
+linux-latest (86) unstable; urgency=medium
+
+  * From Linux 4.13.10-1, AppArmor is enabled by default.  This allows
+    defining a "profile" for each installed program that can mitigate
+    security vulnerabilities in it.  However, an incorrect profile might
+    disable some functionality of the program.
+
+    In case you suspect that an AppArmor profile is incorrect, see
+    <https://lists.debian.org/debian-devel/2017/11/msg00178.html> and
+    consider reporting a bug in the package providing the profile.  The
+    profile may be part of the program's package or apparmor-profiles.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Thu, 30 Nov 2017 20:08:25 +0000
+
+linux-latest (81) unstable; urgency=medium
+
+  * From Linux 4.10, the old 'virtual syscall' interface on 64-bit PCs
+    (amd64) is disabled.  This breaks chroot environments and containers
+    that use (e)glibc 2.13 and earlier, including those based on Debian 7
+    or RHEL/CentOS 6.  To re-enable it, set the kernel parameter:
+    vsyscall=emulate
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 30 Jun 2017 23:50:03 +0100
+
+linux-latest (76) unstable; urgency=medium
+
+  * From Linux 4.8, several changes have been made in the kernel
+    configuration to 'harden' the system, i.e. to mitigate security bugs.
+    Some changes may cause legitimate applications to fail, and can be
+    reverted by run-time configuration:
+    - On most architectures, the /dev/mem device can no longer be used to
+      access devices that also have a kernel driver.  This breaks dosemu
+      and some old user-space graphics drivers.  To allow this, set the
+      kernel parameter: iomem=relaxed
+    - The kernel log is no longer readable by unprivileged users.  To
+      allow this, set the sysctl: kernel.dmesg_restrict=0
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 29 Oct 2016 02:05:32 +0100
+
+linux-latest (75) unstable; urgency=medium
+
+  * From Linux 4.7, the iptables connection tracking system will no longer
+    automatically load helper modules.  If your firewall configuration
+    depends on connection tracking helpers, you should explicitly load the
+    required modules.  For more information, see
+    <https://home.regit.org/netfilter-en/secure-use-of-helpers/>.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Sat, 29 Oct 2016 01:53:18 +0100
diff --git a/debian/lockdep.dirs b/debian/lockdep.dirs
new file mode 100644
index 000000000000..e77248175524
--- /dev/null
+++ b/debian/lockdep.dirs
@@ -0,0 +1 @@
+usr/bin
diff --git a/debian/patches-rt/0001-sched-Trigger-warning-if-migration_disabled-counter-.patch b/debian/patches-rt/0001-sched-Trigger-warning-if-migration_disabled-counter-.patch
new file mode 100644
index 000000000000..7e3bcd970edd
--- /dev/null
+++ b/debian/patches-rt/0001-sched-Trigger-warning-if-migration_disabled-counter-.patch
@@ -0,0 +1,28 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 12 Aug 2021 14:40:05 +0200
+Subject: [PATCH 01/10] sched: Trigger warning if ->migration_disabled counter
+ underflows.
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+If migrate_enable() is used more often than its counter part then it
+remains undetected and rq::nr_pinned will underflow, too.
+
+Add a warning if migrate_enable() is attempted if without a matching a
+migrate_disable().
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ kernel/sched/core.c |    2 ++
+ 1 file changed, 2 insertions(+)
+
+--- a/kernel/sched/core.c
++++ b/kernel/sched/core.c
+@@ -2171,6 +2171,8 @@ void migrate_enable(void)
+ 	if (p->migration_disabled > 1) {
+ 		p->migration_disabled--;
+ 		return;
++	} else if (WARN_ON_ONCE(p->migration_disabled == 0)) {
++		return;
+ 	}
+ 
+ 	/*
diff --git a/debian/patches-rt/0001_kernel_fork_redo_ifdefs_around_task_s_handling.patch b/debian/patches-rt/0001_kernel_fork_redo_ifdefs_around_task_s_handling.patch
new file mode 100644
index 000000000000..45a7d6922baf
--- /dev/null
+++ b/debian/patches-rt/0001_kernel_fork_redo_ifdefs_around_task_s_handling.patch
@@ -0,0 +1,162 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Subject: kernel/fork: Redo ifdefs around task's handling.
+Date: Thu, 18 Nov 2021 15:34:45 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The use of ifdef CONFIG_VMAP_STACK is confusing in terms what is
+actually happenning and what can happen.
+For instance from reading free_thread_stack() it appears that in the
+CONFIG_VMAP_STACK case we may receive a non-NULL vm pointer but it may
+also be NULL in which case __free_pages() is used to free the stack.
+This is however not the case because in the VMAP case a non-NULL pointer
+is always returned here.
+Since it looks like this might happen, the compiler creates the correct
+dead code with the invocation to __free_pages() and everything around
+it. Twice.
+
+Add spaces between the ifdef and the identifer to recognize the ifdef
+level that we are currently in.
+Add the current identifer as a comment behind #else and #endif.
+Move the code within free_thread_stack() and alloc_thread_stack_node()
+into the relavant ifdef block.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211118143452.136421-2-bigeasy@linutronix.de
+---
+ kernel/fork.c |   74 ++++++++++++++++++++++++++++++----------------------------
+ 1 file changed, 39 insertions(+), 35 deletions(-)
+
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -184,7 +184,7 @@ static inline void free_task_struct(stru
+  */
+ # if THREAD_SIZE >= PAGE_SIZE || defined(CONFIG_VMAP_STACK)
+ 
+-#ifdef CONFIG_VMAP_STACK
++#  ifdef CONFIG_VMAP_STACK
+ /*
+  * vmalloc() is a bit slow, and calling vfree() enough times will force a TLB
+  * flush.  Try to minimize the number of calls by caching stacks.
+@@ -209,11 +209,9 @@ static int free_vm_stack_cache(unsigned
+ 
+ 	return 0;
+ }
+-#endif
+ 
+ static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)
+ {
+-#ifdef CONFIG_VMAP_STACK
+ 	void *stack;
+ 	int i;
+ 
+@@ -257,45 +255,53 @@ static unsigned long *alloc_thread_stack
+ 		tsk->stack = stack;
+ 	}
+ 	return stack;
+-#else
+-	struct page *page = alloc_pages_node(node, THREADINFO_GFP,
+-					     THREAD_SIZE_ORDER);
+-
+-	if (likely(page)) {
+-		tsk->stack = kasan_reset_tag(page_address(page));
+-		return tsk->stack;
+-	}
+-	return NULL;
+-#endif
+ }
+ 
+-static inline void free_thread_stack(struct task_struct *tsk)
++static void free_thread_stack(struct task_struct *tsk)
+ {
+-#ifdef CONFIG_VMAP_STACK
+ 	struct vm_struct *vm = task_stack_vm_area(tsk);
++	int i;
+ 
+-	if (vm) {
+-		int i;
++	for (i = 0; i < THREAD_SIZE / PAGE_SIZE; i++)
++		memcg_kmem_uncharge_page(vm->pages[i], 0);
+ 
+-		for (i = 0; i < THREAD_SIZE / PAGE_SIZE; i++)
+-			memcg_kmem_uncharge_page(vm->pages[i], 0);
++	for (i = 0; i < NR_CACHED_STACKS; i++) {
++		if (this_cpu_cmpxchg(cached_stacks[i], NULL,
++				     tsk->stack_vm_area) != NULL)
++			continue;
++
++		tsk->stack = NULL;
++		tsk->stack_vm_area = NULL;
++		return;
++	}
++	vfree_atomic(tsk->stack);
++	tsk->stack = NULL;
++	tsk->stack_vm_area = NULL;
++}
+ 
+-		for (i = 0; i < NR_CACHED_STACKS; i++) {
+-			if (this_cpu_cmpxchg(cached_stacks[i],
+-					NULL, tsk->stack_vm_area) != NULL)
+-				continue;
++#  else /* !CONFIG_VMAP_STACK */
+ 
+-			return;
+-		}
++static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)
++{
++	struct page *page = alloc_pages_node(node, THREADINFO_GFP,
++					     THREAD_SIZE_ORDER);
+ 
+-		vfree_atomic(tsk->stack);
+-		return;
++	if (likely(page)) {
++		tsk->stack = kasan_reset_tag(page_address(page));
++		return tsk->stack;
+ 	}
+-#endif
++	return NULL;
++}
+ 
++static void free_thread_stack(struct task_struct *tsk)
++{
+ 	__free_pages(virt_to_page(tsk->stack), THREAD_SIZE_ORDER);
++	tsk->stack = NULL;
+ }
+-# else
++
++#  endif /* CONFIG_VMAP_STACK */
++# else /* !(THREAD_SIZE >= PAGE_SIZE || defined(CONFIG_VMAP_STACK)) */
++
+ static struct kmem_cache *thread_stack_cache;
+ 
+ static unsigned long *alloc_thread_stack_node(struct task_struct *tsk,
+@@ -311,6 +317,7 @@ static unsigned long *alloc_thread_stack
+ static void free_thread_stack(struct task_struct *tsk)
+ {
+ 	kmem_cache_free(thread_stack_cache, tsk->stack);
++	tsk->stack = NULL;
+ }
+ 
+ void thread_stack_cache_init(void)
+@@ -320,8 +327,9 @@ void thread_stack_cache_init(void)
+ 					THREAD_SIZE, NULL);
+ 	BUG_ON(thread_stack_cache == NULL);
+ }
+-# endif
+-#endif
++
++# endif /* THREAD_SIZE >= PAGE_SIZE || defined(CONFIG_VMAP_STACK) */
++#endif /* !CONFIG_ARCH_THREAD_STACK_ALLOCATOR */
+ 
+ /* SLAB cache for signal_struct structures (tsk->signal) */
+ static struct kmem_cache *signal_cachep;
+@@ -429,10 +437,6 @@ static void release_task_stack(struct ta
+ 
+ 	account_kernel_stack(tsk, -1);
+ 	free_thread_stack(tsk);
+-	tsk->stack = NULL;
+-#ifdef CONFIG_VMAP_STACK
+-	tsk->stack_vm_area = NULL;
+-#endif
+ }
+ 
+ #ifdef CONFIG_THREAD_INFO_IN_TASK
diff --git a/debian/patches-rt/0001_zsmalloc_introduce_some_helper_functions.patch b/debian/patches-rt/0001_zsmalloc_introduce_some_helper_functions.patch
new file mode 100644
index 000000000000..9c588a1c2772
--- /dev/null
+++ b/debian/patches-rt/0001_zsmalloc_introduce_some_helper_functions.patch
@@ -0,0 +1,188 @@
+From: Minchan Kim <minchan@kernel.org>
+Subject: zsmalloc: introduce some helper functions
+Date: Mon, 15 Nov 2021 10:59:01 -0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+get_zspage_mapping returns fullness as well as class_idx. However,
+the fullness is usually not used since it could be stale in some
+contexts. It causes misleading as well as unnecessary instructions
+so this patch introduces zspage_class.
+
+obj_to_location also produces page and index but we don't need
+always the index, either so this patch introduces obj_to_page.
+
+Signed-off-by: Minchan Kim <minchan@kernel.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211115185909.3949505-2-minchan@kernel.org
+---
+ mm/zsmalloc.c |   54 +++++++++++++++++++++++-------------------------------
+ 1 file changed, 23 insertions(+), 31 deletions(-)
+
+--- a/mm/zsmalloc.c
++++ b/mm/zsmalloc.c
+@@ -517,6 +517,12 @@ static void get_zspage_mapping(struct zs
+ 	*class_idx = zspage->class;
+ }
+ 
++static struct size_class *zspage_class(struct zs_pool *pool,
++					     struct zspage *zspage)
++{
++	return pool->size_class[zspage->class];
++}
++
+ static void set_zspage_mapping(struct zspage *zspage,
+ 				unsigned int class_idx,
+ 				enum fullness_group fullness)
+@@ -844,6 +850,12 @@ static void obj_to_location(unsigned lon
+ 	*obj_idx = (obj & OBJ_INDEX_MASK);
+ }
+ 
++static void obj_to_page(unsigned long obj, struct page **page)
++{
++	obj >>= OBJ_TAG_BITS;
++	*page = pfn_to_page(obj >> OBJ_INDEX_BITS);
++}
++
+ /**
+  * location_to_obj - get obj value encoded from (<page>, <obj_idx>)
+  * @page: page object resides in zspage
+@@ -1246,8 +1258,6 @@ void *zs_map_object(struct zs_pool *pool
+ 	unsigned long obj, off;
+ 	unsigned int obj_idx;
+ 
+-	unsigned int class_idx;
+-	enum fullness_group fg;
+ 	struct size_class *class;
+ 	struct mapping_area *area;
+ 	struct page *pages[2];
+@@ -1270,8 +1280,7 @@ void *zs_map_object(struct zs_pool *pool
+ 	/* migration cannot move any subpage in this zspage */
+ 	migrate_read_lock(zspage);
+ 
+-	get_zspage_mapping(zspage, &class_idx, &fg);
+-	class = pool->size_class[class_idx];
++	class = zspage_class(pool, zspage);
+ 	off = (class->size * obj_idx) & ~PAGE_MASK;
+ 
+ 	area = &get_cpu_var(zs_map_area);
+@@ -1304,16 +1313,13 @@ void zs_unmap_object(struct zs_pool *poo
+ 	unsigned long obj, off;
+ 	unsigned int obj_idx;
+ 
+-	unsigned int class_idx;
+-	enum fullness_group fg;
+ 	struct size_class *class;
+ 	struct mapping_area *area;
+ 
+ 	obj = handle_to_obj(handle);
+ 	obj_to_location(obj, &page, &obj_idx);
+ 	zspage = get_zspage(page);
+-	get_zspage_mapping(zspage, &class_idx, &fg);
+-	class = pool->size_class[class_idx];
++	class = zspage_class(pool, zspage);
+ 	off = (class->size * obj_idx) & ~PAGE_MASK;
+ 
+ 	area = this_cpu_ptr(&zs_map_area);
+@@ -1491,8 +1497,6 @@ void zs_free(struct zs_pool *pool, unsig
+ 	struct zspage *zspage;
+ 	struct page *f_page;
+ 	unsigned long obj;
+-	unsigned int f_objidx;
+-	int class_idx;
+ 	struct size_class *class;
+ 	enum fullness_group fullness;
+ 	bool isolated;
+@@ -1502,13 +1506,11 @@ void zs_free(struct zs_pool *pool, unsig
+ 
+ 	pin_tag(handle);
+ 	obj = handle_to_obj(handle);
+-	obj_to_location(obj, &f_page, &f_objidx);
++	obj_to_page(obj, &f_page);
+ 	zspage = get_zspage(f_page);
+ 
+ 	migrate_read_lock(zspage);
+-
+-	get_zspage_mapping(zspage, &class_idx, &fullness);
+-	class = pool->size_class[class_idx];
++	class = zspage_class(pool, zspage);
+ 
+ 	spin_lock(&class->lock);
+ 	obj_free(class, obj);
+@@ -1866,8 +1868,6 @@ static bool zs_page_isolate(struct page
+ {
+ 	struct zs_pool *pool;
+ 	struct size_class *class;
+-	int class_idx;
+-	enum fullness_group fullness;
+ 	struct zspage *zspage;
+ 	struct address_space *mapping;
+ 
+@@ -1880,15 +1880,10 @@ static bool zs_page_isolate(struct page
+ 
+ 	zspage = get_zspage(page);
+ 
+-	/*
+-	 * Without class lock, fullness could be stale while class_idx is okay
+-	 * because class_idx is constant unless page is freed so we should get
+-	 * fullness again under class lock.
+-	 */
+-	get_zspage_mapping(zspage, &class_idx, &fullness);
+ 	mapping = page_mapping(page);
+ 	pool = mapping->private_data;
+-	class = pool->size_class[class_idx];
++
++	class = zspage_class(pool, zspage);
+ 
+ 	spin_lock(&class->lock);
+ 	if (get_zspage_inuse(zspage) == 0) {
+@@ -1907,6 +1902,9 @@ static bool zs_page_isolate(struct page
+ 	 * size_class to prevent further object allocation from the zspage.
+ 	 */
+ 	if (!list_empty(&zspage->list) && !is_zspage_isolated(zspage)) {
++		enum fullness_group fullness;
++		unsigned int class_idx;
++
+ 		get_zspage_mapping(zspage, &class_idx, &fullness);
+ 		atomic_long_inc(&pool->isolated_pages);
+ 		remove_zspage(class, zspage, fullness);
+@@ -1923,8 +1921,6 @@ static int zs_page_migrate(struct addres
+ {
+ 	struct zs_pool *pool;
+ 	struct size_class *class;
+-	int class_idx;
+-	enum fullness_group fullness;
+ 	struct zspage *zspage;
+ 	struct page *dummy;
+ 	void *s_addr, *d_addr, *addr;
+@@ -1949,9 +1945,8 @@ static int zs_page_migrate(struct addres
+ 
+ 	/* Concurrent compactor cannot migrate any subpage in zspage */
+ 	migrate_write_lock(zspage);
+-	get_zspage_mapping(zspage, &class_idx, &fullness);
+ 	pool = mapping->private_data;
+-	class = pool->size_class[class_idx];
++	class = zspage_class(pool, zspage);
+ 	offset = get_first_obj_offset(page);
+ 
+ 	spin_lock(&class->lock);
+@@ -2049,8 +2044,6 @@ static void zs_page_putback(struct page
+ {
+ 	struct zs_pool *pool;
+ 	struct size_class *class;
+-	int class_idx;
+-	enum fullness_group fg;
+ 	struct address_space *mapping;
+ 	struct zspage *zspage;
+ 
+@@ -2058,10 +2051,9 @@ static void zs_page_putback(struct page
+ 	VM_BUG_ON_PAGE(!PageIsolated(page), page);
+ 
+ 	zspage = get_zspage(page);
+-	get_zspage_mapping(zspage, &class_idx, &fg);
+ 	mapping = page_mapping(page);
+ 	pool = mapping->private_data;
+-	class = pool->size_class[class_idx];
++	class = zspage_class(pool, zspage);
+ 
+ 	spin_lock(&class->lock);
+ 	dec_zspage_isolation(zspage);
diff --git a/debian/patches-rt/0002-drm-i915-Don-t-disable-interrupts-and-pretend-a-lock.patch b/debian/patches-rt/0002-drm-i915-Don-t-disable-interrupts-and-pretend-a-lock.patch
new file mode 100644
index 000000000000..bac6d53c2854
--- /dev/null
+++ b/debian/patches-rt/0002-drm-i915-Don-t-disable-interrupts-and-pretend-a-lock.patch
@@ -0,0 +1,138 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue, 7 Jul 2020 12:25:11 +0200
+Subject: [PATCH 02/10] drm/i915: Don't disable interrupts and pretend a lock
+ as been acquired in __timeline_mark_lock().
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+This is a revert of commits
+   d67739268cf0e ("drm/i915/gt: Mark up the nested engine-pm timeline lock as irqsafe")
+   6c69a45445af9 ("drm/i915/gt: Mark context->active_count as protected by timeline->mutex")
+
+The existing code leads to a different behaviour depending on whether
+lockdep is enabled or not. Any following lock that is acquired without
+disabling interrupts (but needs to) will not be noticed by lockdep.
+
+This it not just a lockdep annotation but is used but an actual mutex_t
+that is properly used as a lock but in case of __timeline_mark_lock()
+lockdep is only told that it is acquired but no lock has been acquired.
+
+It appears that its purpose is just satisfy the lockdep_assert_held()
+check in intel_context_mark_active(). The other problem with disabling
+interrupts is that on PREEMPT_RT interrupts are also disabled which
+leads to problems for instance later during memory allocation.
+
+Add a CONTEXT_IS_PARKED bit to intel_engine_cs and set_bit/clear_bit it
+instead of mutex_acquire/mutex_release. Use test_bit in the two
+identified spots which relied on the lockdep annotation.
+
+Cc: Peter Zijlstra <peterz@infradead.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ drivers/gpu/drm/i915/gt/intel_context.h       |    3 +-
+ drivers/gpu/drm/i915/gt/intel_context_types.h |    1 
+ drivers/gpu/drm/i915/gt/intel_engine_pm.c     |   38 +-------------------------
+ drivers/gpu/drm/i915/i915_request.h           |    3 +-
+ 4 files changed, 7 insertions(+), 38 deletions(-)
+
+--- a/drivers/gpu/drm/i915/gt/intel_context.h
++++ b/drivers/gpu/drm/i915/gt/intel_context.h
+@@ -211,7 +211,8 @@ static inline void intel_context_enter(s
+ 
+ static inline void intel_context_mark_active(struct intel_context *ce)
+ {
+-	lockdep_assert_held(&ce->timeline->mutex);
++	lockdep_assert(lockdep_is_held(&ce->timeline->mutex) ||
++		       test_bit(CONTEXT_IS_PARKED, &ce->flags));
+ 	++ce->active_count;
+ }
+ 
+--- a/drivers/gpu/drm/i915/gt/intel_context_types.h
++++ b/drivers/gpu/drm/i915/gt/intel_context_types.h
+@@ -118,6 +118,7 @@ struct intel_context {
+ #define CONTEXT_LRCA_DIRTY		9
+ #define CONTEXT_GUC_INIT		10
+ #define CONTEXT_PERMA_PIN		11
++#define CONTEXT_IS_PARKED		12
+ 
+ 	struct {
+ 		u64 timeout_us;
+--- a/drivers/gpu/drm/i915/gt/intel_engine_pm.c
++++ b/drivers/gpu/drm/i915/gt/intel_engine_pm.c
+@@ -80,39 +80,6 @@ static int __engine_unpark(struct intel_
+ 	return 0;
+ }
+ 
+-#if IS_ENABLED(CONFIG_LOCKDEP)
+-
+-static unsigned long __timeline_mark_lock(struct intel_context *ce)
+-{
+-	unsigned long flags;
+-
+-	local_irq_save(flags);
+-	mutex_acquire(&ce->timeline->mutex.dep_map, 2, 0, _THIS_IP_);
+-
+-	return flags;
+-}
+-
+-static void __timeline_mark_unlock(struct intel_context *ce,
+-				   unsigned long flags)
+-{
+-	mutex_release(&ce->timeline->mutex.dep_map, _THIS_IP_);
+-	local_irq_restore(flags);
+-}
+-
+-#else
+-
+-static unsigned long __timeline_mark_lock(struct intel_context *ce)
+-{
+-	return 0;
+-}
+-
+-static void __timeline_mark_unlock(struct intel_context *ce,
+-				   unsigned long flags)
+-{
+-}
+-
+-#endif /* !IS_ENABLED(CONFIG_LOCKDEP) */
+-
+ static void duration(struct dma_fence *fence, struct dma_fence_cb *cb)
+ {
+ 	struct i915_request *rq = to_request(fence);
+@@ -159,7 +126,6 @@ static bool switch_to_kernel_context(str
+ {
+ 	struct intel_context *ce = engine->kernel_context;
+ 	struct i915_request *rq;
+-	unsigned long flags;
+ 	bool result = true;
+ 
+ 	/*
+@@ -214,7 +180,7 @@ static bool switch_to_kernel_context(str
+ 	 * engine->wakeref.count, we may see the request completion and retire
+ 	 * it causing an underflow of the engine->wakeref.
+ 	 */
+-	flags = __timeline_mark_lock(ce);
++	set_bit(CONTEXT_IS_PARKED, &ce->flags);
+ 	GEM_BUG_ON(atomic_read(&ce->timeline->active_count) < 0);
+ 
+ 	rq = __i915_request_create(ce, GFP_NOWAIT);
+@@ -246,7 +212,7 @@ static bool switch_to_kernel_context(str
+ 
+ 	result = false;
+ out_unlock:
+-	__timeline_mark_unlock(ce, flags);
++	clear_bit(CONTEXT_IS_PARKED, &ce->flags);
+ 	return result;
+ }
+ 
+--- a/drivers/gpu/drm/i915/i915_request.h
++++ b/drivers/gpu/drm/i915/i915_request.h
+@@ -642,7 +642,8 @@ i915_request_timeline(const struct i915_
+ {
+ 	/* Valid only while the request is being constructed (or retired). */
+ 	return rcu_dereference_protected(rq->timeline,
+-					 lockdep_is_held(&rcu_access_pointer(rq->timeline)->mutex));
++					 lockdep_is_held(&rcu_access_pointer(rq->timeline)->mutex) ||
++					 test_bit(CONTEXT_IS_PARKED, &rq->context->flags));
+ }
+ 
+ static inline struct i915_gem_context *
diff --git a/debian/patches-rt/0002_kernel_fork_duplicate_task_struct_before_stack_allocation.patch b/debian/patches-rt/0002_kernel_fork_duplicate_task_struct_before_stack_allocation.patch
new file mode 100644
index 000000000000..d277cdd97c9d
--- /dev/null
+++ b/debian/patches-rt/0002_kernel_fork_duplicate_task_struct_before_stack_allocation.patch
@@ -0,0 +1,50 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Subject: kernel/fork: Duplicate task_struct before stack allocation.
+Date: Thu, 18 Nov 2021 15:34:46 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+alloc_thread_stack_node() already populates the task_struct::stack
+member except on IA64. The stack pointer is saved and populated again
+because IA64 needs it and arch_dup_task_struct() overwrites it.
+
+Allocate thread's stack after task_struct has been duplicated as a
+preparation.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211118143452.136421-3-bigeasy@linutronix.de
+---
+ kernel/fork.c |    9 ++++-----
+ 1 file changed, 4 insertions(+), 5 deletions(-)
+
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -887,6 +887,10 @@ static struct task_struct *dup_task_stru
+ 	if (!tsk)
+ 		return NULL;
+ 
++	err = arch_dup_task_struct(tsk, orig);
++	if (err)
++		goto free_tsk;
++
+ 	stack = alloc_thread_stack_node(tsk, node);
+ 	if (!stack)
+ 		goto free_tsk;
+@@ -896,8 +900,6 @@ static struct task_struct *dup_task_stru
+ 
+ 	stack_vm_area = task_stack_vm_area(tsk);
+ 
+-	err = arch_dup_task_struct(tsk, orig);
+-
+ 	/*
+ 	 * arch_dup_task_struct() clobbers the stack-related fields.  Make
+ 	 * sure they're properly initialized before using any stack-related
+@@ -911,9 +913,6 @@ static struct task_struct *dup_task_stru
+ 	refcount_set(&tsk->stack_refcount, 1);
+ #endif
+ 
+-	if (err)
+-		goto free_stack;
+-
+ 	err = scs_prepare(tsk, node);
+ 	if (err)
+ 		goto free_stack;
diff --git a/debian/patches-rt/0002_zsmalloc_rename_zs_stat_type_to_class_stat_type.patch b/debian/patches-rt/0002_zsmalloc_rename_zs_stat_type_to_class_stat_type.patch
new file mode 100644
index 000000000000..81386d26c5d3
--- /dev/null
+++ b/debian/patches-rt/0002_zsmalloc_rename_zs_stat_type_to_class_stat_type.patch
@@ -0,0 +1,106 @@
+From: Minchan Kim <minchan@kernel.org>
+Subject: zsmalloc: rename zs_stat_type to class_stat_type
+Date: Mon, 15 Nov 2021 10:59:02 -0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The stat aims for class stat, not zspage so rename it.
+
+Signed-off-by: Minchan Kim <minchan@kernel.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211115185909.3949505-3-minchan@kernel.org
+---
+ mm/zsmalloc.c |   24 ++++++++++++------------
+ 1 file changed, 12 insertions(+), 12 deletions(-)
+
+--- a/mm/zsmalloc.c
++++ b/mm/zsmalloc.c
+@@ -158,7 +158,7 @@ enum fullness_group {
+ 	NR_ZS_FULLNESS,
+ };
+ 
+-enum zs_stat_type {
++enum class_stat_type {
+ 	CLASS_EMPTY,
+ 	CLASS_ALMOST_EMPTY,
+ 	CLASS_ALMOST_FULL,
+@@ -549,21 +549,21 @@ static int get_size_class_index(int size
+ 	return min_t(int, ZS_SIZE_CLASSES - 1, idx);
+ }
+ 
+-/* type can be of enum type zs_stat_type or fullness_group */
+-static inline void zs_stat_inc(struct size_class *class,
++/* type can be of enum type class_stat_type or fullness_group */
++static inline void class_stat_inc(struct size_class *class,
+ 				int type, unsigned long cnt)
+ {
+ 	class->stats.objs[type] += cnt;
+ }
+ 
+-/* type can be of enum type zs_stat_type or fullness_group */
+-static inline void zs_stat_dec(struct size_class *class,
++/* type can be of enum type class_stat_type or fullness_group */
++static inline void class_stat_dec(struct size_class *class,
+ 				int type, unsigned long cnt)
+ {
+ 	class->stats.objs[type] -= cnt;
+ }
+ 
+-/* type can be of enum type zs_stat_type or fullness_group */
++/* type can be of enum type class_stat_type or fullness_group */
+ static inline unsigned long zs_stat_get(struct size_class *class,
+ 				int type)
+ {
+@@ -725,7 +725,7 @@ static void insert_zspage(struct size_cl
+ {
+ 	struct zspage *head;
+ 
+-	zs_stat_inc(class, fullness, 1);
++	class_stat_inc(class, fullness, 1);
+ 	head = list_first_entry_or_null(&class->fullness_list[fullness],
+ 					struct zspage, list);
+ 	/*
+@@ -750,7 +750,7 @@ static void remove_zspage(struct size_cl
+ 	VM_BUG_ON(is_zspage_isolated(zspage));
+ 
+ 	list_del_init(&zspage->list);
+-	zs_stat_dec(class, fullness, 1);
++	class_stat_dec(class, fullness, 1);
+ }
+ 
+ /*
+@@ -964,7 +964,7 @@ static void __free_zspage(struct zs_pool
+ 
+ 	cache_free_zspage(pool, zspage);
+ 
+-	zs_stat_dec(class, OBJ_ALLOCATED, class->objs_per_zspage);
++	class_stat_dec(class, OBJ_ALLOCATED, class->objs_per_zspage);
+ 	atomic_long_sub(class->pages_per_zspage,
+ 					&pool->pages_allocated);
+ }
+@@ -1394,7 +1394,7 @@ static unsigned long obj_malloc(struct s
+ 
+ 	kunmap_atomic(vaddr);
+ 	mod_zspage_inuse(zspage, 1);
+-	zs_stat_inc(class, OBJ_USED, 1);
++	class_stat_inc(class, OBJ_USED, 1);
+ 
+ 	obj = location_to_obj(m_page, obj);
+ 
+@@ -1458,7 +1458,7 @@ unsigned long zs_malloc(struct zs_pool *
+ 	record_obj(handle, obj);
+ 	atomic_long_add(class->pages_per_zspage,
+ 				&pool->pages_allocated);
+-	zs_stat_inc(class, OBJ_ALLOCATED, class->objs_per_zspage);
++	class_stat_inc(class, OBJ_ALLOCATED, class->objs_per_zspage);
+ 
+ 	/* We completely set up zspage so mark them as movable */
+ 	SetZsPageMovable(pool, zspage);
+@@ -1489,7 +1489,7 @@ static void obj_free(struct size_class *
+ 	kunmap_atomic(vaddr);
+ 	set_freeobj(zspage, f_objidx);
+ 	mod_zspage_inuse(zspage, -1);
+-	zs_stat_dec(class, OBJ_USED, 1);
++	class_stat_dec(class, OBJ_USED, 1);
+ }
+ 
+ void zs_free(struct zs_pool *pool, unsigned long handle)
diff --git a/debian/patches-rt/0003-drm-i915-Use-preempt_disable-enable_rt-where-recomme.patch b/debian/patches-rt/0003-drm-i915-Use-preempt_disable-enable_rt-where-recomme.patch
new file mode 100644
index 000000000000..803406adc95e
--- /dev/null
+++ b/debian/patches-rt/0003-drm-i915-Use-preempt_disable-enable_rt-where-recomme.patch
@@ -0,0 +1,56 @@
+From: Mike Galbraith <umgwanakikbuti@gmail.com>
+Date: Sat, 27 Feb 2016 08:09:11 +0100
+Subject: [PATCH 03/10] drm/i915: Use preempt_disable/enable_rt() where
+ recommended
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Mario Kleiner suggest in commit
+  ad3543ede630f ("drm/intel: Push get_scanout_position() timestamping into kms driver.")
+
+a spots where preemption should be disabled on PREEMPT_RT. The
+difference is that on PREEMPT_RT the intel_uncore::lock disables neither
+preemption nor interrupts and so region remains preemptible.
+
+The area covers only register reads and writes. The part that worries me
+is:
+- __intel_get_crtc_scanline() the worst case is 100us if no match is
+  found.
+
+- intel_crtc_scanlines_since_frame_timestamp() not sure how long this
+  may take in the worst case.
+
+It was in the RT queue for a while and nobody complained.
+Disable preemption on PREEPMPT_RT during timestamping.
+
+[bigeasy: patch description.]
+
+Cc: Mario Kleiner <mario.kleiner.de@gmail.com>
+Signed-off-by: Mike Galbraith <umgwanakikbuti@gmail.com>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ drivers/gpu/drm/i915/i915_irq.c |    6 ++++--
+ 1 file changed, 4 insertions(+), 2 deletions(-)
+
+--- a/drivers/gpu/drm/i915/i915_irq.c
++++ b/drivers/gpu/drm/i915/i915_irq.c
+@@ -916,7 +916,8 @@ static bool i915_get_crtc_scanoutpos(str
+ 	 */
+ 	spin_lock_irqsave(&dev_priv->uncore.lock, irqflags);
+ 
+-	/* preempt_disable_rt() should go right here in PREEMPT_RT patchset. */
++	if (IS_ENABLED(CONFIG_PREEMPT_RT))
++		preempt_disable();
+ 
+ 	/* Get optional system timestamp before query. */
+ 	if (stime)
+@@ -980,7 +981,8 @@ static bool i915_get_crtc_scanoutpos(str
+ 	if (etime)
+ 		*etime = ktime_get();
+ 
+-	/* preempt_enable_rt() should go right here in PREEMPT_RT patchset. */
++	if (IS_ENABLED(CONFIG_PREEMPT_RT))
++		preempt_enable();
+ 
+ 	spin_unlock_irqrestore(&dev_priv->uncore.lock, irqflags);
+ 
diff --git a/debian/patches-rt/0003-rtmutex-Add-a-special-case-for-ww-mutex-handling.patch b/debian/patches-rt/0003-rtmutex-Add-a-special-case-for-ww-mutex-handling.patch
new file mode 100644
index 000000000000..cafdd26ea7d3
--- /dev/null
+++ b/debian/patches-rt/0003-rtmutex-Add-a-special-case-for-ww-mutex-handling.patch
@@ -0,0 +1,48 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri, 13 Aug 2021 12:40:49 +0200
+Subject: [PATCH 03/10] rtmutex: Add a special case for ww-mutex handling.
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The lockdep selftest for ww-mutex assumes in a few cases the
+ww_ctx->contending_lock assignment via __ww_mutex_check_kill() which
+does not happen if the rtmutex detects the deadlock early.
+
+The testcase passes if the deadlock handling here is removed. This means
+that it will work if multiple threads/tasks are involved and not just a
+single one.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ kernel/locking/rtmutex.c |   20 +++++++++++++++++++-
+ 1 file changed, 19 insertions(+), 1 deletion(-)
+
+--- a/kernel/locking/rtmutex.c
++++ b/kernel/locking/rtmutex.c
+@@ -1104,8 +1104,26 @@ static int __sched task_blocks_on_rt_mut
+ 	 * which is wrong, as the other waiter is not in a deadlock
+ 	 * situation.
+ 	 */
+-	if (owner == task)
++	if (owner == task) {
++#if defined(DEBUG_WW_MUTEXES) && defined(CONFIG_DEBUG_LOCKING_API_SELFTESTS)
++		/*
++		 * The lockdep selftest for ww-mutex assumes in a few cases
++		 * the ww_ctx->contending_lock assignment via
++		 * __ww_mutex_check_kill() which does not happen if the rtmutex
++		 * detects the deadlock early.
++		 */
++		if (build_ww_mutex() && ww_ctx) {
++			struct rt_mutex *rtm;
++
++			/* Check whether the waiter should backout immediately */
++			rtm = container_of(lock, struct rt_mutex, rtmutex);
++
++			__ww_mutex_add_waiter(waiter, rtm, ww_ctx);
++			__ww_mutex_check_kill(rtm, waiter, ww_ctx);
++		}
++#endif
+ 		return -EDEADLK;
++	}
+ 
+ 	raw_spin_lock(&task->pi_lock);
+ 	waiter->task = task;
diff --git a/debian/patches-rt/0003_kernel_fork_ia64_provide_a_alloc_thread_stack_node_for_ia64.patch b/debian/patches-rt/0003_kernel_fork_ia64_provide_a_alloc_thread_stack_node_for_ia64.patch
new file mode 100644
index 000000000000..8ff56b574e3f
--- /dev/null
+++ b/debian/patches-rt/0003_kernel_fork_ia64_provide_a_alloc_thread_stack_node_for_ia64.patch
@@ -0,0 +1,67 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Subject: kernel/fork, IA64: Provide a alloc_thread_stack_node() for IA64.
+Date: Thu, 18 Nov 2021 15:34:47 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Provide a generic alloc_thread_stack_node() for IA64/
+CONFIG_ARCH_THREAD_STACK_ALLOCATOR which returns stack pointer and sets
+task_struct::stack so it behaves exactly like the other implementations.
+
+Rename IA64's alloc_thread_stack_node() and add the generic version to
+the fork code so it is in one place _and_ to drastically lower chances
+of fat fingering the IA64 code.
+Do the same for free_thread_stack().
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211118143452.136421-4-bigeasy@linutronix.de
+---
+ arch/ia64/include/asm/thread_info.h |    6 +++---
+ kernel/fork.c                       |   16 ++++++++++++++++
+ 2 files changed, 19 insertions(+), 3 deletions(-)
+
+--- a/arch/ia64/include/asm/thread_info.h
++++ b/arch/ia64/include/asm/thread_info.h
+@@ -55,15 +55,15 @@ struct thread_info {
+ #ifndef ASM_OFFSETS_C
+ /* how to get the thread information struct from C */
+ #define current_thread_info()	((struct thread_info *) ((char *) current + IA64_TASK_SIZE))
+-#define alloc_thread_stack_node(tsk, node)	\
++#define arch_alloc_thread_stack_node(tsk, node)	\
+ 		((unsigned long *) ((char *) (tsk) + IA64_TASK_SIZE))
+ #define task_thread_info(tsk)	((struct thread_info *) ((char *) (tsk) + IA64_TASK_SIZE))
+ #else
+ #define current_thread_info()	((struct thread_info *) 0)
+-#define alloc_thread_stack_node(tsk, node)	((unsigned long *) 0)
++#define arch_alloc_thread_stack_node(tsk, node)	((unsigned long *) 0)
+ #define task_thread_info(tsk)	((struct thread_info *) 0)
+ #endif
+-#define free_thread_stack(tsk)	/* nothing */
++#define arch_free_thread_stack(tsk)	/* nothing */
+ #define task_stack_page(tsk)	((void *)(tsk))
+ 
+ #define __HAVE_THREAD_FUNCTIONS
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -329,6 +329,22 @@ void thread_stack_cache_init(void)
+ }
+ 
+ # endif /* THREAD_SIZE >= PAGE_SIZE || defined(CONFIG_VMAP_STACK) */
++#else /* CONFIG_ARCH_THREAD_STACK_ALLOCATOR */
++
++static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)
++{
++	unsigned long *stack;
++
++	stack = arch_alloc_thread_stack_node(tsk, node);
++	tsk->stack = stack;
++	return stack;
++}
++
++static void free_thread_stack(struct task_struct *tsk, bool cache_only)
++{
++	arch_free_thread_stack(tsk);
++}
++
+ #endif /* !CONFIG_ARCH_THREAD_STACK_ALLOCATOR */
+ 
+ /* SLAB cache for signal_struct structures (tsk->signal) */
diff --git a/debian/patches-rt/0003_zsmalloc_decouple_class_actions_from_zspage_works.patch b/debian/patches-rt/0003_zsmalloc_decouple_class_actions_from_zspage_works.patch
new file mode 100644
index 000000000000..429b2502058d
--- /dev/null
+++ b/debian/patches-rt/0003_zsmalloc_decouple_class_actions_from_zspage_works.patch
@@ -0,0 +1,132 @@
+From: Minchan Kim <minchan@kernel.org>
+Subject: zsmalloc: decouple class actions from zspage works
+Date: Mon, 15 Nov 2021 10:59:03 -0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+This patch moves class stat update out of obj_malloc since
+it's not related to zspage operation.
+This is a preparation to introduce new lock scheme in next
+patch.
+
+Signed-off-by: Minchan Kim <minchan@kernel.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211115185909.3949505-4-minchan@kernel.org
+---
+ mm/zsmalloc.c |   23 +++++++++++++----------
+ 1 file changed, 13 insertions(+), 10 deletions(-)
+
+--- a/mm/zsmalloc.c
++++ b/mm/zsmalloc.c
+@@ -1360,17 +1360,19 @@ size_t zs_huge_class_size(struct zs_pool
+ }
+ EXPORT_SYMBOL_GPL(zs_huge_class_size);
+ 
+-static unsigned long obj_malloc(struct size_class *class,
++static unsigned long obj_malloc(struct zs_pool *pool,
+ 				struct zspage *zspage, unsigned long handle)
+ {
+ 	int i, nr_page, offset;
+ 	unsigned long obj;
+ 	struct link_free *link;
++	struct size_class *class;
+ 
+ 	struct page *m_page;
+ 	unsigned long m_offset;
+ 	void *vaddr;
+ 
++	class = pool->size_class[zspage->class];
+ 	handle |= OBJ_ALLOCATED_TAG;
+ 	obj = get_freeobj(zspage);
+ 
+@@ -1394,7 +1396,6 @@ static unsigned long obj_malloc(struct s
+ 
+ 	kunmap_atomic(vaddr);
+ 	mod_zspage_inuse(zspage, 1);
+-	class_stat_inc(class, OBJ_USED, 1);
+ 
+ 	obj = location_to_obj(m_page, obj);
+ 
+@@ -1433,10 +1434,11 @@ unsigned long zs_malloc(struct zs_pool *
+ 	spin_lock(&class->lock);
+ 	zspage = find_get_zspage(class);
+ 	if (likely(zspage)) {
+-		obj = obj_malloc(class, zspage, handle);
++		obj = obj_malloc(pool, zspage, handle);
+ 		/* Now move the zspage to another fullness group, if required */
+ 		fix_fullness_group(class, zspage);
+ 		record_obj(handle, obj);
++		class_stat_inc(class, OBJ_USED, 1);
+ 		spin_unlock(&class->lock);
+ 
+ 		return handle;
+@@ -1451,7 +1453,7 @@ unsigned long zs_malloc(struct zs_pool *
+ 	}
+ 
+ 	spin_lock(&class->lock);
+-	obj = obj_malloc(class, zspage, handle);
++	obj = obj_malloc(pool, zspage, handle);
+ 	newfg = get_fullness_group(class, zspage);
+ 	insert_zspage(class, zspage, newfg);
+ 	set_zspage_mapping(zspage, class->index, newfg);
+@@ -1459,6 +1461,7 @@ unsigned long zs_malloc(struct zs_pool *
+ 	atomic_long_add(class->pages_per_zspage,
+ 				&pool->pages_allocated);
+ 	class_stat_inc(class, OBJ_ALLOCATED, class->objs_per_zspage);
++	class_stat_inc(class, OBJ_USED, 1);
+ 
+ 	/* We completely set up zspage so mark them as movable */
+ 	SetZsPageMovable(pool, zspage);
+@@ -1468,7 +1471,7 @@ unsigned long zs_malloc(struct zs_pool *
+ }
+ EXPORT_SYMBOL_GPL(zs_malloc);
+ 
+-static void obj_free(struct size_class *class, unsigned long obj)
++static void obj_free(int class_size, unsigned long obj)
+ {
+ 	struct link_free *link;
+ 	struct zspage *zspage;
+@@ -1478,7 +1481,7 @@ static void obj_free(struct size_class *
+ 	void *vaddr;
+ 
+ 	obj_to_location(obj, &f_page, &f_objidx);
+-	f_offset = (class->size * f_objidx) & ~PAGE_MASK;
++	f_offset = (class_size * f_objidx) & ~PAGE_MASK;
+ 	zspage = get_zspage(f_page);
+ 
+ 	vaddr = kmap_atomic(f_page);
+@@ -1489,7 +1492,6 @@ static void obj_free(struct size_class *
+ 	kunmap_atomic(vaddr);
+ 	set_freeobj(zspage, f_objidx);
+ 	mod_zspage_inuse(zspage, -1);
+-	class_stat_dec(class, OBJ_USED, 1);
+ }
+ 
+ void zs_free(struct zs_pool *pool, unsigned long handle)
+@@ -1513,7 +1515,8 @@ void zs_free(struct zs_pool *pool, unsig
+ 	class = zspage_class(pool, zspage);
+ 
+ 	spin_lock(&class->lock);
+-	obj_free(class, obj);
++	obj_free(class->size, obj);
++	class_stat_dec(class, OBJ_USED, 1);
+ 	fullness = fix_fullness_group(class, zspage);
+ 	if (fullness != ZS_EMPTY) {
+ 		migrate_read_unlock(zspage);
+@@ -1671,7 +1674,7 @@ static int migrate_zspage(struct zs_pool
+ 		}
+ 
+ 		used_obj = handle_to_obj(handle);
+-		free_obj = obj_malloc(class, get_zspage(d_page), handle);
++		free_obj = obj_malloc(pool, get_zspage(d_page), handle);
+ 		zs_object_copy(class, free_obj, used_obj);
+ 		obj_idx++;
+ 		/*
+@@ -1683,7 +1686,7 @@ static int migrate_zspage(struct zs_pool
+ 		free_obj |= BIT(HANDLE_PIN_BIT);
+ 		record_obj(handle, free_obj);
+ 		unpin_tag(handle);
+-		obj_free(class, used_obj);
++		obj_free(class->size, used_obj);
+ 	}
+ 
+ 	/* Remember last position in this iteration */
diff --git a/debian/patches-rt/0004-drm-i915-Don-t-disable-interrupts-on-PREEMPT_RT-duri.patch b/debian/patches-rt/0004-drm-i915-Don-t-disable-interrupts-on-PREEMPT_RT-duri.patch
new file mode 100644
index 000000000000..84e8477e3e37
--- /dev/null
+++ b/debian/patches-rt/0004-drm-i915-Don-t-disable-interrupts-on-PREEMPT_RT-duri.patch
@@ -0,0 +1,85 @@
+From: Mike Galbraith <umgwanakikbuti@gmail.com>
+Date: Sat, 27 Feb 2016 09:01:42 +0100
+Subject: [PATCH 04/10] drm/i915: Don't disable interrupts on PREEMPT_RT during
+ atomic updates
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Commit
+   8d7849db3eab7 ("drm/i915: Make sprite updates atomic")
+
+started disabling interrupts across atomic updates. This breaks on PREEMPT_RT
+because within this section the code attempt to acquire spinlock_t locks which
+are sleeping locks on PREEMPT_RT.
+
+According to the comment the interrupts are disabled to avoid random delays and
+not required for protection or synchronisation.
+If this needs to happen with disabled interrupts on PREEMPT_RT, and the
+whole section is restricted to register access then all sleeping locks
+need to be acquired before interrupts are disabled and some function
+maybe moved after enabling interrupts again.
+This includes:
+- prepare_to_wait() + finish_wait() due its wake queue.
+- drm_crtc_vblank_put() -> vblank_disable_fn() drm_device::vbl_lock.
+- skl_pfit_enable(), intel_update_plane(), vlv_atomic_update_fifo() and
+  maybe others due to intel_uncore::lock
+- drm_crtc_arm_vblank_event() due to drm_device::event_lock and
+  drm_device::vblank_time_lock.
+
+Don't disable interrupts on PREEMPT_RT during atomic updates.
+
+[bigeasy: drop local locks, commit message]
+
+Signed-off-by: Mike Galbraith <umgwanakikbuti@gmail.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ drivers/gpu/drm/i915/display/intel_crtc.c |   15 ++++++++++-----
+ 1 file changed, 10 insertions(+), 5 deletions(-)
+
+--- a/drivers/gpu/drm/i915/display/intel_crtc.c
++++ b/drivers/gpu/drm/i915/display/intel_crtc.c
+@@ -425,7 +425,8 @@ void intel_pipe_update_start(const struc
+ 	 */
+ 	intel_psr_wait_for_idle(new_crtc_state);
+ 
+-	local_irq_disable();
++	if (!IS_ENABLED(CONFIG_PREEMPT_RT))
++		local_irq_disable();
+ 
+ 	crtc->debug.min_vbl = min;
+ 	crtc->debug.max_vbl = max;
+@@ -450,11 +451,13 @@ void intel_pipe_update_start(const struc
+ 			break;
+ 		}
+ 
+-		local_irq_enable();
++		if (!IS_ENABLED(CONFIG_PREEMPT_RT))
++			local_irq_enable();
+ 
+ 		timeout = schedule_timeout(timeout);
+ 
+-		local_irq_disable();
++		if (!IS_ENABLED(CONFIG_PREEMPT_RT))
++			local_irq_disable();
+ 	}
+ 
+ 	finish_wait(wq, &wait);
+@@ -487,7 +490,8 @@ void intel_pipe_update_start(const struc
+ 	return;
+ 
+ irq_disable:
+-	local_irq_disable();
++	if (!IS_ENABLED(CONFIG_PREEMPT_RT))
++		local_irq_disable();
+ }
+ 
+ #if IS_ENABLED(CONFIG_DRM_I915_DEBUG_VBLANK_EVADE)
+@@ -566,7 +570,8 @@ void intel_pipe_update_end(struct intel_
+ 		new_crtc_state->uapi.event = NULL;
+ 	}
+ 
+-	local_irq_enable();
++	if (!IS_ENABLED(CONFIG_PREEMPT_RT))
++		local_irq_enable();
+ 
+ 	/* Send VRR Push to terminate Vblank */
+ 	intel_vrr_send_push(new_crtc_state);
diff --git a/debian/patches-rt/0004-rtmutex-Add-rt_mutex_lock_nest_lock-and-rt_mutex_loc.patch b/debian/patches-rt/0004-rtmutex-Add-rt_mutex_lock_nest_lock-and-rt_mutex_loc.patch
new file mode 100644
index 000000000000..2adcfad96da6
--- /dev/null
+++ b/debian/patches-rt/0004-rtmutex-Add-rt_mutex_lock_nest_lock-and-rt_mutex_loc.patch
@@ -0,0 +1,116 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri, 13 Aug 2021 13:49:49 +0200
+Subject: [PATCH 04/10] rtmutex: Add rt_mutex_lock_nest_lock() and
+ rt_mutex_lock_killable().
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The locking selftest for ww-mutex expects to operate directly on the
+base-mutex which becomes a rtmutex on PREEMPT_RT.
+
+Add rt_mutex_lock_nest_lock(), follows mutex_lock_nest_lock() for
+rtmutex.
+Add rt_mutex_lock_killable(), follows mutex_lock_killable() for rtmutex.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ include/linux/rtmutex.h      |    9 +++++++++
+ kernel/locking/rtmutex_api.c |   30 ++++++++++++++++++++++++++----
+ 2 files changed, 35 insertions(+), 4 deletions(-)
+
+--- a/include/linux/rtmutex.h
++++ b/include/linux/rtmutex.h
+@@ -99,13 +99,22 @@ extern void __rt_mutex_init(struct rt_mu
+ 
+ #ifdef CONFIG_DEBUG_LOCK_ALLOC
+ extern void rt_mutex_lock_nested(struct rt_mutex *lock, unsigned int subclass);
++extern void _rt_mutex_lock_nest_lock(struct rt_mutex *lock, struct lockdep_map *nest_lock);
+ #define rt_mutex_lock(lock) rt_mutex_lock_nested(lock, 0)
++#define rt_mutex_lock_nest_lock(lock, nest_lock)			\
++	do {								\
++		typecheck(struct lockdep_map *, &(nest_lock)->dep_map);	\
++		_rt_mutex_lock_nest_lock(lock, &(nest_lock)->dep_map);	\
++	} while (0)
++
+ #else
+ extern void rt_mutex_lock(struct rt_mutex *lock);
+ #define rt_mutex_lock_nested(lock, subclass) rt_mutex_lock(lock)
++#define rt_mutex_lock_nest_lock(lock, nest_lock) rt_mutex_lock(lock)
+ #endif
+ 
+ extern int rt_mutex_lock_interruptible(struct rt_mutex *lock);
++extern int rt_mutex_lock_killable(struct rt_mutex *lock);
+ extern int rt_mutex_trylock(struct rt_mutex *lock);
+ 
+ extern void rt_mutex_unlock(struct rt_mutex *lock);
+--- a/kernel/locking/rtmutex_api.c
++++ b/kernel/locking/rtmutex_api.c
+@@ -21,12 +21,13 @@ int max_lock_depth = 1024;
+  */
+ static __always_inline int __rt_mutex_lock_common(struct rt_mutex *lock,
+ 						  unsigned int state,
++						  struct lockdep_map *nest_lock,
+ 						  unsigned int subclass)
+ {
+ 	int ret;
+ 
+ 	might_sleep();
+-	mutex_acquire(&lock->dep_map, subclass, 0, _RET_IP_);
++	mutex_acquire_nest(&lock->dep_map, subclass, 0, nest_lock, _RET_IP_);
+ 	ret = __rt_mutex_lock(&lock->rtmutex, state);
+ 	if (ret)
+ 		mutex_release(&lock->dep_map, _RET_IP_);
+@@ -48,10 +49,16 @@ EXPORT_SYMBOL(rt_mutex_base_init);
+  */
+ void __sched rt_mutex_lock_nested(struct rt_mutex *lock, unsigned int subclass)
+ {
+-	__rt_mutex_lock_common(lock, TASK_UNINTERRUPTIBLE, subclass);
++	__rt_mutex_lock_common(lock, TASK_UNINTERRUPTIBLE, NULL, subclass);
+ }
+ EXPORT_SYMBOL_GPL(rt_mutex_lock_nested);
+ 
++void __sched _rt_mutex_lock_nest_lock(struct rt_mutex *lock, struct lockdep_map *nest_lock)
++{
++	__rt_mutex_lock_common(lock, TASK_UNINTERRUPTIBLE, nest_lock, 0);
++}
++EXPORT_SYMBOL_GPL(_rt_mutex_lock_nest_lock);
++
+ #else /* !CONFIG_DEBUG_LOCK_ALLOC */
+ 
+ /**
+@@ -61,7 +68,7 @@ EXPORT_SYMBOL_GPL(rt_mutex_lock_nested);
+  */
+ void __sched rt_mutex_lock(struct rt_mutex *lock)
+ {
+-	__rt_mutex_lock_common(lock, TASK_UNINTERRUPTIBLE, 0);
++	__rt_mutex_lock_common(lock, TASK_UNINTERRUPTIBLE, NULL, 0);
+ }
+ EXPORT_SYMBOL_GPL(rt_mutex_lock);
+ #endif
+@@ -77,11 +84,26 @@ EXPORT_SYMBOL_GPL(rt_mutex_lock);
+  */
+ int __sched rt_mutex_lock_interruptible(struct rt_mutex *lock)
+ {
+-	return __rt_mutex_lock_common(lock, TASK_INTERRUPTIBLE, 0);
++	return __rt_mutex_lock_common(lock, TASK_INTERRUPTIBLE, NULL, 0);
+ }
+ EXPORT_SYMBOL_GPL(rt_mutex_lock_interruptible);
+ 
+ /**
++ * rt_mutex_lock_killable - lock a rt_mutex killable
++ *
++ * @lock:		the rt_mutex to be locked
++ *
++ * Returns:
++ *  0		on success
++ * -EINTR	when interrupted by a signal
++ */
++int __sched rt_mutex_lock_killable(struct rt_mutex *lock)
++{
++	return __rt_mutex_lock_common(lock, TASK_KILLABLE, NULL, 0);
++}
++EXPORT_SYMBOL_GPL(rt_mutex_lock_killable);
++
++/**
+  * rt_mutex_trylock - try to lock a rt_mutex
+  *
+  * @lock:	the rt_mutex to be locked
diff --git a/debian/patches-rt/0004_kernel_fork_don_t_assign_the_stack_pointer_in_dup_task_struct.patch b/debian/patches-rt/0004_kernel_fork_don_t_assign_the_stack_pointer_in_dup_task_struct.patch
new file mode 100644
index 000000000000..e480692911b0
--- /dev/null
+++ b/debian/patches-rt/0004_kernel_fork_don_t_assign_the_stack_pointer_in_dup_task_struct.patch
@@ -0,0 +1,149 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Subject: kernel/fork: Don't assign the stack pointer in dup_task_struct().
+Date: Thu, 18 Nov 2021 15:34:48 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+All four versions of alloc_thread_stack_node() assign now
+task_struct::stack in case the allocation was successful.
+
+Let alloc_thread_stack_node() return an error code instead of the stack
+pointer and remove the stack assignment in dup_task_struct().
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211118143452.136421-5-bigeasy@linutronix.de
+---
+ kernel/fork.c |   47 ++++++++++++++++-------------------------------
+ 1 file changed, 16 insertions(+), 31 deletions(-)
+
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -210,7 +210,7 @@ static int free_vm_stack_cache(unsigned
+ 	return 0;
+ }
+ 
+-static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)
++static int alloc_thread_stack_node(struct task_struct *tsk, int node)
+ {
+ 	void *stack;
+ 	int i;
+@@ -231,7 +231,7 @@ static unsigned long *alloc_thread_stack
+ 
+ 		tsk->stack_vm_area = s;
+ 		tsk->stack = s->addr;
+-		return s->addr;
++		return 0;
+ 	}
+ 
+ 	/*
+@@ -244,17 +244,16 @@ static unsigned long *alloc_thread_stack
+ 				     THREADINFO_GFP & ~__GFP_ACCOUNT,
+ 				     PAGE_KERNEL,
+ 				     0, node, __builtin_return_address(0));
+-
++	if (!stack)
++		return -ENOMEM;
+ 	/*
+ 	 * We can't call find_vm_area() in interrupt context, and
+ 	 * free_thread_stack() can be called in interrupt context,
+ 	 * so cache the vm_struct.
+ 	 */
+-	if (stack) {
+-		tsk->stack_vm_area = find_vm_area(stack);
+-		tsk->stack = stack;
+-	}
+-	return stack;
++	tsk->stack_vm_area = find_vm_area(stack);
++	tsk->stack = stack;
++	return 0;
+ }
+ 
+ static void free_thread_stack(struct task_struct *tsk)
+@@ -281,16 +280,16 @@ static void free_thread_stack(struct tas
+ 
+ #  else /* !CONFIG_VMAP_STACK */
+ 
+-static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)
++static int alloc_thread_stack_node(struct task_struct *tsk, int node)
+ {
+ 	struct page *page = alloc_pages_node(node, THREADINFO_GFP,
+ 					     THREAD_SIZE_ORDER);
+ 
+ 	if (likely(page)) {
+ 		tsk->stack = kasan_reset_tag(page_address(page));
+-		return tsk->stack;
++		return 0;
+ 	}
+-	return NULL;
++	return -ENOMEM;
+ }
+ 
+ static void free_thread_stack(struct task_struct *tsk)
+@@ -304,14 +303,13 @@ static void free_thread_stack(struct tas
+ 
+ static struct kmem_cache *thread_stack_cache;
+ 
+-static unsigned long *alloc_thread_stack_node(struct task_struct *tsk,
+-						  int node)
++static int alloc_thread_stack_node(struct task_struct *tsk, int node)
+ {
+ 	unsigned long *stack;
+ 	stack = kmem_cache_alloc_node(thread_stack_cache, THREADINFO_GFP, node);
+ 	stack = kasan_reset_tag(stack);
+ 	tsk->stack = stack;
+-	return stack;
++	return stack ? 0 : -ENOMEM;
+ }
+ 
+ static void free_thread_stack(struct task_struct *tsk)
+@@ -331,13 +329,13 @@ void thread_stack_cache_init(void)
+ # endif /* THREAD_SIZE >= PAGE_SIZE || defined(CONFIG_VMAP_STACK) */
+ #else /* CONFIG_ARCH_THREAD_STACK_ALLOCATOR */
+ 
+-static unsigned long *alloc_thread_stack_node(struct task_struct *tsk, int node)
++static int alloc_thread_stack_node(struct task_struct *tsk, int node)
+ {
+ 	unsigned long *stack;
+ 
+ 	stack = arch_alloc_thread_stack_node(tsk, node);
+ 	tsk->stack = stack;
+-	return stack;
++	return stack ? 0 : -ENOMEM;
+ }
+ 
+ static void free_thread_stack(struct task_struct *tsk, bool cache_only)
+@@ -893,8 +891,6 @@ void set_task_stack_end_magic(struct tas
+ static struct task_struct *dup_task_struct(struct task_struct *orig, int node)
+ {
+ 	struct task_struct *tsk;
+-	unsigned long *stack;
+-	struct vm_struct *stack_vm_area __maybe_unused;
+ 	int err;
+ 
+ 	if (node == NUMA_NO_NODE)
+@@ -907,24 +903,13 @@ static struct task_struct *dup_task_stru
+ 	if (err)
+ 		goto free_tsk;
+ 
+-	stack = alloc_thread_stack_node(tsk, node);
+-	if (!stack)
++	err = alloc_thread_stack_node(tsk, node);
++	if (err)
+ 		goto free_tsk;
+ 
+ 	if (memcg_charge_kernel_stack(tsk))
+ 		goto free_stack;
+ 
+-	stack_vm_area = task_stack_vm_area(tsk);
+-
+-	/*
+-	 * arch_dup_task_struct() clobbers the stack-related fields.  Make
+-	 * sure they're properly initialized before using any stack-related
+-	 * functions again.
+-	 */
+-	tsk->stack = stack;
+-#ifdef CONFIG_VMAP_STACK
+-	tsk->stack_vm_area = stack_vm_area;
+-#endif
+ #ifdef CONFIG_THREAD_INFO_IN_TASK
+ 	refcount_set(&tsk->stack_refcount, 1);
+ #endif
diff --git a/debian/patches-rt/0004_zsmalloc_introduce_obj_allocated.patch b/debian/patches-rt/0004_zsmalloc_introduce_obj_allocated.patch
new file mode 100644
index 000000000000..4409b06eb05c
--- /dev/null
+++ b/debian/patches-rt/0004_zsmalloc_introduce_obj_allocated.patch
@@ -0,0 +1,103 @@
+From: Minchan Kim <minchan@kernel.org>
+Subject: zsmalloc: introduce obj_allocated
+Date: Mon, 15 Nov 2021 10:59:04 -0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The usage pattern for obj_to_head is to check whether the zpage
+is allocated or not. Thus, introduce obj_allocated.
+
+Signed-off-by: Minchan Kim <minchan@kernel.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211115185909.3949505-5-minchan@kernel.org
+---
+ mm/zsmalloc.c |   33 ++++++++++++++++-----------------
+ 1 file changed, 16 insertions(+), 17 deletions(-)
+
+--- a/mm/zsmalloc.c
++++ b/mm/zsmalloc.c
+@@ -877,13 +877,21 @@ static unsigned long handle_to_obj(unsig
+ 	return *(unsigned long *)handle;
+ }
+ 
+-static unsigned long obj_to_head(struct page *page, void *obj)
++static bool obj_allocated(struct page *page, void *obj, unsigned long *phandle)
+ {
++	unsigned long handle;
++
+ 	if (unlikely(PageHugeObject(page))) {
+ 		VM_BUG_ON_PAGE(!is_first_page(page), page);
+-		return page->index;
++		handle = page->index;
+ 	} else
+-		return *(unsigned long *)obj;
++		handle = *(unsigned long *)obj;
++
++	if (!(handle & OBJ_ALLOCATED_TAG))
++		return false;
++
++	*phandle = handle & ~OBJ_ALLOCATED_TAG;
++	return true;
+ }
+ 
+ static inline int testpin_tag(unsigned long handle)
+@@ -1606,7 +1614,6 @@ static void zs_object_copy(struct size_c
+ static unsigned long find_alloced_obj(struct size_class *class,
+ 					struct page *page, int *obj_idx)
+ {
+-	unsigned long head;
+ 	int offset = 0;
+ 	int index = *obj_idx;
+ 	unsigned long handle = 0;
+@@ -1616,9 +1623,7 @@ static unsigned long find_alloced_obj(st
+ 	offset += class->size * index;
+ 
+ 	while (offset < PAGE_SIZE) {
+-		head = obj_to_head(page, addr + offset);
+-		if (head & OBJ_ALLOCATED_TAG) {
+-			handle = head & ~OBJ_ALLOCATED_TAG;
++		if (obj_allocated(page, addr + offset, &handle)) {
+ 			if (trypin_tag(handle))
+ 				break;
+ 			handle = 0;
+@@ -1928,7 +1933,7 @@ static int zs_page_migrate(struct addres
+ 	struct page *dummy;
+ 	void *s_addr, *d_addr, *addr;
+ 	int offset, pos;
+-	unsigned long handle, head;
++	unsigned long handle;
+ 	unsigned long old_obj, new_obj;
+ 	unsigned int obj_idx;
+ 	int ret = -EAGAIN;
+@@ -1964,9 +1969,7 @@ static int zs_page_migrate(struct addres
+ 	pos = offset;
+ 	s_addr = kmap_atomic(page);
+ 	while (pos < PAGE_SIZE) {
+-		head = obj_to_head(page, s_addr + pos);
+-		if (head & OBJ_ALLOCATED_TAG) {
+-			handle = head & ~OBJ_ALLOCATED_TAG;
++		if (obj_allocated(page, s_addr + pos, &handle)) {
+ 			if (!trypin_tag(handle))
+ 				goto unpin_objects;
+ 		}
+@@ -1982,9 +1985,7 @@ static int zs_page_migrate(struct addres
+ 
+ 	for (addr = s_addr + offset; addr < s_addr + pos;
+ 					addr += class->size) {
+-		head = obj_to_head(page, addr);
+-		if (head & OBJ_ALLOCATED_TAG) {
+-			handle = head & ~OBJ_ALLOCATED_TAG;
++		if (obj_allocated(page, addr, &handle)) {
+ 			BUG_ON(!testpin_tag(handle));
+ 
+ 			old_obj = handle_to_obj(handle);
+@@ -2029,9 +2030,7 @@ static int zs_page_migrate(struct addres
+ unpin_objects:
+ 	for (addr = s_addr + offset; addr < s_addr + pos;
+ 						addr += class->size) {
+-		head = obj_to_head(page, addr);
+-		if (head & OBJ_ALLOCATED_TAG) {
+-			handle = head & ~OBJ_ALLOCATED_TAG;
++		if (obj_allocated(page, addr, &handle)) {
+ 			BUG_ON(!testpin_tag(handle));
+ 			unpin_tag(handle);
+ 		}
diff --git a/debian/patches-rt/0005-drm-i915-Don-t-check-for-atomic-context-on-PREEMPT_R.patch b/debian/patches-rt/0005-drm-i915-Don-t-check-for-atomic-context-on-PREEMPT_R.patch
new file mode 100644
index 000000000000..d9d8015ac4a5
--- /dev/null
+++ b/debian/patches-rt/0005-drm-i915-Don-t-check-for-atomic-context-on-PREEMPT_R.patch
@@ -0,0 +1,30 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Mon, 25 Oct 2021 15:05:18 +0200
+Subject: [PATCH 05/10] drm/i915: Don't check for atomic context on PREEMPT_RT
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The !in_atomic() check in _wait_for_atomic() triggers on PREEMPT_RT
+because the uncore::lock is a spinlock_t and does not disable
+preemption or interrupts.
+
+Changing the uncore:lock to a raw_spinlock_t doubles the worst case
+latency on an otherwise idle testbox during testing. Therefore I'm
+currently unsure about changing this.
+
+Link: https://lore.kernel.org/all/20211006164628.s2mtsdd2jdbfyf7g@linutronix.de/
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ drivers/gpu/drm/i915/i915_utils.h |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/drivers/gpu/drm/i915/i915_utils.h
++++ b/drivers/gpu/drm/i915/i915_utils.h
+@@ -344,7 +344,7 @@ wait_remaining_ms_from_jiffies(unsigned
+ #define wait_for(COND, MS)		_wait_for((COND), (MS) * 1000, 10, 1000)
+ 
+ /* If CONFIG_PREEMPT_COUNT is disabled, in_atomic() always reports false. */
+-#if defined(CONFIG_DRM_I915_DEBUG) && defined(CONFIG_PREEMPT_COUNT)
++#if defined(CONFIG_DRM_I915_DEBUG) && defined(CONFIG_PREEMPT_COUNT) && !defined(CONFIG_PREEMPT_RT)
+ # define _WAIT_FOR_ATOMIC_CHECK(ATOMIC) WARN_ON_ONCE((ATOMIC) && !in_atomic())
+ #else
+ # define _WAIT_FOR_ATOMIC_CHECK(ATOMIC) do { } while (0)
diff --git a/debian/patches-rt/0005-lockdep-Make-it-RT-aware.patch b/debian/patches-rt/0005-lockdep-Make-it-RT-aware.patch
new file mode 100644
index 000000000000..9306d8eba0ec
--- /dev/null
+++ b/debian/patches-rt/0005-lockdep-Make-it-RT-aware.patch
@@ -0,0 +1,80 @@
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Sun, 17 Jul 2011 18:51:23 +0200
+Subject: [PATCH 05/10] lockdep: Make it RT aware
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+There is not really a softirq context on PREEMPT_RT.
+Softirqs on PREEMPT_RT are always invoked within the context of a threaded
+interrupt handler or within ksoftirqd. The "in-softirq" context is preemptible
+and is protected by a per-CPU lock to ensure mutual exclusion.
+
+There is no difference on PREEMPT_RT between spin_lock_irq() and spin_lock()
+because the former does not disable interrupts. Therefore if lock is used
+in_softirq() and locked once with spin_lock_irq() then lockdep will report this
+with "inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage".
+
+Teach lockdep that we don't really do softirqs on -RT.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+---
+ include/linux/irqflags.h |   23 +++++++++++++++--------
+ kernel/locking/lockdep.c |    2 ++
+ 2 files changed, 17 insertions(+), 8 deletions(-)
+
+--- a/include/linux/irqflags.h
++++ b/include/linux/irqflags.h
+@@ -71,14 +71,6 @@ do {						\
+ do {						\
+ 	__this_cpu_dec(hardirq_context);	\
+ } while (0)
+-# define lockdep_softirq_enter()		\
+-do {						\
+-	current->softirq_context++;		\
+-} while (0)
+-# define lockdep_softirq_exit()			\
+-do {						\
+-	current->softirq_context--;		\
+-} while (0)
+ 
+ # define lockdep_hrtimer_enter(__hrtimer)		\
+ ({							\
+@@ -140,6 +132,21 @@ do {						\
+ # define lockdep_irq_work_exit(__work)		do { } while (0)
+ #endif
+ 
++#if defined(CONFIG_TRACE_IRQFLAGS) && !defined(CONFIG_PREEMPT_RT)
++# define lockdep_softirq_enter()		\
++do {						\
++	current->softirq_context++;		\
++} while (0)
++# define lockdep_softirq_exit()			\
++do {						\
++	current->softirq_context--;		\
++} while (0)
++
++#else
++# define lockdep_softirq_enter()		do { } while (0)
++# define lockdep_softirq_exit()			do { } while (0)
++#endif
++
+ #if defined(CONFIG_IRQSOFF_TRACER) || \
+ 	defined(CONFIG_PREEMPT_TRACER)
+  extern void stop_critical_timings(void);
+--- a/kernel/locking/lockdep.c
++++ b/kernel/locking/lockdep.c
+@@ -5485,6 +5485,7 @@ static noinstr void check_flags(unsigned
+ 		}
+ 	}
+ 
++#ifndef CONFIG_PREEMPT_RT
+ 	/*
+ 	 * We dont accurately track softirq state in e.g.
+ 	 * hardirq contexts (such as on 4KSTACKS), so only
+@@ -5499,6 +5500,7 @@ static noinstr void check_flags(unsigned
+ 			DEBUG_LOCKS_WARN_ON(!current->softirqs_enabled);
+ 		}
+ 	}
++#endif
+ 
+ 	if (!debug_locks)
+ 		print_irqtrace_events(current);
diff --git a/debian/patches-rt/0005_kernel_fork_move_memcg_charge_kernel_stack_into_config_vmap_stack.patch b/debian/patches-rt/0005_kernel_fork_move_memcg_charge_kernel_stack_into_config_vmap_stack.patch
new file mode 100644
index 000000000000..85aca1a36730
--- /dev/null
+++ b/debian/patches-rt/0005_kernel_fork_move_memcg_charge_kernel_stack_into_config_vmap_stack.patch
@@ -0,0 +1,122 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Subject: kernel/fork: Move memcg_charge_kernel_stack() into CONFIG_VMAP_STACK.
+Date: Thu, 18 Nov 2021 15:34:49 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+memcg_charge_kernel_stack() is only used in the CONFIG_VMAP_STACK case.
+
+Move memcg_charge_kernel_stack() into the CONFIG_VMAP_STACK block and
+invoke it from within alloc_thread_stack_node().
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211118143452.136421-6-bigeasy@linutronix.de
+---
+ kernel/fork.c |   69 ++++++++++++++++++++++++++++++----------------------------
+ 1 file changed, 36 insertions(+), 33 deletions(-)
+
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -210,6 +210,32 @@ static int free_vm_stack_cache(unsigned
+ 	return 0;
+ }
+ 
++static int memcg_charge_kernel_stack(struct task_struct *tsk)
++{
++	struct vm_struct *vm = task_stack_vm_area(tsk);
++	int i;
++	int ret;
++
++	BUILD_BUG_ON(IS_ENABLED(CONFIG_VMAP_STACK) && PAGE_SIZE % 1024 != 0);
++	BUG_ON(vm->nr_pages != THREAD_SIZE / PAGE_SIZE);
++
++	for (i = 0; i < THREAD_SIZE / PAGE_SIZE; i++) {
++		ret = memcg_kmem_charge_page(vm->pages[i], GFP_KERNEL, 0);
++		if (ret)
++			goto err;
++	}
++	return 0;
++err:
++	/*
++	 * If memcg_kmem_charge_page() fails, page's memory cgroup pointer is
++	 * NULL, and memcg_kmem_uncharge_page() in free_thread_stack() will
++	 * ignore this page.
++	 */
++	for (i = 0; i < THREAD_SIZE / PAGE_SIZE; i++)
++		memcg_kmem_uncharge_page(vm->pages[i], 0);
++	return ret;
++}
++
+ static int alloc_thread_stack_node(struct task_struct *tsk, int node)
+ {
+ 	void *stack;
+@@ -229,6 +255,11 @@ static int alloc_thread_stack_node(struc
+ 		/* Clear stale pointers from reused stack. */
+ 		memset(s->addr, 0, THREAD_SIZE);
+ 
++		if (memcg_charge_kernel_stack(tsk)) {
++			vfree(s->addr);
++			return -ENOMEM;
++		}
++
+ 		tsk->stack_vm_area = s;
+ 		tsk->stack = s->addr;
+ 		return 0;
+@@ -246,6 +277,11 @@ static int alloc_thread_stack_node(struc
+ 				     0, node, __builtin_return_address(0));
+ 	if (!stack)
+ 		return -ENOMEM;
++
++	if (memcg_charge_kernel_stack(tsk)) {
++		vfree(stack);
++		return -ENOMEM;
++	}
+ 	/*
+ 	 * We can't call find_vm_area() in interrupt context, and
+ 	 * free_thread_stack() can be called in interrupt context,
+@@ -414,36 +450,6 @@ static void account_kernel_stack(struct
+ 	}
+ }
+ 
+-static int memcg_charge_kernel_stack(struct task_struct *tsk)
+-{
+-#ifdef CONFIG_VMAP_STACK
+-	struct vm_struct *vm = task_stack_vm_area(tsk);
+-	int ret;
+-
+-	BUILD_BUG_ON(IS_ENABLED(CONFIG_VMAP_STACK) && PAGE_SIZE % 1024 != 0);
+-
+-	if (vm) {
+-		int i;
+-
+-		BUG_ON(vm->nr_pages != THREAD_SIZE / PAGE_SIZE);
+-
+-		for (i = 0; i < THREAD_SIZE / PAGE_SIZE; i++) {
+-			/*
+-			 * If memcg_kmem_charge_page() fails, page's
+-			 * memory cgroup pointer is NULL, and
+-			 * memcg_kmem_uncharge_page() in free_thread_stack()
+-			 * will ignore this page.
+-			 */
+-			ret = memcg_kmem_charge_page(vm->pages[i], GFP_KERNEL,
+-						     0);
+-			if (ret)
+-				return ret;
+-		}
+-	}
+-#endif
+-	return 0;
+-}
+-
+ static void release_task_stack(struct task_struct *tsk)
+ {
+ 	if (WARN_ON(READ_ONCE(tsk->__state) != TASK_DEAD))
+@@ -907,9 +913,6 @@ static struct task_struct *dup_task_stru
+ 	if (err)
+ 		goto free_tsk;
+ 
+-	if (memcg_charge_kernel_stack(tsk))
+-		goto free_stack;
+-
+ #ifdef CONFIG_THREAD_INFO_IN_TASK
+ 	refcount_set(&tsk->stack_refcount, 1);
+ #endif
diff --git a/debian/patches-rt/0005_zsmalloc_move_huge_compressed_obj_from_page_to_zspage.patch b/debian/patches-rt/0005_zsmalloc_move_huge_compressed_obj_from_page_to_zspage.patch
new file mode 100644
index 000000000000..1d5de6c14b0f
--- /dev/null
+++ b/debian/patches-rt/0005_zsmalloc_move_huge_compressed_obj_from_page_to_zspage.patch
@@ -0,0 +1,151 @@
+From: Minchan Kim <minchan@kernel.org>
+Subject: zsmalloc: move huge compressed obj from page to zspage
+Date: Mon, 15 Nov 2021 10:59:05 -0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+the flag aims for zspage, not per page. Let's move it to zspage.
+
+Signed-off-by: Minchan Kim <minchan@kernel.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211115185909.3949505-6-minchan@kernel.org
+---
+ mm/zsmalloc.c |   50 ++++++++++++++++++++++++++------------------------
+ 1 file changed, 26 insertions(+), 24 deletions(-)
+
+--- a/mm/zsmalloc.c
++++ b/mm/zsmalloc.c
+@@ -121,6 +121,7 @@
+ #define OBJ_INDEX_BITS	(BITS_PER_LONG - _PFN_BITS - OBJ_TAG_BITS)
+ #define OBJ_INDEX_MASK	((_AC(1, UL) << OBJ_INDEX_BITS) - 1)
+ 
++#define HUGE_BITS	1
+ #define FULLNESS_BITS	2
+ #define CLASS_BITS	8
+ #define ISOLATED_BITS	3
+@@ -213,22 +214,6 @@ struct size_class {
+ 	struct zs_size_stat stats;
+ };
+ 
+-/* huge object: pages_per_zspage == 1 && maxobj_per_zspage == 1 */
+-static void SetPageHugeObject(struct page *page)
+-{
+-	SetPageOwnerPriv1(page);
+-}
+-
+-static void ClearPageHugeObject(struct page *page)
+-{
+-	ClearPageOwnerPriv1(page);
+-}
+-
+-static int PageHugeObject(struct page *page)
+-{
+-	return PageOwnerPriv1(page);
+-}
+-
+ /*
+  * Placed within free objects to form a singly linked list.
+  * For every zspage, zspage->freeobj gives head of this list.
+@@ -278,6 +263,7 @@ struct zs_pool {
+ 
+ struct zspage {
+ 	struct {
++		unsigned int huge:HUGE_BITS;
+ 		unsigned int fullness:FULLNESS_BITS;
+ 		unsigned int class:CLASS_BITS + 1;
+ 		unsigned int isolated:ISOLATED_BITS;
+@@ -298,6 +284,17 @@ struct mapping_area {
+ 	enum zs_mapmode vm_mm; /* mapping mode */
+ };
+ 
++/* huge object: pages_per_zspage == 1 && maxobj_per_zspage == 1 */
++static void SetZsHugePage(struct zspage *zspage)
++{
++	zspage->huge = 1;
++}
++
++static bool ZsHugePage(struct zspage *zspage)
++{
++	return zspage->huge;
++}
++
+ #ifdef CONFIG_COMPACTION
+ static int zs_register_migration(struct zs_pool *pool);
+ static void zs_unregister_migration(struct zs_pool *pool);
+@@ -830,7 +827,9 @@ static struct zspage *get_zspage(struct
+ 
+ static struct page *get_next_page(struct page *page)
+ {
+-	if (unlikely(PageHugeObject(page)))
++	struct zspage *zspage = get_zspage(page);
++
++	if (unlikely(ZsHugePage(zspage)))
+ 		return NULL;
+ 
+ 	return page->freelist;
+@@ -880,8 +879,9 @@ static unsigned long handle_to_obj(unsig
+ static bool obj_allocated(struct page *page, void *obj, unsigned long *phandle)
+ {
+ 	unsigned long handle;
++	struct zspage *zspage = get_zspage(page);
+ 
+-	if (unlikely(PageHugeObject(page))) {
++	if (unlikely(ZsHugePage(zspage))) {
+ 		VM_BUG_ON_PAGE(!is_first_page(page), page);
+ 		handle = page->index;
+ 	} else
+@@ -920,7 +920,6 @@ static void reset_page(struct page *page
+ 	ClearPagePrivate(page);
+ 	set_page_private(page, 0);
+ 	page_mapcount_reset(page);
+-	ClearPageHugeObject(page);
+ 	page->freelist = NULL;
+ }
+ 
+@@ -1062,7 +1061,7 @@ static void create_page_chain(struct siz
+ 			SetPagePrivate(page);
+ 			if (unlikely(class->objs_per_zspage == 1 &&
+ 					class->pages_per_zspage == 1))
+-				SetPageHugeObject(page);
++				SetZsHugePage(zspage);
+ 		} else {
+ 			prev_page->freelist = page;
+ 		}
+@@ -1307,7 +1306,7 @@ void *zs_map_object(struct zs_pool *pool
+ 
+ 	ret = __zs_map_object(area, pages, off, class->size);
+ out:
+-	if (likely(!PageHugeObject(page)))
++	if (likely(!ZsHugePage(zspage)))
+ 		ret += ZS_HANDLE_SIZE;
+ 
+ 	return ret;
+@@ -1395,7 +1394,7 @@ static unsigned long obj_malloc(struct z
+ 	vaddr = kmap_atomic(m_page);
+ 	link = (struct link_free *)vaddr + m_offset / sizeof(*link);
+ 	set_freeobj(zspage, link->next >> OBJ_TAG_BITS);
+-	if (likely(!PageHugeObject(m_page)))
++	if (likely(!ZsHugePage(zspage)))
+ 		/* record handle in the header of allocated chunk */
+ 		link->handle = handle;
+ 	else
+@@ -1496,7 +1495,10 @@ static void obj_free(int class_size, uns
+ 
+ 	/* Insert this object in containing zspage's freelist */
+ 	link = (struct link_free *)(vaddr + f_offset);
+-	link->next = get_freeobj(zspage) << OBJ_TAG_BITS;
++	if (likely(!ZsHugePage(zspage)))
++		link->next = get_freeobj(zspage) << OBJ_TAG_BITS;
++	else
++		f_page->index = 0;
+ 	kunmap_atomic(vaddr);
+ 	set_freeobj(zspage, f_objidx);
+ 	mod_zspage_inuse(zspage, -1);
+@@ -1867,7 +1869,7 @@ static void replace_sub_page(struct size
+ 
+ 	create_page_chain(class, zspage, pages);
+ 	set_first_obj_offset(newpage, get_first_obj_offset(oldpage));
+-	if (unlikely(PageHugeObject(oldpage)))
++	if (unlikely(ZsHugePage(zspage)))
+ 		newpage->index = oldpage->index;
+ 	__SetPageMovable(newpage, page_mapping(oldpage));
+ }
diff --git a/debian/patches-rt/0006-drm-i915-Disable-tracing-points-on-PREEMPT_RT.patch b/debian/patches-rt/0006-drm-i915-Disable-tracing-points-on-PREEMPT_RT.patch
new file mode 100644
index 000000000000..000cf015bd6d
--- /dev/null
+++ b/debian/patches-rt/0006-drm-i915-Disable-tracing-points-on-PREEMPT_RT.patch
@@ -0,0 +1,45 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 6 Dec 2018 09:52:20 +0100
+Subject: [PATCH 06/10] drm/i915: Disable tracing points on PREEMPT_RT
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Luca Abeni reported this:
+| BUG: scheduling while atomic: kworker/u8:2/15203/0x00000003
+| CPU: 1 PID: 15203 Comm: kworker/u8:2 Not tainted 4.19.1-rt3 #10
+| Call Trace:
+|  rt_spin_lock+0x3f/0x50
+|  gen6_read32+0x45/0x1d0 [i915]
+|  g4x_get_vblank_counter+0x36/0x40 [i915]
+|  trace_event_raw_event_i915_pipe_update_start+0x7d/0xf0 [i915]
+
+The tracing events use trace_i915_pipe_update_start() among other events
+use functions acquire spinlock_t locks which are transformed into
+sleeping locks on PREEMPT_RT. A few trace points use
+intel_get_crtc_scanline(), others use ->get_vblank_counter() wich also
+might acquire a sleeping locks on PREEMPT_RT.
+At the time the arguments are evaluated within trace point, preemption
+is disabled and so the locks must not be acquired on PREEMPT_RT.
+
+Based on this I don't see any other way than disable trace points on
+PREMPT_RT.
+
+Reported-by: Luca Abeni <lucabe72@gmail.com>
+Cc: Steven Rostedt <rostedt@goodmis.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ drivers/gpu/drm/i915/i915_trace.h |    4 ++++
+ 1 file changed, 4 insertions(+)
+
+--- a/drivers/gpu/drm/i915/i915_trace.h
++++ b/drivers/gpu/drm/i915/i915_trace.h
+@@ -2,6 +2,10 @@
+ #if !defined(_I915_TRACE_H_) || defined(TRACE_HEADER_MULTI_READ)
+ #define _I915_TRACE_H_
+ 
++#ifdef CONFIG_PREEMPT_RT
++#define NOTRACE
++#endif
++
+ #include <linux/stringify.h>
+ #include <linux/types.h>
+ #include <linux/tracepoint.h>
diff --git a/debian/patches-rt/0006-lockdep-selftests-Add-rtmutex-to-the-last-column.patch b/debian/patches-rt/0006-lockdep-selftests-Add-rtmutex-to-the-last-column.patch
new file mode 100644
index 000000000000..794e87bb6c05
--- /dev/null
+++ b/debian/patches-rt/0006-lockdep-selftests-Add-rtmutex-to-the-last-column.patch
@@ -0,0 +1,24 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 12 Aug 2021 16:16:54 +0200
+Subject: [PATCH 06/10] lockdep/selftests: Add rtmutex to the last column
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The last column contains the results for the rtmutex tests.
+Add it.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ lib/locking-selftest.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/lib/locking-selftest.c
++++ b/lib/locking-selftest.c
+@@ -2812,7 +2812,7 @@ void locking_selftest(void)
+ 	printk("------------------------\n");
+ 	printk("| Locking API testsuite:\n");
+ 	printk("----------------------------------------------------------------------------\n");
+-	printk("                                 | spin |wlock |rlock |mutex | wsem | rsem |\n");
++	printk("                                 | spin |wlock |rlock |mutex | wsem | rsem |rtmutex\n");
+ 	printk("  --------------------------------------------------------------------------\n");
+ 
+ 	init_shared_classes();
diff --git a/debian/patches-rt/0006_kernel_fork_move_task_stack_account_to_do_exit.patch b/debian/patches-rt/0006_kernel_fork_move_task_stack_account_to_do_exit.patch
new file mode 100644
index 000000000000..6cac1c92de1d
--- /dev/null
+++ b/debian/patches-rt/0006_kernel_fork_move_task_stack_account_to_do_exit.patch
@@ -0,0 +1,164 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Subject: kernel/fork: Move task stack account to do_exit().
+Date: Thu, 18 Nov 2021 15:34:50 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+There is no need to perform the stack accounting of the outgoing task in
+its final schedule() invocation which happens with disabled preemption.
+The task is leaving, the resources will be freed and the accounting can
+happen in do_exit() before the actual schedule invocation which
+frees the stack memory.
+
+Move the accounting of the stack memory from release_task_stack() to
+exit_task_stack_account() which then can be invoked from do_exit().
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211118143452.136421-7-bigeasy@linutronix.de
+---
+ include/linux/sched/task_stack.h |    2 ++
+ kernel/exit.c                    |    1 +
+ kernel/fork.c                    |   35 +++++++++++++++++++++++------------
+ 3 files changed, 26 insertions(+), 12 deletions(-)
+
+--- a/include/linux/sched/task_stack.h
++++ b/include/linux/sched/task_stack.h
+@@ -79,6 +79,8 @@ static inline void *try_get_task_stack(s
+ static inline void put_task_stack(struct task_struct *tsk) {}
+ #endif
+ 
++void exit_task_stack_account(struct task_struct *tsk);
++
+ #define task_stack_end_corrupted(task) \
+ 		(*(end_of_stack(task)) != STACK_END_MAGIC)
+ 
+--- a/kernel/exit.c
++++ b/kernel/exit.c
+@@ -871,6 +871,7 @@ void __noreturn do_exit(long code)
+ 		put_page(tsk->task_frag.page);
+ 
+ 	validate_creds_for_do_exit(tsk);
++	exit_task_stack_account(tsk);
+ 
+ 	check_stack_usage();
+ 	preempt_disable();
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -210,9 +210,8 @@ static int free_vm_stack_cache(unsigned
+ 	return 0;
+ }
+ 
+-static int memcg_charge_kernel_stack(struct task_struct *tsk)
++static int memcg_charge_kernel_stack(struct vm_struct *vm)
+ {
+-	struct vm_struct *vm = task_stack_vm_area(tsk);
+ 	int i;
+ 	int ret;
+ 
+@@ -238,6 +237,7 @@ static int memcg_charge_kernel_stack(str
+ 
+ static int alloc_thread_stack_node(struct task_struct *tsk, int node)
+ {
++	struct vm_struct *vm;
+ 	void *stack;
+ 	int i;
+ 
+@@ -255,7 +255,7 @@ static int alloc_thread_stack_node(struc
+ 		/* Clear stale pointers from reused stack. */
+ 		memset(s->addr, 0, THREAD_SIZE);
+ 
+-		if (memcg_charge_kernel_stack(tsk)) {
++		if (memcg_charge_kernel_stack(s)) {
+ 			vfree(s->addr);
+ 			return -ENOMEM;
+ 		}
+@@ -278,7 +278,8 @@ static int alloc_thread_stack_node(struc
+ 	if (!stack)
+ 		return -ENOMEM;
+ 
+-	if (memcg_charge_kernel_stack(tsk)) {
++	vm = find_vm_area(stack);
++	if (memcg_charge_kernel_stack(vm)) {
+ 		vfree(stack);
+ 		return -ENOMEM;
+ 	}
+@@ -287,19 +288,15 @@ static int alloc_thread_stack_node(struc
+ 	 * free_thread_stack() can be called in interrupt context,
+ 	 * so cache the vm_struct.
+ 	 */
+-	tsk->stack_vm_area = find_vm_area(stack);
++	tsk->stack_vm_area = vm;
+ 	tsk->stack = stack;
+ 	return 0;
+ }
+ 
+ static void free_thread_stack(struct task_struct *tsk)
+ {
+-	struct vm_struct *vm = task_stack_vm_area(tsk);
+ 	int i;
+ 
+-	for (i = 0; i < THREAD_SIZE / PAGE_SIZE; i++)
+-		memcg_kmem_uncharge_page(vm->pages[i], 0);
+-
+ 	for (i = 0; i < NR_CACHED_STACKS; i++) {
+ 		if (this_cpu_cmpxchg(cached_stacks[i], NULL,
+ 				     tsk->stack_vm_area) != NULL)
+@@ -450,12 +447,25 @@ static void account_kernel_stack(struct
+ 	}
+ }
+ 
++void exit_task_stack_account(struct task_struct *tsk)
++{
++	account_kernel_stack(tsk, -1);
++
++	if (IS_ENABLED(CONFIG_VMAP_STACK)) {
++		struct vm_struct *vm;
++		int i;
++
++		vm = task_stack_vm_area(tsk);
++		for (i = 0; i < THREAD_SIZE / PAGE_SIZE; i++)
++			memcg_kmem_uncharge_page(vm->pages[i], 0);
++	}
++}
++
+ static void release_task_stack(struct task_struct *tsk)
+ {
+ 	if (WARN_ON(READ_ONCE(tsk->__state) != TASK_DEAD))
+ 		return;  /* Better to leak the stack than to free prematurely */
+ 
+-	account_kernel_stack(tsk, -1);
+ 	free_thread_stack(tsk);
+ }
+ 
+@@ -916,6 +926,7 @@ static struct task_struct *dup_task_stru
+ #ifdef CONFIG_THREAD_INFO_IN_TASK
+ 	refcount_set(&tsk->stack_refcount, 1);
+ #endif
++	account_kernel_stack(tsk, 1);
+ 
+ 	err = scs_prepare(tsk, node);
+ 	if (err)
+@@ -959,8 +970,6 @@ static struct task_struct *dup_task_stru
+ 	tsk->wake_q.next = NULL;
+ 	tsk->pf_io_worker = NULL;
+ 
+-	account_kernel_stack(tsk, 1);
+-
+ 	kcov_task_init(tsk);
+ 	kmap_local_fork(tsk);
+ 
+@@ -979,6 +988,7 @@ static struct task_struct *dup_task_stru
+ 	return tsk;
+ 
+ free_stack:
++	exit_task_stack_account(tsk);
+ 	free_thread_stack(tsk);
+ free_tsk:
+ 	free_task_struct(tsk);
+@@ -2475,6 +2485,7 @@ static __latent_entropy struct task_stru
+ 	exit_creds(p);
+ bad_fork_free:
+ 	WRITE_ONCE(p->__state, TASK_DEAD);
++	exit_task_stack_account(p);
+ 	put_task_stack(p);
+ 	delayed_free_task(p);
+ fork_out:
diff --git a/debian/patches-rt/0006_zsmalloc_remove_zspage_isolation_for_migration.patch b/debian/patches-rt/0006_zsmalloc_remove_zspage_isolation_for_migration.patch
new file mode 100644
index 000000000000..fcbea7be46ce
--- /dev/null
+++ b/debian/patches-rt/0006_zsmalloc_remove_zspage_isolation_for_migration.patch
@@ -0,0 +1,310 @@
+From: Minchan Kim <minchan@kernel.org>
+Subject: zsmalloc: remove zspage isolation for migration
+Date: Mon, 15 Nov 2021 10:59:06 -0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+zspage isolation for migration introduced additional exceptions
+to be dealt with since the zspage was isolated from class list.
+The reason why I isolated zspage from class list was to prevent
+race between obj_malloc and page migration via allocating zpage
+from the zspage further. However, it couldn't prevent object
+freeing from zspage so it needed corner case handling.
+
+This patch removes the whole mess. Now, we are fine since
+class->lock and zspage->lock can prevent the race.
+
+Signed-off-by: Minchan Kim <minchan@kernel.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211115185909.3949505-7-minchan@kernel.org
+---
+ mm/zsmalloc.c |  157 ++--------------------------------------------------------
+ 1 file changed, 8 insertions(+), 149 deletions(-)
+
+--- a/mm/zsmalloc.c
++++ b/mm/zsmalloc.c
+@@ -254,10 +254,6 @@ struct zs_pool {
+ #ifdef CONFIG_COMPACTION
+ 	struct inode *inode;
+ 	struct work_struct free_work;
+-	/* A wait queue for when migration races with async_free_zspage() */
+-	struct wait_queue_head migration_wait;
+-	atomic_long_t isolated_pages;
+-	bool destroying;
+ #endif
+ };
+ 
+@@ -454,11 +450,6 @@ MODULE_ALIAS("zpool-zsmalloc");
+ /* per-cpu VM mapping areas for zspage accesses that cross page boundaries */
+ static DEFINE_PER_CPU(struct mapping_area, zs_map_area);
+ 
+-static bool is_zspage_isolated(struct zspage *zspage)
+-{
+-	return zspage->isolated;
+-}
+-
+ static __maybe_unused int is_first_page(struct page *page)
+ {
+ 	return PagePrivate(page);
+@@ -744,7 +735,6 @@ static void remove_zspage(struct size_cl
+ 				enum fullness_group fullness)
+ {
+ 	VM_BUG_ON(list_empty(&class->fullness_list[fullness]));
+-	VM_BUG_ON(is_zspage_isolated(zspage));
+ 
+ 	list_del_init(&zspage->list);
+ 	class_stat_dec(class, fullness, 1);
+@@ -770,13 +760,9 @@ static enum fullness_group fix_fullness_
+ 	if (newfg == currfg)
+ 		goto out;
+ 
+-	if (!is_zspage_isolated(zspage)) {
+-		remove_zspage(class, zspage, currfg);
+-		insert_zspage(class, zspage, newfg);
+-	}
+-
++	remove_zspage(class, zspage, currfg);
++	insert_zspage(class, zspage, newfg);
+ 	set_zspage_mapping(zspage, class_idx, newfg);
+-
+ out:
+ 	return newfg;
+ }
+@@ -1511,7 +1497,6 @@ void zs_free(struct zs_pool *pool, unsig
+ 	unsigned long obj;
+ 	struct size_class *class;
+ 	enum fullness_group fullness;
+-	bool isolated;
+ 
+ 	if (unlikely(!handle))
+ 		return;
+@@ -1533,11 +1518,9 @@ void zs_free(struct zs_pool *pool, unsig
+ 		goto out;
+ 	}
+ 
+-	isolated = is_zspage_isolated(zspage);
+ 	migrate_read_unlock(zspage);
+ 	/* If zspage is isolated, zs_page_putback will free the zspage */
+-	if (likely(!isolated))
+-		free_zspage(pool, class, zspage);
++	free_zspage(pool, class, zspage);
+ out:
+ 
+ 	spin_unlock(&class->lock);
+@@ -1718,7 +1701,6 @@ static struct zspage *isolate_zspage(str
+ 		zspage = list_first_entry_or_null(&class->fullness_list[fg[i]],
+ 							struct zspage, list);
+ 		if (zspage) {
+-			VM_BUG_ON(is_zspage_isolated(zspage));
+ 			remove_zspage(class, zspage, fg[i]);
+ 			return zspage;
+ 		}
+@@ -1739,8 +1721,6 @@ static enum fullness_group putback_zspag
+ {
+ 	enum fullness_group fullness;
+ 
+-	VM_BUG_ON(is_zspage_isolated(zspage));
+-
+ 	fullness = get_fullness_group(class, zspage);
+ 	insert_zspage(class, zspage, fullness);
+ 	set_zspage_mapping(zspage, class->index, fullness);
+@@ -1822,35 +1802,10 @@ static void inc_zspage_isolation(struct
+ 
+ static void dec_zspage_isolation(struct zspage *zspage)
+ {
++	VM_BUG_ON(zspage->isolated == 0);
+ 	zspage->isolated--;
+ }
+ 
+-static void putback_zspage_deferred(struct zs_pool *pool,
+-				    struct size_class *class,
+-				    struct zspage *zspage)
+-{
+-	enum fullness_group fg;
+-
+-	fg = putback_zspage(class, zspage);
+-	if (fg == ZS_EMPTY)
+-		schedule_work(&pool->free_work);
+-
+-}
+-
+-static inline void zs_pool_dec_isolated(struct zs_pool *pool)
+-{
+-	VM_BUG_ON(atomic_long_read(&pool->isolated_pages) <= 0);
+-	atomic_long_dec(&pool->isolated_pages);
+-	/*
+-	 * Checking pool->destroying must happen after atomic_long_dec()
+-	 * for pool->isolated_pages above. Paired with the smp_mb() in
+-	 * zs_unregister_migration().
+-	 */
+-	smp_mb__after_atomic();
+-	if (atomic_long_read(&pool->isolated_pages) == 0 && pool->destroying)
+-		wake_up_all(&pool->migration_wait);
+-}
+-
+ static void replace_sub_page(struct size_class *class, struct zspage *zspage,
+ 				struct page *newpage, struct page *oldpage)
+ {
+@@ -1876,10 +1831,7 @@ static void replace_sub_page(struct size
+ 
+ static bool zs_page_isolate(struct page *page, isolate_mode_t mode)
+ {
+-	struct zs_pool *pool;
+-	struct size_class *class;
+ 	struct zspage *zspage;
+-	struct address_space *mapping;
+ 
+ 	/*
+ 	 * Page is locked so zspage couldn't be destroyed. For detail, look at
+@@ -1889,39 +1841,9 @@ static bool zs_page_isolate(struct page
+ 	VM_BUG_ON_PAGE(PageIsolated(page), page);
+ 
+ 	zspage = get_zspage(page);
+-
+-	mapping = page_mapping(page);
+-	pool = mapping->private_data;
+-
+-	class = zspage_class(pool, zspage);
+-
+-	spin_lock(&class->lock);
+-	if (get_zspage_inuse(zspage) == 0) {
+-		spin_unlock(&class->lock);
+-		return false;
+-	}
+-
+-	/* zspage is isolated for object migration */
+-	if (list_empty(&zspage->list) && !is_zspage_isolated(zspage)) {
+-		spin_unlock(&class->lock);
+-		return false;
+-	}
+-
+-	/*
+-	 * If this is first time isolation for the zspage, isolate zspage from
+-	 * size_class to prevent further object allocation from the zspage.
+-	 */
+-	if (!list_empty(&zspage->list) && !is_zspage_isolated(zspage)) {
+-		enum fullness_group fullness;
+-		unsigned int class_idx;
+-
+-		get_zspage_mapping(zspage, &class_idx, &fullness);
+-		atomic_long_inc(&pool->isolated_pages);
+-		remove_zspage(class, zspage, fullness);
+-	}
+-
++	migrate_write_lock(zspage);
+ 	inc_zspage_isolation(zspage);
+-	spin_unlock(&class->lock);
++	migrate_write_unlock(zspage);
+ 
+ 	return true;
+ }
+@@ -2004,21 +1926,6 @@ static int zs_page_migrate(struct addres
+ 
+ 	dec_zspage_isolation(zspage);
+ 
+-	/*
+-	 * Page migration is done so let's putback isolated zspage to
+-	 * the list if @page is final isolated subpage in the zspage.
+-	 */
+-	if (!is_zspage_isolated(zspage)) {
+-		/*
+-		 * We cannot race with zs_destroy_pool() here because we wait
+-		 * for isolation to hit zero before we start destroying.
+-		 * Also, we ensure that everyone can see pool->destroying before
+-		 * we start waiting.
+-		 */
+-		putback_zspage_deferred(pool, class, zspage);
+-		zs_pool_dec_isolated(pool);
+-	}
+-
+ 	if (page_zone(newpage) != page_zone(page)) {
+ 		dec_zone_page_state(page, NR_ZSPAGES);
+ 		inc_zone_page_state(newpage, NR_ZSPAGES);
+@@ -2046,30 +1953,15 @@ static int zs_page_migrate(struct addres
+ 
+ static void zs_page_putback(struct page *page)
+ {
+-	struct zs_pool *pool;
+-	struct size_class *class;
+-	struct address_space *mapping;
+ 	struct zspage *zspage;
+ 
+ 	VM_BUG_ON_PAGE(!PageMovable(page), page);
+ 	VM_BUG_ON_PAGE(!PageIsolated(page), page);
+ 
+ 	zspage = get_zspage(page);
+-	mapping = page_mapping(page);
+-	pool = mapping->private_data;
+-	class = zspage_class(pool, zspage);
+-
+-	spin_lock(&class->lock);
++	migrate_write_lock(zspage);
+ 	dec_zspage_isolation(zspage);
+-	if (!is_zspage_isolated(zspage)) {
+-		/*
+-		 * Due to page_lock, we cannot free zspage immediately
+-		 * so let's defer.
+-		 */
+-		putback_zspage_deferred(pool, class, zspage);
+-		zs_pool_dec_isolated(pool);
+-	}
+-	spin_unlock(&class->lock);
++	migrate_write_unlock(zspage);
+ }
+ 
+ static const struct address_space_operations zsmalloc_aops = {
+@@ -2091,36 +1983,8 @@ static int zs_register_migration(struct
+ 	return 0;
+ }
+ 
+-static bool pool_isolated_are_drained(struct zs_pool *pool)
+-{
+-	return atomic_long_read(&pool->isolated_pages) == 0;
+-}
+-
+-/* Function for resolving migration */
+-static void wait_for_isolated_drain(struct zs_pool *pool)
+-{
+-
+-	/*
+-	 * We're in the process of destroying the pool, so there are no
+-	 * active allocations. zs_page_isolate() fails for completely free
+-	 * zspages, so we need only wait for the zs_pool's isolated
+-	 * count to hit zero.
+-	 */
+-	wait_event(pool->migration_wait,
+-		   pool_isolated_are_drained(pool));
+-}
+-
+ static void zs_unregister_migration(struct zs_pool *pool)
+ {
+-	pool->destroying = true;
+-	/*
+-	 * We need a memory barrier here to ensure global visibility of
+-	 * pool->destroying. Thus pool->isolated pages will either be 0 in which
+-	 * case we don't care, or it will be > 0 and pool->destroying will
+-	 * ensure that we wake up once isolation hits 0.
+-	 */
+-	smp_mb();
+-	wait_for_isolated_drain(pool); /* This can block */
+ 	flush_work(&pool->free_work);
+ 	iput(pool->inode);
+ }
+@@ -2150,7 +2014,6 @@ static void async_free_zspage(struct wor
+ 		spin_unlock(&class->lock);
+ 	}
+ 
+-
+ 	list_for_each_entry_safe(zspage, tmp, &free_pages, list) {
+ 		list_del(&zspage->list);
+ 		lock_zspage(zspage);
+@@ -2363,10 +2226,6 @@ struct zs_pool *zs_create_pool(const cha
+ 	if (!pool->name)
+ 		goto err;
+ 
+-#ifdef CONFIG_COMPACTION
+-	init_waitqueue_head(&pool->migration_wait);
+-#endif
+-
+ 	if (create_cache(pool))
+ 		goto err;
+ 
diff --git a/debian/patches-rt/0007-drm-i915-skip-DRM_I915_LOW_LEVEL_TRACEPOINTS-with-NO.patch b/debian/patches-rt/0007-drm-i915-skip-DRM_I915_LOW_LEVEL_TRACEPOINTS-with-NO.patch
new file mode 100644
index 000000000000..e5000c00fdd0
--- /dev/null
+++ b/debian/patches-rt/0007-drm-i915-skip-DRM_I915_LOW_LEVEL_TRACEPOINTS-with-NO.patch
@@ -0,0 +1,29 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Wed, 19 Dec 2018 10:47:02 +0100
+Subject: [PATCH 07/10] drm/i915: skip DRM_I915_LOW_LEVEL_TRACEPOINTS with
+ NOTRACE
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The order of the header files is important. If this header file is
+included after tracepoint.h was included then the NOTRACE here becomes a
+nop. Currently this happens for two .c files which use the tracepoitns
+behind DRM_I915_LOW_LEVEL_TRACEPOINTS.
+
+Cc: Steven Rostedt <rostedt@goodmis.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+---
+ drivers/gpu/drm/i915/i915_trace.h |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/drivers/gpu/drm/i915/i915_trace.h
++++ b/drivers/gpu/drm/i915/i915_trace.h
+@@ -823,7 +823,7 @@ DEFINE_EVENT(i915_request, i915_request_
+ 	     TP_ARGS(rq)
+ );
+ 
+-#if defined(CONFIG_DRM_I915_LOW_LEVEL_TRACEPOINTS)
++#if defined(CONFIG_DRM_I915_LOW_LEVEL_TRACEPOINTS) && !defined(NOTRACE)
+ DEFINE_EVENT(i915_request, i915_request_guc_submit,
+ 	     TP_PROTO(struct i915_request *rq),
+ 	     TP_ARGS(rq)
diff --git a/debian/patches-rt/0007-lockdep-selftests-Unbalanced-migrate_disable-rcu_rea.patch b/debian/patches-rt/0007-lockdep-selftests-Unbalanced-migrate_disable-rcu_rea.patch
new file mode 100644
index 000000000000..033e87fe8f27
--- /dev/null
+++ b/debian/patches-rt/0007-lockdep-selftests-Unbalanced-migrate_disable-rcu_rea.patch
@@ -0,0 +1,83 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 12 Aug 2021 14:25:38 +0200
+Subject: [PATCH 07/10] lockdep/selftests: Unbalanced migrate_disable() &
+ rcu_read_lock()
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The tests with unbalanced lock() + unlock() operation leave a modified
+preemption counter behind which is then reset to its original value
+after the test.
+
+The spin_lock() function on PREEMPT_RT does not include a
+preempt_disable() statement but migrate_disable() and read_rcu_lock().
+As a consequence both counter never get back to their original value and
+system explodes later after the selftest.
+In the double-unlock case on PREEMPT_RT, the migrate_disable() and RCU
+code will trigger which should be avoided. These counter should not be
+decremented below their initial value.
+
+Save both counters and bring them back to their original value after the
+test.
+In the double-unlock case, increment both counter in advance to they
+become balanced after the double unlock.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ lib/locking-selftest.c |   26 +++++++++++++++++++++++++-
+ 1 file changed, 25 insertions(+), 1 deletion(-)
+
+--- a/lib/locking-selftest.c
++++ b/lib/locking-selftest.c
+@@ -712,12 +712,18 @@ GENERATE_TESTCASE(ABCDBCDA_rtmutex);
+ 
+ #undef E
+ 
++#ifdef CONFIG_PREEMPT_RT
++# define RT_PREPARE_DBL_UNLOCK()	{ migrate_disable(); rcu_read_lock(); }
++#else
++# define RT_PREPARE_DBL_UNLOCK()
++#endif
+ /*
+  * Double unlock:
+  */
+ #define E()					\
+ 						\
+ 	LOCK(A);				\
++	RT_PREPARE_DBL_UNLOCK();		\
+ 	UNLOCK(A);				\
+ 	UNLOCK(A); /* fail */
+ 
+@@ -1398,7 +1404,13 @@ static int unexpected_testcase_failures;
+ 
+ static void dotest(void (*testcase_fn)(void), int expected, int lockclass_mask)
+ {
+-	unsigned long saved_preempt_count = preempt_count();
++	int saved_preempt_count = preempt_count();
++#ifdef CONFIG_PREEMPT_RT
++#ifdef CONFIG_SMP
++	int saved_mgd_count = current->migration_disabled;
++#endif
++	int saved_rcu_count = current->rcu_read_lock_nesting;
++#endif
+ 
+ 	WARN_ON(irqs_disabled());
+ 
+@@ -1432,6 +1444,18 @@ static void dotest(void (*testcase_fn)(v
+ 	 * count, so restore it:
+ 	 */
+ 	preempt_count_set(saved_preempt_count);
++
++#ifdef CONFIG_PREEMPT_RT
++#ifdef CONFIG_SMP
++	while (current->migration_disabled > saved_mgd_count)
++		migrate_enable();
++#endif
++
++	while (current->rcu_read_lock_nesting > saved_rcu_count)
++		rcu_read_unlock();
++	WARN_ON_ONCE(current->rcu_read_lock_nesting < saved_rcu_count);
++#endif
++
+ #ifdef CONFIG_TRACE_IRQFLAGS
+ 	if (softirq_count())
+ 		current->softirqs_enabled = 0;
diff --git a/debian/patches-rt/0007_kernel_fork_only_cache_the_vmap_stack_in_finish_task_switch.patch b/debian/patches-rt/0007_kernel_fork_only_cache_the_vmap_stack_in_finish_task_switch.patch
new file mode 100644
index 000000000000..3a736777c84d
--- /dev/null
+++ b/debian/patches-rt/0007_kernel_fork_only_cache_the_vmap_stack_in_finish_task_switch.patch
@@ -0,0 +1,231 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Subject: kernel/fork: Only cache the VMAP stack in finish_task_switch().
+Date: Thu, 18 Nov 2021 15:34:51 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The task stack could be deallocated later in delayed_put_task_struct().
+For fork()/exec() kind of workloads (say a shell script executing
+several commands) it is important that the stack is released in
+finish_task_switch() so that in VMAP_STACK case it can be cached and
+reused in the new task.
+If the free/caching is RCU-delayed then a new stack has to be allocated
+because the cache is filled in batches of which only two stacks, out of
+many, are recycled.
+
+For PREEMPT_RT it would be good if the wake-up in vfree_atomic() could
+be avoided in the scheduling path. Far worse are the other
+free_thread_stack() implementations which invoke __free_pages()/
+kmem_cache_free() with disabled preemption.
+
+Introduce put_task_stack_sched() which is invoked from the
+finish_task_switch() and only caches the VMAP stack. If the cache is
+full or !CONFIG_VMAP_STACK is used than the stack is freed from
+delayed_put_task_struct(). In the VMAP case this is another opportunity
+to fill the cache.
+
+The stack is finally released in delayed_put_task_struct() which means
+that a valid stack reference can be held during its invocation. As such
+there can be made no assumption whether the task_struct::stack pointer
+can be freed if non-NULL.
+Set the lowest bit of task_struct::stack if the stack was released via
+put_task_stack_sched() and needs a final free in
+delayed_put_task_struct(). If the bit is missing then a reference is
+held and put_task_stack() will release it.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211118143452.136421-8-bigeasy@linutronix.de
+---
+ include/linux/sched/task_stack.h |    8 +++++
+ kernel/exit.c                    |    1 
+ kernel/fork.c                    |   60 ++++++++++++++++++++++++++++++++-------
+ kernel/sched/core.c              |    7 +++-
+ 4 files changed, 64 insertions(+), 12 deletions(-)
+
+--- a/include/linux/sched/task_stack.h
++++ b/include/linux/sched/task_stack.h
+@@ -70,6 +70,7 @@ static inline void *try_get_task_stack(s
+ }
+ 
+ extern void put_task_stack(struct task_struct *tsk);
++extern void put_task_stack_sched(struct task_struct *tsk);
+ #else
+ static inline void *try_get_task_stack(struct task_struct *tsk)
+ {
+@@ -77,6 +78,13 @@ static inline void *try_get_task_stack(s
+ }
+ 
+ static inline void put_task_stack(struct task_struct *tsk) {}
++static inline void put_task_stack_sched(struct task_struct *tsk) {}
++#endif
++
++#ifdef CONFIG_ARCH_THREAD_STACK_ALLOCATOR
++static inline void task_stack_cleanup(struct task_struct *tsk) {}
++#else
++extern void task_stack_cleanup(struct task_struct *tsk);
+ #endif
+ 
+ void exit_task_stack_account(struct task_struct *tsk);
+--- a/kernel/exit.c
++++ b/kernel/exit.c
+@@ -171,6 +171,7 @@ static void delayed_put_task_struct(stru
+ 	kprobe_flush_task(tsk);
+ 	perf_event_delayed_put(tsk);
+ 	trace_sched_process_free(tsk);
++	task_stack_cleanup(tsk);
+ 	put_task_struct(tsk);
+ }
+ 
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -178,6 +178,16 @@ static inline void free_task_struct(stru
+ 
+ #ifndef CONFIG_ARCH_THREAD_STACK_ALLOCATOR
+ 
++#define THREAD_STACK_DELAYED_FREE	1UL
++
++static void thread_stack_mark_delayed_free(struct task_struct *tsk)
++{
++	unsigned long val = (unsigned long)tsk->stack;
++
++	val |= THREAD_STACK_DELAYED_FREE;
++	WRITE_ONCE(tsk->stack, (void *)val);
++}
++
+ /*
+  * Allocate pages if THREAD_SIZE is >= PAGE_SIZE, otherwise use a
+  * kmemcache based allocator.
+@@ -293,7 +303,7 @@ static int alloc_thread_stack_node(struc
+ 	return 0;
+ }
+ 
+-static void free_thread_stack(struct task_struct *tsk)
++static void free_thread_stack(struct task_struct *tsk, bool cache_only)
+ {
+ 	int i;
+ 
+@@ -306,7 +316,12 @@ static void free_thread_stack(struct tas
+ 		tsk->stack_vm_area = NULL;
+ 		return;
+ 	}
+-	vfree_atomic(tsk->stack);
++	if (cache_only) {
++		thread_stack_mark_delayed_free(tsk);
++		return;
++	}
++
++	vfree(tsk->stack);
+ 	tsk->stack = NULL;
+ 	tsk->stack_vm_area = NULL;
+ }
+@@ -325,8 +340,12 @@ static int alloc_thread_stack_node(struc
+ 	return -ENOMEM;
+ }
+ 
+-static void free_thread_stack(struct task_struct *tsk)
++static void free_thread_stack(struct task_struct *tsk, bool cache_only)
+ {
++	if (cache_only) {
++		thread_stack_mark_delayed_free(tsk);
++		return;
++	}
+ 	__free_pages(virt_to_page(tsk->stack), THREAD_SIZE_ORDER);
+ 	tsk->stack = NULL;
+ }
+@@ -345,8 +364,12 @@ static int alloc_thread_stack_node(struc
+ 	return stack ? 0 : -ENOMEM;
+ }
+ 
+-static void free_thread_stack(struct task_struct *tsk)
++static void free_thread_stack(struct task_struct *tsk, bool cache_only)
+ {
++	if (cache_only) {
++		thread_stack_mark_delayed_free(tsk);
++		return;
++	}
+ 	kmem_cache_free(thread_stack_cache, tsk->stack);
+ 	tsk->stack = NULL;
+ }
+@@ -360,8 +383,19 @@ void thread_stack_cache_init(void)
+ }
+ 
+ # endif /* THREAD_SIZE >= PAGE_SIZE || defined(CONFIG_VMAP_STACK) */
+-#else /* CONFIG_ARCH_THREAD_STACK_ALLOCATOR */
+ 
++void task_stack_cleanup(struct task_struct *tsk)
++{
++	unsigned long val = (unsigned long)tsk->stack;
++
++	if (!(val & THREAD_STACK_DELAYED_FREE))
++		return;
++
++	WRITE_ONCE(tsk->stack, (void *)(val & ~THREAD_STACK_DELAYED_FREE));
++	free_thread_stack(tsk, false);
++}
++
++#else /* CONFIG_ARCH_THREAD_STACK_ALLOCATOR */
+ static int alloc_thread_stack_node(struct task_struct *tsk, int node)
+ {
+ 	unsigned long *stack;
+@@ -461,19 +495,25 @@ void exit_task_stack_account(struct task
+ 	}
+ }
+ 
+-static void release_task_stack(struct task_struct *tsk)
++static void release_task_stack(struct task_struct *tsk, bool cache_only)
+ {
+ 	if (WARN_ON(READ_ONCE(tsk->__state) != TASK_DEAD))
+ 		return;  /* Better to leak the stack than to free prematurely */
+ 
+-	free_thread_stack(tsk);
++	free_thread_stack(tsk, cache_only);
+ }
+ 
+ #ifdef CONFIG_THREAD_INFO_IN_TASK
+ void put_task_stack(struct task_struct *tsk)
+ {
+ 	if (refcount_dec_and_test(&tsk->stack_refcount))
+-		release_task_stack(tsk);
++		release_task_stack(tsk, false);
++}
++
++void put_task_stack_sched(struct task_struct *tsk)
++{
++	if (refcount_dec_and_test(&tsk->stack_refcount))
++		release_task_stack(tsk, true);
+ }
+ #endif
+ 
+@@ -487,7 +527,7 @@ void free_task(struct task_struct *tsk)
+ 	 * The task is finally done with both the stack and thread_info,
+ 	 * so free both.
+ 	 */
+-	release_task_stack(tsk);
++	release_task_stack(tsk, false);
+ #else
+ 	/*
+ 	 * If the task had a separate stack allocation, it should be gone
+@@ -989,7 +1029,7 @@ static struct task_struct *dup_task_stru
+ 
+ free_stack:
+ 	exit_task_stack_account(tsk);
+-	free_thread_stack(tsk);
++	free_thread_stack(tsk, false);
+ free_tsk:
+ 	free_task_struct(tsk);
+ 	return NULL;
+--- a/kernel/sched/core.c
++++ b/kernel/sched/core.c
+@@ -4879,8 +4879,11 @@ static struct rq *finish_task_switch(str
+ 		if (prev->sched_class->task_dead)
+ 			prev->sched_class->task_dead(prev);
+ 
+-		/* Task is done with its stack. */
+-		put_task_stack(prev);
++		/*
++		 * Cache only the VMAP stack. The final deallocation is in
++		 * delayed_put_task_struct.
++		 */
++		put_task_stack_sched(prev);
+ 
+ 		put_task_struct_rcu_user(prev);
+ 	}
diff --git a/debian/patches-rt/0007_locking_rwlocks_introduce_write_lock_nested.patch b/debian/patches-rt/0007_locking_rwlocks_introduce_write_lock_nested.patch
new file mode 100644
index 000000000000..66dbe2458793
--- /dev/null
+++ b/debian/patches-rt/0007_locking_rwlocks_introduce_write_lock_nested.patch
@@ -0,0 +1,147 @@
+From: Minchan Kim <minchan@kernel.org>
+Subject: locking/rwlocks: introduce write_lock_nested
+Date: Mon, 15 Nov 2021 10:59:07 -0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+In preparation for converting bit_spin_lock to rwlock in zsmalloc
+so that multiple writers of zspages can run at the same time but
+those zspages are supposed to be different zspage instance. Thus,
+it's not deadlock. This patch adds write_lock_nested to support
+the case for LOCKDEP.
+
+[bigeasy: folded write_lock_nested() fixups for PREEMPT_RT.]
+
+Cc: Peter Zijlstra (Intel) <peterz@infradead.org>
+Signed-off-by: Minchan Kim <minchan@kernel.org>
+Acked-by: Peter Zijlstra (Intel) <peterz@infradead.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211115185909.3949505-8-minchan@kernel.org
+Link: https://lkml.kernel.org/r/YZfrMTAXV56HFWJY@google.com
+---
+ include/linux/rwlock.h          |    6 ++++++
+ include/linux/rwlock_api_smp.h  |    9 +++++++++
+ include/linux/rwlock_rt.h       |   10 ++++++++++
+ include/linux/spinlock_api_up.h |    1 +
+ kernel/locking/spinlock.c       |    6 ++++++
+ kernel/locking/spinlock_rt.c    |   12 ++++++++++++
+ 6 files changed, 44 insertions(+)
+
+--- a/include/linux/rwlock.h
++++ b/include/linux/rwlock.h
+@@ -55,6 +55,12 @@ do {								\
+ #define write_lock(lock)	_raw_write_lock(lock)
+ #define read_lock(lock)		_raw_read_lock(lock)
+ 
++#ifdef CONFIG_DEBUG_LOCK_ALLOC
++#define write_lock_nested(lock, subclass)	_raw_write_lock_nested(lock, subclass)
++#else
++#define write_lock_nested(lock, subclass)	_raw_write_lock(lock)
++#endif
++
+ #if defined(CONFIG_SMP) || defined(CONFIG_DEBUG_SPINLOCK)
+ 
+ #define read_lock_irqsave(lock, flags)			\
+--- a/include/linux/rwlock_api_smp.h
++++ b/include/linux/rwlock_api_smp.h
+@@ -17,6 +17,7 @@
+ 
+ void __lockfunc _raw_read_lock(rwlock_t *lock)		__acquires(lock);
+ void __lockfunc _raw_write_lock(rwlock_t *lock)		__acquires(lock);
++void __lockfunc _raw_write_lock_nested(rwlock_t *lock, int subclass)	__acquires(lock);
+ void __lockfunc _raw_read_lock_bh(rwlock_t *lock)	__acquires(lock);
+ void __lockfunc _raw_write_lock_bh(rwlock_t *lock)	__acquires(lock);
+ void __lockfunc _raw_read_lock_irq(rwlock_t *lock)	__acquires(lock);
+@@ -46,6 +47,7 @@ void __lockfunc
+ 
+ #ifdef CONFIG_INLINE_WRITE_LOCK
+ #define _raw_write_lock(lock) __raw_write_lock(lock)
++#define _raw_write_lock_nested(lock, subclass) __raw_write_lock_nested(lock, subclass)
+ #endif
+ 
+ #ifdef CONFIG_INLINE_READ_LOCK_BH
+@@ -209,6 +211,13 @@ static inline void __raw_write_lock(rwlo
+ 	LOCK_CONTENDED(lock, do_raw_write_trylock, do_raw_write_lock);
+ }
+ 
++static inline void __raw_write_lock_nested(rwlock_t *lock, int subclass)
++{
++	preempt_disable();
++	rwlock_acquire(&lock->dep_map, subclass, 0, _RET_IP_);
++	LOCK_CONTENDED(lock, do_raw_write_trylock, do_raw_write_lock);
++}
++
+ #endif /* !CONFIG_GENERIC_LOCKBREAK || CONFIG_DEBUG_LOCK_ALLOC */
+ 
+ static inline void __raw_write_unlock(rwlock_t *lock)
+--- a/include/linux/rwlock_rt.h
++++ b/include/linux/rwlock_rt.h
+@@ -28,6 +28,7 @@ extern void rt_read_lock(rwlock_t *rwloc
+ extern int rt_read_trylock(rwlock_t *rwlock);
+ extern void rt_read_unlock(rwlock_t *rwlock);
+ extern void rt_write_lock(rwlock_t *rwlock);
++extern void rt_write_lock_nested(rwlock_t *rwlock, int subclass);
+ extern int rt_write_trylock(rwlock_t *rwlock);
+ extern void rt_write_unlock(rwlock_t *rwlock);
+ 
+@@ -83,6 +84,15 @@ static __always_inline void write_lock(r
+ 	rt_write_lock(rwlock);
+ }
+ 
++#ifdef CONFIG_DEBUG_LOCK_ALLOC
++static __always_inline void write_lock_nested(rwlock_t *rwlock, int subclass)
++{
++	rt_write_lock_nested(rwlock, subclass);
++}
++#else
++#define write_lock_nested(lock, subclass)	rt_write_lock(((void)(subclass), (lock)))
++#endif
++
+ static __always_inline void write_lock_bh(rwlock_t *rwlock)
+ {
+ 	local_bh_disable();
+--- a/include/linux/spinlock_api_up.h
++++ b/include/linux/spinlock_api_up.h
+@@ -59,6 +59,7 @@
+ #define _raw_spin_lock_nested(lock, subclass)	__LOCK(lock)
+ #define _raw_read_lock(lock)			__LOCK(lock)
+ #define _raw_write_lock(lock)			__LOCK(lock)
++#define _raw_write_lock_nested(lock, subclass)	__LOCK(lock)
+ #define _raw_spin_lock_bh(lock)			__LOCK_BH(lock)
+ #define _raw_read_lock_bh(lock)			__LOCK_BH(lock)
+ #define _raw_write_lock_bh(lock)		__LOCK_BH(lock)
+--- a/kernel/locking/spinlock.c
++++ b/kernel/locking/spinlock.c
+@@ -300,6 +300,12 @@ void __lockfunc _raw_write_lock(rwlock_t
+ 	__raw_write_lock(lock);
+ }
+ EXPORT_SYMBOL(_raw_write_lock);
++
++void __lockfunc _raw_write_lock_nested(rwlock_t *lock, int subclass)
++{
++	__raw_write_lock_nested(lock, subclass);
++}
++EXPORT_SYMBOL(_raw_write_lock_nested);
+ #endif
+ 
+ #ifndef CONFIG_INLINE_WRITE_LOCK_IRQSAVE
+--- a/kernel/locking/spinlock_rt.c
++++ b/kernel/locking/spinlock_rt.c
+@@ -239,6 +239,18 @@ void __sched rt_write_lock(rwlock_t *rwl
+ }
+ EXPORT_SYMBOL(rt_write_lock);
+ 
++#ifdef CONFIG_DEBUG_LOCK_ALLOC
++void __sched rt_write_lock_nested(rwlock_t *rwlock, int subclass)
++{
++	rtlock_might_resched();
++	rwlock_acquire(&rwlock->dep_map, subclass, 0, _RET_IP_);
++	rwbase_write_lock(&rwlock->rwbase, TASK_RTLOCK_WAIT);
++	rcu_read_lock();
++	migrate_disable();
++}
++EXPORT_SYMBOL(rt_write_lock_nested);
++#endif
++
+ void __sched rt_read_unlock(rwlock_t *rwlock)
+ {
+ 	rwlock_release(&rwlock->dep_map, _RET_IP_);
diff --git a/debian/patches-rt/0008-drm-i915-gt-Queue-and-wait-for-the-irq_work-item.patch b/debian/patches-rt/0008-drm-i915-gt-Queue-and-wait-for-the-irq_work-item.patch
new file mode 100644
index 000000000000..e72119506a62
--- /dev/null
+++ b/debian/patches-rt/0008-drm-i915-gt-Queue-and-wait-for-the-irq_work-item.patch
@@ -0,0 +1,42 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Wed, 8 Sep 2021 17:18:00 +0200
+Subject: [PATCH 08/10] drm/i915/gt: Queue and wait for the irq_work item.
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Disabling interrupts and invoking the irq_work function directly breaks
+on PREEMPT_RT.
+PREEMPT_RT does not invoke all irq_work from hardirq context because
+some of the user have spinlock_t locking in the callback function.
+These locks are then turned into a sleeping locks which can not be
+acquired with disabled interrupts.
+
+Using irq_work_queue() has the benefit that the irqwork will be invoked
+in the regular context. In general there is "no" delay between enqueuing
+the callback and its invocation because the interrupt is raised right
+away on architectures which support it (which includes x86).
+
+Use irq_work_queue() + irq_work_sync() instead invoking the callback
+directly.
+
+Reported-by: Clark Williams <williams@redhat.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Reviewed-by: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
+---
+ drivers/gpu/drm/i915/gt/intel_breadcrumbs.c |    5 ++---
+ 1 file changed, 2 insertions(+), 3 deletions(-)
+
+--- a/drivers/gpu/drm/i915/gt/intel_breadcrumbs.c
++++ b/drivers/gpu/drm/i915/gt/intel_breadcrumbs.c
+@@ -311,10 +311,9 @@ void __intel_breadcrumbs_park(struct int
+ 	/* Kick the work once more to drain the signalers, and disarm the irq */
+ 	irq_work_sync(&b->irq_work);
+ 	while (READ_ONCE(b->irq_armed) && !atomic_read(&b->active)) {
+-		local_irq_disable();
+-		signal_irq_work(&b->irq_work);
+-		local_irq_enable();
++		irq_work_queue(&b->irq_work);
+ 		cond_resched();
++		irq_work_sync(&b->irq_work);
+ 	}
+ }
+ 
diff --git a/debian/patches-rt/0008-lockdep-selftests-Skip-the-softirq-related-tests-on-.patch b/debian/patches-rt/0008-lockdep-selftests-Skip-the-softirq-related-tests-on-.patch
new file mode 100644
index 000000000000..fe0541bca0c9
--- /dev/null
+++ b/debian/patches-rt/0008-lockdep-selftests-Skip-the-softirq-related-tests-on-.patch
@@ -0,0 +1,218 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 12 Aug 2021 16:02:29 +0200
+Subject: [PATCH 08/10] lockdep/selftests: Skip the softirq related tests on
+ PREEMPT_RT
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The softirq context on PREEMPT_RT is different compared to !PREEMPT_RT.
+As such lockdep_softirq_enter() is a nop and the all the "softirq safe"
+tests fail on PREEMPT_RT because there is no difference.
+
+Skip the softirq context tests on PREEMPT_RT.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ lib/locking-selftest.c |   38 +++++++++++++++++++++++++++++++-------
+ 1 file changed, 31 insertions(+), 7 deletions(-)
+
+--- a/lib/locking-selftest.c
++++ b/lib/locking-selftest.c
+@@ -26,6 +26,12 @@
+ #include <linux/rtmutex.h>
+ #include <linux/local_lock.h>
+ 
++#ifdef CONFIG_PREEMPT_RT
++# define NON_RT(...)
++#else
++# define NON_RT(...)	__VA_ARGS__
++#endif
++
+ /*
+  * Change this to 1 if you want to see the failure printouts:
+  */
+@@ -808,6 +814,7 @@ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe1_
+ #include "locking-selftest-wlock-hardirq.h"
+ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe1_hard_wlock)
+ 
++#ifndef CONFIG_PREEMPT_RT
+ #include "locking-selftest-spin-softirq.h"
+ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe1_soft_spin)
+ 
+@@ -816,10 +823,12 @@ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe1_
+ 
+ #include "locking-selftest-wlock-softirq.h"
+ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe1_soft_wlock)
++#endif
+ 
+ #undef E1
+ #undef E2
+ 
++#ifndef CONFIG_PREEMPT_RT
+ /*
+  * Enabling hardirqs with a softirq-safe lock held:
+  */
+@@ -852,6 +861,8 @@ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe2A
+ #undef E1
+ #undef E2
+ 
++#endif
++
+ /*
+  * Enabling irqs with an irq-safe lock held:
+  */
+@@ -881,6 +892,7 @@ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe2B
+ #include "locking-selftest-wlock-hardirq.h"
+ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe2B_hard_wlock)
+ 
++#ifndef CONFIG_PREEMPT_RT
+ #include "locking-selftest-spin-softirq.h"
+ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe2B_soft_spin)
+ 
+@@ -889,6 +901,7 @@ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe2B
+ 
+ #include "locking-selftest-wlock-softirq.h"
+ GENERATE_PERMUTATIONS_2_EVENTS(irqsafe2B_soft_wlock)
++#endif
+ 
+ #undef E1
+ #undef E2
+@@ -927,6 +940,7 @@ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe3_
+ #include "locking-selftest-wlock-hardirq.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe3_hard_wlock)
+ 
++#ifndef CONFIG_PREEMPT_RT
+ #include "locking-selftest-spin-softirq.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe3_soft_spin)
+ 
+@@ -935,6 +949,7 @@ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe3_
+ 
+ #include "locking-selftest-wlock-softirq.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe3_soft_wlock)
++#endif
+ 
+ #undef E1
+ #undef E2
+@@ -975,6 +990,7 @@ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe4_
+ #include "locking-selftest-wlock-hardirq.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe4_hard_wlock)
+ 
++#ifndef CONFIG_PREEMPT_RT
+ #include "locking-selftest-spin-softirq.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe4_soft_spin)
+ 
+@@ -983,6 +999,7 @@ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe4_
+ 
+ #include "locking-selftest-wlock-softirq.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irqsafe4_soft_wlock)
++#endif
+ 
+ #undef E1
+ #undef E2
+@@ -1037,6 +1054,7 @@ GENERATE_PERMUTATIONS_3_EVENTS(irq_inver
+ #include "locking-selftest-wlock-hardirq.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_inversion_hard_wlock)
+ 
++#ifndef CONFIG_PREEMPT_RT
+ #include "locking-selftest-spin-softirq.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_inversion_soft_spin)
+ 
+@@ -1045,6 +1063,7 @@ GENERATE_PERMUTATIONS_3_EVENTS(irq_inver
+ 
+ #include "locking-selftest-wlock-softirq.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_inversion_soft_wlock)
++#endif
+ 
+ #undef E1
+ #undef E2
+@@ -1212,12 +1231,14 @@ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_
+ #include "locking-selftest-wlock.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_recursion_hard_wlock)
+ 
++#ifndef CONFIG_PREEMPT_RT
+ #include "locking-selftest-softirq.h"
+ #include "locking-selftest-rlock.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_recursion_soft_rlock)
+ 
+ #include "locking-selftest-wlock.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_recursion_soft_wlock)
++#endif
+ 
+ #undef E1
+ #undef E2
+@@ -1258,12 +1279,14 @@ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_
+ #include "locking-selftest-wlock.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_recursion2_hard_wlock)
+ 
++#ifndef CONFIG_PREEMPT_RT
+ #include "locking-selftest-softirq.h"
+ #include "locking-selftest-rlock.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_recursion2_soft_rlock)
+ 
+ #include "locking-selftest-wlock.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_recursion2_soft_wlock)
++#endif
+ 
+ #undef E1
+ #undef E2
+@@ -1312,12 +1335,14 @@ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_
+ #include "locking-selftest-wlock.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_recursion3_hard_wlock)
+ 
++#ifndef CONFIG_PREEMPT_RT
+ #include "locking-selftest-softirq.h"
+ #include "locking-selftest-rlock.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_recursion3_soft_rlock)
+ 
+ #include "locking-selftest-wlock.h"
+ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_recursion3_soft_wlock)
++#endif
+ 
+ #ifdef CONFIG_DEBUG_LOCK_ALLOC
+ # define I_SPINLOCK(x)	lockdep_reset_lock(&lock_##x.dep_map)
+@@ -1523,7 +1548,7 @@ static inline void print_testname(const
+ 
+ #define DO_TESTCASE_2x2RW(desc, name, nr)			\
+ 	DO_TESTCASE_2RW("hard-"desc, name##_hard, nr)		\
+-	DO_TESTCASE_2RW("soft-"desc, name##_soft, nr)		\
++	NON_RT(DO_TESTCASE_2RW("soft-"desc, name##_soft, nr))	\
+ 
+ #define DO_TESTCASE_6x2x2RW(desc, name)				\
+ 	DO_TESTCASE_2x2RW(desc, name, 123);			\
+@@ -1571,19 +1596,19 @@ static inline void print_testname(const
+ 
+ #define DO_TESTCASE_2I(desc, name, nr)				\
+ 	DO_TESTCASE_1("hard-"desc, name##_hard, nr);		\
+-	DO_TESTCASE_1("soft-"desc, name##_soft, nr);
++	NON_RT(DO_TESTCASE_1("soft-"desc, name##_soft, nr));
+ 
+ #define DO_TESTCASE_2IB(desc, name, nr)				\
+ 	DO_TESTCASE_1B("hard-"desc, name##_hard, nr);		\
+-	DO_TESTCASE_1B("soft-"desc, name##_soft, nr);
++	NON_RT(DO_TESTCASE_1B("soft-"desc, name##_soft, nr));
+ 
+ #define DO_TESTCASE_6I(desc, name, nr)				\
+ 	DO_TESTCASE_3("hard-"desc, name##_hard, nr);		\
+-	DO_TESTCASE_3("soft-"desc, name##_soft, nr);
++	NON_RT(DO_TESTCASE_3("soft-"desc, name##_soft, nr));
+ 
+ #define DO_TESTCASE_6IRW(desc, name, nr)			\
+ 	DO_TESTCASE_3RW("hard-"desc, name##_hard, nr);		\
+-	DO_TESTCASE_3RW("soft-"desc, name##_soft, nr);
++	NON_RT(DO_TESTCASE_3RW("soft-"desc, name##_soft, nr));
+ 
+ #define DO_TESTCASE_2x3(desc, name)				\
+ 	DO_TESTCASE_3(desc, name, 12);				\
+@@ -2909,12 +2934,11 @@ void locking_selftest(void)
+ 	DO_TESTCASE_6x1RR("rlock W1R2/R2R3/W3W1", W1R2_R2R3_W3W1);
+ 
+ 	printk("  --------------------------------------------------------------------------\n");
+-
+ 	/*
+ 	 * irq-context testcases:
+ 	 */
+ 	DO_TESTCASE_2x6("irqs-on + irq-safe-A", irqsafe1);
+-	DO_TESTCASE_2x3("sirq-safe-A => hirqs-on", irqsafe2A);
++	NON_RT(DO_TESTCASE_2x3("sirq-safe-A => hirqs-on", irqsafe2A));
+ 	DO_TESTCASE_2x6("safe-A + irqs-on", irqsafe2B);
+ 	DO_TESTCASE_6x6("safe-A + unsafe-B #1", irqsafe3);
+ 	DO_TESTCASE_6x6("safe-A + unsafe-B #2", irqsafe4);
diff --git a/debian/patches-rt/0008_kernel_fork_use_is_enabled_in_account_kernel_stack.patch b/debian/patches-rt/0008_kernel_fork_use_is_enabled_in_account_kernel_stack.patch
new file mode 100644
index 000000000000..483205f78f22
--- /dev/null
+++ b/debian/patches-rt/0008_kernel_fork_use_is_enabled_in_account_kernel_stack.patch
@@ -0,0 +1,40 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Subject: kernel/fork: Use IS_ENABLED() in account_kernel_stack().
+Date: Thu, 18 Nov 2021 15:34:52 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Not strickly needed but checking CONFIG_VMAP_STACK instead of
+task_stack_vm_area()' result allows the compiler the remove the else
+path in the CONFIG_VMAP_STACK case where the pointer can't be NULL.
+
+Check for CONFIG_VMAP_STACK in order to use the proper path.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211118143452.136421-9-bigeasy@linutronix.de
+---
+ kernel/fork.c |    8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -465,16 +465,16 @@ void vm_area_free(struct vm_area_struct
+ 
+ static void account_kernel_stack(struct task_struct *tsk, int account)
+ {
+-	void *stack = task_stack_page(tsk);
+-	struct vm_struct *vm = task_stack_vm_area(tsk);
+-
+-	if (vm) {
++	if (IS_ENABLED(CONFIG_VMAP_STACK)) {
++		struct vm_struct *vm = task_stack_vm_area(tsk);
+ 		int i;
+ 
+ 		for (i = 0; i < THREAD_SIZE / PAGE_SIZE; i++)
+ 			mod_lruvec_page_state(vm->pages[i], NR_KERNEL_STACK_KB,
+ 					      account * (PAGE_SIZE / 1024));
+ 	} else {
++		void *stack = task_stack_page(tsk);
++
+ 		/* All stack pages are in the same node. */
+ 		mod_lruvec_kmem_state(stack, NR_KERNEL_STACK_KB,
+ 				      account * (THREAD_SIZE / 1024));
diff --git a/debian/patches-rt/0008_zsmalloc_replace_per_zpage_lock_with_pool_migrate_lock.patch b/debian/patches-rt/0008_zsmalloc_replace_per_zpage_lock_with_pool_migrate_lock.patch
new file mode 100644
index 000000000000..14ab4eab1900
--- /dev/null
+++ b/debian/patches-rt/0008_zsmalloc_replace_per_zpage_lock_with_pool_migrate_lock.patch
@@ -0,0 +1,470 @@
+From: Minchan Kim <minchan@kernel.org>
+Subject: zsmalloc: replace per zpage lock with pool->migrate_lock
+Date: Mon, 15 Nov 2021 10:59:08 -0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The zsmalloc has used a bit for spin_lock in zpage handle to keep
+zpage object alive during several operations. However, it causes
+the problem for PREEMPT_RT as well as introducing too complicated.
+
+This patch replaces the bit spin_lock with pool->migrate_lock
+rwlock. It could make the code simple as well as zsmalloc work
+under PREEMPT_RT.
+
+The drawback is the pool->migrate_lock is bigger granuarity than
+per zpage lock so the contention would be higher than old when
+both IO-related operations(i.e., zsmalloc, zsfree, zs_[map|unmap])
+and compaction(page/zpage migration) are going in parallel(*,
+the migrate_lock is rwlock and IO related functions are all read
+side lock so there is no contention). However, the write-side
+is fast enough(dominant overhead is just page copy) so it wouldn't
+affect much. If the lock granurity becomes more problem later,
+we could introduce table locks based on handle as a hash value.
+
+Signed-off-by: Minchan Kim <minchan@kernel.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211115185909.3949505-9-minchan@kernel.org
+---
+ mm/zsmalloc.c |  205 +++++++++++++++++++++++++++-------------------------------
+ 1 file changed, 96 insertions(+), 109 deletions(-)
+
+--- a/mm/zsmalloc.c
++++ b/mm/zsmalloc.c
+@@ -30,6 +30,14 @@
+ 
+ #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+ 
++/*
++ * lock ordering:
++ *	page_lock
++ *	pool->migrate_lock
++ *	class->lock
++ *	zspage->lock
++ */
++
+ #include <linux/module.h>
+ #include <linux/kernel.h>
+ #include <linux/sched.h>
+@@ -101,15 +109,6 @@
+ #define _PFN_BITS		(MAX_POSSIBLE_PHYSMEM_BITS - PAGE_SHIFT)
+ 
+ /*
+- * Memory for allocating for handle keeps object position by
+- * encoding <page, obj_idx> and the encoded value has a room
+- * in least bit(ie, look at obj_to_location).
+- * We use the bit to synchronize between object access by
+- * user and migration.
+- */
+-#define HANDLE_PIN_BIT	0
+-
+-/*
+  * Head in allocated object should have OBJ_ALLOCATED_TAG
+  * to identify the object was allocated or not.
+  * It's okay to add the status bit in the least bit because
+@@ -255,6 +254,8 @@ struct zs_pool {
+ 	struct inode *inode;
+ 	struct work_struct free_work;
+ #endif
++	/* protect page/zspage migration */
++	rwlock_t migrate_lock;
+ };
+ 
+ struct zspage {
+@@ -297,6 +298,9 @@ static void zs_unregister_migration(stru
+ static void migrate_lock_init(struct zspage *zspage);
+ static void migrate_read_lock(struct zspage *zspage);
+ static void migrate_read_unlock(struct zspage *zspage);
++static void migrate_write_lock(struct zspage *zspage);
++static void migrate_write_lock_nested(struct zspage *zspage);
++static void migrate_write_unlock(struct zspage *zspage);
+ static void kick_deferred_free(struct zs_pool *pool);
+ static void init_deferred_free(struct zs_pool *pool);
+ static void SetZsPageMovable(struct zs_pool *pool, struct zspage *zspage);
+@@ -308,6 +312,9 @@ static void zs_unregister_migration(stru
+ static void migrate_lock_init(struct zspage *zspage) {}
+ static void migrate_read_lock(struct zspage *zspage) {}
+ static void migrate_read_unlock(struct zspage *zspage) {}
++static void migrate_write_lock(struct zspage *zspage) {}
++static void migrate_write_lock_nested(struct zspage *zspage) {}
++static void migrate_write_unlock(struct zspage *zspage) {}
+ static void kick_deferred_free(struct zs_pool *pool) {}
+ static void init_deferred_free(struct zs_pool *pool) {}
+ static void SetZsPageMovable(struct zs_pool *pool, struct zspage *zspage) {}
+@@ -359,14 +366,10 @@ static void cache_free_zspage(struct zs_
+ 	kmem_cache_free(pool->zspage_cachep, zspage);
+ }
+ 
++/* class->lock(which owns the handle) synchronizes races */
+ static void record_obj(unsigned long handle, unsigned long obj)
+ {
+-	/*
+-	 * lsb of @obj represents handle lock while other bits
+-	 * represent object value the handle is pointing so
+-	 * updating shouldn't do store tearing.
+-	 */
+-	WRITE_ONCE(*(unsigned long *)handle, obj);
++	*(unsigned long *)handle = obj;
+ }
+ 
+ /* zpool driver */
+@@ -880,26 +883,6 @@ static bool obj_allocated(struct page *p
+ 	return true;
+ }
+ 
+-static inline int testpin_tag(unsigned long handle)
+-{
+-	return bit_spin_is_locked(HANDLE_PIN_BIT, (unsigned long *)handle);
+-}
+-
+-static inline int trypin_tag(unsigned long handle)
+-{
+-	return bit_spin_trylock(HANDLE_PIN_BIT, (unsigned long *)handle);
+-}
+-
+-static void pin_tag(unsigned long handle) __acquires(bitlock)
+-{
+-	bit_spin_lock(HANDLE_PIN_BIT, (unsigned long *)handle);
+-}
+-
+-static void unpin_tag(unsigned long handle) __releases(bitlock)
+-{
+-	bit_spin_unlock(HANDLE_PIN_BIT, (unsigned long *)handle);
+-}
+-
+ static void reset_page(struct page *page)
+ {
+ 	__ClearPageMovable(page);
+@@ -968,6 +951,11 @@ static void free_zspage(struct zs_pool *
+ 	VM_BUG_ON(get_zspage_inuse(zspage));
+ 	VM_BUG_ON(list_empty(&zspage->list));
+ 
++	/*
++	 * Since zs_free couldn't be sleepable, this function cannot call
++	 * lock_page. The page locks trylock_zspage got will be released
++	 * by __free_zspage.
++	 */
+ 	if (!trylock_zspage(zspage)) {
+ 		kick_deferred_free(pool);
+ 		return;
+@@ -1263,15 +1251,20 @@ void *zs_map_object(struct zs_pool *pool
+ 	 */
+ 	BUG_ON(in_interrupt());
+ 
+-	/* From now on, migration cannot move the object */
+-	pin_tag(handle);
+-
++	/* It guarantees it can get zspage from handle safely */
++	read_lock(&pool->migrate_lock);
+ 	obj = handle_to_obj(handle);
+ 	obj_to_location(obj, &page, &obj_idx);
+ 	zspage = get_zspage(page);
+ 
+-	/* migration cannot move any subpage in this zspage */
++	/*
++	 * migration cannot move any zpages in this zspage. Here, class->lock
++	 * is too heavy since callers would take some time until they calls
++	 * zs_unmap_object API so delegate the locking from class to zspage
++	 * which is smaller granularity.
++	 */
+ 	migrate_read_lock(zspage);
++	read_unlock(&pool->migrate_lock);
+ 
+ 	class = zspage_class(pool, zspage);
+ 	off = (class->size * obj_idx) & ~PAGE_MASK;
+@@ -1330,7 +1323,6 @@ void zs_unmap_object(struct zs_pool *poo
+ 	put_cpu_var(zs_map_area);
+ 
+ 	migrate_read_unlock(zspage);
+-	unpin_tag(handle);
+ }
+ EXPORT_SYMBOL_GPL(zs_unmap_object);
+ 
+@@ -1424,6 +1416,7 @@ unsigned long zs_malloc(struct zs_pool *
+ 	size += ZS_HANDLE_SIZE;
+ 	class = pool->size_class[get_size_class_index(size)];
+ 
++	/* class->lock effectively protects the zpage migration */
+ 	spin_lock(&class->lock);
+ 	zspage = find_get_zspage(class);
+ 	if (likely(zspage)) {
+@@ -1501,30 +1494,27 @@ void zs_free(struct zs_pool *pool, unsig
+ 	if (unlikely(!handle))
+ 		return;
+ 
+-	pin_tag(handle);
++	/*
++	 * The pool->migrate_lock protects the race with zpage's migration
++	 * so it's safe to get the page from handle.
++	 */
++	read_lock(&pool->migrate_lock);
+ 	obj = handle_to_obj(handle);
+ 	obj_to_page(obj, &f_page);
+ 	zspage = get_zspage(f_page);
+-
+-	migrate_read_lock(zspage);
+ 	class = zspage_class(pool, zspage);
+-
+ 	spin_lock(&class->lock);
++	read_unlock(&pool->migrate_lock);
++
+ 	obj_free(class->size, obj);
+ 	class_stat_dec(class, OBJ_USED, 1);
+ 	fullness = fix_fullness_group(class, zspage);
+-	if (fullness != ZS_EMPTY) {
+-		migrate_read_unlock(zspage);
++	if (fullness != ZS_EMPTY)
+ 		goto out;
+-	}
+ 
+-	migrate_read_unlock(zspage);
+-	/* If zspage is isolated, zs_page_putback will free the zspage */
+ 	free_zspage(pool, class, zspage);
+ out:
+-
+ 	spin_unlock(&class->lock);
+-	unpin_tag(handle);
+ 	cache_free_handle(pool, handle);
+ }
+ EXPORT_SYMBOL_GPL(zs_free);
+@@ -1608,11 +1598,8 @@ static unsigned long find_alloced_obj(st
+ 	offset += class->size * index;
+ 
+ 	while (offset < PAGE_SIZE) {
+-		if (obj_allocated(page, addr + offset, &handle)) {
+-			if (trypin_tag(handle))
+-				break;
+-			handle = 0;
+-		}
++		if (obj_allocated(page, addr + offset, &handle))
++			break;
+ 
+ 		offset += class->size;
+ 		index++;
+@@ -1658,7 +1645,6 @@ static int migrate_zspage(struct zs_pool
+ 
+ 		/* Stop if there is no more space */
+ 		if (zspage_full(class, get_zspage(d_page))) {
+-			unpin_tag(handle);
+ 			ret = -ENOMEM;
+ 			break;
+ 		}
+@@ -1667,15 +1653,7 @@ static int migrate_zspage(struct zs_pool
+ 		free_obj = obj_malloc(pool, get_zspage(d_page), handle);
+ 		zs_object_copy(class, free_obj, used_obj);
+ 		obj_idx++;
+-		/*
+-		 * record_obj updates handle's value to free_obj and it will
+-		 * invalidate lock bit(ie, HANDLE_PIN_BIT) of handle, which
+-		 * breaks synchronization using pin_tag(e,g, zs_free) so
+-		 * let's keep the lock bit.
+-		 */
+-		free_obj |= BIT(HANDLE_PIN_BIT);
+ 		record_obj(handle, free_obj);
+-		unpin_tag(handle);
+ 		obj_free(class->size, used_obj);
+ 	}
+ 
+@@ -1789,6 +1767,11 @@ static void migrate_write_lock(struct zs
+ 	write_lock(&zspage->lock);
+ }
+ 
++static void migrate_write_lock_nested(struct zspage *zspage)
++{
++	write_lock_nested(&zspage->lock, SINGLE_DEPTH_NESTING);
++}
++
+ static void migrate_write_unlock(struct zspage *zspage)
+ {
+ 	write_unlock(&zspage->lock);
+@@ -1856,11 +1839,10 @@ static int zs_page_migrate(struct addres
+ 	struct zspage *zspage;
+ 	struct page *dummy;
+ 	void *s_addr, *d_addr, *addr;
+-	int offset, pos;
++	int offset;
+ 	unsigned long handle;
+ 	unsigned long old_obj, new_obj;
+ 	unsigned int obj_idx;
+-	int ret = -EAGAIN;
+ 
+ 	/*
+ 	 * We cannot support the _NO_COPY case here, because copy needs to
+@@ -1873,32 +1855,25 @@ static int zs_page_migrate(struct addres
+ 	VM_BUG_ON_PAGE(!PageMovable(page), page);
+ 	VM_BUG_ON_PAGE(!PageIsolated(page), page);
+ 
+-	zspage = get_zspage(page);
+-
+-	/* Concurrent compactor cannot migrate any subpage in zspage */
+-	migrate_write_lock(zspage);
+ 	pool = mapping->private_data;
++
++	/*
++	 * The pool migrate_lock protects the race between zpage migration
++	 * and zs_free.
++	 */
++	write_lock(&pool->migrate_lock);
++	zspage = get_zspage(page);
+ 	class = zspage_class(pool, zspage);
+-	offset = get_first_obj_offset(page);
+ 
++	/*
++	 * the class lock protects zpage alloc/free in the zspage.
++	 */
+ 	spin_lock(&class->lock);
+-	if (!get_zspage_inuse(zspage)) {
+-		/*
+-		 * Set "offset" to end of the page so that every loops
+-		 * skips unnecessary object scanning.
+-		 */
+-		offset = PAGE_SIZE;
+-	}
++	/* the migrate_write_lock protects zpage access via zs_map_object */
++	migrate_write_lock(zspage);
+ 
+-	pos = offset;
++	offset = get_first_obj_offset(page);
+ 	s_addr = kmap_atomic(page);
+-	while (pos < PAGE_SIZE) {
+-		if (obj_allocated(page, s_addr + pos, &handle)) {
+-			if (!trypin_tag(handle))
+-				goto unpin_objects;
+-		}
+-		pos += class->size;
+-	}
+ 
+ 	/*
+ 	 * Here, any user cannot access all objects in the zspage so let's move.
+@@ -1907,25 +1882,30 @@ static int zs_page_migrate(struct addres
+ 	memcpy(d_addr, s_addr, PAGE_SIZE);
+ 	kunmap_atomic(d_addr);
+ 
+-	for (addr = s_addr + offset; addr < s_addr + pos;
++	for (addr = s_addr + offset; addr < s_addr + PAGE_SIZE;
+ 					addr += class->size) {
+ 		if (obj_allocated(page, addr, &handle)) {
+-			BUG_ON(!testpin_tag(handle));
+ 
+ 			old_obj = handle_to_obj(handle);
+ 			obj_to_location(old_obj, &dummy, &obj_idx);
+ 			new_obj = (unsigned long)location_to_obj(newpage,
+ 								obj_idx);
+-			new_obj |= BIT(HANDLE_PIN_BIT);
+ 			record_obj(handle, new_obj);
+ 		}
+ 	}
++	kunmap_atomic(s_addr);
+ 
+ 	replace_sub_page(class, zspage, newpage, page);
+-	get_page(newpage);
+-
++	/*
++	 * Since we complete the data copy and set up new zspage structure,
++	 * it's okay to release migration_lock.
++	 */
++	write_unlock(&pool->migrate_lock);
++	spin_unlock(&class->lock);
+ 	dec_zspage_isolation(zspage);
++	migrate_write_unlock(zspage);
+ 
++	get_page(newpage);
+ 	if (page_zone(newpage) != page_zone(page)) {
+ 		dec_zone_page_state(page, NR_ZSPAGES);
+ 		inc_zone_page_state(newpage, NR_ZSPAGES);
+@@ -1933,22 +1913,8 @@ static int zs_page_migrate(struct addres
+ 
+ 	reset_page(page);
+ 	put_page(page);
+-	page = newpage;
+-
+-	ret = MIGRATEPAGE_SUCCESS;
+-unpin_objects:
+-	for (addr = s_addr + offset; addr < s_addr + pos;
+-						addr += class->size) {
+-		if (obj_allocated(page, addr, &handle)) {
+-			BUG_ON(!testpin_tag(handle));
+-			unpin_tag(handle);
+-		}
+-	}
+-	kunmap_atomic(s_addr);
+-	spin_unlock(&class->lock);
+-	migrate_write_unlock(zspage);
+ 
+-	return ret;
++	return MIGRATEPAGE_SUCCESS;
+ }
+ 
+ static void zs_page_putback(struct page *page)
+@@ -2077,8 +2043,13 @@ static unsigned long __zs_compact(struct
+ 	struct zspage *dst_zspage = NULL;
+ 	unsigned long pages_freed = 0;
+ 
++	/* protect the race between zpage migration and zs_free */
++	write_lock(&pool->migrate_lock);
++	/* protect zpage allocation/free */
+ 	spin_lock(&class->lock);
+ 	while ((src_zspage = isolate_zspage(class, true))) {
++		/* protect someone accessing the zspage(i.e., zs_map_object) */
++		migrate_write_lock(src_zspage);
+ 
+ 		if (!zs_can_compact(class))
+ 			break;
+@@ -2087,6 +2058,8 @@ static unsigned long __zs_compact(struct
+ 		cc.s_page = get_first_page(src_zspage);
+ 
+ 		while ((dst_zspage = isolate_zspage(class, false))) {
++			migrate_write_lock_nested(dst_zspage);
++
+ 			cc.d_page = get_first_page(dst_zspage);
+ 			/*
+ 			 * If there is no more space in dst_page, resched
+@@ -2096,6 +2069,10 @@ static unsigned long __zs_compact(struct
+ 				break;
+ 
+ 			putback_zspage(class, dst_zspage);
++			migrate_write_unlock(dst_zspage);
++			dst_zspage = NULL;
++			if (rwlock_is_contended(&pool->migrate_lock))
++				break;
+ 		}
+ 
+ 		/* Stop if we couldn't find slot */
+@@ -2103,19 +2080,28 @@ static unsigned long __zs_compact(struct
+ 			break;
+ 
+ 		putback_zspage(class, dst_zspage);
++		migrate_write_unlock(dst_zspage);
++
+ 		if (putback_zspage(class, src_zspage) == ZS_EMPTY) {
++			migrate_write_unlock(src_zspage);
+ 			free_zspage(pool, class, src_zspage);
+ 			pages_freed += class->pages_per_zspage;
+-		}
++		} else
++			migrate_write_unlock(src_zspage);
+ 		spin_unlock(&class->lock);
++		write_unlock(&pool->migrate_lock);
+ 		cond_resched();
++		write_lock(&pool->migrate_lock);
+ 		spin_lock(&class->lock);
+ 	}
+ 
+-	if (src_zspage)
++	if (src_zspage) {
+ 		putback_zspage(class, src_zspage);
++		migrate_write_unlock(src_zspage);
++	}
+ 
+ 	spin_unlock(&class->lock);
++	write_unlock(&pool->migrate_lock);
+ 
+ 	return pages_freed;
+ }
+@@ -2221,6 +2207,7 @@ struct zs_pool *zs_create_pool(const cha
+ 		return NULL;
+ 
+ 	init_deferred_free(pool);
++	rwlock_init(&pool->migrate_lock);
+ 
+ 	pool->name = kstrdup(name, GFP_KERNEL);
+ 	if (!pool->name)
diff --git a/debian/patches-rt/0009-drm-i915-gt-Use-spin_lock_irq-instead-of-local_irq_d.patch b/debian/patches-rt/0009-drm-i915-gt-Use-spin_lock_irq-instead-of-local_irq_d.patch
new file mode 100644
index 000000000000..7893cd6df01a
--- /dev/null
+++ b/debian/patches-rt/0009-drm-i915-gt-Use-spin_lock_irq-instead-of-local_irq_d.patch
@@ -0,0 +1,89 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Wed, 8 Sep 2021 19:03:41 +0200
+Subject: [PATCH 09/10] drm/i915/gt: Use spin_lock_irq() instead of
+ local_irq_disable() + spin_lock()
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+execlists_dequeue() is invoked from a function which uses
+local_irq_disable() to disable interrupts so the spin_lock() behaves
+like spin_lock_irq().
+This breaks PREEMPT_RT because local_irq_disable() + spin_lock() is not
+the same as spin_lock_irq().
+
+execlists_dequeue_irq() and execlists_dequeue() has each one caller
+only. If intel_engine_cs::active::lock is acquired and released with the
+_irq suffix then it behaves almost as if execlists_dequeue() would be
+invoked with disabled interrupts. The difference is the last part of the
+function which is then invoked with enabled interrupts.
+I can't tell if this makes a difference. From looking at it, it might
+work to move the last unlock at the end of the function as I didn't find
+anything that would acquire the lock again.
+
+Reported-by: Clark Williams <williams@redhat.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Reviewed-by: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
+---
+ drivers/gpu/drm/i915/gt/intel_execlists_submission.c |   17 +++++------------
+ 1 file changed, 5 insertions(+), 12 deletions(-)
+
+--- a/drivers/gpu/drm/i915/gt/intel_execlists_submission.c
++++ b/drivers/gpu/drm/i915/gt/intel_execlists_submission.c
+@@ -1284,7 +1284,7 @@ static void execlists_dequeue(struct int
+ 	 * and context switches) submission.
+ 	 */
+ 
+-	spin_lock(&sched_engine->lock);
++	spin_lock_irq(&sched_engine->lock);
+ 
+ 	/*
+ 	 * If the queue is higher priority than the last
+@@ -1384,7 +1384,7 @@ static void execlists_dequeue(struct int
+ 				 * Even if ELSP[1] is occupied and not worthy
+ 				 * of timeslices, our queue might be.
+ 				 */
+-				spin_unlock(&sched_engine->lock);
++				spin_unlock_irq(&sched_engine->lock);
+ 				return;
+ 			}
+ 		}
+@@ -1410,7 +1410,7 @@ static void execlists_dequeue(struct int
+ 
+ 		if (last && !can_merge_rq(last, rq)) {
+ 			spin_unlock(&ve->base.sched_engine->lock);
+-			spin_unlock(&engine->sched_engine->lock);
++			spin_unlock_irq(&engine->sched_engine->lock);
+ 			return; /* leave this for another sibling */
+ 		}
+ 
+@@ -1572,7 +1572,7 @@ static void execlists_dequeue(struct int
+ 	 */
+ 	sched_engine->queue_priority_hint = queue_prio(sched_engine);
+ 	i915_sched_engine_reset_on_empty(sched_engine);
+-	spin_unlock(&sched_engine->lock);
++	spin_unlock_irq(&sched_engine->lock);
+ 
+ 	/*
+ 	 * We can skip poking the HW if we ended up with exactly the same set
+@@ -1598,13 +1598,6 @@ static void execlists_dequeue(struct int
+ 	}
+ }
+ 
+-static void execlists_dequeue_irq(struct intel_engine_cs *engine)
+-{
+-	local_irq_disable(); /* Suspend interrupts across request submission */
+-	execlists_dequeue(engine);
+-	local_irq_enable(); /* flush irq_work (e.g. breadcrumb enabling) */
+-}
+-
+ static void clear_ports(struct i915_request **ports, int count)
+ {
+ 	memset_p((void **)ports, NULL, count);
+@@ -2424,7 +2417,7 @@ static void execlists_submission_tasklet
+ 	}
+ 
+ 	if (!engine->execlists.pending[0]) {
+-		execlists_dequeue_irq(engine);
++		execlists_dequeue(engine);
+ 		start_timeslice(engine);
+ 	}
+ 
diff --git a/debian/patches-rt/0009_zsmalloc_replace_get_cpu_var_with_local_lock.patch b/debian/patches-rt/0009_zsmalloc_replace_get_cpu_var_with_local_lock.patch
new file mode 100644
index 000000000000..e8fd91310e50
--- /dev/null
+++ b/debian/patches-rt/0009_zsmalloc_replace_get_cpu_var_with_local_lock.patch
@@ -0,0 +1,71 @@
+From: Mike Galbraith <umgwanakikbuti@gmail.com>
+Subject: zsmalloc: replace get_cpu_var with local_lock
+Date: Mon, 15 Nov 2021 10:59:09 -0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The usage of get_cpu_var() in zs_map_object() is problematic because
+it disables preemption and makes it impossible to acquire any sleeping
+lock on PREEMPT_RT such as a spinlock_t.
+Replace the get_cpu_var() usage with a local_lock_t which is embedded
+struct mapping_area. It ensures that the access the struct is
+synchronized against all users on the same CPU.
+
+Signed-off-by: Mike Galbraith <umgwanakikbuti@gmail.com>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+[minchan: remove the bit_spin_lock part and change the title]
+Signed-off-by: Minchan Kim <minchan@kernel.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211115185909.3949505-10-minchan@kernel.org
+---
+ mm/zsmalloc.c |   11 ++++++++---
+ 1 file changed, 8 insertions(+), 3 deletions(-)
+
+--- a/mm/zsmalloc.c
++++ b/mm/zsmalloc.c
+@@ -65,6 +65,7 @@
+ #include <linux/wait.h>
+ #include <linux/pagemap.h>
+ #include <linux/fs.h>
++#include <linux/local_lock.h>
+ 
+ #define ZSPAGE_MAGIC	0x58
+ 
+@@ -276,6 +277,7 @@ struct zspage {
+ };
+ 
+ struct mapping_area {
++	local_lock_t lock;
+ 	char *vm_buf; /* copy buffer for objects that span pages */
+ 	char *vm_addr; /* address of kmap_atomic()'ed pages */
+ 	enum zs_mapmode vm_mm; /* mapping mode */
+@@ -451,7 +453,9 @@ MODULE_ALIAS("zpool-zsmalloc");
+ #endif /* CONFIG_ZPOOL */
+ 
+ /* per-cpu VM mapping areas for zspage accesses that cross page boundaries */
+-static DEFINE_PER_CPU(struct mapping_area, zs_map_area);
++static DEFINE_PER_CPU(struct mapping_area, zs_map_area) = {
++	.lock	= INIT_LOCAL_LOCK(lock),
++};
+ 
+ static __maybe_unused int is_first_page(struct page *page)
+ {
+@@ -1269,7 +1273,8 @@ void *zs_map_object(struct zs_pool *pool
+ 	class = zspage_class(pool, zspage);
+ 	off = (class->size * obj_idx) & ~PAGE_MASK;
+ 
+-	area = &get_cpu_var(zs_map_area);
++	local_lock(&zs_map_area.lock);
++	area = this_cpu_ptr(&zs_map_area);
+ 	area->vm_mm = mm;
+ 	if (off + class->size <= PAGE_SIZE) {
+ 		/* this object is contained entirely within a page */
+@@ -1320,7 +1325,7 @@ void zs_unmap_object(struct zs_pool *poo
+ 
+ 		__zs_unmap_object(area, pages, off, class->size);
+ 	}
+-	put_cpu_var(zs_map_area);
++	local_unlock(&zs_map_area.lock);
+ 
+ 	migrate_read_unlock(zspage);
+ }
diff --git a/debian/patches-rt/0010-drm-i915-Drop-the-irqs_disabled-check.patch b/debian/patches-rt/0010-drm-i915-Drop-the-irqs_disabled-check.patch
new file mode 100644
index 000000000000..93f196b24ba0
--- /dev/null
+++ b/debian/patches-rt/0010-drm-i915-Drop-the-irqs_disabled-check.patch
@@ -0,0 +1,39 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri, 1 Oct 2021 20:01:03 +0200
+Subject: [PATCH 10/10] drm/i915: Drop the irqs_disabled() check
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The !irqs_disabled() check triggers on PREEMPT_RT even with
+i915_sched_engine::lock acquired. The reason is the lock is transformed
+into a sleeping lock on PREEMPT_RT and does not disable interrupts.
+
+There is no need to check for disabled interrupts. The lockdep
+annotation below already check if the lock has been acquired by the
+caller and will yell if the interrupts are not disabled.
+
+Remove the !irqs_disabled() check.
+
+Reported-by: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ drivers/gpu/drm/i915/i915_request.c |    2 --
+ 1 file changed, 2 deletions(-)
+
+--- a/drivers/gpu/drm/i915/i915_request.c
++++ b/drivers/gpu/drm/i915/i915_request.c
+@@ -559,7 +559,6 @@ bool __i915_request_submit(struct i915_r
+ 
+ 	RQ_TRACE(request, "\n");
+ 
+-	GEM_BUG_ON(!irqs_disabled());
+ 	lockdep_assert_held(&engine->sched_engine->lock);
+ 
+ 	/*
+@@ -668,7 +667,6 @@ void __i915_request_unsubmit(struct i915
+ 	 */
+ 	RQ_TRACE(request, "\n");
+ 
+-	GEM_BUG_ON(!irqs_disabled());
+ 	lockdep_assert_held(&engine->sched_engine->lock);
+ 
+ 	/*
diff --git a/debian/patches-rt/0010-lockdep-selftests-Adapt-ww-tests-for-PREEMPT_RT.patch b/debian/patches-rt/0010-lockdep-selftests-Adapt-ww-tests-for-PREEMPT_RT.patch
new file mode 100644
index 000000000000..ebe9a99c8aa4
--- /dev/null
+++ b/debian/patches-rt/0010-lockdep-selftests-Adapt-ww-tests-for-PREEMPT_RT.patch
@@ -0,0 +1,254 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 12 Aug 2021 18:13:39 +0200
+Subject: [PATCH 10/10] lockdep/selftests: Adapt ww-tests for PREEMPT_RT
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The ww-mutex selftest operates directly on ww_mutex::base and assumes
+its type is struct mutex. This isn't true on PREEMPT_RT which turns the
+mutex into a rtmutex.
+
+Add a ww_mutex_base_ abstraction which maps to the relevant mutex_ or
+rt_mutex_ function.
+Change the CONFIG_DEBUG_MUTEXES ifdef to DEBUG_WW_MUTEXES. The latter is
+true for the MUTEX and RTMUTEX implementation of WW-MUTEX. The
+assignment is required in order to pass the tests.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ lib/locking-selftest.c |   76 +++++++++++++++++++++++++++++--------------------
+ 1 file changed, 46 insertions(+), 30 deletions(-)
+
+--- a/lib/locking-selftest.c
++++ b/lib/locking-selftest.c
+@@ -1700,6 +1700,22 @@ static void ww_test_fail_acquire(void)
+ #endif
+ }
+ 
++#ifdef CONFIG_PREEMPT_RT
++#define ww_mutex_base_lock(b)			rt_mutex_lock(b)
++#define ww_mutex_base_trylock(b)		rt_mutex_trylock(b)
++#define ww_mutex_base_lock_nest_lock(b, b2)	rt_mutex_lock_nest_lock(b, b2)
++#define ww_mutex_base_lock_interruptible(b)	rt_mutex_lock_interruptible(b)
++#define ww_mutex_base_lock_killable(b)		rt_mutex_lock_killable(b)
++#define ww_mutex_base_unlock(b)			rt_mutex_unlock(b)
++#else
++#define ww_mutex_base_lock(b)			mutex_lock(b)
++#define ww_mutex_base_trylock(b)		mutex_trylock(b)
++#define ww_mutex_base_lock_nest_lock(b, b2)	mutex_lock_nest_lock(b, b2)
++#define ww_mutex_base_lock_interruptible(b)	mutex_lock_interruptible(b)
++#define ww_mutex_base_lock_killable(b)		mutex_lock_killable(b)
++#define ww_mutex_base_unlock(b)			mutex_unlock(b)
++#endif
++
+ static void ww_test_normal(void)
+ {
+ 	int ret;
+@@ -1714,50 +1730,50 @@ static void ww_test_normal(void)
+ 
+ 	/* mutex_lock (and indirectly, mutex_lock_nested) */
+ 	o.ctx = (void *)~0UL;
+-	mutex_lock(&o.base);
+-	mutex_unlock(&o.base);
++	ww_mutex_base_lock(&o.base);
++	ww_mutex_base_unlock(&o.base);
+ 	WARN_ON(o.ctx != (void *)~0UL);
+ 
+ 	/* mutex_lock_interruptible (and *_nested) */
+ 	o.ctx = (void *)~0UL;
+-	ret = mutex_lock_interruptible(&o.base);
++	ret = ww_mutex_base_lock_interruptible(&o.base);
+ 	if (!ret)
+-		mutex_unlock(&o.base);
++		ww_mutex_base_unlock(&o.base);
+ 	else
+ 		WARN_ON(1);
+ 	WARN_ON(o.ctx != (void *)~0UL);
+ 
+ 	/* mutex_lock_killable (and *_nested) */
+ 	o.ctx = (void *)~0UL;
+-	ret = mutex_lock_killable(&o.base);
++	ret = ww_mutex_base_lock_killable(&o.base);
+ 	if (!ret)
+-		mutex_unlock(&o.base);
++		ww_mutex_base_unlock(&o.base);
+ 	else
+ 		WARN_ON(1);
+ 	WARN_ON(o.ctx != (void *)~0UL);
+ 
+ 	/* trylock, succeeding */
+ 	o.ctx = (void *)~0UL;
+-	ret = mutex_trylock(&o.base);
++	ret = ww_mutex_base_trylock(&o.base);
+ 	WARN_ON(!ret);
+ 	if (ret)
+-		mutex_unlock(&o.base);
++		ww_mutex_base_unlock(&o.base);
+ 	else
+ 		WARN_ON(1);
+ 	WARN_ON(o.ctx != (void *)~0UL);
+ 
+ 	/* trylock, failing */
+ 	o.ctx = (void *)~0UL;
+-	mutex_lock(&o.base);
+-	ret = mutex_trylock(&o.base);
++	ww_mutex_base_lock(&o.base);
++	ret = ww_mutex_base_trylock(&o.base);
+ 	WARN_ON(ret);
+-	mutex_unlock(&o.base);
++	ww_mutex_base_unlock(&o.base);
+ 	WARN_ON(o.ctx != (void *)~0UL);
+ 
+ 	/* nest_lock */
+ 	o.ctx = (void *)~0UL;
+-	mutex_lock_nest_lock(&o.base, &t);
+-	mutex_unlock(&o.base);
++	ww_mutex_base_lock_nest_lock(&o.base, &t);
++	ww_mutex_base_unlock(&o.base);
+ 	WARN_ON(o.ctx != (void *)~0UL);
+ }
+ 
+@@ -1770,7 +1786,7 @@ static void ww_test_two_contexts(void)
+ static void ww_test_diff_class(void)
+ {
+ 	WWAI(&t);
+-#ifdef CONFIG_DEBUG_MUTEXES
++#ifdef DEBUG_WW_MUTEXES
+ 	t.ww_class = NULL;
+ #endif
+ 	WWL(&o, &t);
+@@ -1834,7 +1850,7 @@ static void ww_test_edeadlk_normal(void)
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	o2.ctx = &t2;
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 
+@@ -1850,7 +1866,7 @@ static void ww_test_edeadlk_normal(void)
+ 
+ 	o2.ctx = NULL;
+ 	mutex_acquire(&o2.base.dep_map, 0, 1, _THIS_IP_);
+-	mutex_unlock(&o2.base);
++	ww_mutex_base_unlock(&o2.base);
+ 	WWU(&o);
+ 
+ 	WWL(&o2, &t);
+@@ -1860,7 +1876,7 @@ static void ww_test_edeadlk_normal_slow(
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 	o2.ctx = &t2;
+ 
+@@ -1876,7 +1892,7 @@ static void ww_test_edeadlk_normal_slow(
+ 
+ 	o2.ctx = NULL;
+ 	mutex_acquire(&o2.base.dep_map, 0, 1, _THIS_IP_);
+-	mutex_unlock(&o2.base);
++	ww_mutex_base_unlock(&o2.base);
+ 	WWU(&o);
+ 
+ 	ww_mutex_lock_slow(&o2, &t);
+@@ -1886,7 +1902,7 @@ static void ww_test_edeadlk_no_unlock(vo
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	o2.ctx = &t2;
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 
+@@ -1902,7 +1918,7 @@ static void ww_test_edeadlk_no_unlock(vo
+ 
+ 	o2.ctx = NULL;
+ 	mutex_acquire(&o2.base.dep_map, 0, 1, _THIS_IP_);
+-	mutex_unlock(&o2.base);
++	ww_mutex_base_unlock(&o2.base);
+ 
+ 	WWL(&o2, &t);
+ }
+@@ -1911,7 +1927,7 @@ static void ww_test_edeadlk_no_unlock_sl
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 	o2.ctx = &t2;
+ 
+@@ -1927,7 +1943,7 @@ static void ww_test_edeadlk_no_unlock_sl
+ 
+ 	o2.ctx = NULL;
+ 	mutex_acquire(&o2.base.dep_map, 0, 1, _THIS_IP_);
+-	mutex_unlock(&o2.base);
++	ww_mutex_base_unlock(&o2.base);
+ 
+ 	ww_mutex_lock_slow(&o2, &t);
+ }
+@@ -1936,7 +1952,7 @@ static void ww_test_edeadlk_acquire_more
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 	o2.ctx = &t2;
+ 
+@@ -1957,7 +1973,7 @@ static void ww_test_edeadlk_acquire_more
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 	o2.ctx = &t2;
+ 
+@@ -1978,11 +1994,11 @@ static void ww_test_edeadlk_acquire_more
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 	o2.ctx = &t2;
+ 
+-	mutex_lock(&o3.base);
++	ww_mutex_base_lock(&o3.base);
+ 	mutex_release(&o3.base.dep_map, _THIS_IP_);
+ 	o3.ctx = &t2;
+ 
+@@ -2004,11 +2020,11 @@ static void ww_test_edeadlk_acquire_more
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 	o2.ctx = &t2;
+ 
+-	mutex_lock(&o3.base);
++	ww_mutex_base_lock(&o3.base);
+ 	mutex_release(&o3.base.dep_map, _THIS_IP_);
+ 	o3.ctx = &t2;
+ 
+@@ -2029,7 +2045,7 @@ static void ww_test_edeadlk_acquire_wron
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 	o2.ctx = &t2;
+ 
+@@ -2054,7 +2070,7 @@ static void ww_test_edeadlk_acquire_wron
+ {
+ 	int ret;
+ 
+-	mutex_lock(&o2.base);
++	ww_mutex_base_lock(&o2.base);
+ 	mutex_release(&o2.base.dep_map, _THIS_IP_);
+ 	o2.ctx = &t2;
+ 
diff --git a/debian/patches-rt/ARM64__Allow_to_enable_RT.patch b/debian/patches-rt/ARM64__Allow_to_enable_RT.patch
new file mode 100644
index 000000000000..e0e5be80fb3f
--- /dev/null
+++ b/debian/patches-rt/ARM64__Allow_to_enable_RT.patch
@@ -0,0 +1,35 @@
+Subject: ARM64: Allow to enable RT
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri Oct 11 13:14:35 2019 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Allow to select RT.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/arm64/Kconfig |    2 ++
+ 1 file changed, 2 insertions(+)
+---
+--- a/arch/arm64/Kconfig
++++ b/arch/arm64/Kconfig
+@@ -89,6 +89,7 @@ config ARM64
+ 	select ARCH_SUPPORTS_ATOMIC_RMW
+ 	select ARCH_SUPPORTS_INT128 if CC_HAS_INT128
+ 	select ARCH_SUPPORTS_NUMA_BALANCING
++	select ARCH_SUPPORTS_RT if HAVE_POSIX_CPU_TIMERS_TASK_WORK
+ 	select ARCH_WANT_COMPAT_IPC_PARSE_VERSION if COMPAT
+ 	select ARCH_WANT_DEFAULT_BPF_JIT
+ 	select ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT
+@@ -215,6 +216,7 @@ config ARM64
+ 	select PCI_DOMAINS_GENERIC if PCI
+ 	select PCI_ECAM if (ACPI && PCI)
+ 	select PCI_SYSCALL if PCI
++	select HAVE_POSIX_CPU_TIMERS_TASK_WORK if !KVM
+ 	select POWER_RESET
+ 	select POWER_SUPPLY
+ 	select SPARSE_IRQ
diff --git a/debian/patches-rt/ARM__Allow_to_enable_RT.patch b/debian/patches-rt/ARM__Allow_to_enable_RT.patch
new file mode 100644
index 000000000000..097ff2d1d2bc
--- /dev/null
+++ b/debian/patches-rt/ARM__Allow_to_enable_RT.patch
@@ -0,0 +1,35 @@
+Subject: ARM: Allow to enable RT
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri Oct 11 13:14:29 2019 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Allow to select RT.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/arm/Kconfig |    2 ++
+ 1 file changed, 2 insertions(+)
+---
+--- a/arch/arm/Kconfig
++++ b/arch/arm/Kconfig
+@@ -33,6 +33,7 @@ config ARM
+ 	select ARCH_OPTIONAL_KERNEL_RWX_DEFAULT if CPU_V7
+ 	select ARCH_SUPPORTS_ATOMIC_RMW
+ 	select ARCH_SUPPORTS_HUGETLBFS if ARM_LPAE
++	select ARCH_SUPPORTS_RT if HAVE_POSIX_CPU_TIMERS_TASK_WORK
+ 	select ARCH_USE_BUILTIN_BSWAP
+ 	select ARCH_USE_CMPXCHG_LOCKREF
+ 	select ARCH_USE_MEMTEST
+@@ -125,6 +126,7 @@ config ARM
+ 	select OLD_SIGSUSPEND3
+ 	select PCI_SYSCALL if PCI
+ 	select PERF_USE_VMALLOC
++	select HAVE_POSIX_CPU_TIMERS_TASK_WORK if !KVM
+ 	select RTC_LIB
+ 	select SYS_SUPPORTS_APM_EMULATION
+ 	select THREAD_INFO_IN_TASK if CURRENT_POINTER_IN_TPIDRURO
diff --git a/debian/patches-rt/ARM__enable_irq_in_translation_section_permission_fault_handlers.patch b/debian/patches-rt/ARM__enable_irq_in_translation_section_permission_fault_handlers.patch
new file mode 100644
index 000000000000..356ade281684
--- /dev/null
+++ b/debian/patches-rt/ARM__enable_irq_in_translation_section_permission_fault_handlers.patch
@@ -0,0 +1,91 @@
+Subject: ARM: enable irq in translation/section permission fault handlers
+From: Yadi.hu <yadi.hu@windriver.com>
+Date: Wed Dec 10 10:32:09 2014 +0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Yadi.hu <yadi.hu@windriver.com>
+
+Probably happens on all ARM, with
+CONFIG_PREEMPT_RT
+CONFIG_DEBUG_ATOMIC_SLEEP
+
+This simple program....
+
+int main() {
+   *((char*)0xc0001000) = 0;
+};
+
+[ 512.742724] BUG: sleeping function called from invalid context at kernel/rtmutex.c:658
+[ 512.743000] in_atomic(): 0, irqs_disabled(): 128, pid: 994, name: a
+[ 512.743217] INFO: lockdep is turned off.
+[ 512.743360] irq event stamp: 0
+[ 512.743482] hardirqs last enabled at (0): [< (null)>] (null)
+[ 512.743714] hardirqs last disabled at (0): [<c0426370>] copy_process+0x3b0/0x11c0
+[ 512.744013] softirqs last enabled at (0): [<c0426370>] copy_process+0x3b0/0x11c0
+[ 512.744303] softirqs last disabled at (0): [< (null)>] (null)
+[ 512.744631] [<c041872c>] (unwind_backtrace+0x0/0x104)
+[ 512.745001] [<c09af0c4>] (dump_stack+0x20/0x24)
+[ 512.745355] [<c0462490>] (__might_sleep+0x1dc/0x1e0)
+[ 512.745717] [<c09b6770>] (rt_spin_lock+0x34/0x6c)
+[ 512.746073] [<c0441bf0>] (do_force_sig_info+0x34/0xf0)
+[ 512.746457] [<c0442668>] (force_sig_info+0x18/0x1c)
+[ 512.746829] [<c041d880>] (__do_user_fault+0x9c/0xd8)
+[ 512.747185] [<c041d938>] (do_bad_area+0x7c/0x94)
+[ 512.747536] [<c041d990>] (do_sect_fault+0x40/0x48)
+[ 512.747898] [<c040841c>] (do_DataAbort+0x40/0xa0)
+[ 512.748181] Exception stack(0xecaa1fb0 to 0xecaa1ff8)
+
+Oxc0000000 belongs to kernel address space, user task can not be
+allowed to access it. For above condition, correct result is that
+test case should receive a “segment fault” and exits but not stacks.
+
+the root cause is commit 02fe2845d6a8 ("avoid enabling interrupts in
+prefetch/data abort handlers"),it deletes irq enable block in Data
+abort assemble code and move them into page/breakpiont/alignment fault
+handlers instead. But author does not enable irq in translation/section
+permission fault handlers. ARM disables irq when it enters exception/
+interrupt mode, if kernel doesn't enable irq, it would be still disabled
+during translation/section permission fault.
+
+We see the above splat because do_force_sig_info is still called with
+IRQs off, and that code eventually does a:
+
+        spin_lock_irqsave(&t->sighand->siglock, flags);
+
+As this is architecture independent code, and we've not seen any other
+need for other arch to have the siglock converted to raw lock, we can
+conclude that we should enable irq for ARM translation/section
+permission exception.
+
+
+Signed-off-by: Yadi.hu <yadi.hu@windriver.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/arm/mm/fault.c |    6 ++++++
+ 1 file changed, 6 insertions(+)
+---
+--- a/arch/arm/mm/fault.c
++++ b/arch/arm/mm/fault.c
+@@ -407,6 +407,9 @@ do_translation_fault(unsigned long addr,
+ 	if (addr < TASK_SIZE)
+ 		return do_page_fault(addr, fsr, regs);
+ 
++	if (interrupts_enabled(regs))
++		local_irq_enable();
++
+ 	if (user_mode(regs))
+ 		goto bad_area;
+ 
+@@ -477,6 +480,9 @@ do_translation_fault(unsigned long addr,
+ static int
+ do_sect_fault(unsigned long addr, unsigned int fsr, struct pt_regs *regs)
+ {
++	if (interrupts_enabled(regs))
++		local_irq_enable();
++
+ 	do_bad_area(addr, fsr, regs);
+ 	return 0;
+ }
diff --git a/debian/patches-rt/Add_localversion_for_-RT_release.patch b/debian/patches-rt/Add_localversion_for_-RT_release.patch
new file mode 100644
index 000000000000..6235df0d3af6
--- /dev/null
+++ b/debian/patches-rt/Add_localversion_for_-RT_release.patch
@@ -0,0 +1,19 @@
+Subject: Add localversion for -RT release
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Fri Jul  8 20:25:16 2011 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ localversion-rt |    1 +
+ 1 file changed, 1 insertion(+)
+ create mode 100644 localversion-rt
+---
+--- /dev/null
++++ b/localversion-rt
+@@ -0,0 +1 @@
++-rt4
diff --git a/debian/patches-rt/KVM__arm_arm64__downgrade_preempt_disabled_region_to_migrate_disable.patch b/debian/patches-rt/KVM__arm_arm64__downgrade_preempt_disabled_region_to_migrate_disable.patch
new file mode 100644
index 000000000000..8daf61a7a5b9
--- /dev/null
+++ b/debian/patches-rt/KVM__arm_arm64__downgrade_preempt_disabled_region_to_migrate_disable.patch
@@ -0,0 +1,57 @@
+Subject: KVM: arm/arm64: downgrade preempt_disable()d region to migrate_disable()
+From: Josh Cartwright <joshc@ni.com>
+Date: Thu Feb 11 11:54:01 2016 -0600
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Josh Cartwright <joshc@ni.com>
+
+kvm_arch_vcpu_ioctl_run() disables the use of preemption when updating
+the vgic and timer states to prevent the calling task from migrating to
+another CPU.  It does so to prevent the task from writing to the
+incorrect per-CPU GIC distributor registers.
+
+On -rt kernels, it's possible to maintain the same guarantee with the
+use of migrate_{disable,enable}(), with the added benefit that the
+migrate-disabled region is preemptible.  Update
+kvm_arch_vcpu_ioctl_run() to do so.
+
+Cc: Christoffer Dall <christoffer.dall@linaro.org>
+Reported-by: Manish Jaggi <Manish.Jaggi@caviumnetworks.com>
+Signed-off-by: Josh Cartwright <joshc@ni.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/arm64/kvm/arm.c |    6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+---
+--- a/arch/arm64/kvm/arm.c
++++ b/arch/arm64/kvm/arm.c
+@@ -820,7 +820,7 @@ int kvm_arch_vcpu_ioctl_run(struct kvm_v
+ 		 * involves poking the GIC, which must be done in a
+ 		 * non-preemptible context.
+ 		 */
+-		preempt_disable();
++		migrate_disable();
+ 
+ 		kvm_pmu_flush_hwstate(vcpu);
+ 
+@@ -844,7 +844,7 @@ int kvm_arch_vcpu_ioctl_run(struct kvm_v
+ 				kvm_timer_sync_user(vcpu);
+ 			kvm_vgic_sync_hwstate(vcpu);
+ 			local_irq_enable();
+-			preempt_enable();
++			migrate_enable();
+ 			continue;
+ 		}
+ 
+@@ -916,7 +916,7 @@ int kvm_arch_vcpu_ioctl_run(struct kvm_v
+ 		/* Exit types that need handling before we can be preempted */
+ 		handle_exit_early(vcpu, ret);
+ 
+-		preempt_enable();
++		migrate_enable();
+ 
+ 		/*
+ 		 * The ARMv8 architecture doesn't give the hypervisor
diff --git a/debian/patches-rt/POWERPC__Allow_to_enable_RT.patch b/debian/patches-rt/POWERPC__Allow_to_enable_RT.patch
new file mode 100644
index 000000000000..20ebb763f1af
--- /dev/null
+++ b/debian/patches-rt/POWERPC__Allow_to_enable_RT.patch
@@ -0,0 +1,35 @@
+Subject: POWERPC: Allow to enable RT
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri Oct 11 13:14:41 2019 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Allow to select RT.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/powerpc/Kconfig |    2 ++
+ 1 file changed, 2 insertions(+)
+---
+--- a/arch/powerpc/Kconfig
++++ b/arch/powerpc/Kconfig
+@@ -153,6 +153,7 @@ config PPC
+ 	select ARCH_STACKWALK
+ 	select ARCH_SUPPORTS_ATOMIC_RMW
+ 	select ARCH_SUPPORTS_DEBUG_PAGEALLOC	if PPC_BOOK3S || PPC_8xx || 40x
++	select ARCH_SUPPORTS_RT			if HAVE_POSIX_CPU_TIMERS_TASK_WORK
+ 	select ARCH_USE_BUILTIN_BSWAP
+ 	select ARCH_USE_CMPXCHG_LOCKREF		if PPC64
+ 	select ARCH_USE_MEMTEST
+@@ -221,6 +222,7 @@ config PPC
+ 	select HAVE_IOREMAP_PROT
+ 	select HAVE_IRQ_EXIT_ON_IRQ_STACK
+ 	select HAVE_IRQ_TIME_ACCOUNTING
++	select HAVE_POSIX_CPU_TIMERS_TASK_WORK	if !KVM
+ 	select HAVE_KERNEL_GZIP
+ 	select HAVE_KERNEL_LZMA			if DEFAULT_UIMAGE
+ 	select HAVE_KERNEL_LZO			if DEFAULT_UIMAGE
diff --git a/debian/patches-rt/arch_arm64__Add_lazy_preempt_support.patch b/debian/patches-rt/arch_arm64__Add_lazy_preempt_support.patch
new file mode 100644
index 000000000000..6e23f7184ea3
--- /dev/null
+++ b/debian/patches-rt/arch_arm64__Add_lazy_preempt_support.patch
@@ -0,0 +1,136 @@
+Subject: arch/arm64: Add lazy preempt support
+From: Anders Roxell <anders.roxell@linaro.org>
+Date: Thu May 14 17:52:17 2015 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Anders Roxell <anders.roxell@linaro.org>
+
+arm64 is missing support for PREEMPT_RT. The main feature which is
+lacking is support for lazy preemption. The arch-specific entry code,
+thread information structure definitions, and associated data tables
+have to be extended to provide this support. Then the Kconfig file has
+to be extended to indicate the support is available, and also to
+indicate that support for full RT preemption is now available.
+
+Signed-off-by: Anders Roxell <anders.roxell@linaro.org>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/arm64/Kconfig                   |    1 +
+ arch/arm64/include/asm/preempt.h     |   25 ++++++++++++++++++++++++-
+ arch/arm64/include/asm/thread_info.h |    8 +++++++-
+ arch/arm64/kernel/asm-offsets.c      |    1 +
+ arch/arm64/kernel/signal.c           |    2 +-
+ 5 files changed, 34 insertions(+), 3 deletions(-)
+---
+--- a/arch/arm64/Kconfig
++++ b/arch/arm64/Kconfig
+@@ -192,6 +192,7 @@ config ARM64
+ 	select HAVE_PERF_REGS
+ 	select HAVE_PERF_USER_STACK_DUMP
+ 	select HAVE_REGS_AND_STACK_ACCESS_API
++	select HAVE_PREEMPT_LAZY
+ 	select HAVE_POSIX_CPU_TIMERS_TASK_WORK
+ 	select HAVE_FUNCTION_ARG_ACCESS_API
+ 	select HAVE_FUTEX_CMPXCHG if FUTEX
+--- a/arch/arm64/include/asm/preempt.h
++++ b/arch/arm64/include/asm/preempt.h
+@@ -70,13 +70,36 @@ static inline bool __preempt_count_dec_a
+ 	 * interrupt occurring between the non-atomic READ_ONCE/WRITE_ONCE
+ 	 * pair.
+ 	 */
+-	return !pc || !READ_ONCE(ti->preempt_count);
++	if (!pc || !READ_ONCE(ti->preempt_count))
++		return true;
++#ifdef CONFIG_PREEMPT_LAZY
++	if ((pc & ~PREEMPT_NEED_RESCHED))
++		return false;
++	if (current_thread_info()->preempt_lazy_count)
++		return false;
++	return test_thread_flag(TIF_NEED_RESCHED_LAZY);
++#else
++	return false;
++#endif
+ }
+ 
+ static inline bool should_resched(int preempt_offset)
+ {
++#ifdef CONFIG_PREEMPT_LAZY
++	u64 pc = READ_ONCE(current_thread_info()->preempt_count);
++	if (pc == preempt_offset)
++		return true;
++
++	if ((pc & ~PREEMPT_NEED_RESCHED) != preempt_offset)
++		return false;
++
++	if (current_thread_info()->preempt_lazy_count)
++		return false;
++	return test_thread_flag(TIF_NEED_RESCHED_LAZY);
++#else
+ 	u64 pc = READ_ONCE(current_thread_info()->preempt_count);
+ 	return pc == preempt_offset;
++#endif
+ }
+ 
+ #ifdef CONFIG_PREEMPTION
+--- a/arch/arm64/include/asm/thread_info.h
++++ b/arch/arm64/include/asm/thread_info.h
+@@ -26,6 +26,7 @@ struct thread_info {
+ #ifdef CONFIG_ARM64_SW_TTBR0_PAN
+ 	u64			ttbr0;		/* saved TTBR0_EL1 */
+ #endif
++	int			preempt_lazy_count;	/* 0 => preemptable, <0 => bug */
+ 	union {
+ 		u64		preempt_count;	/* 0 => preemptible, <0 => bug */
+ 		struct {
+@@ -68,6 +69,7 @@ int arch_dup_task_struct(struct task_str
+ #define TIF_UPROBE		4	/* uprobe breakpoint or singlestep */
+ #define TIF_MTE_ASYNC_FAULT	5	/* MTE Asynchronous Tag Check Fault */
+ #define TIF_NOTIFY_SIGNAL	6	/* signal notifications exist */
++#define TIF_NEED_RESCHED_LAZY	7
+ #define TIF_SYSCALL_TRACE	8	/* syscall trace active */
+ #define TIF_SYSCALL_AUDIT	9	/* syscall auditing */
+ #define TIF_SYSCALL_TRACEPOINT	10	/* syscall tracepoint for ftrace */
+@@ -98,8 +100,10 @@ int arch_dup_task_struct(struct task_str
+ #define _TIF_SVE		(1 << TIF_SVE)
+ #define _TIF_MTE_ASYNC_FAULT	(1 << TIF_MTE_ASYNC_FAULT)
+ #define _TIF_NOTIFY_SIGNAL	(1 << TIF_NOTIFY_SIGNAL)
++#define _TIF_NEED_RESCHED_LAZY	(1 << TIF_NEED_RESCHED_LAZY)
+ 
+-#define _TIF_WORK_MASK		(_TIF_NEED_RESCHED | _TIF_SIGPENDING | \
++#define _TIF_WORK_MASK		(_TIF_NEED_RESCHED | _TIF_NEED_RESCHED_LAZY | \
++				 _TIF_SIGPENDING | \
+ 				 _TIF_NOTIFY_RESUME | _TIF_FOREIGN_FPSTATE | \
+ 				 _TIF_UPROBE | _TIF_MTE_ASYNC_FAULT | \
+ 				 _TIF_NOTIFY_SIGNAL)
+@@ -108,6 +112,8 @@ int arch_dup_task_struct(struct task_str
+ 				 _TIF_SYSCALL_TRACEPOINT | _TIF_SECCOMP | \
+ 				 _TIF_SYSCALL_EMU)
+ 
++#define _TIF_NEED_RESCHED_MASK	(_TIF_NEED_RESCHED | _TIF_NEED_RESCHED_LAZY)
++
+ #ifdef CONFIG_SHADOW_CALL_STACK
+ #define INIT_SCS							\
+ 	.scs_base	= init_shadow_call_stack,			\
+--- a/arch/arm64/kernel/asm-offsets.c
++++ b/arch/arm64/kernel/asm-offsets.c
+@@ -32,6 +32,7 @@ int main(void)
+   DEFINE(TSK_TI_CPU,		offsetof(struct task_struct, thread_info.cpu));
+   DEFINE(TSK_TI_FLAGS,		offsetof(struct task_struct, thread_info.flags));
+   DEFINE(TSK_TI_PREEMPT,	offsetof(struct task_struct, thread_info.preempt_count));
++  DEFINE(TSK_TI_PREEMPT_LAZY,	offsetof(struct task_struct, thread_info.preempt_lazy_count));
+ #ifdef CONFIG_ARM64_SW_TTBR0_PAN
+   DEFINE(TSK_TI_TTBR0,		offsetof(struct task_struct, thread_info.ttbr0));
+ #endif
+--- a/arch/arm64/kernel/signal.c
++++ b/arch/arm64/kernel/signal.c
+@@ -920,7 +920,7 @@ static void do_signal(struct pt_regs *re
+ void do_notify_resume(struct pt_regs *regs, unsigned long thread_flags)
+ {
+ 	do {
+-		if (thread_flags & _TIF_NEED_RESCHED) {
++		if (thread_flags & _TIF_NEED_RESCHED_MASK) {
+ 			/* Unmask Debug and SError for the next task */
+ 			local_daif_restore(DAIF_PROCCTX_NOIRQ);
+ 
diff --git a/debian/patches-rt/arm64-signal-Use-ARCH_RT_DELAYS_SIGNAL_SEND.patch b/debian/patches-rt/arm64-signal-Use-ARCH_RT_DELAYS_SIGNAL_SEND.patch
new file mode 100644
index 000000000000..96d766d0b02d
--- /dev/null
+++ b/debian/patches-rt/arm64-signal-Use-ARCH_RT_DELAYS_SIGNAL_SEND.patch
@@ -0,0 +1,49 @@
+From: He Zhe <zhe.he@windriver.com>
+Date: Tue, 12 Oct 2021 16:44:21 +0800
+Subject: [PATCH] arm64: signal: Use ARCH_RT_DELAYS_SIGNAL_SEND.
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The software breakpoint is handled via do_debug_exception() which
+disables preemption. On PREEMPT_RT spinlock_t become sleeping locks and
+must not be acquired with disabled preemption.
+
+Use ARCH_RT_DELAYS_SIGNAL_SEND so the signal (from send_user_sigtrap())
+is sent delayed in return to userland.
+
+Cc: stable-rt@vger.kernel.org
+Signed-off-by: He Zhe <zhe.he@windriver.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20211012084421.35136-1-zhe.he@windriver.com
+---
+ arch/arm64/include/asm/signal.h |    4 ++++
+ arch/arm64/kernel/signal.c      |    8 ++++++++
+ 2 files changed, 12 insertions(+)
+
+--- a/arch/arm64/include/asm/signal.h
++++ b/arch/arm64/include/asm/signal.h
+@@ -22,4 +22,8 @@ static inline void __user *arch_untagged
+ }
+ #define arch_untagged_si_addr arch_untagged_si_addr
+ 
++#if defined(CONFIG_PREEMPT_RT)
++#define ARCH_RT_DELAYS_SIGNAL_SEND
++#endif
++
+ #endif
+--- a/arch/arm64/kernel/signal.c
++++ b/arch/arm64/kernel/signal.c
+@@ -928,6 +928,14 @@ void do_notify_resume(struct pt_regs *re
+ 		} else {
+ 			local_daif_restore(DAIF_PROCCTX);
+ 
++#ifdef ARCH_RT_DELAYS_SIGNAL_SEND
++			if (unlikely(current->forced_info.si_signo)) {
++				struct task_struct *t = current;
++				force_sig_info(&t->forced_info);
++				t->forced_info.si_signo = 0;
++			}
++#endif
++
+ 			if (thread_flags & _TIF_UPROBE)
+ 				uprobe_notify_resume(regs);
+ 
diff --git a/debian/patches-rt/arm64-sve-Delay-freeing-memory-in-fpsimd_flush_threa.patch b/debian/patches-rt/arm64-sve-Delay-freeing-memory-in-fpsimd_flush_threa.patch
new file mode 100644
index 000000000000..4fb80c394c2c
--- /dev/null
+++ b/debian/patches-rt/arm64-sve-Delay-freeing-memory-in-fpsimd_flush_threa.patch
@@ -0,0 +1,44 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 29 Jul 2021 12:52:14 +0200
+Subject: [PATCH] arm64/sve: Delay freeing memory in fpsimd_flush_thread()
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+fpsimd_flush_thread() invokes kfree() via sve_free() within a preempt disabled
+section which is not working on -RT.
+
+Delay freeing of memory until preemption is enabled again.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ arch/arm64/kernel/fpsimd.c |    9 ++++++++-
+ 1 file changed, 8 insertions(+), 1 deletion(-)
+
+--- a/arch/arm64/kernel/fpsimd.c
++++ b/arch/arm64/kernel/fpsimd.c
+@@ -1125,6 +1125,8 @@ static void fpsimd_flush_thread_vl(enum
+ 
+ void fpsimd_flush_thread(void)
+ {
++	void *sve_state = NULL;
++
+ 	if (!system_supports_fpsimd())
+ 		return;
+ 
+@@ -1136,11 +1138,16 @@ void fpsimd_flush_thread(void)
+ 
+ 	if (system_supports_sve()) {
+ 		clear_thread_flag(TIF_SVE);
+-		sve_free(current);
++
++		/* Defer kfree() while in atomic context */
++		sve_state = current->thread.sve_state;
++		current->thread.sve_state = NULL;
++
+ 		fpsimd_flush_thread_vl(ARM64_VEC_SVE);
+ 	}
+ 
+ 	put_cpu_fpsimd_context();
++	kfree(sve_state);
+ }
+ 
+ /*
diff --git a/debian/patches-rt/arm64-sve-Make-kernel-FPU-protection-RT-friendly.patch b/debian/patches-rt/arm64-sve-Make-kernel-FPU-protection-RT-friendly.patch
new file mode 100644
index 000000000000..a67953ff7a3f
--- /dev/null
+++ b/debian/patches-rt/arm64-sve-Make-kernel-FPU-protection-RT-friendly.patch
@@ -0,0 +1,57 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 29 Jul 2021 10:36:30 +0200
+Subject: [PATCH] arm64/sve: Make kernel FPU protection RT friendly
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Non RT kernels need to protect FPU against preemption and bottom half
+processing. This is achieved by disabling bottom halves via
+local_bh_disable() which implictly disables preemption.
+
+On RT kernels this protection mechanism is not sufficient because
+local_bh_disable() does not disable preemption. It serializes bottom half
+related processing via a CPU local lock.
+
+As bottom halves are running always in thread context on RT kernels
+disabling preemption is the proper choice as it implicitly prevents bottom
+half processing.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ arch/arm64/kernel/fpsimd.c |   16 ++++++++++++++--
+ 1 file changed, 14 insertions(+), 2 deletions(-)
+
+--- a/arch/arm64/kernel/fpsimd.c
++++ b/arch/arm64/kernel/fpsimd.c
+@@ -201,10 +201,19 @@ static void __get_cpu_fpsimd_context(voi
+  *
+  * The double-underscore version must only be called if you know the task
+  * can't be preempted.
++ *
++ * On RT kernels local_bh_disable() is not sufficient because it only
++ * serializes soft interrupt related sections via a local lock, but stays
++ * preemptible. Disabling preemption is the right choice here as bottom
++ * half processing is always in thread context on RT kernels so it
++ * implicitly prevents bottom half processing as well.
+  */
+ static void get_cpu_fpsimd_context(void)
+ {
+-	local_bh_disable();
++	if (!IS_ENABLED(CONFIG_PREEMPT_RT))
++		local_bh_disable();
++	else
++		preempt_disable();
+ 	__get_cpu_fpsimd_context();
+ }
+ 
+@@ -225,7 +234,10 @@ static void __put_cpu_fpsimd_context(voi
+ static void put_cpu_fpsimd_context(void)
+ {
+ 	__put_cpu_fpsimd_context();
+-	local_bh_enable();
++	if (!IS_ENABLED(CONFIG_PREEMPT_RT))
++		local_bh_enable();
++	else
++		preempt_enable();
+ }
+ 
+ static bool have_cpu_fpsimd_context(void)
diff --git a/debian/patches-rt/arm64_mm_make_arch_faults_on_old_pte_check_for_migratability.patch b/debian/patches-rt/arm64_mm_make_arch_faults_on_old_pte_check_for_migratability.patch
new file mode 100644
index 000000000000..b0b7b91dada4
--- /dev/null
+++ b/debian/patches-rt/arm64_mm_make_arch_faults_on_old_pte_check_for_migratability.patch
@@ -0,0 +1,34 @@
+From: Valentin Schneider <valentin.schneider@arm.com>
+Subject: arm64: mm: Make arch_faults_on_old_pte() check for migratability
+Date: Wed, 11 Aug 2021 21:13:54 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+arch_faults_on_old_pte() relies on the calling context being
+non-preemptible. CONFIG_PREEMPT_RT turns the PTE lock into a sleepable
+spinlock, which doesn't disable preemption once acquired, triggering the
+warning in arch_faults_on_old_pte().
+
+It does however disable migration, ensuring the task remains on the same
+CPU during the entirety of the critical section, making the read of
+cpu_has_hw_af() safe and stable.
+
+Make arch_faults_on_old_pte() check migratable() instead of preemptible().
+
+Signed-off-by: Valentin Schneider <valentin.schneider@arm.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20210811201354.1976839-5-valentin.schneider@arm.com
+---
+ arch/arm64/include/asm/pgtable.h |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/arch/arm64/include/asm/pgtable.h
++++ b/arch/arm64/include/asm/pgtable.h
+@@ -1001,7 +1001,7 @@ static inline void update_mmu_cache(stru
+  */
+ static inline bool arch_faults_on_old_pte(void)
+ {
+-	WARN_ON(preemptible());
++	WARN_ON(is_migratable());
+ 
+ 	return !cpu_has_hw_af();
+ }
diff --git a/debian/patches-rt/arm__Add_support_for_lazy_preemption.patch b/debian/patches-rt/arm__Add_support_for_lazy_preemption.patch
new file mode 100644
index 000000000000..32bace447c76
--- /dev/null
+++ b/debian/patches-rt/arm__Add_support_for_lazy_preemption.patch
@@ -0,0 +1,127 @@
+Subject: arm: Add support for lazy preemption
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Wed Oct 31 12:04:11 2012 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Implement the arm pieces for lazy preempt.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/arm/Kconfig                   |    1 +
+ arch/arm/include/asm/thread_info.h |    6 +++++-
+ arch/arm/kernel/asm-offsets.c      |    1 +
+ arch/arm/kernel/entry-armv.S       |   19 ++++++++++++++++---
+ arch/arm/kernel/signal.c           |    3 ++-
+ 5 files changed, 25 insertions(+), 5 deletions(-)
+---
+--- a/arch/arm/Kconfig
++++ b/arch/arm/Kconfig
+@@ -109,6 +109,7 @@ config ARM
+ 	select HAVE_PERF_EVENTS
+ 	select HAVE_PERF_REGS
+ 	select HAVE_PERF_USER_STACK_DUMP
++	select HAVE_PREEMPT_LAZY
+ 	select MMU_GATHER_RCU_TABLE_FREE if SMP && ARM_LPAE
+ 	select HAVE_REGS_AND_STACK_ACCESS_API
+ 	select HAVE_RSEQ
+--- a/arch/arm/include/asm/thread_info.h
++++ b/arch/arm/include/asm/thread_info.h
+@@ -54,6 +54,7 @@ struct cpu_context_save {
+ struct thread_info {
+ 	unsigned long		flags;		/* low level flags */
+ 	int			preempt_count;	/* 0 => preemptable, <0 => bug */
++	int			preempt_lazy_count; /* 0 => preemptable, <0 => bug */
+ #ifndef CONFIG_THREAD_INFO_IN_TASK
+ 	struct task_struct	*task;		/* main task structure */
+ #endif
+@@ -152,6 +153,7 @@ extern int vfp_restore_user_hwstate(stru
+ #define TIF_SYSCALL_TRACEPOINT	6	/* syscall tracepoint instrumentation */
+ #define TIF_SECCOMP		7	/* seccomp syscall filtering active */
+ #define TIF_NOTIFY_SIGNAL	8	/* signal notifications exist */
++#define TIF_NEED_RESCHED_LAZY	9
+ 
+ #define TIF_USING_IWMMXT	17
+ #define TIF_MEMDIE		18	/* is terminating due to OOM killer */
+@@ -166,6 +168,7 @@ extern int vfp_restore_user_hwstate(stru
+ #define _TIF_SYSCALL_TRACEPOINT	(1 << TIF_SYSCALL_TRACEPOINT)
+ #define _TIF_SECCOMP		(1 << TIF_SECCOMP)
+ #define _TIF_NOTIFY_SIGNAL	(1 << TIF_NOTIFY_SIGNAL)
++#define _TIF_NEED_RESCHED_LAZY	(1 << TIF_NEED_RESCHED_LAZY)
+ #define _TIF_USING_IWMMXT	(1 << TIF_USING_IWMMXT)
+ 
+ /* Checks for any syscall work in entry-common.S */
+@@ -175,7 +178,8 @@ extern int vfp_restore_user_hwstate(stru
+ /*
+  * Change these and you break ASM code in entry-common.S
+  */
+-#define _TIF_WORK_MASK		(_TIF_NEED_RESCHED | _TIF_SIGPENDING | \
++#define _TIF_WORK_MASK		(_TIF_NEED_RESCHED | _TIF_NEED_RESCHED_LAZY | \
++				 _TIF_SIGPENDING | \
+ 				 _TIF_NOTIFY_RESUME | _TIF_UPROBE | \
+ 				 _TIF_NOTIFY_SIGNAL)
+ 
+--- a/arch/arm/kernel/asm-offsets.c
++++ b/arch/arm/kernel/asm-offsets.c
+@@ -43,6 +43,7 @@ int main(void)
+   BLANK();
+   DEFINE(TI_FLAGS,		offsetof(struct thread_info, flags));
+   DEFINE(TI_PREEMPT,		offsetof(struct thread_info, preempt_count));
++  DEFINE(TI_PREEMPT_LAZY,	offsetof(struct thread_info, preempt_lazy_count));
+ #ifndef CONFIG_THREAD_INFO_IN_TASK
+   DEFINE(TI_TASK,		offsetof(struct thread_info, task));
+ #endif
+--- a/arch/arm/kernel/entry-armv.S
++++ b/arch/arm/kernel/entry-armv.S
+@@ -203,11 +203,18 @@ ENDPROC(__dabt_svc)
+ 
+ #ifdef CONFIG_PREEMPTION
+ 	ldr	r8, [tsk, #TI_PREEMPT]		@ get preempt count
+-	ldr	r0, [tsk, #TI_FLAGS]		@ get flags
+ 	teq	r8, #0				@ if preempt count != 0
++	bne	1f				@ return from exeption
++	ldr	r0, [tsk, #TI_FLAGS]		@ get flags
++	tst	r0, #_TIF_NEED_RESCHED		@ if NEED_RESCHED is set
++	blne	svc_preempt			@ preempt!
++
++	ldr	r8, [tsk, #TI_PREEMPT_LAZY]	@ get preempt lazy count
++	teq	r8, #0				@ if preempt lazy count != 0
+ 	movne	r0, #0				@ force flags to 0
+-	tst	r0, #_TIF_NEED_RESCHED
++	tst	r0, #_TIF_NEED_RESCHED_LAZY
+ 	blne	svc_preempt
++1:
+ #endif
+ 
+ 	svc_exit r5, irq = 1			@ return from exception
+@@ -222,8 +229,14 @@ ENDPROC(__irq_svc)
+ 1:	bl	preempt_schedule_irq		@ irq en/disable is done inside
+ 	ldr	r0, [tsk, #TI_FLAGS]		@ get new tasks TI_FLAGS
+ 	tst	r0, #_TIF_NEED_RESCHED
++	bne	1b
++	tst	r0, #_TIF_NEED_RESCHED_LAZY
+ 	reteq	r8				@ go again
+-	b	1b
++	ldr	r0, [tsk, #TI_PREEMPT_LAZY]	@ get preempt lazy count
++	teq	r0, #0				@ if preempt lazy count != 0
++	beq	1b
++	ret	r8				@ go again
++
+ #endif
+ 
+ __und_fault:
+--- a/arch/arm/kernel/signal.c
++++ b/arch/arm/kernel/signal.c
+@@ -607,7 +607,8 @@ do_work_pending(struct pt_regs *regs, un
+ 	 */
+ 	trace_hardirqs_off();
+ 	do {
+-		if (likely(thread_flags & _TIF_NEED_RESCHED)) {
++		if (likely(thread_flags & (_TIF_NEED_RESCHED |
++					   _TIF_NEED_RESCHED_LAZY))) {
+ 			schedule();
+ 		} else {
+ 			if (unlikely(!user_mode(regs)))
diff --git a/debian/patches-rt/block_mq__do_not_invoke_preempt_disable.patch b/debian/patches-rt/block_mq__do_not_invoke_preempt_disable.patch
new file mode 100644
index 000000000000..9f8c8c222941
--- /dev/null
+++ b/debian/patches-rt/block_mq__do_not_invoke_preempt_disable.patch
@@ -0,0 +1,39 @@
+Subject: block/mq: do not invoke preempt_disable()
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue Jul 14 14:26:34 2015 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+preempt_disable() and get_cpu() don't play well together with the sleeping
+locks it tries to allocate later.
+It seems to be enough to replace it with get_cpu_light() and migrate_disable().
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ block/blk-mq.c |    6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+---
+--- a/block/blk-mq.c
++++ b/block/blk-mq.c
+@@ -1856,14 +1856,14 @@ static void __blk_mq_delay_run_hw_queue(
+ 		return;
+ 
+ 	if (!async && !(hctx->flags & BLK_MQ_F_BLOCKING)) {
+-		int cpu = get_cpu();
++		int cpu = get_cpu_light();
+ 		if (cpumask_test_cpu(cpu, hctx->cpumask)) {
+ 			__blk_mq_run_hw_queue(hctx);
+-			put_cpu();
++			put_cpu_light();
+ 			return;
+ 		}
+ 
+-		put_cpu();
++		put_cpu_light();
+ 	}
+ 
+ 	kblockd_mod_delayed_work_on(blk_mq_hctx_next_cpu(hctx), &hctx->run_work,
diff --git a/debian/patches-rt/cgroup__use_irqsave_in_cgroup_rstat_flush_locked.patch b/debian/patches-rt/cgroup__use_irqsave_in_cgroup_rstat_flush_locked.patch
new file mode 100644
index 000000000000..83d276fff376
--- /dev/null
+++ b/debian/patches-rt/cgroup__use_irqsave_in_cgroup_rstat_flush_locked.patch
@@ -0,0 +1,50 @@
+Subject: cgroup: use irqsave in cgroup_rstat_flush_locked()
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue Jul  3 18:19:48 2018 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+All callers of cgroup_rstat_flush_locked() acquire cgroup_rstat_lock
+either with spin_lock_irq() or spin_lock_irqsave().
+cgroup_rstat_flush_locked() itself acquires cgroup_rstat_cpu_lock which
+is a raw_spin_lock. This lock is also acquired in cgroup_rstat_updated()
+in IRQ context and therefore requires _irqsave() locking suffix in
+cgroup_rstat_flush_locked().
+Since there is no difference between spin_lock_t and raw_spin_lock_t
+on !RT lockdep does not complain here. On RT lockdep complains because
+the interrupts were not disabled here and a deadlock is possible.
+
+Acquire the raw_spin_lock_t with disabled interrupts.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Link: https://www.spinics.net/lists/cgroups/msg23051.html
+
+
+---
+ kernel/cgroup/rstat.c |    5 +++--
+ 1 file changed, 3 insertions(+), 2 deletions(-)
+---
+--- a/kernel/cgroup/rstat.c
++++ b/kernel/cgroup/rstat.c
+@@ -156,8 +156,9 @@ static void cgroup_rstat_flush_locked(st
+ 		raw_spinlock_t *cpu_lock = per_cpu_ptr(&cgroup_rstat_cpu_lock,
+ 						       cpu);
+ 		struct cgroup *pos = NULL;
++		unsigned long flags;
+ 
+-		raw_spin_lock(cpu_lock);
++		raw_spin_lock_irqsave(cpu_lock, flags);
+ 		while ((pos = cgroup_rstat_cpu_pop_updated(pos, cgrp, cpu))) {
+ 			struct cgroup_subsys_state *css;
+ 
+@@ -169,7 +170,7 @@ static void cgroup_rstat_flush_locked(st
+ 				css->ss->css_rstat_flush(css, cpu);
+ 			rcu_read_unlock();
+ 		}
+-		raw_spin_unlock(cpu_lock);
++		raw_spin_unlock_irqrestore(cpu_lock, flags);
+ 
+ 		/* if @may_sleep, play nice and yield if necessary */
+ 		if (may_sleep && (need_resched() ||
diff --git a/debian/patches-rt/console__add_write_atomic_interface.patch b/debian/patches-rt/console__add_write_atomic_interface.patch
new file mode 100644
index 000000000000..83eb359a503e
--- /dev/null
+++ b/debian/patches-rt/console__add_write_atomic_interface.patch
@@ -0,0 +1,315 @@
+Subject: console: add write_atomic interface
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:01 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+Add a write_atomic() callback to the console. This is an optional
+function for console drivers. The function must be atomic (including
+NMI safe) for writing to the console.
+
+Console drivers must still implement the write() callback. The
+write_atomic() callback will only be used in special situations,
+such as when the kernel panics.
+
+Creating an NMI safe write_atomic() that must synchronize with
+write() requires a careful implementation of the console driver. To
+aid with the implementation, a set of console_atomic_*() functions
+are provided:
+
+    void console_atomic_lock(unsigned long flags);
+    void console_atomic_unlock(unsigned long flags);
+
+These functions synchronize using the printk cpulock and disable
+hardware interrupts.
+
+kgdb makes use of its own cpulock (@dbg_master_lock, @kgdb_active)
+during cpu roundup. This will conflict with the printk cpulock.
+Therefore, a CPU must ensure that it is not holding the printk
+cpulock when calling kgdb_cpu_enter(). If it is, it must allow its
+printk context to complete first.
+
+A new helper function kgdb_roundup_delay() is introduced for kgdb
+to determine if it is holding the printk cpulock. If so, a flag is
+set so that when the printk cpulock is released, kgdb will be
+re-triggered for that CPU.
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ arch/powerpc/include/asm/smp.h |    1 
+ arch/powerpc/kernel/kgdb.c     |   10 ++++++++-
+ arch/powerpc/kernel/smp.c      |    5 ++++
+ arch/x86/kernel/kgdb.c         |    9 +++++---
+ include/linux/console.h        |    1 
+ include/linux/kgdb.h           |    3 ++
+ include/linux/printk.h         |   23 ++++++++++++++++++++
+ kernel/debug/debug_core.c      |   45 +++++++++++++++++++++++------------------
+ kernel/printk/printk.c         |   26 +++++++++++++++++++++++
+ 9 files changed, 100 insertions(+), 23 deletions(-)
+---
+--- a/arch/powerpc/include/asm/smp.h
++++ b/arch/powerpc/include/asm/smp.h
+@@ -62,6 +62,7 @@ struct smp_ops_t {
+ 
+ extern int smp_send_nmi_ipi(int cpu, void (*fn)(struct pt_regs *), u64 delay_us);
+ extern int smp_send_safe_nmi_ipi(int cpu, void (*fn)(struct pt_regs *), u64 delay_us);
++extern void smp_send_debugger_break_cpu(unsigned int cpu);
+ extern void smp_send_debugger_break(void);
+ extern void start_secondary_resume(void);
+ extern void smp_generic_give_timebase(void);
+--- a/arch/powerpc/kernel/kgdb.c
++++ b/arch/powerpc/kernel/kgdb.c
+@@ -120,11 +120,19 @@ int kgdb_skipexception(int exception, st
+ 
+ static int kgdb_debugger_ipi(struct pt_regs *regs)
+ {
+-	kgdb_nmicallback(raw_smp_processor_id(), regs);
++	int cpu = raw_smp_processor_id();
++
++	if (!kgdb_roundup_delay(cpu))
++		kgdb_nmicallback(cpu, regs);
+ 	return 0;
+ }
+ 
+ #ifdef CONFIG_SMP
++void kgdb_roundup_cpu(unsigned int cpu)
++{
++	smp_send_debugger_break_cpu(cpu);
++}
++
+ void kgdb_roundup_cpus(void)
+ {
+ 	smp_send_debugger_break();
+--- a/arch/powerpc/kernel/smp.c
++++ b/arch/powerpc/kernel/smp.c
+@@ -589,6 +589,11 @@ static void debugger_ipi_callback(struct
+ 	debugger_ipi(regs);
+ }
+ 
++void smp_send_debugger_break_cpu(unsigned int cpu)
++{
++	smp_send_nmi_ipi(cpu, debugger_ipi_callback, 1000000);
++}
++
+ void smp_send_debugger_break(void)
+ {
+ 	smp_send_nmi_ipi(NMI_IPI_ALL_OTHERS, debugger_ipi_callback, 1000000);
+--- a/arch/x86/kernel/kgdb.c
++++ b/arch/x86/kernel/kgdb.c
+@@ -502,9 +502,12 @@ static int kgdb_nmi_handler(unsigned int
+ 		if (atomic_read(&kgdb_active) != -1) {
+ 			/* KGDB CPU roundup */
+ 			cpu = raw_smp_processor_id();
+-			kgdb_nmicallback(cpu, regs);
+-			set_bit(cpu, was_in_debug_nmi);
+-			touch_nmi_watchdog();
++
++			if (!kgdb_roundup_delay(cpu)) {
++				kgdb_nmicallback(cpu, regs);
++				set_bit(cpu, was_in_debug_nmi);
++				touch_nmi_watchdog();
++			}
+ 
+ 			return NMI_HANDLED;
+ 		}
+--- a/include/linux/console.h
++++ b/include/linux/console.h
+@@ -140,6 +140,7 @@ static inline int con_debug_leave(void)
+ struct console {
+ 	char	name[16];
+ 	void	(*write)(struct console *, const char *, unsigned);
++	void	(*write_atomic)(struct console *co, const char *s, unsigned int count);
+ 	int	(*read)(struct console *, char *, unsigned);
+ 	struct tty_driver *(*device)(struct console *, int *);
+ 	void	(*unblank)(void);
+--- a/include/linux/kgdb.h
++++ b/include/linux/kgdb.h
+@@ -212,6 +212,8 @@ extern void kgdb_call_nmi_hook(void *ign
+  */
+ extern void kgdb_roundup_cpus(void);
+ 
++extern void kgdb_roundup_cpu(unsigned int cpu);
++
+ /**
+  *	kgdb_arch_set_pc - Generic call back to the program counter
+  *	@regs: Current &struct pt_regs.
+@@ -365,5 +367,6 @@ extern void kgdb_free_init_mem(void);
+ #define dbg_late_init()
+ static inline void kgdb_panic(const char *msg) {}
+ static inline void kgdb_free_init_mem(void) { }
++static inline void kgdb_roundup_cpu(unsigned int cpu) {}
+ #endif /* ! CONFIG_KGDB */
+ #endif /* _KGDB_H_ */
+--- a/include/linux/printk.h
++++ b/include/linux/printk.h
+@@ -284,10 +284,18 @@ static inline void printk_trigger_flush(
+ extern int __printk_cpu_trylock(void);
+ extern void __printk_wait_on_cpu_lock(void);
+ extern void __printk_cpu_unlock(void);
++extern bool kgdb_roundup_delay(unsigned int cpu);
++
+ #else
++
+ #define __printk_cpu_trylock()		1
+ #define __printk_wait_on_cpu_lock()
+ #define __printk_cpu_unlock()
++
++static inline bool kgdb_roundup_delay(unsigned int cpu)
++{
++	return false;
++}
+ #endif /* CONFIG_SMP */
+ 
+ /**
+@@ -319,6 +327,21 @@ extern void __printk_cpu_unlock(void);
+ 		local_irq_restore(flags);	\
+ 	} while (0)
+ 
++/*
++ * Used to synchronize atomic consoles.
++ *
++ * The same as raw_printk_cpu_lock_irqsave() except that hardware interrupts
++ * are _not_ restored while spinning.
++ */
++#define console_atomic_lock(flags)		\
++	do {					\
++		local_irq_save(flags);		\
++		while (!__printk_cpu_trylock())	\
++			cpu_relax();		\
++	} while (0)
++
++#define console_atomic_unlock raw_printk_cpu_unlock_irqrestore
++
+ extern int kptr_restrict;
+ 
+ /**
+--- a/kernel/debug/debug_core.c
++++ b/kernel/debug/debug_core.c
+@@ -238,35 +238,42 @@ NOKPROBE_SYMBOL(kgdb_call_nmi_hook);
+ static DEFINE_PER_CPU(call_single_data_t, kgdb_roundup_csd) =
+ 	CSD_INIT(kgdb_call_nmi_hook, NULL);
+ 
+-void __weak kgdb_roundup_cpus(void)
++void __weak kgdb_roundup_cpu(unsigned int cpu)
+ {
+ 	call_single_data_t *csd;
++	int ret;
++
++	csd = &per_cpu(kgdb_roundup_csd, cpu);
++
++	/*
++	 * If it didn't round up last time, don't try again
++	 * since smp_call_function_single_async() will block.
++	 *
++	 * If rounding_up is false then we know that the
++	 * previous call must have at least started and that
++	 * means smp_call_function_single_async() won't block.
++	 */
++	if (kgdb_info[cpu].rounding_up)
++		return;
++	kgdb_info[cpu].rounding_up = true;
++
++	ret = smp_call_function_single_async(cpu, csd);
++	if (ret)
++		kgdb_info[cpu].rounding_up = false;
++}
++NOKPROBE_SYMBOL(kgdb_roundup_cpu);
++
++void __weak kgdb_roundup_cpus(void)
++{
+ 	int this_cpu = raw_smp_processor_id();
+ 	int cpu;
+-	int ret;
+ 
+ 	for_each_online_cpu(cpu) {
+ 		/* No need to roundup ourselves */
+ 		if (cpu == this_cpu)
+ 			continue;
+ 
+-		csd = &per_cpu(kgdb_roundup_csd, cpu);
+-
+-		/*
+-		 * If it didn't round up last time, don't try again
+-		 * since smp_call_function_single_async() will block.
+-		 *
+-		 * If rounding_up is false then we know that the
+-		 * previous call must have at least started and that
+-		 * means smp_call_function_single_async() won't block.
+-		 */
+-		if (kgdb_info[cpu].rounding_up)
+-			continue;
+-		kgdb_info[cpu].rounding_up = true;
+-
+-		ret = smp_call_function_single_async(cpu, csd);
+-		if (ret)
+-			kgdb_info[cpu].rounding_up = false;
++		kgdb_roundup_cpu(cpu);
+ 	}
+ }
+ NOKPROBE_SYMBOL(kgdb_roundup_cpus);
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -44,6 +44,7 @@
+ #include <linux/irq_work.h>
+ #include <linux/ctype.h>
+ #include <linux/uio.h>
++#include <linux/kgdb.h>
+ #include <linux/sched/clock.h>
+ #include <linux/sched/debug.h>
+ #include <linux/sched/task_stack.h>
+@@ -3588,6 +3589,7 @@ EXPORT_SYMBOL_GPL(kmsg_dump_rewind);
+ #ifdef CONFIG_SMP
+ static atomic_t printk_cpulock_owner = ATOMIC_INIT(-1);
+ static atomic_t printk_cpulock_nested = ATOMIC_INIT(0);
++static unsigned int kgdb_cpu = -1;
+ 
+ /**
+  * __printk_wait_on_cpu_lock() - Busy wait until the printk cpu-reentrant
+@@ -3667,6 +3669,9 @@ EXPORT_SYMBOL(__printk_cpu_trylock);
+  */
+ void __printk_cpu_unlock(void)
+ {
++	bool trigger_kgdb = false;
++	unsigned int cpu;
++
+ 	if (atomic_read(&printk_cpulock_nested)) {
+ 		atomic_dec(&printk_cpulock_nested);
+ 		return;
+@@ -3677,6 +3682,12 @@ void __printk_cpu_unlock(void)
+ 	 * LMM(__printk_cpu_unlock:A)
+ 	 */
+ 
++	cpu = smp_processor_id();
++	if (kgdb_cpu == cpu) {
++		trigger_kgdb = true;
++		kgdb_cpu = -1;
++	}
++
+ 	/*
+ 	 * Guarantee loads and stores from this CPU when it was the
+ 	 * lock owner are visible to the next lock owner. This pairs
+@@ -3697,6 +3708,21 @@ void __printk_cpu_unlock(void)
+ 	 */
+ 	atomic_set_release(&printk_cpulock_owner,
+ 			   -1); /* LMM(__printk_cpu_unlock:B) */
++
++	if (trigger_kgdb) {
++		pr_warn("re-triggering kgdb roundup for CPU#%d\n", cpu);
++		kgdb_roundup_cpu(cpu);
++	}
+ }
+ EXPORT_SYMBOL(__printk_cpu_unlock);
++
++bool kgdb_roundup_delay(unsigned int cpu)
++{
++	if (cpu != atomic_read(&printk_cpulock_owner))
++		return false;
++
++	kgdb_cpu = cpu;
++	return true;
++}
++EXPORT_SYMBOL(kgdb_roundup_delay);
+ #endif /* CONFIG_SMP */
diff --git a/debian/patches-rt/crypto__cryptd_-_add_a_lock_instead_preempt_disable_local_bh_disable.patch b/debian/patches-rt/crypto__cryptd_-_add_a_lock_instead_preempt_disable_local_bh_disable.patch
new file mode 100644
index 000000000000..5863e0102b09
--- /dev/null
+++ b/debian/patches-rt/crypto__cryptd_-_add_a_lock_instead_preempt_disable_local_bh_disable.patch
@@ -0,0 +1,83 @@
+Subject: crypto: cryptd - add a lock instead preempt_disable/local_bh_disable
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu Jul 26 18:52:00 2018 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+cryptd has a per-CPU lock which protected with local_bh_disable() and
+preempt_disable().
+Add an explicit spin_lock to make the locking context more obvious and
+visible to lockdep. Since it is a per-CPU lock, there should be no lock
+contention on the actual spinlock.
+There is a small race-window where we could be migrated to another CPU
+after the cpu_queue has been obtain. This is not a problem because the
+actual ressource is protected by the spinlock.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ crypto/cryptd.c |   19 +++++++++----------
+ 1 file changed, 9 insertions(+), 10 deletions(-)
+---
+--- a/crypto/cryptd.c
++++ b/crypto/cryptd.c
+@@ -36,6 +36,7 @@ static struct workqueue_struct *cryptd_w
+ struct cryptd_cpu_queue {
+ 	struct crypto_queue queue;
+ 	struct work_struct work;
++	spinlock_t qlock;
+ };
+ 
+ struct cryptd_queue {
+@@ -105,6 +106,7 @@ static int cryptd_init_queue(struct cryp
+ 		cpu_queue = per_cpu_ptr(queue->cpu_queue, cpu);
+ 		crypto_init_queue(&cpu_queue->queue, max_cpu_qlen);
+ 		INIT_WORK(&cpu_queue->work, cryptd_queue_worker);
++		spin_lock_init(&cpu_queue->qlock);
+ 	}
+ 	pr_info("cryptd: max_cpu_qlen set to %d\n", max_cpu_qlen);
+ 	return 0;
+@@ -129,8 +131,10 @@ static int cryptd_enqueue_request(struct
+ 	struct cryptd_cpu_queue *cpu_queue;
+ 	refcount_t *refcnt;
+ 
+-	cpu = get_cpu();
+-	cpu_queue = this_cpu_ptr(queue->cpu_queue);
++	cpu_queue = raw_cpu_ptr(queue->cpu_queue);
++	spin_lock_bh(&cpu_queue->qlock);
++	cpu = smp_processor_id();
++
+ 	err = crypto_enqueue_request(&cpu_queue->queue, request);
+ 
+ 	refcnt = crypto_tfm_ctx(request->tfm);
+@@ -146,7 +150,7 @@ static int cryptd_enqueue_request(struct
+ 	refcount_inc(refcnt);
+ 
+ out_put_cpu:
+-	put_cpu();
++	spin_unlock_bh(&cpu_queue->qlock);
+ 
+ 	return err;
+ }
+@@ -162,16 +166,11 @@ static void cryptd_queue_worker(struct w
+ 	cpu_queue = container_of(work, struct cryptd_cpu_queue, work);
+ 	/*
+ 	 * Only handle one request at a time to avoid hogging crypto workqueue.
+-	 * preempt_disable/enable is used to prevent being preempted by
+-	 * cryptd_enqueue_request(). local_bh_disable/enable is used to prevent
+-	 * cryptd_enqueue_request() being accessed from software interrupts.
+ 	 */
+-	local_bh_disable();
+-	preempt_disable();
++	spin_lock_bh(&cpu_queue->qlock);
+ 	backlog = crypto_get_backlog(&cpu_queue->queue);
+ 	req = crypto_dequeue_request(&cpu_queue->queue);
+-	preempt_enable();
+-	local_bh_enable();
++	spin_unlock_bh(&cpu_queue->qlock);
+ 
+ 	if (!req)
+ 		return;
diff --git a/debian/patches-rt/drivers_block_zram__Replace_bit_spinlocks_with_rtmutex_for_-rt.patch b/debian/patches-rt/drivers_block_zram__Replace_bit_spinlocks_with_rtmutex_for_-rt.patch
new file mode 100644
index 000000000000..cbf2b82c9251
--- /dev/null
+++ b/debian/patches-rt/drivers_block_zram__Replace_bit_spinlocks_with_rtmutex_for_-rt.patch
@@ -0,0 +1,89 @@
+Subject: drivers/block/zram: Replace bit spinlocks with rtmutex for -rt
+From: Mike Galbraith <umgwanakikbuti@gmail.com>
+Date: Thu Mar 31 04:08:28 2016 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Mike Galbraith <umgwanakikbuti@gmail.com>
+
+They're nondeterministic, and lead to ___might_sleep() splats in -rt.
+OTOH, they're a lot less wasteful than an rtmutex per page.
+
+Signed-off-by: Mike Galbraith <umgwanakikbuti@gmail.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ drivers/block/zram/zram_drv.c |   36 ++++++++++++++++++++++++++++++++++++
+ drivers/block/zram/zram_drv.h |    1 +
+ 2 files changed, 37 insertions(+)
+---
+--- a/drivers/block/zram/zram_drv.c
++++ b/drivers/block/zram/zram_drv.c
+@@ -59,6 +59,40 @@ static void zram_free_page(struct zram *
+ static int zram_bvec_read(struct zram *zram, struct bio_vec *bvec,
+ 				u32 index, int offset, struct bio *bio);
+ 
++#ifdef CONFIG_PREEMPT_RT
++static void zram_meta_init_table_locks(struct zram *zram, size_t num_pages)
++{
++	size_t index;
++
++	for (index = 0; index < num_pages; index++)
++		spin_lock_init(&zram->table[index].lock);
++}
++
++static int zram_slot_trylock(struct zram *zram, u32 index)
++{
++	int ret;
++
++	ret = spin_trylock(&zram->table[index].lock);
++	if (ret)
++		__set_bit(ZRAM_LOCK, &zram->table[index].flags);
++	return ret;
++}
++
++static void zram_slot_lock(struct zram *zram, u32 index)
++{
++	spin_lock(&zram->table[index].lock);
++	__set_bit(ZRAM_LOCK, &zram->table[index].flags);
++}
++
++static void zram_slot_unlock(struct zram *zram, u32 index)
++{
++	__clear_bit(ZRAM_LOCK, &zram->table[index].flags);
++	spin_unlock(&zram->table[index].lock);
++}
++
++#else
++
++static void zram_meta_init_table_locks(struct zram *zram, size_t num_pages) { }
+ 
+ static int zram_slot_trylock(struct zram *zram, u32 index)
+ {
+@@ -74,6 +108,7 @@ static void zram_slot_unlock(struct zram
+ {
+ 	bit_spin_unlock(ZRAM_LOCK, &zram->table[index].flags);
+ }
++#endif
+ 
+ static inline bool init_done(struct zram *zram)
+ {
+@@ -1199,6 +1234,7 @@ static bool zram_meta_alloc(struct zram
+ 
+ 	if (!huge_class_size)
+ 		huge_class_size = zs_huge_class_size(zram->mem_pool);
++	zram_meta_init_table_locks(zram, num_pages);
+ 	return true;
+ }
+ 
+--- a/drivers/block/zram/zram_drv.h
++++ b/drivers/block/zram/zram_drv.h
+@@ -63,6 +63,7 @@ struct zram_table_entry {
+ 		unsigned long element;
+ 	};
+ 	unsigned long flags;
++	spinlock_t lock;
+ #ifdef CONFIG_ZRAM_MEMORY_TRACKING
+ 	ktime_t ac_time;
+ #endif
diff --git a/debian/patches-rt/entry--Fix-the-preempt-lazy-fallout.patch b/debian/patches-rt/entry--Fix-the-preempt-lazy-fallout.patch
new file mode 100644
index 000000000000..ebfe9863138d
--- /dev/null
+++ b/debian/patches-rt/entry--Fix-the-preempt-lazy-fallout.patch
@@ -0,0 +1,41 @@
+Subject: entry: Fix the preempt lazy fallout
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Tue, 13 Jul 2021 07:52:52 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Common code needs common defines....
+
+Fixes: f2f9e496208c ("x86: Support for lazy preemption")
+Reported-by: kernel test robot <lkp@intel.com>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+---
+ arch/x86/include/asm/thread_info.h |    2 --
+ include/linux/entry-common.h       |    6 ++++++
+ 2 files changed, 6 insertions(+), 2 deletions(-)
+
+--- a/arch/x86/include/asm/thread_info.h
++++ b/arch/x86/include/asm/thread_info.h
+@@ -153,8 +153,6 @@ struct thread_info {
+ 
+ #define _TIF_WORK_CTXSW_NEXT	(_TIF_WORK_CTXSW)
+ 
+-#define _TIF_NEED_RESCHED_MASK	(_TIF_NEED_RESCHED | _TIF_NEED_RESCHED_LAZY)
+-
+ #define STACK_WARN		(THREAD_SIZE/8)
+ 
+ /*
+--- a/include/linux/entry-common.h
++++ b/include/linux/entry-common.h
+@@ -57,6 +57,12 @@
+ # define ARCH_EXIT_TO_USER_MODE_WORK		(0)
+ #endif
+ 
++#ifdef CONFIG_PREEMPT_LAZY
++# define _TIF_NEED_RESCHED_MASK	(_TIF_NEED_RESCHED | _TIF_NEED_RESCHED_LAZY)
++#else
++# define _TIF_NEED_RESCHED_MASK	(_TIF_NEED_RESCHED)
++#endif
++
+ #define EXIT_TO_USER_MODE_WORK						\
+ 	(_TIF_SIGPENDING | _TIF_NOTIFY_RESUME | _TIF_UPROBE |		\
+ 	 _TIF_NEED_RESCHED_MASK | _TIF_PATCH_PENDING | _TIF_NOTIFY_SIGNAL |	\
diff --git a/debian/patches-rt/fs-namespace-Boost-the-mount_lock.lock-owner-instead.patch b/debian/patches-rt/fs-namespace-Boost-the-mount_lock.lock-owner-instead.patch
new file mode 100644
index 000000000000..50a5710842ee
--- /dev/null
+++ b/debian/patches-rt/fs-namespace-Boost-the-mount_lock.lock-owner-instead.patch
@@ -0,0 +1,58 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Mon, 25 Oct 2021 16:49:35 +0200
+Subject: [PATCH] fs/namespace: Boost the mount_lock.lock owner instead of
+ spinning on PREEMPT_RT.
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The MNT_WRITE_HOLD flag is used to hold back any new writers while the
+mount point is about to be made read-only. __mnt_want_write() then loops
+with disabled preemption until this flag disappears. Callers of
+mnt_hold_writers() (which sets the flag) hold the spinlock_t of
+mount_lock (seqlock_t) which disables preemption on !PREEMPT_RT and
+ensures the task is not scheduled away so that the spinning side spins
+for a long time.
+
+On PREEMPT_RT the spinlock_t does not disable preemption and so it is
+possible that the task setting MNT_WRITE_HOLD is preempted by task with
+higher priority which then spins infinitely waiting for MNT_WRITE_HOLD
+to get removed.
+
+Acquire mount_lock::lock which is held by setter of MNT_WRITE_HOLD. This
+will PI-boost the owner and wait until the lock is dropped and which
+means that MNT_WRITE_HOLD is cleared again.
+
+Link: https://lkml.kernel.org/r/20211025152218.opvcqfku2lhqvp4o@linutronix.de
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ fs/namespace.c |   20 ++++++++++++++++++--
+ 1 file changed, 18 insertions(+), 2 deletions(-)
+
+--- a/fs/namespace.c
++++ b/fs/namespace.c
+@@ -343,8 +343,24 @@ int __mnt_want_write(struct vfsmount *m)
+ 	 * incremented count after it has set MNT_WRITE_HOLD.
+ 	 */
+ 	smp_mb();
+-	while (READ_ONCE(mnt->mnt.mnt_flags) & MNT_WRITE_HOLD)
+-		cpu_relax();
++	might_lock(&mount_lock.lock);
++	while (READ_ONCE(mnt->mnt.mnt_flags) & MNT_WRITE_HOLD) {
++		if (!IS_ENABLED(CONFIG_PREEMPT_RT)) {
++			cpu_relax();
++		} else {
++			/*
++			 * This prevents priority inversion, if the task
++			 * setting MNT_WRITE_HOLD got preempted on a remote
++			 * CPU, and it prevents life lock if the task setting
++			 * MNT_WRITE_HOLD has a lower priority and is bound to
++			 * the same CPU as the task that is spinning here.
++			 */
++			preempt_enable();
++			lock_mount_hash();
++			unlock_mount_hash();
++			preempt_disable();
++		}
++	}
+ 	/*
+ 	 * After the slowpath clears MNT_WRITE_HOLD, mnt_is_readonly will
+ 	 * be set to match its requirements. So we must not load that until
diff --git a/debian/patches-rt/fs_dcache__disable_preemption_on_i_dir_seqs_write_side.patch b/debian/patches-rt/fs_dcache__disable_preemption_on_i_dir_seqs_write_side.patch
new file mode 100644
index 000000000000..8bcaf735d048
--- /dev/null
+++ b/debian/patches-rt/fs_dcache__disable_preemption_on_i_dir_seqs_write_side.patch
@@ -0,0 +1,65 @@
+Subject: fs/dcache: disable preemption on i_dir_seq's write side
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri Oct 20 11:29:53 2017 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+i_dir_seq is a sequence counter with a lock which is represented by the lowest
+bit. The writer atomically updates the counter which ensures that it can be
+modified by only one writer at a time.
+The commit introducing this change claims that the lock has been integrated
+into the counter for space reasons within the inode struct. The i_dir_seq
+member is within a union which shares also a pointer. That means by using
+seqlock_t we would have a sequence counter and a lock without increasing the
+size of the data structure on 64bit and 32bit would grow by 4 bytes. With
+lockdep enabled the size would grow and on PREEMPT_RT the spinlock_t is also
+larger.
+
+In order to keep this construct working on PREEMPT_RT, the writer needs to
+disable preemption while obtaining the lock on the sequence counter / starting
+the write critical section. The writer acquires an otherwise unrelated
+spinlock_t which serves the same purpose on !PREEMPT_RT. With enabled
+preemption a high priority reader could preempt the writer and live lock the
+system while waiting for the locked bit to disappear.
+
+Another solution would be to have global spinlock_t which is always acquired
+by the writer. The reader would then acquire the lock if the sequence count is
+odd and by doing so force the writer out of the critical section. The global
+spinlock_t could be replaced by a hashed lock based on the address of the inode
+to lower the lock contention.
+
+For now, manually disable preemption on PREEMPT_RT to avoid live locks.
+
+Reported-by: Oleg.Karfich@wago.com
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ fs/dcache.c |   10 +++++++++-
+ 1 file changed, 9 insertions(+), 1 deletion(-)
+---
+--- a/fs/dcache.c
++++ b/fs/dcache.c
+@@ -2537,7 +2537,13 @@ EXPORT_SYMBOL(d_rehash);
+ 
+ static inline unsigned start_dir_add(struct inode *dir)
+ {
+-
++	/*
++	 * The caller has a spinlock_t (dentry::d_lock) acquired which disables
++	 * preemption on !PREEMPT_RT. On PREEMPT_RT the lock does not disable
++	 * preemption and it has be done explicitly.
++	 */
++	if (IS_ENABLED(CONFIG_PREEMPT_RT))
++		preempt_disable();
+ 	for (;;) {
+ 		unsigned n = dir->i_dir_seq;
+ 		if (!(n & 1) && cmpxchg(&dir->i_dir_seq, n, n + 1) == n)
+@@ -2549,6 +2555,8 @@ static inline unsigned start_dir_add(str
+ static inline void end_dir_add(struct inode *dir, unsigned n)
+ {
+ 	smp_store_release(&dir->i_dir_seq, n + 2);
++	if (IS_ENABLED(CONFIG_PREEMPT_RT))
++		preempt_enable();
+ }
+ 
+ static void d_wait_lookup(struct dentry *dentry)
diff --git a/debian/patches-rt/fs_dcache__use_swait_queue_instead_of_waitqueue.patch b/debian/patches-rt/fs_dcache__use_swait_queue_instead_of_waitqueue.patch
new file mode 100644
index 000000000000..e2733f05f874
--- /dev/null
+++ b/debian/patches-rt/fs_dcache__use_swait_queue_instead_of_waitqueue.patch
@@ -0,0 +1,240 @@
+Subject: fs/dcache: use swait_queue instead of waitqueue
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Wed Sep 14 14:35:49 2016 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+__d_lookup_done() invokes wake_up_all() while holding a hlist_bl_lock()
+which disables preemption. As a workaround convert it to swait.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ fs/afs/dir_silly.c      |    2 +-
+ fs/cifs/readdir.c       |    2 +-
+ fs/dcache.c             |   27 +++++++++++++++------------
+ fs/fuse/readdir.c       |    2 +-
+ fs/namei.c              |    4 ++--
+ fs/nfs/dir.c            |    4 ++--
+ fs/nfs/unlink.c         |    4 ++--
+ fs/proc/base.c          |    3 ++-
+ fs/proc/proc_sysctl.c   |    2 +-
+ include/linux/dcache.h  |    4 ++--
+ include/linux/nfs_xdr.h |    2 +-
+ kernel/sched/swait.c    |    1 +
+ 12 files changed, 31 insertions(+), 26 deletions(-)
+---
+--- a/fs/afs/dir_silly.c
++++ b/fs/afs/dir_silly.c
+@@ -239,7 +239,7 @@ int afs_silly_iput(struct dentry *dentry
+ 	struct dentry *alias;
+ 	int ret;
+ 
+-	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(wq);
++	DECLARE_SWAIT_QUEUE_HEAD_ONSTACK(wq);
+ 
+ 	_enter("%p{%pd},%llx", dentry, dentry, vnode->fid.vnode);
+ 
+--- a/fs/cifs/readdir.c
++++ b/fs/cifs/readdir.c
+@@ -69,7 +69,7 @@ cifs_prime_dcache(struct dentry *parent,
+ 	struct inode *inode;
+ 	struct super_block *sb = parent->d_sb;
+ 	struct cifs_sb_info *cifs_sb = CIFS_SB(sb);
+-	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(wq);
++	DECLARE_SWAIT_QUEUE_HEAD_ONSTACK(wq);
+ 
+ 	cifs_dbg(FYI, "%s: for %s\n", __func__, name->name);
+ 
+--- a/fs/dcache.c
++++ b/fs/dcache.c
+@@ -2553,21 +2553,24 @@ static inline void end_dir_add(struct in
+ 
+ static void d_wait_lookup(struct dentry *dentry)
+ {
+-	if (d_in_lookup(dentry)) {
+-		DECLARE_WAITQUEUE(wait, current);
+-		add_wait_queue(dentry->d_wait, &wait);
+-		do {
+-			set_current_state(TASK_UNINTERRUPTIBLE);
+-			spin_unlock(&dentry->d_lock);
+-			schedule();
+-			spin_lock(&dentry->d_lock);
+-		} while (d_in_lookup(dentry));
+-	}
++	struct swait_queue __wait;
++
++	if (!d_in_lookup(dentry))
++		return;
++
++	INIT_LIST_HEAD(&__wait.task_list);
++	do {
++		prepare_to_swait_exclusive(dentry->d_wait, &__wait, TASK_UNINTERRUPTIBLE);
++		spin_unlock(&dentry->d_lock);
++		schedule();
++		spin_lock(&dentry->d_lock);
++	} while (d_in_lookup(dentry));
++	finish_swait(dentry->d_wait, &__wait);
+ }
+ 
+ struct dentry *d_alloc_parallel(struct dentry *parent,
+ 				const struct qstr *name,
+-				wait_queue_head_t *wq)
++				struct swait_queue_head *wq)
+ {
+ 	unsigned int hash = name->hash;
+ 	struct hlist_bl_head *b = in_lookup_hash(parent, hash);
+@@ -2682,7 +2685,7 @@ void __d_lookup_done(struct dentry *dent
+ 	hlist_bl_lock(b);
+ 	dentry->d_flags &= ~DCACHE_PAR_LOOKUP;
+ 	__hlist_bl_del(&dentry->d_u.d_in_lookup_hash);
+-	wake_up_all(dentry->d_wait);
++	swake_up_all(dentry->d_wait);
+ 	dentry->d_wait = NULL;
+ 	hlist_bl_unlock(b);
+ 	INIT_HLIST_NODE(&dentry->d_u.d_alias);
+--- a/fs/fuse/readdir.c
++++ b/fs/fuse/readdir.c
+@@ -158,7 +158,7 @@ static int fuse_direntplus_link(struct f
+ 	struct inode *dir = d_inode(parent);
+ 	struct fuse_conn *fc;
+ 	struct inode *inode;
+-	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(wq);
++	DECLARE_SWAIT_QUEUE_HEAD_ONSTACK(wq);
+ 
+ 	if (!o->nodeid) {
+ 		/*
+--- a/fs/namei.c
++++ b/fs/namei.c
+@@ -1633,7 +1633,7 @@ static struct dentry *__lookup_slow(cons
+ {
+ 	struct dentry *dentry, *old;
+ 	struct inode *inode = dir->d_inode;
+-	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(wq);
++	DECLARE_SWAIT_QUEUE_HEAD_ONSTACK(wq);
+ 
+ 	/* Don't go there if it's already dead */
+ 	if (unlikely(IS_DEADDIR(inode)))
+@@ -3192,7 +3192,7 @@ static struct dentry *lookup_open(struct
+ 	struct dentry *dentry;
+ 	int error, create_error = 0;
+ 	umode_t mode = op->mode;
+-	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(wq);
++	DECLARE_SWAIT_QUEUE_HEAD_ONSTACK(wq);
+ 
+ 	if (unlikely(IS_DEADDIR(dir_inode)))
+ 		return ERR_PTR(-ENOENT);
+--- a/fs/nfs/dir.c
++++ b/fs/nfs/dir.c
+@@ -638,7 +638,7 @@ void nfs_prime_dcache(struct dentry *par
+ 		unsigned long dir_verifier)
+ {
+ 	struct qstr filename = QSTR_INIT(entry->name, entry->len);
+-	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(wq);
++	DECLARE_SWAIT_QUEUE_HEAD_ONSTACK(wq);
+ 	struct dentry *dentry;
+ 	struct dentry *alias;
+ 	struct inode *inode;
+@@ -1860,7 +1860,7 @@ int nfs_atomic_open(struct inode *dir, s
+ 		    struct file *file, unsigned open_flags,
+ 		    umode_t mode)
+ {
+-	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(wq);
++	DECLARE_SWAIT_QUEUE_HEAD_ONSTACK(wq);
+ 	struct nfs_open_context *ctx;
+ 	struct dentry *res;
+ 	struct iattr attr = { .ia_valid = ATTR_OPEN };
+--- a/fs/nfs/unlink.c
++++ b/fs/nfs/unlink.c
+@@ -13,7 +13,7 @@
+ #include <linux/sunrpc/clnt.h>
+ #include <linux/nfs_fs.h>
+ #include <linux/sched.h>
+-#include <linux/wait.h>
++#include <linux/swait.h>
+ #include <linux/namei.h>
+ #include <linux/fsnotify.h>
+ 
+@@ -180,7 +180,7 @@ nfs_async_unlink(struct dentry *dentry,
+ 
+ 	data->cred = get_current_cred();
+ 	data->res.dir_attr = &data->dir_attr;
+-	init_waitqueue_head(&data->wq);
++	init_swait_queue_head(&data->wq);
+ 
+ 	status = -EBUSY;
+ 	spin_lock(&dentry->d_lock);
+--- a/fs/proc/base.c
++++ b/fs/proc/base.c
+@@ -96,6 +96,7 @@
+ #include <linux/posix-timers.h>
+ #include <linux/time_namespace.h>
+ #include <linux/resctrl.h>
++#include <linux/swait.h>
+ #include <linux/cn_proc.h>
+ #include <trace/events/oom.h>
+ #include "internal.h"
+@@ -2045,7 +2046,7 @@ bool proc_fill_cache(struct file *file,
+ 
+ 	child = d_hash_and_lookup(dir, &qname);
+ 	if (!child) {
+-		DECLARE_WAIT_QUEUE_HEAD_ONSTACK(wq);
++		DECLARE_SWAIT_QUEUE_HEAD_ONSTACK(wq);
+ 		child = d_alloc_parallel(dir, &qname, &wq);
+ 		if (IS_ERR(child))
+ 			goto end_instantiate;
+--- a/fs/proc/proc_sysctl.c
++++ b/fs/proc/proc_sysctl.c
+@@ -678,7 +678,7 @@ static bool proc_sys_fill_cache(struct f
+ 
+ 	child = d_lookup(dir, &qname);
+ 	if (!child) {
+-		DECLARE_WAIT_QUEUE_HEAD_ONSTACK(wq);
++		DECLARE_SWAIT_QUEUE_HEAD_ONSTACK(wq);
+ 		child = d_alloc_parallel(dir, &qname, &wq);
+ 		if (IS_ERR(child))
+ 			return false;
+--- a/include/linux/dcache.h
++++ b/include/linux/dcache.h
+@@ -108,7 +108,7 @@ struct dentry {
+ 
+ 	union {
+ 		struct list_head d_lru;		/* LRU list */
+-		wait_queue_head_t *d_wait;	/* in-lookup ones only */
++		struct swait_queue_head *d_wait;	/* in-lookup ones only */
+ 	};
+ 	struct list_head d_child;	/* child of parent list */
+ 	struct list_head d_subdirs;	/* our children */
+@@ -240,7 +240,7 @@ extern void d_set_d_op(struct dentry *de
+ extern struct dentry * d_alloc(struct dentry *, const struct qstr *);
+ extern struct dentry * d_alloc_anon(struct super_block *);
+ extern struct dentry * d_alloc_parallel(struct dentry *, const struct qstr *,
+-					wait_queue_head_t *);
++					struct swait_queue_head *);
+ extern struct dentry * d_splice_alias(struct inode *, struct dentry *);
+ extern struct dentry * d_add_ci(struct dentry *, struct inode *, struct qstr *);
+ extern struct dentry * d_exact_alias(struct dentry *, struct inode *);
+--- a/include/linux/nfs_xdr.h
++++ b/include/linux/nfs_xdr.h
+@@ -1684,7 +1684,7 @@ struct nfs_unlinkdata {
+ 	struct nfs_removeargs args;
+ 	struct nfs_removeres res;
+ 	struct dentry *dentry;
+-	wait_queue_head_t wq;
++	struct swait_queue_head wq;
+ 	const struct cred *cred;
+ 	struct nfs_fattr dir_attr;
+ 	long timeout;
+--- a/kernel/sched/swait.c
++++ b/kernel/sched/swait.c
+@@ -64,6 +64,7 @@ void swake_up_all(struct swait_queue_hea
+ 	struct swait_queue *curr;
+ 	LIST_HEAD(tmp);
+ 
++	WARN_ON(irqs_disabled());
+ 	raw_spin_lock_irq(&q->lock);
+ 	list_splice_init(&q->task_list, &tmp);
+ 	while (!list_empty(&tmp)) {
diff --git a/debian/patches-rt/fscache-Use-only-one-fscache_object_cong_wait.patch b/debian/patches-rt/fscache-Use-only-one-fscache_object_cong_wait.patch
new file mode 100644
index 000000000000..0f78931d558b
--- /dev/null
+++ b/debian/patches-rt/fscache-Use-only-one-fscache_object_cong_wait.patch
@@ -0,0 +1,123 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 28 Oct 2021 17:30:50 +0200
+Subject: [PATCH] fscache: Use only one fscache_object_cong_wait.
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+In the commit mentioned below, fscache was converted from slow-work to
+workqueue. slow_work_enqueue() and slow_work_sleep_till_thread_needed()
+did not use a per-CPU workqueue. They choose from two global waitqueues
+depending on the SLOW_WORK_VERY_SLOW bit which was not set so it always
+one waitqueue.
+
+I can't find out how it is ensured that a waiter on certain CPU is woken
+up be the other side. My guess is that the timeout in schedule_timeout()
+ensures that it does not wait forever (or a random wake up).
+
+fscache_object_sleep_till_congested() must be invoked from preemptible
+context in order for schedule() to work. In this case this_cpu_ptr()
+should complain with CONFIG_DEBUG_PREEMPT enabled except the thread is
+bound to one CPU.
+
+wake_up() wakes only one waiter and I'm not sure if it is guaranteed
+that only one waiter exists.
+
+Replace the per-CPU waitqueue with one global waitqueue.
+
+Fixes: 8b8edefa2fffb ("fscache: convert object to use workqueue instead of slow-work")
+Reported-by: Gregor Beck <gregor.beck@gmail.com>
+Cc: stable-rt@vger.kernel.org
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lkml.kernel.org/r/20211029083839.xwwt7jgzru3kcpii@linutronix.de
+---
+ fs/fscache/internal.h |    1 -
+ fs/fscache/main.c     |    6 ------
+ fs/fscache/object.c   |   13 +++++--------
+ 3 files changed, 5 insertions(+), 15 deletions(-)
+
+--- a/fs/fscache/internal.h
++++ b/fs/fscache/internal.h
+@@ -81,7 +81,6 @@ extern unsigned fscache_debug;
+ extern struct kobject *fscache_root;
+ extern struct workqueue_struct *fscache_object_wq;
+ extern struct workqueue_struct *fscache_op_wq;
+-DECLARE_PER_CPU(wait_queue_head_t, fscache_object_cong_wait);
+ 
+ extern unsigned int fscache_hash(unsigned int salt, unsigned int *data, unsigned int n);
+ 
+--- a/fs/fscache/main.c
++++ b/fs/fscache/main.c
+@@ -41,8 +41,6 @@ struct kobject *fscache_root;
+ struct workqueue_struct *fscache_object_wq;
+ struct workqueue_struct *fscache_op_wq;
+ 
+-DEFINE_PER_CPU(wait_queue_head_t, fscache_object_cong_wait);
+-
+ /* these values serve as lower bounds, will be adjusted in fscache_init() */
+ static unsigned fscache_object_max_active = 4;
+ static unsigned fscache_op_max_active = 2;
+@@ -138,7 +136,6 @@ unsigned int fscache_hash(unsigned int s
+ static int __init fscache_init(void)
+ {
+ 	unsigned int nr_cpus = num_possible_cpus();
+-	unsigned int cpu;
+ 	int ret;
+ 
+ 	fscache_object_max_active =
+@@ -161,9 +158,6 @@ static int __init fscache_init(void)
+ 	if (!fscache_op_wq)
+ 		goto error_op_wq;
+ 
+-	for_each_possible_cpu(cpu)
+-		init_waitqueue_head(&per_cpu(fscache_object_cong_wait, cpu));
+-
+ 	ret = fscache_proc_init();
+ 	if (ret < 0)
+ 		goto error_proc;
+--- a/fs/fscache/object.c
++++ b/fs/fscache/object.c
+@@ -798,6 +798,8 @@ void fscache_object_destroy(struct fscac
+ }
+ EXPORT_SYMBOL(fscache_object_destroy);
+ 
++static DECLARE_WAIT_QUEUE_HEAD(fscache_object_cong_wait);
++
+ /*
+  * enqueue an object for metadata-type processing
+  */
+@@ -806,16 +808,12 @@ void fscache_enqueue_object(struct fscac
+ 	_enter("{OBJ%x}", object->debug_id);
+ 
+ 	if (fscache_get_object(object, fscache_obj_get_queue) >= 0) {
+-		wait_queue_head_t *cong_wq =
+-			&get_cpu_var(fscache_object_cong_wait);
+ 
+ 		if (queue_work(fscache_object_wq, &object->work)) {
+ 			if (fscache_object_congested())
+-				wake_up(cong_wq);
++				wake_up(&fscache_object_cong_wait);
+ 		} else
+ 			fscache_put_object(object, fscache_obj_put_queue);
+-
+-		put_cpu_var(fscache_object_cong_wait);
+ 	}
+ }
+ 
+@@ -833,16 +831,15 @@ void fscache_enqueue_object(struct fscac
+  */
+ bool fscache_object_sleep_till_congested(signed long *timeoutp)
+ {
+-	wait_queue_head_t *cong_wq = this_cpu_ptr(&fscache_object_cong_wait);
+ 	DEFINE_WAIT(wait);
+ 
+ 	if (fscache_object_congested())
+ 		return true;
+ 
+-	add_wait_queue_exclusive(cong_wq, &wait);
++	add_wait_queue_exclusive(&fscache_object_cong_wait, &wait);
+ 	if (!fscache_object_congested())
+ 		*timeoutp = schedule_timeout(*timeoutp);
+-	finish_wait(cong_wq, &wait);
++	finish_wait(&fscache_object_cong_wait, &wait);
+ 
+ 	return fscache_object_congested();
+ }
diff --git a/debian/patches-rt/generic-softirq-Disable-softirq-stacks-on-PREEMPT_RT.patch b/debian/patches-rt/generic-softirq-Disable-softirq-stacks-on-PREEMPT_RT.patch
new file mode 100644
index 000000000000..81e4a6e32c95
--- /dev/null
+++ b/debian/patches-rt/generic-softirq-Disable-softirq-stacks-on-PREEMPT_RT.patch
@@ -0,0 +1,30 @@
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Fri, 24 Sep 2021 17:05:48 +0200
+Subject: [PATCH] generic/softirq: Disable softirq stacks on PREEMPT_RT
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+PREEMPT_RT preempts softirqs and the current implementation avoids
+do_softirq_own_stack() and only uses __do_softirq().
+
+Disable the unused softirqs stacks on PREEMPT_RT to safe some memory and
+ensure that do_softirq_own_stack() is not used which is not expected.
+
+[bigeasy: commit description.]
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ include/asm-generic/softirq_stack.h |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/include/asm-generic/softirq_stack.h
++++ b/include/asm-generic/softirq_stack.h
+@@ -2,7 +2,7 @@
+ #ifndef __ASM_GENERIC_SOFTIRQ_STACK_H
+ #define __ASM_GENERIC_SOFTIRQ_STACK_H
+ 
+-#ifdef CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK
++#if defined(CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK) && !defined(CONFIG_PREEMPT_RT)
+ void do_softirq_own_stack(void);
+ #else
+ static inline void do_softirq_own_stack(void)
diff --git a/debian/patches-rt/irq_poll-Use-raise_softirq_irqoff-in-cpu_dead-notifi.patch b/debian/patches-rt/irq_poll-Use-raise_softirq_irqoff-in-cpu_dead-notifi.patch
new file mode 100644
index 000000000000..a3fbbd52790c
--- /dev/null
+++ b/debian/patches-rt/irq_poll-Use-raise_softirq_irqoff-in-cpu_dead-notifi.patch
@@ -0,0 +1,36 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 2 Apr 2020 21:16:30 +0200
+Subject: [PATCH] irq_poll: Use raise_softirq_irqoff() in cpu_dead notifier
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+__raise_softirq_irqoff() adds a bit to the pending sofirq mask and this
+is it. The softirq won't be handled in a deterministic way but randomly
+when an interrupt fires and handles softirq in its irq_exit() routine or
+if something randomly checks and handles pending softirqs in the call
+chain before the CPU goes idle.
+
+Add a local_bh_disable/enable() around the IRQ-off section which will
+handle pending softirqs.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lkml.kernel.org/r/20210930103754.2128949-1-bigeasy@linutronix.de
+---
+ lib/irq_poll.c |    2 ++
+ 1 file changed, 2 insertions(+)
+
+--- a/lib/irq_poll.c
++++ b/lib/irq_poll.c
+@@ -191,11 +191,13 @@ static int irq_poll_cpu_dead(unsigned in
+ 	 * If a CPU goes away, splice its entries to the current CPU
+ 	 * and trigger a run of the softirq
+ 	 */
++	local_bh_disable();
+ 	local_irq_disable();
+ 	list_splice_init(&per_cpu(blk_cpu_iopoll, cpu),
+ 			 this_cpu_ptr(&blk_cpu_iopoll));
+ 	__raise_softirq_irqoff(IRQ_POLL_SOFTIRQ);
+ 	local_irq_enable();
++	local_bh_enable();
+ 
+ 	return 0;
+ }
diff --git a/debian/patches-rt/jump-label__disable_if_stop_machine_is_used.patch b/debian/patches-rt/jump-label__disable_if_stop_machine_is_used.patch
new file mode 100644
index 000000000000..3f54a5ef2012
--- /dev/null
+++ b/debian/patches-rt/jump-label__disable_if_stop_machine_is_used.patch
@@ -0,0 +1,41 @@
+Subject: jump-label: disable if stop_machine() is used
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Wed Jul  8 17:14:48 2015 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Some architectures are using stop_machine() while switching the opcode which
+leads to latency spikes.
+The architectures which use stop_machine() atm:
+- ARM stop machine
+- s390 stop machine
+
+The architecures which use other sorcery:
+- MIPS
+- X86
+- powerpc
+- sparc
+- arm64
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+[bigeasy: only ARM for now]
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/arm/Kconfig |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+---
+--- a/arch/arm/Kconfig
++++ b/arch/arm/Kconfig
+@@ -68,7 +68,7 @@ config ARM
+ 	select HARDIRQS_SW_RESEND
+ 	select HAVE_ARCH_AUDITSYSCALL if AEABI && !OABI_COMPAT
+ 	select HAVE_ARCH_BITREVERSE if (CPU_32v7M || CPU_32v7) && !CPU_32v6
+-	select HAVE_ARCH_JUMP_LABEL if !XIP_KERNEL && !CPU_ENDIAN_BE32 && MMU
++	select HAVE_ARCH_JUMP_LABEL if !XIP_KERNEL && !CPU_ENDIAN_BE32 && MMU && !PREEMPT_RT
+ 	select HAVE_ARCH_KGDB if !CPU_ENDIAN_BE32 && MMU
+ 	select HAVE_ARCH_KASAN if MMU && !XIP_KERNEL
+ 	select HAVE_ARCH_MMAP_RND_BITS if MMU
diff --git a/debian/patches-rt/kdb__only_use_atomic_consoles_for_output_mirroring.patch b/debian/patches-rt/kdb__only_use_atomic_consoles_for_output_mirroring.patch
new file mode 100644
index 000000000000..3b47aa5f7a93
--- /dev/null
+++ b/debian/patches-rt/kdb__only_use_atomic_consoles_for_output_mirroring.patch
@@ -0,0 +1,54 @@
+Subject: kdb: only use atomic consoles for output mirroring
+From: John Ogness <john.ogness@linutronix.de>
+Date: Fri Mar 19 14:57:31 2021 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+Currently kdb uses the @oops_in_progress hack to mirror kdb output
+to all active consoles from NMI context. Ignoring locks is unsafe.
+Now that an NMI-safe atomic interfaces is available for consoles,
+use that interface to mirror kdb output.
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+
+---
+ kernel/debug/kdb/kdb_io.c |   18 ++++++------------
+ 1 file changed, 6 insertions(+), 12 deletions(-)
+---
+--- a/kernel/debug/kdb/kdb_io.c
++++ b/kernel/debug/kdb/kdb_io.c
+@@ -559,23 +559,17 @@ static void kdb_msg_write(const char *ms
+ 		cp++;
+ 	}
+ 
++	/* mirror output on atomic consoles */
+ 	for_each_console(c) {
+ 		if (!(c->flags & CON_ENABLED))
+ 			continue;
+ 		if (c == dbg_io_ops->cons)
+ 			continue;
+-		/*
+-		 * Set oops_in_progress to encourage the console drivers to
+-		 * disregard their internal spin locks: in the current calling
+-		 * context the risk of deadlock is a bigger problem than risks
+-		 * due to re-entering the console driver. We operate directly on
+-		 * oops_in_progress rather than using bust_spinlocks() because
+-		 * the calls bust_spinlocks() makes on exit are not appropriate
+-		 * for this calling context.
+-		 */
+-		++oops_in_progress;
+-		c->write(c, msg, msg_len);
+-		--oops_in_progress;
++
++		if (!c->write_atomic)
++			continue;
++		c->write_atomic(c, msg, msg_len);
++
+ 		touch_nmi_watchdog();
+ 	}
+ }
diff --git a/debian/patches-rt/kernel-locking-Use-a-pointer-in-ww_mutex_trylock.patch b/debian/patches-rt/kernel-locking-Use-a-pointer-in-ww_mutex_trylock.patch
new file mode 100644
index 000000000000..71fc9d472630
--- /dev/null
+++ b/debian/patches-rt/kernel-locking-Use-a-pointer-in-ww_mutex_trylock.patch
@@ -0,0 +1,25 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 4 Nov 2021 13:12:13 +0100
+Subject: [PATCH] kernel/locking: Use a pointer in ww_mutex_trylock().
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+mutex_acquire_nest() expects a pointer, pass the pointer.
+
+Fixes: 12235da8c80a1 ("kernel/locking: Add context to ww_mutex_trylock()")
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lkml.kernel.org/r/20211104122706.frk52zxbjorso2kv@linutronix.de
+---
+ kernel/locking/ww_rt_mutex.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/kernel/locking/ww_rt_mutex.c
++++ b/kernel/locking/ww_rt_mutex.c
+@@ -26,7 +26,7 @@ int ww_mutex_trylock(struct ww_mutex *lo
+ 
+ 	if (__rt_mutex_trylock(&rtm->rtmutex)) {
+ 		ww_mutex_set_context_fastpath(lock, ww_ctx);
+-		mutex_acquire_nest(&rtm->dep_map, 0, 1, ww_ctx->dep_map, _RET_IP_);
++		mutex_acquire_nest(&rtm->dep_map, 0, 1, &ww_ctx->dep_map, _RET_IP_);
+ 		return 1;
+ 	}
+ 
diff --git a/debian/patches-rt/kernel_sched__add_putget_cpu_light.patch b/debian/patches-rt/kernel_sched__add_putget_cpu_light.patch
new file mode 100644
index 000000000000..83a1a4263469
--- /dev/null
+++ b/debian/patches-rt/kernel_sched__add_putget_cpu_light.patch
@@ -0,0 +1,27 @@
+Subject: kernel/sched: add {put|get}_cpu_light()
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Sat May 27 19:02:06 2017 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ include/linux/smp.h |    3 +++
+ 1 file changed, 3 insertions(+)
+---
+--- a/include/linux/smp.h
++++ b/include/linux/smp.h
+@@ -267,6 +267,9 @@ static inline int get_boot_cpu_id(void)
+ #define get_cpu()		({ preempt_disable(); __smp_processor_id(); })
+ #define put_cpu()		preempt_enable()
+ 
++#define get_cpu_light()		({ migrate_disable(); __smp_processor_id(); })
++#define put_cpu_light()		migrate_enable()
++
+ /*
+  * Callback to arch code if there's nosmp or maxcpus=0 on the
+  * boot command line:
diff --git a/debian/patches-rt/lockdep-selftests-Avoid-using-local_lock_-acquire-re.patch b/debian/patches-rt/lockdep-selftests-Avoid-using-local_lock_-acquire-re.patch
new file mode 100644
index 000000000000..1e08d93af1fb
--- /dev/null
+++ b/debian/patches-rt/lockdep-selftests-Avoid-using-local_lock_-acquire-re.patch
@@ -0,0 +1,116 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri, 13 Aug 2021 18:26:10 +0200
+Subject: [PATCH] lockdep/selftests: Avoid using
+ local_lock_{acquire|release}().
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The functions local_lock related functions
+  local_lock_acquire()
+  local_lock_release()
+
+are part of the internal implementation and should be avoided.
+Define the lock as DEFINE_PER_CPU so the normal local_lock() function
+can be used.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ lib/locking-selftest.c |   30 +++++++++++++++---------------
+ 1 file changed, 15 insertions(+), 15 deletions(-)
+
+--- a/lib/locking-selftest.c
++++ b/lib/locking-selftest.c
+@@ -139,7 +139,7 @@ static DEFINE_RT_MUTEX(rtmutex_Z2);
+ 
+ #endif
+ 
+-static local_lock_t local_A = INIT_LOCAL_LOCK(local_A);
++static DEFINE_PER_CPU(local_lock_t, local_A);
+ 
+ /*
+  * non-inlined runtime initializers, to let separate locks share
+@@ -1320,7 +1320,7 @@ GENERATE_PERMUTATIONS_3_EVENTS(irq_read_
+ # define I_MUTEX(x)	lockdep_reset_lock(&mutex_##x.dep_map)
+ # define I_RWSEM(x)	lockdep_reset_lock(&rwsem_##x.dep_map)
+ # define I_WW(x)	lockdep_reset_lock(&x.dep_map)
+-# define I_LOCAL_LOCK(x) lockdep_reset_lock(&local_##x.dep_map)
++# define I_LOCAL_LOCK(x) lockdep_reset_lock(this_cpu_ptr(&local_##x.dep_map))
+ #ifdef CONFIG_RT_MUTEXES
+ # define I_RTMUTEX(x)	lockdep_reset_lock(&rtmutex_##x.dep_map)
+ #endif
+@@ -1380,7 +1380,7 @@ static void reset_locks(void)
+ 	init_shared_classes();
+ 	raw_spin_lock_init(&raw_lock_A);
+ 	raw_spin_lock_init(&raw_lock_B);
+-	local_lock_init(&local_A);
++	local_lock_init(this_cpu_ptr(&local_A));
+ 
+ 	ww_mutex_init(&o, &ww_lockdep); ww_mutex_init(&o2, &ww_lockdep); ww_mutex_init(&o3, &ww_lockdep);
+ 	memset(&t, 0, sizeof(t)); memset(&t2, 0, sizeof(t2));
+@@ -2646,8 +2646,8 @@ static void wait_context_tests(void)
+ 
+ static void local_lock_2(void)
+ {
+-	local_lock_acquire(&local_A);	/* IRQ-ON */
+-	local_lock_release(&local_A);
++	local_lock(&local_A);	/* IRQ-ON */
++	local_unlock(&local_A);
+ 
+ 	HARDIRQ_ENTER();
+ 	spin_lock(&lock_A);		/* IN-IRQ */
+@@ -2656,18 +2656,18 @@ static void local_lock_2(void)
+ 
+ 	HARDIRQ_DISABLE();
+ 	spin_lock(&lock_A);
+-	local_lock_acquire(&local_A);	/* IN-IRQ <-> IRQ-ON cycle, false */
+-	local_lock_release(&local_A);
++	local_lock(&local_A);	/* IN-IRQ <-> IRQ-ON cycle, false */
++	local_unlock(&local_A);
+ 	spin_unlock(&lock_A);
+ 	HARDIRQ_ENABLE();
+ }
+ 
+ static void local_lock_3A(void)
+ {
+-	local_lock_acquire(&local_A);	/* IRQ-ON */
++	local_lock(&local_A);	/* IRQ-ON */
+ 	spin_lock(&lock_B);		/* IRQ-ON */
+ 	spin_unlock(&lock_B);
+-	local_lock_release(&local_A);
++	local_unlock(&local_A);
+ 
+ 	HARDIRQ_ENTER();
+ 	spin_lock(&lock_A);		/* IN-IRQ */
+@@ -2676,18 +2676,18 @@ static void local_lock_3A(void)
+ 
+ 	HARDIRQ_DISABLE();
+ 	spin_lock(&lock_A);
+-	local_lock_acquire(&local_A);	/* IN-IRQ <-> IRQ-ON cycle only if we count local_lock(), false */
+-	local_lock_release(&local_A);
++	local_lock(&local_A);	/* IN-IRQ <-> IRQ-ON cycle only if we count local_lock(), false */
++	local_unlock(&local_A);
+ 	spin_unlock(&lock_A);
+ 	HARDIRQ_ENABLE();
+ }
+ 
+ static void local_lock_3B(void)
+ {
+-	local_lock_acquire(&local_A);	/* IRQ-ON */
++	local_lock(&local_A);	/* IRQ-ON */
+ 	spin_lock(&lock_B);		/* IRQ-ON */
+ 	spin_unlock(&lock_B);
+-	local_lock_release(&local_A);
++	local_unlock(&local_A);
+ 
+ 	HARDIRQ_ENTER();
+ 	spin_lock(&lock_A);		/* IN-IRQ */
+@@ -2696,8 +2696,8 @@ static void local_lock_3B(void)
+ 
+ 	HARDIRQ_DISABLE();
+ 	spin_lock(&lock_A);
+-	local_lock_acquire(&local_A);	/* IN-IRQ <-> IRQ-ON cycle only if we count local_lock(), false */
+-	local_lock_release(&local_A);
++	local_lock(&local_A);	/* IN-IRQ <-> IRQ-ON cycle only if we count local_lock(), false */
++	local_unlock(&local_A);
+ 	spin_unlock(&lock_A);
+ 	HARDIRQ_ENABLE();
+ 
diff --git a/debian/patches-rt/locking-Allow-to-include-asm-spinlock_types.h-from-l.patch b/debian/patches-rt/locking-Allow-to-include-asm-spinlock_types.h-from-l.patch
new file mode 100644
index 000000000000..79086fedfec6
--- /dev/null
+++ b/debian/patches-rt/locking-Allow-to-include-asm-spinlock_types.h-from-l.patch
@@ -0,0 +1,266 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue, 17 Aug 2021 09:48:31 +0200
+Subject: [PATCH] locking: Allow to include asm/spinlock_types.h from
+ linux/spinlock_types_raw.h
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The printk header file includes ratelimit_types.h for its __ratelimit()
+based usage. It requires it for the static initializer used in
+printk_ratelimited(). It uses a raw_spinlock_t and includes the
+spinlock_types.h. It makes no difference on non PREEMPT-RT builds but
+PREEMPT-RT replaces the inner part of some locks and therefore includes
+rtmutex.h and atomic.h which leads to recursive includes where defines
+are missing.
+By including only the raw_spinlock_t defines it avoids the atomic.h
+related includes at this stage.
+
+An example on powerpc:
+
+|  CALL    scripts/atomic/check-atomics.sh
+|In file included from include/linux/bug.h:5,
+|                 from include/linux/page-flags.h:10,
+|                 from kernel/bounds.c:10:
+|arch/powerpc/include/asm/page_32.h: In function ‘clear_page’:
+|arch/powerpc/include/asm/bug.h:87:4: error: implicit declaration of function ‘__WARN’ [-Werror=implicit-function-declaration]
+|   87 |    __WARN();    \
+|      |    ^~~~~~
+|arch/powerpc/include/asm/page_32.h:48:2: note: in expansion of macro ‘WARN_ON’
+|   48 |  WARN_ON((unsigned long)addr & (L1_CACHE_BYTES - 1));
+|      |  ^~~~~~~
+|arch/powerpc/include/asm/bug.h:58:17: error: invalid application of ‘sizeof’ to incomplete type ‘struct bug_entry’
+|   58 |     "i" (sizeof(struct bug_entry)), \
+|      |                 ^~~~~~
+|arch/powerpc/include/asm/bug.h:89:3: note: in expansion of macro ‘BUG_ENTRY’
+|   89 |   BUG_ENTRY(PPC_TLNEI " %4, 0",   \
+|      |   ^~~~~~~~~
+|arch/powerpc/include/asm/page_32.h:48:2: note: in expansion of macro ‘WARN_ON’
+|   48 |  WARN_ON((unsigned long)addr & (L1_CACHE_BYTES - 1));
+|      |  ^~~~~~~
+|In file included from arch/powerpc/include/asm/ptrace.h:298,
+|                 from arch/powerpc/include/asm/hw_irq.h:12,
+|                 from arch/powerpc/include/asm/irqflags.h:12,
+|                 from include/linux/irqflags.h:16,
+|                 from include/asm-generic/cmpxchg-local.h:6,
+|                 from arch/powerpc/include/asm/cmpxchg.h:526,
+|                 from arch/powerpc/include/asm/atomic.h:11,
+|                 from include/linux/atomic.h:7,
+|                 from include/linux/rwbase_rt.h:6,
+|                 from include/linux/rwlock_types.h:55,
+|                 from include/linux/spinlock_types.h:74,
+|                 from include/linux/ratelimit_types.h:7,
+|                 from include/linux/printk.h:10,
+|                 from include/asm-generic/bug.h:22,
+|                 from arch/powerpc/include/asm/bug.h:109,
+|                 from include/linux/bug.h:5,
+|                 from include/linux/page-flags.h:10,
+|                 from kernel/bounds.c:10:
+|include/linux/thread_info.h: In function ‘copy_overflow’:
+|include/linux/thread_info.h:210:2: error: implicit declaration of function ‘WARN’ [-Werror=implicit-function-declaration]
+|  210 |  WARN(1, "Buffer overflow detected (%d < %lu)!\n", size, count);
+|      |  ^~~~
+
+The WARN / BUG include pulls in printk.h and then ptrace.h expects WARN
+(from bug.h) which is not yet complete. Even hw_irq.h has WARN_ON()
+statements.
+
+On POWERPC64 there are missing atomic64 defines while building 32bit
+VDSO:
+|  VDSO32C arch/powerpc/kernel/vdso32/vgettimeofday.o
+|In file included from include/linux/atomic.h:80,
+|                 from include/linux/rwbase_rt.h:6,
+|                 from include/linux/rwlock_types.h:55,
+|                 from include/linux/spinlock_types.h:74,
+|                 from include/linux/ratelimit_types.h:7,
+|                 from include/linux/printk.h:10,
+|                 from include/linux/kernel.h:19,
+|                 from arch/powerpc/include/asm/page.h:11,
+|                 from arch/powerpc/include/asm/vdso/gettimeofday.h:5,
+|                 from include/vdso/datapage.h:137,
+|                 from lib/vdso/gettimeofday.c:5,
+|                 from <command-line>:
+|include/linux/atomic-arch-fallback.h: In function ‘arch_atomic64_inc’:
+|include/linux/atomic-arch-fallback.h:1447:2: error: implicit declaration of function ‘arch_atomic64_add’; did you mean ‘arch_atomic_add’? [-Werror=impl
+|icit-function-declaration]
+| 1447 |  arch_atomic64_add(1, v);
+|      |  ^~~~~~~~~~~~~~~~~
+|      |  arch_atomic_add
+
+The generic fallback is not included, atomics itself are not used. If
+kernel.h does not include printk.h then it comes later from the bug.h
+include.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ arch/alpha/include/asm/spinlock_types.h          |    2 +-
+ arch/arm/include/asm/spinlock_types.h            |    2 +-
+ arch/arm64/include/asm/spinlock_types.h          |    2 +-
+ arch/csky/include/asm/spinlock_types.h           |    2 +-
+ arch/hexagon/include/asm/spinlock_types.h        |    2 +-
+ arch/ia64/include/asm/spinlock_types.h           |    2 +-
+ arch/powerpc/include/asm/simple_spinlock_types.h |    2 +-
+ arch/powerpc/include/asm/spinlock_types.h        |    2 +-
+ arch/riscv/include/asm/spinlock_types.h          |    2 +-
+ arch/s390/include/asm/spinlock_types.h           |    2 +-
+ arch/sh/include/asm/spinlock_types.h             |    2 +-
+ arch/xtensa/include/asm/spinlock_types.h         |    2 +-
+ include/linux/ratelimit_types.h                  |    2 +-
+ include/linux/spinlock_types_up.h                |    2 +-
+ 14 files changed, 14 insertions(+), 14 deletions(-)
+
+--- a/arch/alpha/include/asm/spinlock_types.h
++++ b/arch/alpha/include/asm/spinlock_types.h
+@@ -2,7 +2,7 @@
+ #ifndef _ALPHA_SPINLOCK_TYPES_H
+ #define _ALPHA_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/arm/include/asm/spinlock_types.h
++++ b/arch/arm/include/asm/spinlock_types.h
+@@ -2,7 +2,7 @@
+ #ifndef __ASM_SPINLOCK_TYPES_H
+ #define __ASM_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/arm64/include/asm/spinlock_types.h
++++ b/arch/arm64/include/asm/spinlock_types.h
+@@ -5,7 +5,7 @@
+ #ifndef __ASM_SPINLOCK_TYPES_H
+ #define __ASM_SPINLOCK_TYPES_H
+ 
+-#if !defined(__LINUX_SPINLOCK_TYPES_H) && !defined(__ASM_SPINLOCK_H)
++#if !defined(__LINUX_SPINLOCK_TYPES_RAW_H) && !defined(__ASM_SPINLOCK_H)
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/csky/include/asm/spinlock_types.h
++++ b/arch/csky/include/asm/spinlock_types.h
+@@ -3,7 +3,7 @@
+ #ifndef __ASM_CSKY_SPINLOCK_TYPES_H
+ #define __ASM_CSKY_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/hexagon/include/asm/spinlock_types.h
++++ b/arch/hexagon/include/asm/spinlock_types.h
+@@ -8,7 +8,7 @@
+ #ifndef _ASM_SPINLOCK_TYPES_H
+ #define _ASM_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/ia64/include/asm/spinlock_types.h
++++ b/arch/ia64/include/asm/spinlock_types.h
+@@ -2,7 +2,7 @@
+ #ifndef _ASM_IA64_SPINLOCK_TYPES_H
+ #define _ASM_IA64_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/powerpc/include/asm/simple_spinlock_types.h
++++ b/arch/powerpc/include/asm/simple_spinlock_types.h
+@@ -2,7 +2,7 @@
+ #ifndef _ASM_POWERPC_SIMPLE_SPINLOCK_TYPES_H
+ #define _ASM_POWERPC_SIMPLE_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/powerpc/include/asm/spinlock_types.h
++++ b/arch/powerpc/include/asm/spinlock_types.h
+@@ -2,7 +2,7 @@
+ #ifndef _ASM_POWERPC_SPINLOCK_TYPES_H
+ #define _ASM_POWERPC_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/riscv/include/asm/spinlock_types.h
++++ b/arch/riscv/include/asm/spinlock_types.h
+@@ -6,7 +6,7 @@
+ #ifndef _ASM_RISCV_SPINLOCK_TYPES_H
+ #define _ASM_RISCV_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/s390/include/asm/spinlock_types.h
++++ b/arch/s390/include/asm/spinlock_types.h
+@@ -2,7 +2,7 @@
+ #ifndef __ASM_SPINLOCK_TYPES_H
+ #define __ASM_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/sh/include/asm/spinlock_types.h
++++ b/arch/sh/include/asm/spinlock_types.h
+@@ -2,7 +2,7 @@
+ #ifndef __ASM_SH_SPINLOCK_TYPES_H
+ #define __ASM_SH_SPINLOCK_TYPES_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/arch/xtensa/include/asm/spinlock_types.h
++++ b/arch/xtensa/include/asm/spinlock_types.h
+@@ -2,7 +2,7 @@
+ #ifndef __ASM_SPINLOCK_TYPES_H
+ #define __ASM_SPINLOCK_TYPES_H
+ 
+-#if !defined(__LINUX_SPINLOCK_TYPES_H) && !defined(__ASM_SPINLOCK_H)
++#if !defined(__LINUX_SPINLOCK_TYPES_RAW_H) && !defined(__ASM_SPINLOCK_H)
+ # error "please don't include this file directly"
+ #endif
+ 
+--- a/include/linux/ratelimit_types.h
++++ b/include/linux/ratelimit_types.h
+@@ -4,7 +4,7 @@
+ 
+ #include <linux/bits.h>
+ #include <linux/param.h>
+-#include <linux/spinlock_types.h>
++#include <linux/spinlock_types_raw.h>
+ 
+ #define DEFAULT_RATELIMIT_INTERVAL	(5 * HZ)
+ #define DEFAULT_RATELIMIT_BURST		10
+--- a/include/linux/spinlock_types_up.h
++++ b/include/linux/spinlock_types_up.h
+@@ -1,7 +1,7 @@
+ #ifndef __LINUX_SPINLOCK_TYPES_UP_H
+ #define __LINUX_SPINLOCK_TYPES_UP_H
+ 
+-#ifndef __LINUX_SPINLOCK_TYPES_H
++#ifndef __LINUX_SPINLOCK_TYPES_RAW_H
+ # error "please don't include this file directly"
+ #endif
+ 
diff --git a/debian/patches-rt/locking-Remove-rt_rwlock_is_contended.patch b/debian/patches-rt/locking-Remove-rt_rwlock_is_contended.patch
new file mode 100644
index 000000000000..c858ae469c4f
--- /dev/null
+++ b/debian/patches-rt/locking-Remove-rt_rwlock_is_contended.patch
@@ -0,0 +1,34 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue, 7 Sep 2021 12:11:47 +0200
+Subject: [PATCH] locking: Remove rt_rwlock_is_contended()
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+rt_rwlock_is_contended() has not users. It makes no sense to use it as
+rwlock_is_contended() because it is a sleeping lock on RT and preemption
+is possible. It reports always != 0 if used by a writer and even if
+there is a waiter then the lock might not be handed over if the
+current owner has the highest priority.
+
+Remove rt_rwlock_is_contended().
+
+Reported-by: kernel test robot <lkp@intel.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ kernel/locking/spinlock_rt.c |    6 ------
+ 1 file changed, 6 deletions(-)
+
+--- a/kernel/locking/spinlock_rt.c
++++ b/kernel/locking/spinlock_rt.c
+@@ -257,12 +257,6 @@ void __sched rt_write_unlock(rwlock_t *r
+ }
+ EXPORT_SYMBOL(rt_write_unlock);
+ 
+-int __sched rt_rwlock_is_contended(rwlock_t *rwlock)
+-{
+-	return rw_base_is_contended(&rwlock->rwbase);
+-}
+-EXPORT_SYMBOL(rt_rwlock_is_contended);
+-
+ #ifdef CONFIG_DEBUG_LOCK_ALLOC
+ void __rt_rwlock_init(rwlock_t *rwlock, const char *name,
+ 		      struct lock_class_key *key)
diff --git a/debian/patches-rt/md__raid5__Make_raid5_percpu_handling_RT_aware.patch b/debian/patches-rt/md__raid5__Make_raid5_percpu_handling_RT_aware.patch
new file mode 100644
index 000000000000..939c6d1b50c4
--- /dev/null
+++ b/debian/patches-rt/md__raid5__Make_raid5_percpu_handling_RT_aware.patch
@@ -0,0 +1,66 @@
+Subject: md: raid5: Make raid5_percpu handling RT aware
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Tue Apr  6 16:51:31 2010 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+__raid_run_ops() disables preemption with get_cpu() around the access
+to the raid5_percpu variables. That causes scheduling while atomic
+spews on RT.
+
+Serialize the access to the percpu data with a lock and keep the code
+preemptible.
+
+Reported-by: Udo van den Heuvel <udovdh@xs4all.nl>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Tested-by: Udo van den Heuvel <udovdh@xs4all.nl>
+
+
+
+---
+ drivers/md/raid5.c |    7 +++++--
+ drivers/md/raid5.h |    1 +
+ 2 files changed, 6 insertions(+), 2 deletions(-)
+---
+--- a/drivers/md/raid5.c
++++ b/drivers/md/raid5.c
+@@ -2217,8 +2217,9 @@ static void raid_run_ops(struct stripe_h
+ 	struct raid5_percpu *percpu;
+ 	unsigned long cpu;
+ 
+-	cpu = get_cpu();
++	cpu = get_cpu_light();
+ 	percpu = per_cpu_ptr(conf->percpu, cpu);
++	spin_lock(&percpu->lock);
+ 	if (test_bit(STRIPE_OP_BIOFILL, &ops_request)) {
+ 		ops_run_biofill(sh);
+ 		overlap_clear++;
+@@ -2277,7 +2278,8 @@ static void raid_run_ops(struct stripe_h
+ 			if (test_and_clear_bit(R5_Overlap, &dev->flags))
+ 				wake_up(&sh->raid_conf->wait_for_overlap);
+ 		}
+-	put_cpu();
++	spin_unlock(&percpu->lock);
++	put_cpu_light();
+ }
+ 
+ static void free_stripe(struct kmem_cache *sc, struct stripe_head *sh)
+@@ -7102,6 +7104,7 @@ static int raid456_cpu_up_prepare(unsign
+ 			__func__, cpu);
+ 		return -ENOMEM;
+ 	}
++	spin_lock_init(&per_cpu_ptr(conf->percpu, cpu)->lock);
+ 	return 0;
+ }
+ 
+--- a/drivers/md/raid5.h
++++ b/drivers/md/raid5.h
+@@ -635,6 +635,7 @@ struct r5conf {
+ 	int			recovery_disabled;
+ 	/* per cpu variables */
+ 	struct raid5_percpu {
++		spinlock_t	lock;		/* Protection for -RT */
+ 		struct page	*spare_page; /* Used when checking P/Q in raid6 */
+ 		void		*scribble;  /* space for constructing buffer
+ 					     * lists and performing address
diff --git a/debian/patches-rt/mm-Disable-zsmalloc-on-PREEMPT_RT.patch b/debian/patches-rt/mm-Disable-zsmalloc-on-PREEMPT_RT.patch
new file mode 100644
index 000000000000..ac297644e59d
--- /dev/null
+++ b/debian/patches-rt/mm-Disable-zsmalloc-on-PREEMPT_RT.patch
@@ -0,0 +1,47 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 23 Sep 2021 15:51:48 +0200
+Subject: [PATCH] mm: Disable zsmalloc on PREEMPT_RT
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+For efficiency reasons, zsmalloc is using a slim `handle'. The value is
+the address of a memory allocation of 4 or 8 bytes depending on the size
+of the long data type. The lowest bit in that allocated memory is used
+as a bit spin lock.
+The usage of the bit spin lock is problematic because with the bit spin
+lock held zsmalloc acquires a rwlock_t and spinlock_t which are both
+sleeping locks on PREEMPT_RT and therefore must not be acquired with
+disabled preemption.
+
+There is a patch which extends the handle on PREEMPT_RT so that a full
+spinlock_t fits (even with lockdep enabled) and then eliminates the bit
+spin lock. I'm not sure how sensible zsmalloc on PREEMPT_RT is given
+that it is used to store compressed user memory.
+
+Disable ZSMALLOC on PREEMPT_RT. If there is need for it, we can try to
+get it to work.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lkml.kernel.org/r/20210923170121.1860133-1-bigeasy@linutronix.de
+---
+ mm/Kconfig |    3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+--- a/mm/Kconfig
++++ b/mm/Kconfig
+@@ -643,6 +643,7 @@ config ZSWAP_ZPOOL_DEFAULT_Z3FOLD
+ 
+ config ZSWAP_ZPOOL_DEFAULT_ZSMALLOC
+ 	bool "zsmalloc"
++	depends on !PREEMPT_RT
+ 	select ZSMALLOC
+ 	help
+ 	  Use the zsmalloc allocator as the default allocator.
+@@ -693,7 +694,7 @@ config Z3FOLD
+ 
+ config ZSMALLOC
+ 	tristate "Memory allocator for compressed pages"
+-	depends on MMU
++	depends on MMU && !PREEMPT_RT
+ 	help
+ 	  zsmalloc is a slab-based memory allocator designed to store
+ 	  compressed RAM pages.  zsmalloc uses virtual memory mapping
diff --git a/debian/patches-rt/mm-memcontro--Disable-on-PREEMPT_RT.patch b/debian/patches-rt/mm-memcontro--Disable-on-PREEMPT_RT.patch
new file mode 100644
index 000000000000..c57e72b7da7f
--- /dev/null
+++ b/debian/patches-rt/mm-memcontro--Disable-on-PREEMPT_RT.patch
@@ -0,0 +1,26 @@
+Subject: mm/memcontrol: Disable on PREEMPT_RT
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Sun, 25 Jul 2021 21:35:46 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+559271146efc ("mm/memcg: optimize user context object stock access") is a
+classic example of optimizing for the cpu local BKL serialization without a
+clear protection scope.
+
+Disable MEMCG on RT for now.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+---
+ init/Kconfig |    1 +
+ 1 file changed, 1 insertion(+)
+
+--- a/init/Kconfig
++++ b/init/Kconfig
+@@ -943,6 +943,7 @@ config PAGE_COUNTER
+ 
+ config MEMCG
+ 	bool "Memory controller"
++	depends on !PREEMPT_RT
+ 	select PAGE_COUNTER
+ 	select EVENTFD
+ 	help
diff --git a/debian/patches-rt/mm__workingset__replace_IRQ-off_check_with_a_lockdep_assert..patch b/debian/patches-rt/mm__workingset__replace_IRQ-off_check_with_a_lockdep_assert..patch
new file mode 100644
index 000000000000..8796de4c0013
--- /dev/null
+++ b/debian/patches-rt/mm__workingset__replace_IRQ-off_check_with_a_lockdep_assert..patch
@@ -0,0 +1,46 @@
+Subject: mm: workingset: replace IRQ-off check with a lockdep assert.
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Mon Feb 11 10:40:46 2019 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Commit
+
+  68d48e6a2df57 ("mm: workingset: add vmstat counter for shadow nodes")
+
+introduced an IRQ-off check to ensure that a lock is held which also
+disabled interrupts. This does not work the same way on -RT because none
+of the locks, that are held, disable interrupts.
+Replace this check with a lockdep assert which ensures that the lock is
+held.
+
+Cc: Peter Zijlstra <peterz@infradead.org>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Link: https://lkml.kernel.org/r/20190211113829.sqf6bdi4c4cdd3rp@linutronix.de
+---
+ mm/workingset.c |    5 ++++-
+ 1 file changed, 4 insertions(+), 1 deletion(-)
+---
+--- a/mm/workingset.c
++++ b/mm/workingset.c
+@@ -433,6 +433,8 @@ static struct list_lru shadow_nodes;
+ 
+ void workingset_update_node(struct xa_node *node)
+ {
++	struct address_space *mapping;
++
+ 	/*
+ 	 * Track non-empty nodes that contain only shadow entries;
+ 	 * unlink those that contain pages or are being freed.
+@@ -441,7 +443,8 @@ void workingset_update_node(struct xa_no
+ 	 * already where they should be. The list_empty() test is safe
+ 	 * as node->private_list is protected by the i_pages lock.
+ 	 */
+-	VM_WARN_ON_ONCE(!irqs_disabled());  /* For __inc_lruvec_page_state */
++	mapping = container_of(node->array, struct address_space, i_pages);
++	lockdep_assert_held(&mapping->i_pages.xa_lock);
+ 
+ 	if (node->count && node->count == node->nr_values) {
+ 		if (list_empty(&node->private_list)) {
diff --git a/debian/patches-rt/mm_vmalloc__Another_preempt_disable_region_which_sucks.patch b/debian/patches-rt/mm_vmalloc__Another_preempt_disable_region_which_sucks.patch
new file mode 100644
index 000000000000..5c148761b507
--- /dev/null
+++ b/debian/patches-rt/mm_vmalloc__Another_preempt_disable_region_which_sucks.patch
@@ -0,0 +1,51 @@
+Subject: mm/vmalloc: Another preempt disable region which sucks
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Tue Jul 12 11:39:36 2011 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Avoid the preempt disable version of get_cpu_var(). The inner-lock should
+provide enough serialisation.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+---
+ mm/vmalloc.c |   10 ++++++----
+ 1 file changed, 6 insertions(+), 4 deletions(-)
+---
+--- a/mm/vmalloc.c
++++ b/mm/vmalloc.c
+@@ -1922,11 +1922,12 @@ static void *new_vmap_block(unsigned int
+ 		return ERR_PTR(err);
+ 	}
+ 
+-	vbq = &get_cpu_var(vmap_block_queue);
++	get_cpu_light();
++	vbq = this_cpu_ptr(&vmap_block_queue);
+ 	spin_lock(&vbq->lock);
+ 	list_add_tail_rcu(&vb->free_list, &vbq->free);
+ 	spin_unlock(&vbq->lock);
+-	put_cpu_var(vmap_block_queue);
++	put_cpu_light();
+ 
+ 	return vaddr;
+ }
+@@ -2005,7 +2006,8 @@ static void *vb_alloc(unsigned long size
+ 	order = get_order(size);
+ 
+ 	rcu_read_lock();
+-	vbq = &get_cpu_var(vmap_block_queue);
++	get_cpu_light();
++	vbq = this_cpu_ptr(&vmap_block_queue);
+ 	list_for_each_entry_rcu(vb, &vbq->free, free_list) {
+ 		unsigned long pages_off;
+ 
+@@ -2028,7 +2030,7 @@ static void *vb_alloc(unsigned long size
+ 		break;
+ 	}
+ 
+-	put_cpu_var(vmap_block_queue);
++	put_cpu_light();
+ 	rcu_read_unlock();
+ 
+ 	/* Allocate new block if nothing was found */
diff --git a/debian/patches-rt/net__Dequeue_in_dev_cpu_dead_without_the_lock.patch b/debian/patches-rt/net__Dequeue_in_dev_cpu_dead_without_the_lock.patch
new file mode 100644
index 000000000000..7fd2a4fcf0ca
--- /dev/null
+++ b/debian/patches-rt/net__Dequeue_in_dev_cpu_dead_without_the_lock.patch
@@ -0,0 +1,36 @@
+Subject: net: Dequeue in dev_cpu_dead() without the lock
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Wed Sep 16 16:15:39 2020 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Upstream uses skb_dequeue() to acquire lock of `input_pkt_queue'. The reason is
+to synchronize against a remote CPU which still thinks that the CPU is online
+enqueues packets to this CPU.
+There are no guarantees that the packet is enqueued before the callback is run,
+it just hope.
+RT however complains about an not initialized lock because it uses another lock
+for `input_pkt_queue' due to the IRQ-off nature of the context.
+
+Use the unlocked dequeue version for `input_pkt_queue'.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ net/core/dev.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+---
+--- a/net/core/dev.c
++++ b/net/core/dev.c
+@@ -11344,7 +11344,7 @@ static int dev_cpu_dead(unsigned int old
+ 		netif_rx_ni(skb);
+ 		input_queue_head_incr(oldsd);
+ 	}
+-	while ((skb = skb_dequeue(&oldsd->input_pkt_queue))) {
++	while ((skb = __skb_dequeue(&oldsd->input_pkt_queue))) {
+ 		netif_rx_ni(skb);
+ 		input_queue_head_incr(oldsd);
+ 	}
diff --git a/debian/patches-rt/net__Remove_preemption_disabling_in_netif_rx.patch b/debian/patches-rt/net__Remove_preemption_disabling_in_netif_rx.patch
new file mode 100644
index 000000000000..ed9c2679cd34
--- /dev/null
+++ b/debian/patches-rt/net__Remove_preemption_disabling_in_netif_rx.patch
@@ -0,0 +1,68 @@
+Subject: net: Remove preemption disabling in netif_rx()
+From: Priyanka Jain <Priyanka.Jain@freescale.com>
+Date: Thu May 17 09:35:11 2012 +0530
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Priyanka Jain <Priyanka.Jain@freescale.com>
+
+1)enqueue_to_backlog() (called from netif_rx) should be
+  bind to a particluar CPU. This can be achieved by
+  disabling migration. No need to disable preemption
+
+2)Fixes crash "BUG: scheduling while atomic: ksoftirqd"
+  in case of RT.
+  If preemption is disabled, enqueue_to_backog() is called
+  in atomic context. And if backlog exceeds its count,
+  kfree_skb() is called. But in RT, kfree_skb() might
+  gets scheduled out, so it expects non atomic context.
+
+-Replace preempt_enable(), preempt_disable() with
+ migrate_enable(), migrate_disable() respectively
+-Replace get_cpu(), put_cpu() with get_cpu_light(),
+ put_cpu_light() respectively
+
+Signed-off-by: Priyanka Jain <Priyanka.Jain@freescale.com>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Acked-by: Rajan Srivastava <Rajan.Srivastava@freescale.com>
+Cc: <rostedt@goodmis.orgn>
+Link: http://lkml.kernel.org/r/1337227511-2271-1-git-send-email-Priyanka.Jain@freescale.com
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+[bigeasy: Remove assumption about migrate_disable() from the description.]
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ net/core/dev.c |    8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+---
+--- a/net/core/dev.c
++++ b/net/core/dev.c
+@@ -4908,7 +4908,7 @@ static int netif_rx_internal(struct sk_b
+ 		struct rps_dev_flow voidflow, *rflow = &voidflow;
+ 		int cpu;
+ 
+-		preempt_disable();
++		migrate_disable();
+ 		rcu_read_lock();
+ 
+ 		cpu = get_rps_cpu(skb->dev, skb, &rflow);
+@@ -4918,14 +4918,14 @@ static int netif_rx_internal(struct sk_b
+ 		ret = enqueue_to_backlog(skb, cpu, &rflow->last_qtail);
+ 
+ 		rcu_read_unlock();
+-		preempt_enable();
++		migrate_enable();
+ 	} else
+ #endif
+ 	{
+ 		unsigned int qtail;
+ 
+-		ret = enqueue_to_backlog(skb, get_cpu(), &qtail);
+-		put_cpu();
++		ret = enqueue_to_backlog(skb, get_cpu_light(), &qtail);
++		put_cpu_light();
+ 	}
+ 	return ret;
+ }
diff --git a/debian/patches-rt/net__Use_skbufhead_with_raw_lock.patch b/debian/patches-rt/net__Use_skbufhead_with_raw_lock.patch
new file mode 100644
index 000000000000..5191c75e2f5c
--- /dev/null
+++ b/debian/patches-rt/net__Use_skbufhead_with_raw_lock.patch
@@ -0,0 +1,70 @@
+Subject: net: Use skbufhead with raw lock
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Tue Jul 12 15:38:34 2011 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Use the rps lock as rawlock so we can keep irq-off regions. It looks low
+latency. However we can't kfree() from this context therefore we defer this
+to the softirq and use the tofree_queue list for it (similar to process_queue).
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ include/linux/skbuff.h |    7 +++++++
+ net/core/dev.c         |    6 +++---
+ 2 files changed, 10 insertions(+), 3 deletions(-)
+---
+--- a/include/linux/skbuff.h
++++ b/include/linux/skbuff.h
+@@ -297,6 +297,7 @@ struct sk_buff_head {
+ 
+ 	__u32		qlen;
+ 	spinlock_t	lock;
++	raw_spinlock_t	raw_lock;
+ };
+ 
+ struct sk_buff;
+@@ -1953,6 +1954,12 @@ static inline void skb_queue_head_init(s
+ 	__skb_queue_head_init(list);
+ }
+ 
++static inline void skb_queue_head_init_raw(struct sk_buff_head *list)
++{
++	raw_spin_lock_init(&list->raw_lock);
++	__skb_queue_head_init(list);
++}
++
+ static inline void skb_queue_head_init_class(struct sk_buff_head *list,
+ 		struct lock_class_key *class)
+ {
+--- a/net/core/dev.c
++++ b/net/core/dev.c
+@@ -225,14 +225,14 @@ static inline struct hlist_head *dev_ind
+ static inline void rps_lock(struct softnet_data *sd)
+ {
+ #ifdef CONFIG_RPS
+-	spin_lock(&sd->input_pkt_queue.lock);
++	raw_spin_lock(&sd->input_pkt_queue.raw_lock);
+ #endif
+ }
+ 
+ static inline void rps_unlock(struct softnet_data *sd)
+ {
+ #ifdef CONFIG_RPS
+-	spin_unlock(&sd->input_pkt_queue.lock);
++	raw_spin_unlock(&sd->input_pkt_queue.raw_lock);
+ #endif
+ }
+ 
+@@ -11660,7 +11660,7 @@ static int __init net_dev_init(void)
+ 
+ 		INIT_WORK(flush, flush_backlog);
+ 
+-		skb_queue_head_init(&sd->input_pkt_queue);
++		skb_queue_head_init_raw(&sd->input_pkt_queue);
+ 		skb_queue_head_init(&sd->process_queue);
+ #ifdef CONFIG_XFRM_OFFLOAD
+ 		skb_queue_head_init(&sd->xfrm_backlog);
diff --git a/debian/patches-rt/net__dev__always_take_qdiscs_busylock_in___dev_xmit_skb.patch b/debian/patches-rt/net__dev__always_take_qdiscs_busylock_in___dev_xmit_skb.patch
new file mode 100644
index 000000000000..6bce556281be
--- /dev/null
+++ b/debian/patches-rt/net__dev__always_take_qdiscs_busylock_in___dev_xmit_skb.patch
@@ -0,0 +1,40 @@
+Subject: net: dev: always take qdisc's busylock in __dev_xmit_skb()
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Wed Mar 30 13:36:29 2016 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+The root-lock is dropped before dev_hard_start_xmit() is invoked and after
+setting the __QDISC___STATE_RUNNING bit. If this task is now pushed away
+by a task with a higher priority then the task with the higher priority
+won't be able to submit packets to the NIC directly instead they will be
+enqueued into the Qdisc. The NIC will remain idle until the task(s) with
+higher priority leave the CPU and the task with lower priority gets back
+and finishes the job.
+
+If we take always the busylock we ensure that the RT task can boost the
+low-prio task and submit the packet.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ net/core/dev.c |    4 ++++
+ 1 file changed, 4 insertions(+)
+---
+--- a/net/core/dev.c
++++ b/net/core/dev.c
+@@ -3839,7 +3839,11 @@ static inline int __dev_xmit_skb(struct
+ 	 * This permits qdisc->running owner to get the lock more
+ 	 * often and dequeue packets faster.
+ 	 */
++#ifdef CONFIG_PREEMPT_RT
++	contended = true;
++#else
+ 	contended = qdisc_is_running(q);
++#endif
+ 	if (unlikely(contended))
+ 		spin_lock(&q->busylock);
+ 
diff --git a/debian/patches-rt/net_core__use_local_bh_disable_in_netif_rx_ni.patch b/debian/patches-rt/net_core__use_local_bh_disable_in_netif_rx_ni.patch
new file mode 100644
index 000000000000..da7e65204ea0
--- /dev/null
+++ b/debian/patches-rt/net_core__use_local_bh_disable_in_netif_rx_ni.patch
@@ -0,0 +1,40 @@
+Subject: net/core: use local_bh_disable() in netif_rx_ni()
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri Jun 16 19:03:16 2017 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+In 2004 netif_rx_ni() gained a preempt_disable() section around
+netif_rx() and its do_softirq() + testing for it. The do_softirq() part
+is required because netif_rx() raises the softirq but does not invoke
+it. The preempt_disable() is required to remain on the same CPU which added the
+skb to the per-CPU list.
+All this can be avoided be putting this into a local_bh_disable()ed
+section. The local_bh_enable() part will invoke do_softirq() if
+required.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ net/core/dev.c |    6 ++----
+ 1 file changed, 2 insertions(+), 4 deletions(-)
+---
+--- a/net/core/dev.c
++++ b/net/core/dev.c
+@@ -4967,11 +4967,9 @@ int netif_rx_ni(struct sk_buff *skb)
+ 
+ 	trace_netif_rx_ni_entry(skb);
+ 
+-	preempt_disable();
++	local_bh_disable();
+ 	err = netif_rx_internal(skb);
+-	if (local_softirq_pending())
+-		do_softirq();
+-	preempt_enable();
++	local_bh_enable();
+ 	trace_netif_rx_ni_exit(err);
+ 
+ 	return err;
diff --git a/debian/patches-rt/panic__skip_get_random_bytes_for_RT_FULL_in_init_oops_id.patch b/debian/patches-rt/panic__skip_get_random_bytes_for_RT_FULL_in_init_oops_id.patch
new file mode 100644
index 000000000000..b39d48a4bbfa
--- /dev/null
+++ b/debian/patches-rt/panic__skip_get_random_bytes_for_RT_FULL_in_init_oops_id.patch
@@ -0,0 +1,31 @@
+Subject: panic: skip get_random_bytes for RT_FULL in init_oops_id
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Tue Jul 14 14:26:34 2015 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Disable on -RT. If this is invoked from irq-context we will have problems
+to acquire the sleeping lock.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ kernel/panic.c |    2 ++
+ 1 file changed, 2 insertions(+)
+---
+--- a/kernel/panic.c
++++ b/kernel/panic.c
+@@ -545,9 +545,11 @@ static u64 oops_id;
+ 
+ static int init_oops_id(void)
+ {
++#ifndef CONFIG_PREEMPT_RT
+ 	if (!oops_id)
+ 		get_random_bytes(&oops_id, sizeof(oops_id));
+ 	else
++#endif
+ 		oops_id++;
+ 
+ 	return 0;
diff --git a/debian/patches-rt/powerpc__Add_support_for_lazy_preemption.patch b/debian/patches-rt/powerpc__Add_support_for_lazy_preemption.patch
new file mode 100644
index 000000000000..0b86c2d2c21f
--- /dev/null
+++ b/debian/patches-rt/powerpc__Add_support_for_lazy_preemption.patch
@@ -0,0 +1,112 @@
+Subject: powerpc: Add support for lazy preemption
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Thu Nov  1 10:14:11 2012 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Implement the powerpc pieces for lazy preempt.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/powerpc/Kconfig                   |    1 +
+ arch/powerpc/include/asm/thread_info.h |    8 ++++++++
+ arch/powerpc/kernel/interrupt.c        |    8 ++++++--
+ 3 files changed, 15 insertions(+), 2 deletions(-)
+---
+--- a/arch/powerpc/Kconfig
++++ b/arch/powerpc/Kconfig
+@@ -237,6 +237,7 @@ config PPC
+ 	select HAVE_PERF_EVENTS_NMI		if PPC64
+ 	select HAVE_PERF_REGS
+ 	select HAVE_PERF_USER_STACK_DUMP
++	select HAVE_PREEMPT_LAZY
+ 	select HAVE_REGS_AND_STACK_ACCESS_API
+ 	select HAVE_RELIABLE_STACKTRACE
+ 	select HAVE_RSEQ
+--- a/arch/powerpc/include/asm/thread_info.h
++++ b/arch/powerpc/include/asm/thread_info.h
+@@ -47,6 +47,8 @@
+ struct thread_info {
+ 	int		preempt_count;		/* 0 => preemptable,
+ 						   <0 => BUG */
++	int		preempt_lazy_count;	/* 0 => preemptable,
++						   <0 => BUG */
+ #ifdef CONFIG_SMP
+ 	unsigned int	cpu;
+ #endif
+@@ -71,6 +73,7 @@ struct thread_info {
+ #define INIT_THREAD_INFO(tsk)			\
+ {						\
+ 	.preempt_count = INIT_PREEMPT_COUNT,	\
++	.preempt_lazy_count = 0,		\
+ 	.flags =	0,			\
+ }
+ 
+@@ -96,6 +99,7 @@ void arch_setup_new_exec(void);
+ #define TIF_PATCH_PENDING	6	/* pending live patching update */
+ #define TIF_SYSCALL_AUDIT	7	/* syscall auditing active */
+ #define TIF_SINGLESTEP		8	/* singlestepping active */
++#define TIF_NEED_RESCHED_LAZY	9	/* lazy rescheduling necessary */
+ #define TIF_SECCOMP		10	/* secure computing */
+ #define TIF_RESTOREALL		11	/* Restore all regs (implies NOERROR) */
+ #define TIF_NOERROR		12	/* Force successful syscall return */
+@@ -111,6 +115,7 @@ void arch_setup_new_exec(void);
+ #define TIF_POLLING_NRFLAG	19	/* true if poll_idle() is polling TIF_NEED_RESCHED */
+ #define TIF_32BIT		20	/* 32 bit binary */
+ 
++
+ /* as above, but as bit values */
+ #define _TIF_SYSCALL_TRACE	(1<<TIF_SYSCALL_TRACE)
+ #define _TIF_SIGPENDING		(1<<TIF_SIGPENDING)
+@@ -122,6 +127,7 @@ void arch_setup_new_exec(void);
+ #define _TIF_PATCH_PENDING	(1<<TIF_PATCH_PENDING)
+ #define _TIF_SYSCALL_AUDIT	(1<<TIF_SYSCALL_AUDIT)
+ #define _TIF_SINGLESTEP		(1<<TIF_SINGLESTEP)
++#define _TIF_NEED_RESCHED_LAZY	(1<<TIF_NEED_RESCHED_LAZY)
+ #define _TIF_SECCOMP		(1<<TIF_SECCOMP)
+ #define _TIF_RESTOREALL		(1<<TIF_RESTOREALL)
+ #define _TIF_NOERROR		(1<<TIF_NOERROR)
+@@ -135,10 +141,12 @@ void arch_setup_new_exec(void);
+ 				 _TIF_SYSCALL_EMU)
+ 
+ #define _TIF_USER_WORK_MASK	(_TIF_SIGPENDING | _TIF_NEED_RESCHED | \
++				 _TIF_NEED_RESCHED_LAZY | \
+ 				 _TIF_NOTIFY_RESUME | _TIF_UPROBE | \
+ 				 _TIF_RESTORE_TM | _TIF_PATCH_PENDING | \
+ 				 _TIF_NOTIFY_SIGNAL)
+ #define _TIF_PERSYSCALL_MASK	(_TIF_RESTOREALL|_TIF_NOERROR)
++#define _TIF_NEED_RESCHED_MASK	(_TIF_NEED_RESCHED | _TIF_NEED_RESCHED_LAZY)
+ 
+ /* Bits in local_flags */
+ /* Don't move TLF_NAPPING without adjusting the code in entry_32.S */
+--- a/arch/powerpc/kernel/interrupt.c
++++ b/arch/powerpc/kernel/interrupt.c
+@@ -346,7 +346,7 @@ interrupt_exit_user_prepare_main(unsigne
+ 	ti_flags = READ_ONCE(current_thread_info()->flags);
+ 	while (unlikely(ti_flags & (_TIF_USER_WORK_MASK & ~_TIF_RESTORE_TM))) {
+ 		local_irq_enable();
+-		if (ti_flags & _TIF_NEED_RESCHED) {
++		if (ti_flags & _TIF_NEED_RESCHED_MASK) {
+ 			schedule();
+ 		} else {
+ 			/*
+@@ -552,11 +552,15 @@ notrace unsigned long interrupt_exit_ker
+ 		/* Returning to a kernel context with local irqs enabled. */
+ 		WARN_ON_ONCE(!(regs->msr & MSR_EE));
+ again:
+-		if (IS_ENABLED(CONFIG_PREEMPT)) {
++		if (IS_ENABLED(CONFIG_PREEMPTION)) {
+ 			/* Return to preemptible kernel context */
+ 			if (unlikely(current_thread_info()->flags & _TIF_NEED_RESCHED)) {
+ 				if (preempt_count() == 0)
+ 					preempt_schedule_irq();
++			} else if (unlikely(current_thread_info()->flags & _TIF_NEED_RESCHED_LAZY)) {
++				if ((preempt_count() == 0) &&
++				    (current_thread_info()->preempt_lazy_count == 0))
++					preempt_schedule_irq();
+ 			}
+ 		}
+ 
diff --git a/debian/patches-rt/powerpc__traps__Use_PREEMPT_RT.patch b/debian/patches-rt/powerpc__traps__Use_PREEMPT_RT.patch
new file mode 100644
index 000000000000..c2dcc7eb9cbf
--- /dev/null
+++ b/debian/patches-rt/powerpc__traps__Use_PREEMPT_RT.patch
@@ -0,0 +1,38 @@
+Subject: powerpc: traps: Use PREEMPT_RT
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Fri Jul 26 11:30:49 2019 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Add PREEMPT_RT to the backtrace if enabled.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/powerpc/kernel/traps.c |    7 ++++++-
+ 1 file changed, 6 insertions(+), 1 deletion(-)
+---
+--- a/arch/powerpc/kernel/traps.c
++++ b/arch/powerpc/kernel/traps.c
+@@ -260,12 +260,17 @@ static char *get_mmu_str(void)
+ 
+ static int __die(const char *str, struct pt_regs *regs, long err)
+ {
++	const char *pr = "";
++
+ 	printk("Oops: %s, sig: %ld [#%d]\n", str, err, ++die_counter);
+ 
++	if (IS_ENABLED(CONFIG_PREEMPTION))
++		pr = IS_ENABLED(CONFIG_PREEMPT_RT) ? " PREEMPT_RT" : " PREEMPT";
++
+ 	printk("%s PAGE_SIZE=%luK%s%s%s%s%s%s %s\n",
+ 	       IS_ENABLED(CONFIG_CPU_LITTLE_ENDIAN) ? "LE" : "BE",
+ 	       PAGE_SIZE / 1024, get_mmu_str(),
+-	       IS_ENABLED(CONFIG_PREEMPT) ? " PREEMPT" : "",
++	       pr,
+ 	       IS_ENABLED(CONFIG_SMP) ? " SMP" : "",
+ 	       IS_ENABLED(CONFIG_SMP) ? (" NR_CPUS=" __stringify(NR_CPUS)) : "",
+ 	       debug_pagealloc_enabled() ? " DEBUG_PAGEALLOC" : "",
diff --git a/debian/patches-rt/powerpc_kvm__Disable_in-kernel_MPIC_emulation_for_PREEMPT_RT.patch b/debian/patches-rt/powerpc_kvm__Disable_in-kernel_MPIC_emulation_for_PREEMPT_RT.patch
new file mode 100644
index 000000000000..998280de5697
--- /dev/null
+++ b/debian/patches-rt/powerpc_kvm__Disable_in-kernel_MPIC_emulation_for_PREEMPT_RT.patch
@@ -0,0 +1,43 @@
+Subject: powerpc/kvm: Disable in-kernel MPIC emulation for PREEMPT_RT
+From: Bogdan Purcareata <bogdan.purcareata@freescale.com>
+Date: Fri Apr 24 15:53:13 2015 +0000
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Bogdan Purcareata <bogdan.purcareata@freescale.com>
+
+While converting the openpic emulation code to use a raw_spinlock_t enables
+guests to run on RT, there's still a performance issue. For interrupts sent in
+directed delivery mode with a multiple CPU mask, the emulated openpic will loop
+through all of the VCPUs, and for each VCPUs, it call IRQ_check, which will loop
+through all the pending interrupts for that VCPU. This is done while holding the
+raw_lock, meaning that in all this time the interrupts and preemption are
+disabled on the host Linux. A malicious user app can max both these number and
+cause a DoS.
+
+This temporary fix is sent for two reasons. First is so that users who want to
+use the in-kernel MPIC emulation are aware of the potential latencies, thus
+making sure that the hardware MPIC and their usage scenario does not involve
+interrupts sent in directed delivery mode, and the number of possible pending
+interrupts is kept small. Secondly, this should incentivize the development of a
+proper openpic emulation that would be better suited for RT.
+
+Acked-by: Scott Wood <scottwood@freescale.com>
+Signed-off-by: Bogdan Purcareata <bogdan.purcareata@freescale.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/powerpc/kvm/Kconfig |    1 +
+ 1 file changed, 1 insertion(+)
+---
+--- a/arch/powerpc/kvm/Kconfig
++++ b/arch/powerpc/kvm/Kconfig
+@@ -178,6 +178,7 @@ config KVM_E500MC
+ config KVM_MPIC
+ 	bool "KVM in-kernel MPIC emulation"
+ 	depends on KVM && E500
++	depends on !PREEMPT_RT
+ 	select HAVE_KVM_IRQCHIP
+ 	select HAVE_KVM_IRQFD
+ 	select HAVE_KVM_IRQ_ROUTING
diff --git a/debian/patches-rt/powerpc_pseries_iommu__Use_a_locallock_instead_local_irq_save.patch b/debian/patches-rt/powerpc_pseries_iommu__Use_a_locallock_instead_local_irq_save.patch
new file mode 100644
index 000000000000..79a7fece4d27
--- /dev/null
+++ b/debian/patches-rt/powerpc_pseries_iommu__Use_a_locallock_instead_local_irq_save.patch
@@ -0,0 +1,115 @@
+Subject: powerpc/pseries/iommu: Use a locallock instead local_irq_save()
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue Mar 26 18:31:54 2019 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+The locallock protects the per-CPU variable tce_page. The function
+attempts to allocate memory while tce_page is protected (by disabling
+interrupts).
+
+Use local_irq_save() instead of local_irq_disable().
+
+Cc: stable-rt@vger.kernel.org
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/powerpc/platforms/pseries/iommu.c |   31 ++++++++++++++++++++-----------
+ 1 file changed, 20 insertions(+), 11 deletions(-)
+---
+--- a/arch/powerpc/platforms/pseries/iommu.c
++++ b/arch/powerpc/platforms/pseries/iommu.c
+@@ -24,6 +24,7 @@
+ #include <linux/of.h>
+ #include <linux/iommu.h>
+ #include <linux/rculist.h>
++#include <linux/local_lock.h>
+ #include <asm/io.h>
+ #include <asm/prom.h>
+ #include <asm/rtas.h>
+@@ -195,7 +196,13 @@ static int tce_build_pSeriesLP(unsigned
+ 	return ret;
+ }
+ 
+-static DEFINE_PER_CPU(__be64 *, tce_page);
++struct tce_page {
++	__be64 * page;
++	local_lock_t lock;
++};
++static DEFINE_PER_CPU(struct tce_page, tce_page) = {
++	.lock = INIT_LOCAL_LOCK(lock),
++};
+ 
+ static int tce_buildmulti_pSeriesLP(struct iommu_table *tbl, long tcenum,
+ 				     long npages, unsigned long uaddr,
+@@ -218,9 +225,10 @@ static int tce_buildmulti_pSeriesLP(stru
+ 		                           direction, attrs);
+ 	}
+ 
+-	local_irq_save(flags);	/* to protect tcep and the page behind it */
++	/* to protect tcep and the page behind it */
++	local_lock_irqsave(&tce_page.lock, flags);
+ 
+-	tcep = __this_cpu_read(tce_page);
++	tcep = __this_cpu_read(tce_page.page);
+ 
+ 	/* This is safe to do since interrupts are off when we're called
+ 	 * from iommu_alloc{,_sg}()
+@@ -229,12 +237,12 @@ static int tce_buildmulti_pSeriesLP(stru
+ 		tcep = (__be64 *)__get_free_page(GFP_ATOMIC);
+ 		/* If allocation fails, fall back to the loop implementation */
+ 		if (!tcep) {
+-			local_irq_restore(flags);
++			local_unlock_irqrestore(&tce_page.lock, flags);
+ 			return tce_build_pSeriesLP(tbl->it_index, tcenum,
+ 					tceshift,
+ 					npages, uaddr, direction, attrs);
+ 		}
+-		__this_cpu_write(tce_page, tcep);
++		__this_cpu_write(tce_page.page, tcep);
+ 	}
+ 
+ 	rpn = __pa(uaddr) >> tceshift;
+@@ -264,7 +272,7 @@ static int tce_buildmulti_pSeriesLP(stru
+ 		tcenum += limit;
+ 	} while (npages > 0 && !rc);
+ 
+-	local_irq_restore(flags);
++	local_unlock_irqrestore(&tce_page.lock, flags);
+ 
+ 	if (unlikely(rc == H_NOT_ENOUGH_RESOURCES)) {
+ 		ret = (int)rc;
+@@ -440,16 +448,17 @@ static int tce_setrange_multi_pSeriesLP(
+ 				DMA_BIDIRECTIONAL, 0);
+ 	}
+ 
+-	local_irq_disable();	/* to protect tcep and the page behind it */
+-	tcep = __this_cpu_read(tce_page);
++	/* to protect tcep and the page behind it */
++	local_lock_irq(&tce_page.lock);
++	tcep = __this_cpu_read(tce_page.page);
+ 
+ 	if (!tcep) {
+ 		tcep = (__be64 *)__get_free_page(GFP_ATOMIC);
+ 		if (!tcep) {
+-			local_irq_enable();
++			local_unlock_irq(&tce_page.lock);
+ 			return -ENOMEM;
+ 		}
+-		__this_cpu_write(tce_page, tcep);
++		__this_cpu_write(tce_page.page, tcep);
+ 	}
+ 
+ 	proto_tce = TCE_PCI_READ | TCE_PCI_WRITE;
+@@ -492,7 +501,7 @@ static int tce_setrange_multi_pSeriesLP(
+ 
+ 	/* error cleanup: caller will clear whole range */
+ 
+-	local_irq_enable();
++	local_unlock_irq(&tce_page.lock);
+ 	return rc;
+ }
+ 
diff --git a/debian/patches-rt/powerpc_stackprotector__work_around_stack-guard_init_from_atomic.patch b/debian/patches-rt/powerpc_stackprotector__work_around_stack-guard_init_from_atomic.patch
new file mode 100644
index 000000000000..f1528216cdb1
--- /dev/null
+++ b/debian/patches-rt/powerpc_stackprotector__work_around_stack-guard_init_from_atomic.patch
@@ -0,0 +1,34 @@
+Subject: powerpc/stackprotector: work around stack-guard init from atomic
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue Mar 26 18:31:29 2019 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+This is invoked from the secondary CPU in atomic context. On x86 we use
+tsc instead. On Power we XOR it against mftb() so lets use stack address
+as the initial value.
+
+Cc: stable-rt@vger.kernel.org
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/powerpc/include/asm/stackprotector.h |    4 ++++
+ 1 file changed, 4 insertions(+)
+---
+--- a/arch/powerpc/include/asm/stackprotector.h
++++ b/arch/powerpc/include/asm/stackprotector.h
+@@ -24,7 +24,11 @@ static __always_inline void boot_init_st
+ 	unsigned long canary;
+ 
+ 	/* Try to get a semi random initial value. */
++#ifdef CONFIG_PREEMPT_RT
++	canary = (unsigned long)&canary;
++#else
+ 	canary = get_random_canary();
++#endif
+ 	canary ^= mftb();
+ 	canary ^= LINUX_VERSION_CODE;
+ 	canary &= CANARY_MASK;
diff --git a/debian/patches-rt/printk__Enhance_the_condition_check_of_msleep_in_pr_flush.patch b/debian/patches-rt/printk__Enhance_the_condition_check_of_msleep_in_pr_flush.patch
new file mode 100644
index 000000000000..d1771a271790
--- /dev/null
+++ b/debian/patches-rt/printk__Enhance_the_condition_check_of_msleep_in_pr_flush.patch
@@ -0,0 +1,41 @@
+Subject: printk: Enhance the condition check of msleep in pr_flush()
+From: Chao Qin <chao.qin@intel.com>
+Date: Mon Jul 19 10:26:50 2021 +0800
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Chao Qin <chao.qin@intel.com>
+
+There is msleep in pr_flush(). If call WARN() in the early boot
+stage such as in early_initcall, pr_flush() will run into msleep
+when process scheduler is not ready yet. And then the system will
+sleep forever.
+
+Before the system_state is SYSTEM_RUNNING, make sure DO NOT sleep
+in pr_flush().
+
+Fixes: c0b395bd0fe3("printk: add pr_flush()")
+Signed-off-by: Chao Qin <chao.qin@intel.com>
+Signed-off-by: Lili Li <lili.li@intel.com>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Reviewed-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Link: https://lore.kernel.org/lkml/20210719022649.3444072-1-chao.qin@intel.com
+
+---
+ kernel/printk/printk.c |    4 +++-
+ 1 file changed, 3 insertions(+), 1 deletion(-)
+---
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -3655,7 +3655,9 @@ bool pr_flush(int timeout_ms, bool reset
+ 	u64 diff;
+ 	u64 seq;
+ 
+-	may_sleep = (preemptible() && !in_softirq());
++	may_sleep = (preemptible() &&
++		     !in_softirq() &&
++		     system_state >= SYSTEM_RUNNING);
+ 
+ 	seq = prb_next_seq(prb);
+ 
diff --git a/debian/patches-rt/printk__add_console_handover.patch b/debian/patches-rt/printk__add_console_handover.patch
new file mode 100644
index 000000000000..bca4c78465a3
--- /dev/null
+++ b/debian/patches-rt/printk__add_console_handover.patch
@@ -0,0 +1,81 @@
+Subject: printk: add console handover
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:09 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+If earlyprintk is used, a boot console will print directly to the
+console immediately. The boot console will unregister itself as soon
+as a non-boot console registers. However, the non-boot console does
+not begin printing until its kthread has started. Since this happens
+much later, there is a long pause in the console output. If the
+ringbuffer is small, messages could even be dropped during the
+pause.
+
+Add a new CON_HANDOVER console flag to be used internally by printk
+in order to track which non-boot console took over from a boot
+console. If handover consoles have implemented write_atomic(), they
+are allowed to print directly to the console until their kthread can
+take over.
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+
+---
+ include/linux/console.h |    1 +
+ kernel/printk/printk.c  |   15 +++++++++++++--
+ 2 files changed, 14 insertions(+), 2 deletions(-)
+---
+--- a/include/linux/console.h
++++ b/include/linux/console.h
+@@ -143,6 +143,7 @@ static inline int con_debug_leave(void)
+ #define CON_ANYTIME	(16) /* Safe to call when cpu is offline */
+ #define CON_BRL		(32) /* Used for a braille device */
+ #define CON_EXTENDED	(64) /* Use the extended output format a la /dev/kmsg */
++#define CON_HANDOVER	(128) /* Device was previously a boot console. */
+ 
+ struct console {
+ 	char	name[16];
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -1746,6 +1746,8 @@ static bool console_may_sync(struct cons
+ 		return false;
+ 	if (con->write_atomic && kernel_sync_mode())
+ 		return true;
++	if (con->write_atomic && (con->flags & CON_HANDOVER) && !con->thread)
++		return true;
+ 	if (con->write && (con->flags & CON_BOOT) && !con->thread)
+ 		return true;
+ 	return false;
+@@ -1761,7 +1763,14 @@ static bool call_sync_console_driver(str
+ 		return true;
+ 	}
+ 
+-	if (con->write && (con->flags & CON_BOOT) && !con->thread) {
++	if (con->write_atomic && (con->flags & CON_HANDOVER) && !con->thread) {
++		if (console_trylock()) {
++			con->write_atomic(con, text, text_len);
++			console_unlock();
++			return true;
++		}
++
++	} else if (con->write && (con->flags & CON_BOOT) && !con->thread) {
+ 		if (console_trylock()) {
+ 			con->write(con, text, text_len);
+ 			console_unlock();
+@@ -2892,8 +2901,10 @@ void register_console(struct console *ne
+ 	 * the real console are the same physical device, it's annoying to
+ 	 * see the beginning boot messages twice
+ 	 */
+-	if (bcon && ((newcon->flags & (CON_CONSDEV | CON_BOOT)) == CON_CONSDEV))
++	if (bcon && ((newcon->flags & (CON_CONSDEV | CON_BOOT)) == CON_CONSDEV)) {
+ 		newcon->flags &= ~CON_PRINTBUFFER;
++		newcon->flags |= CON_HANDOVER;
++	}
+ 
+ 	/*
+ 	 *	Put this console in the list - keep the
diff --git a/debian/patches-rt/printk__add_pr_flush.patch b/debian/patches-rt/printk__add_pr_flush.patch
new file mode 100644
index 000000000000..5eb0bb046856
--- /dev/null
+++ b/debian/patches-rt/printk__add_pr_flush.patch
@@ -0,0 +1,216 @@
+Subject: printk: add pr_flush()
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:10 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+Provide a function to allow waiting for console printers to catch
+up to the latest logged message.
+
+Use pr_flush() to give console printers a chance to finish in
+critical situations if no atomic console is available. For now
+pr_flush() is only used in the most common error paths:
+panic(), print_oops_end_marker(), report_bug(), kmsg_dump().
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ include/linux/printk.h |    7 ++++
+ kernel/panic.c         |   28 ++++++++++------
+ kernel/printk/printk.c |   81 +++++++++++++++++++++++++++++++++++++++++++++++++
+ lib/bug.c              |    1 
+ 4 files changed, 106 insertions(+), 11 deletions(-)
+---
+--- a/include/linux/printk.h
++++ b/include/linux/printk.h
+@@ -161,6 +161,8 @@ int vprintk(const char *fmt, va_list arg
+ asmlinkage __printf(1, 2) __cold
+ int _printk(const char *fmt, ...);
+ 
++bool pr_flush(int timeout_ms, bool reset_on_progress);
++
+ /*
+  * Please don't use printk_ratelimit(), because it shares ratelimiting state
+  * with all other unrelated printk_ratelimit() callsites.  Instead use
+@@ -202,6 +204,11 @@ int _printk(const char *s, ...)
+ 	return 0;
+ }
+ 
++static inline bool pr_flush(int timeout_ms, bool reset_on_progress)
++{
++	return true;
++}
++
+ static inline int printk_ratelimit(void)
+ {
+ 	return 0;
+--- a/kernel/panic.c
++++ b/kernel/panic.c
+@@ -178,12 +178,28 @@ static void panic_print_sys_info(void)
+ void panic(const char *fmt, ...)
+ {
+ 	static char buf[1024];
++	va_list args2;
+ 	va_list args;
+ 	long i, i_next = 0, len;
+ 	int state = 0;
+ 	int old_cpu, this_cpu;
+ 	bool _crash_kexec_post_notifiers = crash_kexec_post_notifiers;
+ 
++	console_verbose();
++	pr_emerg("Kernel panic - not syncing:\n");
++	va_start(args2, fmt);
++	va_copy(args, args2);
++	vprintk(fmt, args2);
++	va_end(args2);
++#ifdef CONFIG_DEBUG_BUGVERBOSE
++	/*
++	 * Avoid nested stack-dumping if a panic occurs during oops processing
++	 */
++	if (!test_taint(TAINT_DIE) && oops_in_progress <= 1)
++		dump_stack();
++#endif
++	pr_flush(1000, true);
++
+ 	/*
+ 	 * Disable local interrupts. This will prevent panic_smp_self_stop
+ 	 * from deadlocking the first cpu that invokes the panic, since
+@@ -214,24 +230,13 @@ void panic(const char *fmt, ...)
+ 	if (old_cpu != PANIC_CPU_INVALID && old_cpu != this_cpu)
+ 		panic_smp_self_stop();
+ 
+-	console_verbose();
+ 	bust_spinlocks(1);
+-	va_start(args, fmt);
+ 	len = vscnprintf(buf, sizeof(buf), fmt, args);
+ 	va_end(args);
+ 
+ 	if (len && buf[len - 1] == '\n')
+ 		buf[len - 1] = '\0';
+ 
+-	pr_emerg("Kernel panic - not syncing: %s\n", buf);
+-#ifdef CONFIG_DEBUG_BUGVERBOSE
+-	/*
+-	 * Avoid nested stack-dumping if a panic occurs during oops processing
+-	 */
+-	if (!test_taint(TAINT_DIE) && oops_in_progress <= 1)
+-		dump_stack();
+-#endif
+-
+ 	/*
+ 	 * If kgdb is enabled, give it a chance to run before we stop all
+ 	 * the other CPUs or else we won't be able to debug processes left
+@@ -553,6 +558,7 @@ static void print_oops_end_marker(void)
+ {
+ 	init_oops_id();
+ 	pr_warn("---[ end trace %016llx ]---\n", (unsigned long long)oops_id);
++	pr_flush(1000, true);
+ }
+ 
+ /*
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -3291,6 +3291,12 @@ void kmsg_dump(enum kmsg_dump_reason rea
+ 			sync_mode = true;
+ 			pr_info("enabled sync mode\n");
+ 		}
++
++		/*
++		 * Give the printing threads time to flush, allowing up to
++		 * 1s of no printing forward progress before giving up.
++		 */
++		pr_flush(1000, true);
+ 	}
+ 
+ 	rcu_read_lock();
+@@ -3612,3 +3618,78 @@ bool kgdb_roundup_delay(unsigned int cpu
+ }
+ EXPORT_SYMBOL(kgdb_roundup_delay);
+ #endif /* CONFIG_SMP */
++
++#ifdef CONFIG_PRINTK
++static void pr_msleep(bool may_sleep, int ms)
++{
++	if (may_sleep) {
++		msleep(ms);
++	} else {
++		while (ms--)
++			udelay(1000);
++	}
++}
++
++/**
++ * pr_flush() - Wait for printing threads to catch up.
++ *
++ * @timeout_ms:        The maximum time (in ms) to wait.
++ * @reset_on_progress: Reset the timeout if forward progress is seen.
++ *
++ * A value of 0 for @timeout_ms means no waiting will occur. A value of -1
++ * represents infinite waiting.
++ *
++ * If @reset_on_progress is true, the timeout will be reset whenever any
++ * printer has been seen to make some forward progress.
++ *
++ * Context: Any context.
++ * Return: true if all enabled printers are caught up.
++ */
++bool pr_flush(int timeout_ms, bool reset_on_progress)
++{
++	int remaining = timeout_ms;
++	struct console *con;
++	u64 last_diff = 0;
++	bool may_sleep;
++	u64 printk_seq;
++	u64 diff;
++	u64 seq;
++
++	may_sleep = (preemptible() && !in_softirq());
++
++	seq = prb_next_seq(prb);
++
++	for (;;) {
++		diff = 0;
++
++		for_each_console(con) {
++			if (!(con->flags & CON_ENABLED))
++				continue;
++			printk_seq = read_console_seq(con);
++			if (printk_seq < seq)
++				diff += seq - printk_seq;
++		}
++
++		if (diff != last_diff && reset_on_progress)
++			remaining = timeout_ms;
++
++		if (diff == 0 || remaining == 0)
++			break;
++
++		if (remaining < 0) {
++			pr_msleep(may_sleep, 100);
++		} else if (remaining < 100) {
++			pr_msleep(may_sleep, remaining);
++			remaining = 0;
++		} else {
++			pr_msleep(may_sleep, 100);
++			remaining -= 100;
++		}
++
++		last_diff = diff;
++	}
++
++	return (diff == 0);
++}
++EXPORT_SYMBOL(pr_flush);
++#endif /* CONFIG_PRINTK */
+--- a/lib/bug.c
++++ b/lib/bug.c
+@@ -206,6 +206,7 @@ enum bug_trap_type report_bug(unsigned l
+ 	else
+ 		pr_crit("Kernel BUG at %pB [verbose debug info unavailable]\n",
+ 			(void *)bugaddr);
++	pr_flush(1000, true);
+ 
+ 	return BUG_TRAP_TYPE_BUG;
+ }
diff --git a/debian/patches-rt/printk__call_boot_delay_msec_in_printk_delay.patch b/debian/patches-rt/printk__call_boot_delay_msec_in_printk_delay.patch
new file mode 100644
index 000000000000..a5ae92de38d0
--- /dev/null
+++ b/debian/patches-rt/printk__call_boot_delay_msec_in_printk_delay.patch
@@ -0,0 +1,42 @@
+Subject: printk: call boot_delay_msec() in printk_delay()
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:04 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+boot_delay_msec() is always called immediately before printk_delay()
+so just call it from within printk_delay().
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ kernel/printk/printk.c |    7 ++++---
+ 1 file changed, 4 insertions(+), 3 deletions(-)
+---
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -1750,8 +1750,10 @@ SYSCALL_DEFINE3(syslog, int, type, char
+ 
+ int printk_delay_msec __read_mostly;
+ 
+-static inline void printk_delay(void)
++static inline void printk_delay(int level)
+ {
++	boot_delay_msec(level);
++
+ 	if (unlikely(printk_delay_msec)) {
+ 		int m = printk_delay_msec;
+ 
+@@ -2224,8 +2226,7 @@ asmlinkage int vprintk_emit(int facility
+ 		in_sched = true;
+ 	}
+ 
+-	boot_delay_msec(level);
+-	printk_delay();
++	printk_delay(level);
+ 
+ 	printed_len = vprintk_store(facility, level, dev_info, fmt, args);
+ 
diff --git a/debian/patches-rt/printk__introduce_kernel_sync_mode.patch b/debian/patches-rt/printk__introduce_kernel_sync_mode.patch
new file mode 100644
index 000000000000..b55639254f28
--- /dev/null
+++ b/debian/patches-rt/printk__introduce_kernel_sync_mode.patch
@@ -0,0 +1,375 @@
+Subject: printk: introduce kernel sync mode
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:06 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+When the kernel performs an OOPS, enter into "sync mode":
+
+- only atomic consoles (write_atomic() callback) will print
+- printing occurs within vprintk_store() instead of console_unlock()
+
+CONSOLE_LOG_MAX is moved to printk.h to support the per-console
+buffer used in sync mode.
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ include/linux/console.h |    4 +
+ include/linux/printk.h  |    6 +
+ kernel/printk/printk.c  |  178 +++++++++++++++++++++++++++++++++++++++++++++---
+ 3 files changed, 178 insertions(+), 10 deletions(-)
+---
+--- a/include/linux/console.h
++++ b/include/linux/console.h
+@@ -16,6 +16,7 @@
+ 
+ #include <linux/atomic.h>
+ #include <linux/types.h>
++#include <linux/printk.h>
+ 
+ struct vc_data;
+ struct console_font_op;
+@@ -150,6 +151,9 @@ struct console {
+ 	short	flags;
+ 	short	index;
+ 	int	cflag;
++#ifdef CONFIG_PRINTK
++	char	sync_buf[CONSOLE_LOG_MAX];
++#endif
+ 	uint	ispeed;
+ 	uint	ospeed;
+ 	void	*data;
+--- a/include/linux/printk.h
++++ b/include/linux/printk.h
+@@ -47,6 +47,12 @@ static inline const char *printk_skip_he
+ 
+ #define CONSOLE_EXT_LOG_MAX	8192
+ 
++/*
++ * The maximum size of a record formatted for console printing
++ * (i.e. with the prefix prepended to every line).
++ */
++#define CONSOLE_LOG_MAX		1024
++
+ /* printk's without a loglevel use this.. */
+ #define MESSAGE_LOGLEVEL_DEFAULT CONFIG_MESSAGE_LOGLEVEL_DEFAULT
+ 
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -45,6 +45,7 @@
+ #include <linux/ctype.h>
+ #include <linux/uio.h>
+ #include <linux/kgdb.h>
++#include <linux/clocksource.h>
+ #include <linux/sched/clock.h>
+ #include <linux/sched/debug.h>
+ #include <linux/sched/task_stack.h>
+@@ -355,6 +356,9 @@ static int console_msg_format = MSG_FORM
+ static DEFINE_MUTEX(syslog_lock);
+ 
+ #ifdef CONFIG_PRINTK
++/* Set to enable sync mode. Once set, it is never cleared. */
++static bool sync_mode;
++
+ DECLARE_WAIT_QUEUE_HEAD(log_wait);
+ /* All 3 protected by @syslog_lock. */
+ /* the next printk record to read by syslog(READ) or /proc/kmsg */
+@@ -382,6 +386,20 @@ static struct latched_seq console_seq =
+ 	.val[1]		= 0,
+ };
+ 
++static struct latched_seq console_sync_seq = {
++	.latch		= SEQCNT_LATCH_ZERO(console_sync_seq.latch),
++	.val[0]		= 0,
++	.val[1]		= 0,
++};
++
++#ifdef CONFIG_HAVE_NMI
++static struct latched_seq console_sync_nmi_seq = {
++	.latch		= SEQCNT_LATCH_ZERO(console_sync_nmi_seq.latch),
++	.val[0]		= 0,
++	.val[1]		= 0,
++};
++#endif
++
+ /*
+  * The next printk record to read after the last 'clear' command. There are
+  * two copies (updated with seqcount_latch) so that reads can locklessly
+@@ -399,9 +417,6 @@ static struct latched_seq clear_seq = {
+ #define PREFIX_MAX		32
+ #endif
+ 
+-/* the maximum size of a formatted record (i.e. with prefix added per line) */
+-#define CONSOLE_LOG_MAX		1024
+-
+ /* the maximum size allowed to be reserved for a record */
+ #define LOG_LINE_MAX		(CONSOLE_LOG_MAX - PREFIX_MAX)
+ 
+@@ -1773,6 +1788,116 @@ static inline void printk_delay(int leve
+ 	}
+ }
+ 
++static bool kernel_sync_mode(void)
++{
++	return (oops_in_progress || sync_mode);
++}
++
++static bool console_may_sync(struct console *con)
++{
++	if (!(con->flags & CON_ENABLED))
++		return false;
++	if (con->write_atomic && kernel_sync_mode())
++		return true;
++	return false;
++}
++
++static bool call_sync_console_driver(struct console *con, const char *text, size_t text_len)
++{
++	if (!(con->flags & CON_ENABLED))
++		return false;
++	if (con->write_atomic && kernel_sync_mode())
++		con->write_atomic(con, text, text_len);
++	else
++		return false;
++
++	return true;
++}
++
++static bool have_atomic_console(void)
++{
++	struct console *con;
++
++	for_each_console(con) {
++		if (!(con->flags & CON_ENABLED))
++			continue;
++		if (con->write_atomic)
++			return true;
++	}
++	return false;
++}
++
++static bool print_sync(struct console *con, u64 *seq)
++{
++	struct printk_info info;
++	struct printk_record r;
++	size_t text_len;
++
++	prb_rec_init_rd(&r, &info, &con->sync_buf[0], sizeof(con->sync_buf));
++
++	if (!prb_read_valid(prb, *seq, &r))
++		return false;
++
++	text_len = record_print_text(&r, console_msg_format & MSG_FORMAT_SYSLOG, printk_time);
++
++	if (!call_sync_console_driver(con, &con->sync_buf[0], text_len))
++		return false;
++
++	*seq = r.info->seq;
++
++	touch_softlockup_watchdog_sync();
++	clocksource_touch_watchdog();
++	rcu_cpu_stall_reset();
++	touch_nmi_watchdog();
++
++	if (text_len)
++		printk_delay(r.info->level);
++
++	return true;
++}
++
++static u64 read_console_seq(void)
++{
++	u64 seq2;
++	u64 seq;
++
++	seq = latched_seq_read_nolock(&console_seq);
++	seq2 = latched_seq_read_nolock(&console_sync_seq);
++	if (seq2 > seq)
++		seq = seq2;
++#ifdef CONFIG_HAVE_NMI
++	seq2 = latched_seq_read_nolock(&console_sync_nmi_seq);
++	if (seq2 > seq)
++		seq = seq2;
++#endif
++	return seq;
++}
++
++static void print_sync_until(struct console *con, u64 seq)
++{
++	u64 printk_seq;
++
++	while (!__printk_cpu_trylock())
++		cpu_relax();
++
++	for (;;) {
++		printk_seq = read_console_seq();
++		if (printk_seq >= seq)
++			break;
++		if (!print_sync(con, &printk_seq))
++			break;
++#ifdef CONFIG_PRINTK_NMI
++		if (in_nmi()) {
++			latched_seq_write(&console_sync_nmi_seq, printk_seq + 1);
++			continue;
++		}
++#endif
++		latched_seq_write(&console_sync_seq, printk_seq + 1);
++	}
++
++	__printk_cpu_unlock();
++}
++
+ /*
+  * Special console_lock variants that help to reduce the risk of soft-lockups.
+  * They allow to pass console_lock to another printk() call using a busy wait.
+@@ -1947,6 +2072,8 @@ static void call_console_drivers(const c
+ 		if (!cpu_online(smp_processor_id()) &&
+ 		    !(con->flags & CON_ANYTIME))
+ 			continue;
++		if (kernel_sync_mode())
++			continue;
+ 		if (con->flags & CON_EXTENDED)
+ 			con->write(con, ext_text, ext_len);
+ 		else {
+@@ -2115,6 +2242,7 @@ int vprintk_store(int facility, int leve
+ 	const u32 caller_id = printk_caller_id();
+ 	struct prb_reserved_entry e;
+ 	enum printk_info_flags flags = 0;
++	bool final_commit = false;
+ 	struct printk_record r;
+ 	unsigned long irqflags;
+ 	u16 trunc_msg_len = 0;
+@@ -2125,6 +2253,7 @@ int vprintk_store(int facility, int leve
+ 	u16 text_len;
+ 	int ret = 0;
+ 	u64 ts_nsec;
++	u64 seq;
+ 
+ 	/*
+ 	 * Since the duration of printk() can vary depending on the message
+@@ -2163,6 +2292,7 @@ int vprintk_store(int facility, int leve
+ 	if (flags & LOG_CONT) {
+ 		prb_rec_init_wr(&r, reserve_size);
+ 		if (prb_reserve_in_last(&e, prb, &r, caller_id, LOG_LINE_MAX)) {
++			seq = r.info->seq;
+ 			text_len = printk_sprint(&r.text_buf[r.info->text_len], reserve_size,
+ 						 facility, &flags, fmt, args);
+ 			r.info->text_len += text_len;
+@@ -2170,6 +2300,7 @@ int vprintk_store(int facility, int leve
+ 			if (flags & LOG_NEWLINE) {
+ 				r.info->flags |= LOG_NEWLINE;
+ 				prb_final_commit(&e);
++				final_commit = true;
+ 			} else {
+ 				prb_commit(&e);
+ 			}
+@@ -2193,6 +2324,7 @@ int vprintk_store(int facility, int leve
+ 		if (!prb_reserve(&e, prb, &r))
+ 			goto out;
+ 	}
++	seq = r.info->seq;
+ 
+ 	/* fill message */
+ 	text_len = printk_sprint(&r.text_buf[0], reserve_size, facility, &flags, fmt, args);
+@@ -2208,13 +2340,25 @@ int vprintk_store(int facility, int leve
+ 		memcpy(&r.info->dev_info, dev_info, sizeof(r.info->dev_info));
+ 
+ 	/* A message without a trailing newline can be continued. */
+-	if (!(flags & LOG_NEWLINE))
++	if (!(flags & LOG_NEWLINE)) {
+ 		prb_commit(&e);
+-	else
++	} else {
+ 		prb_final_commit(&e);
++		final_commit = true;
++	}
+ 
+ 	ret = text_len + trunc_msg_len;
+ out:
++	/* only the kernel may perform synchronous printing */
++	if (facility == 0 && final_commit) {
++		struct console *con;
++
++		for_each_console(con) {
++			if (console_may_sync(con))
++				print_sync_until(con, seq + 1);
++		}
++	}
++
+ 	printk_exit_irqrestore(recursion_ptr, irqflags);
+ 	return ret;
+ }
+@@ -2283,13 +2427,13 @@ EXPORT_SYMBOL(_printk);
+ 
+ #else /* CONFIG_PRINTK */
+ 
+-#define CONSOLE_LOG_MAX		0
+ #define printk_time		false
+ 
+ #define prb_read_valid(rb, seq, r)	false
+ #define prb_first_valid_seq(rb)		0
+-#define latched_seq_read_nolock(seq)	0
++#define read_console_seq()		0
+ #define latched_seq_write(dst, src)
++#define kernel_sync_mode()		false
+ 
+ static u64 exclusive_console_stop_seq;
+ static unsigned long console_dropped;
+@@ -2593,6 +2737,8 @@ static int have_callable_console(void)
+  */
+ static inline int can_use_console(void)
+ {
++	if (kernel_sync_mode())
++		return false;
+ 	return cpu_online(raw_smp_processor_id()) || have_callable_console();
+ }
+ 
+@@ -2662,7 +2808,7 @@ void console_unlock(void)
+ 		size_t len;
+ 
+ skip:
+-		seq = latched_seq_read_nolock(&console_seq);
++		seq = read_console_seq();
+ 		if (!prb_read_valid(prb, seq, &r))
+ 			break;
+ 
+@@ -2742,7 +2888,7 @@ void console_unlock(void)
+ 	 * there's a new owner and the console_unlock() from them will do the
+ 	 * flush, no worries.
+ 	 */
+-	retry = prb_read_valid(prb, latched_seq_read_nolock(&console_seq), NULL);
++	retry = prb_read_valid(prb, read_console_seq(), NULL);
+ 	if (retry && console_trylock())
+ 		goto again;
+ }
+@@ -3042,7 +3188,7 @@ void register_console(struct console *ne
+ 		 * ignores console_lock.
+ 		 */
+ 		exclusive_console = newcon;
+-		exclusive_console_stop_seq = latched_seq_read_nolock(&console_seq);
++		exclusive_console_stop_seq = read_console_seq();
+ 
+ 		/* Get a consistent copy of @syslog_seq. */
+ 		mutex_lock(&syslog_lock);
+@@ -3417,6 +3563,18 @@ void kmsg_dump(enum kmsg_dump_reason rea
+ {
+ 	struct kmsg_dumper *dumper;
+ 
++	if (!oops_in_progress) {
++		/*
++		 * If atomic consoles are available, activate kernel sync mode
++		 * to make sure any final messages are visible. The trailing
++		 * printk message is important to flush any pending messages.
++		 */
++		if (have_atomic_console()) {
++			sync_mode = true;
++			pr_info("enabled sync mode\n");
++		}
++	}
++
+ 	rcu_read_lock();
+ 	list_for_each_entry_rcu(dumper, &dump_list, list) {
+ 		enum kmsg_dump_reason max_reason = dumper->max_reason;
diff --git a/debian/patches-rt/printk__move_console_printing_to_kthreads.patch b/debian/patches-rt/printk__move_console_printing_to_kthreads.patch
new file mode 100644
index 000000000000..0c25d0ea8847
--- /dev/null
+++ b/debian/patches-rt/printk__move_console_printing_to_kthreads.patch
@@ -0,0 +1,988 @@
+Subject: printk: move console printing to kthreads
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:07 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+Create a kthread for each console to perform console printing. Now
+all console printing is fully asynchronous except for the boot
+console and when the kernel enters sync mode (and there are atomic
+consoles available).
+
+The console_lock() and console_unlock() functions now only do what
+their name says... locking and unlocking of the console.
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ include/linux/console.h |   12 
+ kernel/printk/printk.c  |  717 ++++++++++++++----------------------------------
+ 2 files changed, 236 insertions(+), 493 deletions(-)
+---
+--- a/include/linux/console.h
++++ b/include/linux/console.h
+@@ -17,6 +17,12 @@
+ #include <linux/atomic.h>
+ #include <linux/types.h>
+ #include <linux/printk.h>
++#include <linux/seqlock.h>
++
++struct latched_seq {
++	seqcount_latch_t	latch;
++	u64			val[2];
++};
+ 
+ struct vc_data;
+ struct console_font_op;
+@@ -153,9 +159,15 @@ struct console {
+ 	int	cflag;
+ #ifdef CONFIG_PRINTK
+ 	char	sync_buf[CONSOLE_LOG_MAX];
++	struct latched_seq printk_seq;
++	struct latched_seq printk_sync_seq;
++#ifdef CONFIG_HAVE_NMI
++	struct latched_seq printk_sync_nmi_seq;
+ #endif
++#endif	/* CONFIG_PRINTK */
+ 	uint	ispeed;
+ 	uint	ospeed;
++	struct task_struct *thread;
+ 	void	*data;
+ 	struct	 console *next;
+ };
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -45,6 +45,7 @@
+ #include <linux/ctype.h>
+ #include <linux/uio.h>
+ #include <linux/kgdb.h>
++#include <linux/kthread.h>
+ #include <linux/clocksource.h>
+ #include <linux/sched/clock.h>
+ #include <linux/sched/debug.h>
+@@ -269,11 +270,6 @@ static void __up_console_sem(unsigned lo
+ static int console_locked, console_suspended;
+ 
+ /*
+- * If exclusive_console is non-NULL then only this console is to be printed to.
+- */
+-static struct console *exclusive_console;
+-
+-/*
+  *	Array of consoles built from command line options (console=)
+  */
+ 
+@@ -352,10 +348,10 @@ static int console_msg_format = MSG_FORM
+  * non-prinatable characters are escaped in the "\xff" notation.
+  */
+ 
++#ifdef CONFIG_PRINTK
+ /* syslog_lock protects syslog_* variables and write access to clear_seq. */
+ static DEFINE_MUTEX(syslog_lock);
+ 
+-#ifdef CONFIG_PRINTK
+ /* Set to enable sync mode. Once set, it is never cleared. */
+ static bool sync_mode;
+ 
+@@ -366,40 +362,6 @@ static u64 syslog_seq;
+ static size_t syslog_partial;
+ static bool syslog_time;
+ 
+-/* Both protected by @console_sem. */
+-static u64 exclusive_console_stop_seq;
+-static unsigned long console_dropped;
+-
+-struct latched_seq {
+-	seqcount_latch_t	latch;
+-	u64			val[2];
+-};
+-
+-/*
+- * The next printk record to write to the console. There are two
+- * copies (updated with seqcount_latch) so that reads can locklessly
+- * access a valid value. Writers are synchronized by @console_sem.
+- */
+-static struct latched_seq console_seq = {
+-	.latch		= SEQCNT_LATCH_ZERO(console_seq.latch),
+-	.val[0]		= 0,
+-	.val[1]		= 0,
+-};
+-
+-static struct latched_seq console_sync_seq = {
+-	.latch		= SEQCNT_LATCH_ZERO(console_sync_seq.latch),
+-	.val[0]		= 0,
+-	.val[1]		= 0,
+-};
+-
+-#ifdef CONFIG_HAVE_NMI
+-static struct latched_seq console_sync_nmi_seq = {
+-	.latch		= SEQCNT_LATCH_ZERO(console_sync_nmi_seq.latch),
+-	.val[0]		= 0,
+-	.val[1]		= 0,
+-};
+-#endif
+-
+ /*
+  * The next printk record to read after the last 'clear' command. There are
+  * two copies (updated with seqcount_latch) so that reads can locklessly
+@@ -1799,6 +1761,8 @@ static bool console_may_sync(struct cons
+ 		return false;
+ 	if (con->write_atomic && kernel_sync_mode())
+ 		return true;
++	if (con->write && (con->flags & CON_BOOT) && !con->thread)
++		return true;
+ 	return false;
+ }
+ 
+@@ -1806,12 +1770,21 @@ static bool call_sync_console_driver(str
+ {
+ 	if (!(con->flags & CON_ENABLED))
+ 		return false;
+-	if (con->write_atomic && kernel_sync_mode())
++
++	if (con->write_atomic && kernel_sync_mode()) {
+ 		con->write_atomic(con, text, text_len);
+-	else
+-		return false;
++		return true;
++	}
+ 
+-	return true;
++	if (con->write && (con->flags & CON_BOOT) && !con->thread) {
++		if (console_trylock()) {
++			con->write(con, text, text_len);
++			console_unlock();
++			return true;
++		}
++	}
++
++	return false;
+ }
+ 
+ static bool have_atomic_console(void)
+@@ -1856,24 +1829,24 @@ static bool print_sync(struct console *c
+ 	return true;
+ }
+ 
+-static u64 read_console_seq(void)
++static u64 read_console_seq(struct console *con)
+ {
+ 	u64 seq2;
+ 	u64 seq;
+ 
+-	seq = latched_seq_read_nolock(&console_seq);
+-	seq2 = latched_seq_read_nolock(&console_sync_seq);
++	seq = latched_seq_read_nolock(&con->printk_seq);
++	seq2 = latched_seq_read_nolock(&con->printk_sync_seq);
+ 	if (seq2 > seq)
+ 		seq = seq2;
+ #ifdef CONFIG_HAVE_NMI
+-	seq2 = latched_seq_read_nolock(&console_sync_nmi_seq);
++	seq2 = latched_seq_read_nolock(&con->printk_sync_nmi_seq);
+ 	if (seq2 > seq)
+ 		seq = seq2;
+ #endif
+ 	return seq;
+ }
+ 
+-static void print_sync_until(struct console *con, u64 seq)
++static void print_sync_until(struct console *con, u64 seq, bool is_locked)
+ {
+ 	u64 printk_seq;
+ 
+@@ -1881,210 +1854,26 @@ static void print_sync_until(struct cons
+ 		cpu_relax();
+ 
+ 	for (;;) {
+-		printk_seq = read_console_seq();
++		printk_seq = read_console_seq(con);
+ 		if (printk_seq >= seq)
+ 			break;
+ 		if (!print_sync(con, &printk_seq))
+ 			break;
++
++		if (is_locked)
++			latched_seq_write(&con->printk_seq, printk_seq + 1);
+ #ifdef CONFIG_PRINTK_NMI
+-		if (in_nmi()) {
+-			latched_seq_write(&console_sync_nmi_seq, printk_seq + 1);
+-			continue;
+-		}
++		else if (in_nmi())
++			latched_seq_write(&con->printk_sync_nmi_seq, printk_seq + 1);
+ #endif
+-		latched_seq_write(&console_sync_seq, printk_seq + 1);
++		else
++			latched_seq_write(&con->printk_sync_seq, printk_seq + 1);
+ 	}
+ 
+ 	__printk_cpu_unlock();
+ }
+ 
+ /*
+- * Special console_lock variants that help to reduce the risk of soft-lockups.
+- * They allow to pass console_lock to another printk() call using a busy wait.
+- */
+-
+-#ifdef CONFIG_LOCKDEP
+-static struct lockdep_map console_owner_dep_map = {
+-	.name = "console_owner"
+-};
+-#endif
+-
+-static DEFINE_RAW_SPINLOCK(console_owner_lock);
+-static struct task_struct *console_owner;
+-static bool console_waiter;
+-
+-/**
+- * console_lock_spinning_enable - mark beginning of code where another
+- *	thread might safely busy wait
+- *
+- * This basically converts console_lock into a spinlock. This marks
+- * the section where the console_lock owner can not sleep, because
+- * there may be a waiter spinning (like a spinlock). Also it must be
+- * ready to hand over the lock at the end of the section.
+- */
+-static void console_lock_spinning_enable(void)
+-{
+-	raw_spin_lock(&console_owner_lock);
+-	console_owner = current;
+-	raw_spin_unlock(&console_owner_lock);
+-
+-	/* The waiter may spin on us after setting console_owner */
+-	spin_acquire(&console_owner_dep_map, 0, 0, _THIS_IP_);
+-}
+-
+-/**
+- * console_lock_spinning_disable_and_check - mark end of code where another
+- *	thread was able to busy wait and check if there is a waiter
+- *
+- * This is called at the end of the section where spinning is allowed.
+- * It has two functions. First, it is a signal that it is no longer
+- * safe to start busy waiting for the lock. Second, it checks if
+- * there is a busy waiter and passes the lock rights to her.
+- *
+- * Important: Callers lose the lock if there was a busy waiter.
+- *	They must not touch items synchronized by console_lock
+- *	in this case.
+- *
+- * Return: 1 if the lock rights were passed, 0 otherwise.
+- */
+-static int console_lock_spinning_disable_and_check(void)
+-{
+-	int waiter;
+-
+-	raw_spin_lock(&console_owner_lock);
+-	waiter = READ_ONCE(console_waiter);
+-	console_owner = NULL;
+-	raw_spin_unlock(&console_owner_lock);
+-
+-	if (!waiter) {
+-		spin_release(&console_owner_dep_map, _THIS_IP_);
+-		return 0;
+-	}
+-
+-	/* The waiter is now free to continue */
+-	WRITE_ONCE(console_waiter, false);
+-
+-	spin_release(&console_owner_dep_map, _THIS_IP_);
+-
+-	/*
+-	 * Hand off console_lock to waiter. The waiter will perform
+-	 * the up(). After this, the waiter is the console_lock owner.
+-	 */
+-	mutex_release(&console_lock_dep_map, _THIS_IP_);
+-	return 1;
+-}
+-
+-/**
+- * console_trylock_spinning - try to get console_lock by busy waiting
+- *
+- * This allows to busy wait for the console_lock when the current
+- * owner is running in specially marked sections. It means that
+- * the current owner is running and cannot reschedule until it
+- * is ready to lose the lock.
+- *
+- * Return: 1 if we got the lock, 0 othrewise
+- */
+-static int console_trylock_spinning(void)
+-{
+-	struct task_struct *owner = NULL;
+-	bool waiter;
+-	bool spin = false;
+-	unsigned long flags;
+-
+-	if (console_trylock())
+-		return 1;
+-
+-	printk_safe_enter_irqsave(flags);
+-
+-	raw_spin_lock(&console_owner_lock);
+-	owner = READ_ONCE(console_owner);
+-	waiter = READ_ONCE(console_waiter);
+-	if (!waiter && owner && owner != current) {
+-		WRITE_ONCE(console_waiter, true);
+-		spin = true;
+-	}
+-	raw_spin_unlock(&console_owner_lock);
+-
+-	/*
+-	 * If there is an active printk() writing to the
+-	 * consoles, instead of having it write our data too,
+-	 * see if we can offload that load from the active
+-	 * printer, and do some printing ourselves.
+-	 * Go into a spin only if there isn't already a waiter
+-	 * spinning, and there is an active printer, and
+-	 * that active printer isn't us (recursive printk?).
+-	 */
+-	if (!spin) {
+-		printk_safe_exit_irqrestore(flags);
+-		return 0;
+-	}
+-
+-	/* We spin waiting for the owner to release us */
+-	spin_acquire(&console_owner_dep_map, 0, 0, _THIS_IP_);
+-	/* Owner will clear console_waiter on hand off */
+-	while (READ_ONCE(console_waiter))
+-		cpu_relax();
+-	spin_release(&console_owner_dep_map, _THIS_IP_);
+-
+-	printk_safe_exit_irqrestore(flags);
+-	/*
+-	 * The owner passed the console lock to us.
+-	 * Since we did not spin on console lock, annotate
+-	 * this as a trylock. Otherwise lockdep will
+-	 * complain.
+-	 */
+-	mutex_acquire(&console_lock_dep_map, 0, 1, _THIS_IP_);
+-
+-	return 1;
+-}
+-
+-/*
+- * Call the console drivers, asking them to write out
+- * log_buf[start] to log_buf[end - 1].
+- * The console_lock must be held.
+- */
+-static void call_console_drivers(const char *ext_text, size_t ext_len,
+-				 const char *text, size_t len)
+-{
+-	static char dropped_text[64];
+-	size_t dropped_len = 0;
+-	struct console *con;
+-
+-	trace_console_rcuidle(text, len);
+-
+-	if (!console_drivers)
+-		return;
+-
+-	if (console_dropped) {
+-		dropped_len = snprintf(dropped_text, sizeof(dropped_text),
+-				       "** %lu printk messages dropped **\n",
+-				       console_dropped);
+-		console_dropped = 0;
+-	}
+-
+-	for_each_console(con) {
+-		if (exclusive_console && con != exclusive_console)
+-			continue;
+-		if (!(con->flags & CON_ENABLED))
+-			continue;
+-		if (!con->write)
+-			continue;
+-		if (!cpu_online(smp_processor_id()) &&
+-		    !(con->flags & CON_ANYTIME))
+-			continue;
+-		if (kernel_sync_mode())
+-			continue;
+-		if (con->flags & CON_EXTENDED)
+-			con->write(con, ext_text, ext_len);
+-		else {
+-			if (dropped_len)
+-				con->write(con, dropped_text, dropped_len);
+-			con->write(con, text, len);
+-		}
+-	}
+-}
+-
+-/*
+  * Recursion is tracked separately on each CPU. If NMIs are supported, an
+  * additional NMI context per CPU is also separately tracked. Until per-CPU
+  * is available, a separate "early tracking" is performed.
+@@ -2355,7 +2144,7 @@ int vprintk_store(int facility, int leve
+ 
+ 		for_each_console(con) {
+ 			if (console_may_sync(con))
+-				print_sync_until(con, seq + 1);
++				print_sync_until(con, seq + 1, false);
+ 		}
+ 	}
+ 
+@@ -2368,39 +2157,16 @@ asmlinkage int vprintk_emit(int facility
+ 			    const char *fmt, va_list args)
+ {
+ 	int printed_len;
+-	bool in_sched = false;
+ 
+ 	/* Suppress unimportant messages after panic happens */
+ 	if (unlikely(suppress_printk))
+ 		return 0;
+ 
+-	if (level == LOGLEVEL_SCHED) {
++	if (level == LOGLEVEL_SCHED)
+ 		level = LOGLEVEL_DEFAULT;
+-		in_sched = true;
+-	}
+-
+-	printk_delay(level);
+ 
+ 	printed_len = vprintk_store(facility, level, dev_info, fmt, args);
+ 
+-	/* If called from the scheduler, we can not call up(). */
+-	if (!in_sched) {
+-		/*
+-		 * Disable preemption to avoid being preempted while holding
+-		 * console_sem which would prevent anyone from printing to
+-		 * console
+-		 */
+-		preempt_disable();
+-		/*
+-		 * Try to acquire and then immediately release the console
+-		 * semaphore.  The release will print out buffers and wake up
+-		 * /dev/kmsg and syslog() users.
+-		 */
+-		if (console_trylock_spinning())
+-			console_unlock();
+-		preempt_enable();
+-	}
+-
+ 	wake_up_klogd();
+ 	return printed_len;
+ }
+@@ -2425,37 +2191,162 @@ asmlinkage __visible int _printk(const c
+ }
+ EXPORT_SYMBOL(_printk);
+ 
+-#else /* CONFIG_PRINTK */
++static int printk_kthread_func(void *data)
++{
++	struct console *con = data;
++	unsigned long dropped = 0;
++	char *dropped_text = NULL;
++	struct printk_info info;
++	struct printk_record r;
++	char *ext_text = NULL;
++	size_t dropped_len;
++	int ret = -ENOMEM;
++	char *text = NULL;
++	char *write_text;
++	size_t len;
++	int error;
++	u64 seq;
++
++	if (con->flags & CON_EXTENDED) {
++		ext_text = kmalloc(CONSOLE_EXT_LOG_MAX, GFP_KERNEL);
++		if (!ext_text)
++			goto out;
++	}
++	text = kmalloc(LOG_LINE_MAX + PREFIX_MAX, GFP_KERNEL);
++	dropped_text = kmalloc(64, GFP_KERNEL);
++	if (!text || !dropped_text)
++		goto out;
++	if (con->flags & CON_EXTENDED)
++		write_text = ext_text;
++	else
++		write_text = text;
++
++	seq = read_console_seq(con);
++
++	prb_rec_init_rd(&r, &info, text, LOG_LINE_MAX + PREFIX_MAX);
+ 
+-#define printk_time		false
++	for (;;) {
++		error = wait_event_interruptible(log_wait,
++						 prb_read_valid(prb, seq, &r) || kthread_should_stop());
+ 
+-#define prb_read_valid(rb, seq, r)	false
+-#define prb_first_valid_seq(rb)		0
+-#define read_console_seq()		0
+-#define latched_seq_write(dst, src)
+-#define kernel_sync_mode()		false
++		if (kthread_should_stop())
++			break;
+ 
+-static u64 exclusive_console_stop_seq;
+-static unsigned long console_dropped;
++		if (error)
++			continue;
+ 
+-static size_t record_print_text(const struct printk_record *r,
+-				bool syslog, bool time)
++		if (seq != r.info->seq) {
++			dropped += r.info->seq - seq;
++			seq = r.info->seq;
++		}
++
++		seq++;
++
++		if (!(con->flags & CON_ENABLED))
++			continue;
++
++		if (suppress_message_printing(r.info->level))
++			continue;
++
++		if (con->flags & CON_EXTENDED) {
++			len = info_print_ext_header(ext_text,
++						    CONSOLE_EXT_LOG_MAX,
++						    r.info);
++			len += msg_print_ext_body(ext_text + len,
++						  CONSOLE_EXT_LOG_MAX - len,
++						  &r.text_buf[0], r.info->text_len,
++						  &r.info->dev_info);
++		} else {
++			len = record_print_text(&r,
++						console_msg_format & MSG_FORMAT_SYSLOG,
++						printk_time);
++		}
++
++		console_lock();
++
++		/*
++		 * Even though the printk kthread is always preemptible, it is
++		 * still not allowed to call cond_resched() from within
++		 * console drivers. The task may become non-preemptible in the
++		 * console driver call chain. For example, vt_console_print()
++		 * takes a spinlock and then can call into fbcon_redraw(),
++		 * which can conditionally invoke cond_resched().
++		 */
++		console_may_schedule = 0;
++
++		if (kernel_sync_mode() && con->write_atomic) {
++			console_unlock();
++			break;
++		}
++
++		if (!(con->flags & CON_EXTENDED) && dropped) {
++			dropped_len = snprintf(dropped_text, 64,
++					       "** %lu printk messages dropped **\n",
++					       dropped);
++			dropped = 0;
++
++			con->write(con, dropped_text, dropped_len);
++			printk_delay(r.info->level);
++		}
++
++		con->write(con, write_text, len);
++		if (len)
++			printk_delay(r.info->level);
++
++		latched_seq_write(&con->printk_seq, seq);
++
++		console_unlock();
++	}
++	ret = 0;
++out:
++	kfree(dropped_text);
++	kfree(text);
++	kfree(ext_text);
++	pr_info("%sconsole [%s%d]: printing thread stopped\n",
++		(con->flags & CON_BOOT) ? "boot" : "",
++		con->name, con->index);
++	return ret;
++}
++
++/* Must be called within console_lock(). */
++static void start_printk_kthread(struct console *con)
+ {
+-	return 0;
++	con->thread = kthread_run(printk_kthread_func, con,
++				  "pr/%s%d", con->name, con->index);
++	if (IS_ERR(con->thread)) {
++		pr_err("%sconsole [%s%d]: unable to start printing thread\n",
++		       (con->flags & CON_BOOT) ? "boot" : "",
++		       con->name, con->index);
++		return;
++	}
++	pr_info("%sconsole [%s%d]: printing thread started\n",
++		(con->flags & CON_BOOT) ? "boot" : "",
++		con->name, con->index);
+ }
+-static ssize_t info_print_ext_header(char *buf, size_t size,
+-				     struct printk_info *info)
++
++/* protected by console_lock */
++static bool kthreads_started;
++
++/* Must be called within console_lock(). */
++static void console_try_thread(struct console *con)
+ {
+-	return 0;
++	if (kthreads_started) {
++		start_printk_kthread(con);
++		return;
++	}
++
++	/*
++	 * The printing threads have not been started yet. If this console
++	 * can print synchronously, print all unprinted messages.
++	 */
++	if (console_may_sync(con)) {
++		unsigned long flags;
++
++		local_irq_save(flags);
++		print_sync_until(con, prb_next_seq(prb), true);
++		local_irq_restore(flags);
++	}
+ }
+-static ssize_t msg_print_ext_body(char *buf, size_t size,
+-				  char *text, size_t text_len,
+-				  struct dev_printk_info *dev_info) { return 0; }
+-static void console_lock_spinning_enable(void) { }
+-static int console_lock_spinning_disable_and_check(void) { return 0; }
+-static void call_console_drivers(const char *ext_text, size_t ext_len,
+-				 const char *text, size_t len) {}
+-static bool suppress_message_printing(int level) { return false; }
+ 
+ #endif /* CONFIG_PRINTK */
+ 
+@@ -2712,36 +2603,6 @@ int is_console_locked(void)
+ }
+ EXPORT_SYMBOL(is_console_locked);
+ 
+-/*
+- * Check if we have any console that is capable of printing while cpu is
+- * booting or shutting down. Requires console_sem.
+- */
+-static int have_callable_console(void)
+-{
+-	struct console *con;
+-
+-	for_each_console(con)
+-		if ((con->flags & CON_ENABLED) &&
+-				(con->flags & CON_ANYTIME))
+-			return 1;
+-
+-	return 0;
+-}
+-
+-/*
+- * Can we actually use the console at this time on this cpu?
+- *
+- * Console drivers may assume that per-cpu resources have been allocated. So
+- * unless they're explicitly marked as being able to cope (CON_ANYTIME) don't
+- * call them until this CPU is officially up.
+- */
+-static inline int can_use_console(void)
+-{
+-	if (kernel_sync_mode())
+-		return false;
+-	return cpu_online(raw_smp_processor_id()) || have_callable_console();
+-}
+-
+ /**
+  * console_unlock - unlock the console system
+  *
+@@ -2758,139 +2619,13 @@ static inline int can_use_console(void)
+  */
+ void console_unlock(void)
+ {
+-	static char ext_text[CONSOLE_EXT_LOG_MAX];
+-	static char text[CONSOLE_LOG_MAX];
+-	unsigned long flags;
+-	bool do_cond_resched, retry;
+-	struct printk_info info;
+-	struct printk_record r;
+-	u64 seq;
+-
+ 	if (console_suspended) {
+ 		up_console_sem();
+ 		return;
+ 	}
+ 
+-	prb_rec_init_rd(&r, &info, text, sizeof(text));
+-
+-	/*
+-	 * Console drivers are called with interrupts disabled, so
+-	 * @console_may_schedule should be cleared before; however, we may
+-	 * end up dumping a lot of lines, for example, if called from
+-	 * console registration path, and should invoke cond_resched()
+-	 * between lines if allowable.  Not doing so can cause a very long
+-	 * scheduling stall on a slow console leading to RCU stall and
+-	 * softlockup warnings which exacerbate the issue with more
+-	 * messages practically incapacitating the system.
+-	 *
+-	 * console_trylock() is not able to detect the preemptive
+-	 * context reliably. Therefore the value must be stored before
+-	 * and cleared after the "again" goto label.
+-	 */
+-	do_cond_resched = console_may_schedule;
+-again:
+-	console_may_schedule = 0;
+-
+-	/*
+-	 * We released the console_sem lock, so we need to recheck if
+-	 * cpu is online and (if not) is there at least one CON_ANYTIME
+-	 * console.
+-	 */
+-	if (!can_use_console()) {
+-		console_locked = 0;
+-		up_console_sem();
+-		return;
+-	}
+-
+-	for (;;) {
+-		size_t ext_len = 0;
+-		int handover;
+-		size_t len;
+-
+-skip:
+-		seq = read_console_seq();
+-		if (!prb_read_valid(prb, seq, &r))
+-			break;
+-
+-		if (seq != r.info->seq) {
+-			console_dropped += r.info->seq - seq;
+-			latched_seq_write(&console_seq, r.info->seq);
+-			seq = r.info->seq;
+-		}
+-
+-		if (suppress_message_printing(r.info->level)) {
+-			/*
+-			 * Skip record we have buffered and already printed
+-			 * directly to the console when we received it, and
+-			 * record that has level above the console loglevel.
+-			 */
+-			latched_seq_write(&console_seq, seq + 1);
+-			goto skip;
+-		}
+-
+-		/* Output to all consoles once old messages replayed. */
+-		if (unlikely(exclusive_console &&
+-			     seq >= exclusive_console_stop_seq)) {
+-			exclusive_console = NULL;
+-		}
+-
+-		/*
+-		 * Handle extended console text first because later
+-		 * record_print_text() will modify the record buffer in-place.
+-		 */
+-		if (nr_ext_console_drivers) {
+-			ext_len = info_print_ext_header(ext_text,
+-						sizeof(ext_text),
+-						r.info);
+-			ext_len += msg_print_ext_body(ext_text + ext_len,
+-						sizeof(ext_text) - ext_len,
+-						&r.text_buf[0],
+-						r.info->text_len,
+-						&r.info->dev_info);
+-		}
+-		len = record_print_text(&r,
+-				console_msg_format & MSG_FORMAT_SYSLOG,
+-				printk_time);
+-		latched_seq_write(&console_seq, seq + 1);
+-
+-		/*
+-		 * While actively printing out messages, if another printk()
+-		 * were to occur on another CPU, it may wait for this one to
+-		 * finish. This task can not be preempted if there is a
+-		 * waiter waiting to take over.
+-		 *
+-		 * Interrupts are disabled because the hand over to a waiter
+-		 * must not be interrupted until the hand over is completed
+-		 * (@console_waiter is cleared).
+-		 */
+-		printk_safe_enter_irqsave(flags);
+-		console_lock_spinning_enable();
+-
+-		stop_critical_timings();	/* don't trace print latency */
+-		call_console_drivers(ext_text, ext_len, text, len);
+-		start_critical_timings();
+-
+-		handover = console_lock_spinning_disable_and_check();
+-		printk_safe_exit_irqrestore(flags);
+-		if (handover)
+-			return;
+-
+-		if (do_cond_resched)
+-			cond_resched();
+-	}
+-
+ 	console_locked = 0;
+ 	up_console_sem();
+-
+-	/*
+-	 * Someone could have filled up the buffer again, so re-check if there's
+-	 * something to flush. In case we cannot trylock the console_sem again,
+-	 * there's a new owner and the console_unlock() from them will do the
+-	 * flush, no worries.
+-	 */
+-	retry = prb_read_valid(prb, read_console_seq(), NULL);
+-	if (retry && console_trylock())
+-		goto again;
+ }
+ EXPORT_SYMBOL(console_unlock);
+ 
+@@ -2940,19 +2675,20 @@ void console_unblank(void)
+  */
+ void console_flush_on_panic(enum con_flush_mode mode)
+ {
+-	if (console_trylock()) {
+-		if (mode == CONSOLE_REPLAY_ALL)
+-			latched_seq_write(&console_seq, prb_first_valid_seq(prb));
+-	} else {
+-		/*
+-		 * Another context is holding the console lock and
+-		 * @console_may_schedule may be set. Ignore and proceed to
+-		 * unlock so that messages are flushed out. As this can be
+-		 * called from any context and we don't want to get preempted
+-		 * while flushing, ensure @console_may_schedule is cleared.
+-		 */
+-		console_may_schedule = 0;
++	if (!console_trylock())
++		return;
++
++#ifdef CONFIG_PRINTK
++	if (mode == CONSOLE_REPLAY_ALL) {
++		struct console *c;
++		u64 seq;
++
++		seq = prb_first_valid_seq(prb);
++		for_each_console(c)
++			latched_seq_write(&c->printk_seq, seq);
+ 	}
++#endif
++
+ 	console_unlock();
+ }
+ 
+@@ -3088,6 +2824,7 @@ static int try_enable_new_console(struct
+ void register_console(struct console *newcon)
+ {
+ 	struct console *bcon = NULL;
++	u64 __maybe_unused seq = 0;
+ 	int err;
+ 
+ 	for_each_console(bcon) {
+@@ -3110,6 +2847,8 @@ void register_console(struct console *ne
+ 		}
+ 	}
+ 
++	newcon->thread = NULL;
++
+ 	if (console_drivers && console_drivers->flags & CON_BOOT)
+ 		bcon = console_drivers;
+ 
+@@ -3174,27 +2913,21 @@ void register_console(struct console *ne
+ 	if (newcon->flags & CON_EXTENDED)
+ 		nr_ext_console_drivers++;
+ 
+-	if (newcon->flags & CON_PRINTBUFFER) {
+-		/*
+-		 * console_unlock(); will print out the buffered messages
+-		 * for us.
+-		 *
+-		 * We're about to replay the log buffer.  Only do this to the
+-		 * just-registered console to avoid excessive message spam to
+-		 * the already-registered consoles.
+-		 *
+-		 * Set exclusive_console with disabled interrupts to reduce
+-		 * race window with eventual console_flush_on_panic() that
+-		 * ignores console_lock.
+-		 */
+-		exclusive_console = newcon;
+-		exclusive_console_stop_seq = read_console_seq();
++#ifdef CONFIG_PRINTK
++	if (!(newcon->flags & CON_PRINTBUFFER))
++		seq = prb_next_seq(prb);
+ 
+-		/* Get a consistent copy of @syslog_seq. */
+-		mutex_lock(&syslog_lock);
+-		latched_seq_write(&console_seq, syslog_seq);
+-		mutex_unlock(&syslog_lock);
+-	}
++	seqcount_latch_init(&newcon->printk_seq.latch);
++	latched_seq_write(&newcon->printk_seq, seq);
++	seqcount_latch_init(&newcon->printk_sync_seq.latch);
++	latched_seq_write(&newcon->printk_sync_seq, seq);
++#ifdef CONFIG_HAVE_NMI
++	seqcount_latch_init(&newcon->printk_sync_nmi_seq.latch);
++	latched_seq_write(&newcon->printk_sync_nmi_seq, seq);
++#endif
++
++	console_try_thread(newcon);
++#endif /* CONFIG_PRINTK */
+ 	console_unlock();
+ 	console_sysfs_notify();
+ 
+@@ -3268,6 +3001,9 @@ int unregister_console(struct console *c
+ 	console_unlock();
+ 	console_sysfs_notify();
+ 
++	if (console->thread && !IS_ERR(console->thread))
++		kthread_stop(console->thread);
++
+ 	if (console->exit)
+ 		res = console->exit(console);
+ 
+@@ -3350,6 +3086,15 @@ static int __init printk_late_init(void)
+ 			unregister_console(con);
+ 		}
+ 	}
++
++#ifdef CONFIG_PRINTK
++	console_lock();
++	for_each_console(con)
++		start_printk_kthread(con);
++	kthreads_started = true;
++	console_unlock();
++#endif
++
+ 	ret = cpuhp_setup_state_nocalls(CPUHP_PRINTK_DEAD, "printk:dead", NULL,
+ 					console_cpu_notify);
+ 	WARN_ON(ret < 0);
+@@ -3365,7 +3110,6 @@ late_initcall(printk_late_init);
+  * Delayed printk version, for scheduler-internal messages:
+  */
+ #define PRINTK_PENDING_WAKEUP	0x01
+-#define PRINTK_PENDING_OUTPUT	0x02
+ 
+ static DEFINE_PER_CPU(int, printk_pending);
+ 
+@@ -3373,14 +3117,8 @@ static void wake_up_klogd_work_func(stru
+ {
+ 	int pending = __this_cpu_xchg(printk_pending, 0);
+ 
+-	if (pending & PRINTK_PENDING_OUTPUT) {
+-		/* If trylock fails, someone else is doing the printing */
+-		if (console_trylock())
+-			console_unlock();
+-	}
+-
+ 	if (pending & PRINTK_PENDING_WAKEUP)
+-		wake_up_interruptible(&log_wait);
++		wake_up_interruptible_all(&log_wait);
+ }
+ 
+ static DEFINE_PER_CPU(struct irq_work, wake_up_klogd_work) =
+@@ -3401,18 +3139,11 @@ void wake_up_klogd(void)
+ 
+ void defer_console_output(void)
+ {
+-	if (!printk_percpu_data_ready())
+-		return;
+-
+-	preempt_disable();
+-	__this_cpu_or(printk_pending, PRINTK_PENDING_OUTPUT);
+-	irq_work_queue(this_cpu_ptr(&wake_up_klogd_work));
+-	preempt_enable();
+ }
+ 
+ void printk_trigger_flush(void)
+ {
+-	defer_console_output();
++	wake_up_klogd();
+ }
+ 
+ int vprintk_deferred(const char *fmt, va_list args)
diff --git a/debian/patches-rt/printk__relocate_printk_delay.patch b/debian/patches-rt/printk__relocate_printk_delay.patch
new file mode 100644
index 000000000000..d2db715dec4f
--- /dev/null
+++ b/debian/patches-rt/printk__relocate_printk_delay.patch
@@ -0,0 +1,62 @@
+Subject: printk: relocate printk_delay()
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:03 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+Move printk_delay() "as is" further up so that they can be used by
+new functions in an upcoming commit.
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ kernel/printk/printk.c |   28 ++++++++++++++--------------
+ 1 file changed, 14 insertions(+), 14 deletions(-)
+---
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -1748,6 +1748,20 @@ SYSCALL_DEFINE3(syslog, int, type, char
+ 	return do_syslog(type, buf, len, SYSLOG_FROM_READER);
+ }
+ 
++int printk_delay_msec __read_mostly;
++
++static inline void printk_delay(void)
++{
++	if (unlikely(printk_delay_msec)) {
++		int m = printk_delay_msec;
++
++		while (m--) {
++			mdelay(1);
++			touch_nmi_watchdog();
++		}
++	}
++}
++
+ /*
+  * Special console_lock variants that help to reduce the risk of soft-lockups.
+  * They allow to pass console_lock to another printk() call using a busy wait.
+@@ -2002,20 +2016,6 @@ static u8 *__printk_recursion_counter(vo
+ 		local_irq_restore(flags);		\
+ 	} while (0)
+ 
+-int printk_delay_msec __read_mostly;
+-
+-static inline void printk_delay(void)
+-{
+-	if (unlikely(printk_delay_msec)) {
+-		int m = printk_delay_msec;
+-
+-		while (m--) {
+-			mdelay(1);
+-			touch_nmi_watchdog();
+-		}
+-	}
+-}
+-
+ static inline u32 printk_caller_id(void)
+ {
+ 	return in_task() ? task_pid_nr(current) :
diff --git a/debian/patches-rt/printk__remove_deferred_printing.patch b/debian/patches-rt/printk__remove_deferred_printing.patch
new file mode 100644
index 000000000000..406337556f79
--- /dev/null
+++ b/debian/patches-rt/printk__remove_deferred_printing.patch
@@ -0,0 +1,824 @@
+Subject: printk: remove deferred printing
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:08 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+Since printing occurs either atomically or from the printing
+kthread, there is no need for any deferring or tracking possible
+recursion paths. Remove all printk defer functions and context
+tracking.
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ arch/arm/kernel/smp.c           |    2 -
+ arch/powerpc/kexec/crash.c      |    3 -
+ arch/x86/kernel/dumpstack_32.c  |    2 -
+ arch/x86/kernel/dumpstack_64.c  |    3 +
+ arch/x86/kernel/i8259.c         |    3 -
+ arch/x86/kernel/unwind_frame.c  |   16 +++-----
+ arch/x86/kernel/unwind_orc.c    |    2 -
+ drivers/char/random.c           |    5 +-
+ include/linux/printk.h          |   34 ------------------
+ include/linux/suspend.h         |   10 +----
+ kernel/power/main.c             |   10 +----
+ kernel/printk/Makefile          |    1 
+ kernel/printk/internal.h        |   36 -------------------
+ kernel/printk/printk.c          |   74 +++++++++++++---------------------------
+ kernel/printk/printk_safe.c     |   52 ----------------------------
+ kernel/sched/core.c             |    9 ++--
+ kernel/sched/deadline.c         |    2 -
+ kernel/sched/psi.c              |   14 +++----
+ kernel/sched/rt.c               |    2 -
+ kernel/sched/stats.h            |    2 -
+ kernel/time/clockevents.c       |    9 +---
+ kernel/time/ntp.c               |   14 ++-----
+ kernel/time/timekeeping.c       |   30 ++++++++--------
+ kernel/time/timekeeping_debug.c |    2 -
+ kernel/workqueue.c              |    4 --
+ lib/ratelimit.c                 |    4 --
+ 26 files changed, 83 insertions(+), 262 deletions(-)
+ delete mode 100644 kernel/printk/internal.h
+ delete mode 100644 kernel/printk/printk_safe.c
+---
+--- a/arch/arm/kernel/smp.c
++++ b/arch/arm/kernel/smp.c
+@@ -676,9 +676,7 @@ static void do_handle_IPI(int ipinr)
+ 		break;
+ 
+ 	case IPI_CPU_BACKTRACE:
+-		printk_deferred_enter();
+ 		nmi_cpu_backtrace(get_irq_regs());
+-		printk_deferred_exit();
+ 		break;
+ 
+ 	default:
+--- a/arch/powerpc/kexec/crash.c
++++ b/arch/powerpc/kexec/crash.c
+@@ -312,9 +312,6 @@ void default_machine_crash_shutdown(stru
+ 	unsigned int i;
+ 	int (*old_handler)(struct pt_regs *regs);
+ 
+-	/* Avoid hardlocking with irresponsive CPU holding logbuf_lock */
+-	printk_deferred_enter();
+-
+ 	/*
+ 	 * This function is only called after the system
+ 	 * has panicked or is otherwise in a critical state.
+--- a/arch/x86/kernel/dumpstack_32.c
++++ b/arch/x86/kernel/dumpstack_32.c
+@@ -141,7 +141,7 @@ int get_stack_info(unsigned long *stack,
+ 	 */
+ 	if (visit_mask) {
+ 		if (*visit_mask & (1UL << info->type)) {
+-			printk_deferred_once(KERN_WARNING "WARNING: stack recursion on stack type %d\n", info->type);
++			pr_warn_once("WARNING: stack recursion on stack type %d\n", info->type);
+ 			goto unknown;
+ 		}
+ 		*visit_mask |= 1UL << info->type;
+--- a/arch/x86/kernel/dumpstack_64.c
++++ b/arch/x86/kernel/dumpstack_64.c
+@@ -207,7 +207,8 @@ int get_stack_info(unsigned long *stack,
+ 	if (visit_mask) {
+ 		if (*visit_mask & (1UL << info->type)) {
+ 			if (task == current)
+-				printk_deferred_once(KERN_WARNING "WARNING: stack recursion on stack type %d\n", info->type);
++				pr_warn_once("WARNING: stack recursion on stack type %d\n",
++					     info->type);
+ 			goto unknown;
+ 		}
+ 		*visit_mask |= 1UL << info->type;
+--- a/arch/x86/kernel/i8259.c
++++ b/arch/x86/kernel/i8259.c
+@@ -207,8 +207,7 @@ static void mask_and_ack_8259A(struct ir
+ 		 * lets ACK and report it. [once per IRQ]
+ 		 */
+ 		if (!(spurious_irq_mask & irqmask)) {
+-			printk_deferred(KERN_DEBUG
+-			       "spurious 8259A interrupt: IRQ%d.\n", irq);
++			printk(KERN_DEBUG "spurious 8259A interrupt: IRQ%d.\n", irq);
+ 			spurious_irq_mask |= irqmask;
+ 		}
+ 		atomic_inc(&irq_err_count);
+--- a/arch/x86/kernel/unwind_frame.c
++++ b/arch/x86/kernel/unwind_frame.c
+@@ -41,9 +41,9 @@ static void unwind_dump(struct unwind_st
+ 
+ 	dumped_before = true;
+ 
+-	printk_deferred("unwind stack type:%d next_sp:%p mask:0x%lx graph_idx:%d\n",
+-			state->stack_info.type, state->stack_info.next_sp,
+-			state->stack_mask, state->graph_idx);
++	printk("unwind stack type:%d next_sp:%p mask:0x%lx graph_idx:%d\n",
++	       state->stack_info.type, state->stack_info.next_sp,
++	       state->stack_mask, state->graph_idx);
+ 
+ 	for (sp = PTR_ALIGN(state->orig_sp, sizeof(long)); sp;
+ 	     sp = PTR_ALIGN(stack_info.next_sp, sizeof(long))) {
+@@ -59,13 +59,11 @@ static void unwind_dump(struct unwind_st
+ 
+ 			if (zero) {
+ 				if (!prev_zero)
+-					printk_deferred("%p: %0*x ...\n",
+-							sp, BITS_PER_LONG/4, 0);
++					printk("%p: %0*x ...\n", sp, BITS_PER_LONG/4, 0);
+ 				continue;
+ 			}
+ 
+-			printk_deferred("%p: %0*lx (%pB)\n",
+-					sp, BITS_PER_LONG/4, word, (void *)word);
++			printk("%p: %0*lx (%pB)\n", sp, BITS_PER_LONG/4, word, (void *)word);
+ 		}
+ 	}
+ }
+@@ -341,13 +339,13 @@ bool unwind_next_frame(struct unwind_sta
+ 		goto the_end;
+ 
+ 	if (state->regs) {
+-		printk_deferred_once(KERN_WARNING
++		pr_warn_once(
+ 			"WARNING: kernel stack regs at %p in %s:%d has bad 'bp' value %p\n",
+ 			state->regs, state->task->comm,
+ 			state->task->pid, next_bp);
+ 		unwind_dump(state);
+ 	} else {
+-		printk_deferred_once(KERN_WARNING
++		pr_warn_once(
+ 			"WARNING: kernel stack frame pointer at %p in %s:%d has bad value %p\n",
+ 			state->bp, state->task->comm,
+ 			state->task->pid, next_bp);
+--- a/arch/x86/kernel/unwind_orc.c
++++ b/arch/x86/kernel/unwind_orc.c
+@@ -9,7 +9,7 @@
+ #include <asm/orc_lookup.h>
+ 
+ #define orc_warn(fmt, ...) \
+-	printk_deferred_once(KERN_WARNING "WARNING: " fmt, ##__VA_ARGS__)
++	pr_warn_once("WARNING: " fmt, ##__VA_ARGS__)
+ 
+ #define orc_warn_current(args...)					\
+ ({									\
+--- a/drivers/char/random.c
++++ b/drivers/char/random.c
+@@ -1507,9 +1507,8 @@ static void _warn_unseeded_randomness(co
+ 	print_once = true;
+ #endif
+ 	if (__ratelimit(&unseeded_warning))
+-		printk_deferred(KERN_NOTICE "random: %s called from %pS "
+-				"with crng_init=%d\n", func_name, caller,
+-				crng_init);
++		pr_notice("random: %s called from %pS with crng_init=%d\n",
++			  func_name, caller, crng_init);
+ }
+ 
+ /*
+--- a/include/linux/printk.h
++++ b/include/linux/printk.h
+@@ -162,21 +162,6 @@ asmlinkage __printf(1, 2) __cold
+ int _printk(const char *fmt, ...);
+ 
+ /*
+- * Special printk facility for scheduler/timekeeping use only, _DO_NOT_USE_ !
+- */
+-__printf(1, 2) __cold int _printk_deferred(const char *fmt, ...);
+-
+-extern void __printk_safe_enter(void);
+-extern void __printk_safe_exit(void);
+-/*
+- * The printk_deferred_enter/exit macros are available only as a hack for
+- * some code paths that need to defer all printk console printing. Interrupts
+- * must be disabled for the deferred duration.
+- */
+-#define printk_deferred_enter __printk_safe_enter
+-#define printk_deferred_exit __printk_safe_exit
+-
+-/*
+  * Please don't use printk_ratelimit(), because it shares ratelimiting state
+  * with all other unrelated printk_ratelimit() callsites.  Instead use
+  * printk_ratelimited() or plain old __ratelimit().
+@@ -216,19 +201,6 @@ int _printk(const char *s, ...)
+ {
+ 	return 0;
+ }
+-static inline __printf(1, 2) __cold
+-int _printk_deferred(const char *s, ...)
+-{
+-	return 0;
+-}
+-
+-static inline void printk_deferred_enter(void)
+-{
+-}
+-
+-static inline void printk_deferred_exit(void)
+-{
+-}
+ 
+ static inline int printk_ratelimit(void)
+ {
+@@ -475,8 +447,6 @@ struct pi_entry {
+  * See the vsnprintf() documentation for format string extensions over C99.
+  */
+ #define printk(fmt, ...) printk_index_wrap(_printk, fmt, ##__VA_ARGS__)
+-#define printk_deferred(fmt, ...)					\
+-	printk_index_wrap(_printk_deferred, fmt, ##__VA_ARGS__)
+ 
+ /**
+  * pr_emerg - Print an emergency-level message
+@@ -614,13 +584,9 @@ struct pi_entry {
+ #ifdef CONFIG_PRINTK
+ #define printk_once(fmt, ...)					\
+ 	DO_ONCE_LITE(printk, fmt, ##__VA_ARGS__)
+-#define printk_deferred_once(fmt, ...)				\
+-	DO_ONCE_LITE(printk_deferred, fmt, ##__VA_ARGS__)
+ #else
+ #define printk_once(fmt, ...)					\
+ 	no_printk(fmt, ##__VA_ARGS__)
+-#define printk_deferred_once(fmt, ...)				\
+-	no_printk(fmt, ##__VA_ARGS__)
+ #endif
+ 
+ #define pr_emerg_once(fmt, ...)					\
+--- a/include/linux/suspend.h
++++ b/include/linux/suspend.h
+@@ -550,23 +550,17 @@ static inline void unlock_system_sleep(v
+ #ifdef CONFIG_PM_SLEEP_DEBUG
+ extern bool pm_print_times_enabled;
+ extern bool pm_debug_messages_on;
+-extern __printf(2, 3) void __pm_pr_dbg(bool defer, const char *fmt, ...);
++extern __printf(1, 2) void pm_pr_dbg(const char *fmt, ...);
+ #else
+ #define pm_print_times_enabled	(false)
+ #define pm_debug_messages_on	(false)
+ 
+ #include <linux/printk.h>
+ 
+-#define __pm_pr_dbg(defer, fmt, ...) \
++#define pm_pr_dbg(fmt, ...) \
+ 	no_printk(KERN_DEBUG fmt, ##__VA_ARGS__)
+ #endif
+ 
+-#define pm_pr_dbg(fmt, ...) \
+-	__pm_pr_dbg(false, fmt, ##__VA_ARGS__)
+-
+-#define pm_deferred_pr_dbg(fmt, ...) \
+-	__pm_pr_dbg(true, fmt, ##__VA_ARGS__)
+-
+ #ifdef CONFIG_PM_AUTOSLEEP
+ 
+ /* kernel/power/autosleep.c */
+--- a/kernel/power/main.c
++++ b/kernel/power/main.c
+@@ -543,14 +543,13 @@ static int __init pm_debug_messages_setu
+ __setup("pm_debug_messages", pm_debug_messages_setup);
+ 
+ /**
+- * __pm_pr_dbg - Print a suspend debug message to the kernel log.
+- * @defer: Whether or not to use printk_deferred() to print the message.
++ * pm_pr_dbg - Print a suspend debug message to the kernel log.
+  * @fmt: Message format.
+  *
+  * The message will be emitted if enabled through the pm_debug_messages
+  * sysfs attribute.
+  */
+-void __pm_pr_dbg(bool defer, const char *fmt, ...)
++void pm_pr_dbg(const char *fmt, ...)
+ {
+ 	struct va_format vaf;
+ 	va_list args;
+@@ -563,10 +562,7 @@ void __pm_pr_dbg(bool defer, const char
+ 	vaf.fmt = fmt;
+ 	vaf.va = &args;
+ 
+-	if (defer)
+-		printk_deferred(KERN_DEBUG "PM: %pV", &vaf);
+-	else
+-		printk(KERN_DEBUG "PM: %pV", &vaf);
++	printk(KERN_DEBUG "PM: %pV", &vaf);
+ 
+ 	va_end(args);
+ }
+--- a/kernel/printk/Makefile
++++ b/kernel/printk/Makefile
+@@ -1,6 +1,5 @@
+ # SPDX-License-Identifier: GPL-2.0-only
+ obj-y	= printk.o
+-obj-$(CONFIG_PRINTK)	+= printk_safe.o
+ obj-$(CONFIG_A11Y_BRAILLE_CONSOLE)	+= braille.o
+ obj-$(CONFIG_PRINTK)	+= printk_ringbuffer.o
+ obj-$(CONFIG_PRINTK_INDEX)	+= index.o
+--- a/kernel/printk/internal.h
++++ b/kernel/printk/internal.h
+@@ -2,7 +2,6 @@
+ /*
+  * internal.h - printk internal definitions
+  */
+-#include <linux/percpu.h>
+ 
+ #ifdef CONFIG_PRINTK
+ 
+@@ -12,41 +11,6 @@ enum printk_info_flags {
+ 	LOG_CONT	= 8,	/* text is a fragment of a continuation line */
+ };
+ 
+-__printf(4, 0)
+-int vprintk_store(int facility, int level,
+-		  const struct dev_printk_info *dev_info,
+-		  const char *fmt, va_list args);
+-
+-__printf(1, 0) int vprintk_default(const char *fmt, va_list args);
+-__printf(1, 0) int vprintk_deferred(const char *fmt, va_list args);
+-
+-bool printk_percpu_data_ready(void);
+-
+-#define printk_safe_enter_irqsave(flags)	\
+-	do {					\
+-		local_irq_save(flags);		\
+-		__printk_safe_enter();		\
+-	} while (0)
+-
+-#define printk_safe_exit_irqrestore(flags)	\
+-	do {					\
+-		__printk_safe_exit();		\
+-		local_irq_restore(flags);	\
+-	} while (0)
+-
+-void defer_console_output(void);
+-
+ u16 printk_parse_prefix(const char *text, int *level,
+ 			enum printk_info_flags *flags);
+-#else
+-
+-/*
+- * In !PRINTK builds we still export console_sem
+- * semaphore and some of console functions (console_unlock()/etc.), so
+- * printk-safe must preserve the existing local IRQ guarantees.
+- */
+-#define printk_safe_enter_irqsave(flags) local_irq_save(flags)
+-#define printk_safe_exit_irqrestore(flags) local_irq_restore(flags)
+-
+-static inline bool printk_percpu_data_ready(void) { return false; }
+ #endif /* CONFIG_PRINTK */
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -44,6 +44,7 @@
+ #include <linux/irq_work.h>
+ #include <linux/ctype.h>
+ #include <linux/uio.h>
++#include <linux/kdb.h>
+ #include <linux/kgdb.h>
+ #include <linux/kthread.h>
+ #include <linux/clocksource.h>
+@@ -228,19 +229,7 @@ static int nr_ext_console_drivers;
+ 
+ static int __down_trylock_console_sem(unsigned long ip)
+ {
+-	int lock_failed;
+-	unsigned long flags;
+-
+-	/*
+-	 * Here and in __up_console_sem() we need to be in safe mode,
+-	 * because spindump/WARN/etc from under console ->lock will
+-	 * deadlock in printk()->down_trylock_console_sem() otherwise.
+-	 */
+-	printk_safe_enter_irqsave(flags);
+-	lock_failed = down_trylock(&console_sem);
+-	printk_safe_exit_irqrestore(flags);
+-
+-	if (lock_failed)
++	if (down_trylock(&console_sem))
+ 		return 1;
+ 	mutex_acquire(&console_lock_dep_map, 0, 1, ip);
+ 	return 0;
+@@ -249,13 +238,9 @@ static int __down_trylock_console_sem(un
+ 
+ static void __up_console_sem(unsigned long ip)
+ {
+-	unsigned long flags;
+-
+ 	mutex_release(&console_lock_dep_map, ip);
+ 
+-	printk_safe_enter_irqsave(flags);
+ 	up(&console_sem);
+-	printk_safe_exit_irqrestore(flags);
+ }
+ #define up_console_sem() __up_console_sem(_RET_IP_)
+ 
+@@ -417,7 +402,7 @@ static struct printk_ringbuffer *prb = &
+  */
+ static bool __printk_percpu_data_ready __read_mostly;
+ 
+-bool printk_percpu_data_ready(void)
++static bool printk_percpu_data_ready(void)
+ {
+ 	return __printk_percpu_data_ready;
+ }
+@@ -2024,9 +2009,9 @@ static u16 printk_sprint(char *text, u16
+ }
+ 
+ __printf(4, 0)
+-int vprintk_store(int facility, int level,
+-		  const struct dev_printk_info *dev_info,
+-		  const char *fmt, va_list args)
++static int vprintk_store(int facility, int level,
++			 const struct dev_printk_info *dev_info,
++			 const char *fmt, va_list args)
+ {
+ 	const u32 caller_id = printk_caller_id();
+ 	struct prb_reserved_entry e;
+@@ -2172,11 +2157,28 @@ asmlinkage int vprintk_emit(int facility
+ }
+ EXPORT_SYMBOL(vprintk_emit);
+ 
+-int vprintk_default(const char *fmt, va_list args)
++__printf(1, 0)
++static int vprintk_default(const char *fmt, va_list args)
+ {
+ 	return vprintk_emit(0, LOGLEVEL_DEFAULT, NULL, fmt, args);
+ }
+-EXPORT_SYMBOL_GPL(vprintk_default);
++
++__printf(1, 0)
++static int vprintk_func(const char *fmt, va_list args)
++{
++#ifdef CONFIG_KGDB_KDB
++	/* Allow to pass printk() to kdb but avoid a recursion. */
++	if (unlikely(kdb_trap_printk && kdb_printf_cpu < 0))
++		return vkdb_printf(KDB_MSGSRC_PRINTK, fmt, args);
++#endif
++	return vprintk_default(fmt, args);
++}
++
++asmlinkage int vprintk(const char *fmt, va_list args)
++{
++	return vprintk_func(fmt, args);
++}
++EXPORT_SYMBOL(vprintk);
+ 
+ asmlinkage __visible int _printk(const char *fmt, ...)
+ {
+@@ -3137,37 +3139,11 @@ void wake_up_klogd(void)
+ 	preempt_enable();
+ }
+ 
+-void defer_console_output(void)
+-{
+-}
+-
+ void printk_trigger_flush(void)
+ {
+ 	wake_up_klogd();
+ }
+ 
+-int vprintk_deferred(const char *fmt, va_list args)
+-{
+-	int r;
+-
+-	r = vprintk_emit(0, LOGLEVEL_SCHED, NULL, fmt, args);
+-	defer_console_output();
+-
+-	return r;
+-}
+-
+-int _printk_deferred(const char *fmt, ...)
+-{
+-	va_list args;
+-	int r;
+-
+-	va_start(args, fmt);
+-	r = vprintk_deferred(fmt, args);
+-	va_end(args);
+-
+-	return r;
+-}
+-
+ /*
+  * printk rate limiting, lifted from the networking subsystem.
+  *
+--- a/kernel/printk/printk_safe.c
++++ /dev/null
+@@ -1,52 +0,0 @@
+-// SPDX-License-Identifier: GPL-2.0-or-later
+-/*
+- * printk_safe.c - Safe printk for printk-deadlock-prone contexts
+- */
+-
+-#include <linux/preempt.h>
+-#include <linux/kdb.h>
+-#include <linux/smp.h>
+-#include <linux/cpumask.h>
+-#include <linux/printk.h>
+-#include <linux/kprobes.h>
+-
+-#include "internal.h"
+-
+-static DEFINE_PER_CPU(int, printk_context);
+-
+-/* Can be preempted by NMI. */
+-void __printk_safe_enter(void)
+-{
+-	this_cpu_inc(printk_context);
+-}
+-
+-/* Can be preempted by NMI. */
+-void __printk_safe_exit(void)
+-{
+-	this_cpu_dec(printk_context);
+-}
+-
+-asmlinkage int vprintk(const char *fmt, va_list args)
+-{
+-#ifdef CONFIG_KGDB_KDB
+-	/* Allow to pass printk() to kdb but avoid a recursion. */
+-	if (unlikely(kdb_trap_printk && kdb_printf_cpu < 0))
+-		return vkdb_printf(KDB_MSGSRC_PRINTK, fmt, args);
+-#endif
+-
+-	/*
+-	 * Use the main logbuf even in NMI. But avoid calling console
+-	 * drivers that might have their own locks.
+-	 */
+-	if (this_cpu_read(printk_context) || in_nmi()) {
+-		int len;
+-
+-		len = vprintk_store(0, LOGLEVEL_DEFAULT, NULL, fmt, args);
+-		defer_console_output();
+-		return len;
+-	}
+-
+-	/* No obstacles. */
+-	return vprintk_default(fmt, args);
+-}
+-EXPORT_SYMBOL(vprintk);
+--- a/kernel/sched/core.c
++++ b/kernel/sched/core.c
+@@ -2967,9 +2967,8 @@ void force_compatible_cpus_allowed_ptr(s
+ 
+ out_set_mask:
+ 	if (printk_ratelimit()) {
+-		printk_deferred("Overriding affinity for process %d (%s) to CPUs %*pbl\n",
+-				task_pid_nr(p), p->comm,
+-				cpumask_pr_args(override_mask));
++		printk("Overriding affinity for process %d (%s) to CPUs %*pbl\n",
++		       task_pid_nr(p), p->comm, cpumask_pr_args(override_mask));
+ 	}
+ 
+ 	WARN_ON(set_cpus_allowed_ptr(p, override_mask));
+@@ -3399,8 +3398,8 @@ static int select_fallback_rq(int cpu, s
+ 		 * leave kernel.
+ 		 */
+ 		if (p->mm && printk_ratelimit()) {
+-			printk_deferred("process %d (%s) no longer affine to cpu%d\n",
+-					task_pid_nr(p), p->comm, cpu);
++			printk("process %d (%s) no longer affine to cpu%d\n",
++			       task_pid_nr(p), p->comm, cpu);
+ 		}
+ 	}
+ 
+--- a/kernel/sched/deadline.c
++++ b/kernel/sched/deadline.c
+@@ -800,7 +800,7 @@ static void replenish_dl_entity(struct s
+ 	 * entity.
+ 	 */
+ 	if (dl_time_before(dl_se->deadline, rq_clock(rq))) {
+-		printk_deferred_once("sched: DL replenish lagged too much\n");
++		printk_once("sched: DL replenish lagged too much\n");
+ 		dl_se->deadline = rq_clock(rq) + pi_of(dl_se)->dl_deadline;
+ 		dl_se->runtime = pi_of(dl_se)->dl_runtime;
+ 	}
+--- a/kernel/sched/psi.c
++++ b/kernel/sched/psi.c
+@@ -710,10 +710,10 @@ static void psi_group_change(struct psi_
+ 		if (groupc->tasks[t]) {
+ 			groupc->tasks[t]--;
+ 		} else if (!psi_bug) {
+-			printk_deferred(KERN_ERR "psi: task underflow! cpu=%d t=%d tasks=[%u %u %u %u] clear=%x set=%x\n",
+-					cpu, t, groupc->tasks[0],
+-					groupc->tasks[1], groupc->tasks[2],
+-					groupc->tasks[3], clear, set);
++			pr_err("psi: task underflow! cpu=%d t=%d tasks=[%u %u %u %u] clear=%x set=%x\n",
++			       cpu, t, groupc->tasks[0],
++			       groupc->tasks[1], groupc->tasks[2],
++			       groupc->tasks[3], clear, set);
+ 			psi_bug = 1;
+ 		}
+ 	}
+@@ -779,9 +779,9 @@ static void psi_flags_change(struct task
+ 	if (((task->psi_flags & set) ||
+ 	     (task->psi_flags & clear) != clear) &&
+ 	    !psi_bug) {
+-		printk_deferred(KERN_ERR "psi: inconsistent task state! task=%d:%s cpu=%d psi_flags=%x clear=%x set=%x\n",
+-				task->pid, task->comm, task_cpu(task),
+-				task->psi_flags, clear, set);
++		pr_err("psi: inconsistent task state! task=%d:%s cpu=%d psi_flags=%x clear=%x set=%x\n",
++		       task->pid, task->comm, task_cpu(task),
++		       task->psi_flags, clear, set);
+ 		psi_bug = 1;
+ 	}
+ 
+--- a/kernel/sched/rt.c
++++ b/kernel/sched/rt.c
+@@ -977,7 +977,7 @@ static int sched_rt_runtime_exceeded(str
+ 		 */
+ 		if (likely(rt_b->rt_runtime)) {
+ 			rt_rq->rt_throttled = 1;
+-			printk_deferred_once("sched: RT throttling activated\n");
++			printk_once("sched: RT throttling activated\n");
+ 		} else {
+ 			/*
+ 			 * In case we did anyway, make it go away,
+--- a/kernel/sched/stats.h
++++ b/kernel/sched/stats.h
+@@ -62,7 +62,7 @@ check_schedstat_required(void)
+ 	    trace_sched_stat_iowait_enabled()  ||
+ 	    trace_sched_stat_blocked_enabled() ||
+ 	    trace_sched_stat_runtime_enabled())
+-		printk_deferred_once("Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1\n");
++		printk_once("Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1\n");
+ }
+ 
+ #else /* !CONFIG_SCHEDSTATS: */
+--- a/kernel/time/clockevents.c
++++ b/kernel/time/clockevents.c
+@@ -203,8 +203,7 @@ static int clockevents_increase_min_delt
+ {
+ 	/* Nothing to do if we already reached the limit */
+ 	if (dev->min_delta_ns >= MIN_DELTA_LIMIT) {
+-		printk_deferred(KERN_WARNING
+-				"CE: Reprogramming failure. Giving up\n");
++		pr_warn("CE: Reprogramming failure. Giving up\n");
+ 		dev->next_event = KTIME_MAX;
+ 		return -ETIME;
+ 	}
+@@ -217,10 +216,8 @@ static int clockevents_increase_min_delt
+ 	if (dev->min_delta_ns > MIN_DELTA_LIMIT)
+ 		dev->min_delta_ns = MIN_DELTA_LIMIT;
+ 
+-	printk_deferred(KERN_WARNING
+-			"CE: %s increased min_delta_ns to %llu nsec\n",
+-			dev->name ? dev->name : "?",
+-			(unsigned long long) dev->min_delta_ns);
++	pr_warn("CE: %s increased min_delta_ns to %llu nsec\n",
++		dev->name ? dev->name : "?", (unsigned long long) dev->min_delta_ns);
+ 	return 0;
+ }
+ 
+--- a/kernel/time/ntp.c
++++ b/kernel/time/ntp.c
+@@ -939,9 +939,7 @@ static long hardpps_update_freq(struct p
+ 		time_status |= STA_PPSERROR;
+ 		pps_errcnt++;
+ 		pps_dec_freq_interval();
+-		printk_deferred(KERN_ERR
+-			"hardpps: PPSERROR: interval too long - %lld s\n",
+-			freq_norm.sec);
++		pr_err("hardpps: PPSERROR: interval too long - %lld s\n", freq_norm.sec);
+ 		return 0;
+ 	}
+ 
+@@ -954,8 +952,7 @@ static long hardpps_update_freq(struct p
+ 	delta = shift_right(ftemp - pps_freq, NTP_SCALE_SHIFT);
+ 	pps_freq = ftemp;
+ 	if (delta > PPS_MAXWANDER || delta < -PPS_MAXWANDER) {
+-		printk_deferred(KERN_WARNING
+-				"hardpps: PPSWANDER: change=%ld\n", delta);
++		pr_warn("hardpps: PPSWANDER: change=%ld\n", delta);
+ 		time_status |= STA_PPSWANDER;
+ 		pps_stbcnt++;
+ 		pps_dec_freq_interval();
+@@ -999,9 +996,8 @@ static void hardpps_update_phase(long er
+ 	 * the time offset is updated.
+ 	 */
+ 	if (jitter > (pps_jitter << PPS_POPCORN)) {
+-		printk_deferred(KERN_WARNING
+-				"hardpps: PPSJITTER: jitter=%ld, limit=%ld\n",
+-				jitter, (pps_jitter << PPS_POPCORN));
++		pr_warn("hardpps: PPSJITTER: jitter=%ld, limit=%ld\n",
++			jitter, (pps_jitter << PPS_POPCORN));
+ 		time_status |= STA_PPSJITTER;
+ 		pps_jitcnt++;
+ 	} else if (time_status & STA_PPSTIME) {
+@@ -1058,7 +1054,7 @@ void __hardpps(const struct timespec64 *
+ 		time_status |= STA_PPSJITTER;
+ 		/* restart the frequency calibration interval */
+ 		pps_fbase = *raw_ts;
+-		printk_deferred(KERN_ERR "hardpps: PPSJITTER: bad pulse\n");
++		pr_err("hardpps: PPSJITTER: bad pulse\n");
+ 		return;
+ 	}
+ 
+--- a/kernel/time/timekeeping.c
++++ b/kernel/time/timekeeping.c
+@@ -203,22 +203,23 @@ static void timekeeping_check_update(str
+ 	const char *name = tk->tkr_mono.clock->name;
+ 
+ 	if (offset > max_cycles) {
+-		printk_deferred("WARNING: timekeeping: Cycle offset (%lld) is larger than allowed by the '%s' clock's max_cycles value (%lld): time overflow danger\n",
+-				offset, name, max_cycles);
+-		printk_deferred("         timekeeping: Your kernel is sick, but tries to cope by capping time updates\n");
++		printk("WARNING: timekeeping: Cycle offset (%lld) is larger than allowed by the '%s' clock's max_cycles value (%lld): time overflow danger\n",
++		       offset, name, max_cycles);
++		printk("         timekeeping: Your kernel is sick, but tries to cope by capping time updates\n");
+ 	} else {
+ 		if (offset > (max_cycles >> 1)) {
+-			printk_deferred("INFO: timekeeping: Cycle offset (%lld) is larger than the '%s' clock's 50%% safety margin (%lld)\n",
+-					offset, name, max_cycles >> 1);
+-			printk_deferred("      timekeeping: Your kernel is still fine, but is feeling a bit nervous\n");
++			printk("INFO: timekeeping: Cycle offset (%lld) is larger than the '%s' clock's 50%% safety margin (%lld)\n",
++			       offset, name, max_cycles >> 1);
++			printk("      timekeeping: Your kernel is still fine, but is feeling a bit nervous\n");
+ 		}
+ 	}
+ 
+ 	if (tk->underflow_seen) {
+ 		if (jiffies - tk->last_warning > WARNING_FREQ) {
+-			printk_deferred("WARNING: Underflow in clocksource '%s' observed, time update ignored.\n", name);
+-			printk_deferred("         Please report this, consider using a different clocksource, if possible.\n");
+-			printk_deferred("         Your kernel is probably still fine.\n");
++			printk("WARNING: Underflow in clocksource '%s' observed, time update ignored.\n",
++			       name);
++			printk("         Please report this, consider using a different clocksource, if possible.\n");
++			printk("         Your kernel is probably still fine.\n");
+ 			tk->last_warning = jiffies;
+ 		}
+ 		tk->underflow_seen = 0;
+@@ -226,9 +227,10 @@ static void timekeeping_check_update(str
+ 
+ 	if (tk->overflow_seen) {
+ 		if (jiffies - tk->last_warning > WARNING_FREQ) {
+-			printk_deferred("WARNING: Overflow in clocksource '%s' observed, time update capped.\n", name);
+-			printk_deferred("         Please report this, consider using a different clocksource, if possible.\n");
+-			printk_deferred("         Your kernel is probably still fine.\n");
++			printk("WARNING: Overflow in clocksource '%s' observed, time update capped.\n",
++			       name);
++			printk("         Please report this, consider using a different clocksource, if possible.\n");
++			printk("         Your kernel is probably still fine.\n");
+ 			tk->last_warning = jiffies;
+ 		}
+ 		tk->overflow_seen = 0;
+@@ -1669,9 +1671,7 @@ static void __timekeeping_inject_sleepti
+ 					   const struct timespec64 *delta)
+ {
+ 	if (!timespec64_valid_strict(delta)) {
+-		printk_deferred(KERN_WARNING
+-				"__timekeeping_inject_sleeptime: Invalid "
+-				"sleep delta value!\n");
++		pr_warn("%s: Invalid sleep delta value!\n", __func__);
+ 		return;
+ 	}
+ 	tk_xtime_add(tk, delta);
+--- a/kernel/time/timekeeping_debug.c
++++ b/kernel/time/timekeeping_debug.c
+@@ -49,7 +49,7 @@ void tk_debug_account_sleep_time(const s
+ 	int bin = min(fls(t->tv_sec), NUM_BINS-1);
+ 
+ 	sleep_time_bin[bin]++;
+-	pm_deferred_pr_dbg("Timekeeping suspended for %lld.%03lu seconds\n",
++	pm_pr_dbg("Timekeeping suspended for %lld.%03lu seconds\n",
+ 			   (s64)t->tv_sec, t->tv_nsec / NSEC_PER_MSEC);
+ }
+ 
+--- a/kernel/workqueue.c
++++ b/kernel/workqueue.c
+@@ -4826,9 +4826,7 @@ void show_one_workqueue(struct workqueue
+ 			 * drivers that queue work while holding locks
+ 			 * also taken in their write paths.
+ 			 */
+-			printk_deferred_enter();
+ 			show_pwq(pwq);
+-			printk_deferred_exit();
+ 		}
+ 		raw_spin_unlock_irqrestore(&pwq->pool->lock, flags);
+ 		/*
+@@ -4859,7 +4857,6 @@ static void show_one_worker_pool(struct
+ 	 * queue work while holding locks also taken in their write
+ 	 * paths.
+ 	 */
+-	printk_deferred_enter();
+ 	pr_info("pool %d:", pool->id);
+ 	pr_cont_pool_info(pool);
+ 	pr_cont(" hung=%us workers=%d",
+@@ -4874,7 +4871,6 @@ static void show_one_worker_pool(struct
+ 		first = false;
+ 	}
+ 	pr_cont("\n");
+-	printk_deferred_exit();
+ next_pool:
+ 	raw_spin_unlock_irqrestore(&pool->lock, flags);
+ 	/*
+--- a/lib/ratelimit.c
++++ b/lib/ratelimit.c
+@@ -47,9 +47,7 @@ int ___ratelimit(struct ratelimit_state
+ 	if (time_is_before_jiffies(rs->begin + rs->interval)) {
+ 		if (rs->missed) {
+ 			if (!(rs->flags & RATELIMIT_MSG_ON_RELEASE)) {
+-				printk_deferred(KERN_WARNING
+-						"%s: %d callbacks suppressed\n",
+-						func, rs->missed);
++				pr_warn("%s: %d callbacks suppressed\n", func, rs->missed);
+ 				rs->missed = 0;
+ 			}
+ 		}
diff --git a/debian/patches-rt/printk__rename_printk_cpulock_API_and_always_disable_interrupts.patch b/debian/patches-rt/printk__rename_printk_cpulock_API_and_always_disable_interrupts.patch
new file mode 100644
index 000000000000..7a0861e8d6f1
--- /dev/null
+++ b/debian/patches-rt/printk__rename_printk_cpulock_API_and_always_disable_interrupts.patch
@@ -0,0 +1,118 @@
+Subject: printk: rename printk cpulock API and always disable interrupts
+From: John Ogness <john.ogness@linutronix.de>
+Date: Thu Jul 15 09:34:45 2021 +0206
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+The printk cpulock functions use local_irq_disable(). This means that
+hardware interrupts are also disabled on PREEMPT_RT. To make this
+clear, rename the functions to use the raw_ prefix:
+
+raw_printk_cpu_lock_irqsave(flags);
+raw_printk_cpu_unlock_irqrestore(flags);
+
+Also, these functions were a NOP for !CONFIG_SMP. But for !CONFIG_SMP
+they still need to disable hardware interrupts. So modify them
+appropriately for this.
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ include/linux/printk.h |   30 ++++++++++++++----------------
+ lib/dump_stack.c       |    4 ++--
+ lib/nmi_backtrace.c    |    4 ++--
+ 3 files changed, 18 insertions(+), 20 deletions(-)
+---
+--- a/include/linux/printk.h
++++ b/include/linux/printk.h
+@@ -284,17 +284,22 @@ static inline void printk_trigger_flush(
+ extern int __printk_cpu_trylock(void);
+ extern void __printk_wait_on_cpu_lock(void);
+ extern void __printk_cpu_unlock(void);
++#else
++#define __printk_cpu_trylock()		1
++#define __printk_wait_on_cpu_lock()
++#define __printk_cpu_unlock()
++#endif /* CONFIG_SMP */
+ 
+ /**
+- * printk_cpu_lock_irqsave() - Acquire the printk cpu-reentrant spinning
+- *                             lock and disable interrupts.
++ * raw_printk_cpu_lock_irqsave() - Acquire the printk cpu-reentrant spinning
++ *                                 lock and disable interrupts.
+  * @flags: Stack-allocated storage for saving local interrupt state,
+- *         to be passed to printk_cpu_unlock_irqrestore().
++ *         to be passed to raw_printk_cpu_unlock_irqrestore().
+  *
+  * If the lock is owned by another CPU, spin until it becomes available.
+  * Interrupts are restored while spinning.
+  */
+-#define printk_cpu_lock_irqsave(flags)		\
++#define raw_printk_cpu_lock_irqsave(flags)	\
+ 	for (;;) {				\
+ 		local_irq_save(flags);		\
+ 		if (__printk_cpu_trylock())	\
+@@ -304,22 +309,15 @@ extern void __printk_cpu_unlock(void);
+ 	}
+ 
+ /**
+- * printk_cpu_unlock_irqrestore() - Release the printk cpu-reentrant spinning
+- *                                  lock and restore interrupts.
+- * @flags: Caller's saved interrupt state, from printk_cpu_lock_irqsave().
++ * raw_printk_cpu_unlock_irqrestore() - Release the printk cpu-reentrant
++ *                                      spinning lock and restore interrupts.
++ * @flags: Caller's saved interrupt state from raw_printk_cpu_lock_irqsave().
+  */
+-#define printk_cpu_unlock_irqrestore(flags)	\
++#define raw_printk_cpu_unlock_irqrestore(flags)	\
+ 	do {					\
+ 		__printk_cpu_unlock();		\
+ 		local_irq_restore(flags);	\
+-	} while (0)				\
+-
+-#else
+-
+-#define printk_cpu_lock_irqsave(flags) ((void)flags)
+-#define printk_cpu_unlock_irqrestore(flags) ((void)flags)
+-
+-#endif /* CONFIG_SMP */
++	} while (0)
+ 
+ extern int kptr_restrict;
+ 
+--- a/lib/dump_stack.c
++++ b/lib/dump_stack.c
+@@ -102,9 +102,9 @@ asmlinkage __visible void dump_stack_lvl
+ 	 * Permit this cpu to perform nested stack dumps while serialising
+ 	 * against other CPUs
+ 	 */
+-	printk_cpu_lock_irqsave(flags);
++	raw_printk_cpu_lock_irqsave(flags);
+ 	__dump_stack(log_lvl);
+-	printk_cpu_unlock_irqrestore(flags);
++	raw_printk_cpu_unlock_irqrestore(flags);
+ }
+ EXPORT_SYMBOL(dump_stack_lvl);
+ 
+--- a/lib/nmi_backtrace.c
++++ b/lib/nmi_backtrace.c
+@@ -99,7 +99,7 @@ bool nmi_cpu_backtrace(struct pt_regs *r
+ 		 * Allow nested NMI backtraces while serializing
+ 		 * against other CPUs.
+ 		 */
+-		printk_cpu_lock_irqsave(flags);
++		raw_printk_cpu_lock_irqsave(flags);
+ 		if (!READ_ONCE(backtrace_idle) && regs && cpu_in_idle(instruction_pointer(regs))) {
+ 			pr_warn("NMI backtrace for cpu %d skipped: idling at %pS\n",
+ 				cpu, (void *)instruction_pointer(regs));
+@@ -110,7 +110,7 @@ bool nmi_cpu_backtrace(struct pt_regs *r
+ 			else
+ 				dump_stack();
+ 		}
+-		printk_cpu_unlock_irqrestore(flags);
++		raw_printk_cpu_unlock_irqrestore(flags);
+ 		cpumask_clear_cpu(cpu, to_cpumask(backtrace_mask));
+ 		return true;
+ 	}
diff --git a/debian/patches-rt/printk__use_seqcount_latch_for_console_seq.patch b/debian/patches-rt/printk__use_seqcount_latch_for_console_seq.patch
new file mode 100644
index 000000000000..627f3ec200eb
--- /dev/null
+++ b/debian/patches-rt/printk__use_seqcount_latch_for_console_seq.patch
@@ -0,0 +1,187 @@
+Subject: printk: use seqcount_latch for console_seq
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:05 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+In preparation for atomic printing, change @console_seq to use
+seqcount_latch so that it can be read without requiring @console_sem.
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ kernel/printk/printk.c |   73 +++++++++++++++++++++++++++----------------------
+ 1 file changed, 41 insertions(+), 32 deletions(-)
+---
+--- a/kernel/printk/printk.c
++++ b/kernel/printk/printk.c
+@@ -362,9 +362,7 @@ static u64 syslog_seq;
+ static size_t syslog_partial;
+ static bool syslog_time;
+ 
+-/* All 3 protected by @console_sem. */
+-/* the next printk record to write to the console */
+-static u64 console_seq;
++/* Both protected by @console_sem. */
+ static u64 exclusive_console_stop_seq;
+ static unsigned long console_dropped;
+ 
+@@ -374,6 +372,17 @@ struct latched_seq {
+ };
+ 
+ /*
++ * The next printk record to write to the console. There are two
++ * copies (updated with seqcount_latch) so that reads can locklessly
++ * access a valid value. Writers are synchronized by @console_sem.
++ */
++static struct latched_seq console_seq = {
++	.latch		= SEQCNT_LATCH_ZERO(console_seq.latch),
++	.val[0]		= 0,
++	.val[1]		= 0,
++};
++
++/*
+  * The next printk record to read after the last 'clear' command. There are
+  * two copies (updated with seqcount_latch) so that reads can locklessly
+  * access a valid value. Writers are synchronized by @syslog_lock.
+@@ -436,7 +445,7 @@ bool printk_percpu_data_ready(void)
+ 	return __printk_percpu_data_ready;
+ }
+ 
+-/* Must be called under syslog_lock. */
++/* Must be called under associated write-protection lock. */
+ static void latched_seq_write(struct latched_seq *ls, u64 val)
+ {
+ 	raw_write_seqcount_latch(&ls->latch);
+@@ -2279,9 +2288,9 @@ EXPORT_SYMBOL(_printk);
+ 
+ #define prb_read_valid(rb, seq, r)	false
+ #define prb_first_valid_seq(rb)		0
++#define latched_seq_read_nolock(seq)	0
++#define latched_seq_write(dst, src)
+ 
+-static u64 syslog_seq;
+-static u64 console_seq;
+ static u64 exclusive_console_stop_seq;
+ static unsigned long console_dropped;
+ 
+@@ -2609,7 +2618,7 @@ void console_unlock(void)
+ 	bool do_cond_resched, retry;
+ 	struct printk_info info;
+ 	struct printk_record r;
+-	u64 __maybe_unused next_seq;
++	u64 seq;
+ 
+ 	if (console_suspended) {
+ 		up_console_sem();
+@@ -2653,12 +2662,14 @@ void console_unlock(void)
+ 		size_t len;
+ 
+ skip:
+-		if (!prb_read_valid(prb, console_seq, &r))
++		seq = latched_seq_read_nolock(&console_seq);
++		if (!prb_read_valid(prb, seq, &r))
+ 			break;
+ 
+-		if (console_seq != r.info->seq) {
+-			console_dropped += r.info->seq - console_seq;
+-			console_seq = r.info->seq;
++		if (seq != r.info->seq) {
++			console_dropped += r.info->seq - seq;
++			latched_seq_write(&console_seq, r.info->seq);
++			seq = r.info->seq;
+ 		}
+ 
+ 		if (suppress_message_printing(r.info->level)) {
+@@ -2667,13 +2678,13 @@ void console_unlock(void)
+ 			 * directly to the console when we received it, and
+ 			 * record that has level above the console loglevel.
+ 			 */
+-			console_seq++;
++			latched_seq_write(&console_seq, seq + 1);
+ 			goto skip;
+ 		}
+ 
+ 		/* Output to all consoles once old messages replayed. */
+ 		if (unlikely(exclusive_console &&
+-			     console_seq >= exclusive_console_stop_seq)) {
++			     seq >= exclusive_console_stop_seq)) {
+ 			exclusive_console = NULL;
+ 		}
+ 
+@@ -2694,7 +2705,7 @@ void console_unlock(void)
+ 		len = record_print_text(&r,
+ 				console_msg_format & MSG_FORMAT_SYSLOG,
+ 				printk_time);
+-		console_seq++;
++		latched_seq_write(&console_seq, seq + 1);
+ 
+ 		/*
+ 		 * While actively printing out messages, if another printk()
+@@ -2722,9 +2733,6 @@ void console_unlock(void)
+ 			cond_resched();
+ 	}
+ 
+-	/* Get consistent value of the next-to-be-used sequence number. */
+-	next_seq = console_seq;
+-
+ 	console_locked = 0;
+ 	up_console_sem();
+ 
+@@ -2734,7 +2742,7 @@ void console_unlock(void)
+ 	 * there's a new owner and the console_unlock() from them will do the
+ 	 * flush, no worries.
+ 	 */
+-	retry = prb_read_valid(prb, next_seq, NULL);
++	retry = prb_read_valid(prb, latched_seq_read_nolock(&console_seq), NULL);
+ 	if (retry && console_trylock())
+ 		goto again;
+ }
+@@ -2786,18 +2794,19 @@ void console_unblank(void)
+  */
+ void console_flush_on_panic(enum con_flush_mode mode)
+ {
+-	/*
+-	 * If someone else is holding the console lock, trylock will fail
+-	 * and may_schedule may be set.  Ignore and proceed to unlock so
+-	 * that messages are flushed out.  As this can be called from any
+-	 * context and we don't want to get preempted while flushing,
+-	 * ensure may_schedule is cleared.
+-	 */
+-	console_trylock();
+-	console_may_schedule = 0;
+-
+-	if (mode == CONSOLE_REPLAY_ALL)
+-		console_seq = prb_first_valid_seq(prb);
++	if (console_trylock()) {
++		if (mode == CONSOLE_REPLAY_ALL)
++			latched_seq_write(&console_seq, prb_first_valid_seq(prb));
++	} else {
++		/*
++		 * Another context is holding the console lock and
++		 * @console_may_schedule may be set. Ignore and proceed to
++		 * unlock so that messages are flushed out. As this can be
++		 * called from any context and we don't want to get preempted
++		 * while flushing, ensure @console_may_schedule is cleared.
++		 */
++		console_may_schedule = 0;
++	}
+ 	console_unlock();
+ }
+ 
+@@ -3033,11 +3042,11 @@ void register_console(struct console *ne
+ 		 * ignores console_lock.
+ 		 */
+ 		exclusive_console = newcon;
+-		exclusive_console_stop_seq = console_seq;
++		exclusive_console_stop_seq = latched_seq_read_nolock(&console_seq);
+ 
+ 		/* Get a consistent copy of @syslog_seq. */
+ 		mutex_lock(&syslog_lock);
+-		console_seq = syslog_seq;
++		latched_seq_write(&console_seq, syslog_seq);
+ 		mutex_unlock(&syslog_lock);
+ 	}
+ 	console_unlock();
diff --git a/debian/patches-rt/ptrace__fix_ptrace_vs_tasklist_lock_race.patch b/debian/patches-rt/ptrace__fix_ptrace_vs_tasklist_lock_race.patch
new file mode 100644
index 000000000000..10a93d2de757
--- /dev/null
+++ b/debian/patches-rt/ptrace__fix_ptrace_vs_tasklist_lock_race.patch
@@ -0,0 +1,216 @@
+Subject: ptrace: fix ptrace vs tasklist_lock race
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu Aug 29 18:21:04 2013 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+As explained by Alexander Fyodorov <halcy@yandex.ru>:
+
+|read_lock(&tasklist_lock) in ptrace_stop() is converted to mutex on RT kernel,
+|and it can remove __TASK_TRACED from task->state (by moving  it to
+|task->saved_state). If parent does wait() on child followed by a sys_ptrace
+|call, the following race can happen:
+|
+|- child sets __TASK_TRACED in ptrace_stop()
+|- parent does wait() which eventually calls wait_task_stopped() and returns
+|  child's pid
+|- child blocks on read_lock(&tasklist_lock) in ptrace_stop() and moves
+|  __TASK_TRACED flag to saved_state
+|- parent calls sys_ptrace, which calls ptrace_check_attach() and wait_task_inactive()
+
+The patch is based on his initial patch where an additional check is
+added in case the __TASK_TRACED moved to ->saved_state. The pi_lock is
+taken in case the caller is interrupted between looking into ->state and
+->saved_state.
+
+[ Fix for ptrace_unfreeze_traced() by Oleg Nesterov ]
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ include/linux/sched.h |   79 +++++++++++++++++++++++++++++++++++++++++++++++---
+ kernel/ptrace.c       |   38 +++++++++++++++++++-----
+ kernel/sched/core.c   |    4 +-
+ 3 files changed, 108 insertions(+), 13 deletions(-)
+---
+--- a/include/linux/sched.h
++++ b/include/linux/sched.h
+@@ -118,12 +118,8 @@ struct task_group;
+ 
+ #define task_is_running(task)		(READ_ONCE((task)->__state) == TASK_RUNNING)
+ 
+-#define task_is_traced(task)		((READ_ONCE(task->__state) & __TASK_TRACED) != 0)
+-
+ #define task_is_stopped(task)		((READ_ONCE(task->__state) & __TASK_STOPPED) != 0)
+ 
+-#define task_is_stopped_or_traced(task)	((READ_ONCE(task->__state) & (__TASK_STOPPED | __TASK_TRACED)) != 0)
+-
+ /*
+  * Special states are those that do not use the normal wait-loop pattern. See
+  * the comment with set_special_state().
+@@ -2009,6 +2005,81 @@ static inline int test_tsk_need_resched(
+ 	return unlikely(test_tsk_thread_flag(tsk,TIF_NEED_RESCHED));
+ }
+ 
++#ifdef CONFIG_PREEMPT_RT
++static inline bool task_match_saved_state(struct task_struct *p, long match_state)
++{
++	return p->saved_state == match_state;
++}
++
++static inline bool task_is_traced(struct task_struct *task)
++{
++	bool traced = false;
++
++	/* in case the task is sleeping on tasklist_lock */
++	raw_spin_lock_irq(&task->pi_lock);
++	if (READ_ONCE(task->__state) & __TASK_TRACED)
++		traced = true;
++	else if (task->saved_state & __TASK_TRACED)
++		traced = true;
++	raw_spin_unlock_irq(&task->pi_lock);
++	return traced;
++}
++
++static inline bool task_is_stopped_or_traced(struct task_struct *task)
++{
++	bool traced_stopped = false;
++	unsigned long flags;
++
++	raw_spin_lock_irqsave(&task->pi_lock, flags);
++
++	if (READ_ONCE(task->__state) & (__TASK_STOPPED | __TASK_TRACED))
++		traced_stopped = true;
++	else if (task->saved_state & (__TASK_STOPPED | __TASK_TRACED))
++		traced_stopped = true;
++
++	raw_spin_unlock_irqrestore(&task->pi_lock, flags);
++	return traced_stopped;
++}
++
++#else
++
++static inline bool task_match_saved_state(struct task_struct *p, long match_state)
++{
++	return false;
++}
++
++static inline bool task_is_traced(struct task_struct *task)
++{
++	return READ_ONCE(task->__state) & __TASK_TRACED;
++}
++
++static inline bool task_is_stopped_or_traced(struct task_struct *task)
++{
++	return READ_ONCE(task->__state) & (__TASK_STOPPED | __TASK_TRACED);
++}
++#endif
++
++static inline bool task_match_state_or_saved(struct task_struct *p,
++					     long match_state)
++{
++	if (READ_ONCE(p->__state) == match_state)
++		return true;
++
++	return task_match_saved_state(p, match_state);
++}
++
++static inline bool task_match_state_lock(struct task_struct *p,
++					 long match_state)
++{
++	bool match;
++
++	raw_spin_lock_irq(&p->pi_lock);
++	match = task_match_state_or_saved(p, match_state);
++	raw_spin_unlock_irq(&p->pi_lock);
++
++	return match;
++}
++
+ /*
+  * cond_resched() and cond_resched_lock(): latency reduction via
+  * explicit rescheduling in places that are safe. The return
+--- a/kernel/ptrace.c
++++ b/kernel/ptrace.c
+@@ -197,7 +197,18 @@ static bool ptrace_freeze_traced(struct
+ 	spin_lock_irq(&task->sighand->siglock);
+ 	if (task_is_traced(task) && !looks_like_a_spurious_pid(task) &&
+ 	    !__fatal_signal_pending(task)) {
++#ifdef CONFIG_PREEMPT_RT
++		unsigned long flags;
++
++		raw_spin_lock_irqsave(&task->pi_lock, flags);
++		if (READ_ONCE(task->__state) & __TASK_TRACED)
++			WRITE_ONCE(task->__state, __TASK_TRACED);
++		else
++			task->saved_state = __TASK_TRACED;
++		raw_spin_unlock_irqrestore(&task->pi_lock, flags);
++#else
+ 		WRITE_ONCE(task->__state, __TASK_TRACED);
++#endif
+ 		ret = true;
+ 	}
+ 	spin_unlock_irq(&task->sighand->siglock);
+@@ -207,7 +218,11 @@ static bool ptrace_freeze_traced(struct
+ 
+ static void ptrace_unfreeze_traced(struct task_struct *task)
+ {
+-	if (READ_ONCE(task->__state) != __TASK_TRACED)
++	unsigned long flags;
++	bool frozen = true;
++
++	if (!IS_ENABLED(CONFIG_PREEMPT_RT) &&
++	    READ_ONCE(task->__state) != __TASK_TRACED)
+ 		return;
+ 
+ 	WARN_ON(!task->ptrace || task->parent != current);
+@@ -217,12 +232,21 @@ static void ptrace_unfreeze_traced(struc
+ 	 * Recheck state under the lock to close this race.
+ 	 */
+ 	spin_lock_irq(&task->sighand->siglock);
+-	if (READ_ONCE(task->__state) == __TASK_TRACED) {
+-		if (__fatal_signal_pending(task))
+-			wake_up_state(task, __TASK_TRACED);
+-		else
+-			WRITE_ONCE(task->__state, TASK_TRACED);
+-	}
++	raw_spin_lock_irqsave(&task->pi_lock, flags);
++	if (READ_ONCE(task->__state) == __TASK_TRACED)
++		WRITE_ONCE(task->__state, TASK_TRACED);
++
++#ifdef CONFIG_PREEMPT_RT
++	else if (task->saved_state == __TASK_TRACED)
++		task->saved_state = TASK_TRACED;
++#endif
++	else
++		frozen = false;
++	raw_spin_unlock_irqrestore(&task->pi_lock, flags);
++
++	if (frozen && __fatal_signal_pending(task))
++		wake_up_state(task, __TASK_TRACED);
++
+ 	spin_unlock_irq(&task->sighand->siglock);
+ }
+ 
+--- a/kernel/sched/core.c
++++ b/kernel/sched/core.c
+@@ -3226,7 +3226,7 @@ unsigned long wait_task_inactive(struct
+ 		 * is actually now running somewhere else!
+ 		 */
+ 		while (task_running(rq, p)) {
+-			if (match_state && unlikely(READ_ONCE(p->__state) != match_state))
++			if (match_state && !task_match_state_lock(p, match_state))
+ 				return 0;
+ 			cpu_relax();
+ 		}
+@@ -3241,7 +3241,7 @@ unsigned long wait_task_inactive(struct
+ 		running = task_running(rq, p);
+ 		queued = task_on_rq_queued(p);
+ 		ncsw = 0;
+-		if (!match_state || READ_ONCE(p->__state) == match_state)
++		if (!match_state || task_match_state_or_saved(p, match_state))
+ 			ncsw = p->nvcsw | LONG_MIN; /* sets MSB */
+ 		task_rq_unlock(rq, p, &rf);
+ 
diff --git a/debian/patches-rt/random__Make_it_work_on_rt.patch b/debian/patches-rt/random__Make_it_work_on_rt.patch
new file mode 100644
index 000000000000..762f17772a4c
--- /dev/null
+++ b/debian/patches-rt/random__Make_it_work_on_rt.patch
@@ -0,0 +1,174 @@
+Subject: random: Make it work on rt
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Tue Aug 21 20:38:50 2012 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Delegate the random insertion to the forced threaded interrupt
+handler. Store the return IP of the hard interrupt handler in the irq
+descriptor and feed it into the random generator as a source of
+entropy.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+
+---
+ arch/x86/kernel/cpu/mshyperv.c |    3 ++-
+ drivers/char/random.c          |   11 +++++------
+ drivers/hv/hyperv_vmbus.h      |    1 +
+ drivers/hv/vmbus_drv.c         |    5 ++++-
+ include/linux/irqdesc.h        |    1 +
+ include/linux/random.h         |    2 +-
+ kernel/irq/handle.c            |   10 ++++++++--
+ kernel/irq/manage.c            |    6 ++++++
+ 8 files changed, 28 insertions(+), 11 deletions(-)
+---
+--- a/arch/x86/kernel/cpu/mshyperv.c
++++ b/arch/x86/kernel/cpu/mshyperv.c
+@@ -75,11 +75,12 @@ void hv_remove_vmbus_handler(void)
+ DEFINE_IDTENTRY_SYSVEC(sysvec_hyperv_stimer0)
+ {
+ 	struct pt_regs *old_regs = set_irq_regs(regs);
++	u64 ip = regs ? instruction_pointer(regs) : 0;
+ 
+ 	inc_irq_stat(hyperv_stimer0_count);
+ 	if (hv_stimer0_handler)
+ 		hv_stimer0_handler();
+-	add_interrupt_randomness(HYPERV_STIMER0_VECTOR, 0);
++	add_interrupt_randomness(HYPERV_STIMER0_VECTOR, 0, ip);
+ 	ack_APIC_irq();
+ 
+ 	set_irq_regs(old_regs);
+--- a/drivers/char/random.c
++++ b/drivers/char/random.c
+@@ -1242,26 +1242,25 @@ static __u32 get_reg(struct fast_pool *f
+ 	return *ptr;
+ }
+ 
+-void add_interrupt_randomness(int irq, int irq_flags)
++void add_interrupt_randomness(int irq, int irq_flags, __u64 ip)
+ {
+ 	struct entropy_store	*r;
+ 	struct fast_pool	*fast_pool = this_cpu_ptr(&irq_randomness);
+-	struct pt_regs		*regs = get_irq_regs();
+ 	unsigned long		now = jiffies;
+ 	cycles_t		cycles = random_get_entropy();
+ 	__u32			c_high, j_high;
+-	__u64			ip;
+ 
+ 	if (cycles == 0)
+-		cycles = get_reg(fast_pool, regs);
++		cycles = get_reg(fast_pool, NULL);
+ 	c_high = (sizeof(cycles) > 4) ? cycles >> 32 : 0;
+ 	j_high = (sizeof(now) > 4) ? now >> 32 : 0;
+ 	fast_pool->pool[0] ^= cycles ^ j_high ^ irq;
+ 	fast_pool->pool[1] ^= now ^ c_high;
+-	ip = regs ? instruction_pointer(regs) : _RET_IP_;
++	if (!ip)
++		ip = _RET_IP_;
+ 	fast_pool->pool[2] ^= ip;
+ 	fast_pool->pool[3] ^= (sizeof(ip) > 4) ? ip >> 32 :
+-		get_reg(fast_pool, regs);
++		get_reg(fast_pool, NULL);
+ 
+ 	fast_mix(fast_pool);
+ 	add_interrupt_bench(cycles);
+--- a/drivers/hv/hyperv_vmbus.h
++++ b/drivers/hv/hyperv_vmbus.h
+@@ -19,6 +19,7 @@
+ #include <linux/atomic.h>
+ #include <linux/hyperv.h>
+ #include <linux/interrupt.h>
++#include <linux/irq.h>
+ 
+ #include "hv_trace.h"
+ 
+--- a/drivers/hv/vmbus_drv.c
++++ b/drivers/hv/vmbus_drv.c
+@@ -22,6 +22,7 @@
+ #include <linux/clockchips.h>
+ #include <linux/cpu.h>
+ #include <linux/sched/task_stack.h>
++#include <linux/irq.h>
+ 
+ #include <linux/delay.h>
+ #include <linux/notifier.h>
+@@ -1337,6 +1338,8 @@ static void vmbus_isr(void)
+ 	void *page_addr = hv_cpu->synic_event_page;
+ 	struct hv_message *msg;
+ 	union hv_synic_event_flags *event;
++	struct pt_regs *regs = get_irq_regs();
++	u64 ip = regs ? instruction_pointer(regs) : 0;
+ 	bool handled = false;
+ 
+ 	if (unlikely(page_addr == NULL))
+@@ -1381,7 +1384,7 @@ static void vmbus_isr(void)
+ 			tasklet_schedule(&hv_cpu->msg_dpc);
+ 	}
+ 
+-	add_interrupt_randomness(vmbus_interrupt, 0);
++	add_interrupt_randomness(vmbus_interrupt, 0, ip);
+ }
+ 
+ static irqreturn_t vmbus_percpu_isr(int irq, void *dev_id)
+--- a/include/linux/irqdesc.h
++++ b/include/linux/irqdesc.h
+@@ -68,6 +68,7 @@ struct irq_desc {
+ 	unsigned int		irqs_unhandled;
+ 	atomic_t		threads_handled;
+ 	int			threads_handled_last;
++	u64			random_ip;
+ 	raw_spinlock_t		lock;
+ 	struct cpumask		*percpu_enabled;
+ 	const struct cpumask	*percpu_affinity;
+--- a/include/linux/random.h
++++ b/include/linux/random.h
+@@ -35,7 +35,7 @@ static inline void add_latent_entropy(vo
+ 
+ extern void add_input_randomness(unsigned int type, unsigned int code,
+ 				 unsigned int value) __latent_entropy;
+-extern void add_interrupt_randomness(int irq, int irq_flags) __latent_entropy;
++extern void add_interrupt_randomness(int irq, int irq_flags, __u64 ip) __latent_entropy;
+ 
+ extern void get_random_bytes(void *buf, int nbytes);
+ extern int wait_for_random_bytes(void);
+--- a/kernel/irq/handle.c
++++ b/kernel/irq/handle.c
+@@ -192,12 +192,18 @@ irqreturn_t __handle_irq_event_percpu(st
+ 
+ irqreturn_t handle_irq_event_percpu(struct irq_desc *desc)
+ {
+-	irqreturn_t retval;
++	struct pt_regs *regs = get_irq_regs();
++	u64 ip = regs ? instruction_pointer(regs) : 0;
+ 	unsigned int flags = 0;
++	irqreturn_t retval;
+ 
+ 	retval = __handle_irq_event_percpu(desc, &flags);
+ 
+-	add_interrupt_randomness(desc->irq_data.irq, flags);
++#ifdef CONFIG_PREEMPT_RT
++	desc->random_ip = ip;
++#else
++	add_interrupt_randomness(desc->irq_data.irq, flags, ip);
++#endif
+ 
+ 	if (!irq_settings_no_debug(desc))
+ 		note_interrupt(desc, retval);
+--- a/kernel/irq/manage.c
++++ b/kernel/irq/manage.c
+@@ -1281,6 +1281,12 @@ static int irq_thread(void *data)
+ 		if (action_ret == IRQ_WAKE_THREAD)
+ 			irq_wake_secondary(desc, action);
+ 
++		if (IS_ENABLED(CONFIG_PREEMPT_RT)) {
++			migrate_disable();
++			add_interrupt_randomness(action->irq, 0,
++				 desc->random_ip ^ (unsigned long) action);
++			migrate_enable();
++		}
+ 		wake_threads_waitq(desc);
+ 	}
+ 
diff --git a/debian/patches-rt/rcu-tree-Protect-rcu_rdp_is_offloaded-invocations-on.patch b/debian/patches-rt/rcu-tree-Protect-rcu_rdp_is_offloaded-invocations-on.patch
new file mode 100644
index 000000000000..76835fda277a
--- /dev/null
+++ b/debian/patches-rt/rcu-tree-Protect-rcu_rdp_is_offloaded-invocations-on.patch
@@ -0,0 +1,84 @@
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Tue, 21 Sep 2021 23:12:50 +0200
+Subject: [PATCH] rcu/tree: Protect rcu_rdp_is_offloaded() invocations on RT
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Valentin reported warnings about suspicious RCU usage on RT kernels. Those
+happen when offloading of RCU callbacks is enabled:
+
+  WARNING: suspicious RCU usage
+  5.13.0-rt1 #20 Not tainted
+  -----------------------------
+  kernel/rcu/tree_plugin.h:69 Unsafe read of RCU_NOCB offloaded state!
+
+  rcu_rdp_is_offloaded (kernel/rcu/tree_plugin.h:69 kernel/rcu/tree_plugin.h:58)
+  rcu_core (kernel/rcu/tree.c:2332 kernel/rcu/tree.c:2398 kernel/rcu/tree.c:2777)
+  rcu_cpu_kthread (./include/linux/bottom_half.h:32 kernel/rcu/tree.c:2876)
+
+The reason is that rcu_rdp_is_offloaded() is invoked without one of the
+required protections on RT enabled kernels because local_bh_disable() does
+not disable preemption on RT.
+
+Valentin proposed to add a local lock to the code in question, but that's
+suboptimal in several aspects:
+
+  1) local locks add extra code to !RT kernels for no value.
+
+  2) All possible callsites have to audited and amended when affected
+     possible at an outer function level due to lock nesting issues.
+
+  3) As the local lock has to be taken at the outer functions it's required
+     to release and reacquire them in the inner code sections which might
+     voluntary schedule, e.g. rcu_do_batch().
+
+Both callsites of rcu_rdp_is_offloaded() which trigger this check invoke
+rcu_rdp_is_offloaded() in the variable declaration section right at the top
+of the functions. But the actual usage of the result is either within a
+section which provides the required protections or after such a section.
+
+So the obvious solution is to move the invocation into the code sections
+which provide the proper protections, which solves the problem for RT and
+does not have any impact on !RT kernels.
+
+Reported-by: Valentin Schneider <valentin.schneider@arm.com>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ kernel/rcu/tree.c |    7 ++++---
+ 1 file changed, 4 insertions(+), 3 deletions(-)
+
+--- a/kernel/rcu/tree.c
++++ b/kernel/rcu/tree.c
+@@ -2276,13 +2276,13 @@ rcu_report_qs_rdp(struct rcu_data *rdp)
+ {
+ 	unsigned long flags;
+ 	unsigned long mask;
+-	bool needwake = false;
+-	const bool offloaded = rcu_rdp_is_offloaded(rdp);
++	bool offloaded, needwake = false;
+ 	struct rcu_node *rnp;
+ 
+ 	WARN_ON_ONCE(rdp->cpu != smp_processor_id());
+ 	rnp = rdp->mynode;
+ 	raw_spin_lock_irqsave_rcu_node(rnp, flags);
++	offloaded = rcu_rdp_is_offloaded(rdp);
+ 	if (rdp->cpu_no_qs.b.norm || rdp->gp_seq != rnp->gp_seq ||
+ 	    rdp->gpwrap) {
+ 
+@@ -2444,7 +2444,7 @@ static void rcu_do_batch(struct rcu_data
+ 	int div;
+ 	bool __maybe_unused empty;
+ 	unsigned long flags;
+-	const bool offloaded = rcu_rdp_is_offloaded(rdp);
++	bool offloaded;
+ 	struct rcu_head *rhp;
+ 	struct rcu_cblist rcl = RCU_CBLIST_INITIALIZER(rcl);
+ 	long bl, count = 0;
+@@ -2470,6 +2470,7 @@ static void rcu_do_batch(struct rcu_data
+ 	rcu_nocb_lock(rdp);
+ 	WARN_ON_ONCE(cpu_is_offline(smp_processor_id()));
+ 	pending = rcu_segcblist_n_cbs(&rdp->cblist);
++	offloaded = rcu_rdp_is_offloaded(rdp);
+ 	div = READ_ONCE(rcu_divisor);
+ 	div = div < 0 ? 7 : div > sizeof(long) * 8 - 2 ? sizeof(long) * 8 - 2 : div;
+ 	bl = max(rdp->blimit, pending >> div);
diff --git a/debian/patches-rt/rcu__Delay_RCU-selftests.patch b/debian/patches-rt/rcu__Delay_RCU-selftests.patch
new file mode 100644
index 000000000000..31cab7eed760
--- /dev/null
+++ b/debian/patches-rt/rcu__Delay_RCU-selftests.patch
@@ -0,0 +1,77 @@
+Subject: rcu: Delay RCU-selftests
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Wed Mar 10 15:09:02 2021 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Delay RCU-selftests until ksoftirqd is up and running.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ include/linux/rcupdate.h |    7 +++++++
+ init/main.c              |    1 +
+ kernel/rcu/tasks.h       |    9 ++-------
+ 3 files changed, 10 insertions(+), 7 deletions(-)
+---
+--- a/include/linux/rcupdate.h
++++ b/include/linux/rcupdate.h
+@@ -95,6 +95,13 @@ void rcu_init_tasks_generic(void);
+ static inline void rcu_init_tasks_generic(void) { }
+ #endif
+ 
++#if defined(CONFIG_PROVE_RCU) && defined(CONFIG_TASKS_RCU_GENERIC)
++void rcu_tasks_initiate_self_tests(void);
++#else
++static inline void rcu_tasks_initiate_self_tests(void) {}
++#endif
++
++
+ #ifdef CONFIG_RCU_STALL_COMMON
+ void rcu_sysrq_start(void);
+ void rcu_sysrq_end(void);
+--- a/init/main.c
++++ b/init/main.c
+@@ -1597,6 +1597,7 @@ static noinline void __init kernel_init_
+ 
+ 	rcu_init_tasks_generic();
+ 	do_pre_smp_initcalls();
++	rcu_tasks_initiate_self_tests();
+ 	lockup_detector_init();
+ 
+ 	smp_init();
+--- a/kernel/rcu/tasks.h
++++ b/kernel/rcu/tasks.h
+@@ -1345,7 +1345,7 @@ static void test_rcu_tasks_callback(stru
+ 	rttd->notrun = true;
+ }
+ 
+-static void rcu_tasks_initiate_self_tests(void)
++void rcu_tasks_initiate_self_tests(void)
+ {
+ 	pr_info("Running RCU-tasks wait API self tests\n");
+ #ifdef CONFIG_TASKS_RCU
+@@ -1382,9 +1382,7 @@ static int rcu_tasks_verify_self_tests(v
+ 	return ret;
+ }
+ late_initcall(rcu_tasks_verify_self_tests);
+-#else /* #ifdef CONFIG_PROVE_RCU */
+-static void rcu_tasks_initiate_self_tests(void) { }
+-#endif /* #else #ifdef CONFIG_PROVE_RCU */
++#endif /* #ifdef CONFIG_PROVE_RCU */
+ 
+ void __init rcu_init_tasks_generic(void)
+ {
+@@ -1399,9 +1397,6 @@ void __init rcu_init_tasks_generic(void)
+ #ifdef CONFIG_TASKS_TRACE_RCU
+ 	rcu_spawn_tasks_trace_kthread();
+ #endif
+-
+-	// Run the self-tests.
+-	rcu_tasks_initiate_self_tests();
+ }
+ 
+ #else /* #ifdef CONFIG_TASKS_RCU_GENERIC */
diff --git a/debian/patches-rt/sched-Make-preempt_enable_no_resched-behave-like-pre.patch b/debian/patches-rt/sched-Make-preempt_enable_no_resched-behave-like-pre.patch
new file mode 100644
index 000000000000..8bbed5d1ea76
--- /dev/null
+++ b/debian/patches-rt/sched-Make-preempt_enable_no_resched-behave-like-pre.patch
@@ -0,0 +1,27 @@
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Fri, 17 Sep 2021 12:56:01 +0200
+Subject: [PATCH] sched: Make preempt_enable_no_resched() behave like
+ preempt_enable() on PREEMPT_RT
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ include/linux/preempt.h |    6 +++++-
+ 1 file changed, 5 insertions(+), 1 deletion(-)
+
+--- a/include/linux/preempt.h
++++ b/include/linux/preempt.h
+@@ -210,7 +210,11 @@ do { \
+ 	preempt_count_dec(); \
+ } while (0)
+ 
+-#define preempt_enable_no_resched() sched_preempt_enable_no_resched()
++#ifndef CONFIG_PREEMPT_RT
++# define preempt_enable_no_resched() sched_preempt_enable_no_resched()
++#else
++# define preempt_enable_no_resched() preempt_enable()
++#endif
+ 
+ #define preemptible()	(preempt_count() == 0 && !irqs_disabled())
+ 
diff --git a/debian/patches-rt/sched__Add_support_for_lazy_preemption.patch b/debian/patches-rt/sched__Add_support_for_lazy_preemption.patch
new file mode 100644
index 000000000000..7ad34185cad5
--- /dev/null
+++ b/debian/patches-rt/sched__Add_support_for_lazy_preemption.patch
@@ -0,0 +1,660 @@
+Subject: sched: Add support for lazy preemption
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Fri Oct 26 18:50:54 2012 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+It has become an obsession to mitigate the determinism vs. throughput
+loss of RT. Looking at the mainline semantics of preemption points
+gives a hint why RT sucks throughput wise for ordinary SCHED_OTHER
+tasks. One major issue is the wakeup of tasks which are right away
+preempting the waking task while the waking task holds a lock on which
+the woken task will block right after having preempted the wakee. In
+mainline this is prevented due to the implicit preemption disable of
+spin/rw_lock held regions. On RT this is not possible due to the fully
+preemptible nature of sleeping spinlocks.
+
+Though for a SCHED_OTHER task preempting another SCHED_OTHER task this
+is really not a correctness issue. RT folks are concerned about
+SCHED_FIFO/RR tasks preemption and not about the purely fairness
+driven SCHED_OTHER preemption latencies.
+
+So I introduced a lazy preemption mechanism which only applies to
+SCHED_OTHER tasks preempting another SCHED_OTHER task. Aside of the
+existing preempt_count each tasks sports now a preempt_lazy_count
+which is manipulated on lock acquiry and release. This is slightly
+incorrect as for lazyness reasons I coupled this on
+migrate_disable/enable so some other mechanisms get the same treatment
+(e.g. get_cpu_light).
+
+Now on the scheduler side instead of setting NEED_RESCHED this sets
+NEED_RESCHED_LAZY in case of a SCHED_OTHER/SCHED_OTHER preemption and
+therefor allows to exit the waking task the lock held region before
+the woken task preempts. That also works better for cross CPU wakeups
+as the other side can stay in the adaptive spinning loop.
+
+For RT class preemption there is no change. This simply sets
+NEED_RESCHED and forgoes the lazy preemption counter.
+
+ Initial test do not expose any observable latency increasement, but
+history shows that I've been proven wrong before :)
+
+The lazy preemption mode is per default on, but with
+CONFIG_SCHED_DEBUG enabled it can be disabled via:
+
+ # echo NO_PREEMPT_LAZY >/sys/kernel/debug/sched_features
+
+and reenabled via
+
+ # echo PREEMPT_LAZY >/sys/kernel/debug/sched_features
+
+The test results so far are very machine and workload dependent, but
+there is a clear trend that it enhances the non RT workload
+performance.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ include/linux/preempt.h      |   54 +++++++++++++++++++++++++++--
+ include/linux/sched.h        |   37 +++++++++++++++++++
+ include/linux/thread_info.h  |   12 +++++-
+ include/linux/trace_events.h |    5 ++
+ kernel/Kconfig.preempt       |    6 +++
+ kernel/sched/core.c          |   80 +++++++++++++++++++++++++++++++++++++++++--
+ kernel/sched/fair.c          |   16 ++++----
+ kernel/sched/features.h      |    3 +
+ kernel/sched/sched.h         |    9 ++++
+ kernel/trace/trace.c         |   46 +++++++++++++++---------
+ kernel/trace/trace_events.c  |    1 
+ kernel/trace/trace_output.c  |   14 ++++++-
+ 12 files changed, 248 insertions(+), 35 deletions(-)
+---
+--- a/include/linux/preempt.h
++++ b/include/linux/preempt.h
+@@ -196,6 +196,20 @@ extern void preempt_count_sub(int val);
+ #define preempt_count_inc() preempt_count_add(1)
+ #define preempt_count_dec() preempt_count_sub(1)
+ 
++#ifdef CONFIG_PREEMPT_LAZY
++#define add_preempt_lazy_count(val)	do { preempt_lazy_count() += (val); } while (0)
++#define sub_preempt_lazy_count(val)	do { preempt_lazy_count() -= (val); } while (0)
++#define inc_preempt_lazy_count()	add_preempt_lazy_count(1)
++#define dec_preempt_lazy_count()	sub_preempt_lazy_count(1)
++#define preempt_lazy_count()		(current_thread_info()->preempt_lazy_count)
++#else
++#define add_preempt_lazy_count(val)	do { } while (0)
++#define sub_preempt_lazy_count(val)	do { } while (0)
++#define inc_preempt_lazy_count()	do { } while (0)
++#define dec_preempt_lazy_count()	do { } while (0)
++#define preempt_lazy_count()		(0)
++#endif
++
+ #ifdef CONFIG_PREEMPT_COUNT
+ 
+ #define preempt_disable() \
+@@ -204,6 +218,12 @@ do { \
+ 	barrier(); \
+ } while (0)
+ 
++#define preempt_lazy_disable() \
++do { \
++	inc_preempt_lazy_count(); \
++	barrier(); \
++} while (0)
++
+ #define sched_preempt_enable_no_resched() \
+ do { \
+ 	barrier(); \
+@@ -241,6 +261,18 @@ do { \
+ 		__preempt_schedule(); \
+ } while (0)
+ 
++/*
++ * open code preempt_check_resched() because it is not exported to modules and
++ * used by local_unlock() or bpf_enable_instrumentation().
++ */
++#define preempt_lazy_enable() \
++do { \
++	dec_preempt_lazy_count(); \
++	barrier(); \
++	if (should_resched(0)) \
++		__preempt_schedule(); \
++} while (0)
++
+ #else /* !CONFIG_PREEMPTION */
+ #define preempt_enable() \
+ do { \
+@@ -248,6 +280,12 @@ do { \
+ 	preempt_count_dec(); \
+ } while (0)
+ 
++#define preempt_lazy_enable() \
++do { \
++	dec_preempt_lazy_count(); \
++	barrier(); \
++} while (0)
++
+ #define preempt_enable_notrace() \
+ do { \
+ 	barrier(); \
+@@ -289,6 +327,9 @@ do { \
+ #define preempt_check_resched_rt()		barrier()
+ #define preemptible()				0
+ 
++#define preempt_lazy_disable()			barrier()
++#define preempt_lazy_enable()			barrier()
++
+ #endif /* CONFIG_PREEMPT_COUNT */
+ 
+ #ifdef MODULE
+@@ -307,7 +348,7 @@ do { \
+ } while (0)
+ #define preempt_fold_need_resched() \
+ do { \
+-	if (tif_need_resched()) \
++	if (tif_need_resched_now()) \
+ 		set_preempt_need_resched(); \
+ } while (0)
+ 
+@@ -423,8 +464,15 @@ extern void migrate_enable(void);
+ 
+ #else
+ 
+-static inline void migrate_disable(void) { }
+-static inline void migrate_enable(void) { }
++static inline void migrate_disable(void)
++{
++	preempt_lazy_disable();
++}
++
++static inline void migrate_enable(void)
++{
++	preempt_lazy_enable();
++}
+ 
+ #endif /* CONFIG_SMP */
+ 
+--- a/include/linux/sched.h
++++ b/include/linux/sched.h
+@@ -2009,6 +2009,43 @@ static inline int test_tsk_need_resched(
+ 	return unlikely(test_tsk_thread_flag(tsk,TIF_NEED_RESCHED));
+ }
+ 
++#ifdef CONFIG_PREEMPT_LAZY
++static inline void set_tsk_need_resched_lazy(struct task_struct *tsk)
++{
++	set_tsk_thread_flag(tsk,TIF_NEED_RESCHED_LAZY);
++}
++
++static inline void clear_tsk_need_resched_lazy(struct task_struct *tsk)
++{
++	clear_tsk_thread_flag(tsk,TIF_NEED_RESCHED_LAZY);
++}
++
++static inline int test_tsk_need_resched_lazy(struct task_struct *tsk)
++{
++	return unlikely(test_tsk_thread_flag(tsk,TIF_NEED_RESCHED_LAZY));
++}
++
++static inline int need_resched_lazy(void)
++{
++	return test_thread_flag(TIF_NEED_RESCHED_LAZY);
++}
++
++static inline int need_resched_now(void)
++{
++	return test_thread_flag(TIF_NEED_RESCHED);
++}
++
++#else
++static inline void clear_tsk_need_resched_lazy(struct task_struct *tsk) { }
++static inline int need_resched_lazy(void) { return 0; }
++
++static inline int need_resched_now(void)
++{
++	return test_thread_flag(TIF_NEED_RESCHED);
++}
++
++#endif
++
+ #ifdef CONFIG_PREEMPT_RT
+ static inline bool task_match_saved_state(struct task_struct *p, long match_state)
+ {
+--- a/include/linux/thread_info.h
++++ b/include/linux/thread_info.h
+@@ -163,7 +163,17 @@ static inline int test_ti_thread_flag(st
+ 	clear_ti_thread_flag(task_thread_info(t), TIF_##fl)
+ #endif /* !CONFIG_GENERIC_ENTRY */
+ 
+-#define tif_need_resched() test_thread_flag(TIF_NEED_RESCHED)
++#ifdef CONFIG_PREEMPT_LAZY
++#define tif_need_resched()	(test_thread_flag(TIF_NEED_RESCHED) || \
++				 test_thread_flag(TIF_NEED_RESCHED_LAZY))
++#define tif_need_resched_now()	(test_thread_flag(TIF_NEED_RESCHED))
++#define tif_need_resched_lazy()	test_thread_flag(TIF_NEED_RESCHED_LAZY)
++
++#else
++#define tif_need_resched()	test_thread_flag(TIF_NEED_RESCHED)
++#define tif_need_resched_now()	test_thread_flag(TIF_NEED_RESCHED)
++#define tif_need_resched_lazy()	0
++#endif
+ 
+ #ifndef CONFIG_HAVE_ARCH_WITHIN_STACK_FRAMES
+ static inline int arch_within_stack_frames(const void * const stack,
+--- a/include/linux/trace_events.h
++++ b/include/linux/trace_events.h
+@@ -69,6 +69,7 @@ struct trace_entry {
+ 	unsigned char		flags;
+ 	unsigned char		preempt_count;
+ 	int			pid;
++	unsigned char		preempt_lazy_count;
+ };
+ 
+ #define TRACE_EVENT_TYPE_MAX						\
+@@ -157,9 +158,10 @@ static inline void tracing_generic_entry
+ 						unsigned int trace_ctx)
+ {
+ 	entry->preempt_count		= trace_ctx & 0xff;
++	entry->preempt_lazy_count	= (trace_ctx >> 16) & 0xff;
+ 	entry->pid			= current->pid;
+ 	entry->type			= type;
+-	entry->flags =			trace_ctx >> 16;
++	entry->flags			= trace_ctx >> 24;
+ }
+ 
+ unsigned int tracing_gen_ctx_irq_test(unsigned int irqs_status);
+@@ -172,6 +174,7 @@ enum trace_flag_type {
+ 	TRACE_FLAG_SOFTIRQ		= 0x10,
+ 	TRACE_FLAG_PREEMPT_RESCHED	= 0x20,
+ 	TRACE_FLAG_NMI			= 0x40,
++	TRACE_FLAG_NEED_RESCHED_LAZY	= 0x80,
+ };
+ 
+ #ifdef CONFIG_TRACE_IRQFLAGS_SUPPORT
+--- a/kernel/Kconfig.preempt
++++ b/kernel/Kconfig.preempt
+@@ -1,5 +1,11 @@
+ # SPDX-License-Identifier: GPL-2.0-only
+ 
++config HAVE_PREEMPT_LAZY
++	bool
++
++config PREEMPT_LAZY
++	def_bool y if HAVE_PREEMPT_LAZY && PREEMPT_RT
++
+ config PREEMPT_NONE_BUILD
+ 	bool
+ 
+--- a/kernel/sched/core.c
++++ b/kernel/sched/core.c
+@@ -986,6 +986,46 @@ void resched_curr(struct rq *rq)
+ 		trace_sched_wake_idle_without_ipi(cpu);
+ }
+ 
++#ifdef CONFIG_PREEMPT_LAZY
++
++static int tsk_is_polling(struct task_struct *p)
++{
++#ifdef TIF_POLLING_NRFLAG
++	return test_tsk_thread_flag(p, TIF_POLLING_NRFLAG);
++#else
++	return 0;
++#endif
++}
++
++void resched_curr_lazy(struct rq *rq)
++{
++	struct task_struct *curr = rq->curr;
++	int cpu;
++
++	if (!sched_feat(PREEMPT_LAZY)) {
++		resched_curr(rq);
++		return;
++	}
++
++	if (test_tsk_need_resched(curr))
++		return;
++
++	if (test_tsk_need_resched_lazy(curr))
++		return;
++
++	set_tsk_need_resched_lazy(curr);
++
++	cpu = cpu_of(rq);
++	if (cpu == smp_processor_id())
++		return;
++
++	/* NEED_RESCHED_LAZY must be visible before we test polling */
++	smp_mb();
++	if (!tsk_is_polling(curr))
++		smp_send_reschedule(cpu);
++}
++#endif
++
+ void resched_cpu(int cpu)
+ {
+ 	struct rq *rq = cpu_rq(cpu);
+@@ -2160,6 +2200,7 @@ void migrate_disable(void)
+ 	preempt_disable();
+ 	this_rq()->nr_pinned++;
+ 	p->migration_disabled = 1;
++	preempt_lazy_disable();
+ 	preempt_enable();
+ }
+ EXPORT_SYMBOL_GPL(migrate_disable);
+@@ -2190,6 +2231,7 @@ void migrate_enable(void)
+ 	barrier();
+ 	p->migration_disabled = 0;
+ 	this_rq()->nr_pinned--;
++	preempt_lazy_enable();
+ 	preempt_enable();
+ }
+ EXPORT_SYMBOL_GPL(migrate_enable);
+@@ -4419,6 +4461,9 @@ int sched_fork(unsigned long clone_flags
+ 	p->on_cpu = 0;
+ #endif
+ 	init_task_preempt_count(p);
++#ifdef CONFIG_HAVE_PREEMPT_LAZY
++	task_thread_info(p)->preempt_lazy_count = 0;
++#endif
+ #ifdef CONFIG_SMP
+ 	plist_node_init(&p->pushable_tasks, MAX_PRIO);
+ 	RB_CLEAR_NODE(&p->pushable_dl_tasks);
+@@ -6220,6 +6265,7 @@ static void __sched notrace __schedule(u
+ 
+ 	next = pick_next_task(rq, prev, &rf);
+ 	clear_tsk_need_resched(prev);
++	clear_tsk_need_resched_lazy(prev);
+ 	clear_preempt_need_resched();
+ #ifdef CONFIG_SCHED_DEBUG
+ 	rq->last_seen_need_resched_ns = 0;
+@@ -6431,6 +6477,30 @@ static void __sched notrace preempt_sche
+ 	} while (need_resched());
+ }
+ 
++#ifdef CONFIG_PREEMPT_LAZY
++/*
++ * If TIF_NEED_RESCHED is then we allow to be scheduled away since this is
++ * set by a RT task. Oterwise we try to avoid beeing scheduled out as long as
++ * preempt_lazy_count counter >0.
++ */
++static __always_inline int preemptible_lazy(void)
++{
++	if (test_thread_flag(TIF_NEED_RESCHED))
++		return 1;
++	if (current_thread_info()->preempt_lazy_count)
++		return 0;
++	return 1;
++}
++
++#else
++
++static inline int preemptible_lazy(void)
++{
++	return 1;
++}
++
++#endif
++
+ #ifdef CONFIG_PREEMPTION
+ /*
+  * This is the entry point to schedule() from in-kernel preemption
+@@ -6444,7 +6514,8 @@ asmlinkage __visible void __sched notrac
+ 	 */
+ 	if (likely(!preemptible()))
+ 		return;
+-
++	if (!preemptible_lazy())
++		return;
+ 	preempt_schedule_common();
+ }
+ NOKPROBE_SYMBOL(preempt_schedule);
+@@ -6477,6 +6548,9 @@ asmlinkage __visible void __sched notrac
+ 	if (likely(!preemptible()))
+ 		return;
+ 
++	if (!preemptible_lazy())
++		return;
++
+ 	do {
+ 		/*
+ 		 * Because the function tracer can trace preempt_count_sub()
+@@ -8660,7 +8734,9 @@ void __init init_idle(struct task_struct
+ 
+ 	/* Set the preempt count _outside_ the spinlocks! */
+ 	init_idle_preempt_count(idle, cpu);
+-
++#ifdef CONFIG_HAVE_PREEMPT_LAZY
++	task_thread_info(idle)->preempt_lazy_count = 0;
++#endif
+ 	/*
+ 	 * The idle tasks have their own, simple scheduling class:
+ 	 */
+--- a/kernel/sched/fair.c
++++ b/kernel/sched/fair.c
+@@ -4393,7 +4393,7 @@ check_preempt_tick(struct cfs_rq *cfs_rq
+ 	ideal_runtime = sched_slice(cfs_rq, curr);
+ 	delta_exec = curr->sum_exec_runtime - curr->prev_sum_exec_runtime;
+ 	if (delta_exec > ideal_runtime) {
+-		resched_curr(rq_of(cfs_rq));
++		resched_curr_lazy(rq_of(cfs_rq));
+ 		/*
+ 		 * The current task ran long enough, ensure it doesn't get
+ 		 * re-elected due to buddy favours.
+@@ -4417,7 +4417,7 @@ check_preempt_tick(struct cfs_rq *cfs_rq
+ 		return;
+ 
+ 	if (delta > ideal_runtime)
+-		resched_curr(rq_of(cfs_rq));
++		resched_curr_lazy(rq_of(cfs_rq));
+ }
+ 
+ static void
+@@ -4563,7 +4563,7 @@ entity_tick(struct cfs_rq *cfs_rq, struc
+ 	 * validating it and just reschedule.
+ 	 */
+ 	if (queued) {
+-		resched_curr(rq_of(cfs_rq));
++		resched_curr_lazy(rq_of(cfs_rq));
+ 		return;
+ 	}
+ 	/*
+@@ -4712,7 +4712,7 @@ static void __account_cfs_rq_runtime(str
+ 	 * hierarchy can be throttled
+ 	 */
+ 	if (!assign_cfs_rq_runtime(cfs_rq) && likely(cfs_rq->curr))
+-		resched_curr(rq_of(cfs_rq));
++		resched_curr_lazy(rq_of(cfs_rq));
+ }
+ 
+ static __always_inline
+@@ -5475,7 +5475,7 @@ static void hrtick_start_fair(struct rq
+ 
+ 		if (delta < 0) {
+ 			if (task_current(rq, p))
+-				resched_curr(rq);
++				resched_curr_lazy(rq);
+ 			return;
+ 		}
+ 		hrtick_start(rq, delta);
+@@ -7172,7 +7172,7 @@ static void check_preempt_wakeup(struct
+ 	return;
+ 
+ preempt:
+-	resched_curr(rq);
++	resched_curr_lazy(rq);
+ 	/*
+ 	 * Only set the backward buddy when the current task is still
+ 	 * on the rq. This can happen when a wakeup gets interleaved
+@@ -11207,7 +11207,7 @@ static void task_fork_fair(struct task_s
+ 		 * 'current' within the tree based on its new key value.
+ 		 */
+ 		swap(curr->vruntime, se->vruntime);
+-		resched_curr(rq);
++		resched_curr_lazy(rq);
+ 	}
+ 
+ 	se->vruntime -= cfs_rq->min_vruntime;
+@@ -11234,7 +11234,7 @@ prio_changed_fair(struct rq *rq, struct
+ 	 */
+ 	if (task_current(rq, p)) {
+ 		if (p->prio > oldprio)
+-			resched_curr(rq);
++			resched_curr_lazy(rq);
+ 	} else
+ 		check_preempt_curr(rq, p, 0);
+ }
+--- a/kernel/sched/features.h
++++ b/kernel/sched/features.h
+@@ -48,6 +48,9 @@ SCHED_FEAT(NONTASK_CAPACITY, true)
+ 
+ #ifdef CONFIG_PREEMPT_RT
+ SCHED_FEAT(TTWU_QUEUE, false)
++# ifdef CONFIG_PREEMPT_LAZY
++SCHED_FEAT(PREEMPT_LAZY, true)
++# endif
+ #else
+ 
+ /*
+--- a/kernel/sched/sched.h
++++ b/kernel/sched/sched.h
+@@ -2300,6 +2300,15 @@ extern void reweight_task(struct task_st
+ extern void resched_curr(struct rq *rq);
+ extern void resched_cpu(int cpu);
+ 
++#ifdef CONFIG_PREEMPT_LAZY
++extern void resched_curr_lazy(struct rq *rq);
++#else
++static inline void resched_curr_lazy(struct rq *rq)
++{
++	resched_curr(rq);
++}
++#endif
++
+ extern struct rt_bandwidth def_rt_bandwidth;
+ extern void init_rt_bandwidth(struct rt_bandwidth *rt_b, u64 period, u64 runtime);
+ 
+--- a/kernel/trace/trace.c
++++ b/kernel/trace/trace.c
+@@ -2606,7 +2606,13 @@ unsigned int tracing_gen_ctx_irq_test(un
+ 		trace_flags |= TRACE_FLAG_NEED_RESCHED;
+ 	if (test_preempt_need_resched())
+ 		trace_flags |= TRACE_FLAG_PREEMPT_RESCHED;
+-	return (trace_flags << 16) | (min_t(unsigned int, pc & 0xff, 0xf)) |
++#ifdef CONFIG_PREEMPT_LAZY
++	if (need_resched_lazy())
++		trace_flags |= TRACE_FLAG_NEED_RESCHED_LAZY;
++#endif
++
++	return (trace_flags << 24) | (min_t(unsigned int, pc & 0xff, 0xf)) |
++		(preempt_lazy_count() & 0xff) << 16 |
+ 		(min_t(unsigned int, migration_disable_value(), 0xf)) << 4;
+ }
+ 
+@@ -4182,15 +4188,17 @@ unsigned long trace_total_entries(struct
+ 
+ static void print_lat_help_header(struct seq_file *m)
+ {
+-	seq_puts(m, "#                    _------=> CPU#            \n"
+-		    "#                   / _-----=> irqs-off        \n"
+-		    "#                  | / _----=> need-resched    \n"
+-		    "#                  || / _---=> hardirq/softirq \n"
+-		    "#                  ||| / _--=> preempt-depth   \n"
+-		    "#                  |||| / _-=> migrate-disable \n"
+-		    "#                  ||||| /     delay           \n"
+-		    "#  cmd     pid     |||||| time  |   caller     \n"
+-		    "#     \\   /        ||||||  \\    |    /       \n");
++	seq_puts(m, "#                    _--------=> CPU#            \n"
++		    "#                   / _-------=> irqs-off        \n"
++		    "#                  | / _------=> need-resched    \n"
++		    "#                  || / _-----=> need-resched-lazy\n"
++		    "#                  ||| / _----=> hardirq/softirq \n"
++		    "#                  |||| / _---=> preempt-depth   \n"
++		    "#                  ||||| / _--=> preempt-lazy-depth\n"
++		    "#                  |||||| / _-=> migrate-disable \n"
++		    "#                  ||||||| /     delay           \n"
++		    "#  cmd     pid     |||||||| time  |   caller     \n"
++		    "#     \\   /        ||||||||  \\    |    /       \n");
+ }
+ 
+ static void print_event_info(struct array_buffer *buf, struct seq_file *m)
+@@ -4224,14 +4232,16 @@ static void print_func_help_header_irq(s
+ 
+ 	print_event_info(buf, m);
+ 
+-	seq_printf(m, "#                            %.*s  _-----=> irqs-off\n", prec, space);
+-	seq_printf(m, "#                            %.*s / _----=> need-resched\n", prec, space);
+-	seq_printf(m, "#                            %.*s| / _---=> hardirq/softirq\n", prec, space);
+-	seq_printf(m, "#                            %.*s|| / _--=> preempt-depth\n", prec, space);
+-	seq_printf(m, "#                            %.*s||| / _-=> migrate-disable\n", prec, space);
+-	seq_printf(m, "#                            %.*s|||| /     delay\n", prec, space);
+-	seq_printf(m, "#           TASK-PID  %.*s CPU#  |||||  TIMESTAMP  FUNCTION\n", prec, "     TGID   ");
+-	seq_printf(m, "#              | |    %.*s   |   |||||     |         |\n", prec, "       |    ");
++	seq_printf(m, "#                            %.*s  _-------=> irqs-off\n", prec, space);
++	seq_printf(m, "#                            %.*s / _------=> need-resched\n", prec, space);
++	seq_printf(m, "#                            %.*s| / _-----=> need-resched-lazy\n", prec, space);
++	seq_printf(m, "#                            %.*s|| / _----=> hardirq/softirq\n", prec, space);
++	seq_printf(m, "#                            %.*s||| / _---=> preempt-depth\n", prec, space);
++	seq_printf(m, "#                            %.*s|||| / _--=> preempt-lazy-depth\n", prec, space);
++	seq_printf(m, "#                            %.*s||||| / _-=> migrate-disable\n", prec, space);
++	seq_printf(m, "#                            %.*s|||||| /     delay\n", prec, space);
++	seq_printf(m, "#           TASK-PID  %.*s CPU#  |||||||  TIMESTAMP  FUNCTION\n", prec, "     TGID   ");
++	seq_printf(m, "#              | |    %.*s   |   |||||||      |         |\n", prec, "       |    ");
+ }
+ 
+ void
+--- a/kernel/trace/trace_events.c
++++ b/kernel/trace/trace_events.c
+@@ -184,6 +184,7 @@ static int trace_define_common_fields(vo
+ 	/* Holds both preempt_count and migrate_disable */
+ 	__common_field(unsigned char, preempt_count);
+ 	__common_field(int, pid);
++	__common_field(unsigned char, preempt_lazy_count);
+ 
+ 	return ret;
+ }
+--- a/kernel/trace/trace_output.c
++++ b/kernel/trace/trace_output.c
+@@ -442,6 +442,7 @@ int trace_print_lat_fmt(struct trace_seq
+ {
+ 	char hardsoft_irq;
+ 	char need_resched;
++	char need_resched_lazy;
+ 	char irqs_off;
+ 	int hardirq;
+ 	int softirq;
+@@ -472,6 +473,9 @@ int trace_print_lat_fmt(struct trace_seq
+ 		break;
+ 	}
+ 
++	need_resched_lazy =
++		(entry->flags & TRACE_FLAG_NEED_RESCHED_LAZY) ? 'L' : '.';
++
+ 	hardsoft_irq =
+ 		(nmi && hardirq)     ? 'Z' :
+ 		nmi                  ? 'z' :
+@@ -480,14 +484,20 @@ int trace_print_lat_fmt(struct trace_seq
+ 		softirq              ? 's' :
+ 		                       '.' ;
+ 
+-	trace_seq_printf(s, "%c%c%c",
+-			 irqs_off, need_resched, hardsoft_irq);
++	trace_seq_printf(s, "%c%c%c%c",
++			 irqs_off, need_resched, need_resched_lazy,
++			 hardsoft_irq);
+ 
+ 	if (entry->preempt_count & 0xf)
+ 		trace_seq_printf(s, "%x", entry->preempt_count & 0xf);
+ 	else
+ 		trace_seq_putc(s, '.');
+ 
++	if (entry->preempt_lazy_count)
++		trace_seq_printf(s, "%x", entry->preempt_lazy_count);
++	else
++		trace_seq_putc(s, '.');
++
+ 	if (entry->preempt_count & 0xf0)
+ 		trace_seq_printf(s, "%x", entry->preempt_count >> 4);
+ 	else
diff --git a/debian/patches-rt/sched_introduce_migratable.patch b/debian/patches-rt/sched_introduce_migratable.patch
new file mode 100644
index 000000000000..df1d72256891
--- /dev/null
+++ b/debian/patches-rt/sched_introduce_migratable.patch
@@ -0,0 +1,46 @@
+From: Valentin Schneider <valentin.schneider@arm.com>
+Subject: sched: Introduce migratable()
+Date: Wed, 11 Aug 2021 21:13:52 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Some areas use preempt_disable() + preempt_enable() to safely access
+per-CPU data. The PREEMPT_RT folks have shown this can also be done by
+keeping preemption enabled and instead disabling migration (and acquiring a
+sleepable lock, if relevant).
+
+Introduce a helper which checks whether the current task can be migrated
+elsewhere, IOW if it is pinned to its local CPU in the current
+context. This can help determining if per-CPU properties can be safely
+accessed.
+
+Note that CPU affinity is not checked here, as a preemptible task can have
+its affinity changed at any given time (including if it has
+PF_NO_SETAFFINITY, when hotplug gets involved).
+
+Signed-off-by: Valentin Schneider <valentin.schneider@arm.com>
+[bigeasy: Return false on UP, call it is_migratable().]
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20210811201354.1976839-3-valentin.schneider@arm.com
+---
+ include/linux/sched.h |   10 ++++++++++
+ 1 file changed, 10 insertions(+)
+
+--- a/include/linux/sched.h
++++ b/include/linux/sched.h
+@@ -1727,6 +1727,16 @@ static __always_inline bool is_percpu_th
+ #endif
+ }
+ 
++/* Is the current task guaranteed to stay on its current CPU? */
++static inline bool is_migratable(void)
++{
++#ifdef CONFIG_SMP
++	return preemptible() && !current->migration_disabled;
++#else
++	return false;
++#endif
++}
++
+ /* Per-process atomic flags. */
+ #define PFA_NO_NEW_PRIVS		0	/* May not gain new privileges. */
+ #define PFA_SPREAD_PAGE			1	/* Spread page cache over cpuset */
diff --git a/debian/patches-rt/scsi_fcoe__Make_RT_aware..patch b/debian/patches-rt/scsi_fcoe__Make_RT_aware..patch
new file mode 100644
index 000000000000..b81e92e6ee8d
--- /dev/null
+++ b/debian/patches-rt/scsi_fcoe__Make_RT_aware..patch
@@ -0,0 +1,110 @@
+Subject: scsi/fcoe: Make RT aware.
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Sat Nov 12 14:00:48 2011 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Do not disable preemption while taking sleeping locks. All user look safe
+for migrate_diable() only.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ drivers/scsi/fcoe/fcoe.c      |   16 ++++++++--------
+ drivers/scsi/fcoe/fcoe_ctlr.c |    4 ++--
+ drivers/scsi/libfc/fc_exch.c  |    4 ++--
+ 3 files changed, 12 insertions(+), 12 deletions(-)
+---
+--- a/drivers/scsi/fcoe/fcoe.c
++++ b/drivers/scsi/fcoe/fcoe.c
+@@ -1450,11 +1450,11 @@ static int fcoe_rcv(struct sk_buff *skb,
+ static int fcoe_alloc_paged_crc_eof(struct sk_buff *skb, int tlen)
+ {
+ 	struct fcoe_percpu_s *fps;
+-	int rc;
++	int rc, cpu = get_cpu_light();
+ 
+-	fps = &get_cpu_var(fcoe_percpu);
++	fps = &per_cpu(fcoe_percpu, cpu);
+ 	rc = fcoe_get_paged_crc_eof(skb, tlen, fps);
+-	put_cpu_var(fcoe_percpu);
++	put_cpu_light();
+ 
+ 	return rc;
+ }
+@@ -1639,11 +1639,11 @@ static inline int fcoe_filter_frames(str
+ 		return 0;
+ 	}
+ 
+-	stats = per_cpu_ptr(lport->stats, get_cpu());
++	stats = per_cpu_ptr(lport->stats, get_cpu_light());
+ 	stats->InvalidCRCCount++;
+ 	if (stats->InvalidCRCCount < 5)
+ 		printk(KERN_WARNING "fcoe: dropping frame with CRC error\n");
+-	put_cpu();
++	put_cpu_light();
+ 	return -EINVAL;
+ }
+ 
+@@ -1684,7 +1684,7 @@ static void fcoe_recv_frame(struct sk_bu
+ 	 */
+ 	hp = (struct fcoe_hdr *) skb_network_header(skb);
+ 
+-	stats = per_cpu_ptr(lport->stats, get_cpu());
++	stats = per_cpu_ptr(lport->stats, get_cpu_light());
+ 	if (unlikely(FC_FCOE_DECAPS_VER(hp) != FC_FCOE_VER)) {
+ 		if (stats->ErrorFrames < 5)
+ 			printk(KERN_WARNING "fcoe: FCoE version "
+@@ -1716,13 +1716,13 @@ static void fcoe_recv_frame(struct sk_bu
+ 		goto drop;
+ 
+ 	if (!fcoe_filter_frames(lport, fp)) {
+-		put_cpu();
++		put_cpu_light();
+ 		fc_exch_recv(lport, fp);
+ 		return;
+ 	}
+ drop:
+ 	stats->ErrorFrames++;
+-	put_cpu();
++	put_cpu_light();
+ 	kfree_skb(skb);
+ }
+ 
+--- a/drivers/scsi/fcoe/fcoe_ctlr.c
++++ b/drivers/scsi/fcoe/fcoe_ctlr.c
+@@ -828,7 +828,7 @@ static unsigned long fcoe_ctlr_age_fcfs(
+ 
+ 	INIT_LIST_HEAD(&del_list);
+ 
+-	stats = per_cpu_ptr(fip->lp->stats, get_cpu());
++	stats = per_cpu_ptr(fip->lp->stats, get_cpu_light());
+ 
+ 	list_for_each_entry_safe(fcf, next, &fip->fcfs, list) {
+ 		deadline = fcf->time + fcf->fka_period + fcf->fka_period / 2;
+@@ -864,7 +864,7 @@ static unsigned long fcoe_ctlr_age_fcfs(
+ 				sel_time = fcf->time;
+ 		}
+ 	}
+-	put_cpu();
++	put_cpu_light();
+ 
+ 	list_for_each_entry_safe(fcf, next, &del_list, list) {
+ 		/* Removes fcf from current list */
+--- a/drivers/scsi/libfc/fc_exch.c
++++ b/drivers/scsi/libfc/fc_exch.c
+@@ -825,10 +825,10 @@ static struct fc_exch *fc_exch_em_alloc(
+ 	}
+ 	memset(ep, 0, sizeof(*ep));
+ 
+-	cpu = get_cpu();
++	cpu = get_cpu_light();
+ 	pool = per_cpu_ptr(mp->pool, cpu);
+ 	spin_lock_bh(&pool->lock);
+-	put_cpu();
++	put_cpu_light();
+ 
+ 	/* peek cache of free slot */
+ 	if (pool->left != FC_XID_UNKNOWN) {
diff --git a/debian/patches-rt/serial__8250__implement_write_atomic.patch b/debian/patches-rt/serial__8250__implement_write_atomic.patch
new file mode 100644
index 000000000000..efd918578f1c
--- /dev/null
+++ b/debian/patches-rt/serial__8250__implement_write_atomic.patch
@@ -0,0 +1,485 @@
+Subject: serial: 8250: implement write_atomic
+From: John Ogness <john.ogness@linutronix.de>
+Date: Mon Nov 30 01:42:02 2020 +0106
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: John Ogness <john.ogness@linutronix.de>
+
+Implement a non-sleeping NMI-safe write_atomic() console function in
+order to support emergency console printing.
+
+Since interrupts need to be disabled during transmit, all usage of
+the IER register is wrapped with access functions that use the
+console_atomic_lock() function to synchronize register access while
+tracking the state of the interrupts. This is necessary because
+write_atomic() can be called from an NMI context that has preempted
+write_atomic().
+
+Signed-off-by: John Ogness <john.ogness@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+---
+ drivers/tty/serial/8250/8250.h         |   47 ++++++++++++++++
+ drivers/tty/serial/8250/8250_core.c    |   17 ++++--
+ drivers/tty/serial/8250/8250_fsl.c     |    9 +++
+ drivers/tty/serial/8250/8250_ingenic.c |    7 ++
+ drivers/tty/serial/8250/8250_mtk.c     |   29 +++++++++-
+ drivers/tty/serial/8250/8250_port.c    |   92 ++++++++++++++++++++-------------
+ include/linux/serial_8250.h            |    5 +
+ 7 files changed, 162 insertions(+), 44 deletions(-)
+---
+--- a/drivers/tty/serial/8250/8250.h
++++ b/drivers/tty/serial/8250/8250.h
+@@ -132,12 +132,55 @@ static inline void serial_dl_write(struc
+ 	up->dl_write(up, value);
+ }
+ 
++static inline void serial8250_set_IER(struct uart_8250_port *up,
++				      unsigned char ier)
++{
++	struct uart_port *port = &up->port;
++	unsigned long flags;
++	bool is_console;
++
++	is_console = uart_console(port);
++
++	if (is_console)
++		console_atomic_lock(flags);
++
++	serial_out(up, UART_IER, ier);
++
++	if (is_console)
++		console_atomic_unlock(flags);
++}
++
++static inline unsigned char serial8250_clear_IER(struct uart_8250_port *up)
++{
++	struct uart_port *port = &up->port;
++	unsigned int clearval = 0;
++	unsigned long flags;
++	unsigned int prior;
++	bool is_console;
++
++	is_console = uart_console(port);
++
++	if (up->capabilities & UART_CAP_UUE)
++		clearval = UART_IER_UUE;
++
++	if (is_console)
++		console_atomic_lock(flags);
++
++	prior = serial_port_in(port, UART_IER);
++	serial_port_out(port, UART_IER, clearval);
++
++	if (is_console)
++		console_atomic_unlock(flags);
++
++	return prior;
++}
++
+ static inline bool serial8250_set_THRI(struct uart_8250_port *up)
+ {
+ 	if (up->ier & UART_IER_THRI)
+ 		return false;
+ 	up->ier |= UART_IER_THRI;
+-	serial_out(up, UART_IER, up->ier);
++	serial8250_set_IER(up, up->ier);
+ 	return true;
+ }
+ 
+@@ -146,7 +189,7 @@ static inline bool serial8250_clear_THRI
+ 	if (!(up->ier & UART_IER_THRI))
+ 		return false;
+ 	up->ier &= ~UART_IER_THRI;
+-	serial_out(up, UART_IER, up->ier);
++	serial8250_set_IER(up, up->ier);
+ 	return true;
+ }
+ 
+--- a/drivers/tty/serial/8250/8250_core.c
++++ b/drivers/tty/serial/8250/8250_core.c
+@@ -264,10 +264,8 @@ static void serial8250_backup_timeout(st
+ 	 * Must disable interrupts or else we risk racing with the interrupt
+ 	 * based handler.
+ 	 */
+-	if (up->port.irq) {
+-		ier = serial_in(up, UART_IER);
+-		serial_out(up, UART_IER, 0);
+-	}
++	if (up->port.irq)
++		ier = serial8250_clear_IER(up);
+ 
+ 	iir = serial_in(up, UART_IIR);
+ 
+@@ -290,7 +288,7 @@ static void serial8250_backup_timeout(st
+ 		serial8250_tx_chars(up);
+ 
+ 	if (up->port.irq)
+-		serial_out(up, UART_IER, ier);
++		serial8250_set_IER(up, ier);
+ 
+ 	spin_unlock_irqrestore(&up->port.lock, flags);
+ 
+@@ -568,6 +566,14 @@ serial8250_register_ports(struct uart_dr
+ 
+ #ifdef CONFIG_SERIAL_8250_CONSOLE
+ 
++static void univ8250_console_write_atomic(struct console *co, const char *s,
++					  unsigned int count)
++{
++	struct uart_8250_port *up = &serial8250_ports[co->index];
++
++	serial8250_console_write_atomic(up, s, count);
++}
++
+ static void univ8250_console_write(struct console *co, const char *s,
+ 				   unsigned int count)
+ {
+@@ -661,6 +667,7 @@ static int univ8250_console_match(struct
+ 
+ static struct console univ8250_console = {
+ 	.name		= "ttyS",
++	.write_atomic	= univ8250_console_write_atomic,
+ 	.write		= univ8250_console_write,
+ 	.device		= uart_console_device,
+ 	.setup		= univ8250_console_setup,
+--- a/drivers/tty/serial/8250/8250_fsl.c
++++ b/drivers/tty/serial/8250/8250_fsl.c
+@@ -56,9 +56,18 @@ int fsl8250_handle_irq(struct uart_port
+ 
+ 	/* Stop processing interrupts on input overrun */
+ 	if ((orig_lsr & UART_LSR_OE) && (up->overrun_backoff_time_ms > 0)) {
++		unsigned long flags;
+ 		unsigned long delay;
++		bool is_console;
+ 
++		is_console = uart_console(port);
++
++		if (is_console)
++			console_atomic_lock(flags);
+ 		up->ier = port->serial_in(port, UART_IER);
++		if (is_console)
++			console_atomic_unlock(flags);
++
+ 		if (up->ier & (UART_IER_RLSI | UART_IER_RDI)) {
+ 			port->ops->stop_rx(port);
+ 		} else {
+--- a/drivers/tty/serial/8250/8250_ingenic.c
++++ b/drivers/tty/serial/8250/8250_ingenic.c
+@@ -146,6 +146,8 @@ OF_EARLYCON_DECLARE(x1000_uart, "ingenic
+ 
+ static void ingenic_uart_serial_out(struct uart_port *p, int offset, int value)
+ {
++	unsigned long flags;
++	bool is_console;
+ 	int ier;
+ 
+ 	switch (offset) {
+@@ -167,7 +169,12 @@ static void ingenic_uart_serial_out(stru
+ 		 * If we have enabled modem status IRQs we should enable
+ 		 * modem mode.
+ 		 */
++		is_console = uart_console(p);
++		if (is_console)
++			console_atomic_lock(flags);
+ 		ier = p->serial_in(p, UART_IER);
++		if (is_console)
++			console_atomic_unlock(flags);
+ 
+ 		if (ier & UART_IER_MSI)
+ 			value |= UART_MCR_MDCE | UART_MCR_FCM;
+--- a/drivers/tty/serial/8250/8250_mtk.c
++++ b/drivers/tty/serial/8250/8250_mtk.c
+@@ -218,12 +218,37 @@ static void mtk8250_shutdown(struct uart
+ 
+ static void mtk8250_disable_intrs(struct uart_8250_port *up, int mask)
+ {
+-	serial_out(up, UART_IER, serial_in(up, UART_IER) & (~mask));
++	struct uart_port *port = &up->port;
++	unsigned long flags;
++	unsigned int ier;
++	bool is_console;
++
++	is_console = uart_console(port);
++
++	if (is_console)
++		console_atomic_lock(flags);
++
++	ier = serial_in(up, UART_IER);
++	serial_out(up, UART_IER, ier & (~mask));
++
++	if (is_console)
++		console_atomic_unlock(flags);
+ }
+ 
+ static void mtk8250_enable_intrs(struct uart_8250_port *up, int mask)
+ {
+-	serial_out(up, UART_IER, serial_in(up, UART_IER) | mask);
++	struct uart_port *port = &up->port;
++	unsigned long flags;
++	unsigned int ier;
++
++	if (uart_console(port))
++		console_atomic_lock(flags);
++
++	ier = serial_in(up, UART_IER);
++	serial_out(up, UART_IER, ier | mask);
++
++	if (uart_console(port))
++		console_atomic_unlock(flags);
+ }
+ 
+ static void mtk8250_set_flow_ctrl(struct uart_8250_port *up, int mode)
+--- a/drivers/tty/serial/8250/8250_port.c
++++ b/drivers/tty/serial/8250/8250_port.c
+@@ -762,7 +762,7 @@ static void serial8250_set_sleep(struct
+ 			serial_out(p, UART_EFR, UART_EFR_ECB);
+ 			serial_out(p, UART_LCR, 0);
+ 		}
+-		serial_out(p, UART_IER, sleep ? UART_IERX_SLEEP : 0);
++		serial8250_set_IER(p, sleep ? UART_IERX_SLEEP : 0);
+ 		if (p->capabilities & UART_CAP_EFR) {
+ 			serial_out(p, UART_LCR, UART_LCR_CONF_MODE_B);
+ 			serial_out(p, UART_EFR, efr);
+@@ -1436,7 +1436,7 @@ static void serial8250_stop_rx(struct ua
+ 
+ 	up->ier &= ~(UART_IER_RLSI | UART_IER_RDI);
+ 	up->port.read_status_mask &= ~UART_LSR_DR;
+-	serial_port_out(port, UART_IER, up->ier);
++	serial8250_set_IER(up, up->ier);
+ 
+ 	serial8250_rpm_put(up);
+ }
+@@ -1466,7 +1466,7 @@ void serial8250_em485_stop_tx(struct uar
+ 		serial8250_clear_and_reinit_fifos(p);
+ 
+ 		p->ier |= UART_IER_RLSI | UART_IER_RDI;
+-		serial_port_out(&p->port, UART_IER, p->ier);
++		serial8250_set_IER(p, p->ier);
+ 	}
+ }
+ EXPORT_SYMBOL_GPL(serial8250_em485_stop_tx);
+@@ -1688,7 +1688,7 @@ static void serial8250_disable_ms(struct
+ 	mctrl_gpio_disable_ms(up->gpios);
+ 
+ 	up->ier &= ~UART_IER_MSI;
+-	serial_port_out(port, UART_IER, up->ier);
++	serial8250_set_IER(up, up->ier);
+ }
+ 
+ static void serial8250_enable_ms(struct uart_port *port)
+@@ -1704,7 +1704,7 @@ static void serial8250_enable_ms(struct
+ 	up->ier |= UART_IER_MSI;
+ 
+ 	serial8250_rpm_get(up);
+-	serial_port_out(port, UART_IER, up->ier);
++	serial8250_set_IER(up, up->ier);
+ 	serial8250_rpm_put(up);
+ }
+ 
+@@ -2132,14 +2132,7 @@ static void serial8250_put_poll_char(str
+ 	struct uart_8250_port *up = up_to_u8250p(port);
+ 
+ 	serial8250_rpm_get(up);
+-	/*
+-	 *	First save the IER then disable the interrupts
+-	 */
+-	ier = serial_port_in(port, UART_IER);
+-	if (up->capabilities & UART_CAP_UUE)
+-		serial_port_out(port, UART_IER, UART_IER_UUE);
+-	else
+-		serial_port_out(port, UART_IER, 0);
++	ier = serial8250_clear_IER(up);
+ 
+ 	wait_for_xmitr(up, BOTH_EMPTY);
+ 	/*
+@@ -2152,7 +2145,7 @@ static void serial8250_put_poll_char(str
+ 	 *	and restore the IER
+ 	 */
+ 	wait_for_xmitr(up, BOTH_EMPTY);
+-	serial_port_out(port, UART_IER, ier);
++	serial8250_set_IER(up, ier);
+ 	serial8250_rpm_put(up);
+ }
+ 
+@@ -2455,7 +2448,7 @@ void serial8250_do_shutdown(struct uart_
+ 	 */
+ 	spin_lock_irqsave(&port->lock, flags);
+ 	up->ier = 0;
+-	serial_port_out(port, UART_IER, 0);
++	serial8250_set_IER(up, 0);
+ 	spin_unlock_irqrestore(&port->lock, flags);
+ 
+ 	synchronize_irq(port->irq);
+@@ -2837,7 +2830,7 @@ serial8250_do_set_termios(struct uart_po
+ 	if (up->capabilities & UART_CAP_RTOIE)
+ 		up->ier |= UART_IER_RTOIE;
+ 
+-	serial_port_out(port, UART_IER, up->ier);
++	serial8250_set_IER(up, up->ier);
+ 
+ 	if (up->capabilities & UART_CAP_EFR) {
+ 		unsigned char efr = 0;
+@@ -3303,7 +3296,7 @@ EXPORT_SYMBOL_GPL(serial8250_set_default
+ 
+ #ifdef CONFIG_SERIAL_8250_CONSOLE
+ 
+-static void serial8250_console_putchar(struct uart_port *port, int ch)
++static void serial8250_console_putchar_locked(struct uart_port *port, int ch)
+ {
+ 	struct uart_8250_port *up = up_to_u8250p(port);
+ 
+@@ -3311,6 +3304,18 @@ static void serial8250_console_putchar(s
+ 	serial_port_out(port, UART_TX, ch);
+ }
+ 
++static void serial8250_console_putchar(struct uart_port *port, int ch)
++{
++	struct uart_8250_port *up = up_to_u8250p(port);
++	unsigned long flags;
++
++	wait_for_xmitr(up, UART_LSR_THRE);
++
++	console_atomic_lock(flags);
++	serial8250_console_putchar_locked(port, ch);
++	console_atomic_unlock(flags);
++}
++
+ /*
+  *	Restore serial console when h/w power-off detected
+  */
+@@ -3332,6 +3337,32 @@ static void serial8250_console_restore(s
+ 	serial8250_out_MCR(up, UART_MCR_DTR | UART_MCR_RTS);
+ }
+ 
++void serial8250_console_write_atomic(struct uart_8250_port *up,
++				     const char *s, unsigned int count)
++{
++	struct uart_port *port = &up->port;
++	unsigned long flags;
++	unsigned int ier;
++
++	console_atomic_lock(flags);
++
++	touch_nmi_watchdog();
++
++	ier = serial8250_clear_IER(up);
++
++	if (atomic_fetch_inc(&up->console_printing)) {
++		uart_console_write(port, "\n", 1,
++				   serial8250_console_putchar_locked);
++	}
++	uart_console_write(port, s, count, serial8250_console_putchar_locked);
++	atomic_dec(&up->console_printing);
++
++	wait_for_xmitr(up, BOTH_EMPTY);
++	serial8250_set_IER(up, ier);
++
++	console_atomic_unlock(flags);
++}
++
+ /*
+  *	Print a string to the serial port trying not to disturb
+  *	any possible real use of the port...
+@@ -3348,24 +3379,12 @@ void serial8250_console_write(struct uar
+ 	struct uart_port *port = &up->port;
+ 	unsigned long flags;
+ 	unsigned int ier;
+-	int locked = 1;
+ 
+ 	touch_nmi_watchdog();
+ 
+-	if (oops_in_progress)
+-		locked = spin_trylock_irqsave(&port->lock, flags);
+-	else
+-		spin_lock_irqsave(&port->lock, flags);
+-
+-	/*
+-	 *	First save the IER then disable the interrupts
+-	 */
+-	ier = serial_port_in(port, UART_IER);
++	spin_lock_irqsave(&port->lock, flags);
+ 
+-	if (up->capabilities & UART_CAP_UUE)
+-		serial_port_out(port, UART_IER, UART_IER_UUE);
+-	else
+-		serial_port_out(port, UART_IER, 0);
++	ier = serial8250_clear_IER(up);
+ 
+ 	/* check scratch reg to see if port powered off during system sleep */
+ 	if (up->canary && (up->canary != serial_port_in(port, UART_SCR))) {
+@@ -3379,7 +3398,9 @@ void serial8250_console_write(struct uar
+ 		mdelay(port->rs485.delay_rts_before_send);
+ 	}
+ 
++	atomic_inc(&up->console_printing);
+ 	uart_console_write(port, s, count, serial8250_console_putchar);
++	atomic_dec(&up->console_printing);
+ 
+ 	/*
+ 	 *	Finally, wait for transmitter to become empty
+@@ -3392,8 +3413,7 @@ void serial8250_console_write(struct uar
+ 		if (em485->tx_stopped)
+ 			up->rs485_stop_tx(up);
+ 	}
+-
+-	serial_port_out(port, UART_IER, ier);
++	serial8250_set_IER(up, ier);
+ 
+ 	/*
+ 	 *	The receive handling will happen properly because the
+@@ -3405,8 +3425,7 @@ void serial8250_console_write(struct uar
+ 	if (up->msr_saved_flags)
+ 		serial8250_modem_status(up);
+ 
+-	if (locked)
+-		spin_unlock_irqrestore(&port->lock, flags);
++	spin_unlock_irqrestore(&port->lock, flags);
+ }
+ 
+ static unsigned int probe_baud(struct uart_port *port)
+@@ -3426,6 +3445,7 @@ static unsigned int probe_baud(struct ua
+ 
+ int serial8250_console_setup(struct uart_port *port, char *options, bool probe)
+ {
++	struct uart_8250_port *up = up_to_u8250p(port);
+ 	int baud = 9600;
+ 	int bits = 8;
+ 	int parity = 'n';
+@@ -3435,6 +3455,8 @@ int serial8250_console_setup(struct uart
+ 	if (!port->iobase && !port->membase)
+ 		return -ENODEV;
+ 
++	atomic_set(&up->console_printing, 0);
++
+ 	if (options)
+ 		uart_parse_options(options, &baud, &parity, &bits, &flow);
+ 	else if (probe)
+--- a/include/linux/serial_8250.h
++++ b/include/linux/serial_8250.h
+@@ -7,6 +7,7 @@
+ #ifndef _LINUX_SERIAL_8250_H
+ #define _LINUX_SERIAL_8250_H
+ 
++#include <linux/atomic.h>
+ #include <linux/serial_core.h>
+ #include <linux/serial_reg.h>
+ #include <linux/platform_device.h>
+@@ -125,6 +126,8 @@ struct uart_8250_port {
+ #define MSR_SAVE_FLAGS UART_MSR_ANY_DELTA
+ 	unsigned char		msr_saved_flags;
+ 
++	atomic_t		console_printing;
++
+ 	struct uart_8250_dma	*dma;
+ 	const struct uart_8250_ops *ops;
+ 
+@@ -180,6 +183,8 @@ void serial8250_init_port(struct uart_82
+ void serial8250_set_defaults(struct uart_8250_port *up);
+ void serial8250_console_write(struct uart_8250_port *up, const char *s,
+ 			      unsigned int count);
++void serial8250_console_write_atomic(struct uart_8250_port *up, const char *s,
++				     unsigned int count);
+ int serial8250_console_setup(struct uart_port *port, char *options, bool probe);
+ int serial8250_console_exit(struct uart_port *port);
+ 
diff --git a/debian/patches-rt/series b/debian/patches-rt/series
new file mode 100644
index 000000000000..2a0ffdb3ef3e
--- /dev/null
+++ b/debian/patches-rt/series
@@ -0,0 +1,230 @@
+# Applied upstream
+
+###########################################################################
+# Valentin's PCP fixes
+###########################################################################
+# Temp RCU patch, Frederick is working on something, too.
+rcu-tree-Protect-rcu_rdp_is_offloaded-invocations-on.patch
+sched_introduce_migratable.patch
+arm64_mm_make_arch_faults_on_old_pte_check_for_migratability.patch
+
+###########################################################################
+# John's printk queue
+###########################################################################
+printk__rename_printk_cpulock_API_and_always_disable_interrupts.patch
+console__add_write_atomic_interface.patch
+kdb__only_use_atomic_consoles_for_output_mirroring.patch
+serial__8250__implement_write_atomic.patch
+printk__relocate_printk_delay.patch
+printk__call_boot_delay_msec_in_printk_delay.patch
+printk__use_seqcount_latch_for_console_seq.patch
+printk__introduce_kernel_sync_mode.patch
+printk__move_console_printing_to_kthreads.patch
+printk__remove_deferred_printing.patch
+printk__add_console_handover.patch
+printk__add_pr_flush.patch
+printk__Enhance_the_condition_check_of_msleep_in_pr_flush.patch
+
+###########################################################################
+# Posted and applied
+###########################################################################
+mm-Disable-zsmalloc-on-PREEMPT_RT.patch
+
+###########################################################################
+# Posted
+###########################################################################
+irq_poll-Use-raise_softirq_irqoff-in-cpu_dead-notifi.patch
+smp_wake_ksoftirqd_on_preempt_rt_instead_do_softirq.patch
+fs-namespace-Boost-the-mount_lock.lock-owner-instead.patch
+fscache-Use-only-one-fscache_object_cong_wait.patch
+kernel-locking-Use-a-pointer-in-ww_mutex_trylock.patch
+
+# sched
+0001_kernel_fork_redo_ifdefs_around_task_s_handling.patch
+0002_kernel_fork_duplicate_task_struct_before_stack_allocation.patch
+0003_kernel_fork_ia64_provide_a_alloc_thread_stack_node_for_ia64.patch
+0004_kernel_fork_don_t_assign_the_stack_pointer_in_dup_task_struct.patch
+0005_kernel_fork_move_memcg_charge_kernel_stack_into_config_vmap_stack.patch
+0006_kernel_fork_move_task_stack_account_to_do_exit.patch
+0007_kernel_fork_only_cache_the_vmap_stack_in_finish_task_switch.patch
+0008_kernel_fork_use_is_enabled_in_account_kernel_stack.patch
+
+###########################################################################
+# Post
+###########################################################################
+cgroup__use_irqsave_in_cgroup_rstat_flush_locked.patch
+mm__workingset__replace_IRQ-off_check_with_a_lockdep_assert..patch
+tcp__Remove_superfluous_BH-disable_around_listening_hash.patch
+
+###########################################################################
+# Kconfig bits:
+###########################################################################
+jump-label__disable_if_stop_machine_is_used.patch
+
+###########################################################################
+# Locking: RT bits. Need review
+###########################################################################
+locking-Remove-rt_rwlock_is_contended.patch
+lockdep-selftests-Avoid-using-local_lock_-acquire-re.patch
+0001-sched-Trigger-warning-if-migration_disabled-counter-.patch
+0003-rtmutex-Add-a-special-case-for-ww-mutex-handling.patch
+0004-rtmutex-Add-rt_mutex_lock_nest_lock-and-rt_mutex_loc.patch
+0005-lockdep-Make-it-RT-aware.patch
+0006-lockdep-selftests-Add-rtmutex-to-the-last-column.patch
+0007-lockdep-selftests-Unbalanced-migrate_disable-rcu_rea.patch
+0008-lockdep-selftests-Skip-the-softirq-related-tests-on-.patch
+0010-lockdep-selftests-Adapt-ww-tests-for-PREEMPT_RT.patch
+x86-mm-Include-spinlock_t-definition-in-pgtable.patch
+locking-Allow-to-include-asm-spinlock_types.h-from-l.patch
+
+###########################################################################
+# preempt: Conditional variants
+###########################################################################
+sched-Make-preempt_enable_no_resched-behave-like-pre.patch
+
+###########################################################################
+# sched:
+###########################################################################
+# cpu-light
+kernel_sched__add_putget_cpu_light.patch
+block_mq__do_not_invoke_preempt_disable.patch
+md__raid5__Make_raid5_percpu_handling_RT_aware.patch
+scsi_fcoe__Make_RT_aware..patch
+mm_vmalloc__Another_preempt_disable_region_which_sucks.patch
+net__Remove_preemption_disabling_in_netif_rx.patch
+sunrpc__Make_svc_xprt_do_enqueue_use_get_cpu_light.patch
+crypto__cryptd_-_add_a_lock_instead_preempt_disable_local_bh_disable.patch
+
+###########################################################################
+# softirq:
+###########################################################################
+softirq__Check_preemption_after_reenabling_interrupts.patch
+
+###########################################################################
+# mm: Assorted RT bits. Need care
+###########################################################################
+u64_stats__Disable_preemption_on_32bit-UP_SMP_with_RT_during_updates.patch
+
+###########################################################################
+# Disable memcontrol for now. The protection scopes are FUBARed
+###########################################################################
+mm-memcontro--Disable-on-PREEMPT_RT.patch
+#mm_memcontrol__Disable_preemption_in___mod_memcg_lruvec_state.patch
+#mm__memcontrol__Replace_disable-IRQ_locking_with_a_local_lock.patch
+#mm_memcontrol__Dont_call_schedule_work_on_in_preemption_disabled_context.patch
+#mm_memcontrol__Replace_local_irq_disable_with_local_locks.patch
+
+###########################################################################
+# ptrace: Revisit
+###########################################################################
+signal__Revert_ptrace_preempt_magic.patch
+ptrace__fix_ptrace_vs_tasklist_lock_race.patch
+
+###########################################################################
+# fs: The namespace part needs a proper fix
+###########################################################################
+fs_dcache__use_swait_queue_instead_of_waitqueue.patch
+fs_dcache__disable_preemption_on_i_dir_seqs_write_side.patch
+
+###########################################################################
+# RCU
+###########################################################################
+rcu__Delay_RCU-selftests.patch
+
+###########################################################################
+# net:
+###########################################################################
+net_core__use_local_bh_disable_in_netif_rx_ni.patch
+net__Use_skbufhead_with_raw_lock.patch
+net__Dequeue_in_dev_cpu_dead_without_the_lock.patch
+net__dev__always_take_qdiscs_busylock_in___dev_xmit_skb.patch
+
+###########################################################################
+# randomness:
+###########################################################################
+panic__skip_get_random_bytes_for_RT_FULL_in_init_oops_id.patch
+x86__stackprotector__Avoid_random_pool_on_rt.patch
+random__Make_it_work_on_rt.patch
+
+###########################################################################
+# DRM:
+###########################################################################
+0002-drm-i915-Don-t-disable-interrupts-and-pretend-a-lock.patch
+0003-drm-i915-Use-preempt_disable-enable_rt-where-recomme.patch
+0004-drm-i915-Don-t-disable-interrupts-on-PREEMPT_RT-duri.patch
+0005-drm-i915-Don-t-check-for-atomic-context-on-PREEMPT_R.patch
+0006-drm-i915-Disable-tracing-points-on-PREEMPT_RT.patch
+0007-drm-i915-skip-DRM_I915_LOW_LEVEL_TRACEPOINTS-with-NO.patch
+0008-drm-i915-gt-Queue-and-wait-for-the-irq_work-item.patch
+0009-drm-i915-gt-Use-spin_lock_irq-instead-of-local_irq_d.patch
+0010-drm-i915-Drop-the-irqs_disabled-check.patch
+
+###########################################################################
+# X86:
+###########################################################################
+signal_x86__Delay_calling_signals_in_atomic.patch
+x86__kvm_Require_const_tsc_for_RT.patch
+x86__Allow_to_enable_RT.patch
+x86__Enable_RT_also_on_32bit.patch
+
+###########################################################################
+# For later, not essencial
+###########################################################################
+virt-acrn-Remove-unsued-acrn_irqfds_mutex.patch
+tpm_tis__fix_stall_after_iowrites.patch
+drivers_block_zram__Replace_bit_spinlocks_with_rtmutex_for_-rt.patch
+generic-softirq-Disable-softirq-stacks-on-PREEMPT_RT.patch
+softirq-Disable-softirq-stacks-on-PREEMPT_RT.patch
+
+# zsmalloc
+0001_zsmalloc_introduce_some_helper_functions.patch
+0002_zsmalloc_rename_zs_stat_type_to_class_stat_type.patch
+0003_zsmalloc_decouple_class_actions_from_zspage_works.patch
+0004_zsmalloc_introduce_obj_allocated.patch
+0005_zsmalloc_move_huge_compressed_obj_from_page_to_zspage.patch
+0006_zsmalloc_remove_zspage_isolation_for_migration.patch
+0007_locking_rwlocks_introduce_write_lock_nested.patch
+0008_zsmalloc_replace_per_zpage_lock_with_pool_migrate_lock.patch
+0009_zsmalloc_replace_get_cpu_var_with_local_lock.patch
+zsmalloc-enable.patch
+
+###########################################################################
+# Lazy preemption
+###########################################################################
+sched__Add_support_for_lazy_preemption.patch
+x86_entry__Use_should_resched_in_idtentry_exit_cond_resched.patch
+x86__Support_for_lazy_preemption.patch
+entry--Fix-the-preempt-lazy-fallout.patch
+arm__Add_support_for_lazy_preemption.patch
+powerpc__Add_support_for_lazy_preemption.patch
+arch_arm64__Add_lazy_preempt_support.patch
+
+###########################################################################
+# ARM/ARM64
+###########################################################################
+ARM__enable_irq_in_translation_section_permission_fault_handlers.patch
+KVM__arm_arm64__downgrade_preempt_disabled_region_to_migrate_disable.patch
+arm64-sve-Delay-freeing-memory-in-fpsimd_flush_threa.patch
+arm64-sve-Make-kernel-FPU-protection-RT-friendly.patch
+arm64-signal-Use-ARCH_RT_DELAYS_SIGNAL_SEND.patch
+tty_serial_omap__Make_the_locking_RT_aware.patch
+tty_serial_pl011__Make_the_locking_work_on_RT.patch
+ARM__Allow_to_enable_RT.patch
+ARM64__Allow_to_enable_RT.patch
+
+###########################################################################
+# POWERPC
+###########################################################################
+powerpc__traps__Use_PREEMPT_RT.patch
+powerpc_pseries_iommu__Use_a_locallock_instead_local_irq_save.patch
+powerpc_kvm__Disable_in-kernel_MPIC_emulation_for_PREEMPT_RT.patch
+powerpc_stackprotector__work_around_stack-guard_init_from_atomic.patch
+POWERPC__Allow_to_enable_RT.patch
+
+# Sysfs file vs uname() -v
+sysfs__Add__sys_kernel_realtime_entry.patch
+
+###########################################################################
+# RT release version
+###########################################################################
+Add_localversion_for_-RT_release.patch
diff --git a/debian/patches-rt/signal__Revert_ptrace_preempt_magic.patch b/debian/patches-rt/signal__Revert_ptrace_preempt_magic.patch
new file mode 100644
index 000000000000..740557b4468a
--- /dev/null
+++ b/debian/patches-rt/signal__Revert_ptrace_preempt_magic.patch
@@ -0,0 +1,37 @@
+Subject: signal: Revert ptrace preempt magic
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Wed Sep 21 19:57:12 2011 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Upstream commit '53da1d9456fe7f8 fix ptrace slowness' is nothing more
+than a bandaid around the ptrace design trainwreck. It's not a
+correctness issue, it's merily a cosmetic bandaid.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ kernel/signal.c |    8 --------
+ 1 file changed, 8 deletions(-)
+---
+--- a/kernel/signal.c
++++ b/kernel/signal.c
+@@ -2271,16 +2271,8 @@ static void ptrace_stop(int exit_code, i
+ 		if (gstop_done && ptrace_reparented(current))
+ 			do_notify_parent_cldstop(current, false, why);
+ 
+-		/*
+-		 * Don't want to allow preemption here, because
+-		 * sys_ptrace() needs this task to be inactive.
+-		 *
+-		 * XXX: implement read_unlock_no_resched().
+-		 */
+-		preempt_disable();
+ 		read_unlock(&tasklist_lock);
+ 		cgroup_enter_frozen();
+-		preempt_enable_no_resched();
+ 		freezable_schedule();
+ 		cgroup_leave_frozen(true);
+ 	} else {
diff --git a/debian/patches-rt/signal_x86__Delay_calling_signals_in_atomic.patch b/debian/patches-rt/signal_x86__Delay_calling_signals_in_atomic.patch
new file mode 100644
index 000000000000..6c1980225400
--- /dev/null
+++ b/debian/patches-rt/signal_x86__Delay_calling_signals_in_atomic.patch
@@ -0,0 +1,134 @@
+Subject: signal/x86: Delay calling signals in atomic
+From: Oleg Nesterov <oleg@redhat.com>
+Date: Tue Jul 14 14:26:34 2015 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Oleg Nesterov <oleg@redhat.com>
+
+On x86_64 we must disable preemption before we enable interrupts
+for stack faults, int3 and debugging, because the current task is using
+a per CPU debug stack defined by the IST. If we schedule out, another task
+can come in and use the same stack and cause the stack to be corrupted
+and crash the kernel on return.
+
+When CONFIG_PREEMPT_RT is enabled, spin_locks become mutexes, and
+one of these is the spin lock used in signal handling.
+
+Some of the debug code (int3) causes do_trap() to send a signal.
+This function calls a spin lock that has been converted to a mutex
+and has the possibility to sleep. If this happens, the above issues with
+the corrupted stack is possible.
+
+Instead of calling the signal right away, for PREEMPT_RT and x86_64,
+the signal information is stored on the stacks task_struct and
+TIF_NOTIFY_RESUME is set. Then on exit of the trap, the signal resume
+code will send the signal when preemption is enabled.
+
+[ rostedt: Switched from #ifdef CONFIG_PREEMPT_RT to
+  ARCH_RT_DELAYS_SIGNAL_SEND and added comments to the code. ]
+
+
+Signed-off-by: Oleg Nesterov <oleg@redhat.com>
+Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+[bigeasy: also needed on 32bit as per Yang Shi <yang.shi@linaro.org>]
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/x86/include/asm/signal.h |   13 +++++++++++++
+ include/linux/sched.h         |    4 ++++
+ kernel/entry/common.c         |    8 ++++++++
+ kernel/signal.c               |   28 ++++++++++++++++++++++++++++
+ 4 files changed, 53 insertions(+)
+---
+--- a/arch/x86/include/asm/signal.h
++++ b/arch/x86/include/asm/signal.h
+@@ -28,6 +28,19 @@ typedef struct {
+ #define SA_IA32_ABI	0x02000000u
+ #define SA_X32_ABI	0x01000000u
+ 
++/*
++ * Because some traps use the IST stack, we must keep preemption
++ * disabled while calling do_trap(), but do_trap() may call
++ * force_sig_info() which will grab the signal spin_locks for the
++ * task, which in PREEMPT_RT are mutexes.  By defining
++ * ARCH_RT_DELAYS_SIGNAL_SEND the force_sig_info() will set
++ * TIF_NOTIFY_RESUME and set up the signal to be sent on exit of the
++ * trap.
++ */
++#if defined(CONFIG_PREEMPT_RT)
++#define ARCH_RT_DELAYS_SIGNAL_SEND
++#endif
++
+ #ifndef CONFIG_COMPAT
+ #define compat_sigset_t compat_sigset_t
+ typedef sigset_t compat_sigset_t;
+--- a/include/linux/sched.h
++++ b/include/linux/sched.h
+@@ -1078,6 +1078,10 @@ struct task_struct {
+ 	/* Restored if set_restore_sigmask() was used: */
+ 	sigset_t			saved_sigmask;
+ 	struct sigpending		pending;
++#ifdef CONFIG_PREEMPT_RT
++	/* TODO: move me into ->restart_block ? */
++	struct				kernel_siginfo forced_info;
++#endif
+ 	unsigned long			sas_ss_sp;
+ 	size_t				sas_ss_size;
+ 	unsigned int			sas_ss_flags;
+--- a/kernel/entry/common.c
++++ b/kernel/entry/common.c
+@@ -162,6 +162,14 @@ static unsigned long exit_to_user_mode_l
+ 		if (ti_work & _TIF_NEED_RESCHED)
+ 			schedule();
+ 
++#ifdef ARCH_RT_DELAYS_SIGNAL_SEND
++		if (unlikely(current->forced_info.si_signo)) {
++			struct task_struct *t = current;
++			force_sig_info(&t->forced_info);
++			t->forced_info.si_signo = 0;
++		}
++#endif
++
+ 		if (ti_work & _TIF_UPROBE)
+ 			uprobe_notify_resume(regs);
+ 
+--- a/kernel/signal.c
++++ b/kernel/signal.c
+@@ -1324,6 +1324,34 @@ force_sig_info_to_task(struct kernel_sig
+ 	struct k_sigaction *action;
+ 	int sig = info->si_signo;
+ 
++	/*
++	 * On some archs, PREEMPT_RT has to delay sending a signal from a trap
++	 * since it can not enable preemption, and the signal code's spin_locks
++	 * turn into mutexes. Instead, it must set TIF_NOTIFY_RESUME which will
++	 * send the signal on exit of the trap.
++	 */
++#ifdef ARCH_RT_DELAYS_SIGNAL_SEND
++	if (in_atomic()) {
++		struct task_struct *t = current;
++
++		if (WARN_ON_ONCE(t->forced_info.si_signo))
++			return 0;
++
++		if (is_si_special(info)) {
++			WARN_ON_ONCE(info != SEND_SIG_PRIV);
++			t->forced_info.si_signo = info->si_signo;
++			t->forced_info.si_errno = 0;
++			t->forced_info.si_code = SI_KERNEL;
++			t->forced_info.si_pid = 0;
++			t->forced_info.si_uid = 0;
++		} else {
++			t->forced_info = *info;
++		}
++
++		set_tsk_thread_flag(t, TIF_NOTIFY_RESUME);
++		return 0;
++	}
++#endif
+ 	spin_lock_irqsave(&t->sighand->siglock, flags);
+ 	action = &t->sighand->action[sig-1];
+ 	ignored = action->sa.sa_handler == SIG_IGN;
diff --git a/debian/patches-rt/smp_wake_ksoftirqd_on_preempt_rt_instead_do_softirq.patch b/debian/patches-rt/smp_wake_ksoftirqd_on_preempt_rt_instead_do_softirq.patch
new file mode 100644
index 000000000000..ba930b8b3292
--- /dev/null
+++ b/debian/patches-rt/smp_wake_ksoftirqd_on_preempt_rt_instead_do_softirq.patch
@@ -0,0 +1,46 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Subject: smp: Wake ksoftirqd on PREEMPT_RT instead do_softirq().
+Date: Mon, 27 Sep 2021 09:38:14 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+The softirq implementation on PREEMPT_RT does not provide do_softirq().
+The other user of do_softirq() is replaced with a local_bh_disable()
++ enable() around the possible raise-softirq invocation. This can not be
+done here because migration_cpu_stop() is invoked with disabled
+preemption.
+
+Wake the softirq thread on PREEMPT_RT if there are any pending softirqs.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Link: https://lore.kernel.org/r/20210927073814.x5h6osr4dgiu44sc@linutronix.de
+---
+v1…v2: Drop an empty line.
+
+ kernel/smp.c |   14 ++++++++++++--
+ 1 file changed, 12 insertions(+), 2 deletions(-)
+---
+--- a/kernel/smp.c
++++ b/kernel/smp.c
+@@ -690,10 +690,20 @@ void flush_smp_call_function_from_idle(v
+ 
+ 	cfd_seq_store(this_cpu_ptr(&cfd_seq_local)->idle, CFD_SEQ_NOCPU,
+ 		      smp_processor_id(), CFD_SEQ_IDLE);
++
+ 	local_irq_save(flags);
+ 	flush_smp_call_function_queue(true);
+-	if (local_softirq_pending())
+-		do_softirq();
++
++	if (local_softirq_pending()) {
++		if (!IS_ENABLED(CONFIG_PREEMPT_RT)) {
++			do_softirq();
++		} else {
++			struct task_struct *ksoftirqd = this_cpu_ksoftirqd();
++
++			if (ksoftirqd && !task_is_running(ksoftirqd))
++				wake_up_process(ksoftirqd);
++		}
++	}
+ 
+ 	local_irq_restore(flags);
+ }
diff --git a/debian/patches-rt/softirq-Disable-softirq-stacks-on-PREEMPT_RT.patch b/debian/patches-rt/softirq-Disable-softirq-stacks-on-PREEMPT_RT.patch
new file mode 100644
index 000000000000..72e3a44869b5
--- /dev/null
+++ b/debian/patches-rt/softirq-Disable-softirq-stacks-on-PREEMPT_RT.patch
@@ -0,0 +1,88 @@
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Fri, 24 Sep 2021 17:05:48 +0200
+Subject: [PATCH] */softirq: Disable softirq stacks on PREEMPT_RT
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+PREEMPT_RT preempts softirqs and the current implementation avoids
+do_softirq_own_stack() and only uses __do_softirq().
+
+Disable the unused softirqs stacks on PREEMPT_RT to safe some memory and
+ensure that do_softirq_own_stack() is not used which is not expected.
+
+[bigeasy: commit description.]
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ arch/powerpc/kernel/irq.c  |    4 ++++
+ arch/sh/kernel/irq.c       |    2 ++
+ arch/sparc/kernel/irq_64.c |    2 ++
+ 3 files changed, 8 insertions(+)
+
+--- a/arch/powerpc/kernel/irq.c
++++ b/arch/powerpc/kernel/irq.c
+@@ -690,6 +690,7 @@ static inline void check_stack_overflow(
+ 	}
+ }
+ 
++#ifndef CONFIG_PREEMPT_RT
+ static __always_inline void call_do_softirq(const void *sp)
+ {
+ 	/* Temporarily switch r1 to sp, call __do_softirq() then restore r1. */
+@@ -708,6 +709,7 @@ static __always_inline void call_do_soft
+ 		   "r11", "r12"
+ 	);
+ }
++#endif
+ 
+ static __always_inline void call_do_irq(struct pt_regs *regs, void *sp)
+ {
+@@ -820,10 +822,12 @@ void *mcheckirq_ctx[NR_CPUS] __read_most
+ void *softirq_ctx[NR_CPUS] __read_mostly;
+ void *hardirq_ctx[NR_CPUS] __read_mostly;
+ 
++#ifndef CONFIG_PREEMPT_RT
+ void do_softirq_own_stack(void)
+ {
+ 	call_do_softirq(softirq_ctx[smp_processor_id()]);
+ }
++#endif
+ 
+ irq_hw_number_t virq_to_hw(unsigned int virq)
+ {
+--- a/arch/sh/kernel/irq.c
++++ b/arch/sh/kernel/irq.c
+@@ -149,6 +149,7 @@ void irq_ctx_exit(int cpu)
+ 	hardirq_ctx[cpu] = NULL;
+ }
+ 
++#ifndef CONFIG_PREEMPT_RT
+ void do_softirq_own_stack(void)
+ {
+ 	struct thread_info *curctx;
+@@ -176,6 +177,7 @@ void do_softirq_own_stack(void)
+ 		  "r5", "r6", "r7", "r8", "r9", "r15", "t", "pr"
+ 	);
+ }
++#endif
+ #else
+ static inline void handle_one_irq(unsigned int irq)
+ {
+--- a/arch/sparc/kernel/irq_64.c
++++ b/arch/sparc/kernel/irq_64.c
+@@ -855,6 +855,7 @@ void __irq_entry handler_irq(int pil, st
+ 	set_irq_regs(old_regs);
+ }
+ 
++#ifndef CONFIG_PREEMPT_RT
+ void do_softirq_own_stack(void)
+ {
+ 	void *orig_sp, *sp = softirq_stack[smp_processor_id()];
+@@ -869,6 +870,7 @@ void do_softirq_own_stack(void)
+ 	__asm__ __volatile__("mov %0, %%sp"
+ 			     : : "r" (orig_sp));
+ }
++#endif
+ 
+ #ifdef CONFIG_HOTPLUG_CPU
+ void fixup_irqs(void)
diff --git a/debian/patches-rt/softirq__Check_preemption_after_reenabling_interrupts.patch b/debian/patches-rt/softirq__Check_preemption_after_reenabling_interrupts.patch
new file mode 100644
index 000000000000..73aa4b693039
--- /dev/null
+++ b/debian/patches-rt/softirq__Check_preemption_after_reenabling_interrupts.patch
@@ -0,0 +1,103 @@
+Subject: softirq: Check preemption after reenabling interrupts
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Sun Nov 13 17:17:09 2011 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+raise_softirq_irqoff() disables interrupts and wakes the softirq
+daemon, but after reenabling interrupts there is no preemption check,
+so the execution of the softirq thread might be delayed arbitrarily.
+
+In principle we could add that check to local_irq_enable/restore, but
+that's overkill as the rasie_softirq_irqoff() sections are the only
+ones which show this behaviour.
+
+Reported-by: Carsten Emde <cbe@osadl.org>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+
+---
+ include/linux/preempt.h |    3 +++
+ net/core/dev.c          |    7 +++++++
+ 2 files changed, 10 insertions(+)
+---
+--- a/include/linux/preempt.h
++++ b/include/linux/preempt.h
+@@ -212,8 +212,10 @@ do { \
+ 
+ #ifndef CONFIG_PREEMPT_RT
+ # define preempt_enable_no_resched() sched_preempt_enable_no_resched()
++# define preempt_check_resched_rt() barrier();
+ #else
+ # define preempt_enable_no_resched() preempt_enable()
++# define preempt_check_resched_rt() preempt_check_resched()
+ #endif
+ 
+ #define preemptible()	(preempt_count() == 0 && !irqs_disabled())
+@@ -284,6 +286,7 @@ do { \
+ #define preempt_disable_notrace()		barrier()
+ #define preempt_enable_no_resched_notrace()	barrier()
+ #define preempt_enable_notrace()		barrier()
++#define preempt_check_resched_rt()		barrier()
+ #define preemptible()				0
+ 
+ #endif /* CONFIG_PREEMPT_COUNT */
+--- a/net/core/dev.c
++++ b/net/core/dev.c
+@@ -3048,6 +3048,7 @@ static void __netif_reschedule(struct Qd
+ 	sd->output_queue_tailp = &q->next_sched;
+ 	raise_softirq_irqoff(NET_TX_SOFTIRQ);
+ 	local_irq_restore(flags);
++	preempt_check_resched_rt();
+ }
+ 
+ void __netif_schedule(struct Qdisc *q)
+@@ -3110,6 +3111,7 @@ void __dev_kfree_skb_irq(struct sk_buff
+ 	__this_cpu_write(softnet_data.completion_queue, skb);
+ 	raise_softirq_irqoff(NET_TX_SOFTIRQ);
+ 	local_irq_restore(flags);
++	preempt_check_resched_rt();
+ }
+ EXPORT_SYMBOL(__dev_kfree_skb_irq);
+ 
+@@ -4668,6 +4670,7 @@ static int enqueue_to_backlog(struct sk_
+ 	rps_unlock(sd);
+ 
+ 	local_irq_restore(flags);
++	preempt_check_resched_rt();
+ 
+ 	atomic_long_inc(&skb->dev->rx_dropped);
+ 	kfree_skb(skb);
+@@ -6412,12 +6415,14 @@ static void net_rps_action_and_irq_enabl
+ 		sd->rps_ipi_list = NULL;
+ 
+ 		local_irq_enable();
++		preempt_check_resched_rt();
+ 
+ 		/* Send pending IPI's to kick RPS processing on remote cpus. */
+ 		net_rps_send_ipi(remsd);
+ 	} else
+ #endif
+ 		local_irq_enable();
++	preempt_check_resched_rt();
+ }
+ 
+ static bool sd_has_rps_ipi_waiting(struct softnet_data *sd)
+@@ -6495,6 +6500,7 @@ void __napi_schedule(struct napi_struct
+ 	local_irq_save(flags);
+ 	____napi_schedule(this_cpu_ptr(&softnet_data), n);
+ 	local_irq_restore(flags);
++	preempt_check_resched_rt();
+ }
+ EXPORT_SYMBOL(__napi_schedule);
+ 
+@@ -11326,6 +11332,7 @@ static int dev_cpu_dead(unsigned int old
+ 
+ 	raise_softirq_irqoff(NET_TX_SOFTIRQ);
+ 	local_irq_enable();
++	preempt_check_resched_rt();
+ 
+ #ifdef CONFIG_RPS
+ 	remsd = oldsd->rps_ipi_list;
diff --git a/debian/patches-rt/sunrpc__Make_svc_xprt_do_enqueue_use_get_cpu_light.patch b/debian/patches-rt/sunrpc__Make_svc_xprt_do_enqueue_use_get_cpu_light.patch
new file mode 100644
index 000000000000..c5b5a63512d6
--- /dev/null
+++ b/debian/patches-rt/sunrpc__Make_svc_xprt_do_enqueue_use_get_cpu_light.patch
@@ -0,0 +1,59 @@
+Subject: sunrpc: Make svc_xprt_do_enqueue() use get_cpu_light()
+From: Mike Galbraith <umgwanakikbuti@gmail.com>
+Date: Wed Feb 18 16:05:28 2015 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Mike Galbraith <umgwanakikbuti@gmail.com>
+
+|BUG: sleeping function called from invalid context at kernel/locking/rtmutex.c:915
+|in_atomic(): 1, irqs_disabled(): 0, pid: 3194, name: rpc.nfsd
+|Preemption disabled at:[<ffffffffa06bf0bb>] svc_xprt_received+0x4b/0xc0 [sunrpc]
+|CPU: 6 PID: 3194 Comm: rpc.nfsd Not tainted 3.18.7-rt1 #9
+|Hardware name: MEDION MS-7848/MS-7848, BIOS M7848W08.404 11/06/2014
+| ffff880409630000 ffff8800d9a33c78 ffffffff815bdeb5 0000000000000002
+| 0000000000000000 ffff8800d9a33c98 ffffffff81073c86 ffff880408dd6008
+| ffff880408dd6000 ffff8800d9a33cb8 ffffffff815c3d84 ffff88040b3ac000
+|Call Trace:
+| [<ffffffff815bdeb5>] dump_stack+0x4f/0x9e
+| [<ffffffff81073c86>] __might_sleep+0xe6/0x150
+| [<ffffffff815c3d84>] rt_spin_lock+0x24/0x50
+| [<ffffffffa06beec0>] svc_xprt_do_enqueue+0x80/0x230 [sunrpc]
+| [<ffffffffa06bf0bb>] svc_xprt_received+0x4b/0xc0 [sunrpc]
+| [<ffffffffa06c03ed>] svc_add_new_perm_xprt+0x6d/0x80 [sunrpc]
+| [<ffffffffa06b2693>] svc_addsock+0x143/0x200 [sunrpc]
+| [<ffffffffa072e69c>] write_ports+0x28c/0x340 [nfsd]
+| [<ffffffffa072d2ac>] nfsctl_transaction_write+0x4c/0x80 [nfsd]
+| [<ffffffff8117ee83>] vfs_write+0xb3/0x1d0
+| [<ffffffff8117f889>] SyS_write+0x49/0xb0
+| [<ffffffff815c4556>] system_call_fastpath+0x16/0x1b
+
+
+Signed-off-by: Mike Galbraith <umgwanakikbuti@gmail.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ net/sunrpc/svc_xprt.c |    4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+---
+--- a/net/sunrpc/svc_xprt.c
++++ b/net/sunrpc/svc_xprt.c
+@@ -441,7 +441,7 @@ void svc_xprt_do_enqueue(struct svc_xprt
+ 	if (test_and_set_bit(XPT_BUSY, &xprt->xpt_flags))
+ 		return;
+ 
+-	cpu = get_cpu();
++	cpu = get_cpu_light();
+ 	pool = svc_pool_for_cpu(xprt->xpt_server, cpu);
+ 
+ 	atomic_long_inc(&pool->sp_stats.packets);
+@@ -465,7 +465,7 @@ void svc_xprt_do_enqueue(struct svc_xprt
+ 	rqstp = NULL;
+ out_unlock:
+ 	rcu_read_unlock();
+-	put_cpu();
++	put_cpu_light();
+ 	trace_svc_xprt_do_enqueue(xprt, rqstp);
+ }
+ EXPORT_SYMBOL_GPL(svc_xprt_do_enqueue);
diff --git a/debian/patches-rt/sysfs__Add__sys_kernel_realtime_entry.patch b/debian/patches-rt/sysfs__Add__sys_kernel_realtime_entry.patch
new file mode 100644
index 000000000000..f3091fcb99bb
--- /dev/null
+++ b/debian/patches-rt/sysfs__Add__sys_kernel_realtime_entry.patch
@@ -0,0 +1,53 @@
+Subject: sysfs: Add /sys/kernel/realtime entry
+From: Clark Williams <williams@redhat.com>
+Date: Sat Jul 30 21:55:53 2011 -0500
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Clark Williams <williams@redhat.com>
+
+Add a /sys/kernel entry to indicate that the kernel is a
+realtime kernel.
+
+Clark says that he needs this for udev rules, udev needs to evaluate
+if its a PREEMPT_RT kernel a few thousand times and parsing uname
+output is too slow or so.
+
+Are there better solutions? Should it exist and return 0 on !-rt?
+
+Signed-off-by: Clark Williams <williams@redhat.com>
+Signed-off-by: Peter Zijlstra <a.p.zijlstra@chello.nl>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ kernel/ksysfs.c |   12 ++++++++++++
+ 1 file changed, 12 insertions(+)
+---
+--- a/kernel/ksysfs.c
++++ b/kernel/ksysfs.c
+@@ -138,6 +138,15 @@ KERNEL_ATTR_RO(vmcoreinfo);
+ 
+ #endif /* CONFIG_CRASH_CORE */
+ 
++#if defined(CONFIG_PREEMPT_RT)
++static ssize_t realtime_show(struct kobject *kobj,
++			     struct kobj_attribute *attr, char *buf)
++{
++	return sprintf(buf, "%d\n", 1);
++}
++KERNEL_ATTR_RO(realtime);
++#endif
++
+ /* whether file capabilities are enabled */
+ static ssize_t fscaps_show(struct kobject *kobj,
+ 				  struct kobj_attribute *attr, char *buf)
+@@ -229,6 +238,9 @@ static struct attribute * kernel_attrs[]
+ 	&rcu_expedited_attr.attr,
+ 	&rcu_normal_attr.attr,
+ #endif
++#ifdef CONFIG_PREEMPT_RT
++	&realtime_attr.attr,
++#endif
+ 	NULL
+ };
+ 
diff --git a/debian/patches-rt/tcp__Remove_superfluous_BH-disable_around_listening_hash.patch b/debian/patches-rt/tcp__Remove_superfluous_BH-disable_around_listening_hash.patch
new file mode 100644
index 000000000000..53e07ecf4413
--- /dev/null
+++ b/debian/patches-rt/tcp__Remove_superfluous_BH-disable_around_listening_hash.patch
@@ -0,0 +1,105 @@
+Subject: tcp: Remove superfluous BH-disable around listening_hash
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Mon Oct 12 17:33:54 2020 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Commit
+   9652dc2eb9e40 ("tcp: relax listening_hash operations")
+
+removed the need to disable bottom half while acquiring
+listening_hash.lock. There are still two callers left which disable
+bottom half before the lock is acquired.
+
+Drop local_bh_disable() around __inet_hash() which acquires
+listening_hash->lock, invoke inet_ehash_nolisten() with disabled BH.
+inet_unhash() conditionally acquires listening_hash->lock.
+
+Reported-by: Mike Galbraith <efault@gmx.de>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+Link: https://lore.kernel.org/linux-rt-users/12d6f9879a97cd56c09fb53dee343cbb14f7f1f7.camel@gmx.de/
+Link: https://lkml.kernel.org/r/X9CheYjuXWc75Spa@hirez.programming.kicks-ass.net
+
+
+---
+ net/ipv4/inet_hashtables.c  |   19 ++++++++++++-------
+ net/ipv6/inet6_hashtables.c |    5 +----
+ 2 files changed, 13 insertions(+), 11 deletions(-)
+---
+--- a/net/ipv4/inet_hashtables.c
++++ b/net/ipv4/inet_hashtables.c
+@@ -637,7 +637,9 @@ int __inet_hash(struct sock *sk, struct
+ 	int err = 0;
+ 
+ 	if (sk->sk_state != TCP_LISTEN) {
++		local_bh_disable();
+ 		inet_ehash_nolisten(sk, osk, NULL);
++		local_bh_enable();
+ 		return 0;
+ 	}
+ 	WARN_ON(!sk_unhashed(sk));
+@@ -669,11 +671,8 @@ int inet_hash(struct sock *sk)
+ {
+ 	int err = 0;
+ 
+-	if (sk->sk_state != TCP_CLOSE) {
+-		local_bh_disable();
++	if (sk->sk_state != TCP_CLOSE)
+ 		err = __inet_hash(sk, NULL);
+-		local_bh_enable();
+-	}
+ 
+ 	return err;
+ }
+@@ -684,17 +683,20 @@ void inet_unhash(struct sock *sk)
+ 	struct inet_hashinfo *hashinfo = sk->sk_prot->h.hashinfo;
+ 	struct inet_listen_hashbucket *ilb = NULL;
+ 	spinlock_t *lock;
++	bool state_listen;
+ 
+ 	if (sk_unhashed(sk))
+ 		return;
+ 
+ 	if (sk->sk_state == TCP_LISTEN) {
++		state_listen = true;
+ 		ilb = &hashinfo->listening_hash[inet_sk_listen_hashfn(sk)];
+-		lock = &ilb->lock;
++		spin_lock(&ilb->lock);
+ 	} else {
++		state_listen = false;
+ 		lock = inet_ehash_lockp(hashinfo, sk->sk_hash);
++		spin_lock_bh(lock);
+ 	}
+-	spin_lock_bh(lock);
+ 	if (sk_unhashed(sk))
+ 		goto unlock;
+ 
+@@ -707,7 +709,10 @@ void inet_unhash(struct sock *sk)
+ 	__sk_nulls_del_node_init_rcu(sk);
+ 	sock_prot_inuse_add(sock_net(sk), sk->sk_prot, -1);
+ unlock:
+-	spin_unlock_bh(lock);
++	if (state_listen)
++		spin_unlock(&ilb->lock);
++	else
++		spin_unlock_bh(lock);
+ }
+ EXPORT_SYMBOL_GPL(inet_unhash);
+ 
+--- a/net/ipv6/inet6_hashtables.c
++++ b/net/ipv6/inet6_hashtables.c
+@@ -333,11 +333,8 @@ int inet6_hash(struct sock *sk)
+ {
+ 	int err = 0;
+ 
+-	if (sk->sk_state != TCP_CLOSE) {
+-		local_bh_disable();
++	if (sk->sk_state != TCP_CLOSE)
+ 		err = __inet_hash(sk, NULL);
+-		local_bh_enable();
+-	}
+ 
+ 	return err;
+ }
diff --git a/debian/patches-rt/tpm_tis__fix_stall_after_iowrites.patch b/debian/patches-rt/tpm_tis__fix_stall_after_iowrites.patch
new file mode 100644
index 000000000000..b043f125fead
--- /dev/null
+++ b/debian/patches-rt/tpm_tis__fix_stall_after_iowrites.patch
@@ -0,0 +1,83 @@
+Subject: tpm_tis: fix stall after iowrite*()s
+From: Haris Okanovic <haris.okanovic@ni.com>
+Date: Tue Aug 15 15:13:08 2017 -0500
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Haris Okanovic <haris.okanovic@ni.com>
+
+ioread8() operations to TPM MMIO addresses can stall the cpu when
+immediately following a sequence of iowrite*()'s to the same region.
+
+For example, cyclitest measures ~400us latency spikes when a non-RT
+usermode application communicates with an SPI-based TPM chip (Intel Atom
+E3940 system, PREEMPT_RT kernel). The spikes are caused by a
+stalling ioread8() operation following a sequence of 30+ iowrite8()s to
+the same address. I believe this happens because the write sequence is
+buffered (in cpu or somewhere along the bus), and gets flushed on the
+first LOAD instruction (ioread*()) that follows.
+
+The enclosed change appears to fix this issue: read the TPM chip's
+access register (status code) after every iowrite*() operation to
+amortize the cost of flushing data to chip across multiple instructions.
+
+Signed-off-by: Haris Okanovic <haris.okanovic@ni.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ drivers/char/tpm/tpm_tis.c |   29 +++++++++++++++++++++++++++--
+ 1 file changed, 27 insertions(+), 2 deletions(-)
+---
+--- a/drivers/char/tpm/tpm_tis.c
++++ b/drivers/char/tpm/tpm_tis.c
+@@ -50,6 +50,31 @@ static inline struct tpm_tis_tcg_phy *to
+ 	return container_of(data, struct tpm_tis_tcg_phy, priv);
+ }
+ 
++#ifdef CONFIG_PREEMPT_RT
++/*
++ * Flushes previous write operations to chip so that a subsequent
++ * ioread*()s won't stall a cpu.
++ */
++static inline void tpm_tis_flush(void __iomem *iobase)
++{
++	ioread8(iobase + TPM_ACCESS(0));
++}
++#else
++#define tpm_tis_flush(iobase) do { } while (0)
++#endif
++
++static inline void tpm_tis_iowrite8(u8 b, void __iomem *iobase, u32 addr)
++{
++	iowrite8(b, iobase + addr);
++	tpm_tis_flush(iobase);
++}
++
++static inline void tpm_tis_iowrite32(u32 b, void __iomem *iobase, u32 addr)
++{
++	iowrite32(b, iobase + addr);
++	tpm_tis_flush(iobase);
++}
++
+ static int interrupts = -1;
+ module_param(interrupts, int, 0444);
+ MODULE_PARM_DESC(interrupts, "Enable interrupts");
+@@ -169,7 +194,7 @@ static int tpm_tcg_write_bytes(struct tp
+ 	struct tpm_tis_tcg_phy *phy = to_tpm_tis_tcg_phy(data);
+ 
+ 	while (len--)
+-		iowrite8(*value++, phy->iobase + addr);
++		tpm_tis_iowrite8(*value++, phy->iobase, addr);
+ 
+ 	return 0;
+ }
+@@ -196,7 +221,7 @@ static int tpm_tcg_write32(struct tpm_ti
+ {
+ 	struct tpm_tis_tcg_phy *phy = to_tpm_tis_tcg_phy(data);
+ 
+-	iowrite32(value, phy->iobase + addr);
++	tpm_tis_iowrite32(value, phy->iobase, addr);
+ 
+ 	return 0;
+ }
diff --git a/debian/patches-rt/tty_serial_omap__Make_the_locking_RT_aware.patch b/debian/patches-rt/tty_serial_omap__Make_the_locking_RT_aware.patch
new file mode 100644
index 000000000000..c0ed186245be
--- /dev/null
+++ b/debian/patches-rt/tty_serial_omap__Make_the_locking_RT_aware.patch
@@ -0,0 +1,47 @@
+Subject: tty/serial/omap: Make the locking RT aware
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Thu Jul 28 13:32:57 2011 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+The lock is a sleeping lock and local_irq_save() is not the
+optimsation we are looking for. Redo it to make it work on -RT and
+non-RT.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ drivers/tty/serial/omap-serial.c |   12 ++++--------
+ 1 file changed, 4 insertions(+), 8 deletions(-)
+---
+--- a/drivers/tty/serial/omap-serial.c
++++ b/drivers/tty/serial/omap-serial.c
+@@ -1255,13 +1255,10 @@ serial_omap_console_write(struct console
+ 	unsigned int ier;
+ 	int locked = 1;
+ 
+-	local_irq_save(flags);
+-	if (up->port.sysrq)
+-		locked = 0;
+-	else if (oops_in_progress)
+-		locked = spin_trylock(&up->port.lock);
++	if (up->port.sysrq || oops_in_progress)
++		locked = spin_trylock_irqsave(&up->port.lock, flags);
+ 	else
+-		spin_lock(&up->port.lock);
++		spin_lock_irqsave(&up->port.lock, flags);
+ 
+ 	/*
+ 	 * First save the IER then disable the interrupts
+@@ -1288,8 +1285,7 @@ serial_omap_console_write(struct console
+ 		check_modem_status(up);
+ 
+ 	if (locked)
+-		spin_unlock(&up->port.lock);
+-	local_irq_restore(flags);
++		spin_unlock_irqrestore(&up->port.lock, flags);
+ }
+ 
+ static int __init
diff --git a/debian/patches-rt/tty_serial_pl011__Make_the_locking_work_on_RT.patch b/debian/patches-rt/tty_serial_pl011__Make_the_locking_work_on_RT.patch
new file mode 100644
index 000000000000..d3e400531ae6
--- /dev/null
+++ b/debian/patches-rt/tty_serial_pl011__Make_the_locking_work_on_RT.patch
@@ -0,0 +1,58 @@
+Subject: tty/serial/pl011: Make the locking work on RT
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Tue Jan  8 21:36:51 2013 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+The lock is a sleeping lock and local_irq_save() is not the optimsation
+we are looking for. Redo it to make it work on -RT and non-RT.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ drivers/tty/serial/amba-pl011.c |   17 +++++++++++------
+ 1 file changed, 11 insertions(+), 6 deletions(-)
+---
+--- a/drivers/tty/serial/amba-pl011.c
++++ b/drivers/tty/serial/amba-pl011.c
+@@ -2336,18 +2336,24 @@ pl011_console_write(struct console *co,
+ {
+ 	struct uart_amba_port *uap = amba_ports[co->index];
+ 	unsigned int old_cr = 0, new_cr;
+-	unsigned long flags;
++	unsigned long flags = 0;
+ 	int locked = 1;
+ 
+ 	clk_enable(uap->clk);
+ 
+-	local_irq_save(flags);
++	/*
++	 * local_irq_save(flags);
++	 *
++	 * This local_irq_save() is nonsense. If we come in via sysrq
++	 * handling then interrupts are already disabled. Aside of
++	 * that the port.sysrq check is racy on SMP regardless.
++	*/
+ 	if (uap->port.sysrq)
+ 		locked = 0;
+ 	else if (oops_in_progress)
+-		locked = spin_trylock(&uap->port.lock);
++		locked = spin_trylock_irqsave(&uap->port.lock, flags);
+ 	else
+-		spin_lock(&uap->port.lock);
++		spin_lock_irqsave(&uap->port.lock, flags);
+ 
+ 	/*
+ 	 *	First save the CR then disable the interrupts
+@@ -2373,8 +2379,7 @@ pl011_console_write(struct console *co,
+ 		pl011_write(old_cr, uap, REG_CR);
+ 
+ 	if (locked)
+-		spin_unlock(&uap->port.lock);
+-	local_irq_restore(flags);
++		spin_unlock_irqrestore(&uap->port.lock, flags);
+ 
+ 	clk_disable(uap->clk);
+ }
diff --git a/debian/patches-rt/u64_stats__Disable_preemption_on_32bit-UP_SMP_with_RT_during_updates.patch b/debian/patches-rt/u64_stats__Disable_preemption_on_32bit-UP_SMP_with_RT_during_updates.patch
new file mode 100644
index 000000000000..6ea5c770aa5c
--- /dev/null
+++ b/debian/patches-rt/u64_stats__Disable_preemption_on_32bit-UP_SMP_with_RT_during_updates.patch
@@ -0,0 +1,150 @@
+Subject: u64_stats: Disable preemption on 32bit-UP/SMP with RT during updates
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Mon Aug 17 12:28:10 2020 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+On RT the seqcount_t is required even on UP because the softirq can be
+preempted. The IRQ handler is threaded so it is also preemptible.
+
+Disable preemption on 32bit-RT during value updates. There is no need to
+disable interrupts on RT because the handler is run threaded. Therefore
+disabling preemption is enough to guarantee that the update is not
+interruped.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ include/linux/u64_stats_sync.h |   42 +++++++++++++++++++++++++++--------------
+ 1 file changed, 28 insertions(+), 14 deletions(-)
+---
+--- a/include/linux/u64_stats_sync.h
++++ b/include/linux/u64_stats_sync.h
+@@ -66,7 +66,7 @@
+ #include <linux/seqlock.h>
+ 
+ struct u64_stats_sync {
+-#if BITS_PER_LONG==32 && defined(CONFIG_SMP)
++#if BITS_PER_LONG==32 && (defined(CONFIG_SMP) || defined(CONFIG_PREEMPT_RT))
+ 	seqcount_t	seq;
+ #endif
+ };
+@@ -125,7 +125,7 @@ static inline void u64_stats_inc(u64_sta
+ }
+ #endif
+ 
+-#if BITS_PER_LONG == 32 && defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && (defined(CONFIG_SMP) || defined(CONFIG_PREEMPT_RT))
+ #define u64_stats_init(syncp)	seqcount_init(&(syncp)->seq)
+ #else
+ static inline void u64_stats_init(struct u64_stats_sync *syncp)
+@@ -135,15 +135,19 @@ static inline void u64_stats_init(struct
+ 
+ static inline void u64_stats_update_begin(struct u64_stats_sync *syncp)
+ {
+-#if BITS_PER_LONG==32 && defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && (defined(CONFIG_SMP) || defined(CONFIG_PREEMPT_RT))
++	if (IS_ENABLED(CONFIG_PREEMPT_RT))
++		preempt_disable();
+ 	write_seqcount_begin(&syncp->seq);
+ #endif
+ }
+ 
+ static inline void u64_stats_update_end(struct u64_stats_sync *syncp)
+ {
+-#if BITS_PER_LONG==32 && defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && (defined(CONFIG_SMP) || defined(CONFIG_PREEMPT_RT))
+ 	write_seqcount_end(&syncp->seq);
++	if (IS_ENABLED(CONFIG_PREEMPT_RT))
++		preempt_enable();
+ #endif
+ }
+ 
+@@ -152,8 +156,11 @@ u64_stats_update_begin_irqsave(struct u6
+ {
+ 	unsigned long flags = 0;
+ 
+-#if BITS_PER_LONG==32 && defined(CONFIG_SMP)
+-	local_irq_save(flags);
++#if BITS_PER_LONG == 32 && (defined(CONFIG_SMP) || defined(CONFIG_PREEMPT_RT))
++	if (IS_ENABLED(CONFIG_PREEMPT_RT))
++		preempt_disable();
++	else
++		local_irq_save(flags);
+ 	write_seqcount_begin(&syncp->seq);
+ #endif
+ 	return flags;
+@@ -163,15 +170,18 @@ static inline void
+ u64_stats_update_end_irqrestore(struct u64_stats_sync *syncp,
+ 				unsigned long flags)
+ {
+-#if BITS_PER_LONG==32 && defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && (defined(CONFIG_SMP) || defined(CONFIG_PREEMPT_RT))
+ 	write_seqcount_end(&syncp->seq);
+-	local_irq_restore(flags);
++	if (IS_ENABLED(CONFIG_PREEMPT_RT))
++		preempt_enable();
++	else
++		local_irq_restore(flags);
+ #endif
+ }
+ 
+ static inline unsigned int __u64_stats_fetch_begin(const struct u64_stats_sync *syncp)
+ {
+-#if BITS_PER_LONG==32 && defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && (defined(CONFIG_SMP) || defined(CONFIG_PREEMPT_RT))
+ 	return read_seqcount_begin(&syncp->seq);
+ #else
+ 	return 0;
+@@ -180,7 +190,7 @@ static inline unsigned int __u64_stats_f
+ 
+ static inline unsigned int u64_stats_fetch_begin(const struct u64_stats_sync *syncp)
+ {
+-#if BITS_PER_LONG==32 && !defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && (!defined(CONFIG_SMP) && !defined(CONFIG_PREEMPT_RT))
+ 	preempt_disable();
+ #endif
+ 	return __u64_stats_fetch_begin(syncp);
+@@ -189,7 +199,7 @@ static inline unsigned int u64_stats_fet
+ static inline bool __u64_stats_fetch_retry(const struct u64_stats_sync *syncp,
+ 					 unsigned int start)
+ {
+-#if BITS_PER_LONG==32 && defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && (defined(CONFIG_SMP) || defined(CONFIG_PREEMPT_RT))
+ 	return read_seqcount_retry(&syncp->seq, start);
+ #else
+ 	return false;
+@@ -199,7 +209,7 @@ static inline bool __u64_stats_fetch_ret
+ static inline bool u64_stats_fetch_retry(const struct u64_stats_sync *syncp,
+ 					 unsigned int start)
+ {
+-#if BITS_PER_LONG==32 && !defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && (!defined(CONFIG_SMP) && !defined(CONFIG_PREEMPT_RT))
+ 	preempt_enable();
+ #endif
+ 	return __u64_stats_fetch_retry(syncp, start);
+@@ -213,7 +223,9 @@ static inline bool u64_stats_fetch_retry
+  */
+ static inline unsigned int u64_stats_fetch_begin_irq(const struct u64_stats_sync *syncp)
+ {
+-#if BITS_PER_LONG==32 && !defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && defined(CONFIG_PREEMPT_RT)
++	preempt_disable();
++#elif BITS_PER_LONG == 32 && !defined(CONFIG_SMP)
+ 	local_irq_disable();
+ #endif
+ 	return __u64_stats_fetch_begin(syncp);
+@@ -222,7 +234,9 @@ static inline unsigned int u64_stats_fet
+ static inline bool u64_stats_fetch_retry_irq(const struct u64_stats_sync *syncp,
+ 					     unsigned int start)
+ {
+-#if BITS_PER_LONG==32 && !defined(CONFIG_SMP)
++#if BITS_PER_LONG == 32 && defined(CONFIG_PREEMPT_RT)
++	preempt_enable();
++#elif BITS_PER_LONG == 32 && !defined(CONFIG_SMP)
+ 	local_irq_enable();
+ #endif
+ 	return __u64_stats_fetch_retry(syncp, start);
diff --git a/debian/patches-rt/virt-acrn-Remove-unsued-acrn_irqfds_mutex.patch b/debian/patches-rt/virt-acrn-Remove-unsued-acrn_irqfds_mutex.patch
new file mode 100644
index 000000000000..c7837cc5f1d1
--- /dev/null
+++ b/debian/patches-rt/virt-acrn-Remove-unsued-acrn_irqfds_mutex.patch
@@ -0,0 +1,26 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu, 9 Sep 2021 10:15:30 +0200
+Subject: [PATCH] virt: acrn: Remove unsued acrn_irqfds_mutex.
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+acrn_irqfds_mutex is not used, never was.
+
+Remove acrn_irqfds_mutex.
+
+Fixes: aa3b483ff1d71 ("virt: acrn: Introduce irqfd")
+Cc: Fei Li <fei1.li@intel.com>
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ drivers/virt/acrn/irqfd.c |    1 -
+ 1 file changed, 1 deletion(-)
+
+--- a/drivers/virt/acrn/irqfd.c
++++ b/drivers/virt/acrn/irqfd.c
+@@ -17,7 +17,6 @@
+ #include "acrn_drv.h"
+ 
+ static LIST_HEAD(acrn_irqfd_clients);
+-static DEFINE_MUTEX(acrn_irqfds_mutex);
+ 
+ /**
+  * struct hsm_irqfd - Properties of HSM irqfd
diff --git a/debian/patches-rt/x86-mm-Include-spinlock_t-definition-in-pgtable.patch b/debian/patches-rt/x86-mm-Include-spinlock_t-definition-in-pgtable.patch
new file mode 100644
index 000000000000..b92498b4f733
--- /dev/null
+++ b/debian/patches-rt/x86-mm-Include-spinlock_t-definition-in-pgtable.patch
@@ -0,0 +1,30 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue, 2 Nov 2021 16:38:59 +0100
+Subject: [PATCH] x86/mm: Include spinlock_t definition in pgtable.
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+This header file provides forward declartion for pgd_lock but does not
+include the header defining its type. This works since the definition of
+spinlock_t is usually included somehow via printk.
+
+By trying to avoid recursive includes on PREEMPT_RT I avoided the loop
+in printk and as a consequnce kernel/intel.c failed to compile due to
+missing type definition.
+
+Include the needed definition for spinlock_t.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ arch/x86/include/asm/pgtable.h |    1 +
+ 1 file changed, 1 insertion(+)
+
+--- a/arch/x86/include/asm/pgtable.h
++++ b/arch/x86/include/asm/pgtable.h
+@@ -22,6 +22,7 @@
+ #define pgprot_decrypted(prot)	__pgprot(__sme_clr(pgprot_val(prot)))
+ 
+ #ifndef __ASSEMBLY__
++#include <linux/spinlock.h>
+ #include <asm/x86_init.h>
+ #include <asm/pkru.h>
+ #include <asm/fpu/api.h>
diff --git a/debian/patches-rt/x86__Allow_to_enable_RT.patch b/debian/patches-rt/x86__Allow_to_enable_RT.patch
new file mode 100644
index 000000000000..51038240278e
--- /dev/null
+++ b/debian/patches-rt/x86__Allow_to_enable_RT.patch
@@ -0,0 +1,27 @@
+Subject: x86: Allow to enable RT
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Wed Aug  7 18:15:38 2019 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Allow to select RT.
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/x86/Kconfig |    1 +
+ 1 file changed, 1 insertion(+)
+---
+--- a/arch/x86/Kconfig
++++ b/arch/x86/Kconfig
+@@ -27,6 +27,7 @@ config X86_64
+ 	# Options that are inherently 64-bit kernel only:
+ 	select ARCH_HAS_GIGANTIC_PAGE
+ 	select ARCH_SUPPORTS_INT128 if CC_HAS_INT128
++	select ARCH_SUPPORTS_RT
+ 	select ARCH_USE_CMPXCHG_LOCKREF
+ 	select HAVE_ARCH_SOFT_DIRTY
+ 	select MODULES_USE_ELF_RELA
diff --git a/debian/patches-rt/x86__Enable_RT_also_on_32bit.patch b/debian/patches-rt/x86__Enable_RT_also_on_32bit.patch
new file mode 100644
index 000000000000..5dfdb08e85f6
--- /dev/null
+++ b/debian/patches-rt/x86__Enable_RT_also_on_32bit.patch
@@ -0,0 +1,33 @@
+Subject: x86: Enable RT also on 32bit
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Thu Nov  7 17:49:20 2019 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/x86/Kconfig |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+---
+--- a/arch/x86/Kconfig
++++ b/arch/x86/Kconfig
+@@ -27,7 +27,6 @@ config X86_64
+ 	# Options that are inherently 64-bit kernel only:
+ 	select ARCH_HAS_GIGANTIC_PAGE
+ 	select ARCH_SUPPORTS_INT128 if CC_HAS_INT128
+-	select ARCH_SUPPORTS_RT
+ 	select ARCH_USE_CMPXCHG_LOCKREF
+ 	select HAVE_ARCH_SOFT_DIRTY
+ 	select MODULES_USE_ELF_RELA
+@@ -109,6 +108,7 @@ config X86
+ 	select ARCH_SUPPORTS_KMAP_LOCAL_FORCE_MAP	if NR_CPUS <= 4096
+ 	select ARCH_SUPPORTS_LTO_CLANG
+ 	select ARCH_SUPPORTS_LTO_CLANG_THIN
++	select ARCH_SUPPORTS_RT
+ 	select ARCH_USE_BUILTIN_BSWAP
+ 	select ARCH_USE_MEMTEST
+ 	select ARCH_USE_QUEUED_RWLOCKS
diff --git a/debian/patches-rt/x86__Support_for_lazy_preemption.patch b/debian/patches-rt/x86__Support_for_lazy_preemption.patch
new file mode 100644
index 000000000000..b3eb73ac8cda
--- /dev/null
+++ b/debian/patches-rt/x86__Support_for_lazy_preemption.patch
@@ -0,0 +1,148 @@
+Subject: x86: Support for lazy preemption
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Thu Nov  1 11:03:47 2012 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Implement the x86 pieces for lazy preempt.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/x86/Kconfig                   |    1 +
+ arch/x86/include/asm/preempt.h     |   33 ++++++++++++++++++++++++++++++++-
+ arch/x86/include/asm/thread_info.h |    7 +++++++
+ include/linux/entry-common.h       |    2 +-
+ kernel/entry/common.c              |    2 +-
+ 5 files changed, 42 insertions(+), 3 deletions(-)
+---
+--- a/arch/x86/Kconfig
++++ b/arch/x86/Kconfig
+@@ -235,6 +235,7 @@ config X86
+ 	select HAVE_PCI
+ 	select HAVE_PERF_REGS
+ 	select HAVE_PERF_USER_STACK_DUMP
++	select HAVE_PREEMPT_LAZY
+ 	select MMU_GATHER_RCU_TABLE_FREE		if PARAVIRT
+ 	select HAVE_POSIX_CPU_TIMERS_TASK_WORK
+ 	select HAVE_REGS_AND_STACK_ACCESS_API
+--- a/arch/x86/include/asm/preempt.h
++++ b/arch/x86/include/asm/preempt.h
+@@ -90,17 +90,48 @@ static __always_inline void __preempt_co
+  * a decrement which hits zero means we have no preempt_count and should
+  * reschedule.
+  */
+-static __always_inline bool __preempt_count_dec_and_test(void)
++static __always_inline bool ____preempt_count_dec_and_test(void)
+ {
+ 	return GEN_UNARY_RMWcc("decl", __preempt_count, e, __percpu_arg([var]));
+ }
+ 
++static __always_inline bool __preempt_count_dec_and_test(void)
++{
++	if (____preempt_count_dec_and_test())
++		return true;
++#ifdef CONFIG_PREEMPT_LAZY
++	if (preempt_count())
++		return false;
++	if (current_thread_info()->preempt_lazy_count)
++		return false;
++	return test_thread_flag(TIF_NEED_RESCHED_LAZY);
++#else
++	return false;
++#endif
++}
++
+ /*
+  * Returns true when we need to resched and can (barring IRQ state).
+  */
+ static __always_inline bool should_resched(int preempt_offset)
+ {
++#ifdef CONFIG_PREEMPT_LAZY
++	u32 tmp;
++	tmp = raw_cpu_read_4(__preempt_count);
++	if (tmp == preempt_offset)
++		return true;
++
++	/* preempt count == 0 ? */
++	tmp &= ~PREEMPT_NEED_RESCHED;
++	if (tmp != preempt_offset)
++		return false;
++	/* XXX PREEMPT_LOCK_OFFSET */
++	if (current_thread_info()->preempt_lazy_count)
++		return false;
++	return test_thread_flag(TIF_NEED_RESCHED_LAZY);
++#else
+ 	return unlikely(raw_cpu_read_4(__preempt_count) == preempt_offset);
++#endif
+ }
+ 
+ #ifdef CONFIG_PREEMPTION
+--- a/arch/x86/include/asm/thread_info.h
++++ b/arch/x86/include/asm/thread_info.h
+@@ -57,6 +57,8 @@ struct thread_info {
+ 	unsigned long		flags;		/* low level flags */
+ 	unsigned long		syscall_work;	/* SYSCALL_WORK_ flags */
+ 	u32			status;		/* thread synchronous flags */
++	int			preempt_lazy_count;	/* 0 => lazy preemptable
++							  <0 => BUG */
+ #ifdef CONFIG_SMP
+ 	u32			cpu;		/* current CPU */
+ #endif
+@@ -65,6 +67,7 @@ struct thread_info {
+ #define INIT_THREAD_INFO(tsk)			\
+ {						\
+ 	.flags		= 0,			\
++	.preempt_lazy_count	= 0,		\
+ }
+ 
+ #else /* !__ASSEMBLY__ */
+@@ -93,6 +96,7 @@ struct thread_info {
+ #define TIF_NOTSC		16	/* TSC is not accessible in userland */
+ #define TIF_NOTIFY_SIGNAL	17	/* signal notifications exist */
+ #define TIF_SLD			18	/* Restore split lock detection on context switch */
++#define TIF_NEED_RESCHED_LAZY	19	/* lazy rescheduling necessary */
+ #define TIF_MEMDIE		20	/* is terminating due to OOM killer */
+ #define TIF_POLLING_NRFLAG	21	/* idle is polling for TIF_NEED_RESCHED */
+ #define TIF_IO_BITMAP		22	/* uses I/O bitmap */
+@@ -117,6 +121,7 @@ struct thread_info {
+ #define _TIF_NOTSC		(1 << TIF_NOTSC)
+ #define _TIF_NOTIFY_SIGNAL	(1 << TIF_NOTIFY_SIGNAL)
+ #define _TIF_SLD		(1 << TIF_SLD)
++#define _TIF_NEED_RESCHED_LAZY	(1 << TIF_NEED_RESCHED_LAZY)
+ #define _TIF_POLLING_NRFLAG	(1 << TIF_POLLING_NRFLAG)
+ #define _TIF_IO_BITMAP		(1 << TIF_IO_BITMAP)
+ #define _TIF_SPEC_FORCE_UPDATE	(1 << TIF_SPEC_FORCE_UPDATE)
+@@ -148,6 +153,8 @@ struct thread_info {
+ 
+ #define _TIF_WORK_CTXSW_NEXT	(_TIF_WORK_CTXSW)
+ 
++#define _TIF_NEED_RESCHED_MASK	(_TIF_NEED_RESCHED | _TIF_NEED_RESCHED_LAZY)
++
+ #define STACK_WARN		(THREAD_SIZE/8)
+ 
+ /*
+--- a/include/linux/entry-common.h
++++ b/include/linux/entry-common.h
+@@ -59,7 +59,7 @@
+ 
+ #define EXIT_TO_USER_MODE_WORK						\
+ 	(_TIF_SIGPENDING | _TIF_NOTIFY_RESUME | _TIF_UPROBE |		\
+-	 _TIF_NEED_RESCHED | _TIF_PATCH_PENDING | _TIF_NOTIFY_SIGNAL |	\
++	 _TIF_NEED_RESCHED_MASK | _TIF_PATCH_PENDING | _TIF_NOTIFY_SIGNAL |	\
+ 	 ARCH_EXIT_TO_USER_MODE_WORK)
+ 
+ /**
+--- a/kernel/entry/common.c
++++ b/kernel/entry/common.c
+@@ -159,7 +159,7 @@ static unsigned long exit_to_user_mode_l
+ 
+ 		local_irq_enable_exit_to_user(ti_work);
+ 
+-		if (ti_work & _TIF_NEED_RESCHED)
++		if (ti_work & _TIF_NEED_RESCHED_MASK)
+ 			schedule();
+ 
+ #ifdef ARCH_RT_DELAYS_SIGNAL_SEND
diff --git a/debian/patches-rt/x86__kvm_Require_const_tsc_for_RT.patch b/debian/patches-rt/x86__kvm_Require_const_tsc_for_RT.patch
new file mode 100644
index 000000000000..39a2e7950cc2
--- /dev/null
+++ b/debian/patches-rt/x86__kvm_Require_const_tsc_for_RT.patch
@@ -0,0 +1,34 @@
+Subject: x86: kvm Require const tsc for RT
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Sun Nov  6 12:26:18 2011 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+Non constant TSC is a nightmare on bare metal already, but with
+virtualization it becomes a complete disaster because the workarounds
+are horrible latency wise. That's also a preliminary for running RT in
+a guest on top of a RT host.
+
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ arch/x86/kvm/x86.c |    6 ++++++
+ 1 file changed, 6 insertions(+)
+---
+--- a/arch/x86/kvm/x86.c
++++ b/arch/x86/kvm/x86.c
+@@ -8605,6 +8605,12 @@ int kvm_arch_init(void *opaque)
+ 		goto out;
+ 	}
+ 
++	if (IS_ENABLED(CONFIG_PREEMPT_RT) && !boot_cpu_has(X86_FEATURE_CONSTANT_TSC)) {
++		pr_err("RT requires X86_FEATURE_CONSTANT_TSC\n");
++		r = -EOPNOTSUPP;
++		goto out;
++	}
++
+ 	r = -ENOMEM;
+ 
+ 	x86_emulator_cache = kvm_alloc_emulator_cache();
diff --git a/debian/patches-rt/x86__stackprotector__Avoid_random_pool_on_rt.patch b/debian/patches-rt/x86__stackprotector__Avoid_random_pool_on_rt.patch
new file mode 100644
index 000000000000..42d92c156e71
--- /dev/null
+++ b/debian/patches-rt/x86__stackprotector__Avoid_random_pool_on_rt.patch
@@ -0,0 +1,50 @@
+Subject: x86: stackprotector: Avoid random pool on rt
+From: Thomas Gleixner <tglx@linutronix.de>
+Date: Thu Dec 16 14:25:18 2010 +0100
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Thomas Gleixner <tglx@linutronix.de>
+
+CPU bringup calls into the random pool to initialize the stack
+canary. During boot that works nicely even on RT as the might sleep
+checks are disabled. During CPU hotplug the might sleep checks
+trigger. Making the locks in random raw is a major PITA, so avoid the
+call on RT is the only sensible solution. This is basically the same
+randomness which we get during boot where the random pool has no
+entropy and we rely on the TSC randomnness.
+
+Reported-by: Carsten Emde <carsten.emde@osadl.org>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+
+---
+ arch/x86/include/asm/stackprotector.h |    8 +++++++-
+ 1 file changed, 7 insertions(+), 1 deletion(-)
+---
+--- a/arch/x86/include/asm/stackprotector.h
++++ b/arch/x86/include/asm/stackprotector.h
+@@ -50,7 +50,7 @@
+  */
+ static __always_inline void boot_init_stack_canary(void)
+ {
+-	u64 canary;
++	u64 canary = 0;
+ 	u64 tsc;
+ 
+ #ifdef CONFIG_X86_64
+@@ -61,8 +61,14 @@ static __always_inline void boot_init_st
+ 	 * of randomness. The TSC only matters for very early init,
+ 	 * there it already has some randomness on most systems. Later
+ 	 * on during the bootup the random pool has true entropy too.
++	 * For preempt-rt we need to weaken the randomness a bit, as
++	 * we can't call into the random generator from atomic context
++	 * due to locking constraints. We just leave canary
++	 * uninitialized and use the TSC based randomness on top of it.
+ 	 */
++#ifndef CONFIG_PREEMPT_RT
+ 	get_random_bytes(&canary, sizeof(canary));
++#endif
+ 	tsc = rdtsc();
+ 	canary += tsc + (tsc << 32UL);
+ 	canary &= CANARY_MASK;
diff --git a/debian/patches-rt/x86_entry__Use_should_resched_in_idtentry_exit_cond_resched.patch b/debian/patches-rt/x86_entry__Use_should_resched_in_idtentry_exit_cond_resched.patch
new file mode 100644
index 000000000000..37da75e96621
--- /dev/null
+++ b/debian/patches-rt/x86_entry__Use_should_resched_in_idtentry_exit_cond_resched.patch
@@ -0,0 +1,33 @@
+Subject: x86/entry: Use should_resched() in idtentry_exit_cond_resched()
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue Jun 30 11:45:14 2020 +0200
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+
+The TIF_NEED_RESCHED bit is inlined on x86 into the preemption counter.
+By using should_resched(0) instead of need_resched() the same check can
+be performed which uses the same variable as 'preempt_count()` which was
+issued before.
+
+Use should_resched(0) instead need_resched().
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
+
+
+---
+ kernel/entry/common.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+---
+--- a/kernel/entry/common.c
++++ b/kernel/entry/common.c
+@@ -395,7 +395,7 @@ void irqentry_exit_cond_resched(void)
+ 		rcu_irq_exit_check_preempt();
+ 		if (IS_ENABLED(CONFIG_DEBUG_ENTRY))
+ 			WARN_ON_ONCE(!on_thread_stack());
+-		if (need_resched())
++		if (should_resched(0))
+ 			preempt_schedule_irq();
+ 	}
+ }
diff --git a/debian/patches-rt/zsmalloc-enable.patch b/debian/patches-rt/zsmalloc-enable.patch
new file mode 100644
index 000000000000..fca96681afd4
--- /dev/null
+++ b/debian/patches-rt/zsmalloc-enable.patch
@@ -0,0 +1,29 @@
+From: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+Date: Tue, 28 Sep 2021 09:38:47 +0200
+Subject: [PATCH] mm/zsmalloc: Enable again.
+Origin: https://www.kernel.org/pub/linux/kernel/projects/rt/5.16/older/patches-5.16-rc2-rt4.tar.xz
+
+Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
+---
+ mm/Kconfig |    3 +--
+ 1 file changed, 1 insertion(+), 2 deletions(-)
+
+--- a/mm/Kconfig
++++ b/mm/Kconfig
+@@ -643,7 +643,6 @@ config ZSWAP_ZPOOL_DEFAULT_Z3FOLD
+ 
+ config ZSWAP_ZPOOL_DEFAULT_ZSMALLOC
+ 	bool "zsmalloc"
+-	depends on !PREEMPT_RT
+ 	select ZSMALLOC
+ 	help
+ 	  Use the zsmalloc allocator as the default allocator.
+@@ -694,7 +693,7 @@ config Z3FOLD
+ 
+ config ZSMALLOC
+ 	tristate "Memory allocator for compressed pages"
+-	depends on MMU && !PREEMPT_RT
++	depends on MMU
+ 	help
+ 	  zsmalloc is a slab-based memory allocator designed to store
+ 	  compressed RAM pages.  zsmalloc uses virtual memory mapping
diff --git a/debian/patches/bugfix/all/bpftool-fix-version-string-in-recursive-builds.patch b/debian/patches/bugfix/all/bpftool-fix-version-string-in-recursive-builds.patch
new file mode 100644
index 000000000000..6ac317ad2e24
--- /dev/null
+++ b/debian/patches/bugfix/all/bpftool-fix-version-string-in-recursive-builds.patch
@@ -0,0 +1,30 @@
+From: Ben Hutchings <benh@debian.org>
+Date: Fri, 14 Aug 2020 00:43:54 +0100
+Subject: bpftool: Fix version string in recursive builds
+Forwarded: https://lore.kernel.org/bpf/20200813235837.GA497088@decadent.org.uk/T/#u
+
+When bpftool is built as part of a Debian package build, which itself
+uses make, "bpftool version" shows:
+
+    bpftool vmake[4]: Entering directory /build/linux-5.8/tools/bpf/bpftool 5.8.8.0 make[4]: Leaving directory /build/linux-5.8
+
+Although we pass the "--no-print-directory" option, this is overridden
+by the environment variable "MAKEFLAGS=w".  Clear MAKEFLAGS for the
+"make kernelversion" command.
+
+I have no explanation for the doubled ".8" in the version string, but
+this seems to fix that as well.
+
+Signed-off-by: Ben Hutchings <benh@debian.org>
+---
+--- a/tools/bpf/bpftool/Makefile
++++ b/tools/bpf/bpftool/Makefile
+@@ -41,7 +41,7 @@ LIBBPF_INTERNAL_HDRS := $(addprefix $(LI
+ LIBBPF_BOOTSTRAP_INTERNAL_HDRS := $(addprefix $(LIBBPF_BOOTSTRAP_HDRS_DIR)/,hashmap.h)
+ 
+ ifeq ($(BPFTOOL_VERSION),)
+-BPFTOOL_VERSION := $(shell make -rR --no-print-directory -sC ../../.. kernelversion)
++BPFTOOL_VERSION := $(shell MAKEFLAGS= make -rR --no-print-directory -sC ../../.. kernelversion)
+ endif
+ 
+ $(LIBBPF_OUTPUT) $(BOOTSTRAP_OUTPUT) $(LIBBPF_BOOTSTRAP_OUTPUT) $(LIBBPF_HDRS_DIR) $(LIBBPF_BOOTSTRAP_HDRS_DIR):
diff --git a/debian/patches/bugfix/all/cpupower-bump-soname-version.patch b/debian/patches/bugfix/all/cpupower-bump-soname-version.patch
new file mode 100644
index 000000000000..7e5f52eaa986
--- /dev/null
+++ b/debian/patches/bugfix/all/cpupower-bump-soname-version.patch
@@ -0,0 +1,27 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Thu, 9 Jun 2016 23:35:08 +0100
+Subject: cpupower: Bump soname version
+Forwarded: http://mid.gmane.org/20160610005619.GQ7555@decadent.org.uk
+
+Several functions in the libcpupower API are renamed or removed in
+Linux 4.7.  This is an backward-incompatible ABI change, so the
+library soname should change from libcpupower.so.0 to
+libcpupower.so.1.
+
+Fixes: ac5a181d065d ("cpupower: Add cpuidle parts into library")
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ tools/power/cpupower/Makefile | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/tools/power/cpupower/Makefile
++++ b/tools/power/cpupower/Makefile
+@@ -53,7 +53,7 @@ DESTDIR ?=
+ 
+ VERSION:=			$(shell ./utils/version-gen.sh)
+ LIB_MAJ=			0.0.1
+-LIB_MIN=			0
++LIB_MIN=			1
+ 
+ PACKAGE =			cpupower
+ PACKAGE_BUGREPORT =		linux-pm@vger.kernel.org
diff --git a/debian/patches/bugfix/all/cpupower-fix-checks-for-cpu-existence.patch b/debian/patches/bugfix/all/cpupower-fix-checks-for-cpu-existence.patch
new file mode 100644
index 000000000000..5cce9b76a242
--- /dev/null
+++ b/debian/patches/bugfix/all/cpupower-fix-checks-for-cpu-existence.patch
@@ -0,0 +1,49 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Thu, 03 Nov 2016 15:25:26 -0600
+Subject: cpupower: Fix checks for CPU existence
+Forwarded: https://marc.info/?l=linux-pm&m=149248268214265
+
+Calls to cpufreq_cpu_exists(cpu) were converted to
+cpupower_is_cpu_online(cpu) when libcpupower was introduced and the
+former function was deleted.  However, cpupower_is_cpu_online() does
+not distinguish physically absent and offline CPUs, and does not set
+errno.
+
+cpufreq-set has already been fixed (commit c25badc9ceb6).
+
+In cpufreq-bench, which prints an error message for offline CPUs,
+properly distinguish and report the zero and negative cases.
+
+Fixes: ac5a181d065d ("cpupower: Add cpuidle parts into library")
+Fixes: 53d1cd6b125f ("cpupowerutils: bench - Fix cpu online check")
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+[carnil: Update/Refresh patch for 4.14.17: The issue with the
+incorrect check has been fixed with upstream commit 53d1cd6b125f.
+Keep in the patch the distinction and report for the zero and
+negative cases.]
+---
+--- a/tools/power/cpupower/bench/system.c
++++ b/tools/power/cpupower/bench/system.c
+@@ -58,12 +58,19 @@ long long int get_time()
+ 
+ int set_cpufreq_governor(char *governor, unsigned int cpu)
+ {
++	int rc;
+ 
+ 	dprintf("set %s as cpufreq governor\n", governor);
+ 
+-	if (cpupower_is_cpu_online(cpu) != 1) {
+-		perror("cpufreq_cpu_exists");
+-		fprintf(stderr, "error: cpu %u does not exist\n", cpu);
++	rc = cpupower_is_cpu_online(cpu);
++	if (rc != 1) {
++		if (rc < 0)
++			fprintf(stderr, "cpupower_is_cpu_online: %s\n",
++				strerror(-rc));
++		else
++			fprintf(stderr,
++				"error: cpu %u is offline or does not exist\n",
++				cpu);
+ 		return -1;
+ 	}
+ 
diff --git a/debian/patches/bugfix/all/disable-some-marvell-phys.patch b/debian/patches/bugfix/all/disable-some-marvell-phys.patch
new file mode 100644
index 000000000000..9c4987116ae3
--- /dev/null
+++ b/debian/patches/bugfix/all/disable-some-marvell-phys.patch
@@ -0,0 +1,91 @@
+From: Ian Campbell <ijc@hellion.org.uk>
+Subject: phy/marvell: disable 4-port phys
+Date: Wed, 20 Nov 2013 08:30:14 +0000
+Bug-Debian: https://bugs.debian.org/723177
+Forwarded: http://thread.gmane.org/gmane.linux.debian.devel.bugs.general/1107774/
+
+The Marvell PHY was originally disabled because it can cause networking
+failures on some systems. According to Lennert Buytenhek this is because some
+of the variants added did not share the same register layout. Since the known
+cases are all 4-ports disable those variants (indicated by a 4 in the
+penultimate position of the model name) until they can be audited for
+correctness.
+
+[bwh: Also #if-out the init functions for these PHYs to avoid
+ compiler warnings]
+
+--- a/drivers/net/phy/marvell.c
++++ b/drivers/net/phy/marvell.c
+@@ -1262,6 +1262,7 @@
+ 	return genphy_soft_reset(phydev);
+ }
+ 
++#if 0
+ static int m88e1149_config_init(struct phy_device *phydev)
+ {
+ 	int err;
+@@ -1287,7 +1288,9 @@
+ 
+ 	return genphy_soft_reset(phydev);
+ }
++#endif
+ 
++#if 0
+ static int m88e1145_config_init_rgmii(struct phy_device *phydev)
+ {
+ 	int err;
+@@ -1365,6 +1368,7 @@
+ 
+ 	return 0;
+ }
++#endif
+ 
+ static int m88e1540_get_fld(struct phy_device *phydev, u8 *msecs)
+ {
+@@ -2853,6 +2857,7 @@
+ 		.get_strings = marvell_get_strings,
+ 		.get_stats = marvell_get_stats,
+ 	},
++#if 0
+ 	{
+ 		.phy_id = MARVELL_PHY_ID_88E1145,
+ 		.phy_id_mask = MARVELL_PHY_ID_MASK,
+@@ -2873,6 +2878,8 @@
+ 		.get_tunable = m88e1111_get_tunable,
+ 		.set_tunable = m88e1111_set_tunable,
+ 	},
++#endif
++#if 0
+ 	{
+ 		.phy_id = MARVELL_PHY_ID_88E1149R,
+ 		.phy_id_mask = MARVELL_PHY_ID_MASK,
+@@ -2891,6 +2898,8 @@
+ 		.get_strings = marvell_get_strings,
+ 		.get_stats = marvell_get_stats,
+ 	},
++#endif
++#if 0
+ 	{
+ 		.phy_id = MARVELL_PHY_ID_88E1240,
+ 		.phy_id_mask = MARVELL_PHY_ID_MASK,
+@@ -2911,6 +2920,7 @@
+ 		.get_tunable = m88e1011_get_tunable,
+ 		.set_tunable = m88e1011_set_tunable,
+ 	},
++#endif
+ 	{
+ 		.phy_id = MARVELL_PHY_ID_88E1116R,
+ 		.phy_id_mask = MARVELL_PHY_ID_MASK,
+@@ -3163,9 +3173,9 @@
+ 	{ MARVELL_PHY_ID_88E1111_FINISAR, MARVELL_PHY_ID_MASK },
+ 	{ MARVELL_PHY_ID_88E1118, MARVELL_PHY_ID_MASK },
+ 	{ MARVELL_PHY_ID_88E1121R, MARVELL_PHY_ID_MASK },
+-	{ MARVELL_PHY_ID_88E1145, MARVELL_PHY_ID_MASK },
+-	{ MARVELL_PHY_ID_88E1149R, MARVELL_PHY_ID_MASK },
+-	{ MARVELL_PHY_ID_88E1240, MARVELL_PHY_ID_MASK },
++/*	{ MARVELL_PHY_ID_88E1145, MARVELL_PHY_ID_MASK }, */
++/*	{ MARVELL_PHY_ID_88E1149R, MARVELL_PHY_ID_MASK }, */
++/*	{ MARVELL_PHY_ID_88E1240, MARVELL_PHY_ID_MASK }, */
+ 	{ MARVELL_PHY_ID_88E1318S, MARVELL_PHY_ID_MASK },
+ 	{ MARVELL_PHY_ID_88E1116R, MARVELL_PHY_ID_MASK },
+ 	{ MARVELL_PHY_ID_88E1510, MARVELL_PHY_ID_MASK },
diff --git a/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch b/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
new file mode 100644
index 000000000000..70137641744d
--- /dev/null
+++ b/debian/patches/bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
@@ -0,0 +1,2766 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: firmware: Remove redundant log messages from drivers
+Date: Sun, 09 Dec 2012 16:40:31 +0000
+Forwarded: no
+
+Now that firmware_class logs every success and failure consistently,
+many other log messages can be removed from drivers.
+
+This will probably need to be split up into multiple patches prior to
+upstream submission.
+
+Index: linux/arch/x86/kernel/cpu/microcode/amd.c
+===================================================================
+--- linux.orig/arch/x86/kernel/cpu/microcode/amd.c
++++ linux/arch/x86/kernel/cpu/microcode/amd.c
+@@ -900,10 +900,8 @@ static enum ucode_state request_microcod
+ 	if (c->x86 >= 0x15)
+ 		snprintf(fw_name, sizeof(fw_name), "amd-ucode/microcode_amd_fam%.2xh.bin", c->x86);
+ 
+-	if (request_firmware_direct(&fw, (const char *)fw_name, device)) {
+-		pr_debug("failed to load file %s\n", fw_name);
++	if (request_firmware_direct(&fw, (const char *)fw_name, device))
+ 		goto out;
+-	}
+ 
+ 	ret = UCODE_ERROR;
+ 	if (!verify_container(fw->data, fw->size, false))
+Index: linux/drivers/atm/ambassador.c
+===================================================================
+--- linux.orig/drivers/atm/ambassador.c
++++ linux/drivers/atm/ambassador.c
+@@ -1914,10 +1914,8 @@ static int ucode_init(loader_block *lb,
+   int res;
+ 
+   res = request_ihex_firmware(&fw, "atmsar11.fw", &dev->pci_dev->dev);
+-  if (res) {
+-    PRINTK (KERN_ERR, "Cannot load microcode data");
++  if (res)
+     return res;
+-  }
+ 
+   /* First record contains just the start address */
+   rec = (const struct ihex_binrec *)fw->data;
+Index: linux/drivers/atm/fore200e.c
+===================================================================
+--- linux.orig/drivers/atm/fore200e.c
++++ linux/drivers/atm/fore200e.c
+@@ -2398,10 +2398,9 @@ static int fore200e_load_and_start_fw(st
+     int err;
+ 
+     sprintf(buf, "%s%s", fore200e->bus->proc_name, FW_EXT);
+-    if ((err = request_firmware(&firmware, buf, fore200e->dev)) < 0) {
+-	printk(FORE200E "problem loading firmware image %s\n", fore200e->bus->model_name);
++    err = request_firmware(&firmware, buf, fore200e->dev);
++    if (err)
+ 	return err;
+-    }
+ 
+     fw_data = (const __le32 *)firmware->data;
+     fw_size = firmware->size / sizeof(u32);
+Index: linux/drivers/bluetooth/ath3k.c
+===================================================================
+--- linux.orig/drivers/bluetooth/ath3k.c
++++ linux/drivers/bluetooth/ath3k.c
+@@ -382,10 +382,8 @@ static int ath3k_load_patch(struct usb_d
+ 		 le32_to_cpu(fw_version.rom_version));
+ 
+ 	ret = request_firmware(&firmware, filename, &udev->dev);
+-	if (ret < 0) {
+-		BT_ERR("Patch file not found %s", filename);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	pt_rom_version = get_unaligned_le32(firmware->data +
+ 					    firmware->size - 8);
+@@ -445,10 +443,8 @@ static int ath3k_load_syscfg(struct usb_
+ 		le32_to_cpu(fw_version.rom_version), clk_value, ".dfu");
+ 
+ 	ret = request_firmware(&firmware, filename, &udev->dev);
+-	if (ret < 0) {
+-		BT_ERR("Configuration file not found %s", filename);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	ret = ath3k_load_fwfile(udev, firmware);
+ 	release_firmware(firmware);
+Index: linux/drivers/bluetooth/bcm203x.c
+===================================================================
+--- linux.orig/drivers/bluetooth/bcm203x.c
++++ linux/drivers/bluetooth/bcm203x.c
+@@ -174,7 +174,6 @@ static int bcm203x_probe(struct usb_inte
+ 		return -ENOMEM;
+ 
+ 	if (request_firmware(&firmware, "BCM2033-MD.hex", &udev->dev) < 0) {
+-		BT_ERR("Mini driver request failed");
+ 		usb_free_urb(data->urb);
+ 		return -EIO;
+ 	}
+@@ -199,7 +198,6 @@ static int bcm203x_probe(struct usb_inte
+ 	release_firmware(firmware);
+ 
+ 	if (request_firmware(&firmware, "BCM2033-FW.bin", &udev->dev) < 0) {
+-		BT_ERR("Firmware request failed");
+ 		usb_free_urb(data->urb);
+ 		kfree(data->buffer);
+ 		return -EIO;
+Index: linux/drivers/bluetooth/bfusb.c
+===================================================================
+--- linux.orig/drivers/bluetooth/bfusb.c
++++ linux/drivers/bluetooth/bfusb.c
+@@ -636,10 +636,8 @@ static int bfusb_probe(struct usb_interf
+ 	skb_queue_head_init(&data->pending_q);
+ 	skb_queue_head_init(&data->completed_q);
+ 
+-	if (request_firmware(&firmware, "bfubase.frm", &udev->dev) < 0) {
+-		BT_ERR("Firmware request failed");
++	if (request_firmware(&firmware, "bfubase.frm", &udev->dev))
+ 		goto done;
+-	}
+ 
+ 	BT_DBG("firmware data %p size %zu", firmware->data, firmware->size);
+ 
+Index: linux/drivers/bluetooth/bt3c_cs.c
+===================================================================
+--- linux.orig/drivers/bluetooth/bt3c_cs.c
++++ linux/drivers/bluetooth/bt3c_cs.c
+@@ -569,10 +569,8 @@ static int bt3c_open(struct bt3c_info *i
+ 
+ 	/* Load firmware */
+ 	err = request_firmware(&firmware, "BT3CPCC.bin", &info->p_dev->dev);
+-	if (err < 0) {
+-		BT_ERR("Firmware request failed");
++	if (err)
+ 		goto error;
+-	}
+ 
+ 	err = bt3c_load_firmware(info, firmware->data, firmware->size);
+ 
+Index: linux/drivers/bluetooth/btmrvl_sdio.c
+===================================================================
+--- linux.orig/drivers/bluetooth/btmrvl_sdio.c
++++ linux/drivers/bluetooth/btmrvl_sdio.c
+@@ -483,8 +483,6 @@ static int btmrvl_sdio_download_helper(s
+ 	ret = request_firmware(&fw_helper, card->helper,
+ 						&card->func->dev);
+ 	if ((ret < 0) || !fw_helper) {
+-		BT_ERR("request_firmware(helper) failed, error code = %d",
+-									ret);
+ 		ret = -ENOENT;
+ 		goto done;
+ 	}
+@@ -583,8 +581,6 @@ static int btmrvl_sdio_download_fw_w_hel
+ 	ret = request_firmware(&fw_firmware, card->firmware,
+ 							&card->func->dev);
+ 	if ((ret < 0) || !fw_firmware) {
+-		BT_ERR("request_firmware(firmware) failed, error code = %d",
+-									ret);
+ 		ret = -ENOENT;
+ 		goto done;
+ 	}
+Index: linux/drivers/char/dsp56k.c
+===================================================================
+--- linux.orig/drivers/char/dsp56k.c
++++ linux/drivers/char/dsp56k.c
+@@ -140,11 +140,8 @@ static int dsp56k_upload(u_char __user *
+ 	}
+ 	err = request_firmware(&fw, fw_name, &pdev->dev);
+ 	platform_device_unregister(pdev);
+-	if (err) {
+-		printk(KERN_ERR "Failed to load image \"%s\" err %d\n",
+-		       fw_name, err);
++	if (err)
+ 		return err;
+-	}
+ 	if (fw->size % 3) {
+ 		printk(KERN_ERR "Bogus length %d in image \"%s\"\n",
+ 		       fw->size, fw_name);
+Index: linux/drivers/dma/imx-sdma.c
+===================================================================
+--- linux.orig/drivers/dma/imx-sdma.c
++++ linux/drivers/dma/imx-sdma.c
+@@ -1800,11 +1800,8 @@ static void sdma_load_firmware(const str
+ 	const struct sdma_script_start_addrs *addr;
+ 	unsigned short *ram_code;
+ 
+-	if (!fw) {
+-		dev_info(sdma->dev, "external firmware not found, using ROM firmware\n");
+-		/* In this case we just use the ROM firmware. */
++	if (!fw)
+ 		return;
+-	}
+ 
+ 	if (fw->size < sizeof(*header))
+ 		goto err_firmware;
+Index: linux/drivers/gpu/drm/mga/mga_warp.c
+===================================================================
+--- linux.orig/drivers/gpu/drm/mga/mga_warp.c
++++ linux/drivers/gpu/drm/mga/mga_warp.c
+@@ -77,11 +77,8 @@ int mga_warp_install_microcode(drm_mga_p
+ 	}
+ 	rc = request_ihex_firmware(&fw, firmware_name, &pdev->dev);
+ 	platform_device_unregister(pdev);
+-	if (rc) {
+-		DRM_ERROR("mga: Failed to load microcode \"%s\"\n",
+-			  firmware_name);
++	if (rc)
+ 		return rc;
+-	}
+ 
+ 	size = 0;
+ 	where = 0;
+Index: linux/drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c
+===================================================================
+--- linux.orig/drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c
++++ linux/drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c
+@@ -2445,10 +2445,8 @@ gf100_gr_load_fw(struct gf100_gr *gr, co
+ 	if (ret) {
+ 		snprintf(f, sizeof(f), "nouveau/%s", name);
+ 		ret = request_firmware(&fw, f, device->dev);
+-		if (ret) {
+-			nvkm_error(subdev, "failed to load %s\n", name);
++		if (ret)
+ 			return ret;
+-		}
+ 	}
+ 
+ 	blob->size = fw->size;
+Index: linux/drivers/gpu/drm/r128/r128_cce.c
+===================================================================
+--- linux.orig/drivers/gpu/drm/r128/r128_cce.c
++++ linux/drivers/gpu/drm/r128/r128_cce.c
+@@ -161,11 +161,8 @@ static int r128_cce_load_microcode(drm_r
+ 	}
+ 	rc = request_firmware(&fw, FIRMWARE_NAME, &pdev->dev);
+ 	platform_device_unregister(pdev);
+-	if (rc) {
+-		pr_err("r128_cce: Failed to load firmware \"%s\"\n",
+-		       FIRMWARE_NAME);
++	if (rc)
+ 		return rc;
+-	}
+ 
+ 	if (fw->size != 256 * 8) {
+ 		pr_err("r128_cce: Bogus length %zu in firmware \"%s\"\n",
+Index: linux/drivers/gpu/drm/radeon/ni.c
+===================================================================
+--- linux.orig/drivers/gpu/drm/radeon/ni.c
++++ linux/drivers/gpu/drm/radeon/ni.c
+@@ -820,9 +820,6 @@ int ni_init_microcode(struct radeon_devi
+ 
+ out:
+ 	if (err) {
+-		if (err != -EINVAL)
+-			pr_err("ni_cp: Failed to load firmware \"%s\"\n",
+-			       fw_name);
+ 		release_firmware(rdev->pfp_fw);
+ 		rdev->pfp_fw = NULL;
+ 		release_firmware(rdev->me_fw);
+Index: linux/drivers/gpu/drm/radeon/r100.c
+===================================================================
+--- linux.orig/drivers/gpu/drm/radeon/r100.c
++++ linux/drivers/gpu/drm/radeon/r100.c
+@@ -1056,9 +1056,7 @@ static int r100_cp_init_microcode(struct
+ 	}
+ 
+ 	err = request_firmware(&rdev->me_fw, fw_name, rdev->dev);
+-	if (err) {
+-		pr_err("radeon_cp: Failed to load firmware \"%s\"\n", fw_name);
+-	} else if (rdev->me_fw->size % 8) {
++	if (err == 0 && rdev->me_fw->size % 8) {
+ 		pr_err("radeon_cp: Bogus length %zu in firmware \"%s\"\n",
+ 		       rdev->me_fw->size, fw_name);
+ 		err = -EINVAL;
+Index: linux/drivers/gpu/drm/radeon/r600.c
+===================================================================
+--- linux.orig/drivers/gpu/drm/radeon/r600.c
++++ linux/drivers/gpu/drm/radeon/r600.c
+@@ -2600,9 +2600,6 @@ int r600_init_microcode(struct radeon_de
+ 
+ out:
+ 	if (err) {
+-		if (err != -EINVAL)
+-			pr_err("r600_cp: Failed to load firmware \"%s\"\n",
+-			       fw_name);
+ 		release_firmware(rdev->pfp_fw);
+ 		rdev->pfp_fw = NULL;
+ 		release_firmware(rdev->me_fw);
+Index: linux/drivers/infiniband/hw/qib/qib_sd7220.c
+===================================================================
+--- linux.orig/drivers/infiniband/hw/qib/qib_sd7220.c
++++ linux/drivers/infiniband/hw/qib/qib_sd7220.c
+@@ -406,10 +406,8 @@ int qib_sd7220_init(struct qib_devdata *
+ 	}
+ 
+ 	ret = request_firmware(&fw, SD7220_FW_NAME, &dd->pcidev->dev);
+-	if (ret) {
+-		qib_dev_err(dd, "Failed to load IB SERDES image\n");
++	if (ret)
+ 		goto done;
+-	}
+ 
+ 	/* Substitute our deduced value for was_reset */
+ 	ret = qib_ibsd_ucode_loaded(dd->pport, fw);
+Index: linux/drivers/input/touchscreen/atmel_mxt_ts.c
+===================================================================
+--- linux.orig/drivers/input/touchscreen/atmel_mxt_ts.c
++++ linux/drivers/input/touchscreen/atmel_mxt_ts.c
+@@ -2870,10 +2870,8 @@ static int mxt_load_fw(struct device *de
+ 	int ret;
+ 
+ 	ret = request_firmware(&fw, fn, dev);
+-	if (ret) {
+-		dev_err(dev, "Unable to open firmware %s\n", fn);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	/* Check for incorrect enc file */
+ 	ret = mxt_check_firmware_format(dev, fw);
+Index: linux/drivers/isdn/hardware/mISDN/speedfax.c
+===================================================================
+--- linux.orig/drivers/isdn/hardware/mISDN/speedfax.c
++++ linux/drivers/isdn/hardware/mISDN/speedfax.c
+@@ -379,11 +379,8 @@ setup_instance(struct sfax_hw *card)
+ 	card->isar.owner = THIS_MODULE;
+ 
+ 	err = request_firmware(&firmware, "isdn/ISAR.BIN", &card->pdev->dev);
+-	if (err < 0) {
+-		pr_info("%s: firmware request failed %d\n",
+-			card->name, err);
++	if (err)
+ 		goto error_fw;
+-	}
+ 	if (debug & DEBUG_HW)
+ 		pr_notice("%s: got firmware %zu bytes\n",
+ 			  card->name, firmware->size);
+Index: linux/drivers/media/common/siano/smscoreapi.c
+===================================================================
+--- linux.orig/drivers/media/common/siano/smscoreapi.c
++++ linux/drivers/media/common/siano/smscoreapi.c
+@@ -1152,10 +1152,8 @@ static int smscore_load_firmware_from_fi
+ 		return -EINVAL;
+ 
+ 	rc = request_firmware(&fw, fw_filename, coredev->device);
+-	if (rc < 0) {
+-		pr_err("failed to open firmware file '%s'\n", fw_filename);
++	if (rc < 0)
+ 		return rc;
+-	}
+ 	pr_debug("read fw %s, buffer size=0x%zx\n", fw_filename, fw->size);
+ 	fw_buf = kmalloc(ALIGN(fw->size + sizeof(struct sms_firmware),
+ 			 SMS_ALLOC_ALIGNMENT), GFP_KERNEL | coredev->gfp_buf_flags);
+Index: linux/drivers/media/dvb-frontends/af9013.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/af9013.c
++++ linux/drivers/media/dvb-frontends/af9013.c
+@@ -1049,14 +1049,8 @@ static int af9013_download_firmware(stru
+ 
+ 	/* Request the firmware, will block and timeout */
+ 	ret = request_firmware(&firmware, name, &client->dev);
+-	if (ret) {
+-		dev_info(&client->dev, "firmware file '%s' not found %d\n",
+-			 name, ret);
++	if (ret)
+ 		goto err;
+-	}
+-
+-	dev_info(&client->dev, "downloading firmware from file '%s'\n",
+-		 name);
+ 
+ 	/* Write firmware checksum & size */
+ 	for (i = 0; i < firmware->size; i++)
+Index: linux/drivers/media/dvb-frontends/bcm3510.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/bcm3510.c
++++ linux/drivers/media/dvb-frontends/bcm3510.c
+@@ -636,10 +636,9 @@ static int bcm3510_download_firmware(str
+ 	int ret,i;
+ 
+ 	deb_info("requesting firmware\n");
+-	if ((ret = st->config->request_firmware(fe, &fw, BCM3510_DEFAULT_FIRMWARE)) < 0) {
+-		err("could not load firmware (%s): %d",BCM3510_DEFAULT_FIRMWARE,ret);
++	ret = st->config->request_firmware(fe, &fw, BCM3510_DEFAULT_FIRMWARE);
++	if (ret)
+ 		return ret;
+-	}
+ 	deb_info("got firmware: %zu\n", fw->size);
+ 
+ 	b = fw->data;
+Index: linux/drivers/media/dvb-frontends/cx24116.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/cx24116.c
++++ linux/drivers/media/dvb-frontends/cx24116.c
+@@ -479,13 +479,8 @@ static int cx24116_firmware_ondemand(str
+ 			__func__, CX24116_DEFAULT_FIRMWARE);
+ 		ret = request_firmware(&fw, CX24116_DEFAULT_FIRMWARE,
+ 			state->i2c->dev.parent);
+-		printk(KERN_INFO "%s: Waiting for firmware upload(2)...\n",
+-			__func__);
+-		if (ret) {
+-			printk(KERN_ERR "%s: No firmware uploaded (timeout or file not found?)\n",
+-			       __func__);
++		if (ret)
+ 			return ret;
+-		}
+ 
+ 		/* Make sure we don't recurse back through here
+ 		 * during loading */
+Index: linux/drivers/media/dvb-frontends/drxd_hard.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/drxd_hard.c
++++ linux/drivers/media/dvb-frontends/drxd_hard.c
+@@ -891,10 +891,8 @@ static int load_firmware(struct drxd_sta
+ {
+ 	const struct firmware *fw;
+ 
+-	if (request_firmware(&fw, fw_name, state->dev) < 0) {
+-		printk(KERN_ERR "drxd: firmware load failure [%s]\n", fw_name);
++	if (request_firmware(&fw, fw_name, state->dev))
+ 		return -EIO;
+-	}
+ 
+ 	state->microcode = kmemdup(fw->data, fw->size, GFP_KERNEL);
+ 	if (!state->microcode) {
+Index: linux/drivers/media/dvb-frontends/drxk_hard.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/drxk_hard.c
++++ linux/drivers/media/dvb-frontends/drxk_hard.c
+@@ -6260,10 +6260,6 @@ static void load_firmware_cb(const struc
+ 
+ 	dprintk(1, ": %s\n", fw ? "firmware loaded" : "firmware not loaded");
+ 	if (!fw) {
+-		pr_err("Could not load firmware file %s.\n",
+-			state->microcode_name);
+-		pr_info("Copy %s to your hotplug directory!\n",
+-			state->microcode_name);
+ 		state->microcode_name = NULL;
+ 
+ 		/*
+Index: linux/drivers/media/dvb-frontends/ds3000.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/ds3000.c
++++ linux/drivers/media/dvb-frontends/ds3000.c
+@@ -348,12 +348,8 @@ static int ds3000_firmware_ondemand(stru
+ 				DS3000_DEFAULT_FIRMWARE);
+ 	ret = request_firmware(&fw, DS3000_DEFAULT_FIRMWARE,
+ 				state->i2c->dev.parent);
+-	printk(KERN_INFO "%s: Waiting for firmware upload(2)...\n", __func__);
+-	if (ret) {
+-		printk(KERN_ERR "%s: No firmware uploaded (timeout or file not found?)\n",
+-		       __func__);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	ret = ds3000_load_firmware(fe, fw);
+ 	if (ret)
+Index: linux/drivers/media/dvb-frontends/nxt200x.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/nxt200x.c
++++ linux/drivers/media/dvb-frontends/nxt200x.c
+@@ -861,12 +861,8 @@ static int nxt2002_init(struct dvb_front
+ 		 __func__, NXT2002_DEFAULT_FIRMWARE);
+ 	ret = request_firmware(&fw, NXT2002_DEFAULT_FIRMWARE,
+ 			       state->i2c->dev.parent);
+-	pr_debug("%s: Waiting for firmware upload(2)...\n", __func__);
+-	if (ret) {
+-		pr_err("%s: No firmware uploaded (timeout or file not found?)\n",
+-		       __func__);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	ret = nxt2002_load_firmware(fe, fw);
+ 	release_firmware(fw);
+@@ -928,12 +924,8 @@ static int nxt2004_init(struct dvb_front
+ 		 __func__, NXT2004_DEFAULT_FIRMWARE);
+ 	ret = request_firmware(&fw, NXT2004_DEFAULT_FIRMWARE,
+ 			       state->i2c->dev.parent);
+-	pr_debug("%s: Waiting for firmware upload(2)...\n", __func__);
+-	if (ret) {
+-		pr_err("%s: No firmware uploaded (timeout or file not found?)\n",
+-		       __func__);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	ret = nxt2004_load_firmware(fe, fw);
+ 	release_firmware(fw);
+Index: linux/drivers/media/dvb-frontends/or51132.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/or51132.c
++++ linux/drivers/media/dvb-frontends/or51132.c
+@@ -326,10 +326,8 @@ static int or51132_set_parameters(struct
+ 		printk("or51132: Waiting for firmware upload(%s)...\n",
+ 		       fwname);
+ 		ret = request_firmware(&fw, fwname, state->i2c->dev.parent);
+-		if (ret) {
+-			printk(KERN_WARNING "or51132: No firmware uploaded(timeout or file not found?)\n");
++		if (ret)
+ 			return ret;
+-		}
+ 		ret = or51132_load_firmware(fe, fw);
+ 		release_firmware(fw);
+ 		if (ret) {
+Index: linux/drivers/media/dvb-frontends/or51211.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/or51211.c
++++ linux/drivers/media/dvb-frontends/or51211.c
+@@ -361,11 +361,8 @@ static int or51211_init(struct dvb_front
+ 			OR51211_DEFAULT_FIRMWARE);
+ 		ret = config->request_firmware(fe, &fw,
+ 					       OR51211_DEFAULT_FIRMWARE);
+-		pr_info("Got Hotplug firmware\n");
+-		if (ret) {
+-			pr_warn("No firmware uploaded (timeout or file not found?)\n");
++		if (ret)
+ 			return ret;
+-		}
+ 
+ 		ret = or51211_load_firmware(fe, fw);
+ 		release_firmware(fw);
+Index: linux/drivers/media/dvb-frontends/sp887x.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/sp887x.c
++++ linux/drivers/media/dvb-frontends/sp887x.c
+@@ -527,10 +527,8 @@ static int sp887x_init(struct dvb_fronte
+ 		/* request the firmware, this will block until someone uploads it */
+ 		printk("sp887x: waiting for firmware upload (%s)...\n", SP887X_DEFAULT_FIRMWARE);
+ 		ret = state->config->request_firmware(fe, &fw, SP887X_DEFAULT_FIRMWARE);
+-		if (ret) {
+-			printk("sp887x: no firmware upload (timeout or file not found?)\n");
++		if (ret)
+ 			return ret;
+-		}
+ 
+ 		ret = sp887x_initial_setup(fe, fw);
+ 		release_firmware(fw);
+Index: linux/drivers/media/dvb-frontends/tda10048.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/tda10048.c
++++ linux/drivers/media/dvb-frontends/tda10048.c
+@@ -483,8 +483,6 @@ static int tda10048_firmware_upload(stru
+ 	ret = request_firmware(&fw, TDA10048_DEFAULT_FIRMWARE,
+ 		state->i2c->dev.parent);
+ 	if (ret) {
+-		printk(KERN_ERR "%s: Upload failed. (file not found?)\n",
+-			__func__);
+ 		return -EIO;
+ 	} else {
+ 		printk(KERN_INFO "%s: firmware read %zu bytes.\n",
+Index: linux/drivers/media/dvb-frontends/tda1004x.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/tda1004x.c
++++ linux/drivers/media/dvb-frontends/tda1004x.c
+@@ -388,10 +388,8 @@ static int tda10045_fwupload(struct dvb_
+ 	/* request the firmware, this will block until someone uploads it */
+ 	printk(KERN_INFO "tda1004x: waiting for firmware upload (%s)...\n", TDA10045_DEFAULT_FIRMWARE);
+ 	ret = state->config->request_firmware(fe, &fw, TDA10045_DEFAULT_FIRMWARE);
+-	if (ret) {
+-		printk(KERN_ERR "tda1004x: no firmware upload (timeout or file not found?)\n");
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	/* reset chip */
+ 	tda1004x_write_mask(state, TDA1004X_CONFC4, 0x10, 0);
+@@ -532,7 +530,6 @@ static int tda10046_fwupload(struct dvb_
+ 			/* remain compatible to old bug: try to load with tda10045 image name */
+ 			ret = state->config->request_firmware(fe, &fw, TDA10045_DEFAULT_FIRMWARE);
+ 			if (ret) {
+-				printk(KERN_ERR "tda1004x: no firmware upload (timeout or file not found?)\n");
+ 				return ret;
+ 			} else {
+ 				printk(KERN_INFO "tda1004x: please rename the firmware file to %s\n",
+Index: linux/drivers/media/dvb-frontends/tda10071.c
+===================================================================
+--- linux.orig/drivers/media/dvb-frontends/tda10071.c
++++ linux/drivers/media/dvb-frontends/tda10071.c
+@@ -838,12 +838,8 @@ static int tda10071_init(struct dvb_fron
+ 
+ 		/* request the firmware, this will block and timeout */
+ 		ret = request_firmware(&fw, fw_file, &client->dev);
+-		if (ret) {
+-			dev_err(&client->dev,
+-				"did not find the firmware file '%s' (status %d). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware\n",
+-				fw_file, ret);
++		if (ret)
+ 			goto error;
+-		}
+ 
+ 		/* init */
+ 		for (i = 0; i < ARRAY_SIZE(tab2); i++) {
+Index: linux/drivers/media/i2c/cx25840/cx25840-firmware.c
+===================================================================
+--- linux.orig/drivers/media/i2c/cx25840/cx25840-firmware.c
++++ linux/drivers/media/i2c/cx25840/cx25840-firmware.c
+@@ -113,10 +113,8 @@ int cx25840_loadfw(struct i2c_client *cl
+ 	if (is_cx231xx(state) && max_buf_size > 16)
+ 		max_buf_size = 16;
+ 
+-	if (request_firmware(&fw, fwname, FWDEV(client)) != 0) {
+-		v4l_err(client, "unable to open firmware %s\n", fwname);
++	if (request_firmware(&fw, fwname, FWDEV(client)) != 0)
+ 		return -EINVAL;
+-	}
+ 
+ 	start_fw_load(client);
+ 
+Index: linux/drivers/media/pci/bt8xx/bttv-cards.c
+===================================================================
+--- linux.orig/drivers/media/pci/bt8xx/bttv-cards.c
++++ linux/drivers/media/pci/bt8xx/bttv-cards.c
+@@ -3904,10 +3904,8 @@ static int pvr_boot(struct bttv *btv)
+ 	int rc;
+ 
+ 	rc = request_firmware(&fw_entry, "hcwamc.rbf", &btv->c.pci->dev);
+-	if (rc != 0) {
+-		pr_warn("%d: no altera firmware [via hotplug]\n", btv->c.nr);
++	if (rc != 0)
+ 		return rc;
+-	}
+ 	rc = pvr_altera_load(btv, fw_entry->data, fw_entry->size);
+ 	pr_info("%d: altera firmware upload %s\n",
+ 		btv->c.nr, (rc < 0) ? "failed" : "ok");
+Index: linux/drivers/media/pci/cx18/cx18-av-firmware.c
+===================================================================
+--- linux.orig/drivers/media/pci/cx18/cx18-av-firmware.c
++++ linux/drivers/media/pci/cx18/cx18-av-firmware.c
+@@ -70,10 +70,8 @@ int cx18_av_loadfw(struct cx18 *cx)
+ 	int i;
+ 	int retries1 = 0;
+ 
+-	if (request_firmware(&fw, FWFILE, &cx->pci_dev->dev) != 0) {
+-		CX18_ERR_DEV(sd, "unable to open firmware %s\n", FWFILE);
++	if (request_firmware(&fw, FWFILE, &cx->pci_dev->dev) != 0)
+ 		return -EINVAL;
+-	}
+ 
+ 	/* The firmware load often has byte errors, so allow for several
+ 	   retries, both at byte level and at the firmware load level. */
+Index: linux/drivers/media/pci/cx18/cx18-dvb.c
+===================================================================
+--- linux.orig/drivers/media/pci/cx18/cx18-dvb.c
++++ linux/drivers/media/pci/cx18/cx18-dvb.c
+@@ -127,9 +127,7 @@ static int yuan_mpc718_mt352_reqfw(struc
+ 	int ret;
+ 
+ 	ret = request_firmware(fw, fn, &cx->pci_dev->dev);
+-	if (ret)
+-		CX18_ERR("Unable to open firmware file %s\n", fn);
+-	else {
++	if (!ret) {
+ 		size_t sz = (*fw)->size;
+ 		if (sz < 2 || sz > 64 || (sz % 2) != 0) {
+ 			CX18_ERR("Firmware %s has a bad size: %lu bytes\n",
+Index: linux/drivers/media/pci/cx18/cx18-firmware.c
+===================================================================
+--- linux.orig/drivers/media/pci/cx18/cx18-firmware.c
++++ linux/drivers/media/pci/cx18/cx18-firmware.c
+@@ -92,11 +92,8 @@ static int load_cpu_fw_direct(const char
+ 	u32 __iomem *dst = (u32 __iomem *)mem;
+ 	const u32 *src;
+ 
+-	if (request_firmware(&fw, fn, &cx->pci_dev->dev)) {
+-		CX18_ERR("Unable to open firmware %s\n", fn);
+-		CX18_ERR("Did you put the firmware in the hotplug firmware directory?\n");
++	if (request_firmware(&fw, fn, &cx->pci_dev->dev))
+ 		return -ENOMEM;
+-	}
+ 
+ 	src = (const u32 *)fw->data;
+ 
+@@ -137,8 +134,6 @@ static int load_apu_fw_direct(const char
+ 	int sz;
+ 
+ 	if (request_firmware(&fw, fn, &cx->pci_dev->dev)) {
+-		CX18_ERR("unable to open firmware %s\n", fn);
+-		CX18_ERR("did you put the firmware in the hotplug firmware directory?\n");
+ 		cx18_setup_page(cx, 0);
+ 		return -ENOMEM;
+ 	}
+Index: linux/drivers/media/pci/cx23885/cx23885-417.c
+===================================================================
+--- linux.orig/drivers/media/pci/cx23885/cx23885-417.c
++++ linux/drivers/media/pci/cx23885/cx23885-417.c
+@@ -920,12 +920,8 @@ static int cx23885_load_firmware(struct
+ 	retval = request_firmware(&firmware, CX23885_FIRM_IMAGE_NAME,
+ 				  &dev->pci->dev);
+ 
+-	if (retval != 0) {
+-		pr_err("ERROR: Hotplug firmware request failed (%s).\n",
+-		       CX23885_FIRM_IMAGE_NAME);
+-		pr_err("Please fix your hotplug setup, the board will not work without firmware loaded!\n");
++	if (retval != 0)
+ 		return -1;
+-	}
+ 
+ 	if (firmware->size != CX23885_FIRM_IMAGE_SIZE) {
+ 		pr_err("ERROR: Firmware size mismatch (have %zu, expected %d)\n",
+Index: linux/drivers/media/pci/cx23885/cx23885-cards.c
+===================================================================
+--- linux.orig/drivers/media/pci/cx23885/cx23885-cards.c
++++ linux/drivers/media/pci/cx23885/cx23885-cards.c
+@@ -2480,10 +2480,7 @@ void cx23885_card_setup(struct cx23885_d
+ 			cinfo.rev, filename);
+ 
+ 		ret = request_firmware(&fw, filename, &dev->pci->dev);
+-		if (ret != 0)
+-			pr_err("did not find the firmware file '%s'. You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware.",
+-			       filename);
+-		else
++		if (ret == 0)
+ 			altera_init(&netup_config, fw);
+ 
+ 		release_firmware(fw);
+Index: linux/drivers/media/pci/cx88/cx88-blackbird.c
+===================================================================
+--- linux.orig/drivers/media/pci/cx88/cx88-blackbird.c
++++ linux/drivers/media/pci/cx88/cx88-blackbird.c
+@@ -462,12 +462,8 @@ static int blackbird_load_firmware(struc
+ 	retval = request_firmware(&firmware, CX2341X_FIRM_ENC_FILENAME,
+ 				  &dev->pci->dev);
+ 
+-	if (retval != 0) {
+-		pr_err("Hotplug firmware request failed (%s).\n",
+-		       CX2341X_FIRM_ENC_FILENAME);
+-		pr_err("Please fix your hotplug setup, the board will not work without firmware loaded!\n");
++	if (retval != 0)
+ 		return -EIO;
+-	}
+ 
+ 	if (firmware->size != BLACKBIRD_FIRM_IMAGE_SIZE) {
+ 		pr_err("Firmware size mismatch (have %zd, expected %d)\n",
+Index: linux/drivers/media/pci/ivtv/ivtv-firmware.c
+===================================================================
+--- linux.orig/drivers/media/pci/ivtv/ivtv-firmware.c
++++ linux/drivers/media/pci/ivtv/ivtv-firmware.c
+@@ -68,8 +68,6 @@ retry:
+ 		release_firmware(fw);
+ 		return size;
+ 	}
+-	IVTV_ERR("Unable to open firmware %s (must be %ld bytes)\n", fn, size);
+-	IVTV_ERR("Did you put the firmware in the hotplug firmware directory?\n");
+ 	return -ENOMEM;
+ }
+ 
+Index: linux/drivers/media/pci/ngene/ngene-core.c
+===================================================================
+--- linux.orig/drivers/media/pci/ngene/ngene-core.c
++++ linux/drivers/media/pci/ngene/ngene-core.c
+@@ -1236,19 +1236,14 @@ static int ngene_load_firm(struct ngene
+ 		break;
+ 	}
+ 
+-	if (request_firmware(&fw, fw_name, &dev->pci_dev->dev) < 0) {
+-		dev_err(pdev, "Could not load firmware file %s.\n", fw_name);
+-		dev_info(pdev, "Copy %s to your hotplug directory!\n",
+-			 fw_name);
++	if (request_firmware(&fw, fw_name, &dev->pci_dev->dev))
+ 		return -1;
+-	}
+ 	if (size == 0)
+ 		size = fw->size;
+ 	if (size != fw->size) {
+ 		dev_err(pdev, "Firmware %s has invalid size!", fw_name);
+ 		err = -1;
+ 	} else {
+-		dev_info(pdev, "Loading firmware file %s.\n", fw_name);
+ 		ngene_fw = (u8 *) fw->data;
+ 		err = ngene_command_load_firmware(dev, ngene_fw, size);
+ 	}
+Index: linux/drivers/media/pci/saa7164/saa7164-fw.c
+===================================================================
+--- linux.orig/drivers/media/pci/saa7164/saa7164-fw.c
++++ linux/drivers/media/pci/saa7164/saa7164-fw.c
+@@ -406,11 +406,8 @@ int saa7164_downloadfirmware(struct saa7
+ 			__func__, fwname);
+ 
+ 		ret = request_firmware(&fw, fwname, &dev->pci->dev);
+-		if (ret) {
+-			printk(KERN_ERR "%s() Upload failed. (file not found?)\n",
+-			       __func__);
++		if (ret)
+ 			return -ENOMEM;
+-		}
+ 
+ 		printk(KERN_INFO "%s() firmware read %zu bytes.\n",
+ 			__func__, fw->size);
+Index: linux/drivers/media/platform/s5p-mfc/s5p_mfc_ctrl.c
+===================================================================
+--- linux.orig/drivers/media/platform/s5p-mfc/s5p_mfc_ctrl.c
++++ linux/drivers/media/platform/s5p-mfc/s5p_mfc_ctrl.c
+@@ -65,10 +65,8 @@ int s5p_mfc_load_firmware(struct s5p_mfc
+ 		}
+ 	}
+ 
+-	if (err != 0) {
+-		mfc_err("Firmware is not present in the /lib/firmware directory nor compiled in kernel\n");
++	if (err != 0)
+ 		return -EINVAL;
+-	}
+ 	if (fw_blob->size > dev->fw_buf.size) {
+ 		mfc_err("MFC firmware is too big to be loaded\n");
+ 		release_firmware(fw_blob);
+Index: linux/drivers/media/radio/radio-wl1273.c
+===================================================================
+--- linux.orig/drivers/media/radio/radio-wl1273.c
++++ linux/drivers/media/radio/radio-wl1273.c
+@@ -502,11 +502,8 @@ static int wl1273_fm_upload_firmware_pat
+ 	 * Uploading the firmware patch is not always necessary,
+ 	 * so we only print an info message.
+ 	 */
+-	if (request_firmware(&fw_p, fw_name, dev)) {
+-		dev_info(dev, "%s - %s not found\n", __func__, fw_name);
+-
++	if (request_firmware(&fw_p, fw_name, dev))
+ 		return 0;
+-	}
+ 
+ 	ptr = (__u8 *) fw_p->data;
+ 	packet_num = ptr[0];
+Index: linux/drivers/media/radio/wl128x/fmdrv_common.c
+===================================================================
+--- linux.orig/drivers/media/radio/wl128x/fmdrv_common.c
++++ linux/drivers/media/radio/wl128x/fmdrv_common.c
+@@ -1240,10 +1240,8 @@ static int fm_download_firmware(struct f
+ 
+ 	ret = request_firmware(&fw_entry, fw_name,
+ 				&fmdev->radio_dev->dev);
+-	if (ret < 0) {
+-		fmerr("Unable to read firmware(%s) content\n", fw_name);
++	if (ret)
+ 		return ret;
+-	}
+ 	fmdbg("Firmware(%s) length : %zu bytes\n", fw_name, fw_entry->size);
+ 
+ 	fw_data = (void *)fw_entry->data;
+Index: linux/drivers/media/tuners/tuner-xc2028.c
+===================================================================
+--- linux.orig/drivers/media/tuners/tuner-xc2028.c
++++ linux/drivers/media/tuners/tuner-xc2028.c
+@@ -1366,7 +1366,6 @@ static void load_firmware_cb(const struc
+ 
+ 	tuner_dbg("request_firmware_nowait(): %s\n", fw ? "OK" : "error");
+ 	if (!fw) {
+-		tuner_err("Could not load firmware %s.\n", priv->fname);
+ 		priv->state = XC2028_NODEV;
+ 		return;
+ 	}
+Index: linux/drivers/media/usb/cpia2/cpia2_core.c
+===================================================================
+--- linux.orig/drivers/media/usb/cpia2/cpia2_core.c
++++ linux/drivers/media/usb/cpia2/cpia2_core.c
+@@ -912,11 +912,8 @@ static int apply_vp_patch(struct camera_
+ 	struct cpia2_command cmd;
+ 
+ 	ret = request_firmware(&fw, fw_name, &cam->dev->dev);
+-	if (ret) {
+-		printk(KERN_ERR "cpia2: failed to load VP patch \"%s\"\n",
+-		       fw_name);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	cmd.req_mode = CAMERAACCESS_TYPE_REPEAT | CAMERAACCESS_VP;
+ 	cmd.direction = TRANSFER_WRITE;
+Index: linux/drivers/media/usb/cx231xx/cx231xx-417.c
+===================================================================
+--- linux.orig/drivers/media/usb/cx231xx/cx231xx-417.c
++++ linux/drivers/media/usb/cx231xx/cx231xx-417.c
+@@ -983,11 +983,6 @@ static int cx231xx_load_firmware(struct
+ 				  dev->dev);
+ 
+ 	if (retval != 0) {
+-		dev_err(dev->dev,
+-			"ERROR: Hotplug firmware request failed (%s).\n",
+-			CX231xx_FIRM_IMAGE_NAME);
+-		dev_err(dev->dev,
+-			"Please fix your hotplug setup, the board will not work without firmware loaded!\n");
+ 		vfree(p_current_fw);
+ 		vfree(p_buffer);
+ 		return retval;
+Index: linux/drivers/media/usb/dvb-usb/dib0700_devices.c
+===================================================================
+--- linux.orig/drivers/media/usb/dvb-usb/dib0700_devices.c
++++ linux/drivers/media/usb/dvb-usb/dib0700_devices.c
+@@ -2408,12 +2408,9 @@ static int stk9090m_frontend_attach(stru
+ 
+ 	dib9000_i2c_enumeration(&adap->dev->i2c_adap, 1, 0x10, 0x80);
+ 
+-	if (request_firmware(&state->frontend_firmware, "dib9090.fw", &adap->dev->udev->dev)) {
+-		deb_info("%s: Upload failed. (file not found?)\n", __func__);
++	if (request_firmware(&state->frontend_firmware, "dib9090.fw", &adap->dev->udev->dev))
+ 		return -ENODEV;
+-	} else {
+-		deb_info("%s: firmware read %zu bytes.\n", __func__, state->frontend_firmware->size);
+-	}
++	deb_info("%s: firmware read %zu bytes.\n", __func__, state->frontend_firmware->size);
+ 	stk9090m_config.microcode_B_fe_size = state->frontend_firmware->size;
+ 	stk9090m_config.microcode_B_fe_buffer = state->frontend_firmware->data;
+ 
+@@ -2478,12 +2475,9 @@ static int nim9090md_frontend_attach(str
+ 	msleep(20);
+ 	dib0700_set_gpio(adap->dev, GPIO0, GPIO_OUT, 1);
+ 
+-	if (request_firmware(&state->frontend_firmware, "dib9090.fw", &adap->dev->udev->dev)) {
+-		deb_info("%s: Upload failed. (file not found?)\n", __func__);
++	if (request_firmware(&state->frontend_firmware, "dib9090.fw", &adap->dev->udev->dev))
+ 		return -EIO;
+-	} else {
+-		deb_info("%s: firmware read %zu bytes.\n", __func__, state->frontend_firmware->size);
+-	}
++	deb_info("%s: firmware read %zu bytes.\n", __func__, state->frontend_firmware->size);
+ 	nim9090md_config[0].microcode_B_fe_size = state->frontend_firmware->size;
+ 	nim9090md_config[0].microcode_B_fe_buffer = state->frontend_firmware->data;
+ 	nim9090md_config[1].microcode_B_fe_size = state->frontend_firmware->size;
+Index: linux/drivers/media/usb/dvb-usb/dvb-usb-firmware.c
+===================================================================
+--- linux.orig/drivers/media/usb/dvb-usb/dvb-usb-firmware.c
++++ linux/drivers/media/usb/dvb-usb/dvb-usb-firmware.c
+@@ -90,13 +90,9 @@ int dvb_usb_download_firmware(struct usb
+ 	int ret;
+ 	const struct firmware *fw = NULL;
+ 
+-	if ((ret = request_firmware(&fw, props->firmware, &udev->dev)) != 0) {
+-		err("did not find the firmware file '%s' (status %d). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware",
+-			props->firmware,ret);
++	ret = request_firmware(&fw, props->firmware, &udev->dev);
++	if (ret)
+ 		return ret;
+-	}
+-
+-	info("downloading firmware from file '%s'",props->firmware);
+ 
+ 	switch (props->usb_ctrl) {
+ 		case CYPRESS_AN2135:
+Index: linux/drivers/media/usb/dvb-usb/gp8psk.c
+===================================================================
+--- linux.orig/drivers/media/usb/dvb-usb/gp8psk.c
++++ linux/drivers/media/usb/dvb-usb/gp8psk.c
+@@ -131,19 +131,14 @@ static int gp8psk_load_bcm4500fw(struct
+ 	const u8 *ptr;
+ 	u8 *buf;
+ 	if ((ret = request_firmware(&fw, bcm4500_firmware,
+-					&d->udev->dev)) != 0) {
+-		err("did not find the bcm4500 firmware file '%s' (status %d). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware",
+-			bcm4500_firmware,ret);
++					&d->udev->dev)) != 0)
+ 		return ret;
+-	}
+ 
+ 	ret = -EINVAL;
+ 
+ 	if (gp8psk_usb_out_op(d, LOAD_BCM4500,1,0,NULL, 0))
+ 		goto out_rel_fw;
+ 
+-	info("downloading bcm4500 firmware from file '%s'",bcm4500_firmware);
+-
+ 	ptr = fw->data;
+ 	buf = kmalloc(64, GFP_KERNEL);
+ 	if (!buf) {
+Index: linux/drivers/media/usb/dvb-usb/opera1.c
+===================================================================
+--- linux.orig/drivers/media/usb/dvb-usb/opera1.c
++++ linux/drivers/media/usb/dvb-usb/opera1.c
+@@ -450,8 +450,6 @@ static int opera1_xilinx_load_firmware(s
+ 	info("start downloading fpga firmware %s",filename);
+ 
+ 	if ((ret = request_firmware(&fw, filename, &dev->dev)) != 0) {
+-		err("did not find the firmware file '%s'. You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware",
+-			filename);
+ 		return ret;
+ 	} else {
+ 		p = kmalloc(fw->size, GFP_KERNEL);
+Index: linux/drivers/media/usb/go7007/go7007-driver.c
+===================================================================
+--- linux.orig/drivers/media/usb/go7007/go7007-driver.c
++++ linux/drivers/media/usb/go7007/go7007-driver.c
+@@ -84,10 +84,8 @@ static int go7007_load_encoder(struct go
+ 	u16 intr_val, intr_data;
+ 
+ 	if (go->boot_fw == NULL) {
+-		if (request_firmware(&fw_entry, fw_name, go->dev)) {
+-			v4l2_err(go, "unable to load firmware from file \"%s\"\n", fw_name);
++		if (request_firmware(&fw_entry, fw_name, go->dev))
+ 			return -1;
+-		}
+ 		if (fw_entry->size < 16 || memcmp(fw_entry->data, "WISGO7007FW", 11)) {
+ 			v4l2_err(go, "file \"%s\" does not appear to be go7007 firmware\n", fw_name);
+ 			release_firmware(fw_entry);
+Index: linux/drivers/media/usb/go7007/go7007-fw.c
+===================================================================
+--- linux.orig/drivers/media/usb/go7007/go7007-fw.c
++++ linux/drivers/media/usb/go7007/go7007-fw.c
+@@ -1565,12 +1565,8 @@ int go7007_construct_fw_image(struct go7
+ 	default:
+ 		return -1;
+ 	}
+-	if (request_firmware(&fw_entry, GO7007_FW_NAME, go->dev)) {
+-		dev_err(go->dev,
+-			"unable to load firmware from file \"%s\"\n",
+-			GO7007_FW_NAME);
++	if (request_firmware(&fw_entry, GO7007_FW_NAME, go->dev))
+ 		return -1;
+-	}
+ 	code = kcalloc(codespace, 2, GFP_KERNEL);
+ 	if (code == NULL)
+ 		goto fw_failed;
+Index: linux/drivers/media/usb/go7007/go7007-loader.c
+===================================================================
+--- linux.orig/drivers/media/usb/go7007/go7007-loader.c
++++ linux/drivers/media/usb/go7007/go7007-loader.c
+@@ -67,11 +67,8 @@ static int go7007_loader_probe(struct us
+ 
+ 	dev_info(&interface->dev, "loading firmware %s\n", fw1);
+ 
+-	if (request_firmware(&fw, fw1, &usbdev->dev)) {
+-		dev_err(&interface->dev,
+-			"unable to load firmware from file \"%s\"\n", fw1);
++	if (request_firmware(&fw, fw1, &usbdev->dev))
+ 		goto failed2;
+-	}
+ 	ret = cypress_load_firmware(usbdev, fw, CYPRESS_FX2);
+ 	release_firmware(fw);
+ 	if (0 != ret) {
+@@ -82,11 +79,8 @@ static int go7007_loader_probe(struct us
+ 	if (fw2 == NULL)
+ 		return 0;
+ 
+-	if (request_firmware(&fw, fw2, &usbdev->dev)) {
+-		dev_err(&interface->dev,
+-			"unable to load firmware from file \"%s\"\n", fw2);
++	if (request_firmware(&fw, fw2, &usbdev->dev))
+ 		goto failed2;
+-	}
+ 	ret = cypress_load_firmware(usbdev, fw, CYPRESS_FX2);
+ 	release_firmware(fw);
+ 	if (0 != ret) {
+Index: linux/drivers/media/usb/gspca/vicam.c
+===================================================================
+--- linux.orig/drivers/media/usb/gspca/vicam.c
++++ linux/drivers/media/usb/gspca/vicam.c
+@@ -230,10 +230,8 @@ static int sd_init(struct gspca_dev *gsp
+ 
+ 	ret = request_ihex_firmware(&fw, VICAM_FIRMWARE,
+ 				    &gspca_dev->dev->dev);
+-	if (ret) {
+-		pr_err("Failed to load \"vicam/firmware.fw\": %d\n", ret);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	firmware_buf = kmalloc(PAGE_SIZE, GFP_KERNEL);
+ 	if (!firmware_buf) {
+Index: linux/drivers/media/usb/pvrusb2/pvrusb2-hdw.c
+===================================================================
+--- linux.orig/drivers/media/usb/pvrusb2/pvrusb2-hdw.c
++++ linux/drivers/media/usb/pvrusb2/pvrusb2-hdw.c
+@@ -1370,25 +1370,6 @@ static int pvr2_locate_firmware(struct p
+ 			   "request_firmware fatal error with code=%d",ret);
+ 		return ret;
+ 	}
+-	pvr2_trace(PVR2_TRACE_ERROR_LEGS,
+-		   "***WARNING*** Device %s firmware seems to be missing.",
+-		   fwtypename);
+-	pvr2_trace(PVR2_TRACE_ERROR_LEGS,
+-		   "Did you install the pvrusb2 firmware files in their proper location?");
+-	if (fwcount == 1) {
+-		pvr2_trace(PVR2_TRACE_ERROR_LEGS,
+-			   "request_firmware unable to locate %s file %s",
+-			   fwtypename,fwnames[0]);
+-	} else {
+-		pvr2_trace(PVR2_TRACE_ERROR_LEGS,
+-			   "request_firmware unable to locate one of the following %s files:",
+-			   fwtypename);
+-		for (idx = 0; idx < fwcount; idx++) {
+-			pvr2_trace(PVR2_TRACE_ERROR_LEGS,
+-				   "request_firmware: Failed to find %s",
+-				   fwnames[idx]);
+-		}
+-	}
+ 	return ret;
+ }
+ 
+Index: linux/drivers/media/usb/s2255/s2255drv.c
+===================================================================
+--- linux.orig/drivers/media/usb/s2255/s2255drv.c
++++ linux/drivers/media/usb/s2255/s2255drv.c
+@@ -2276,10 +2276,8 @@ static int s2255_probe(struct usb_interf
+ 	}
+ 	/* load the first chunk */
+ 	if (request_firmware(&dev->fw_data->fw,
+-			     FIRMWARE_FILE_NAME, &dev->udev->dev)) {
+-		dev_err(&interface->dev, "sensoray 2255 failed to get firmware\n");
++			     FIRMWARE_FILE_NAME, &dev->udev->dev))
+ 		goto errorREQFW;
+-	}
+ 	/* check the firmware is valid */
+ 	fw_size = dev->fw_data->fw->size;
+ 	pdata = (__le32 *) &dev->fw_data->fw->data[fw_size - 8];
+Index: linux/drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c
+===================================================================
+--- linux.orig/drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c
++++ linux/drivers/media/usb/ttusb-budget/dvb-ttusb-budget.c
+@@ -282,10 +282,8 @@ static int ttusb_boot_dsp(struct ttusb *
+ 
+ 	err = request_firmware(&fw, "ttusb-budget/dspbootcode.bin",
+ 			       &ttusb->dev->dev);
+-	if (err) {
+-		pr_err("failed to request firmware\n");
++	if (err)
+ 		return err;
+-	}
+ 
+ 	/* BootBlock */
+ 	b[0] = 0xaa;
+Index: linux/drivers/media/usb/ttusb-dec/ttusb_dec.c
+===================================================================
+--- linux.orig/drivers/media/usb/ttusb-dec/ttusb_dec.c
++++ linux/drivers/media/usb/ttusb-dec/ttusb_dec.c
+@@ -1317,11 +1317,8 @@ static int ttusb_dec_boot_dsp(struct ttu
+ 	dprintk("%s\n", __func__);
+ 
+ 	result = request_firmware(&fw_entry, dec->firmware_name, &dec->udev->dev);
+-	if (result) {
+-		printk(KERN_ERR "%s: Firmware (%s) unavailable.\n",
+-		       __func__, dec->firmware_name);
++	if (result)
+ 		return result;
+-	}
+ 
+ 	firmware = fw_entry->data;
+ 	firmware_size = fw_entry->size;
+Index: linux/drivers/misc/ti-st/st_kim.c
+===================================================================
+--- linux.orig/drivers/misc/ti-st/st_kim.c
++++ linux/drivers/misc/ti-st/st_kim.c
+@@ -295,11 +295,8 @@ static long download_firmware(struct kim
+ 	    request_firmware(&kim_gdata->fw_entry, bts_scr_name,
+ 			     &kim_gdata->kim_pdev->dev);
+ 	if (unlikely((err != 0) || (kim_gdata->fw_entry->data == NULL) ||
+-		     (kim_gdata->fw_entry->size == 0))) {
+-		pr_err(" request_firmware failed(errno %ld) for %s", err,
+-			   bts_scr_name);
++		     (kim_gdata->fw_entry->size == 0)))
+ 		return -EINVAL;
+-	}
+ 	ptr = (void *)kim_gdata->fw_entry->data;
+ 	len = kim_gdata->fw_entry->size;
+ 	/*
+Index: linux/drivers/net/can/softing/softing_fw.c
+===================================================================
+--- linux.orig/drivers/net/can/softing/softing_fw.c
++++ linux/drivers/net/can/softing/softing_fw.c
+@@ -226,11 +226,8 @@ int softing_load_app_fw(const char *file
+ 	int8_t type_end = 0, type_entrypoint = 0;
+ 
+ 	ret = request_firmware(&fw, file, &card->pdev->dev);
+-	if (ret) {
+-		dev_alert(&card->pdev->dev, "request_firmware(%s) got %i\n",
+-			file, ret);
++	if (ret)
+ 		return ret;
+-	}
+ 	dev_dbg(&card->pdev->dev, "firmware(%s) got %lu bytes\n",
+ 		file, (unsigned long)fw->size);
+ 	/* parse the firmware */
+Index: linux/drivers/net/ethernet/3com/typhoon.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/3com/typhoon.c
++++ linux/drivers/net/ethernet/3com/typhoon.c
+@@ -1282,11 +1282,8 @@ typhoon_request_firmware(struct typhoon
+ 		return 0;
+ 
+ 	err = request_firmware(&typhoon_fw, FIRMWARE_NAME, &tp->pdev->dev);
+-	if (err) {
+-		netdev_err(tp->dev, "Failed to load firmware \"%s\"\n",
+-			   FIRMWARE_NAME);
++	if (err)
+ 		return err;
+-	}
+ 
+ 	image_data = typhoon_fw->data;
+ 	remaining = typhoon_fw->size;
+Index: linux/drivers/net/ethernet/adaptec/starfire.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/adaptec/starfire.c
++++ linux/drivers/net/ethernet/adaptec/starfire.c
+@@ -1002,11 +1002,8 @@ static int netdev_open(struct net_device
+ #endif /* VLAN_SUPPORT */
+ 
+ 	retval = request_firmware(&fw_rx, FIRMWARE_RX, &np->pci_dev->dev);
+-	if (retval) {
+-		printk(KERN_ERR "starfire: Failed to load firmware \"%s\"\n",
+-		       FIRMWARE_RX);
++	if (retval)
+ 		goto out_init;
+-	}
+ 	if (fw_rx->size % 4) {
+ 		printk(KERN_ERR "starfire: bogus length %zu in \"%s\"\n",
+ 		       fw_rx->size, FIRMWARE_RX);
+@@ -1014,11 +1011,8 @@ static int netdev_open(struct net_device
+ 		goto out_rx;
+ 	}
+ 	retval = request_firmware(&fw_tx, FIRMWARE_TX, &np->pci_dev->dev);
+-	if (retval) {
+-		printk(KERN_ERR "starfire: Failed to load firmware \"%s\"\n",
+-		       FIRMWARE_TX);
++	if (retval)
+ 		goto out_rx;
+-	}
+ 	if (fw_tx->size % 4) {
+ 		printk(KERN_ERR "starfire: bogus length %zu in \"%s\"\n",
+ 		       fw_tx->size, FIRMWARE_TX);
+Index: linux/drivers/net/ethernet/alacritech/slicoss.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/alacritech/slicoss.c
++++ linux/drivers/net/ethernet/alacritech/slicoss.c
+@@ -1051,11 +1051,8 @@ static int slic_load_rcvseq_firmware(str
+ 	file = (sdev->model == SLIC_MODEL_OASIS) ?  SLIC_RCV_FIRMWARE_OASIS :
+ 						    SLIC_RCV_FIRMWARE_MOJAVE;
+ 	err = request_firmware(&fw, file, &sdev->pdev->dev);
+-	if (err) {
+-		dev_err(&sdev->pdev->dev,
+-			"failed to load receive sequencer firmware %s\n", file);
++	if (err)
+ 		return err;
+-	}
+ 	/* Do an initial sanity check concerning firmware size now. A further
+ 	 * check follows below.
+ 	 */
+@@ -1126,10 +1123,8 @@ static int slic_load_firmware(struct sli
+ 	file = (sdev->model == SLIC_MODEL_OASIS) ?  SLIC_FIRMWARE_OASIS :
+ 						    SLIC_FIRMWARE_MOJAVE;
+ 	err = request_firmware(&fw, file, &sdev->pdev->dev);
+-	if (err) {
+-		dev_err(&sdev->pdev->dev, "failed to load firmware %s\n", file);
++	if (err)
+ 		return err;
+-	}
+ 	/* Do an initial sanity check concerning firmware size now. A further
+ 	 * check follows below.
+ 	 */
+Index: linux/drivers/net/ethernet/alteon/acenic.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/alteon/acenic.c
++++ linux/drivers/net/ethernet/alteon/acenic.c
+@@ -2881,11 +2881,8 @@ static int ace_load_firmware(struct net_
+ 		fw_name = "acenic/tg1.bin";
+ 
+ 	ret = request_firmware(&fw, fw_name, &ap->pdev->dev);
+-	if (ret) {
+-		printk(KERN_ERR "%s: Failed to load firmware \"%s\"\n",
+-		       ap->name, fw_name);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	fw_data = (void *)fw->data;
+ 
+Index: linux/drivers/net/ethernet/broadcom/bnx2.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/broadcom/bnx2.c
++++ linux/drivers/net/ethernet/broadcom/bnx2.c
+@@ -3712,16 +3712,13 @@ static int bnx2_request_uncached_firmwar
+ 	}
+ 
+ 	rc = request_firmware(&bp->mips_firmware, mips_fw_file, &bp->pdev->dev);
+-	if (rc) {
+-		pr_err("Can't load firmware file \"%s\"\n", mips_fw_file);
++	if (rc)
+ 		goto out;
+-	}
+ 
+ 	rc = request_firmware(&bp->rv2p_firmware, rv2p_fw_file, &bp->pdev->dev);
+-	if (rc) {
+-		pr_err("Can't load firmware file \"%s\"\n", rv2p_fw_file);
++	if (rc)
+ 		goto err_release_mips_firmware;
+-	}
++
+ 	mips_fw = (const struct bnx2_mips_fw_file *) bp->mips_firmware->data;
+ 	rv2p_fw = (const struct bnx2_rv2p_fw_file *) bp->rv2p_firmware->data;
+ 	if (bp->mips_firmware->size < sizeof(*mips_fw) ||
+Index: linux/drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c
++++ linux/drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c
+@@ -13420,11 +13420,8 @@ static int bnx2x_init_firmware(struct bn
+ 	BNX2X_DEV_INFO("Loading %s\n", fw_file_name);
+ 
+ 	rc = request_firmware(&bp->firmware, fw_file_name, &bp->pdev->dev);
+-	if (rc) {
+-		BNX2X_ERR("Can't load firmware file %s\n",
+-			  fw_file_name);
++	if (rc)
+ 		goto request_firmware_exit;
+-	}
+ 
+ 	rc = bnx2x_check_firmware(bp);
+ 	if (rc) {
+Index: linux/drivers/net/ethernet/broadcom/tg3.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/broadcom/tg3.c
++++ linux/drivers/net/ethernet/broadcom/tg3.c
+@@ -11404,11 +11404,8 @@ static int tg3_request_firmware(struct t
+ {
+ 	const struct tg3_firmware_hdr *fw_hdr;
+ 
+-	if (request_firmware(&tp->fw, tp->fw_needed, &tp->pdev->dev)) {
+-		netdev_err(tp->dev, "Failed to load firmware \"%s\"\n",
+-			   tp->fw_needed);
++	if (request_firmware(&tp->fw, tp->fw_needed, &tp->pdev->dev))
+ 		return -ENOENT;
+-	}
+ 
+ 	fw_hdr = (struct tg3_firmware_hdr *)tp->fw->data;
+ 
+Index: linux/drivers/net/ethernet/brocade/bna/cna_fwimg.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/brocade/bna/cna_fwimg.c
++++ linux/drivers/net/ethernet/brocade/bna/cna_fwimg.c
+@@ -24,10 +24,8 @@ cna_read_firmware(struct pci_dev *pdev,
+ 	const struct firmware *fw;
+ 	u32 n;
+ 
+-	if (request_firmware(&fw, fw_name, &pdev->dev)) {
+-		dev_alert(&pdev->dev, "can't load firmware %s\n", fw_name);
++	if (request_firmware(&fw, fw_name, &pdev->dev))
+ 		goto error;
+-	}
+ 
+ 	*bfi_image = (u32 *)fw->data;
+ 	*bfi_image_size = fw->size/sizeof(u32);
+Index: linux/drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c
++++ linux/drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c
+@@ -1036,12 +1036,8 @@ int t3_get_edc_fw(struct cphy *phy, int
+ 	fw_name = get_edc_fw_name(edc_idx);
+ 	if (fw_name)
+ 		ret = request_firmware(&fw, fw_name, &adapter->pdev->dev);
+-	if (ret < 0) {
+-		dev_err(&adapter->pdev->dev,
+-			"could not upgrade firmware: unable to load %s\n",
+-			fw_name);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	/* check size, take checksum in account */
+ 	if (fw->size > size + 4) {
+@@ -1078,11 +1074,8 @@ static int upgrade_fw(struct adapter *ad
+ 	struct device *dev = &adap->pdev->dev;
+ 
+ 	ret = request_firmware(&fw, FW_FNAME, dev);
+-	if (ret < 0) {
+-		dev_err(dev, "could not upgrade firmware: unable to load %s\n",
+-			FW_FNAME);
++	if (ret)
+ 		return ret;
+-	}
+ 	ret = t3_load_fw(adap, fw->data, fw->size);
+ 	release_firmware(fw);
+ 
+@@ -1127,11 +1120,8 @@ static int update_tpsram(struct adapter
+ 	snprintf(buf, sizeof(buf), TPSRAM_NAME, rev);
+ 
+ 	ret = request_firmware(&tpsram, buf, dev);
+-	if (ret < 0) {
+-		dev_err(dev, "could not load TP SRAM: unable to load %s\n",
+-			buf);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	ret = t3_check_tpsram(adap, tpsram->data, tpsram->size);
+ 	if (ret)
+Index: linux/drivers/net/ethernet/intel/e100.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/intel/e100.c
++++ linux/drivers/net/ethernet/intel/e100.c
+@@ -1262,9 +1262,6 @@ static const struct firmware *e100_reque
+ 
+ 	if (err) {
+ 		if (required) {
+-			netif_err(nic, probe, nic->netdev,
+-				  "Failed to load firmware \"%s\": %d\n",
+-				  fw_name, err);
+ 			return ERR_PTR(err);
+ 		} else {
+ 			netif_info(nic, probe, nic->netdev,
+Index: linux/drivers/net/ethernet/myricom/myri10ge/myri10ge.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/myricom/myri10ge/myri10ge.c
++++ linux/drivers/net/ethernet/myricom/myri10ge/myri10ge.c
+@@ -580,8 +580,6 @@ static int myri10ge_load_hotplug_firmwar
+ 	unsigned i;
+ 
+ 	if ((status = request_firmware(&fw, mgp->fw_name, dev)) < 0) {
+-		dev_err(dev, "Unable to load %s firmware image via hotplug\n",
+-			mgp->fw_name);
+ 		status = -EINVAL;
+ 		goto abort_with_nothing;
+ 	}
+Index: linux/drivers/net/ethernet/smsc/smc91c92_cs.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/smsc/smc91c92_cs.c
++++ linux/drivers/net/ethernet/smsc/smc91c92_cs.c
+@@ -647,10 +647,8 @@ static int osi_load_firmware(struct pcmc
+ 	int i, err;
+ 
+ 	err = request_firmware(&fw, FIRMWARE_NAME, &link->dev);
+-	if (err) {
+-		pr_err("Failed to load firmware \"%s\"\n", FIRMWARE_NAME);
++	if (err)
+ 		return err;
+-	}
+ 
+ 	/* Download the Seven of Diamonds firmware */
+ 	for (i = 0; i < fw->size; i++) {
+Index: linux/drivers/net/ethernet/sun/cassini.c
+===================================================================
+--- linux.orig/drivers/net/ethernet/sun/cassini.c
++++ linux/drivers/net/ethernet/sun/cassini.c
+@@ -793,11 +793,8 @@ static void cas_saturn_firmware_init(str
+ 		return;
+ 
+ 	err = request_firmware(&fw, fw_name, &cp->pdev->dev);
+-	if (err) {
+-		pr_err("Failed to load firmware \"%s\"\n",
+-		       fw_name);
++	if (err)
+ 		return;
+-	}
+ 	if (fw->size < 2) {
+ 		pr_err("bogus length %zu in \"%s\"\n",
+ 		       fw->size, fw_name);
+Index: linux/drivers/net/hamradio/yam.c
+===================================================================
+--- linux.orig/drivers/net/hamradio/yam.c
++++ linux/drivers/net/hamradio/yam.c
+@@ -357,11 +357,8 @@ static unsigned char *add_mcs(unsigned c
+ 		}
+ 		err = request_firmware(&fw, fw_name[predef], &pdev->dev);
+ 		platform_device_unregister(pdev);
+-		if (err) {
+-			printk(KERN_ERR "Failed to load firmware \"%s\"\n",
+-			       fw_name[predef]);
++		if (err)
+ 			return NULL;
+-		}
+ 		if (fw->size != YAM_FPGA_SIZE) {
+ 			printk(KERN_ERR "Bogus length %zu in firmware \"%s\"\n",
+ 			       fw->size, fw_name[predef]);
+Index: linux/drivers/net/usb/kaweth.c
+===================================================================
+--- linux.orig/drivers/net/usb/kaweth.c
++++ linux/drivers/net/usb/kaweth.c
+@@ -305,10 +305,8 @@ static int kaweth_download_firmware(stru
+ 	int ret;
+ 
+ 	ret = request_firmware(&fw, fwname, &kaweth->dev->dev);
+-	if (ret) {
+-		dev_err(&kaweth->intf->dev, "Firmware request failed\n");
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	if (fw->size > KAWETH_FIRMWARE_BUF_SIZE) {
+ 		dev_err(&kaweth->intf->dev, "Firmware too big: %zu\n",
+Index: linux/drivers/net/wireless/ath/ath9k/hif_usb.c
+===================================================================
+--- linux.orig/drivers/net/wireless/ath/ath9k/hif_usb.c
++++ linux/drivers/net/wireless/ath/ath9k/hif_usb.c
+@@ -1216,9 +1216,6 @@ static void ath9k_hif_usb_firmware_cb(co
+ 		if (!ret)
+ 			return;
+ 
+-		dev_err(&hif_dev->udev->dev,
+-			"ath9k_htc: Failed to get firmware %s\n",
+-			hif_dev->fw_name);
+ 		goto err_fw;
+ 	}
+ 
+Index: linux/drivers/net/wireless/ath/carl9170/usb.c
+===================================================================
+--- linux.orig/drivers/net/wireless/ath/carl9170/usb.c
++++ linux/drivers/net/wireless/ath/carl9170/usb.c
+@@ -1029,7 +1029,6 @@ static void carl9170_usb_firmware_step2(
+ 		return;
+ 	}
+ 
+-	dev_err(&ar->udev->dev, "firmware not found.\n");
+ 	carl9170_usb_firmware_failed(ar);
+ }
+ 
+Index: linux/drivers/net/wireless/atmel/at76c50x-usb.c
+===================================================================
+--- linux.orig/drivers/net/wireless/atmel/at76c50x-usb.c
++++ linux/drivers/net/wireless/atmel/at76c50x-usb.c
+@@ -1616,13 +1616,8 @@ static struct fwentry *at76_load_firmwar
+ 
+ 	at76_dbg(DBG_FW, "downloading firmware %s", fwe->fwname);
+ 	ret = request_firmware(&fwe->fw, fwe->fwname, &udev->dev);
+-	if (ret < 0) {
+-		dev_err(&udev->dev, "firmware %s not found!\n",
+-			fwe->fwname);
+-		dev_err(&udev->dev,
+-			"you may need to download the firmware from http://developer.berlios.de/projects/at76c503a/\n");
++	if (ret)
+ 		goto exit;
+-	}
+ 
+ 	at76_dbg(DBG_FW, "got it.");
+ 	fwh = (struct at76_fw_header *)(fwe->fw->data);
+Index: linux/drivers/net/wireless/atmel/atmel.c
+===================================================================
+--- linux.orig/drivers/net/wireless/atmel/atmel.c
++++ linux/drivers/net/wireless/atmel/atmel.c
+@@ -3891,12 +3891,8 @@ static int reset_atmel_card(struct net_d
+ 					strcpy(priv->firmware_id, "atmel_at76c502.bin");
+ 				}
+ 				err = request_firmware(&fw_entry, priv->firmware_id, priv->sys_dev);
+-				if (err != 0) {
+-					printk(KERN_ALERT
+-					       "%s: firmware %s is missing, cannot continue.\n",
+-					       dev->name, priv->firmware_id);
++				if (err != 0)
+ 					return err;
+-				}
+ 			} else {
+ 				int fw_index = 0;
+ 				int success = 0;
+Index: linux/drivers/net/wireless/broadcom/b43/main.c
+===================================================================
+--- linux.orig/drivers/net/wireless/broadcom/b43/main.c
++++ linux/drivers/net/wireless/broadcom/b43/main.c
+@@ -2245,19 +2245,8 @@ int b43_do_request_fw(struct b43_request
+ 	}
+ 	err = request_firmware(&ctx->blob, ctx->fwname,
+ 			       ctx->dev->dev->dev);
+-	if (err == -ENOENT) {
+-		snprintf(ctx->errors[ctx->req_type],
+-			 sizeof(ctx->errors[ctx->req_type]),
+-			 "Firmware file \"%s\" not found\n",
+-			 ctx->fwname);
++	if (err)
+ 		return err;
+-	} else if (err) {
+-		snprintf(ctx->errors[ctx->req_type],
+-			 sizeof(ctx->errors[ctx->req_type]),
+-			 "Firmware file \"%s\" request failed (err=%d)\n",
+-			 ctx->fwname, err);
+-		return err;
+-	}
+ fw_ready:
+ 	if (ctx->blob->size < sizeof(struct b43_fw_header))
+ 		goto err_format;
+Index: linux/drivers/net/wireless/broadcom/b43legacy/main.c
+===================================================================
+--- linux.orig/drivers/net/wireless/broadcom/b43legacy/main.c
++++ linux/drivers/net/wireless/broadcom/b43legacy/main.c
+@@ -1524,11 +1524,8 @@ static int do_request_fw(struct b43legac
+ 	} else {
+ 		err = request_firmware(fw, path, dev->dev->dev);
+ 	}
+-	if (err) {
+-		b43legacyerr(dev->wl, "Firmware file \"%s\" not found "
+-		       "or load failed.\n", path);
++	if (err)
+ 		return err;
+-	}
+ 	if ((*fw)->size < sizeof(struct b43legacy_fw_header))
+ 		goto err_format;
+ 	hdr = (struct b43legacy_fw_header *)((*fw)->data);
+Index: linux/drivers/net/wireless/broadcom/brcm80211/brcmsmac/mac80211_if.c
+===================================================================
+--- linux.orig/drivers/net/wireless/broadcom/brcm80211/brcmsmac/mac80211_if.c
++++ linux/drivers/net/wireless/broadcom/brcm80211/brcmsmac/mac80211_if.c
+@@ -376,19 +376,13 @@ static int brcms_request_fw(struct brcms
+ 		sprintf(fw_name, "%s-%d.fw", brcms_firmwares[i],
+ 			UCODE_LOADER_API_VER);
+ 		status = request_firmware(&wl->fw.fw_bin[i], fw_name, device);
+-		if (status) {
+-			wiphy_err(wl->wiphy, "%s: fail to load firmware %s\n",
+-				  KBUILD_MODNAME, fw_name);
++		if (status)
+ 			return status;
+-		}
+ 		sprintf(fw_name, "%s_hdr-%d.fw", brcms_firmwares[i],
+ 			UCODE_LOADER_API_VER);
+ 		status = request_firmware(&wl->fw.fw_hdr[i], fw_name, device);
+-		if (status) {
+-			wiphy_err(wl->wiphy, "%s: fail to load firmware %s\n",
+-				  KBUILD_MODNAME, fw_name);
++		if (status)
+ 			return status;
+-		}
+ 		wl->fw.hdr_num_entries[i] =
+ 		    wl->fw.fw_hdr[i]->size / (sizeof(struct firmware_hdr));
+ 	}
+Index: linux/drivers/net/wireless/intel/ipw2x00/ipw2100.c
+===================================================================
+--- linux.orig/drivers/net/wireless/intel/ipw2x00/ipw2100.c
++++ linux/drivers/net/wireless/intel/ipw2x00/ipw2100.c
+@@ -8370,12 +8370,8 @@ static int ipw2100_get_firmware(struct i
+ 
+ 	rc = request_firmware(&fw->fw_entry, fw_name, &priv->pci_dev->dev);
+ 
+-	if (rc < 0) {
+-		printk(KERN_ERR DRV_NAME ": "
+-		       "%s: Firmware '%s' not available or load failed.\n",
+-		       priv->net_dev->name, fw_name);
++	if (rc)
+ 		return rc;
+-	}
+ 	IPW_DEBUG_INFO("firmware data %p size %zd\n", fw->fw_entry->data,
+ 		       fw->fw_entry->size);
+ 
+Index: linux/drivers/net/wireless/intel/ipw2x00/ipw2200.c
+===================================================================
+--- linux.orig/drivers/net/wireless/intel/ipw2x00/ipw2200.c
++++ linux/drivers/net/wireless/intel/ipw2x00/ipw2200.c
+@@ -3396,10 +3396,8 @@ static int ipw_get_fw(struct ipw_priv *p
+ 
+ 	/* ask firmware_class module to get the boot firmware off disk */
+ 	rc = request_firmware(raw, name, &priv->pci_dev->dev);
+-	if (rc < 0) {
+-		IPW_ERROR("%s request_firmware failed: Reason %d\n", name, rc);
++	if (rc)
+ 		return rc;
+-	}
+ 
+ 	if ((*raw)->size < sizeof(*fw)) {
+ 		IPW_ERROR("%s is too small (%zd)\n", name, (*raw)->size);
+Index: linux/drivers/net/wireless/intel/iwlegacy/3945-mac.c
+===================================================================
+--- linux.orig/drivers/net/wireless/intel/iwlegacy/3945-mac.c
++++ linux/drivers/net/wireless/intel/iwlegacy/3945-mac.c
+@@ -1835,7 +1835,6 @@ il3945_read_ucode(struct il_priv *il)
+ 		sprintf(buf, "%s%u%s", name_pre, idx, ".ucode");
+ 		ret = request_firmware(&ucode_raw, buf, &il->pci_dev->dev);
+ 		if (ret < 0) {
+-			IL_ERR("%s firmware file req failed: %d\n", buf, ret);
+ 			if (ret == -ENOENT)
+ 				continue;
+ 			else
+Index: linux/drivers/net/wireless/intel/iwlwifi/iwl-drv.c
+===================================================================
+--- linux.orig/drivers/net/wireless/intel/iwlwifi/iwl-drv.c
++++ linux/drivers/net/wireless/intel/iwlwifi/iwl-drv.c
+@@ -181,8 +181,6 @@ static int iwl_request_firmware(struct i
+ 	}
+ 
+ 	if (drv->fw_index < cfg->ucode_api_min) {
+-		IWL_ERR(drv, "no suitable firmware found!\n");
+-
+ 		if (cfg->ucode_api_min == cfg->ucode_api_max) {
+ 			IWL_ERR(drv, "%s%d is required\n", cfg->fw_name_pre,
+ 				cfg->ucode_api_max);
+Index: linux/drivers/net/wireless/intersil/orinoco/fw.c
+===================================================================
+--- linux.orig/drivers/net/wireless/intersil/orinoco/fw.c
++++ linux/drivers/net/wireless/intersil/orinoco/fw.c
+@@ -132,7 +132,6 @@ orinoco_dl_firmware(struct orinoco_priva
+ 		err = request_firmware(&fw_entry, firmware, priv->dev);
+ 
+ 		if (err) {
+-			dev_err(dev, "Cannot find firmware %s\n", firmware);
+ 			err = -ENOENT;
+ 			goto free;
+ 		}
+@@ -292,10 +291,8 @@ symbol_dl_firmware(struct orinoco_privat
+ 	const struct firmware *fw_entry;
+ 
+ 	if (!orinoco_cached_fw_get(priv, true)) {
+-		if (request_firmware(&fw_entry, fw->pri_fw, priv->dev) != 0) {
+-			dev_err(dev, "Cannot find firmware: %s\n", fw->pri_fw);
++		if (request_firmware(&fw_entry, fw->pri_fw, priv->dev) != 0)
+ 			return -ENOENT;
+-		}
+ 	} else
+ 		fw_entry = orinoco_cached_fw_get(priv, true);
+ 
+@@ -311,10 +308,8 @@ symbol_dl_firmware(struct orinoco_privat
+ 	}
+ 
+ 	if (!orinoco_cached_fw_get(priv, false)) {
+-		if (request_firmware(&fw_entry, fw->sta_fw, priv->dev) != 0) {
+-			dev_err(dev, "Cannot find firmware: %s\n", fw->sta_fw);
++		if (request_firmware(&fw_entry, fw->sta_fw, priv->dev) != 0)
+ 			return -ENOENT;
+-		}
+ 	} else
+ 		fw_entry = orinoco_cached_fw_get(priv, false);
+ 
+Index: linux/drivers/net/wireless/intersil/orinoco/orinoco_usb.c
+===================================================================
+--- linux.orig/drivers/net/wireless/intersil/orinoco/orinoco_usb.c
++++ linux/drivers/net/wireless/intersil/orinoco/orinoco_usb.c
+@@ -1708,7 +1708,6 @@ static int ezusb_probe(struct usb_interf
+ 		if (ezusb_firmware_download(upriv, &firmware) < 0)
+ 			goto error;
+ 	} else {
+-		err("No firmware to download");
+ 		goto error;
+ 	}
+ 
+Index: linux/drivers/net/wireless/intersil/p54/p54pci.c
+===================================================================
+--- linux.orig/drivers/net/wireless/intersil/p54/p54pci.c
++++ linux/drivers/net/wireless/intersil/p54/p54pci.c
+@@ -502,7 +502,6 @@ static void p54p_firmware_step2(const st
+ 	int err;
+ 
+ 	if (!fw) {
+-		dev_err(&pdev->dev, "Cannot find firmware (isl3886pci)\n");
+ 		err = -ENOENT;
+ 		goto out;
+ 	}
+Index: linux/drivers/net/wireless/intersil/p54/p54spi.c
+===================================================================
+--- linux.orig/drivers/net/wireless/intersil/p54/p54spi.c
++++ linux/drivers/net/wireless/intersil/p54/p54spi.c
+@@ -157,10 +157,8 @@ static int p54spi_request_firmware(struc
+ 	/* FIXME: should driver use it's own struct device? */
+ 	ret = request_firmware(&priv->firmware, "3826.arm", &priv->spi->dev);
+ 
+-	if (ret < 0) {
+-		dev_err(&priv->spi->dev, "request_firmware() failed: %d", ret);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	ret = p54_parse_firmware(dev, priv->firmware);
+ 	if (ret) {
+Index: linux/drivers/net/wireless/intersil/p54/p54usb.c
+===================================================================
+--- linux.orig/drivers/net/wireless/intersil/p54/p54usb.c
++++ linux/drivers/net/wireless/intersil/p54/p54usb.c
+@@ -929,7 +929,6 @@ static void p54u_load_firmware_cb(const
+ 		err = p54u_start_ops(priv);
+ 	} else {
+ 		err = -ENOENT;
+-		dev_err(&udev->dev, "Firmware not found.\n");
+ 	}
+ 
+ 	complete(&priv->fw_wait_load);
+Index: linux/drivers/net/wireless/marvell/libertas_tf/if_usb.c
+===================================================================
+--- linux.orig/drivers/net/wireless/marvell/libertas_tf/if_usb.c
++++ linux/drivers/net/wireless/marvell/libertas_tf/if_usb.c
+@@ -818,8 +818,6 @@ static int if_usb_prog_firmware(struct l
+ 	kernel_param_lock(THIS_MODULE);
+ 	ret = request_firmware(&cardp->fw, lbtf_fw_name, &cardp->udev->dev);
+ 	if (ret < 0) {
+-		pr_err("request_firmware() failed with %#x\n", ret);
+-		pr_err("firmware %s not found\n", lbtf_fw_name);
+ 		kernel_param_unlock(THIS_MODULE);
+ 		goto done;
+ 	}
+Index: linux/drivers/net/wireless/marvell/mwifiex/main.c
+===================================================================
+--- linux.orig/drivers/net/wireless/marvell/mwifiex/main.c
++++ linux/drivers/net/wireless/marvell/mwifiex/main.c
+@@ -527,11 +527,8 @@ static int _mwifiex_fw_dpc(const struct
+ 	struct wireless_dev *wdev;
+ 	struct completion *fw_done = adapter->fw_done;
+ 
+-	if (!firmware) {
+-		mwifiex_dbg(adapter, ERROR,
+-			    "Failed to get firmware %s\n", adapter->fw_name);
++	if (!firmware)
+ 		goto err_dnld_fw;
+-	}
+ 
+ 	memset(&fw, 0, sizeof(struct mwifiex_fw_image));
+ 	adapter->firmware = firmware;
+Index: linux/drivers/net/wireless/marvell/mwl8k.c
+===================================================================
+--- linux.orig/drivers/net/wireless/marvell/mwl8k.c
++++ linux/drivers/net/wireless/marvell/mwl8k.c
+@@ -5732,16 +5732,12 @@ static int mwl8k_firmware_load_success(s
+ static void mwl8k_fw_state_machine(const struct firmware *fw, void *context)
+ {
+ 	struct mwl8k_priv *priv = context;
+-	struct mwl8k_device_info *di = priv->device_info;
+ 	int rc;
+ 
+ 	switch (priv->fw_state) {
+ 	case FW_STATE_INIT:
+-		if (!fw) {
+-			printk(KERN_ERR "%s: Error requesting helper fw %s\n",
+-			       pci_name(priv->pdev), di->helper_image);
++		if (!fw)
+ 			goto fail;
+-		}
+ 		priv->fw_helper = fw;
+ 		rc = mwl8k_request_fw(priv, priv->fw_pref, &priv->fw_ucode,
+ 				      true);
+@@ -5776,11 +5772,8 @@ static void mwl8k_fw_state_machine(const
+ 		break;
+ 
+ 	case FW_STATE_LOADING_ALT:
+-		if (!fw) {
+-			printk(KERN_ERR "%s: Error requesting alt fw %s\n",
+-			       pci_name(priv->pdev), di->helper_image);
++		if (!fw)
+ 			goto fail;
+-		}
+ 		priv->fw_ucode = fw;
+ 		rc = mwl8k_firmware_load_success(priv);
+ 		if (rc)
+@@ -5818,10 +5811,8 @@ retry:
+ 
+ 	/* Ask userland hotplug daemon for the device firmware */
+ 	rc = mwl8k_request_firmware(priv, fw_image, nowait);
+-	if (rc) {
+-		wiphy_err(hw->wiphy, "Firmware files not found\n");
++	if (rc)
+ 		return rc;
+-	}
+ 
+ 	if (nowait)
+ 		return rc;
+Index: linux/drivers/net/wireless/ralink/rt2x00/rt2x00firmware.c
+===================================================================
+--- linux.orig/drivers/net/wireless/ralink/rt2x00/rt2x00firmware.c
++++ linux/drivers/net/wireless/ralink/rt2x00/rt2x00firmware.c
+@@ -38,10 +38,8 @@ static int rt2x00lib_request_firmware(st
+ 	rt2x00_info(rt2x00dev, "Loading firmware file '%s'\n", fw_name);
+ 
+ 	retval = request_firmware(&fw, fw_name, device);
+-	if (retval) {
+-		rt2x00_err(rt2x00dev, "Failed to request Firmware\n");
++	if (retval)
+ 		return retval;
+-	}
+ 
+ 	if (!fw || !fw->size || !fw->data) {
+ 		rt2x00_err(rt2x00dev, "Failed to read Firmware\n");
+Index: linux/drivers/net/wireless/realtek/rtlwifi/core.c
+===================================================================
+--- linux.orig/drivers/net/wireless/realtek/rtlwifi/core.c
++++ linux/drivers/net/wireless/realtek/rtlwifi/core.c
+@@ -88,7 +88,6 @@ static void rtl_fw_do_work(const struct
+ 			if (!err)
+ 				goto found_alt;
+ 		}
+-		pr_err("Selected firmware is not available\n");
+ 		rtlpriv->max_fw_size = 0;
+ 		goto exit;
+ 	}
+Index: linux/drivers/net/wireless/realtek/rtlwifi/rtl8192se/sw.c
+===================================================================
+--- linux.orig/drivers/net/wireless/realtek/rtlwifi/rtl8192se/sw.c
++++ linux/drivers/net/wireless/realtek/rtlwifi/rtl8192se/sw.c
+@@ -63,13 +63,11 @@ static void rtl92se_fw_cb(const struct f
+ 	struct ieee80211_hw *hw = context;
+ 	struct rtl_priv *rtlpriv = rtl_priv(hw);
+ 	struct rt_firmware *pfirmware = NULL;
+-	char *fw_name = "rtlwifi/rtl8192sefw.bin";
+ 
+ 	rtl_dbg(rtlpriv, COMP_ERR, DBG_LOUD,
+ 		"Firmware callback routine entered!\n");
+ 	complete(&rtlpriv->firmware_loading_complete);
+ 	if (!firmware) {
+-		pr_err("Firmware %s not available\n", fw_name);
+ 		rtlpriv->max_fw_size = 0;
+ 		return;
+ 	}
+Index: linux/drivers/net/wireless/ti/wl1251/main.c
+===================================================================
+--- linux.orig/drivers/net/wireless/ti/wl1251/main.c
++++ linux/drivers/net/wireless/ti/wl1251/main.c
+@@ -57,10 +57,8 @@ static int wl1251_fetch_firmware(struct
+ 
+ 	ret = request_firmware(&fw, WL1251_FW_NAME, dev);
+ 
+-	if (ret < 0) {
+-		wl1251_error("could not get firmware: %d", ret);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	if (fw->size % 4) {
+ 		wl1251_error("firmware size is not multiple of 32 bits: %zu",
+@@ -96,10 +94,8 @@ static int wl1251_fetch_nvs(struct wl125
+ 
+ 	ret = request_firmware(&fw, WL1251_NVS_NAME, dev);
+ 
+-	if (ret < 0) {
+-		wl1251_error("could not get nvs file: %d", ret);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	if (fw->size % 4) {
+ 		wl1251_error("nvs size is not multiple of 32 bits: %zu",
+Index: linux/drivers/net/wireless/ti/wlcore/main.c
+===================================================================
+--- linux.orig/drivers/net/wireless/ti/wlcore/main.c
++++ linux/drivers/net/wireless/ti/wlcore/main.c
+@@ -764,10 +764,8 @@ static int wl12xx_fetch_firmware(struct
+ 
+ 	ret = request_firmware(&fw, fw_name, wl->dev);
+ 
+-	if (ret < 0) {
+-		wl1271_error("could not get firmware %s: %d", fw_name, ret);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	if (fw->size % 4) {
+ 		wl1271_error("firmware size is not multiple of 32 bits: %zu",
+Index: linux/drivers/net/wireless/zydas/zd1201.c
+===================================================================
+--- linux.orig/drivers/net/wireless/zydas/zd1201.c
++++ linux/drivers/net/wireless/zydas/zd1201.c
+@@ -62,8 +62,6 @@ static int zd1201_fw_upload(struct usb_d
+ 
+ 	err = request_firmware(&fw_entry, fwfile, &dev->dev);
+ 	if (err) {
+-		dev_err(&dev->dev, "Failed to load %s firmware file!\n", fwfile);
+-		dev_err(&dev->dev, "Make sure the hotplug firmware loader is installed.\n");
+ 		dev_err(&dev->dev, "Goto http://linux-lc100020.sourceforge.net for more info.\n");
+ 		return err;
+ 	}
+Index: linux/drivers/net/wireless/zydas/zd1211rw/zd_usb.c
+===================================================================
+--- linux.orig/drivers/net/wireless/zydas/zd1211rw/zd_usb.c
++++ linux/drivers/net/wireless/zydas/zd1211rw/zd_usb.c
+@@ -108,16 +108,9 @@ static void int_urb_complete(struct urb
+ static int request_fw_file(
+ 	const struct firmware **fw, const char *name, struct device *device)
+ {
+-	int r;
+-
+ 	dev_dbg_f(device, "fw name %s\n", name);
+ 
+-	r = request_firmware(fw, name, device);
+-	if (r)
+-		dev_err(device,
+-		       "Could not load firmware file %s. Error number %d\n",
+-		       name, r);
+-	return r;
++	return request_firmware(fw, name, device);
+ }
+ 
+ static inline u16 get_bcdDevice(const struct usb_device *udev)
+Index: linux/drivers/scsi/advansys.c
+===================================================================
+--- linux.orig/drivers/scsi/advansys.c
++++ linux/drivers/scsi/advansys.c
+@@ -4045,8 +4045,6 @@ static int AscInitAsc1000Driver(ASC_DVC_
+ 
+ 	err = request_firmware(&fw, fwname, asc_dvc->drv_ptr->dev);
+ 	if (err) {
+-		printk(KERN_ERR "Failed to load image \"%s\" err %d\n",
+-		       fwname, err);
+ 		asc_dvc->err_code |= ASC_IERR_MCODE_CHKSUM;
+ 		return err;
+ 	}
+@@ -4411,8 +4409,6 @@ static int AdvInitAsc3550Driver(ADV_DVC_
+ 
+ 	err = request_firmware(&fw, fwname, asc_dvc->drv_ptr->dev);
+ 	if (err) {
+-		printk(KERN_ERR "Failed to load image \"%s\" err %d\n",
+-		       fwname, err);
+ 		asc_dvc->err_code = ASC_IERR_MCODE_CHKSUM;
+ 		return err;
+ 	}
+@@ -4911,8 +4907,6 @@ static int AdvInitAsc38C0800Driver(ADV_D
+ 
+ 	err = request_firmware(&fw, fwname, asc_dvc->drv_ptr->dev);
+ 	if (err) {
+-		printk(KERN_ERR "Failed to load image \"%s\" err %d\n",
+-		       fwname, err);
+ 		asc_dvc->err_code = ASC_IERR_MCODE_CHKSUM;
+ 		return err;
+ 	}
+@@ -5399,8 +5393,6 @@ static int AdvInitAsc38C1600Driver(ADV_D
+ 
+ 	err = request_firmware(&fw, fwname, asc_dvc->drv_ptr->dev);
+ 	if (err) {
+-		printk(KERN_ERR "Failed to load image \"%s\" err %d\n",
+-		       fwname, err);
+ 		asc_dvc->err_code = ASC_IERR_MCODE_CHKSUM;
+ 		return err;
+ 	}
+Index: linux/drivers/scsi/aic94xx/aic94xx_init.c
+===================================================================
+--- linux.orig/drivers/scsi/aic94xx/aic94xx_init.c
++++ linux/drivers/scsi/aic94xx/aic94xx_init.c
+@@ -370,8 +370,6 @@ static ssize_t asd_store_update_bios(str
+ 				   filename_ptr,
+ 				   &asd_ha->pcidev->dev);
+ 	if (err) {
+-		asd_printk("Failed to load bios image file %s, error %d\n",
+-			   filename_ptr, err);
+ 		err = FAIL_OPEN_BIOS_FILE;
+ 		goto out1;
+ 	}
+Index: linux/drivers/scsi/aic94xx/aic94xx_seq.c
+===================================================================
+--- linux.orig/drivers/scsi/aic94xx/aic94xx_seq.c
++++ linux/drivers/scsi/aic94xx/aic94xx_seq.c
+@@ -1302,11 +1302,8 @@ int asd_init_seqs(struct asd_ha_struct *
+ 
+ 	err = asd_request_firmware(asd_ha);
+ 
+-	if (err) {
+-		asd_printk("Failed to load sequencer firmware file %s, error %d\n",
+-			   SAS_RAZOR_SEQUENCER_FW_FILE, err);
++	if (err)
+ 		return err;
+-	}
+ 
+ 	err = asd_seq_download_seqs(asd_ha);
+ 	if (err) {
+Index: linux/drivers/scsi/bfa/bfad.c
+===================================================================
+--- linux.orig/drivers/scsi/bfa/bfad.c
++++ linux/drivers/scsi/bfa/bfad.c
+@@ -1749,7 +1749,6 @@ bfad_read_firmware(struct pci_dev *pdev,
+ 	const struct firmware *fw;
+ 
+ 	if (request_firmware(&fw, fw_name, &pdev->dev)) {
+-		printk(KERN_ALERT "Can't locate firmware %s\n", fw_name);
+ 		*bfi_image = NULL;
+ 		goto out;
+ 	}
+Index: linux/drivers/scsi/ipr.c
+===================================================================
+--- linux.orig/drivers/scsi/ipr.c
++++ linux/drivers/scsi/ipr.c
+@@ -4102,10 +4102,8 @@ static ssize_t ipr_store_update_fw(struc
+ 	if (endline)
+ 		*endline = '\0';
+ 
+-	if (request_firmware(&fw_entry, fname, &ioa_cfg->pdev->dev)) {
+-		dev_err(&ioa_cfg->pdev->dev, "Firmware file %s not found\n", fname);
++	if (request_firmware(&fw_entry, fname, &ioa_cfg->pdev->dev))
+ 		return -EIO;
+-	}
+ 
+ 	image_hdr = (struct ipr_ucode_image_header *)fw_entry->data;
+ 
+Index: linux/drivers/scsi/pm8001/pm8001_ctl.c
+===================================================================
+--- linux.orig/drivers/scsi/pm8001/pm8001_ctl.c
++++ linux/drivers/scsi/pm8001/pm8001_ctl.c
+@@ -842,9 +842,6 @@ static ssize_t pm8001_store_update_fw(st
+ 			       pm8001_ha->dev);
+ 
+ 	if (ret) {
+-		pm8001_dbg(pm8001_ha, FAIL,
+-			   "Failed to load firmware image file %s, error %d\n",
+-			   filename_ptr, ret);
+ 		pm8001_ha->fw_status = FAIL_OPEN_BIOS_FILE;
+ 		goto out;
+ 	}
+Index: linux/drivers/scsi/qla1280.c
+===================================================================
+--- linux.orig/drivers/scsi/qla1280.c
++++ linux/drivers/scsi/qla1280.c
+@@ -1513,8 +1513,6 @@ qla1280_request_firmware(struct scsi_qla
+ 	err = request_firmware(&fw, fwname, &ha->pdev->dev);
+ 
+ 	if (err) {
+-		printk(KERN_ERR "Failed to load image \"%s\" err %d\n",
+-		       fwname, err);
+ 		fw = ERR_PTR(err);
+ 		goto unlock;
+ 	}
+Index: linux/drivers/scsi/qla2xxx/qla_init.c
+===================================================================
+--- linux.orig/drivers/scsi/qla2xxx/qla_init.c
++++ linux/drivers/scsi/qla2xxx/qla_init.c
+@@ -8187,10 +8187,6 @@ qla2x00_load_risc(scsi_qla_host_t *vha,
+ 	/* Load firmware blob. */
+ 	blob = qla2x00_request_firmware(vha);
+ 	if (!blob) {
+-		ql_log(ql_log_info, vha, 0x0083,
+-		    "Firmware image unavailable.\n");
+-		ql_log(ql_log_info, vha, 0x0084,
+-		    "Firmware images can be retrieved from: "QLA_FW_URL ".\n");
+ 		return QLA_FUNCTION_FAILED;
+ 	}
+ 
+@@ -8293,9 +8289,6 @@ qla24xx_load_risc_blob(scsi_qla_host_t *
+ 
+ 	blob = qla2x00_request_firmware(vha);
+ 	if (!blob) {
+-		ql_log(ql_log_warn, vha, 0x0092,
+-		    "-> Firmware file not found.\n");
+-
+ 		return QLA_FUNCTION_FAILED;
+ 	}
+ 
+Index: linux/drivers/scsi/qla2xxx/qla_nx.c
+===================================================================
+--- linux.orig/drivers/scsi/qla2xxx/qla_nx.c
++++ linux/drivers/scsi/qla2xxx/qla_nx.c
+@@ -2427,11 +2427,8 @@ try_blob_fw:
+ 
+ 	/* Load firmware blob. */
+ 	blob = ha->hablob = qla2x00_request_firmware(vha);
+-	if (!blob) {
+-		ql_log(ql_log_fatal, vha, 0x00a3,
+-		    "Firmware image not present.\n");
++	if (!blob)
+ 		goto fw_load_failed;
+-	}
+ 
+ 	/* Validating firmware blob */
+ 	if (qla82xx_validate_firmware_blob(vha,
+Index: linux/drivers/scsi/qla2xxx/qla_os.c
+===================================================================
+--- linux.orig/drivers/scsi/qla2xxx/qla_os.c
++++ linux/drivers/scsi/qla2xxx/qla_os.c
+@@ -7552,8 +7552,6 @@ qla2x00_request_firmware(scsi_qla_host_t
+ 		goto out;
+ 
+ 	if (request_firmware(&blob->fw, blob->name, &ha->pdev->dev)) {
+-		ql_log(ql_log_warn, vha, 0x0063,
+-		    "Failed to load firmware image (%s).\n", blob->name);
+ 		blob->fw = NULL;
+ 		blob = NULL;
+ 	}
+Index: linux/drivers/scsi/qlogicpti.c
+===================================================================
+--- linux.orig/drivers/scsi/qlogicpti.c
++++ linux/drivers/scsi/qlogicpti.c
+@@ -486,11 +486,8 @@ static int qlogicpti_load_firmware(struc
+ 	int i, timeout;
+ 
+ 	err = request_firmware(&fw, fwname, &qpti->op->dev);
+-	if (err) {
+-		printk(KERN_ERR "Failed to load image \"%s\" err %d\n",
+-		       fwname, err);
++	if (err)
+ 		return err;
+-	}
+ 	if (fw->size % 2) {
+ 		printk(KERN_ERR "Bogus length %zu in image \"%s\"\n",
+ 		       fw->size, fwname);
+Index: linux/drivers/staging/rtl8192u/r819xU_firmware.c
+===================================================================
+--- linux.orig/drivers/staging/rtl8192u/r819xU_firmware.c
++++ linux/drivers/staging/rtl8192u/r819xU_firmware.c
+@@ -240,10 +240,8 @@ bool init_firmware(struct net_device *de
+ 		 */
+ 		if (rst_opt == OPT_SYSTEM_RESET) {
+ 			rc = request_firmware(&fw_entry, fw_name[init_step], &priv->udev->dev);
+-			if (rc < 0) {
+-				RT_TRACE(COMP_ERR, "request firmware fail!\n");
++			if (rc)
+ 				goto download_firmware_fail;
+-			}
+ 
+ 			if (fw_entry->size > sizeof(pfirmware->firmware_buf)) {
+ 				RT_TRACE(COMP_ERR, "img file size exceed the container buffer fail!\n");
+Index: linux/drivers/staging/rtl8712/hal_init.c
+===================================================================
+--- linux.orig/drivers/staging/rtl8712/hal_init.c
++++ linux/drivers/staging/rtl8712/hal_init.c
+@@ -72,8 +72,6 @@ int rtl871x_load_fw(struct _adapter *pad
+ 	dev_info(dev, "r8712u: Loading firmware from \"%s\"\n", firmware_file);
+ 	rc = request_firmware_nowait(THIS_MODULE, 1, firmware_file, dev,
+ 				     GFP_KERNEL, padapter, rtl871x_load_fw_cb);
+-	if (rc)
+-		dev_err(dev, "r8712u: Firmware request error %d\n", rc);
+ 	return rc;
+ }
+ MODULE_FIRMWARE("rtlwifi/rtl8712u.bin");
+Index: linux/drivers/staging/vt6656/main_usb.c
+===================================================================
+--- linux.orig/drivers/staging/vt6656/main_usb.c
++++ linux/drivers/staging/vt6656/main_usb.c
+@@ -107,11 +107,8 @@ static int vnt_download_firmware(struct
+ 	dev_dbg(dev, "---->Download firmware\n");
+ 
+ 	ret = request_firmware(&fw, FIRMWARE_NAME, dev);
+-	if (ret) {
+-		dev_err(dev, "firmware file %s request failed (%d)\n",
+-			FIRMWARE_NAME, ret);
++	if (ret)
+ 		goto end;
+-	}
+ 
+ 	for (ii = 0; ii < fw->size; ii += FIRMWARE_CHUNK_SIZE) {
+ 		length = min_t(int, fw->size - ii, FIRMWARE_CHUNK_SIZE);
+Index: linux/drivers/tty/moxa.c
+===================================================================
+--- linux.orig/drivers/tty/moxa.c
++++ linux/drivers/tty/moxa.c
+@@ -854,13 +854,8 @@ static int moxa_init_board(struct moxa_b
+ 	}
+ 
+ 	ret = request_firmware(&fw, file, dev);
+-	if (ret) {
+-		printk(KERN_ERR "MOXA: request_firmware failed. Make sure "
+-				"you've placed '%s' file into your firmware "
+-				"loader directory (e.g. /lib/firmware)\n",
+-				file);
++	if (ret)
+ 		goto err_free;
+-	}
+ 
+ 	ret = moxa_load_fw(brd, fw);
+ 
+Index: linux/drivers/tty/serial/icom.c
+===================================================================
+--- linux.orig/drivers/tty/serial/icom.c
++++ linux/drivers/tty/serial/icom.c
+@@ -362,7 +362,6 @@ static void load_code(struct icom_port *
+ 
+ 	/* Load Call Setup into Adapter */
+ 	if (request_firmware(&fw, "icom_call_setup.bin", &dev->dev) < 0) {
+-		dev_err(&dev->dev,"Unable to load icom_call_setup.bin firmware image\n");
+ 		status = -1;
+ 		goto load_code_exit;
+ 	}
+@@ -382,7 +381,6 @@ static void load_code(struct icom_port *
+ 
+ 	/* Load Resident DCE portion of Adapter */
+ 	if (request_firmware(&fw, "icom_res_dce.bin", &dev->dev) < 0) {
+-		dev_err(&dev->dev,"Unable to load icom_res_dce.bin firmware image\n");
+ 		status = -1;
+ 		goto load_code_exit;
+ 	}
+@@ -427,7 +425,6 @@ static void load_code(struct icom_port *
+ 	}
+ 
+ 	if (request_firmware(&fw, "icom_asc.bin", &dev->dev) < 0) {
+-		dev_err(&dev->dev,"Unable to load icom_asc.bin firmware image\n");
+ 		status = -1;
+ 		goto load_code_exit;
+ 	}
+Index: linux/drivers/tty/serial/ucc_uart.c
+===================================================================
+--- linux.orig/drivers/tty/serial/ucc_uart.c
++++ linux/drivers/tty/serial/ucc_uart.c
+@@ -1161,10 +1161,8 @@ static void uart_firmware_cont(const str
+ 	struct device *dev = context;
+ 	int ret;
+ 
+-	if (!fw) {
+-		dev_err(dev, "firmware not found\n");
++	if (!fw)
+ 		return;
+-	}
+ 
+ 	firmware = (struct qe_firmware *) fw->data;
+ 
+Index: linux/drivers/usb/atm/cxacru.c
+===================================================================
+--- linux.orig/drivers/usb/atm/cxacru.c
++++ linux/drivers/usb/atm/cxacru.c
+@@ -1084,8 +1084,6 @@ static int cxacru_find_firmware(struct c
+ 		return -ENOENT;
+ 	}
+ 
+-	usb_info(usbatm, "found firmware %s\n", buf);
+-
+ 	return 0;
+ }
+ 
+Index: linux/drivers/usb/atm/ueagle-atm.c
+===================================================================
+--- linux.orig/drivers/usb/atm/ueagle-atm.c
++++ linux/drivers/usb/atm/ueagle-atm.c
+@@ -606,10 +606,8 @@ static void uea_upload_pre_firmware(cons
+ 	int ret, size;
+ 
+ 	uea_enters(usb);
+-	if (!fw_entry) {
+-		uea_err(usb, "firmware is not available\n");
++	if (!fw_entry)
+ 		goto err;
+-	}
+ 
+ 	pfw = fw_entry->data;
+ 	size = fw_entry->size;
+@@ -704,10 +702,6 @@ static int uea_load_firmware(struct usb_
+ 	ret = request_firmware_nowait(THIS_MODULE, 1, fw_name, &usb->dev,
+ 					GFP_KERNEL, usb,
+ 					uea_upload_pre_firmware);
+-	if (ret)
+-		uea_err(usb, "firmware %s is not available\n", fw_name);
+-	else
+-		uea_info(usb, "loading firmware %s\n", fw_name);
+ 
+ 	uea_leaves(usb);
+ 	return ret;
+@@ -869,12 +863,8 @@ static int request_dsp(struct uea_softc
+ 	}
+ 
+ 	ret = request_firmware(&sc->dsp_firm, dsp_name, &sc->usb_dev->dev);
+-	if (ret < 0) {
+-		uea_err(INS_TO_USBDEV(sc),
+-		       "requesting firmware %s failed with error %d\n",
+-			dsp_name, ret);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	if (UEA_CHIP_VERSION(sc) == EAGLE_IV)
+ 		ret = check_dsp_e4(sc->dsp_firm->data, sc->dsp_firm->size);
+@@ -1587,12 +1577,8 @@ static int request_cmvs_old(struct uea_s
+ 
+ 	cmvs_file_name(sc, cmv_name, 1);
+ 	ret = request_firmware(fw, cmv_name, &sc->usb_dev->dev);
+-	if (ret < 0) {
+-		uea_err(INS_TO_USBDEV(sc),
+-		       "requesting firmware %s failed with error %d\n",
+-		       cmv_name, ret);
++	if (ret)
+ 		return ret;
+-	}
+ 
+ 	data = (u8 *) (*fw)->data;
+ 	size = (*fw)->size;
+@@ -1629,9 +1615,6 @@ static int request_cmvs(struct uea_softc
+ 				"try to get older cmvs\n", cmv_name);
+ 			return request_cmvs_old(sc, cmvs, fw);
+ 		}
+-		uea_err(INS_TO_USBDEV(sc),
+-		       "requesting firmware %s failed with error %d\n",
+-		       cmv_name, ret);
+ 		return ret;
+ 	}
+ 
+@@ -1914,11 +1897,8 @@ static int load_XILINX_firmware(struct u
+ 	uea_enters(INS_TO_USBDEV(sc));
+ 
+ 	ret = request_firmware(&fw_entry, fw_name, &sc->usb_dev->dev);
+-	if (ret) {
+-		uea_err(INS_TO_USBDEV(sc), "firmware %s is not available\n",
+-		       fw_name);
++	if (ret)
+ 		goto err0;
+-	}
+ 
+ 	pfw = fw_entry->data;
+ 	size = fw_entry->size;
+Index: linux/drivers/usb/misc/emi26.c
+===================================================================
+--- linux.orig/drivers/usb/misc/emi26.c
++++ linux/drivers/usb/misc/emi26.c
+@@ -85,21 +85,17 @@ static int emi26_load_firmware (struct u
+ 
+ 	err = request_ihex_firmware(&loader_fw, "emi26/loader.fw", &dev->dev);
+ 	if (err)
+-		goto nofw;
++		goto wraperr;
+ 
+ 	err = request_ihex_firmware(&bitstream_fw, "emi26/bitstream.fw",
+ 				    &dev->dev);
+ 	if (err)
+-		goto nofw;
++		goto wraperr;
+ 
+ 	err = request_ihex_firmware(&firmware_fw, "emi26/firmware.fw",
+ 				    &dev->dev);
+-	if (err) {
+-	nofw:
+-		dev_err(&dev->dev, "%s - request_firmware() failed\n",
+-			__func__);
++	if (err)
+ 		goto wraperr;
+-	}
+ 
+ 	/* Assert reset (stop the CPU in the EMI) */
+ 	err = emi26_set_reset(dev,1);
+Index: linux/drivers/usb/misc/ezusb.c
+===================================================================
+--- linux.orig/drivers/usb/misc/ezusb.c
++++ linux/drivers/usb/misc/ezusb.c
+@@ -64,12 +64,8 @@ static int ezusb_ihex_firmware_download(
+ 	const struct ihex_binrec *record;
+ 
+ 	if (request_ihex_firmware(&firmware, firmware_path,
+-				  &dev->dev)) {
+-		dev_err(&dev->dev,
+-			"%s - request \"%s\" failed\n",
+-			__func__, firmware_path);
++				  &dev->dev))
+ 		goto out;
+-	}
+ 
+ 	ret = ezusb_set_reset(dev, fx.cpucs_reg, 0);
+ 	if (ret < 0)
+Index: linux/drivers/usb/misc/isight_firmware.c
+===================================================================
+--- linux.orig/drivers/usb/misc/isight_firmware.c
++++ linux/drivers/usb/misc/isight_firmware.c
+@@ -45,7 +45,6 @@ static int isight_firmware_load(struct u
+ 		return -ENOMEM;
+ 
+ 	if (request_firmware(&firmware, "isight.fw", &dev->dev) != 0) {
+-		printk(KERN_ERR "Unable to load isight firmware\n");
+ 		ret = -ENODEV;
+ 		goto out;
+ 	}
+Index: linux/drivers/usb/serial/io_edgeport.c
+===================================================================
+--- linux.orig/drivers/usb/serial/io_edgeport.c
++++ linux/drivers/usb/serial/io_edgeport.c
+@@ -332,11 +332,8 @@ static void update_edgeport_E2PROM(struc
+ 
+ 	response = request_ihex_firmware(&fw, fw_name,
+ 					 &edge_serial->serial->dev->dev);
+-	if (response) {
+-		dev_err(dev, "Failed to load image \"%s\" err %d\n",
+-		       fw_name, response);
++	if (response)
+ 		return;
+-	}
+ 
+ 	rec = (const struct ihex_binrec *)fw->data;
+ 	BootMajorVersion = rec->data[0];
+Index: linux/drivers/usb/serial/io_ti.c
+===================================================================
+--- linux.orig/drivers/usb/serial/io_ti.c
++++ linux/drivers/usb/serial/io_ti.c
+@@ -1006,8 +1006,6 @@ static int download_fw(struct edgeport_s
+ 
+ 	status = request_firmware(&fw, fw_name, dev);
+ 	if (status) {
+-		dev_err(dev, "Failed to load image \"%s\" err %d\n",
+-				fw_name, status);
+ 		return status;
+ 	}
+ 
+Index: linux/drivers/usb/serial/ti_usb_3410_5052.c
+===================================================================
+--- linux.orig/drivers/usb/serial/ti_usb_3410_5052.c
++++ linux/drivers/usb/serial/ti_usb_3410_5052.c
+@@ -1629,10 +1629,8 @@ static int ti_download_firmware(struct t
+ 	}
+ 
+ check_firmware:
+-	if (status) {
+-		dev_err(&dev->dev, "%s - firmware not found\n", __func__);
++	if (status)
+ 		return -ENOENT;
+-	}
+ 	if (fw_p->size > TI_FIRMWARE_BUF_SIZE) {
+ 		dev_err(&dev->dev, "%s - firmware too large %zu\n", __func__, fw_p->size);
+ 		release_firmware(fw_p);
+Index: linux/drivers/video/fbdev/broadsheetfb.c
+===================================================================
+--- linux.orig/drivers/video/fbdev/broadsheetfb.c
++++ linux/drivers/video/fbdev/broadsheetfb.c
+@@ -743,10 +743,8 @@ static ssize_t broadsheet_loadstore_wave
+ 		return -EINVAL;
+ 
+ 	err = request_firmware(&fw_entry, "broadsheet.wbf", dev);
+-	if (err < 0) {
+-		dev_err(dev, "Failed to get broadsheet waveform\n");
++	if (err)
+ 		goto err_failed;
+-	}
+ 
+ 	/* try to enforce reasonable min max on waveform */
+ 	if ((fw_entry->size < 8*1024) || (fw_entry->size > 64*1024)) {
+Index: linux/drivers/video/fbdev/metronomefb.c
+===================================================================
+--- linux.orig/drivers/video/fbdev/metronomefb.c
++++ linux/drivers/video/fbdev/metronomefb.c
+@@ -679,10 +679,8 @@ static int metronomefb_probe(struct plat
+ 		a) request the waveform file from userspace
+ 		b) process waveform and decode into metromem */
+ 	retval = request_firmware(&fw_entry, "metronome.wbf", &dev->dev);
+-	if (retval < 0) {
+-		dev_err(&dev->dev, "Failed to get waveform\n");
++	if (retval)
+ 		goto err_csum_table;
+-	}
+ 
+ 	retval = load_waveform((u8 *) fw_entry->data, fw_entry->size, 3, 31,
+ 				par);
+Index: linux/sound/drivers/vx/vx_hwdep.c
+===================================================================
+--- linux.orig/sound/drivers/vx/vx_hwdep.c
++++ linux/sound/drivers/vx/vx_hwdep.c
+@@ -58,10 +58,8 @@ int snd_vx_setup_firmware(struct vx_core
+ 		if (! fw_files[chip->type][i])
+ 			continue;
+ 		sprintf(path, "vx/%s", fw_files[chip->type][i]);
+-		if (request_firmware(&fw, path, chip->dev)) {
+-			snd_printk(KERN_ERR "vx: can't load firmware %s\n", path);
++		if (request_firmware(&fw, path, chip->dev))
+ 			return -ENOENT;
+-		}
+ 		err = chip->ops->load_dsp(chip, i, fw);
+ 		if (err < 0) {
+ 			release_firmware(fw);
+Index: linux/sound/isa/msnd/msnd_pinnacle.c
+===================================================================
+--- linux.orig/sound/isa/msnd/msnd_pinnacle.c
++++ linux/sound/isa/msnd/msnd_pinnacle.c
+@@ -376,15 +376,11 @@ static int upload_dsp_code(struct snd_ca
+ 	outb(HPBLKSEL_0, chip->io + HP_BLKS);
+ 
+ 	err = request_firmware(&init_fw, INITCODEFILE, card->dev);
+-	if (err < 0) {
+-		printk(KERN_ERR LOGNAME ": Error loading " INITCODEFILE);
++	if (err)
+ 		goto cleanup1;
+-	}
+ 	err = request_firmware(&perm_fw, PERMCODEFILE, card->dev);
+-	if (err < 0) {
+-		printk(KERN_ERR LOGNAME ": Error loading " PERMCODEFILE);
++	if (err)
+ 		goto cleanup;
+-	}
+ 
+ 	memcpy_toio(chip->mappedbase, perm_fw->data, perm_fw->size);
+ 	if (snd_msnd_upload_host(chip, init_fw->data, init_fw->size) < 0) {
+Index: linux/sound/isa/sscape.c
+===================================================================
+--- linux.orig/sound/isa/sscape.c
++++ linux/sound/isa/sscape.c
+@@ -520,10 +520,8 @@ static int sscape_upload_bootblock(struc
+ 	int ret;
+ 
+ 	ret = request_firmware(&init_fw, "scope.cod", card->dev);
+-	if (ret < 0) {
+-		snd_printk(KERN_ERR "sscape: Error loading scope.cod");
++	if (ret)
+ 		return ret;
+-	}
+ 	ret = upload_dma_data(sscape, init_fw->data, init_fw->size);
+ 
+ 	release_firmware(init_fw);
+@@ -560,11 +558,8 @@ static int sscape_upload_microcode(struc
+ 	snprintf(name, sizeof(name), "sndscape.co%d", version);
+ 
+ 	err = request_firmware(&init_fw, name, card->dev);
+-	if (err < 0) {
+-		snd_printk(KERN_ERR "sscape: Error loading sndscape.co%d",
+-				version);
++	if (err)
+ 		return err;
+-	}
+ 	err = upload_dma_data(sscape, init_fw->data, init_fw->size);
+ 	if (err == 0)
+ 		snd_printk(KERN_INFO "sscape: MIDI firmware loaded %zu KBs\n",
+Index: linux/sound/isa/wavefront/wavefront_synth.c
+===================================================================
+--- linux.orig/sound/isa/wavefront/wavefront_synth.c
++++ linux/sound/isa/wavefront/wavefront_synth.c
+@@ -1971,10 +1971,8 @@ wavefront_download_firmware (snd_wavefro
+ 	const struct firmware *firmware;
+ 
+ 	err = request_firmware(&firmware, path, dev->card->dev);
+-	if (err < 0) {
+-		snd_printk(KERN_ERR "firmware (%s) download failed!!!\n", path);
++	if (err)
+ 		return 1;
+-	}
+ 
+ 	len = 0;
+ 	buf = firmware->data;
+Index: linux/sound/pci/asihpi/hpidspcd.c
+===================================================================
+--- linux.orig/sound/pci/asihpi/hpidspcd.c
++++ linux/sound/pci/asihpi/hpidspcd.c
+@@ -35,8 +35,6 @@ short hpi_dsp_code_open(u32 adapter, voi
+ 	err = request_firmware(&firmware, fw_name, &dev->dev);
+ 
+ 	if (err || !firmware) {
+-		dev_err(&dev->dev, "%d, request_firmware failed for %s\n",
+-			err, fw_name);
+ 		goto error1;
+ 	}
+ 	if (firmware->size < sizeof(header)) {
+Index: linux/sound/pci/cs46xx/cs46xx_lib.c
+===================================================================
+--- linux.orig/sound/pci/cs46xx/cs46xx_lib.c
++++ linux/sound/pci/cs46xx/cs46xx_lib.c
+@@ -3199,11 +3199,8 @@ int snd_cs46xx_start_dsp(struct snd_cs46
+ #ifdef CONFIG_SND_CS46XX_NEW_DSP
+ 	for (i = 0; i < CS46XX_DSP_MODULES; i++) {
+ 		err = load_firmware(chip, &chip->modules[i], module_names[i]);
+-		if (err < 0) {
+-			dev_err(chip->card->dev, "firmware load error [%s]\n",
+-				   module_names[i]);
++		if (err < 0)
+ 			return err;
+-		}
+ 		err = cs46xx_dsp_load_module(chip, chip->modules[i]);
+ 		if (err < 0) {
+ 			dev_err(chip->card->dev, "image download error [%s]\n",
+Index: linux/sound/pci/echoaudio/echoaudio.c
+===================================================================
+--- linux.orig/sound/pci/echoaudio/echoaudio.c
++++ linux/sound/pci/echoaudio/echoaudio.c
+@@ -48,11 +48,8 @@ static int get_firmware(const struct fir
+ 		"firmware requested: %s\n", card_fw[fw_index].data);
+ 	snprintf(name, sizeof(name), "ea/%s", card_fw[fw_index].data);
+ 	err = request_firmware(fw_entry, name, &chip->pci->dev);
+-	if (err < 0)
+-		dev_err(chip->card->dev,
+-			"get_firmware(): Firmware not available (%d)\n", err);
+ #ifdef CONFIG_PM_SLEEP
+-	else
++	if (!err)
+ 		chip->fw_cache[fw_index] = *fw_entry;
+ #endif
+ 	return err;
+Index: linux/sound/pci/emu10k1/emu10k1_main.c
+===================================================================
+--- linux.orig/sound/pci/emu10k1/emu10k1_main.c
++++ linux/sound/pci/emu10k1/emu10k1_main.c
+@@ -873,10 +873,8 @@ static int snd_emu10k1_emu1010_init(stru
+ 	dev_info(emu->card->dev, "emu1010: EMU_HANA_ID = 0x%x\n", reg);
+ 
+ 	err = snd_emu1010_load_firmware(emu, 0, &emu->firmware);
+-	if (err < 0) {
+-		dev_info(emu->card->dev, "emu1010: Loading Firmware failed\n");
++	if (err < 0)
+ 		return err;
+-	}
+ 
+ 	/* ID, should read & 0x7f = 0x55 when FPGA programmed. */
+ 	snd_emu1010_fpga_read(emu, EMU_HANA_ID, &reg);
+Index: linux/sound/pci/hda/hda_intel.c
+===================================================================
+--- linux.orig/sound/pci/hda/hda_intel.c
++++ linux/sound/pci/hda/hda_intel.c
+@@ -2018,8 +2018,6 @@ static void azx_firmware_cb(const struct
+ 
+ 	if (fw)
+ 		chip->fw = fw;
+-	else
+-		dev_err(card->dev, "Cannot load firmware, continue without patching\n");
+ 	if (!chip->disabled) {
+ 		/* continue probing */
+ 		azx_probe_continue(chip);
+Index: linux/sound/pci/korg1212/korg1212.c
+===================================================================
+--- linux.orig/sound/pci/korg1212/korg1212.c
++++ linux/sound/pci/korg1212/korg1212.c
+@@ -2258,7 +2258,6 @@ static int snd_korg1212_create(struct sn
+ 
+ 	err = request_firmware(&dsp_code, "korg/k1212.dsp", &pci->dev);
+ 	if (err < 0) {
+-		snd_printk(KERN_ERR "firmware not available\n");
+ 		return err;
+ 	}
+ 
+Index: linux/sound/pci/mixart/mixart_hwdep.c
+===================================================================
+--- linux.orig/sound/pci/mixart/mixart_hwdep.c
++++ linux/sound/pci/mixart/mixart_hwdep.c
+@@ -566,11 +566,8 @@ int snd_mixart_setup_firmware(struct mix
+ 
+ 	for (i = 0; i < 3; i++) {
+ 		sprintf(path, "mixart/%s", fw_files[i]);
+-		if (request_firmware(&fw_entry, path, &mgr->pci->dev)) {
+-			dev_err(&mgr->pci->dev,
+-				"miXart: can't load firmware %s\n", path);
++		if (request_firmware(&fw_entry, path, &mgr->pci->dev))
+ 			return -ENOENT;
+-		}
+ 		/* fake hwdep dsp record */
+ 		err = mixart_dsp_load(mgr, i, fw_entry);
+ 		release_firmware(fw_entry);
+Index: linux/sound/pci/pcxhr/pcxhr_hwdep.c
+===================================================================
+--- linux.orig/sound/pci/pcxhr/pcxhr_hwdep.c
++++ linux/sound/pci/pcxhr/pcxhr_hwdep.c
+@@ -375,12 +375,8 @@ int pcxhr_setup_firmware(struct pcxhr_mg
+ 		if (!fw_files[fw_set][i])
+ 			continue;
+ 		sprintf(path, "pcxhr/%s", fw_files[fw_set][i]);
+-		if (request_firmware(&fw_entry, path, &mgr->pci->dev)) {
+-			dev_err(&mgr->pci->dev,
+-				"pcxhr: can't load firmware %s\n",
+-				   path);
++		if (request_firmware(&fw_entry, path, &mgr->pci->dev))
+ 			return -ENOENT;
+-		}
+ 		/* fake hwdep dsp record */
+ 		err = pcxhr_dsp_load(mgr, i, fw_entry);
+ 		release_firmware(fw_entry);
+Index: linux/sound/pci/riptide/riptide.c
+===================================================================
+--- linux.orig/sound/pci/riptide/riptide.c
++++ linux/sound/pci/riptide/riptide.c
+@@ -1222,11 +1222,8 @@ static int try_to_load_firmware(struct c
+ 	if (!chip->fw_entry) {
+ 		err = request_firmware(&chip->fw_entry, "riptide.hex",
+ 				       &chip->pci->dev);
+-		if (err) {
+-			snd_printk(KERN_ERR
+-				   "Riptide: Firmware not available %d\n", err);
++		if (err)
+ 			return -EIO;
+-		}
+ 	}
+ 	err = loadfirmware(cif, chip->fw_entry->data, chip->fw_entry->size);
+ 	if (err) {
+Index: linux/sound/pci/rme9652/hdsp.c
+===================================================================
+--- linux.orig/sound/pci/rme9652/hdsp.c
++++ linux/sound/pci/rme9652/hdsp.c
+@@ -5196,11 +5196,8 @@ static int hdsp_request_fw_loader(struct
+ 		return -EINVAL;
+ 	}
+ 
+-	if (request_firmware(&fw, fwfile, &hdsp->pci->dev)) {
+-		dev_err(hdsp->card->dev,
+-			"cannot load firmware %s\n", fwfile);
++	if (request_firmware(&fw, fwfile, &hdsp->pci->dev))
+ 		return -ENOENT;
+-	}
+ 	if (fw->size < HDSP_FIRMWARE_SIZE) {
+ 		dev_err(hdsp->card->dev,
+ 			"too short firmware size %d (expected %d)\n",
+Index: linux/sound/soc/codecs/wm2000.c
+===================================================================
+--- linux.orig/sound/soc/codecs/wm2000.c
++++ linux/sound/soc/codecs/wm2000.c
+@@ -894,10 +894,8 @@ static int wm2000_i2c_probe(struct i2c_c
+ 	}
+ 
+ 	ret = request_firmware(&fw, filename, &i2c->dev);
+-	if (ret != 0) {
+-		dev_err(&i2c->dev, "Failed to acquire ANC data: %d\n", ret);
++	if (ret != 0)
+ 		goto err_supplies;
+-	}
+ 
+ 	/* Pre-cook the concatenation of the register address onto the image */
+ 	wm2000->anc_download_size = fw->size + 2;
+Index: linux/sound/usb/6fire/firmware.c
+===================================================================
+--- linux.orig/sound/usb/6fire/firmware.c
++++ linux/sound/usb/6fire/firmware.c
+@@ -203,8 +203,6 @@ static int usb6fire_fw_ezusb_upload(
+ 	ret = request_firmware(&fw, fwname, &device->dev);
+ 	if (ret < 0) {
+ 		kfree(rec);
+-		dev_err(&intf->dev,
+-			"error requesting ezusb firmware %s.\n", fwname);
+ 		return ret;
+ 	}
+ 	ret = usb6fire_fw_ihex_init(fw, rec);
+@@ -280,8 +278,6 @@ static int usb6fire_fw_fpga_upload(
+ 
+ 	ret = request_firmware(&fw, fwname, &device->dev);
+ 	if (ret < 0) {
+-		dev_err(&intf->dev, "unable to get fpga firmware %s.\n",
+-				fwname);
+ 		kfree(buffer);
+ 		return -EIO;
+ 	}
diff --git a/debian/patches/bugfix/all/firmware_class-log-every-success-and-failure.patch b/debian/patches/bugfix/all/firmware_class-log-every-success-and-failure.patch
new file mode 100644
index 000000000000..092a74496133
--- /dev/null
+++ b/debian/patches/bugfix/all/firmware_class-log-every-success-and-failure.patch
@@ -0,0 +1,83 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: firmware_class: Log every success and failure against given device
+Date: Sun, 09 Dec 2012 16:02:00 +0000
+Forwarded: no
+
+The hundreds of users of request_firmware() have nearly as many
+different log formats for reporting failures.  They also have only the
+vaguest hint as to what went wrong; only firmware_class really knows
+that.  Therefore, add specific log messages for the failure modes that
+aren't currently logged.
+
+In case of a driver that tries multiple names, this may result in the
+impression that it failed to initialise.  Therefore, also log successes.
+
+This makes many error messages in drivers redundant, which will be
+removed in later patches.
+
+This does not cover the case where we fall back to a user-mode helper
+(which is no longer enabled in Debian).
+
+NOTE: hw-detect will depend on the "firmware: failed to load %s (%d)\n"
+format to detect missing firmware.
+---
+ drivers/base/firmware_loader/fallback.c |  2 +-
+ drivers/base/firmware_loader/main.c     | 17 ++++++++---------
+ 2 files changed, 9 insertions(+), 10 deletions(-)
+
+--- a/drivers/base/firmware_loader/fallback.c
++++ b/drivers/base/firmware_loader/fallback.c
+@@ -558,7 +558,7 @@ static int fw_load_from_user_helper(stru
+ 	if (opt_flags & FW_OPT_NOWAIT) {
+ 		timeout = usermodehelper_read_lock_wait(timeout);
+ 		if (!timeout) {
+-			dev_dbg(device, "firmware: %s loading timed out\n",
++			dev_err(device, "firmware: %s loading timed out\n",
+ 				name);
+ 			return -EBUSY;
+ 		}
+--- a/drivers/base/firmware_loader/main.c
++++ b/drivers/base/firmware_loader/main.c
+@@ -535,18 +535,15 @@ fw_get_filesystem_firmware(struct device
+ 						       file_size_ptr,
+ 						       READING_FIRMWARE);
+ 		if (rc < 0) {
+-			if (rc != -ENOENT)
+-				dev_warn(device, "loading %s failed with error %d\n",
+-					 path, rc);
+-			else
+-				dev_dbg(device, "loading %s failed for no such file or directory.\n",
+-					 path);
++			dev_dbg(device, "loading %s failed with error %d\n",
++				path, rc);
+ 			continue;
+ 		}
+ 		size = rc;
+ 		rc = 0;
+ 
+-		dev_dbg(device, "Loading firmware from %s\n", path);
++		dev_info(device, "firmware: direct-loading firmware %s\n",
++			 fw_priv->fw_name);
+ 		if (decompress) {
+ 			dev_dbg(device, "f/w decompressing %s\n",
+ 				fw_priv->fw_name);
+@@ -559,8 +556,6 @@ fw_get_filesystem_firmware(struct device
+ 				continue;
+ 			}
+ 		} else {
+-			dev_dbg(device, "direct-loading %s\n",
+-				fw_priv->fw_name);
+ 			if (!fw_priv->data)
+ 				fw_priv->data = buffer;
+ 			fw_priv->size = size;
+@@ -570,6 +565,10 @@ fw_get_filesystem_firmware(struct device
+ 	}
+ 	__putname(path);
+ 
++	if (rc)
++		dev_err(device, "firmware: failed to load %s (%d)\n",
++			fw_priv->fw_name, rc);
++
+ 	return rc;
+ }
+ 
diff --git a/debian/patches/bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch b/debian/patches/bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
new file mode 100644
index 000000000000..35dacbf59873
--- /dev/null
+++ b/debian/patches/bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
@@ -0,0 +1,61 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Wed, 13 Apr 2016 21:48:06 +0100
+Subject: fs: Add MODULE_SOFTDEP declarations for hard-coded crypto drivers
+Bug-Debian: https://bugs.debian.org/819725
+Forwarded: http://mid.gmane.org/20160517133631.GF7555@decadent.org.uk
+
+This helps initramfs builders and other tools to find the full
+dependencies of a module.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+[Lukas Wunner: Forward-ported to 4.11: drop parts applied upstream]
+---
+ fs/btrfs/super.c  | 2 +-
+ fs/ext4/super.c   | 2 +-
+ fs/f2fs/super.c   | 1 +
+ fs/jbd2/journal.c | 1 +
+ fs/nfsd/nfsctl.c  | 3 +++
+ 5 files changed, 7 insertions(+), 2 deletions(-)
+
+--- a/fs/btrfs/super.c
++++ b/fs/btrfs/super.c
+@@ -2697,7 +2697,7 @@
+ module_exit(exit_btrfs_fs)
+ 
+ MODULE_LICENSE("GPL");
+-MODULE_SOFTDEP("pre: crc32c");
++MODULE_SOFTDEP("pre: crypto-crc32c");
+ MODULE_SOFTDEP("pre: xxhash64");
+ MODULE_SOFTDEP("pre: sha256");
+ MODULE_SOFTDEP("pre: blake2b-256");
+--- a/fs/ext4/super.c
++++ b/fs/ext4/super.c
+@@ -6822,6 +6822,6 @@
+ MODULE_AUTHOR("Remy Card, Stephen Tweedie, Andrew Morton, Andreas Dilger, Theodore Ts'o and others");
+ MODULE_DESCRIPTION("Fourth Extended Filesystem");
+ MODULE_LICENSE("GPL");
+-MODULE_SOFTDEP("pre: crc32c");
++MODULE_SOFTDEP("pre: crypto-crc32c");
+ module_init(ext4_init_fs)
+ module_exit(ext4_exit_fs)
+--- a/fs/jbd2/journal.c
++++ b/fs/jbd2/journal.c
+@@ -3008,6 +3008,7 @@
+ }
+ 
+ MODULE_LICENSE("GPL");
++MODULE_SOFTDEP("pre: crypto-crc32c");
+ module_init(journal_init);
+ module_exit(journal_exit);
+ 
+--- a/fs/nfsd/nfsctl.c
++++ b/fs/nfsd/nfsctl.c
+@@ -1579,5 +1579,8 @@
+ 
+ MODULE_AUTHOR("Olaf Kirch <okir@monad.swb.de>");
+ MODULE_LICENSE("GPL");
++#ifdef CONFIG_NFSD_V4
++MODULE_SOFTDEP("pre: crypto-md5");
++#endif
+ module_init(init_nfsd)
+ module_exit(exit_nfsd)
diff --git a/debian/patches/bugfix/all/kbuild-fix-recordmcount-dependency.patch b/debian/patches/bugfix/all/kbuild-fix-recordmcount-dependency.patch
new file mode 100644
index 000000000000..1a65b3869225
--- /dev/null
+++ b/debian/patches/bugfix/all/kbuild-fix-recordmcount-dependency.patch
@@ -0,0 +1,23 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: kbuild: Fix recordmcount dependency for OOT modules
+Date: Mon, 08 Sep 2014 18:31:24 +0100
+Forwarded: no
+
+We never rebuild anything in-tree when building an out-of-tree
+modules, so external modules should not depend on the recordmcount
+sources.
+
+--- a/scripts/Makefile.build
++++ b/scripts/Makefile.build
+@@ -223,6 +223,11 @@ cmd_record_mcount = $(if $(findstring $(
+ 	$(sub_cmd_record_mcount))
+ endif # CONFIG_FTRACE_MCOUNT_USE_RECORDMCOUNT
+ 
++# Don't require recordmcount source for an OOT build.
++ifdef KBUILD_EXTMOD
++recordmcount_source :=
++endif
++
+ ifdef CONFIG_STACK_VALIDATION
+ 
+ objtool := $(objtree)/tools/objtool/objtool
diff --git a/debian/patches/bugfix/all/module-disable-matching-missing-version-crc.patch b/debian/patches/bugfix/all/module-disable-matching-missing-version-crc.patch
new file mode 100644
index 000000000000..2ab62688a76f
--- /dev/null
+++ b/debian/patches/bugfix/all/module-disable-matching-missing-version-crc.patch
@@ -0,0 +1,23 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Fri, 02 Dec 2016 23:06:18 +0000
+Subject: module: Disable matching missing version CRC
+Forwarded: not-needed
+
+This partly reverts commit cd3caefb4663e3811d37cc2afad3cce642d60061.
+We want to fail closed if a symbol version CRC is missing, as the
+alternative may allow subverting module signing.
+---
+--- a/kernel/module.c
++++ b/kernel/module.c
+@@ -1313,9 +1313,8 @@ static int check_version(const struct lo
+ 		goto bad_version;
+ 	}
+ 
+-	/* Broken toolchain. Warn once, then let it go.. */
+-	pr_warn_once("%s: no symbol version for %s\n", info->name, symname);
+-	return 1;
++	pr_warn("%s: no symbol version for %s\n", info->name, symname);
++	return 0;
+ 
+ bad_version:
+ 	pr_warn("%s: disagrees about version of symbol %s\n",
diff --git a/debian/patches/bugfix/all/radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch b/debian/patches/bugfix/all/radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
new file mode 100644
index 000000000000..19d007002af0
--- /dev/null
+++ b/debian/patches/bugfix/all/radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
@@ -0,0 +1,135 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: radeon, amdgpu: Firmware is required for DRM and KMS on R600 onward
+Date: Tue, 08 Jan 2013 03:25:52 +0000
+Bug-Debian: https://bugs.debian.org/607194
+Bug-Debian: https://bugs.debian.org/607471
+Bug-Debian: https://bugs.debian.org/610851
+Bug-Debian: https://bugs.debian.org/627497
+Bug-Debian: https://bugs.debian.org/632212
+Bug-Debian: https://bugs.debian.org/637943
+Bug-Debian: https://bugs.debian.org/649448
+Bug-Debian: https://bugs.debian.org/697229
+Forwarded: no
+
+radeon requires firmware/microcode for the GPU in all chips, but for
+newer chips (apparently R600 'Evergreen' onward) it also expects
+firmware for the memory controller and other sub-blocks.
+
+radeon attempts to gracefully fall back and disable some features if
+the firmware is not available, but becomes unstable - the framebuffer
+and/or system memory may be corrupted, or the display may stay black.
+
+Therefore, perform a basic check for the existence of
+/lib/firmware/{radeon,amdgpu} when a device is probed, and abort if it
+is missing, except for the pre-R600 case.
+
+---
+ drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 29 ++++++++++++++++++++++++
+ drivers/gpu/drm/radeon/radeon_drv.c     | 30 +++++++++++++++++++++++++
+ 2 files changed, 59 insertions(+)
+
+--- a/drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c
++++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c
+@@ -39,6 +39,8 @@
+ #include <linux/mmu_notifier.h>
+ #include <linux/suspend.h>
+ #include <linux/cc_platform.h>
++#include <linux/namei.h>
++#include <linux/path.h>
+ 
+ #include "amdgpu.h"
+ #include "amdgpu_irq.h"
+@@ -1889,6 +1891,28 @@ MODULE_DEVICE_TABLE(pci, pciidlist);
+ 
+ static const struct drm_driver amdgpu_kms_driver;
+ 
++/* Test that /lib/firmware/amdgpu is a directory (or symlink to a
++ * directory).  We could try to match the udev search path, but let's
++ * keep it simple.
++ */
++static bool amdgpu_firmware_installed(void)
++{
++#if IS_BUILTIN(CONFIG_DRM_AMDGPU)
++	/* It may be too early to tell.  Assume it's there. */
++	return true;
++#else
++	struct path path;
++
++	if (kern_path("/lib/firmware/amdgpu", LOOKUP_DIRECTORY | LOOKUP_FOLLOW,
++		      &path) == 0) {
++		path_put(&path);
++		return true;
++	}
++
++	return false;
++#endif
++}
++
+ static int amdgpu_pci_probe(struct pci_dev *pdev,
+ 			    const struct pci_device_id *ent)
+ {
+@@ -1965,6 +1989,11 @@ static int amdgpu_pci_probe(struct pci_d
+ 	}
+ #endif
+ 
++	if (!amdgpu_firmware_installed()) {
++		DRM_ERROR("amdgpu requires firmware installed\n");
++		return -ENODEV;
++	}
++
+ 	/* Get rid of things like offb */
+ 	ret = drm_aperture_remove_conflicting_pci_framebuffers(pdev, &amdgpu_kms_driver);
+ 	if (ret)
+--- a/drivers/gpu/drm/radeon/radeon_drv.c
++++ b/drivers/gpu/drm/radeon/radeon_drv.c
+@@ -49,6 +49,8 @@
+ #include <drm/drm_probe_helper.h>
+ #include <drm/drm_vblank.h>
+ #include <drm/radeon_drm.h>
++#include <linux/namei.h>
++#include <linux/path.h>
+ 
+ #include "radeon_drv.h"
+ #include "radeon.h"
+@@ -289,6 +291,28 @@ MODULE_DEVICE_TABLE(pci, pciidlist);
+ 
+ static const struct drm_driver kms_driver;
+ 
++/* Test that /lib/firmware/radeon is a directory (or symlink to a
++ * directory).  We could try to match the udev search path, but let's
++ * keep it simple.
++ */
++static bool radeon_firmware_installed(void)
++{
++#if IS_BUILTIN(CONFIG_DRM_RADEON)
++	/* It may be too early to tell.  Assume it's there. */
++	return true;
++#else
++	struct path path;
++
++	if (kern_path("/lib/firmware/radeon", LOOKUP_DIRECTORY | LOOKUP_FOLLOW,
++		      &path) == 0) {
++		path_put(&path);
++		return true;
++	}
++
++	return false;
++#endif
++}
++
+ static int radeon_pci_probe(struct pci_dev *pdev,
+ 			    const struct pci_device_id *ent)
+ {
+@@ -329,6 +353,12 @@ static int radeon_pci_probe(struct pci_d
+ 	if (vga_switcheroo_client_probe_defer(pdev))
+ 		return -EPROBE_DEFER;
+ 
++	if ((ent->driver_data & RADEON_FAMILY_MASK) >= CHIP_R600 &&
++	    !radeon_firmware_installed()) {
++		DRM_ERROR("radeon kernel modesetting for R600 or later requires firmware installed\n");
++		return -ENODEV;
++	}
++
+ 	/* Get rid of things like offb */
+ 	ret = drm_aperture_remove_conflicting_pci_framebuffers(pdev, &kms_driver);
+ 	if (ret)
diff --git a/debian/patches/bugfix/all/tools-build-remove-bpf-run-time-check-at-build-time.patch b/debian/patches/bugfix/all/tools-build-remove-bpf-run-time-check-at-build-time.patch
new file mode 100644
index 000000000000..3818dbb1720d
--- /dev/null
+++ b/debian/patches/bugfix/all/tools-build-remove-bpf-run-time-check-at-build-time.patch
@@ -0,0 +1,27 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sun, 21 Feb 2016 15:33:15 +0000
+Subject: tools/build: Remove bpf() run-time check at build time
+Forwarded: no
+
+It is not correct to test that a syscall works on the build system's
+kernel.  We might be building on an earlier kernel version or with
+security restrictions that block bpf().
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+--- a/tools/build/feature/test-bpf.c
++++ b/tools/build/feature/test-bpf.c
+@@ -35,8 +35,10 @@ int main(void)
+ 	attr.prog_flags = 0;
+ 
+ 	/*
+-	 * Test existence of __NR_bpf and BPF_PROG_LOAD.
+-	 * This call should fail if we run the testcase.
++	 * bwh: Don't use the bpf() syscall as we might be building on a
++	 * much older kernel.  Do "use" the attr structure here to avoid
++	 * a "set but not used" warning.
+ 	 */
+-	return syscall(__NR_bpf, BPF_PROG_LOAD, &attr, sizeof(attr));
++	(void)&attr;
++	return 0;
+ }
diff --git a/debian/patches/bugfix/all/tools-include-uapi-fix-errno.h.patch b/debian/patches/bugfix/all/tools-include-uapi-fix-errno.h.patch
new file mode 100644
index 000000000000..1877178dcf67
--- /dev/null
+++ b/debian/patches/bugfix/all/tools-include-uapi-fix-errno.h.patch
@@ -0,0 +1,30 @@
+From: Ben Hutchings <benh@debian.org>
+Date: Tue, 25 Aug 2020 23:27:40 +0100
+Subject: tools/include/uapi: Fix <asm/errno.h>
+
+tools/include/uapi/asm/errno.h currently attempts to include
+non-existent arch-specific headers for ia64 and xtensa.  Remove
+these cases so that <asm-generic/errno.h> is used instead.
+
+It does not use the arch-specific header for parisc, so add a
+case for that.
+
+References: https://buildd.debian.org/status/fetch.php?pkg=linux&arch=ia64&ver=5.8.3-1%7Eexp1&stamp=1598340829&raw=1
+Signed-off-by: Ben Hutchings <benh@debian.org>
+[Salvatore Bonaccorso: Inclusion for ia64 was dropped in upstream 5.10.32,
+refresh patch for context changes]
+Signed-off-by: Salvatore Bonaccorso <carnil@debian.org>
+---
+--- a/tools/include/uapi/asm/errno.h
++++ b/tools/include/uapi/asm/errno.h
+@@ -9,8 +9,8 @@
+ #include "../../../arch/alpha/include/uapi/asm/errno.h"
+ #elif defined(__mips__)
+ #include "../../../arch/mips/include/uapi/asm/errno.h"
+-#elif defined(__xtensa__)
+-#include "../../../arch/xtensa/include/uapi/asm/errno.h"
++#elif defined(__hppa__)
++#include "../../../arch/parisc/include/uapi/asm/errno.h"
+ #else
+ #include <asm-generic/errno.h>
+ #endif
diff --git a/debian/patches/bugfix/all/tools-perf-man-date.patch b/debian/patches/bugfix/all/tools-perf-man-date.patch
new file mode 100644
index 000000000000..80a19b55405a
--- /dev/null
+++ b/debian/patches/bugfix/all/tools-perf-man-date.patch
@@ -0,0 +1,44 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 13 Jul 2015 20:29:20 +0100
+Subject: perf tools: Use $KBUILD_BUILD_TIMESTAMP as man page date
+Forwarded: http://mid.gmane.org/20160517132809.GE7555@decadent.org.uk
+
+This allows man pages to be built reproducibly.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ tools/perf/Documentation/Makefile      | 3 +++
+ tools/perf/Documentation/asciidoc.conf | 3 +++
+ 2 files changed, 6 insertions(+)
+
+diff --git a/tools/perf/Documentation/Makefile b/tools/perf/Documentation/Makefile
+index adc5a7e44b98..2161b2e838b7 100644
+--- a/tools/perf/Documentation/Makefile
++++ b/tools/perf/Documentation/Makefile
+@@ -132,6 +132,9 @@ endif
+ ifdef DOCBOOK_SUPPRESS_SP
+ XMLTO_EXTRA += -m manpage-suppress-sp.xsl
+ endif
++ifdef KBUILD_BUILD_TIMESTAMP
++ASCIIDOC_EXTRA += -a revdate=$(shell date -u -d '$(KBUILD_BUILD_TIMESTAMP)' +%Y-%m-%d)
++endif
+ 
+ SHELL_PATH ?= $(SHELL)
+ # Shell quote;
+diff --git a/tools/perf/Documentation/asciidoc.conf b/tools/perf/Documentation/asciidoc.conf
+index 2b62ba1e72b7..82d3060177ba 100644
+--- a/tools/perf/Documentation/asciidoc.conf
++++ b/tools/perf/Documentation/asciidoc.conf
+@@ -71,6 +71,9 @@ ifdef::backend-docbook[]
+ [header]
+ template::[header-declarations]
+ <refentry>
++<refentryinfo>
++template::[docinfo]
++</refentryinfo>
+ ifdef::perf_date[]
+ <refentryinfo><date>{perf_date}</date></refentryinfo>
+ endif::perf_date[]
+-- 
+2.23.0
+
diff --git a/debian/patches/bugfix/all/tools-perf-pmu-events-fix-reproducibility.patch b/debian/patches/bugfix/all/tools-perf-pmu-events-fix-reproducibility.patch
new file mode 100644
index 000000000000..f6deb46bf67c
--- /dev/null
+++ b/debian/patches/bugfix/all/tools-perf-pmu-events-fix-reproducibility.patch
@@ -0,0 +1,180 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sun, 25 Aug 2019 13:49:41 +0100
+Subject: tools/perf: pmu-events: Fix reproducibility
+Forwarded: https://lore.kernel.org/lkml/20190825131329.naqzd5kwg7mw5d3f@decadent.org.uk/T/#u
+
+jevents.c uses nftw() to enumerate files and outputs the corresponding
+C structs in the order they are found.  This makes it sensitive to
+directory ordering, so that the perf executable is not reproducible.
+
+To avoid this, store all the files and directories found and then sort
+them by their (relative) path.  (This maintains the parent-first
+ordering that nftw() promises.)  Then apply the existing callbacks to
+them in the sorted order.
+
+Don't both storing the stat buffers as we don't need them.
+
+References: https://tests.reproducible-builds.org/debian/dbdtxt/bullseye/i386/linux_4.19.37-6.diffoscope.txt.gz
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+--- a/tools/perf/pmu-events/jevents.c
++++ b/tools/perf/pmu-events/jevents.c
+@@ -50,6 +50,18 @@
+ #include "json.h"
+ #include "pmu-events.h"
+ 
++struct ordered_ftw_entry {
++	const char	*fpath;
++	int		typeflag;
++	struct FTW	ftwbuf;
++};
++
++struct ordered_ftw_state {
++	struct ordered_ftw_entry *entries;
++	size_t		n;
++	size_t		max;
++};
++
+ int verbose;
+ char *prog;
+ 
+@@ -971,6 +983,78 @@ static int get_maxfds(void)
+  */
+ static FILE *eventsfp;
+ static char *mapfile;
++static struct ordered_ftw_state *ordered_ftw_state;
++
++static int ordered_ftw_add(const char *fpath, const struct stat *sb,
++			   int typeflag, struct FTW *ftwbuf)
++{
++	struct ordered_ftw_state *state = ordered_ftw_state;
++	struct ordered_ftw_entry *entry;
++
++	if (ftwbuf->level == 0 || ftwbuf->level > 3)
++		return 0;
++
++	/* Grow array if necessary */
++	if (state->n >= state->max) {
++		if (state->max == 0)
++			state->max = 16;
++		else
++			state->max *= 2;
++		state->entries = realloc(state->entries,
++					 state->max * sizeof(*state->entries));
++	}
++
++	entry = &state->entries[state->n++];
++	entry->fpath = strdup(fpath);
++	entry->typeflag = typeflag;
++	entry->ftwbuf = *ftwbuf;
++
++	return 0;
++}
++
++static int ordered_ftw_compare(const void *left, const void *right)
++{
++	const struct ordered_ftw_entry *left_entry = left;
++	const struct ordered_ftw_entry *right_entry = right;
++
++	return strcmp(left_entry->fpath, right_entry->fpath);
++}
++
++/*
++ * Wrapper for nftw() that iterates files in ASCII-order to ensure
++ * reproducible output
++ */
++static int ordered_ftw(const char *dirpath,
++		       int (*fn)(const char *, int, struct FTW *),
++		       int nopenfd, int flags)
++{
++	struct ordered_ftw_state state = { NULL, 0, 0 };
++	size_t i;
++	int rc;
++
++	ordered_ftw_state = &state;
++	rc = nftw(dirpath, ordered_ftw_add, nopenfd, flags);
++	if (rc)
++		goto out;
++
++	qsort(state.entries, state.n, sizeof(*state.entries),
++	      ordered_ftw_compare);
++
++	for (i = 0; i < state.n; i++) {
++		rc = fn(state.entries[i].fpath,
++			state.entries[i].typeflag,
++			&state.entries[i].ftwbuf);
++		if (rc)
++			goto out;
++	}
++
++out:
++	for (i = 0; i < state.n; i++)
++		free((char *)state.entries[i].fpath);
++	free(state.entries);;
++
++	return rc;
++}
+ 
+ static int is_leaf_dir(const char *fpath)
+ {
+@@ -1023,19 +1107,19 @@ static int is_json_file(const char *name
+ 	return 0;
+ }
+ 
+-static int preprocess_arch_std_files(const char *fpath, const struct stat *sb,
++static int preprocess_arch_std_files(const char *fpath,
+ 				int typeflag, struct FTW *ftwbuf)
+ {
+ 	int level = ftwbuf->level;
+ 	int is_file = typeflag == FTW_F;
+ 
+ 	if (level == 1 && is_file && is_json_file(fpath))
+-		return json_events(fpath, save_arch_std_events, (void *)sb);
++		return json_events(fpath, save_arch_std_events, NULL);
+ 
+ 	return 0;
+ }
+ 
+-static int process_one_file(const char *fpath, const struct stat *sb,
++static int process_one_file(const char *fpath,
+ 			    int typeflag, struct FTW *ftwbuf)
+ {
+ 	char *tblname, *bname;
+@@ -1065,9 +1149,9 @@ static int process_one_file(const char *
+ 	} else
+ 		bname = (char *) fpath + ftwbuf->base;
+ 
+-	pr_debug("%s %d %7jd %-20s %s\n",
++	pr_debug("%s %d %-20s %s\n",
+ 		 is_file ? "f" : is_dir ? "d" : "x",
+-		 level, sb->st_size, bname, fpath);
++		 level, bname, fpath);
+ 
+ 	/* base dir or too deep */
+ 	if (level == 0 || level > 4)
+@@ -1241,21 +1325,21 @@ int main(int argc, char *argv[])
+ 	 */
+ 
+ 	maxfds = get_maxfds();
+-	rc = nftw(ldirname, preprocess_arch_std_files, maxfds, 0);
++	rc = ordered_ftw(ldirname, preprocess_arch_std_files, maxfds, 0);
+ 	if (rc)
+ 		goto err_processing_std_arch_event_dir;
+ 
+-	rc = nftw(ldirname, process_one_file, maxfds, 0);
++	rc = ordered_ftw(ldirname, process_one_file, maxfds, 0);
+ 	if (rc)
+ 		goto err_processing_dir;
+ 
+ 	sprintf(ldirname, "%s/test", start_dirname);
+ 
+-	rc = nftw(ldirname, preprocess_arch_std_files, maxfds, 0);
++	rc = ordered_ftw(ldirname, preprocess_arch_std_files, maxfds, 0);
+ 	if (rc)
+ 		goto err_processing_std_arch_event_dir;
+ 
+-	rc = nftw(ldirname, process_one_file, maxfds, 0);
++	rc = ordered_ftw(ldirname, process_one_file, maxfds, 0);
+ 	if (rc)
+ 		goto err_processing_dir;
+ 
diff --git a/debian/patches/bugfix/all/tools-perf-remove-shebangs.patch b/debian/patches/bugfix/all/tools-perf-remove-shebangs.patch
new file mode 100644
index 000000000000..9766e0e4a51a
--- /dev/null
+++ b/debian/patches/bugfix/all/tools-perf-remove-shebangs.patch
@@ -0,0 +1,39 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Fri, 25 Sep 2015 20:09:23 +0100
+Subject: tools/perf: Remove shebang lines from perf scripts
+Forwarded: no
+
+perf scripts need to be invoked through perf, not directly through
+perl (or other language interpreter).  So including shebang lines in
+them is useless and possibly misleading.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+--- a/tools/perf/scripts/perl/rw-by-file.pl
++++ b/tools/perf/scripts/perl/rw-by-file.pl
+@@ -1,4 +1,3 @@
+-#!/usr/bin/perl -w
+ # SPDX-License-Identifier: GPL-2.0-only
+ # (c) 2009, Tom Zanussi <tzanussi@gmail.com>
+ 
+--- a/tools/perf/scripts/perl/rw-by-pid.pl
++++ b/tools/perf/scripts/perl/rw-by-pid.pl
+@@ -1,4 +1,3 @@
+-#!/usr/bin/perl -w
+ # SPDX-License-Identifier: GPL-2.0-only
+ # (c) 2009, Tom Zanussi <tzanussi@gmail.com>
+ 
+--- a/tools/perf/scripts/perl/rwtop.pl
++++ b/tools/perf/scripts/perl/rwtop.pl
+@@ -1,4 +1,3 @@
+-#!/usr/bin/perl -w
+ # SPDX-License-Identifier: GPL-2.0-only
+ # (c) 2010, Tom Zanussi <tzanussi@gmail.com>
+ 
+--- a/tools/perf/scripts/perl/wakeup-latency.pl
++++ b/tools/perf/scripts/perl/wakeup-latency.pl
+@@ -1,4 +1,3 @@
+-#!/usr/bin/perl -w
+ # SPDX-License-Identifier: GPL-2.0-only
+ # (c) 2009, Tom Zanussi <tzanussi@gmail.com>
+ 
diff --git a/debian/patches/bugfix/all/usbip-document-tcp-wrappers.patch b/debian/patches/bugfix/all/usbip-document-tcp-wrappers.patch
new file mode 100644
index 000000000000..d9d7b301dd39
--- /dev/null
+++ b/debian/patches/bugfix/all/usbip-document-tcp-wrappers.patch
@@ -0,0 +1,29 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sun, 24 Jun 2012 02:51:39 +0100
+Subject: usbip: Document TCP wrappers
+Forwarded: no
+
+Add references to TCP wrappers configuration in the manual page.
+
+--- a/tools/usb/usbip/doc/usbipd.8
++++ b/tools/usb/usbip/doc/usbipd.8
+@@ -14,7 +14,8 @@ Devices have to explicitly be exported u
+ before usbipd makes them available to other hosts.
+ 
+ The daemon accepts connections from USB/IP clients
+-on TCP port 3240 by default.
++on TCP port 3240 by default.  The clients authorised to connect may be
++configured as documented in hosts_access(5).
+ 
+ .SH OPTIONS
+ .HP
+@@ -69,7 +70,8 @@ Show version.
+ 
+ .B usbipd
+ offers no authentication or authorization for USB/IP. Any
+-USB/IP client can connect and use exported devices.
++USB/IP client running on an authorised host can connect and
++use exported devices.
+ 
+ .SH EXAMPLES
+ 
diff --git a/debian/patches/bugfix/arm/arm-dts-kirkwood-fix-sata-pinmux-ing-for-ts419.patch b/debian/patches/bugfix/arm/arm-dts-kirkwood-fix-sata-pinmux-ing-for-ts419.patch
new file mode 100644
index 000000000000..9e6622fb039e
--- /dev/null
+++ b/debian/patches/bugfix/arm/arm-dts-kirkwood-fix-sata-pinmux-ing-for-ts419.patch
@@ -0,0 +1,37 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Fri, 17 Feb 2017 01:30:30 +0000
+Subject: ARM: dts: kirkwood: Fix SATA pinmux-ing for TS419
+Forwarded: https://www.spinics.net/lists/arm-kernel/msg563610.html
+Bug-Debian: https://bugs.debian.org/855017
+
+The old board code for the TS419 assigns MPP pins 15 and 16 as SATA
+activity signals (and none as SATA presence signals).  Currently the
+device tree assigns the SoC's default pinmux groups for SATA, which
+conflict with the second Ethernet port.
+
+Reported-by: gmbh@gazeta.pl
+Tested-by: gmbh@gazeta.pl
+References: https://bugs.debian.org/855017
+Cc: stable@vger.kernel.org # 3.15+
+Fixes: 934b524b3f49 ("ARM: Kirkwood: Add DT description of QNAP 419")
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ arch/arm/boot/dts/kirkwood-ts419.dtsi | 8 ++++++++
+ 1 file changed, 8 insertions(+)
+
+diff --git a/arch/arm/boot/dts/kirkwood-ts419.dtsi b/arch/arm/boot/dts/kirkwood-ts419.dtsi
+index 02bd53762705..532506cb0f4a 100644
+--- a/arch/arm/boot/dts/kirkwood-ts419.dtsi
++++ b/arch/arm/boot/dts/kirkwood-ts419.dtsi
+@@ -73,3 +73,11 @@
+ 		phy-handle = <&ethphy1>;
+ 	};
+ };
++
++&pmx_sata0 {
++	marvell,pins = "mpp15";
++};
++
++&pmx_sata1 {
++	marvell,pins = "mpp16";
++};
diff --git a/debian/patches/bugfix/arm/arm-mm-export-__sync_icache_dcache-for-xen-privcmd.patch b/debian/patches/bugfix/arm/arm-mm-export-__sync_icache_dcache-for-xen-privcmd.patch
new file mode 100644
index 000000000000..1bdd37fbe466
--- /dev/null
+++ b/debian/patches/bugfix/arm/arm-mm-export-__sync_icache_dcache-for-xen-privcmd.patch
@@ -0,0 +1,31 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Wed, 11 Jul 2018 23:40:55 +0100
+Subject: ARM: mm: Export __sync_icache_dcache() for xen-privcmd
+Forwarded: https://marc.info/?l=linux-arm-kernel&m=153134944429241
+
+The xen-privcmd driver, which can be modular, calls set_pte_at()
+which in turn may call __sync_icache_dcache().
+
+The call to __sync_icache_dcache() may be optimised out because it is
+conditional on !pte_special(), and xen-privcmd calls pte_mkspecial().
+However, in a non-LPAE configuration there is no "special" bit and the
+call is really unconditional.
+
+Fixes: 3ad0876554ca ("xen/privcmd: add IOCTL_PRIVCMD_MMAP_RESOURCE")
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ arch/arm/mm/flush.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+Index: debian-kernel/arch/arm/mm/flush.c
+===================================================================
+--- debian-kernel.orig/arch/arm/mm/flush.c
++++ debian-kernel/arch/arm/mm/flush.c
+@@ -292,6 +292,7 @@ void __sync_icache_dcache(pte_t pteval)
+ 	if (pte_exec(pteval))
+ 		__flush_icache_all();
+ }
++EXPORT_SYMBOL_GPL(__sync_icache_dcache);
+ #endif
+ 
+ /*
diff --git a/debian/patches/bugfix/arm64/arm64-acpi-Add-fixup-for-HPE-m400-quirks.patch b/debian/patches/bugfix/arm64/arm64-acpi-Add-fixup-for-HPE-m400-quirks.patch
new file mode 100644
index 000000000000..fc1e76a02bbc
--- /dev/null
+++ b/debian/patches/bugfix/arm64/arm64-acpi-Add-fixup-for-HPE-m400-quirks.patch
@@ -0,0 +1,92 @@
+From: Geoff Levand <geoff@infradead.org>
+Date: Wed, 13 Jun 2018 10:56:08 -0700
+Subject: arm64/acpi: Add fixup for HPE m400 quirks
+Forwarded: https://patchwork.codeaurora.org/patch/547277/
+
+Adds a new ACPI init routine acpi_fixup_m400_quirks that adds
+a work-around for HPE ProLiant m400 APEI firmware problems.
+
+The work-around disables APEI when CONFIG_ACPI_APEI is set and
+m400 firmware is detected.  Without this fixup m400 systems
+experience errors like these on startup:
+
+  [Hardware Error]: Hardware error from APEI Generic Hardware Error Source: 2
+  [Hardware Error]: event severity: fatal
+  [Hardware Error]:  Error 0, type: fatal
+  [Hardware Error]:   section_type: memory error
+  [Hardware Error]:   error_status: 0x0000000000001300
+  [Hardware Error]:   error_type: 10, invalid address
+  Kernel panic - not syncing: Fatal hardware error!
+
+Signed-off-by: Geoff Levand <geoff@infradead.org>
+[bwh: Adjust context to apply to Linux 4.19]
+---
+ arch/arm64/kernel/acpi.c | 40 ++++++++++++++++++++++++++++++++++++----
+ 1 file changed, 36 insertions(+), 4 deletions(-)
+
+Index: linux/arch/arm64/kernel/acpi.c
+===================================================================
+--- linux.orig/arch/arm64/kernel/acpi.c
++++ linux/arch/arm64/kernel/acpi.c
+@@ -32,6 +32,8 @@
+ #include <asm/daifflags.h>
+ #include <asm/smp_plat.h>
+ 
++#include <acpi/apei.h>
++
+ int acpi_noirq = 1;		/* skip ACPI IRQ initialization */
+ int acpi_disabled = 1;
+ EXPORT_SYMBOL(acpi_disabled);
+@@ -178,6 +180,33 @@ out:
+ }
+ 
+ /*
++ * acpi_fixup_m400_quirks - Work-around for HPE ProLiant m400 APEI firmware
++ * problems.
++ */
++static void __init acpi_fixup_m400_quirks(void)
++{
++	acpi_status status;
++	struct acpi_table_header *header;
++#if !defined(CONFIG_ACPI_APEI)
++	int hest_disable = HEST_DISABLED;
++#endif
++
++	if (!IS_ENABLED(CONFIG_ACPI_APEI) || hest_disable != HEST_ENABLED)
++		return;
++
++	status = acpi_get_table(ACPI_SIG_HEST, 0, &header);
++
++	if (ACPI_SUCCESS(status) && !strncmp(header->oem_id, "HPE   ", 6) &&
++		!strncmp(header->oem_table_id, "ProLiant", 8) &&
++		MIDR_IMPLEMENTOR(read_cpuid_id()) == ARM_CPU_IMP_APM) {
++		hest_disable = HEST_DISABLED;
++		pr_info("Disabled APEI for m400.\n");
++	}
++
++	acpi_put_table(header);
++}
++
++/*
+  * acpi_boot_table_init() called from setup_arch(), always.
+  *	1. find RSDP and get its address, and then find XSDT
+  *	2. extract all tables and checksums them all
+@@ -232,11 +261,14 @@ done:
+ 	if (acpi_disabled) {
+ 		if (earlycon_acpi_spcr_enable)
+ 			early_init_dt_scan_chosen_stdout();
+-	} else {
+-		acpi_parse_spcr(earlycon_acpi_spcr_enable, true);
+-		if (IS_ENABLED(CONFIG_ACPI_BGRT))
+-			acpi_table_parse(ACPI_SIG_BGRT, acpi_parse_bgrt);
++		return;
+ 	}
++
++	acpi_parse_spcr(earlycon_acpi_spcr_enable, true);
++	if (IS_ENABLED(CONFIG_ACPI_BGRT))
++		acpi_table_parse(ACPI_SIG_BGRT, acpi_parse_bgrt);
++
++	acpi_fixup_m400_quirks();
+ }
+ 
+ static pgprot_t __acpi_get_writethrough_mem_attribute(void)
diff --git a/debian/patches/bugfix/arm64/dts-rockchip-correct-voltage-selector-firefly-RK3399.patch b/debian/patches/bugfix/arm64/dts-rockchip-correct-voltage-selector-firefly-RK3399.patch
new file mode 100644
index 000000000000..2d568d35ef24
--- /dev/null
+++ b/debian/patches/bugfix/arm64/dts-rockchip-correct-voltage-selector-firefly-RK3399.patch
@@ -0,0 +1,45 @@
+From: Heinrich Schuchardt <xypron.glpk@gmx.de>
+Date: Mon, 4 Jun 2018 19:15:23 +0200
+Subject: arm64: dts: rockchip: correct voltage selector on Firefly-RK3399
+Bug-Debian: https://bugs.debian.org/900799
+Origin: https://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip.git/patch/?id=710e8c4a54be82ee8a97324e7b4330bf191e08bf
+
+Without this patch the Firefly-RK3399 board boot process hangs after these
+lines:
+
+   fan53555-regulator 0-0040: FAN53555 Option[8] Rev[1] Detected!
+   fan53555-reg: supplied by vcc_sys
+   vcc1v8_s3: supplied by vcc_1v8
+
+Blacklisting driver fan53555 allows booting.
+
+The device tree uses a value of fcs,suspend-voltage-selector different to
+any other board.
+
+Changing this setting to the usual value is sufficient to enable booting
+and also matches the value used in the vendor kernel.
+
+Fixes: 171582e00db1 ("arm64: dts: rockchip: add support for firefly-rk3399 board")
+Cc: stable@vger.kernel.org
+Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
+Signed-off-by: Heiko Stuebner <heiko@sntech.de>
+---
+ arch/arm64/boot/dts/rockchip/rk3399-firefly.dts | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/arch/arm64/boot/dts/rockchip/rk3399-firefly.dts b/arch/arm64/boot/dts/rockchip/rk3399-firefly.dts
+index 86ff1eb..d8a2f0b 100644
+--- a/arch/arm64/boot/dts/rockchip/rk3399-firefly.dts
++++ b/arch/arm64/boot/dts/rockchip/rk3399-firefly.dts
+@@ -421,7 +421,7 @@
+ 	vdd_cpu_b: regulator@40 {
+ 		compatible = "silergy,syr827";
+ 		reg = <0x40>;
+-		fcs,suspend-voltage-selector = <0>;
++		fcs,suspend-voltage-selector = <1>;
+ 		regulator-name = "vdd_cpu_b";
+ 		regulator-min-microvolt = <712500>;
+ 		regulator-max-microvolt = <1500000>;
+-- 
+cgit v1.1
+
diff --git a/debian/patches/bugfix/powerpc/powerpc-boot-fix-missing-crc32poly.h-when-building-with-kernel_xz.patch b/debian/patches/bugfix/powerpc/powerpc-boot-fix-missing-crc32poly.h-when-building-with-kernel_xz.patch
new file mode 100644
index 000000000000..a00a2a485cc7
--- /dev/null
+++ b/debian/patches/bugfix/powerpc/powerpc-boot-fix-missing-crc32poly.h-when-building-with-kernel_xz.patch
@@ -0,0 +1,39 @@
+From: Krzysztof Kozlowski <krzk@kernel.org>
+Date: Wed, 29 Aug 2018 09:32:23 +0200
+Subject: powerpc/boot: Fix missing crc32poly.h when building with KERNEL_XZ
+Origin: https://patchwork.ozlabs.org/patch/963258/
+
+After commit faa16bc404d7 ("lib: Use existing define with
+polynomial") the lib/xz/xz_crc32.c includes a header from include/linux
+directory thus any other user of this code should define proper include
+path.
+
+This fixes the build error on powerpc with CONFIG_KERNEL_XZ:
+
+    In file included from ../arch/powerpc/boot/../../../lib/decompress_unxz.c:233:0,
+                     from ../arch/powerpc/boot/decompress.c:42:
+    ../arch/powerpc/boot/../../../lib/xz/xz_crc32.c:18:29: fatal error: linux/crc32poly.h: No such file or directory
+
+Reported-by: Michal Kubecek <mkubecek@suse.cz>
+Fixes: faa16bc404d7 ("lib: Use existing define with polynomial")
+Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
+Reported-by: kbuild test robot <lkp@intel.com>
+Reported-by: Meelis Roos <mroos@linux.ee>
+Tested-by: Michal Kubecek <mkubecek@suse.cz>
+---
+ arch/powerpc/boot/Makefile | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+Index: linux/arch/powerpc/boot/Makefile
+===================================================================
+--- linux.orig/arch/powerpc/boot/Makefile
++++ linux/arch/powerpc/boot/Makefile
+@@ -70,7 +70,7 @@ BOOTCFLAGS	+= -fno-stack-protector
+ endif
+ 
+ BOOTCFLAGS	+= -include $(srctree)/include/linux/compiler_attributes.h
+-BOOTCFLAGS	+= -I$(objtree)/$(obj) -I$(srctree)/$(obj)
++BOOTCFLAGS	+= -I$(objtree)/$(obj) -I$(srctree)/$(obj) -I$(srctree)/include
+ 
+ DTC_FLAGS	?= -p 1024
+ 
diff --git a/debian/patches/bugfix/sh/sh-boot-do-not-use-hyphen-in-exported-variable-name.patch b/debian/patches/bugfix/sh/sh-boot-do-not-use-hyphen-in-exported-variable-name.patch
new file mode 100644
index 000000000000..1f478459718f
--- /dev/null
+++ b/debian/patches/bugfix/sh/sh-boot-do-not-use-hyphen-in-exported-variable-name.patch
@@ -0,0 +1,124 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sat, 19 Aug 2017 21:42:09 +0100
+Subject: sh: Do not use hyphen in exported variable names
+Forwarded: https://marc.info/?l=linux-sh&m=150317827322995&w=2
+
+arch/sh/Makefile defines and exports ld-bfd to be used by
+arch/sh/boot/Makefile and arch/sh/boot/compressed/Makefile.  Similarly
+arch/sh/boot/Makefile defines and exports suffix-y to be used by
+arch/sh/boot/compressed/Makefile.  However some shells, including
+dash, will not pass through environment variables whose name includes
+a hyphen.  Usually GNU make does not use a shell to recurse, but if
+e.g. $(srctree) contains '~' it will use a shell here.
+
+Rename these variables to ld_bfd and suffix_y.
+
+References: https://buildd.debian.org/status/fetch.php?pkg=linux&arch=sh4&ver=4.13%7Erc5-1%7Eexp1&stamp=1502943967&raw=0
+Fixes: ef9b542fce00 ("sh: bzip2/lzma uImage support.")
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ arch/sh/Makefile                 | 10 +++++-----
+ arch/sh/boot/Makefile            | 16 ++++++++--------
+ arch/sh/boot/compressed/Makefile |  6 +++---
+ arch/sh/boot/romimage/Makefile   |  4 ++--
+ 4 files changed, 18 insertions(+), 18 deletions(-)
+
+--- a/arch/sh/Makefile
++++ b/arch/sh/Makefile
+@@ -102,16 +102,16 @@ UTS_MACHINE		:= sh
+ LDFLAGS_vmlinux		+= -e _stext
+ 
+ ifdef CONFIG_CPU_LITTLE_ENDIAN
+-ld-bfd			:= elf32-sh-linux
+-LDFLAGS_vmlinux		+= --defsym jiffies=jiffies_64 --oformat $(ld-bfd)
++ld_bfd			:= elf32-sh-linux
++LDFLAGS_vmlinux		+= --defsym jiffies=jiffies_64 --oformat $(ld_bfd)
+ KBUILD_LDFLAGS		+= -EL
+ else
+-ld-bfd			:= elf32-shbig-linux
+-LDFLAGS_vmlinux		+= --defsym jiffies=jiffies_64+4 --oformat $(ld-bfd)
++ld_bfd			:= elf32-shbig-linux
++LDFLAGS_vmlinux		+= --defsym jiffies=jiffies_64+4 --oformat $(ld_bfd)
+ KBUILD_LDFLAGS		+= -EB
+ endif
+ 
+-export ld-bfd
++export ld_bfd
+ 
+ head-y	:= arch/sh/kernel/head_32.o
+ 
+--- a/arch/sh/boot/Makefile
++++ b/arch/sh/boot/Makefile
+@@ -19,12 +19,12 @@ CONFIG_ZERO_PAGE_OFFSET	?= 0x00001000
+ CONFIG_ENTRY_OFFSET	?= 0x00001000
+ CONFIG_PHYSICAL_START	?= $(CONFIG_MEMORY_START)
+ 
+-suffix-y := bin
+-suffix-$(CONFIG_KERNEL_GZIP)	:= gz
+-suffix-$(CONFIG_KERNEL_BZIP2)	:= bz2
+-suffix-$(CONFIG_KERNEL_LZMA)	:= lzma
+-suffix-$(CONFIG_KERNEL_XZ)	:= xz
+-suffix-$(CONFIG_KERNEL_LZO)	:= lzo
++suffix_y := bin
++suffix_$(CONFIG_KERNEL_GZIP)	:= gz
++suffix_$(CONFIG_KERNEL_BZIP2)	:= bz2
++suffix_$(CONFIG_KERNEL_LZMA)	:= lzma
++suffix_$(CONFIG_KERNEL_XZ)	:= xz
++suffix_$(CONFIG_KERNEL_LZO)	:= lzo
+ 
+ targets := zImage vmlinux.srec romImage uImage uImage.srec uImage.gz \
+ 	   uImage.bz2 uImage.lzma uImage.xz uImage.lzo uImage.bin \
+@@ -106,10 +106,10 @@ OBJCOPYFLAGS_uImage.srec := -I binary -O
+ $(obj)/uImage.srec: $(obj)/uImage FORCE
+ 	$(call if_changed,objcopy)
+ 
+-$(obj)/uImage: $(obj)/uImage.$(suffix-y)
++$(obj)/uImage: $(obj)/uImage.$(suffix_y)
+ 	@ln -sf $(notdir $<) $@
+ 	@echo '  Image $@ is ready'
+ 
+ export CONFIG_PAGE_OFFSET CONFIG_MEMORY_START CONFIG_BOOT_LINK_OFFSET \
+        CONFIG_PHYSICAL_START CONFIG_ZERO_PAGE_OFFSET CONFIG_ENTRY_OFFSET \
+-       KERNEL_MEMORY suffix-y
++       KERNEL_MEMORY suffix_y
+--- a/arch/sh/boot/compressed/Makefile
++++ b/arch/sh/boot/compressed/Makefile
+@@ -36,7 +36,7 @@ endif
+ 
+ ccflags-remove-$(CONFIG_MCOUNT) += -pg
+ 
+-LDFLAGS_vmlinux := --oformat $(ld-bfd) -Ttext $(IMAGE_OFFSET) -e startup \
++LDFLAGS_vmlinux := --oformat $(ld_bfd) -Ttext $(IMAGE_OFFSET) -e startup \
+ 		   -T $(obj)/../../kernel/vmlinux.lds
+ 
+ KBUILD_CFLAGS += -DDISABLE_BRANCH_PROFILING
+@@ -62,7 +62,7 @@ $(obj)/vmlinux.bin.lzo: $(vmlinux.bin.al
+ 
+ OBJCOPYFLAGS += -R .empty_zero_page
+ 
+-LDFLAGS_piggy.o := -r --format binary --oformat $(ld-bfd) -T
++LDFLAGS_piggy.o := -r --format binary --oformat $(ld_bfd) -T
+ 
+-$(obj)/piggy.o: $(obj)/vmlinux.scr $(obj)/vmlinux.bin.$(suffix-y) FORCE
++$(obj)/piggy.o: $(obj)/vmlinux.scr $(obj)/vmlinux.bin.$(suffix_y) FORCE
+ 	$(call if_changed,ld)
+--- a/arch/sh/boot/romimage/Makefile
++++ b/arch/sh/boot/romimage/Makefile
+@@ -13,7 +13,7 @@ mmcif-obj-$(CONFIG_CPU_SUBTYPE_SH7724)	:
+ load-$(CONFIG_ROMIMAGE_MMCIF)		:= $(mmcif-load-y)
+ obj-$(CONFIG_ROMIMAGE_MMCIF)		:= $(mmcif-obj-y)
+ 
+-LDFLAGS_vmlinux := --oformat $(ld-bfd) -Ttext $(load-y) -e romstart \
++LDFLAGS_vmlinux := --oformat $(ld_bfd) -Ttext $(load-y) -e romstart \
+ 		   -T $(obj)/../../kernel/vmlinux.lds
+ 
+ $(obj)/vmlinux: $(obj)/head.o $(obj-y) $(obj)/piggy.o FORCE
+@@ -24,7 +24,7 @@ OBJCOPYFLAGS += -j .empty_zero_page
+ $(obj)/zeropage.bin: vmlinux FORCE
+ 	$(call if_changed,objcopy)
+ 
+-LDFLAGS_piggy.o := -r --format binary --oformat $(ld-bfd) -T
++LDFLAGS_piggy.o := -r --format binary --oformat $(ld_bfd) -T
+ 
+ $(obj)/piggy.o: $(obj)/vmlinux.scr $(obj)/zeropage.bin arch/sh/boot/zImage FORCE
+ 	$(call if_changed,ld)
diff --git a/debian/patches/bugfix/x86/perf-tools-fix-unwind-build-on-i386.patch b/debian/patches/bugfix/x86/perf-tools-fix-unwind-build-on-i386.patch
new file mode 100644
index 000000000000..f9baa7bd3c19
--- /dev/null
+++ b/debian/patches/bugfix/x86/perf-tools-fix-unwind-build-on-i386.patch
@@ -0,0 +1,35 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sat, 22 Jul 2017 17:37:33 +0100
+Subject: perf tools: Fix unwind build on i386
+Forwarded: no
+
+EINVAL may not be defined when building unwind-libunwind.c with
+REMOTE_UNWIND_LIBUNWIND, resulting in a compiler error in
+LIBUNWIND__ARCH_REG_ID().  Its only caller, access_reg(), only checks
+for a negative return value and doesn't care what it is.  So change
+-EINVAL to -1.
+
+Fixes: 52ffe0ff02fc ("Support x86(32-bit) cross platform callchain unwind.")
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+
+--- a/tools/perf/arch/x86/util/unwind-libunwind.c
++++ b/tools/perf/arch/x86/util/unwind-libunwind.c
+@@ -66,7 +66,7 @@ int LIBUNWIND__ARCH_REG_ID(int regnum)
+ 		break;
+ 	default:
+ 		pr_err("unwind: invalid reg id %d\n", regnum);
+-		return -EINVAL;
++		return -1;
+ 	}
+ 
+ 	return id;
+@@ -106,7 +106,7 @@ int LIBUNWIND__ARCH_REG_ID(int regnum)
+ 		break;
+ 	default:
+ 		pr_err("unwind: invalid reg id %d\n", regnum);
+-		return -EINVAL;
++		return -1;
+ 	}
+ 
+ 	return id;
diff --git a/debian/patches/bugfix/x86/revert-perf-build-fix-libunwind-feature-detection-on.patch b/debian/patches/bugfix/x86/revert-perf-build-fix-libunwind-feature-detection-on.patch
new file mode 100644
index 000000000000..cfbf98e82453
--- /dev/null
+++ b/debian/patches/bugfix/x86/revert-perf-build-fix-libunwind-feature-detection-on.patch
@@ -0,0 +1,22 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Fri, 25 Sep 2015 22:50:50 +0100
+Subject: Revert "perf build: Fix libunwind feature detection on 32-bit x86"
+Forwarded: no
+
+This reverts commit 05b41775e2edd69a83f592e3534930c934d4038e.
+It broke feature detection that was working just fine for us.
+---
+ tools/perf/Makefile.config | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/tools/perf/Makefile.config
++++ b/tools/perf/Makefile.config
+@@ -38,7 +38,7 @@ ifeq ($(SRCARCH),x86)
+     LIBUNWIND_LIBS = -lunwind-x86_64 -lunwind -llzma
+     $(call detected,CONFIG_X86_64)
+   else
+-    LIBUNWIND_LIBS = -lunwind-x86 -llzma -lunwind
++    LIBUNWIND_LIBS = -lunwind -lunwind-x86
+   endif
+   NO_PERF_REGS := 0
+ endif
diff --git a/debian/patches/bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch b/debian/patches/bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch
new file mode 100644
index 000000000000..62b4eb7dec2a
--- /dev/null
+++ b/debian/patches/bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch
@@ -0,0 +1,34 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sat, 20 Apr 2013 15:52:02 +0100
+Subject: viafb: Autoload on OLPC XO 1.5 only
+Bug-Debian: https://bugs.debian.org/705788
+Forwarded: no
+
+It appears that viafb won't work automatically on all the boards for
+which it has a PCI device ID match.  Currently, it is blacklisted by
+udev along with most other framebuffer drivers, so this doesn't matter
+much.
+
+However, this driver is required for console support on the XO 1.5.
+We need to allow it to be autoloaded on this model only, and then
+un-blacklist it in udev.
+
+---
+--- a/drivers/video/fbdev/via/via-core.c
++++ b/drivers/video/fbdev/via/via-core.c
+@@ -695,7 +695,14 @@ static const struct pci_device_id via_pc
+ 	  .driver_data = UNICHROME_VX900 },
+ 	{ }
+ };
+-MODULE_DEVICE_TABLE(pci, via_pci_table);
++
++static const struct pci_device_id via_pci_autoload_table[] __initconst = {
++	/* OLPC XO 1.5 */
++	{ PCI_DEVICE(PCI_VENDOR_ID_VIA, UNICHROME_VX855_DID),
++	  .subvendor = 0x152d, .subdevice = 0x0833 },
++	{ }
++};
++MODULE_DEVICE_TABLE(pci, via_pci_autoload_table);
+ 
+ static const struct dev_pm_ops via_pm_ops = {
+ #ifdef CONFIG_PM_SLEEP
diff --git a/debian/patches/bugfix/x86/x86-32-disable-3dnow-in-generic-config.patch b/debian/patches/bugfix/x86/x86-32-disable-3dnow-in-generic-config.patch
new file mode 100644
index 000000000000..074c856bef4c
--- /dev/null
+++ b/debian/patches/bugfix/x86/x86-32-disable-3dnow-in-generic-config.patch
@@ -0,0 +1,29 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Tue, 25 Sep 2018 19:44:13 +0100
+Subject: x86-32: Disable 3D-Now in generic config
+
+We want the 686 flavour to run on Geode LX and similar AMD family 5
+CPUs as well as family 6 and higher CPUs.  This used to work with
+CONFIG_M686=y.  However commit 25d76ac88821 "x86/Kconfig: Explicitly
+enumerate i686-class CPUs in Kconfig" in Linux 4.16 has made the
+kernel require family 6 or higher.
+
+It looks like a sensible choice would be to enable CONFIG_MGEODE_LX
+and CONFIG_X86_GENERIC (for more generic optimisations), but this
+currently enables CONFIG_X86_USE_3D_NOW which will cause the kernel to
+crash on CPUs without the AMD-specific 3D-Now instructions.
+
+Make CONFIG_X86_USE_3DNOW depend on CONFIG_X86_GENERIC being disabled.
+
+---
+--- a/arch/x86/Kconfig.cpu
++++ b/arch/x86/Kconfig.cpu
+@@ -337,7 +337,7 @@ config X86_USE_PPRO_CHECKSUM
+ 
+ config X86_USE_3DNOW
+ 	def_bool y
+-	depends on (MCYRIXIII || MK7 || MGEODE_LX) && !UML
++	depends on (MCYRIXIII || MK7 || MGEODE_LX) && !X86_GENERIC && !UML
+ 
+ #
+ # P6_NOPs are a relatively minor optimization that require a family >=
diff --git a/debian/patches/debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch b/debian/patches/debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch
new file mode 100644
index 000000000000..801fd6a8deea
--- /dev/null
+++ b/debian/patches/debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch
@@ -0,0 +1,104 @@
+From: Serge Hallyn <serge.hallyn@canonical.com>
+Date: Fri, 31 May 2013 19:12:12 +0000 (+0100)
+Subject: add sysctl to disallow unprivileged CLONE_NEWUSER by default
+Origin: http://kernel.ubuntu.com/git?p=serge%2Fubuntu-saucy.git;a=commit;h=5c847404dcb2e3195ad0057877e1422ae90892b8
+
+add sysctl to disallow unprivileged CLONE_NEWUSER by default
+
+This is a short-term patch.  Unprivileged use of CLONE_NEWUSER
+is certainly an intended feature of user namespaces.  However
+for at least saucy we want to make sure that, if any security
+issues are found, we have a fail-safe.
+
+Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
+[bwh: Remove unneeded binary sysctl bits]
+[bwh: Keep this sysctl, but change the default to enabled]
+---
+diff --git a/kernel/fork.c b/kernel/fork.c
+index efc5493203ae..bc596683cc31 100644
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -106,6 +106,11 @@
+ 
+ #define CREATE_TRACE_POINTS
+ #include <trace/events/task.h>
++#ifdef CONFIG_USER_NS
++extern int unprivileged_userns_clone;
++#else
++#define unprivileged_userns_clone 0
++#endif
+ 
+ /*
+  * Minimum number of threads to boot the kernel
+@@ -1861,6 +1866,10 @@ static __latent_entropy struct task_struct *copy_process(
+ 	if ((clone_flags & (CLONE_NEWUSER|CLONE_FS)) == (CLONE_NEWUSER|CLONE_FS))
+ 		return ERR_PTR(-EINVAL);
+ 
++	if ((clone_flags & CLONE_NEWUSER) && !unprivileged_userns_clone)
++		if (!capable(CAP_SYS_ADMIN))
++			return ERR_PTR(-EPERM);
++
+ 	/*
+ 	 * Thread groups must share signals as well, and detached threads
+ 	 * can only be started up within the thread group.
+@@ -2961,6 +2970,12 @@ int ksys_unshare(unsigned long unshare_flags)
+ 	if (unshare_flags & CLONE_NEWNS)
+ 		unshare_flags |= CLONE_FS;
+ 
++	if ((unshare_flags & CLONE_NEWUSER) && !unprivileged_userns_clone) {
++		err = -EPERM;
++		if (!capable(CAP_SYS_ADMIN))
++			goto bad_unshare_out;
++	}
++
+ 	err = check_unshare_flags(unshare_flags);
+ 	if (err)
+ 		goto bad_unshare_out;
+diff --git a/kernel/sysctl.c b/kernel/sysctl.c
+index db1ce7af2563..2bb29f495b02 100644
+--- a/kernel/sysctl.c
++++ b/kernel/sysctl.c
+@@ -200,6 +200,10 @@ static int min_extfrag_threshold;
+ static int max_extfrag_threshold = 1000;
+ #endif
+ 
++#ifdef CONFIG_USER_NS
++extern int unprivileged_userns_clone;
++#endif
++
+ #endif /* CONFIG_SYSCTL */
+ 
+ #if defined(CONFIG_BPF_SYSCALL) && defined(CONFIG_SYSCTL)
+@@ -1882,6 +1886,15 @@ static struct ctl_table kern_table[] = {
+ 		.proc_handler	= proc_dointvec,
+ 	},
+ #endif
++#ifdef CONFIG_USER_NS
++	{
++		.procname	= "unprivileged_userns_clone",
++		.data		= &unprivileged_userns_clone,
++		.maxlen		= sizeof(int),
++		.mode		= 0644,
++		.proc_handler	= proc_dointvec,
++	},
++#endif
+ #ifdef CONFIG_PROC_SYSCTL
+ 	{
+ 		.procname	= "tainted",
+diff --git a/kernel/user_namespace.c b/kernel/user_namespace.c
+index 87804e0371fe..2fd16493231b 100644
+--- a/kernel/user_namespace.c
++++ b/kernel/user_namespace.c
+@@ -21,6 +21,9 @@
+ #include <linux/bsearch.h>
+ #include <linux/sort.h>
+ 
++/* sysctl */
++int unprivileged_userns_clone = 1;
++
+ static struct kmem_cache *user_ns_cachep __read_mostly;
+ static DEFINE_MUTEX(userns_state_mutex);
+ 
+-- 
+2.27.0
+
diff --git a/debian/patches/debian/af_802154-Disable-auto-loading-as-mitigation-against.patch b/debian/patches/debian/af_802154-Disable-auto-loading-as-mitigation-against.patch
new file mode 100644
index 000000000000..3b33f845ab4d
--- /dev/null
+++ b/debian/patches/debian/af_802154-Disable-auto-loading-as-mitigation-against.patch
@@ -0,0 +1,29 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Fri, 19 Nov 2010 02:12:48 +0000
+Subject: [PATCH 2/3] af_802154: Disable auto-loading as mitigation against local exploits
+Forwarded: not-needed
+
+Recent review has revealed several bugs in obscure protocol
+implementations that can be exploited by local users for denial of
+service or privilege escalation.  We can mitigate the effect of any
+remaining vulnerabilities in such protocols by preventing unprivileged
+users from loading the modules, so that they are only exploitable on
+systems where the administrator has chosen to load the protocol.
+
+The 'af_802154' (IEEE 802.15.4) protocol is not widely used, was
+not present in the 'lenny' kernel, and seems to receive only sporadic
+maintenance.  Therefore disable auto-loading.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ net/ieee802154/socket.c |    2 +-
+ 1 files changed, 1 insertions(+), 1 deletions(-)
+
+--- a/net/ieee802154/socket.c
++++ b/net/ieee802154/socket.c
+@@ -1122,4 +1122,4 @@ module_init(af_ieee802154_init);
+ module_exit(af_ieee802154_remove);
+ 
+ MODULE_LICENSE("GPL");
+-MODULE_ALIAS_NETPROTO(PF_IEEE802154);
++/* MODULE_ALIAS_NETPROTO(PF_IEEE802154); */
diff --git a/debian/patches/debian/android-enable-building-ashmem-and-binder-as-modules.patch b/debian/patches/debian/android-enable-building-ashmem-and-binder-as-modules.patch
new file mode 100644
index 000000000000..72c17c95fd9b
--- /dev/null
+++ b/debian/patches/debian/android-enable-building-ashmem-and-binder-as-modules.patch
@@ -0,0 +1,94 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Fri, 22 Jun 2018 17:27:00 +0100
+Subject: android: Enable building ashmem and binder as modules
+Bug-Debian: https://bugs.debian.org/901492
+
+We want to enable use of the Android ashmem and binder drivers to
+support Anbox, but they should not be built-in as that would waste
+resources and increase security attack surface on systems that don't
+need them.
+
+- Add a MODULE_LICENSE declaration to ashmem
+- Change the Makefiles to build each driver as an object with the
+  "_linux" suffix (which is what Anbox expects)
+- Change config symbol types to tristate
+---
+ drivers/android/Kconfig          | 2 +-
+ drivers/android/Makefile         | 7 ++++---
+ drivers/android/binder_alloc.c   | 2 +-
+ drivers/staging/android/Kconfig  | 2 +-
+ drivers/staging/android/Makefile | 3 ++-
+ drivers/staging/android/ashmem.c | 3 +++
+ 6 files changed, 12 insertions(+), 7 deletions(-)
+
+--- a/drivers/android/Kconfig
++++ b/drivers/android/Kconfig
+@@ -9,7 +9,7 @@
+ if ANDROID
+ 
+ config ANDROID_BINDER_IPC
+-	bool "Android Binder IPC Driver"
++	tristate "Android Binder IPC Driver"
+ 	depends on MMU
+ 	default n
+ 	help
+--- a/drivers/android/Makefile
++++ b/drivers/android/Makefile
+@@ -1,6 +1,7 @@
+ # SPDX-License-Identifier: GPL-2.0-only
+ ccflags-y += -I$(src)			# needed for trace events
+ 
+-obj-$(CONFIG_ANDROID_BINDERFS)		+= binderfs.o
+-obj-$(CONFIG_ANDROID_BINDER_IPC)	+= binder.o binder_alloc.o
+-obj-$(CONFIG_ANDROID_BINDER_IPC_SELFTEST) += binder_alloc_selftest.o
++obj-$(CONFIG_ANDROID_BINDER_IPC)	+= binder_linux.o
++binder_linux-y := binder.o binder_alloc.o
++binder_linux-$(CONFIG_ANDROID_BINDERFS)	+= binderfs.o
++binder_linux-$(CONFIG_ANDROID_BINDER_IPC_SELFTEST) += binder_alloc_selftest.o
+--- a/drivers/android/binder_alloc.c
++++ b/drivers/android/binder_alloc.c
+@@ -38,7 +38,7 @@
+ };
+ static uint32_t binder_alloc_debug_mask = BINDER_DEBUG_USER_ERROR;
+ 
+-module_param_named(debug_mask, binder_alloc_debug_mask,
++module_param_named(alloc_debug_mask, binder_alloc_debug_mask,
+ 		   uint, 0644);
+ 
+ #define binder_alloc_debug(mask, x...) \
+--- a/drivers/staging/android/Kconfig
++++ b/drivers/staging/android/Kconfig
+@@ -4,7 +4,7 @@
+ if ANDROID
+ 
+ config ASHMEM
+-	bool "Enable the Anonymous Shared Memory Subsystem"
++	tristate "Enable the Anonymous Shared Memory Subsystem"
+ 	depends on SHMEM
+ 	help
+ 	  The ashmem subsystem is a new shared memory allocator, similar to
+--- a/drivers/staging/android/Makefile
++++ b/drivers/staging/android/Makefile
+@@ -1,4 +1,5 @@
+ # SPDX-License-Identifier: GPL-2.0
+ ccflags-y += -I$(src)			# needed for trace events
+ 
+-obj-$(CONFIG_ASHMEM)			+= ashmem.o
++obj-$(CONFIG_ASHMEM)			+= ashmem_linux.o
++ashmem_linux-y				+= ashmem.o
+--- a/drivers/staging/android/ashmem.c
++++ b/drivers/staging/android/ashmem.c
+@@ -24,6 +24,7 @@
+ #include <linux/bitops.h>
+ #include <linux/mutex.h>
+ #include <linux/shmem_fs.h>
++#include <linux/module.h>
+ #include "ashmem.h"
+ 
+ #define ASHMEM_NAME_PREFIX "dev/ashmem/"
+@@ -965,3 +966,5 @@
+ 	return ret;
+ }
+ device_initcall(ashmem_init);
++
++MODULE_LICENSE("GPL v2");
diff --git a/debian/patches/debian/arch-sh4-fix-uimage-build.patch b/debian/patches/debian/arch-sh4-fix-uimage-build.patch
new file mode 100644
index 000000000000..89e626b6b8d0
--- /dev/null
+++ b/debian/patches/debian/arch-sh4-fix-uimage-build.patch
@@ -0,0 +1,26 @@
+From: Nobuhiro Iwamatsu <iwamatsu@nigauri.org>
+Subject: [sh4] Fix uImage build
+Bug-Debian: https://bugs.debian.org/569034
+Forwarded: not-needed
+
+[bwh: This was added without a description, but I think it is done
+ only to avoid a build-dependency on u-boot-tools.]
+---
+ arch/sh/Makefile | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/arch/sh/Makefile b/arch/sh/Makefile
+index da9cf952f33c..974bbd9dcfcf 100644
+--- a/arch/sh/Makefile
++++ b/arch/sh/Makefile
+@@ -85,7 +85,6 @@ OBJCOPYFLAGS	:= -O binary -R .note -R .note.gnu.build-id -R .comment \
+ 
+ # Give the various platforms the opportunity to set default image types
+ defaultimage-y					:= zImage
+-defaultimage-$(CONFIG_SH_SH7785LCR)		:= uImage
+ defaultimage-$(CONFIG_SH_RSK)			:= uImage
+ defaultimage-$(CONFIG_SH_URQUELL)		:= uImage
+ defaultimage-$(CONFIG_SH_MIGOR)			:= uImage
+-- 
+2.27.0
+
diff --git a/debian/patches/debian/btrfs-warn-about-raid5-6-being-experimental-at-mount.patch b/debian/patches/debian/btrfs-warn-about-raid5-6-being-experimental-at-mount.patch
new file mode 100644
index 000000000000..9f21e07056a7
--- /dev/null
+++ b/debian/patches/debian/btrfs-warn-about-raid5-6-being-experimental-at-mount.patch
@@ -0,0 +1,35 @@
+From: Adam Borowski <kilobyte@angband.pl>
+Date: Tue, 28 Mar 2017 16:55:05 +0200
+Subject: btrfs: warn about RAID5/6 being experimental at mount time
+Bug-Debian: https://bugs.debian.org/863290
+Origin: https://bugs.debian.org/863290#5
+
+Too many people come complaining about losing their data -- and indeed,
+there's no warning outside a wiki and the mailing list tribal knowledge.
+Message severity chosen for consistency with XFS -- "alert" makes dmesg
+produce nice red background which should get the point across.
+
+Signed-off-by: Adam Borowski <kilobyte@angband.pl>
+[bwh: Also add_taint() so this is flagged in bug reports]
+---
+ fs/btrfs/disk-io.c | 8 ++++++++
+ 1 file changed, 8 insertions(+)
+
+--- a/fs/btrfs/disk-io.c
++++ b/fs/btrfs/disk-io.c
+@@ -3060,6 +3060,15 @@ retry_root_backup:
+ 		btrfs_set_and_info(fs_info, SSD, "enabling ssd optimizations");
+ 	}
+ 
++	if ((fs_info->avail_data_alloc_bits |
++	     fs_info->avail_metadata_alloc_bits |
++	     fs_info->avail_system_alloc_bits) &
++	    BTRFS_BLOCK_GROUP_RAID56_MASK) {
++		btrfs_alert(fs_info,
++		"btrfs RAID5/6 is EXPERIMENTAL and has known data-loss bugs");
++		add_taint(TAINT_AUX, LOCKDEP_STILL_OK);
++	}
++
+ 	/*
+ 	 * Mount does not set all options immediately, we can do it now and do
+ 	 * not have to wait for transaction commit
diff --git a/debian/patches/debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch b/debian/patches/debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch
new file mode 100644
index 000000000000..70b4468601cb
--- /dev/null
+++ b/debian/patches/debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch
@@ -0,0 +1,27 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: cdc_ncm,cdc_mbim: Use NCM by default
+Date: Sun, 31 Mar 2013 03:58:04 +0100
+Forwarded: not-needed
+
+Devices that support both NCM and MBIM modes should be kept in NCM
+mode unless there is userland support for MBIM.
+
+Set the default value of cdc_ncm.prefer_mbim to false and leave it to
+userland (modem-manager) to override this with a modprobe.conf file
+once it's ready to speak MBIM.
+
+---
+--- a/drivers/net/usb/cdc_ncm.c
++++ b/drivers/net/usb/cdc_ncm.c
+@@ -53,11 +53,7 @@
+ #include <linux/usb/cdc.h>
+ #include <linux/usb/cdc_ncm.h>
+ 
+-#if IS_ENABLED(CONFIG_USB_NET_CDC_MBIM)
+-static bool prefer_mbim = true;
+-#else
+ static bool prefer_mbim;
+-#endif
+ module_param(prefer_mbim, bool, 0644);
+ MODULE_PARM_DESC(prefer_mbim, "Prefer MBIM setting on dual NCM/MBIM functions");
+ 
diff --git a/debian/patches/debian/dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch b/debian/patches/debian/dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
new file mode 100644
index 000000000000..83583184e48a
--- /dev/null
+++ b/debian/patches/debian/dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
@@ -0,0 +1,41 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Thu, 16 Feb 2017 19:09:17 +0000
+Subject: dccp: Disable auto-loading as mitigation against local exploits
+Forwarded: not-needed
+
+We can mitigate the effect of vulnerabilities in obscure protocols by
+preventing unprivileged users from loading the modules, so that they
+are only exploitable on systems where the administrator has chosen to
+load the protocol.
+
+The 'dccp' protocol is not actively maintained or widely used.
+Therefore disable auto-loading.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+--- a/net/dccp/ipv4.c
++++ b/net/dccp/ipv4.c
+@@ -1071,8 +1071,8 @@ module_exit(dccp_v4_exit);
+  * values directly, Also cover the case where the protocol is not specified,
+  * i.e. net-pf-PF_INET-proto-0-type-SOCK_DCCP
+  */
+-MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET, 33, 6);
+-MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET, 0, 6);
++/* MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET, 33, 6); */
++/* MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET, 0, 6); */
+ MODULE_LICENSE("GPL");
+ MODULE_AUTHOR("Arnaldo Carvalho de Melo <acme@mandriva.com>");
+ MODULE_DESCRIPTION("DCCP - Datagram Congestion Controlled Protocol");
+--- a/net/dccp/ipv6.c
++++ b/net/dccp/ipv6.c
+@@ -1125,8 +1125,8 @@ module_exit(dccp_v6_exit);
+  * values directly, Also cover the case where the protocol is not specified,
+  * i.e. net-pf-PF_INET6-proto-0-type-SOCK_DCCP
+  */
+-MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET6, 33, 6);
+-MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET6, 0, 6);
++/* MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET6, 33, 6); */
++/* MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_INET6, 0, 6); */
+ MODULE_LICENSE("GPL");
+ MODULE_AUTHOR("Arnaldo Carvalho de Melo <acme@mandriva.com>");
+ MODULE_DESCRIPTION("DCCPv6 - Datagram Congestion Controlled Protocol");
diff --git a/debian/patches/debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch b/debian/patches/debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch
new file mode 100644
index 000000000000..fc3de36fb814
--- /dev/null
+++ b/debian/patches/debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch
@@ -0,0 +1,32 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sat, 20 Nov 2010 02:24:55 +0000
+Subject: [PATCH] decnet: Disable auto-loading as mitigation against local exploits
+Forwarded: not-needed
+
+Recent review has revealed several bugs in obscure protocol
+implementations that can be exploited by local users for denial of
+service or privilege escalation.  We can mitigate the effect of any
+remaining vulnerabilities in such protocols by preventing unprivileged
+users from loading the modules, so that they are only exploitable on
+systems where the administrator has chosen to load the protocol.
+
+The 'decnet' protocol is unmaintained and of mostly historical
+interest, and the user-space support package 'dnet-common' loads the
+module explicitly.  Therefore disable auto-loading.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ net/decnet/af_decnet.c |    2 +-
+ 1 files changed, 1 insertions(+), 1 deletions(-)
+
+--- a/net/decnet/af_decnet.c
++++ b/net/decnet/af_decnet.c
+@@ -2359,7 +2359,7 @@ static const struct proto_ops dn_proto_o
+ MODULE_DESCRIPTION("The Linux DECnet Network Protocol");
+ MODULE_AUTHOR("Linux DECnet Project Team");
+ MODULE_LICENSE("GPL");
+-MODULE_ALIAS_NETPROTO(PF_DECnet);
++/* MODULE_ALIAS_NETPROTO(PF_DECnet); */
+ 
+ static const char banner[] __initconst = KERN_INFO
+ "NET4: DECnet for Linux: V.2.5.68s (C) 1995-2003 Linux DECnet Project Team\n";
diff --git a/debian/patches/debian/dfsg/arch-powerpc-platforms-8xx-ucode-disable.patch b/debian/patches/debian/dfsg/arch-powerpc-platforms-8xx-ucode-disable.patch
new file mode 100644
index 000000000000..0e5176908acc
--- /dev/null
+++ b/debian/patches/debian/dfsg/arch-powerpc-platforms-8xx-ucode-disable.patch
@@ -0,0 +1,29 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 13 Apr 2009 17:34:00 +0100
+Subject: Remove microcode patches for mgsuvd (not enabled in Debian configs)
+Forwarded: not-needed
+
+diff --git a/arch/powerpc/platforms/8xx/Kconfig b/arch/powerpc/platforms/8xx/Kconfig
+index 48a920a..81570b6 100644
+--- a/arch/powerpc/platforms/8xx/Kconfig
++++ b/arch/powerpc/platforms/8xx/Kconfig
+@@ -160,16 +160,19 @@ config NO_UCODE_PATCH
+ 
+ config USB_SOF_UCODE_PATCH
+ 	bool "USB SOF patch"
++	depends on BROKEN
+ 	help
+ 	  Help not implemented yet, coming soon.
+ 
+ config I2C_SPI_UCODE_PATCH
+ 	bool "I2C/SPI relocation patch"
++	depends on BROKEN
+ 	help
+ 	  Help not implemented yet, coming soon.
+ 
+ config I2C_SPI_SMC1_UCODE_PATCH
+ 	bool "I2C/SPI/SMC1 relocation patch"
++	depends on BROKEN
+ 	help
+ 	  Help not implemented yet, coming soon.
+ 
diff --git a/debian/patches/debian/dfsg/documentation-fix-broken-link-to-cipso-draft.patch b/debian/patches/debian/dfsg/documentation-fix-broken-link-to-cipso-draft.patch
new file mode 100644
index 000000000000..840cf24d7264
--- /dev/null
+++ b/debian/patches/debian/dfsg/documentation-fix-broken-link-to-cipso-draft.patch
@@ -0,0 +1,18 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sat, 24 Aug 2019 19:00:41 +0100
+Subject: Documentation: Fix broken link to CIPSO draft
+Forwarded: not-needed
+
+We exclude the CIPSO draft text as its licence is not DFSG compliant.
+Link to the IETF's online version instead.
+
+---
+--- a/Documentation/netlabel/draft_ietf.rst
++++ b/Documentation/netlabel/draft_ietf.rst
+@@ -1,5 +1,4 @@
+ Draft IETF CIPSO IP Security
+ ----------------------------
+ 
+- .. include:: draft-ietf-cipso-ipsecurity-01.txt
+-    :literal:
++https://tools.ietf.org/html/draft-ietf-cipso-ipsecurity-01
diff --git a/debian/patches/debian/dfsg/drivers-media-dvb-dvb-usb-af9005-disable.patch b/debian/patches/debian/dfsg/drivers-media-dvb-dvb-usb-af9005-disable.patch
new file mode 100644
index 000000000000..4e42da9a9bc6
--- /dev/null
+++ b/debian/patches/debian/dfsg/drivers-media-dvb-dvb-usb-af9005-disable.patch
@@ -0,0 +1,15 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 17 Aug 2009 02:45:41 +0100
+Subject: dvb-usb-af9005: mark as broken
+Forwarded: not-needed
+
+--- a/drivers/media/usb/dvb-usb/Kconfig
++++ b/drivers/media/usb/dvb-usb/Kconfig
+@@ -227,6 +227,7 @@ config DVB_USB_OPERA1
+ 
+ config DVB_USB_AF9005
+ 	tristate "Afatech AF9005 DVB-T USB1.1 support"
++	depends on BROKEN
+ 	depends on DVB_USB
+ 	select MEDIA_TUNER_MT2060 if MEDIA_SUBDRV_AUTOSELECT
+ 	select MEDIA_TUNER_QT1010 if MEDIA_SUBDRV_AUTOSELECT
diff --git a/debian/patches/debian/dfsg/drivers-net-appletalk-cops.patch b/debian/patches/debian/dfsg/drivers-net-appletalk-cops.patch
new file mode 100644
index 000000000000..9a7884605024
--- /dev/null
+++ b/debian/patches/debian/dfsg/drivers-net-appletalk-cops.patch
@@ -0,0 +1,60 @@
+From: Frederik Schüler <fs@debian.org>
+Date: Fri, 05 Jan 2007 15:55:24 +0000
+Subject: Add removal patches for: 3c359, smctr, keyspan, cops
+Forwarded: not-needed
+
+---
+ drivers/net/appletalk/Kconfig  | 26 --------------------------
+ drivers/net/appletalk/Makefile |  1 -
+ 2 files changed, 27 deletions(-)
+
+Index: linux/drivers/net/appletalk/Kconfig
+===================================================================
+--- linux.orig/drivers/net/appletalk/Kconfig
++++ linux/drivers/net/appletalk/Kconfig
+@@ -50,35 +50,6 @@ config LTPC
+ 	  This driver is experimental, which means that it may not work.
+ 	  See the file <file:Documentation/networking/device_drivers/appletalk/ltpc.rst>.
+ 
+-config COPS
+-	tristate "COPS LocalTalk PC support"
+-	depends on DEV_APPLETALK && ISA
+-	depends on NETDEVICES
+-	select NETDEV_LEGACY_INIT
+-	help
+-	  This allows you to use COPS AppleTalk cards to connect to LocalTalk
+-	  networks. You also need version 1.3.3 or later of the netatalk
+-	  package. This driver is experimental, which means that it may not
+-	  work. This driver will only work if you choose "AppleTalk DDP"
+-	  networking support, above.
+-	  Please read the file
+-	  <file:Documentation/networking/device_drivers/appletalk/cops.rst>.
+-
+-config COPS_DAYNA
+-	bool "Dayna firmware support"
+-	depends on COPS
+-	help
+-	  Support COPS compatible cards with Dayna style firmware (Dayna
+-	  DL2000/ Daynatalk/PC (half length), COPS LT-95, Farallon PhoneNET PC
+-	  III, Farallon PhoneNET PC II).
+-
+-config COPS_TANGENT
+-	bool "Tangent firmware support"
+-	depends on COPS
+-	help
+-	  Support COPS compatible cards with Tangent style firmware (Tangent
+-	  ATB_II, Novell NL-1000, Daystar Digital LT-200.
+-
+ config IPDDP
+ 	tristate "Appletalk-IP driver support"
+ 	depends on DEV_APPLETALK && ATALK
+Index: linux/drivers/net/appletalk/Makefile
+===================================================================
+--- linux.orig/drivers/net/appletalk/Makefile
++++ linux/drivers/net/appletalk/Makefile
+@@ -4,5 +4,4 @@
+ #
+ 
+ obj-$(CONFIG_IPDDP) += ipddp.o
+-obj-$(CONFIG_COPS) += cops.o
+ obj-$(CONFIG_LTPC) += ltpc.o
diff --git a/debian/patches/debian/dfsg/video-remove-nvidiafb-and-rivafb.patch b/debian/patches/debian/dfsg/video-remove-nvidiafb-and-rivafb.patch
new file mode 100644
index 000000000000..4adc90c2d8c6
--- /dev/null
+++ b/debian/patches/debian/dfsg/video-remove-nvidiafb-and-rivafb.patch
@@ -0,0 +1,128 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sat, 2 Jun 2012 19:53:38 +0100
+Subject: video: Remove nvidiafb and rivafb
+Bug-Debian: https://bugs.debian.org/383481
+Forwarded: no
+
+These drivers contain register programming code provided by the
+hardware vendor that appears to have been deliberately obfuscated.
+This is arguably not the preferred form for modification.
+
+These drivers are also largely redundant with nouveau.  The RIVA 128
+(NV3) is not supported by nouveau but is about 15 years old and
+probably discontinued 10 years ago.
+
+---
+--- a/drivers/video/fbdev/Kconfig
++++ b/drivers/video/fbdev/Kconfig
+@@ -866,99 +866,6 @@ config FB_ATMEL
+ 	help
+ 	  This enables support for the AT91 LCD Controller.
+ 
+-config FB_NVIDIA
+-	tristate "nVidia Framebuffer Support"
+-	depends on FB && PCI
+-	select FB_BACKLIGHT if FB_NVIDIA_BACKLIGHT
+-	select FB_MODE_HELPERS
+-	select FB_CFB_FILLRECT
+-	select FB_CFB_COPYAREA
+-	select FB_CFB_IMAGEBLIT
+-	select BITREVERSE
+-	select VGASTATE
+-	help
+-	  This driver supports graphics boards with the nVidia chips, TNT
+-	  and newer. For very old chipsets, such as the RIVA128, then use
+-	  the rivafb.
+-	  Say Y if you have such a graphics board.
+-
+-	  To compile this driver as a module, choose M here: the
+-	  module will be called nvidiafb.
+-
+-config FB_NVIDIA_I2C
+-	bool "Enable DDC Support"
+-	depends on FB_NVIDIA
+-	select FB_DDC
+-	help
+-	  This enables I2C support for nVidia Chipsets.  This is used
+-	  only for getting EDID information from the attached display
+-	  allowing for robust video mode handling and switching.
+-
+-	  Because fbdev-2.6 requires that drivers must be able to
+-	  independently validate video mode parameters, you should say Y
+-	  here.
+-
+-config FB_NVIDIA_DEBUG
+-	bool "Lots of debug output"
+-	depends on FB_NVIDIA
+-	help
+-	  Say Y here if you want the nVidia driver to output all sorts
+-	  of debugging information to provide to the maintainer when
+-	  something goes wrong.
+-
+-config FB_NVIDIA_BACKLIGHT
+-	bool "Support for backlight control"
+-	depends on FB_NVIDIA
+-	default y
+-	help
+-	  Say Y here if you want to control the backlight of your display.
+-
+-config FB_RIVA
+-	tristate "nVidia Riva support"
+-	depends on FB && PCI
+-	select FB_BACKLIGHT if FB_RIVA_BACKLIGHT
+-	select FB_MODE_HELPERS
+-	select FB_CFB_FILLRECT
+-	select FB_CFB_COPYAREA
+-	select FB_CFB_IMAGEBLIT
+-	select BITREVERSE
+-	select VGASTATE
+-	help
+-	  This driver supports graphics boards with the nVidia Riva/Geforce
+-	  chips.
+-	  Say Y if you have such a graphics board.
+-
+-	  To compile this driver as a module, choose M here: the
+-	  module will be called rivafb.
+-
+-config FB_RIVA_I2C
+-	bool "Enable DDC Support"
+-	depends on FB_RIVA
+-	select FB_DDC
+-	help
+-	  This enables I2C support for nVidia Chipsets.  This is used
+-	  only for getting EDID information from the attached display
+-	  allowing for robust video mode handling and switching.
+-
+-	  Because fbdev-2.6 requires that drivers must be able to
+-	  independently validate video mode parameters, you should say Y
+-	  here.
+-
+-config FB_RIVA_DEBUG
+-	bool "Lots of debug output"
+-	depends on FB_RIVA
+-	help
+-	  Say Y here if you want the Riva driver to output all sorts
+-	  of debugging information to provide to the maintainer when
+-	  something goes wrong.
+-
+-config FB_RIVA_BACKLIGHT
+-	bool "Support for backlight control"
+-	depends on FB_RIVA
+-	default y
+-	help
+-	  Say Y here if you want to control the backlight of your display.
+-
+ config FB_I740
+ 	tristate "Intel740 support"
+ 	depends on FB && PCI
+--- a/drivers/video/fbdev/Makefile
++++ b/drivers/video/fbdev/Makefile
+@@ -21,8 +21,6 @@ obj-$(CONFIG_FB_PM3)		  += pm3fb.o
+ 
+ obj-$(CONFIG_FB_I740)		  += i740fb.o
+ obj-$(CONFIG_FB_MATROX)		  += matrox/
+-obj-$(CONFIG_FB_RIVA)		  += riva/
+-obj-$(CONFIG_FB_NVIDIA)		  += nvidia/
+ obj-$(CONFIG_FB_ATY)		  += aty/ macmodes.o
+ obj-$(CONFIG_FB_ATY128)		  += aty/ macmodes.o
+ obj-$(CONFIG_FB_RADEON)		  += aty/
diff --git a/debian/patches/debian/dfsg/vs6624-disable.patch b/debian/patches/debian/dfsg/vs6624-disable.patch
new file mode 100644
index 000000000000..8d072a6bf92c
--- /dev/null
+++ b/debian/patches/debian/dfsg/vs6624-disable.patch
@@ -0,0 +1,19 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sun, 27 May 2012 01:56:58 +0100
+Subject: vs6624: mark as broken
+Forwarded: not-needed
+
+---
+ drivers/media/i2c/Kconfig | 1 +
+ 1 file changed, 1 insertion(+)
+
+--- a/drivers/media/i2c/Kconfig
++++ b/drivers/media/i2c/Kconfig
+@@ -1213,6 +1213,7 @@ config VIDEO_OV13B10
+ 	  OV13B10 camera.
+ 
+ config VIDEO_VS6624
++	depends on BROKEN
+ 	tristate "ST VS6624 sensor support"
+ 	depends on VIDEO_V4L2 && I2C
+ 	help
diff --git a/debian/patches/debian/documentation-drop-sphinx-version-check.patch b/debian/patches/debian/documentation-drop-sphinx-version-check.patch
new file mode 100644
index 000000000000..cb7f53bbed9d
--- /dev/null
+++ b/debian/patches/debian/documentation-drop-sphinx-version-check.patch
@@ -0,0 +1,52 @@
+From 252aa79fdbd4ac2da09d9b98f81bf11f5e3e1870 Mon Sep 17 00:00:00 2001
+From: Bastian Blank <waldi@debian.org>
+Date: Tue, 4 Aug 2020 09:44:19 +0000
+Subject: [PATCH 1/2] Documentation: Drop sphinx version check
+Forwarded: not-needed
+
+---
+ Documentation/Makefile | 5 -----
+ 1 file changed, 5 deletions(-)
+
+diff --git a/Documentation/Makefile b/Documentation/Makefile
+index 6b12dd82f712..613276ca41f6 100644
+--- a/Documentation/Makefile
++++ b/Documentation/Makefile
+@@ -78,14 +78,12 @@ quiet_cmd_sphinx = SPHINX  $@ --> file://$(abspath $(BUILDDIR)/$3/$4)
+ 	$(abspath $(BUILDDIR)/$3/$4)
+ 
+ htmldocs:
+-	@$(srctree)/scripts/sphinx-pre-install --version-check
+ 	@+$(foreach var,$(SPHINXDIRS),$(call loop_cmd,sphinx,html,$(var),,$(var)))
+ 
+ linkcheckdocs:
+ 	@$(foreach var,$(SPHINXDIRS),$(call loop_cmd,sphinx,linkcheck,$(var),,$(var)))
+ 
+ latexdocs:
+-	@$(srctree)/scripts/sphinx-pre-install --version-check
+ 	@+$(foreach var,$(SPHINXDIRS),$(call loop_cmd,sphinx,latex,$(var),latex,$(var)))
+ 
+ ifeq ($(HAVE_PDFLATEX),0)
+@@ -97,7 +95,6 @@ pdfdocs:
+ else # HAVE_PDFLATEX
+ 
+ pdfdocs: latexdocs
+-	@$(srctree)/scripts/sphinx-pre-install --version-check
+ 	$(foreach var,$(SPHINXDIRS), \
+ 	   $(MAKE) PDFLATEX="$(PDFLATEX)" LATEXOPTS="$(LATEXOPTS)" -C $(BUILDDIR)/$(var)/latex || exit; \
+ 	   mkdir -p $(BUILDDIR)/$(var)/pdf; \
+@@ -107,11 +104,9 @@ pdfdocs: latexdocs
+ endif # HAVE_PDFLATEX
+ 
+ epubdocs:
+-	@$(srctree)/scripts/sphinx-pre-install --version-check
+ 	@+$(foreach var,$(SPHINXDIRS),$(call loop_cmd,sphinx,epub,$(var),epub,$(var)))
+ 
+ xmldocs:
+-	@$(srctree)/scripts/sphinx-pre-install --version-check
+ 	@+$(foreach var,$(SPHINXDIRS),$(call loop_cmd,sphinx,xml,$(var),xml,$(var)))
+ 
+ endif # HAVE_SPHINX
+-- 
+2.28.0
+
diff --git a/debian/patches/debian/export-symbols-needed-by-android-drivers.patch b/debian/patches/debian/export-symbols-needed-by-android-drivers.patch
new file mode 100644
index 000000000000..1532d10bcd9f
--- /dev/null
+++ b/debian/patches/debian/export-symbols-needed-by-android-drivers.patch
@@ -0,0 +1,113 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 07 Sep 2020 02:51:53 +0100
+Subject: Export symbols needed by Android drivers
+Bug-Debian: https://bugs.debian.org/901492
+
+We want to enable use of the Android ashmem and binder drivers to
+support Anbox, but they should not be built-in as that would waste
+resources and increase security attack surface on systems that don't
+need them.
+
+Export the currently un-exported symbols they depend on.
+
+---
+ fs/file.c           | 1 +
+ kernel/fork.c       | 1 +
+ kernel/sched/core.c | 1 +
+ kernel/task_work.c  | 1 +
+ mm/memory.c         | 1 +
+ mm/shmem.c          | 1 +
+ security/security.c | 4 ++++
+ 7 files changed, 10 insertions(+)
+
+--- a/kernel/fork.c
++++ b/kernel/fork.c
+@@ -1153,6 +1153,7 @@ void mmput_async(struct mm_struct *mm)
+ 		schedule_work(&mm->async_put_work);
+ 	}
+ }
++EXPORT_SYMBOL_GPL(mmput_async);
+ #endif
+ 
+ /**
+--- a/kernel/sched/core.c
++++ b/kernel/sched/core.c
+@@ -6931,6 +6931,7 @@ int can_nice(const struct task_struct *p
+ 	return (nice_rlim <= task_rlimit(p, RLIMIT_NICE) ||
+ 		capable(CAP_SYS_NICE));
+ }
++EXPORT_SYMBOL_GPL(can_nice);
+ 
+ #ifdef __ARCH_WANT_SYS_NICE
+ 
+--- a/kernel/task_work.c
++++ b/kernel/task_work.c
+@@ -60,6 +60,7 @@ int task_work_add(struct task_struct *ta
+ 
+ 	return 0;
+ }
++EXPORT_SYMBOL_GPL(task_work_add);
+ 
+ /**
+  * task_work_cancel_match - cancel a pending work added by task_work_add()
+--- a/mm/memory.c
++++ b/mm/memory.c
+@@ -1655,6 +1655,7 @@ void zap_page_range(struct vm_area_struc
+ 	mmu_notifier_invalidate_range_end(&range);
+ 	tlb_finish_mmu(&tlb);
+ }
++EXPORT_SYMBOL_GPL(zap_page_range);
+ 
+ /**
+  * zap_page_range_single - remove user pages in a given range
+--- a/mm/shmem.c
++++ b/mm/shmem.c
+@@ -4162,6 +4162,7 @@ int shmem_zero_setup(struct vm_area_stru
+ 
+ 	return 0;
+ }
++EXPORT_SYMBOL_GPL(shmem_zero_setup);
+ 
+ /**
+  * shmem_read_mapping_page_gfp - read into page cache, using specified page allocation flags.
+--- a/security/security.c
++++ b/security/security.c
+@@ -751,24 +751,28 @@ int security_binder_set_context_mgr(cons
+ {
+ 	return call_int_hook(binder_set_context_mgr, 0, mgr);
+ }
++EXPORT_SYMBOL_GPL(security_binder_set_context_mgr);
+ 
+ int security_binder_transaction(const struct cred *from,
+ 				const struct cred *to)
+ {
+ 	return call_int_hook(binder_transaction, 0, from, to);
+ }
++EXPORT_SYMBOL_GPL(security_binder_transaction);
+ 
+ int security_binder_transfer_binder(const struct cred *from,
+ 				    const struct cred *to)
+ {
+ 	return call_int_hook(binder_transfer_binder, 0, from, to);
+ }
++EXPORT_SYMBOL_GPL(security_binder_transfer_binder);
+ 
+ int security_binder_transfer_file(const struct cred *from,
+ 				  const struct cred *to, struct file *file)
+ {
+ 	return call_int_hook(binder_transfer_file, 0, from, to, file);
+ }
++EXPORT_SYMBOL_GPL(security_binder_transfer_file);
+ 
+ int security_ptrace_access_check(struct task_struct *child, unsigned int mode)
+ {
+--- a/fs/file.c
++++ b/fs/file.c
+@@ -804,6 +804,7 @@ int close_fd_get_file(unsigned int fd, s
+ 
+ 	return ret;
+ }
++EXPORT_SYMBOL_GPL(close_fd_get_file);
+ 
+ void do_close_on_exec(struct files_struct *files)
+ {
diff --git a/debian/patches/debian/fanotify-taint-on-use-of-fanotify_access_permissions.patch b/debian/patches/debian/fanotify-taint-on-use-of-fanotify_access_permissions.patch
new file mode 100644
index 000000000000..82cdda18eef5
--- /dev/null
+++ b/debian/patches/debian/fanotify-taint-on-use-of-fanotify_access_permissions.patch
@@ -0,0 +1,29 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: fanotify: Taint on use of FANOTIFY_ACCESS_PERMISSIONS
+Date: Wed, 13 Jul 2016 01:37:22 +0100
+Forwarded: not-needed
+
+Various free and proprietary AV products use this feature and users
+apparently want it.  But punting access checks to userland seems like
+an easy way to deadlock the system, and there will be nothing we can
+do about that.  So warn and taint the kernel if this feature is
+actually used.
+
+---
+--- a/fs/notify/fanotify/fanotify_user.c
++++ b/fs/notify/fanotify/fanotify_user.c
+@@ -1170,6 +1170,14 @@ static int do_fanotify_mark(int fanotify
+ 	if (ignored)
+ 		mask &= ~FANOTIFY_EVENT_FLAGS;
+ 
++#ifdef CONFIG_FANOTIFY_ACCESS_PERMISSIONS
++	if (mask & FANOTIFY_PERM_EVENTS) {
++		pr_warn_once("%s (%d): Using fanotify permission checks may lead to deadlock; tainting kernel\n",
++			     current->comm, current->pid);
++		add_taint(TAINT_AUX, LOCKDEP_STILL_OK);
++	}
++#endif
++
+ 	f = fdget(fanotify_fd);
+ 	if (unlikely(!f.file))
+ 		return -EBADF;
diff --git a/debian/patches/debian/firmware_class-refer-to-debian-wiki-firmware-page.patch b/debian/patches/debian/firmware_class-refer-to-debian-wiki-firmware-page.patch
new file mode 100644
index 000000000000..27bc69903257
--- /dev/null
+++ b/debian/patches/debian/firmware_class-refer-to-debian-wiki-firmware-page.patch
@@ -0,0 +1,52 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 12 Mar 2018 01:14:03 +0000
+Subject: firmware_class: Refer to Debian wiki page when logging missing firmware
+Bug-Debian: https://bugs.debian.org/888405
+Forwarded: not-needed
+
+If firmware loading fails due to a missing file, log a second error
+message referring to our wiki page about firmware.  This will explain
+why some firmware is in non-free, or can't be packaged at all.  Only
+do this once per boot.
+
+Do something similar in the radeon and amdgpu drivers, where we have
+an early check to avoid failing at a point where we cannot display
+anything.
+
+---
+--- a/drivers/base/firmware_loader/main.c
++++ b/drivers/base/firmware_loader/main.c
+@@ -334,9 +334,12 @@ fw_get_filesystem_firmware(struct device
+ 	}
+ 	__putname(path);
+ 
+-	if (rc)
++	if (rc) {
+ 		dev_err(device, "firmware: failed to load %s (%d)\n",
+ 			fw_priv->fw_name, rc);
++		if (rc == -ENOENT)
++			pr_err_once("See https://wiki.debian.org/Firmware for information about missing firmware\n");
++	}
+ 
+ 	return rc;
+ }
+--- a/drivers/gpu/drm/radeon/radeon_drv.c
++++ b/drivers/gpu/drm/radeon/radeon_drv.c
+@@ -367,6 +367,7 @@ static int radeon_pci_probe(struct pci_d
+ 	if ((ent->driver_data & RADEON_FAMILY_MASK) >= CHIP_R600 &&
+ 	    !radeon_firmware_installed()) {
+ 		DRM_ERROR("radeon kernel modesetting for R600 or later requires firmware installed\n");
++		pr_err_once("See https://wiki.debian.org/Firmware for information about missing firmware\n");
+ 		return -ENODEV;
+ 	}
+ 
+--- a/drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c
++++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c
+@@ -626,6 +626,7 @@ static int amdgpu_pci_probe(struct pci_d
+ 
+ 	if (!amdgpu_firmware_installed()) {
+ 		DRM_ERROR("amdgpu requires firmware installed\n");
++		pr_err_once("See https://wiki.debian.org/Firmware for information about missing firmware\n");
+ 		return -ENODEV;
+ 	}
+ 
diff --git a/debian/patches/debian/fjes-disable-autoload.patch b/debian/patches/debian/fjes-disable-autoload.patch
new file mode 100644
index 000000000000..59b56708e71d
--- /dev/null
+++ b/debian/patches/debian/fjes-disable-autoload.patch
@@ -0,0 +1,24 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sat, 18 Mar 2017 20:47:58 +0000
+Subject: fjes: Disable auto-loading
+Bug-Debian: https://bugs.debian.org/853976
+Forwarded: no
+
+fjes matches a generic ACPI device ID, and relies on its probe
+function to distinguish whether that really corresponds to a supported
+device.  Very few system will need the driver and it wastes memory on
+all the other systems where the same device ID appears, so disable
+auto-loading.
+
+---
+--- a/drivers/net/fjes/fjes_main.c
++++ b/drivers/net/fjes/fjes_main.c
+@@ -81,7 +81,7 @@ static const struct acpi_device_id fjes_
+ 	{ACPI_MOTHERBOARD_RESOURCE_HID, 0},
+ 	{"", 0},
+ };
+-MODULE_DEVICE_TABLE(acpi, fjes_acpi_ids);
++/* MODULE_DEVICE_TABLE(acpi, fjes_acpi_ids); */
+ 
+ static struct acpi_driver fjes_acpi_driver = {
+ 	.name = DRV_NAME,
diff --git a/debian/patches/debian/fs-enable-link-security-restrictions-by-default.patch b/debian/patches/debian/fs-enable-link-security-restrictions-by-default.patch
new file mode 100644
index 000000000000..e2a8679a5fba
--- /dev/null
+++ b/debian/patches/debian/fs-enable-link-security-restrictions-by-default.patch
@@ -0,0 +1,22 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: fs: Enable link security restrictions by default
+Date: Fri, 02 Nov 2012 05:32:06 +0000
+Bug-Debian: https://bugs.debian.org/609455
+Forwarded: not-needed
+
+This reverts commit 561ec64ae67ef25cac8d72bb9c4bfc955edfd415
+('VFS: don't do protected {sym,hard}links by default').
+
+--- a/fs/namei.c
++++ b/fs/namei.c
+@@ -885,8 +885,8 @@ static inline void put_link(struct namei
+ 		path_put(&last->link);
+ }
+ 
+-int sysctl_protected_symlinks __read_mostly = 0;
+-int sysctl_protected_hardlinks __read_mostly = 0;
++int sysctl_protected_symlinks __read_mostly = 1;
++int sysctl_protected_hardlinks __read_mostly = 1;
+ int sysctl_protected_fifos __read_mostly;
+ int sysctl_protected_regular __read_mostly;
+ 
diff --git a/debian/patches/debian/gitignore.patch b/debian/patches/debian/gitignore.patch
new file mode 100644
index 000000000000..78a7235fa71c
--- /dev/null
+++ b/debian/patches/debian/gitignore.patch
@@ -0,0 +1,49 @@
+From: Ian Campbell <ijc@hellion.org.uk>
+Date: Thu, 17 Jan 2013 08:55:21 +0000
+Subject: Tweak gitignore for Debian pkg-kernel using git svn.
+Forwarded: not-needed
+
+[bwh: Tweak further for pure git]
+
+--- a/.gitignore
++++ b/.gitignore
+@@ -71,11 +71,6 @@ modules.order
+ /*.spec
+ 
+ #
+-# Debian directory (make deb-pkg)
+-#
+-/debian/
+-
+-#
+ # Snap directory (make snap-pkg)
+ #
+ /snap/
+@@ -86,16 +81,6 @@ modules.order
+ /tar-install/
+ 
+ #
+-# We don't want to ignore the following even if they are dot-files
+-#
+-!.clang-format
+-!.cocciconfig
+-!.get_maintainer.ignore
+-!.gitattributes
+-!.gitignore
+-!.mailmap
+-
+-#
+ # Generated include files
+ #
+ /include/config/
+@@ -155,3 +140,10 @@ x509.genkey
+ 
+ # Documentation toolchain
+ sphinx_*/
++
++#
++# Debian packaging: ignore everything at the top level, since it isn't
++# included in our repository
++#
++/*
++!/debian/
diff --git a/debian/patches/debian/hamradio-disable-auto-loading-as-mitigation-against-local-exploits.patch b/debian/patches/debian/hamradio-disable-auto-loading-as-mitigation-against-local-exploits.patch
new file mode 100644
index 000000000000..b532d005494b
--- /dev/null
+++ b/debian/patches/debian/hamradio-disable-auto-loading-as-mitigation-against-local-exploits.patch
@@ -0,0 +1,48 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 05 Aug 2019 00:29:11 +0100
+Subject: hamradio: Disable auto-loading as mitigation against local exploits
+Forwarded: not-needed
+
+We can mitigate the effect of vulnerabilities in obscure protocols by
+preventing unprivileged users from loading the modules, so that they
+are only exploitable on systems where the administrator has chosen to
+load the protocol.
+
+The 'ham' radio protocols (ax25, netrom, rose) are not actively
+maintained or widely used.  Therefore disable auto-loading.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+--- a/net/ax25/af_ax25.c
++++ b/net/ax25/af_ax25.c
+@@ -1986,7 +1986,7 @@ module_init(ax25_init);
+ MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
+ MODULE_DESCRIPTION("The amateur radio AX.25 link layer protocol");
+ MODULE_LICENSE("GPL");
+-MODULE_ALIAS_NETPROTO(PF_AX25);
++/* MODULE_ALIAS_NETPROTO(PF_AX25); */
+ 
+ static void __exit ax25_exit(void)
+ {
+--- a/net/netrom/af_netrom.c
++++ b/net/netrom/af_netrom.c
+@@ -1486,7 +1486,7 @@ MODULE_PARM_DESC(nr_ndevs, "number of NE
+ MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
+ MODULE_DESCRIPTION("The amateur radio NET/ROM network and transport layer protocol");
+ MODULE_LICENSE("GPL");
+-MODULE_ALIAS_NETPROTO(PF_NETROM);
++/* MODULE_ALIAS_NETPROTO(PF_NETROM); */
+ 
+ static void __exit nr_exit(void)
+ {
+--- a/net/rose/af_rose.c
++++ b/net/rose/af_rose.c
+@@ -1577,7 +1577,7 @@ MODULE_PARM_DESC(rose_ndevs, "number of
+ MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
+ MODULE_DESCRIPTION("The amateur radio ROSE network layer protocol");
+ MODULE_LICENSE("GPL");
+-MODULE_ALIAS_NETPROTO(PF_ROSE);
++/* MODULE_ALIAS_NETPROTO(PF_ROSE); */
+ 
+ static void __exit rose_exit(void)
+ {
diff --git a/debian/patches/debian/i386-686-pae-pci-set-pci-nobios-by-default.patch b/debian/patches/debian/i386-686-pae-pci-set-pci-nobios-by-default.patch
new file mode 100644
index 000000000000..1b216d0d1c4f
--- /dev/null
+++ b/debian/patches/debian/i386-686-pae-pci-set-pci-nobios-by-default.patch
@@ -0,0 +1,27 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Tue, 16 Feb 2016 02:45:42 +0000
+Subject: [i386/686-pae] PCI: Set pci=nobios by default
+Forwarded: not-needed
+
+CONFIG_PCI_GOBIOS results in physical addresses 640KB-1MB being mapped
+W+X, which is undesirable for security reasons and will result in a
+warning at boot now that we enable CONFIG_DEBUG_WX.
+
+This can be overridden using the kernel parameter "pci=nobios", but we
+want to disable W+X by default.  Disable PCI BIOS probing by default;
+it can still be enabled using "pci=bios".
+
+---
+--- a/arch/x86/pci/common.c
++++ b/arch/x86/pci/common.c
+@@ -21,8 +21,8 @@
+ #include <asm/setup.h>
+ #include <asm/irqdomain.h>
+ 
+-unsigned int pci_probe = PCI_PROBE_BIOS | PCI_PROBE_CONF1 | PCI_PROBE_CONF2 |
+-				PCI_PROBE_MMCONF;
++unsigned int pci_probe = PCI_PROBE_CONF1 | PCI_PROBE_CONF2 | PCI_PROBE_MMCONF |
++	(IS_ENABLED(CONFIG_X86_64) || IS_ENABLED(CONFIG_X86_PAE) ? 0 : PCI_PROBE_BIOS);
+ 
+ static int pci_bf_sort;
+ int pci_routeirq;
diff --git a/debian/patches/debian/ia64-hardcode-arch-script-output.patch b/debian/patches/debian/ia64-hardcode-arch-script-output.patch
new file mode 100644
index 000000000000..56fdc4cb470c
--- /dev/null
+++ b/debian/patches/debian/ia64-hardcode-arch-script-output.patch
@@ -0,0 +1,71 @@
+From: dann frazier <dannf@debian.org>
+Subject: Hardcode arch script output
+Date: Mon, 26 Mar 2007 16:30:51 -0600
+Bug-Debian: https://bugs.debian.org/392592
+Forwarded: not-needed
+
+Here's a patch that simply uses hardcoded definitions instead of
+doing the dynamic tests that require architecture-specific scripts.
+
+I don't particularly like this approach because it restricts
+portability and diverts from upstream. But, it is simpler, and this
+really needs to be fixed somehow before etch (along with a rebuild of
+linux-modules-extra-2.6), so I'm willing to live with it if my other
+patch is deemed unacceptable.
+
+My primary concern is that, in the future, the output of these scripts
+will change and we (or our successors) will either not notice or
+forget to update the hardcoded values.
+
+Including the scripts in linux-kbuild will avoid this manual step
+altogether, and allow for the possibility of other archs to provide
+their own scripts in the future.
+---
+ arch/ia64/Makefile | 17 ++---------------
+ 1 file changed, 2 insertions(+), 15 deletions(-)
+
+--- a/arch/ia64/Makefile
++++ b/arch/ia64/Makefile
+@@ -26,16 +26,7 @@ cflags-y	:= -pipe $(EXTRA) -ffixed-r13 -
+ 		   -falign-functions=32 -frename-registers -fno-optimize-sibling-calls
+ KBUILD_CFLAGS_KERNEL := -mconstant-gp
+ 
+-GAS_STATUS	= $(shell $(srctree)/arch/ia64/scripts/check-gas "$(CC)" "$(OBJDUMP)")
+-KBUILD_CPPFLAGS += $(shell $(srctree)/arch/ia64/scripts/toolchain-flags "$(CC)" "$(OBJDUMP)" "$(READELF)")
+-
+-ifeq ($(GAS_STATUS),buggy)
+-$(error Sorry, you need a newer version of the assember, one that is built from	\
+-	a source-tree that post-dates 18-Dec-2002.  You can find a pre-compiled	\
+-	static binary of such an assembler at:					\
+-										\
+-		ftp://ftp.hpl.hp.com/pub/linux-ia64/gas-030124.tar.gz)
+-endif
++KBUILD_CPPFLAGS += -DHAVE_WORKING_TEXT_ALIGN -DHAVE_MODEL_SMALL_ATTRIBUTE -DHAVE_SERIALIZE_DIRECTIVE
+ 
+ quiet_cmd_gzip = GZIP    $@
+ cmd_gzip = cat $(real-prereqs) | $(KGZIP) -n -f -9 > $@
+@@ -52,7 +43,7 @@ drivers-y			+= arch/ia64/pci/ arch/ia64/
+ 
+ PHONY += compressed check
+ 
+-all: compressed unwcheck
++all: compressed
+ 
+ compressed: vmlinux.gz
+ 
+@@ -64,9 +55,6 @@ vmlinux.gz: vmlinux.bin FORCE
+ vmlinux.bin: vmlinux FORCE
+ 	$(call if_changed,objcopy)
+ 
+-unwcheck: vmlinux
+-	-$(Q)READELF=$(READELF) $(PYTHON3) $(srctree)/arch/ia64/scripts/unwcheck.py $<
+-
+ archheaders:
+ 	$(Q)$(MAKE) $(build)=arch/ia64/kernel/syscalls all
+ 
+@@ -78,5 +66,4 @@ install: vmlinux.gz
+ define archhelp
+   echo '* compressed	- Build compressed kernel image'
+   echo '  install	- Install compressed kernel image'
+-  echo '* unwcheck	- Check vmlinux for invalid unwind info'
+ endef
diff --git a/debian/patches/debian/iwlwifi-do-not-request-unreleased-firmware.patch b/debian/patches/debian/iwlwifi-do-not-request-unreleased-firmware.patch
new file mode 100644
index 000000000000..c8061436d009
--- /dev/null
+++ b/debian/patches/debian/iwlwifi-do-not-request-unreleased-firmware.patch
@@ -0,0 +1,26 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: iwlwifi: Do not request unreleased firmware for IWL6000
+Bug-Debian: https://bugs.debian.org/689416
+Forwarded: not-needed
+
+The iwlwifi driver currently supports firmware API versions 4-6 for
+these devices.  It will request the file for the latest supported
+version and then fall back to earlier versions.  However, the latest
+version that has actually been released is 4, so we expect the
+requests for versions 6 and then 5 to fail.
+
+The installer appears to report any failed request, and it is probably
+not easy to detect that this particular failure is harmless.  So stop
+requesting the unreleased firmware.
+
+--- a/drivers/net/wireless/intel/iwlwifi/cfg/6000.c
++++ b/drivers/net/wireless/intel/iwlwifi/cfg/6000.c
+@@ -31,7 +31,7 @@
+ #include "dvm/commands.h" /* needed for BT for now */
+ 
+ /* Highest firmware API version supported */
+-#define IWL6000_UCODE_API_MAX 6
++#define IWL6000_UCODE_API_MAX 4 /* v5-6 are supported but not released */
+ #define IWL6050_UCODE_API_MAX 5
+ #define IWL6000G2_UCODE_API_MAX 6
+ #define IWL6035_UCODE_API_MAX 6
diff --git a/debian/patches/debian/kbuild-abort-build-if-subdirs-used.patch b/debian/patches/debian/kbuild-abort-build-if-subdirs-used.patch
new file mode 100644
index 000000000000..ec23040d8354
--- /dev/null
+++ b/debian/patches/debian/kbuild-abort-build-if-subdirs-used.patch
@@ -0,0 +1,37 @@
+From: Ben Hutchings <benh@debian.org>
+Date: Mon, 26 Apr 2021 18:27:16 +0200
+Subject: kbuild: Abort build if SUBDIRS used
+Forwarded: not-needed
+Bug-Debian: https://bugs.debian.org/987575
+
+DKMS and module-assistant both build OOT modules as root.  If they
+build an old OOT module that still use SUBDIRS this causes Kbuild
+to try building a full kernel, which obviously fails but not before
+deleting files from the installed headers package.
+
+To avoid such mishaps, detect this situation and abort the build.
+
+The error message is based on that used in commit 0126be38d988
+"kbuild: announce removal of SUBDIRS if used".
+---
+--- a/Makefile
++++ b/Makefile
+@@ -218,6 +218,18 @@ ifeq ("$(origin M)", "command line")
+   KBUILD_EXTMOD := $(M)
+ endif
+ 
++# Old syntax make ... SUBDIRS=$PWD should be rejected to avoid mishaps
++# (see Debian bugs #982334, #987575)
++ifndef KBUILD_EXTMOD
++  ifdef SUBDIRS
++    $(warning =============== ERROR ==============)
++    $(warning 'SUBDIRS' was removed in Linux 5.3)
++    $(warning Use 'M=' or 'KBUILD_EXTMOD=' instead)
++    $(warning ====================================)
++    $(error .)
++  endif
++endif
++
+ $(if $(word 2, $(KBUILD_EXTMOD)), \
+ 	$(error building multiple external modules is not supported))
+ 
diff --git a/debian/patches/debian/kbuild-look-for-module.lds-under-arch-directory-too.patch b/debian/patches/debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
new file mode 100644
index 000000000000..7a87726ce692
--- /dev/null
+++ b/debian/patches/debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
@@ -0,0 +1,52 @@
+From: Ben Hutchings <benh@debian.org>
+Date: Thu, 10 Dec 2020 17:31:39 +0100
+Subject: kbuild: Look for module.lds under arch directory too
+Forwarded: not-needed
+Bug-Debian: https://bugs.debian.org/975571
+
+The module.lds linker script is now built under the scripts directory,
+where previously it was under arch/$(SRCARCH).
+
+However, we package the scripts directory as linux-kbuild, which is
+meant to be able to do support native and cross-builds.  That means it
+shouldn't contain files for a specific target architecture without a
+wrapper to select between them, and it doesn't appear that linker
+scripts are powerful enough to implement such a wrapper.
+
+Building module.lds in a different location would require relatively
+large changes.  Moving it in the package build rules can work, but we
+need to support custom kernel builds from the same source so we can't
+assume it's moved.
+
+Therefore, we move module.lds under the arch build directory in
+rules.real and change Makefile.modfinal to look for it in both places.
+
+---
+Index: linux/scripts/Makefile.modfinal
+===================================================================
+--- linux.orig/scripts/Makefile.modfinal
++++ linux/scripts/Makefile.modfinal
+@@ -29,12 +29,13 @@ quiet_cmd_cc_o_c = CC [M]  $@
+ 	$(call if_changed_dep,cc_o_c)
+ 
+ ARCH_POSTLINK := $(wildcard $(srctree)/arch/$(SRCARCH)/Makefile.postlink)
++ARCH_MODULE_LDS := $(word 1,$(wildcard scripts/module.lds arch/$(SRCARCH)/module.lds))
+ 
+ quiet_cmd_ld_ko_o = LD [M]  $@
+       cmd_ld_ko_o +=							\
+ 	$(LD) -r $(KBUILD_LDFLAGS)					\
+ 		$(KBUILD_LDFLAGS_MODULE) $(LDFLAGS_MODULE)		\
+-		-T scripts/module.lds -o $@ $(filter %.o, $^);		\
++		-T $(ARCH_MODULE_LDS) -o $@ $(filter %.o, $^);		\
+ 	$(if $(ARCH_POSTLINK), $(MAKE) -f $(ARCH_POSTLINK) $@, true)
+ 
+ quiet_cmd_btf_ko = BTF [M] $@
+@@ -55,7 +56,7 @@ if_changed_except = $(if $(call newer_pr
+ 
+ 
+ # Re-generate module BTFs if either module's .ko or vmlinux changed
+-$(modules): %.ko: %$(mod-prelink-ext).o %.mod.o scripts/module.lds $(if $(KBUILD_BUILTIN),vmlinux) FORCE
++$(modules): %.ko: %$(mod-prelink-ext).o %.mod.o $(ARCH_MODULE_LDS) $(if $(KBUILD_BUILTIN),vmlinux) FORCE
+ 	+$(call if_changed_except,ld_ko_o,vmlinux)
+ ifdef CONFIG_DEBUG_INFO_BTF_MODULES
+ 	+$(if $(newer-prereqs),$(call cmd,btf_ko))
diff --git a/debian/patches/debian/kernelvariables.patch b/debian/patches/debian/kernelvariables.patch
new file mode 100644
index 000000000000..79f8f56982eb
--- /dev/null
+++ b/debian/patches/debian/kernelvariables.patch
@@ -0,0 +1,92 @@
+From: Bastian Blank <waldi@debian.org>
+Subject: kbuild: Make the toolchain variables easily overwritable
+Date: Sun, 22 Feb 2009 15:39:35 +0100
+Forwarded: not-needed
+
+Allow make variables to be overridden for each flavour by a file in
+the build tree, .kernelvariables.
+
+We currently use this for ARCH, KERNELRELEASE, CC, and in some cases
+also CROSS_COMPILE, KCFLAGS.
+
+This file can only be read after we establish the build tree, and all
+use of $(ARCH) needs to be moved after this.
+
+[bwh: Updated for 5.3: include .kernelvariables from current directory
+ rather than using undefined $(obj).]
+---
+--- a/Makefile
++++ b/Makefile
+@@ -384,36 +384,6 @@ include $(srctree)/scripts/subarch.inclu
+ # Note: Some architectures assign CROSS_COMPILE in their arch/*/Makefile
+ ARCH		?= $(SUBARCH)
+ 
+-# Architecture as present in compile.h
+-UTS_MACHINE 	:= $(ARCH)
+-SRCARCH 	:= $(ARCH)
+-
+-# Additional ARCH settings for x86
+-ifeq ($(ARCH),i386)
+-        SRCARCH := x86
+-endif
+-ifeq ($(ARCH),x86_64)
+-        SRCARCH := x86
+-endif
+-
+-# Additional ARCH settings for sparc
+-ifeq ($(ARCH),sparc32)
+-       SRCARCH := sparc
+-endif
+-ifeq ($(ARCH),sparc64)
+-       SRCARCH := sparc
+-endif
+-
+-# Additional ARCH settings for parisc
+-ifeq ($(ARCH),parisc64)
+-       SRCARCH := parisc
+-endif
+-
+-export cross_compiling :=
+-ifneq ($(SRCARCH),$(SUBARCH))
+-cross_compiling := 1
+-endif
+-
+ KCONFIG_CONFIG	?= .config
+ export KCONFIG_CONFIG
+ 
+@@ -491,6 +461,35 @@ CFLAGS_KERNEL	=
+ AFLAGS_KERNEL	=
+ LDFLAGS_vmlinux =
+ 
++-include .kernelvariables
++
++# Architecture as present in compile.h
++UTS_MACHINE 	:= $(ARCH)
++SRCARCH 	:= $(ARCH)
++
++# Additional ARCH settings for x86
++ifeq ($(ARCH),i386)
++        SRCARCH := x86
++endif
++ifeq ($(ARCH),x86_64)
++        SRCARCH := x86
++endif
++
++# Additional ARCH settings for sparc
++ifeq ($(ARCH),sparc64)
++       SRCARCH := sparc
++endif
++
++# Additional ARCH settings for parisc
++ifeq ($(ARCH),parisc64)
++       SRCARCH := parisc
++endif
++
++# Additional ARCH settings for sh
++ifeq ($(ARCH),sh64)
++       SRCARCH := sh
++endif
++
+ # Use USERINCLUDE when you must reference the UAPI directories only.
+ USERINCLUDE    := \
+ 		-I$(srctree)/arch/$(SRCARCH)/include/uapi \
diff --git a/debian/patches/debian/mips-boston-disable-its.patch b/debian/patches/debian/mips-boston-disable-its.patch
new file mode 100644
index 000000000000..be108f35e3ab
--- /dev/null
+++ b/debian/patches/debian/mips-boston-disable-its.patch
@@ -0,0 +1,20 @@
+From: YunQiang Su <syq@debian.org>
+Date: Mon, 14 May 2018 16:16:18 +0800
+Subject: Disable uImage generation for mips generic 
+Forwarded: not-needed
+
+MIPS generic trys to generate uImage when build, which then ask for
+u-boot-tools.
+
+--- a/arch/mips/generic/Platform
++++ b/arch/mips/generic/Platform
+@@ -14,9 +14,6 @@ cflags-$(CONFIG_MIPS_GENERIC)	+= -I$(src
+ 
+ load-$(CONFIG_MIPS_GENERIC)	+= 0xffffffff80100000
+ zload-$(CONFIG_MIPS_GENERIC)	+= 0xffffffff81000000
+-all-$(CONFIG_MIPS_GENERIC)	:= vmlinux.gz.itb
+-
+-its-y					:= vmlinux.its.S
+ its-$(CONFIG_FIT_IMAGE_FDT_BOSTON)	+= board-boston.its.S
+ its-$(CONFIG_FIT_IMAGE_FDT_NI169445)	+= board-ni169445.its.S
+ its-$(CONFIG_FIT_IMAGE_FDT_OCELOT)	+= board-ocelot.its.S
diff --git a/debian/patches/debian/mips-disable-werror.patch b/debian/patches/debian/mips-disable-werror.patch
new file mode 100644
index 000000000000..b8fe8b44c142
--- /dev/null
+++ b/debian/patches/debian/mips-disable-werror.patch
@@ -0,0 +1,23 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 13 Sep 2010 02:16:18 +0100
+Subject: [PATCH] Partially revert "MIPS: Add -Werror to arch/mips/Kbuild"
+Forwarded: not-needed
+
+This reverts commits 66f9ba101f54bda63ab1db97f9e9e94763d0651b and
+5373633cc9253ba82547473e899cab141c54133e.
+
+We really don't want to add -Werror anywhere.
+---
+--- a/arch/mips/Kbuild
++++ b/arch/mips/Kbuild
+@@ -1,10 +1,4 @@
+ # SPDX-License-Identifier: GPL-2.0
+-# Fail on warnings - also for files referenced in subdirs
+-# -Werror can be disabled for specific files using:
+-# CFLAGS_<file.o> := -Wno-error
+-ifeq ($(W),)
+-subdir-ccflags-y := -Werror
+-endif
+ 
+ # platform specific definitions
+ include arch/mips/Kbuild.platforms
diff --git a/debian/patches/debian/mips-ieee754-relaxed.patch b/debian/patches/debian/mips-ieee754-relaxed.patch
new file mode 100644
index 000000000000..20dff251c791
--- /dev/null
+++ b/debian/patches/debian/mips-ieee754-relaxed.patch
@@ -0,0 +1,32 @@
+From: YunQiang Su <syq@debian.org>
+Date: Mon 16 Nov 2020 09:11:00 +0800
+Subject: Use RELAXED ieee754 mode for Loongson-3 as 3A 4000 is 2008-only
+Forwarded: not-needed
+
+There are 2 mode of value of IEEE NaN hardcoded by CPU.
+Currently, our mipsel/mips64el port is in so-called lagacy mode.
+Loongson 3A 4000 is set as the so-called 2008 mode.
+
+To make Debian workable on Loongson 3A 4000, we need set the kerenl in
+RELAXED mode.
+
+https://web.archive.org/web/20180830093617/https://dmz-portal.mips.com/wiki/MIPS_ABI_-_NaN_Interlinking
+
+diff --git a/arch/mips/kernel/fpu-probe.c b/arch/mips/kernel/fpu-probe.c
+index e689d6a83..667226f94 100644
+--- a/arch/mips/kernel/fpu-probe.c
++++ b/arch/mips/kernel/fpu-probe.c
+@@ -144,7 +144,12 @@ static void cpu_set_fpu_2008(struct cpuinfo_mips *c)
+  * IEEE 754 conformance mode to use.  Affects the NaN encoding and the
+  * ABS.fmt/NEG.fmt execution mode.
+  */
+-static enum { STRICT, LEGACY, STD2008, RELAXED } ieee754 = STRICT;
++enum ieee754_mode { STRICT, LEGACY, STD2008, RELAXED };
++#ifdef CONFIG_CPU_LOONGSON64
++static enum ieee754_mode ieee754 = RELAXED;
++#else
++static enum ieee754_mode ieee754 = STRICT;
++#endif
+ 
+ /*
+  * Set the IEEE 754 NaN encodings and the ABS.fmt/NEG.fmt execution modes
diff --git a/debian/patches/debian/ntfs-mark-it-as-broken.patch b/debian/patches/debian/ntfs-mark-it-as-broken.patch
new file mode 100644
index 000000000000..207f9751e541
--- /dev/null
+++ b/debian/patches/debian/ntfs-mark-it-as-broken.patch
@@ -0,0 +1,22 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Thu, 25 Apr 2019 15:31:33 +0100
+Subject: ntfs: mark it as broken
+
+NTFS has unfixed issues CVE-2018-12929, CVE-2018-12930, and
+CVE-2018-12931.  ntfs-3g is a better supported alternative.
+
+Make sure it can't be enabled even in custom kernels.
+
+---
+Index: debian-kernel/fs/ntfs/Kconfig
+===================================================================
+--- debian-kernel.orig/fs/ntfs/Kconfig
++++ debian-kernel/fs/ntfs/Kconfig
+@@ -1,6 +1,7 @@
+ # SPDX-License-Identifier: GPL-2.0-only
+ config NTFS_FS
+ 	tristate "NTFS file system support"
++	depends on BROKEN
+ 	select NLS
+ 	help
+ 	  NTFS is the file system of Microsoft Windows NT, 2000, XP and 2003.
diff --git a/debian/patches/debian/perf-traceevent-support-asciidoctor-for-documentatio.patch b/debian/patches/debian/perf-traceevent-support-asciidoctor-for-documentatio.patch
new file mode 100644
index 000000000000..89df33ab0614
--- /dev/null
+++ b/debian/patches/debian/perf-traceevent-support-asciidoctor-for-documentatio.patch
@@ -0,0 +1,54 @@
+From cd02fc78859ef9aefd7c92406f9523622da0b472 Mon Sep 17 00:00:00 2001
+From: Bastian Blank <waldi@debian.org>
+Date: Tue, 4 Aug 2020 09:44:37 +0000
+Subject: [PATCH 2/2] perf/traceevent: Support asciidoctor for documentation
+Forwarded: not-needed
+
+---
+ tools/lib/perf/Documentation/Makefile       | 2 +-
+ tools/lib/traceevent/Documentation/Makefile | 2 +-
+ tools/perf/Documentation/Makefile           | 2 +-
+ 3 files changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/tools/lib/perf/Documentation/Makefile b/tools/lib/perf/Documentation/Makefile
+index 972754082a85..272d06173a3e 100644
+--- a/tools/lib/perf/Documentation/Makefile
++++ b/tools/lib/perf/Documentation/Makefile
+@@ -35,7 +35,7 @@ htmldir  = $(docdir)/html
+ exdir    = $(docdir)/examples
+ 
+ ASCIIDOC        = asciidoc
+-ASCIIDOC_EXTRA  = --unsafe -f asciidoc.conf
++ASCIIDOC_EXTRA  =
+ ASCIIDOC_HTML   = xhtml11
+ MANPAGE_XSL     = manpage-normal.xsl
+ XMLTO_EXTRA     =
+diff --git a/tools/lib/traceevent/Documentation/Makefile b/tools/lib/traceevent/Documentation/Makefile
+index aa72ab96c3c1..f3a4ff3b8b0e 100644
+--- a/tools/lib/traceevent/Documentation/Makefile
++++ b/tools/lib/traceevent/Documentation/Makefile
+@@ -28,7 +28,7 @@ mandir?=$(prefix)/share/man
+ man3dir=$(mandir)/man3
+ 
+ ASCIIDOC=asciidoc
+-ASCIIDOC_EXTRA = --unsafe -f asciidoc.conf
++ASCIIDOC_EXTRA =
+ ASCIIDOC_HTML = xhtml11
+ MANPAGE_XSL = manpage-normal.xsl
+ XMLTO_EXTRA =
+diff --git a/tools/perf/Documentation/Makefile b/tools/perf/Documentation/Makefile
+index 6e54979c2124..7bfa6ae971ab 100644
+--- a/tools/perf/Documentation/Makefile
++++ b/tools/perf/Documentation/Makefile
+@@ -48,7 +48,7 @@ man5dir=$(mandir)/man5
+ man7dir=$(mandir)/man7
+ 
+ ASCIIDOC=asciidoc
+-ASCIIDOC_EXTRA += --unsafe -f asciidoc.conf
++ASCIIDOC_EXTRA +=
+ ASCIIDOC_HTML = xhtml11
+ MANPAGE_XSL = manpage-normal.xsl
+ XMLTO_EXTRA =
+-- 
+2.28.0
+
diff --git a/debian/patches/debian/rds-Disable-auto-loading-as-mitigation-against-local.patch b/debian/patches/debian/rds-Disable-auto-loading-as-mitigation-against-local.patch
new file mode 100644
index 000000000000..3343aecace3b
--- /dev/null
+++ b/debian/patches/debian/rds-Disable-auto-loading-as-mitigation-against-local.patch
@@ -0,0 +1,34 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Fri, 19 Nov 2010 02:12:48 +0000
+Subject: [PATCH 1/3] rds: Disable auto-loading as mitigation against local exploits
+Forwarded: not-needed
+
+Recent review has revealed several bugs in obscure protocol
+implementations that can be exploited by local users for denial of
+service or privilege escalation.  We can mitigate the effect of any
+remaining vulnerabilities in such protocols by preventing unprivileged
+users from loading the modules, so that they are only exploitable on
+systems where the administrator has chosen to load the protocol.
+
+The 'rds' protocol is one such protocol that has been found to be
+vulnerable, and which was not present in the 'lenny' kernel.
+Therefore disable auto-loading.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ net/rds/af_rds.c |    2 +-
+ 1 files changed, 1 insertions(+), 1 deletions(-)
+
+diff --git a/net/rds/af_rds.c b/net/rds/af_rds.c
+index 98e0538..d8d4525 100644
+--- a/net/rds/af_rds.c
++++ b/net/rds/af_rds.c
+@@ -574,4 +574,4 @@ MODULE_DESCRIPTION("RDS: Reliable Datagram Sockets"
+ 		   " v" DRV_VERSION " (" DRV_RELDATE ")");
+ MODULE_VERSION(DRV_VERSION);
+ MODULE_LICENSE("Dual BSD/GPL");
+-MODULE_ALIAS_NETPROTO(PF_RDS);
++/* MODULE_ALIAS_NETPROTO(PF_RDS); */
+-- 
+1.7.2.3
+
diff --git a/debian/patches/debian/sched-autogroup-disabled.patch b/debian/patches/debian/sched-autogroup-disabled.patch
new file mode 100644
index 000000000000..e9988022edbb
--- /dev/null
+++ b/debian/patches/debian/sched-autogroup-disabled.patch
@@ -0,0 +1,19 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: sched: Do not enable autogrouping by default
+Date: Wed, 16 Mar 2011 03:17:06 +0000
+Forwarded: not-needed
+
+We want to provide the option of autogrouping but without enabling
+it by default yet.
+
+--- a/kernel/sched/autogroup.c
++++ b/kernel/sched/autogroup.c
+@@ -5,7 +5,7 @@
+ #include <linux/nospec.h>
+ #include "sched.h"
+ 
+-unsigned int __read_mostly sysctl_sched_autogroup_enabled = 1;
++unsigned int __read_mostly sysctl_sched_autogroup_enabled = 0;
+ static struct autogroup autogroup_default;
+ static atomic_t autogroup_seq_nr;
+ 
diff --git a/debian/patches/debian/snd-pcsp-disable-autoload.patch b/debian/patches/debian/snd-pcsp-disable-autoload.patch
new file mode 100644
index 000000000000..e593f51446b3
--- /dev/null
+++ b/debian/patches/debian/snd-pcsp-disable-autoload.patch
@@ -0,0 +1,30 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Wed, 05 Feb 2014 23:01:30 +0000
+Subject: snd-pcsp: Disable autoload
+Forwarded: not-needed
+Bug-Debian: https://bugs.debian.org/697709
+
+There are two drivers claiming the platform:pcspkr device:
+- pcspkr creates an input(!) device that can only beep
+- snd-pcsp creates an equivalent input device plus a PCM device that can
+  play barely recognisable renditions of sampled sound
+
+snd-pcsp is blacklisted by the alsa-base package, but not everyone
+installs that.  On PCs where no sound is wanted at all, both drivers
+will still be loaded and one or other will complain that it couldn't
+claim the relevant I/O range.
+
+In case anyone finds snd-pcsp useful, we continue to build it.  But
+remove the alias, to ensure it's not loaded where it's not wanted.
+
+--- a/sound/drivers/pcsp/pcsp.c
++++ b/sound/drivers/pcsp/pcsp.c
+@@ -22,7 +22,7 @@
+ MODULE_AUTHOR("Stas Sergeev <stsp@users.sourceforge.net>");
+ MODULE_DESCRIPTION("PC-Speaker driver");
+ MODULE_LICENSE("GPL");
+-MODULE_ALIAS("platform:pcspkr");
++/*MODULE_ALIAS("platform:pcspkr");*/
+ 
+ static int index = SNDRV_DEFAULT_IDX1;	/* Index 0-MAX */
+ static char *id = SNDRV_DEFAULT_STR1;	/* ID for this card */
diff --git a/debian/patches/debian/tools-perf-install.patch b/debian/patches/debian/tools-perf-install.patch
new file mode 100644
index 000000000000..062348e7afcb
--- /dev/null
+++ b/debian/patches/debian/tools-perf-install.patch
@@ -0,0 +1,54 @@
+From: Bastian Blank <waldi@debian.org>
+Date: Fri, 07 Oct 2011 21:37:52 +0100
+Subject: Install perf scripts non-executable
+Forwarded: no
+
+[bwh: Forward-ported to 4.13]
+---
+ tools/perf/Makefile.perf | 20 ++++++++++----------
+ 1 file changed, 10 insertions(+), 10 deletions(-)
+
+Index: linux/tools/perf/Makefile.perf
+===================================================================
+--- linux.orig/tools/perf/Makefile.perf
++++ linux/tools/perf/Makefile.perf
+@@ -975,8 +975,8 @@ endif
+ ifndef NO_LIBPERL
+ 	$(call QUIET_INSTALL, perl-scripts) \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/scripts/perl/Perf-Trace-Util/lib/Perf/Trace'; \
+-		$(INSTALL) scripts/perl/Perf-Trace-Util/lib/Perf/Trace/* -t '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/scripts/perl/Perf-Trace-Util/lib/Perf/Trace'; \
+-		$(INSTALL) scripts/perl/*.pl -t '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/scripts/perl'; \
++		$(INSTALL) -m 644 scripts/perl/Perf-Trace-Util/lib/Perf/Trace/* -t '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/scripts/perl/Perf-Trace-Util/lib/Perf/Trace'; \
++		$(INSTALL) -m 644 scripts/perl/*.pl -t '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/scripts/perl'; \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/scripts/perl/bin'; \
+ 		$(INSTALL) scripts/perl/bin/* -t '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/scripts/perl/bin'
+ endif
+@@ -993,22 +993,22 @@ endif
+ 		$(INSTALL) $(DLFILTERS) '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/dlfilters';
+ 	$(call QUIET_INSTALL, perf_completion-script) \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(sysconfdir_SQ)/bash_completion.d'; \
+-		$(INSTALL) perf-completion.sh '$(DESTDIR_SQ)$(sysconfdir_SQ)/bash_completion.d/perf_$(VERSION)'
++		$(INSTALL) -m 644 perf-completion.sh '$(DESTDIR_SQ)$(sysconfdir_SQ)/bash_completion.d/perf_$(VERSION)'
+ 	$(call QUIET_INSTALL, perf-tip) \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(tip_instdir_SQ)'; \
+-		$(INSTALL) Documentation/tips.txt -t '$(DESTDIR_SQ)$(tip_instdir_SQ)'
++		$(INSTALL) -m 644 Documentation/tips.txt -t '$(DESTDIR_SQ)$(tip_instdir_SQ)'
+ 
+ install-tests: all install-gtk
+ 	$(call QUIET_INSTALL, tests) \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests'; \
+-		$(INSTALL) tests/attr.py '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests'; \
++		$(INSTALL) -m 644 tests/attr.py '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests'; \
+ 		$(INSTALL) tests/pe-file.exe* '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests'; \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests/attr'; \
+-		$(INSTALL) tests/attr/* '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests/attr'; \
++		$(INSTALL) -m 644 tests/attr/* '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests/attr'; \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests/shell'; \
+-		$(INSTALL) tests/shell/*.sh '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests/shell'; \
++		$(INSTALL) -m 644 tests/shell/*.sh '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests/shell'; \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests/shell/lib'; \
+-		$(INSTALL) tests/shell/lib/*.sh '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests/shell/lib'
++		$(INSTALL) -m 644 tests/shell/lib/*.sh '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/tests/shell/lib'
+ 
+ install-bin: install-tools install-tests install-traceevent-plugins
+ 
diff --git a/debian/patches/debian/tools-perf-version.patch b/debian/patches/debian/tools-perf-version.patch
new file mode 100644
index 000000000000..1cb005833437
--- /dev/null
+++ b/debian/patches/debian/tools-perf-version.patch
@@ -0,0 +1,129 @@
+From: Bastian Blank <waldi@debian.org>
+Date: Mon, 26 Sep 2011 13:53:12 +0100
+Subject: Create manpages and binaries including the version
+Forwarded: no
+
+[bwh: Fix version insertion in perf man page cross-references and perf
+man page title.  Install bash_completion script for perf with a
+version-dependent name.  And do the same for trace.]
+---
+ tools/perf/Documentation/Makefile | 14 ++++++++------
+ tools/perf/Makefile.perf          | 16 ++++++++--------
+ tools/perf/util/Build             |  1 +
+ tools/perf/util/vdso.c            |  4 ++--
+ 4 files changed, 19 insertions(+), 16 deletions(-)
+
+Index: linux/tools/perf/Documentation/Makefile
+===================================================================
+--- linux.orig/tools/perf/Documentation/Makefile
++++ linux/tools/perf/Documentation/Makefile
+@@ -190,14 +190,16 @@ ifdef missing_tools
+ 	$(error "You need to install $(missing_tools) for man pages")
+ endif
+ 
+-do-install-man: man
++do-install-man: $(addprefix install-man-,$(_DOC_MAN1))
++
++install-man-perf.1: $(OUTPUT)perf.1
++	$(INSTALL) -d -m 755 $(DESTDIR)$(man1dir)
++	sed -e 's/"PERF"/"PERF_$(VERSION)"/' -e 's/fBperf-/fBperf_$(VERSION)-/g' $^ > $(DESTDIR)$(man1dir)/perf_$(VERSION).1
++
++install-man-perf%.1: $(OUTPUT)perf%.1
+ 	$(call QUIET_INSTALL, Documentation-man) \
+ 		$(INSTALL) -d -m 755 $(DESTDIR)$(man1dir); \
+-#		$(INSTALL) -d -m 755 $(DESTDIR)$(man5dir); \
+-#		$(INSTALL) -d -m 755 $(DESTDIR)$(man7dir); \
+-		$(INSTALL) -m 644 $(DOC_MAN1) $(DESTDIR)$(man1dir); \
+-#		$(INSTALL) -m 644 $(DOC_MAN5) $(DESTDIR)$(man5dir); \
+-#		$(INSTALL) -m 644 $(DOC_MAN7) $(DESTDIR)$(man7dir)
++		sed -e 's/"PERF\\-/"PERF_$(VERSION)\\-/' -e 's/fBperf-/fBperf_$(VERSION)-/g' $^ > $(DESTDIR)$(man1dir)/perf_$(VERSION)$*.1
+ 
+ install-man: check-man-tools man do-install-man
+ 
+Index: linux/tools/perf/Makefile.perf
+===================================================================
+--- linux.orig/tools/perf/Makefile.perf
++++ linux/tools/perf/Makefile.perf
+@@ -932,25 +932,25 @@ endif
+ install-tools: all install-gtk
+ 	$(call QUIET_INSTALL, binaries) \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(bindir_SQ)'; \
+-		$(INSTALL) $(OUTPUT)perf '$(DESTDIR_SQ)$(bindir_SQ)'; \
+-		$(LN) '$(DESTDIR_SQ)$(bindir_SQ)/perf' '$(DESTDIR_SQ)$(bindir_SQ)/trace'; \
+-		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(includedir_SQ)/perf'; \
+-		$(INSTALL) -m 644 include/perf/perf_dlfilter.h -t '$(DESTDIR_SQ)$(includedir_SQ)/perf'
++		$(INSTALL) $(OUTPUT)perf '$(DESTDIR_SQ)$(bindir_SQ)/perf_$(VERSION)'; \
++		$(LN) '$(DESTDIR_SQ)$(bindir_SQ)/perf_$(VERSION)' '$(DESTDIR_SQ)$(bindir_SQ)/trace_$(VERSION)'; \
++		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perf_include_instdir_SQ)'; \
++		$(INSTALL) -m 644 include/perf/perf_dlfilter.h -t '$(DESTDIR_SQ)$(perf_include_instdir_SQ)'
++	$(call QUIET_INSTALL, libexec) \
++		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)'
+ ifndef NO_PERF_READ_VDSO32
+ 	$(call QUIET_INSTALL, perf-read-vdso32) \
+-		$(INSTALL) $(OUTPUT)perf-read-vdso32 '$(DESTDIR_SQ)$(bindir_SQ)';
++		$(INSTALL) $(OUTPUT)perf-read-vdso32 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)';
+ endif
+ ifndef NO_PERF_READ_VDSOX32
+ 	$(call QUIET_INSTALL, perf-read-vdsox32) \
+-		$(INSTALL) $(OUTPUT)perf-read-vdsox32 '$(DESTDIR_SQ)$(bindir_SQ)';
++		$(INSTALL) $(OUTPUT)perf-read-vdsox32 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)';
+ endif
+ ifndef NO_JVMTI
+ 	$(call QUIET_INSTALL, $(LIBJVMTI)) \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(libdir_SQ)'; \
+ 		$(INSTALL) $(OUTPUT)$(LIBJVMTI) '$(DESTDIR_SQ)$(libdir_SQ)';
+ endif
+-	$(call QUIET_INSTALL, libexec) \
+-		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perfexec_instdir_SQ)'
+ ifndef NO_LIBBPF
+ 	$(call QUIET_INSTALL, bpf-headers) \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(perf_include_instdir_SQ)/bpf'; \
+@@ -993,7 +993,7 @@ endif
+ 		$(INSTALL) $(DLFILTERS) '$(DESTDIR_SQ)$(perfexec_instdir_SQ)/dlfilters';
+ 	$(call QUIET_INSTALL, perf_completion-script) \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(sysconfdir_SQ)/bash_completion.d'; \
+-		$(INSTALL) perf-completion.sh '$(DESTDIR_SQ)$(sysconfdir_SQ)/bash_completion.d/perf'
++		$(INSTALL) perf-completion.sh '$(DESTDIR_SQ)$(sysconfdir_SQ)/bash_completion.d/perf_$(VERSION)'
+ 	$(call QUIET_INSTALL, perf-tip) \
+ 		$(INSTALL) -d -m 755 '$(DESTDIR_SQ)$(tip_instdir_SQ)'; \
+ 		$(INSTALL) Documentation/tips.txt -t '$(DESTDIR_SQ)$(tip_instdir_SQ)'
+@@ -1019,7 +1019,7 @@ install-python_ext:
+ 
+ # 'make install-doc' should call 'make -C Documentation install'
+ $(INSTALL_DOC_TARGETS):
+-	$(Q)$(MAKE) -C $(DOC_DIR) O=$(OUTPUT) $(@:-doc=) ASCIIDOC_EXTRA=$(ASCIIDOC_EXTRA)
++	$(Q)$(MAKE) -C $(DOC_DIR) O=$(OUTPUT) $(@:-doc=) ASCIIDOC_EXTRA=$(ASCIIDOC_EXTRA) VERSION=$(VERSION)
+ 
+ ### Cleaning rules
+ 
+Index: linux/tools/perf/util/Build
+===================================================================
+--- linux.orig/tools/perf/util/Build
++++ linux/tools/perf/util/Build
+@@ -279,6 +279,7 @@ CFLAGS_hweight.o       += -Wno-unused-pa
+ CFLAGS_parse-events.o  += -Wno-redundant-decls
+ CFLAGS_expr.o          += -Wno-redundant-decls
+ CFLAGS_header.o        += -include $(OUTPUT)PERF-VERSION-FILE
++CFLAGS_vdso.o		+= -DPERFEXECDIR='"$(perfexec_instdir_SQ)"'
+ 
+ $(OUTPUT)util/kallsyms.o: ../lib/symbol/kallsyms.c FORCE
+ 	$(call rule_mkdir)
+Index: linux/tools/perf/util/vdso.c
+===================================================================
+--- linux.orig/tools/perf/util/vdso.c
++++ linux/tools/perf/util/vdso.c
+@@ -55,12 +55,12 @@ static struct vdso_info *vdso_info__new(
+ 		.vdso32  = {
+ 			.temp_file_name = VDSO__TEMP_FILE_NAME,
+ 			.dso_name = DSO__NAME_VDSO32,
+-			.read_prog = "perf-read-vdso32",
++			.read_prog = PERFEXECDIR "/perf-read-vdso32",
+ 		},
+ 		.vdsox32  = {
+ 			.temp_file_name = VDSO__TEMP_FILE_NAME,
+ 			.dso_name = DSO__NAME_VDSOX32,
+-			.read_prog = "perf-read-vdsox32",
++			.read_prog = PERFEXECDIR "/perf-read-vdsox32",
+ 		},
+ #endif
+ 	};
diff --git a/debian/patches/debian/uname-version-timestamp.patch b/debian/patches/debian/uname-version-timestamp.patch
new file mode 100644
index 000000000000..5cd565c1e014
--- /dev/null
+++ b/debian/patches/debian/uname-version-timestamp.patch
@@ -0,0 +1,33 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: Make mkcompile_h accept an alternate timestamp string
+Date: Tue, 12 May 2015 19:29:22 +0100
+Forwarded: not-needed
+
+We want to include the Debian version in the utsname::version string
+instead of a full timestamp string.  However, we still need to provide
+a standard timestamp string for gen_initramfs_list.sh to make the
+kernel image reproducible.
+
+Make mkcompile_h use $KBUILD_BUILD_VERSION_TIMESTAMP in preference to
+$KBUILD_BUILD_TIMESTAMP.
+
+--- a/scripts/mkcompile_h
++++ b/scripts/mkcompile_h
+@@ -37,10 +37,14 @@ else
+ 	VERSION=$KBUILD_BUILD_VERSION
+ fi
+ 
+-if [ -z "$KBUILD_BUILD_TIMESTAMP" ]; then
+-	TIMESTAMP=`date`
++if [ -z "$KBUILD_BUILD_VERSION_TIMESTAMP" ]; then
++	if [ -z "$KBUILD_BUILD_TIMESTAMP" ]; then
++		TIMESTAMP=`date`
++	else
++		TIMESTAMP=$KBUILD_BUILD_TIMESTAMP
++	fi
+ else
+-	TIMESTAMP=$KBUILD_BUILD_TIMESTAMP
++	TIMESTAMP=$KBUILD_BUILD_VERSION_TIMESTAMP
+ fi
+ if test -z "$KBUILD_BUILD_USER"; then
+ 	LINUX_COMPILE_BY=$(whoami | sed 's/\\/\\\\/')
diff --git a/debian/patches/debian/version.patch b/debian/patches/debian/version.patch
new file mode 100644
index 000000000000..d4e38f780daf
--- /dev/null
+++ b/debian/patches/debian/version.patch
@@ -0,0 +1,185 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: Include package version along with kernel release in stack traces
+Date: Tue, 24 Jul 2012 03:13:10 +0100
+Forwarded: not-needed
+
+For distribution binary packages we assume
+$DISTRIBUTION_OFFICIAL_BUILD, $DISTRIBUTOR and $DISTRIBUTION_VERSION
+are set.
+---
+ Makefile                      | 15 ++++++++++++++-
+ arch/ia64/kernel/process.c    |  5 +++--
+ arch/powerpc/kernel/process.c |  6 ++++--
+ arch/x86/um/sysrq_64.c        |  6 ++++--
+ kernel/hung_task.c            |  6 ++++--
+ lib/dump_stack.c              |  6 ++++--
+ 6 files changed, 33 insertions(+), 11 deletions(-)
+
+Index: linux/Makefile
+===================================================================
+--- linux.orig/Makefile
++++ linux/Makefile
+@@ -1205,7 +1205,7 @@ PHONY += prepare archprepare
+ 
+ archprepare: outputmakefile archheaders archscripts scripts include/config/kernel.release \
+ 	asm-generic $(version_h) $(autoksyms_h) include/generated/utsrelease.h \
+-	include/generated/autoconf.h remove-stale-files
++	include/generated/autoconf.h include/generated/package.h remove-stale-files
+ 
+ prepare0: archprepare
+ 	$(Q)$(MAKE) $(build)=scripts/mod
+@@ -1259,6 +1259,16 @@ define filechk_version.h
+ 	echo \#define LINUX_VERSION_SUBLEVEL $(SUBLEVEL)
+ endef
+ 
++ifneq ($(DISTRIBUTION_OFFICIAL_BUILD),)
++define filechk_package.h
++	echo \#define LINUX_PACKAGE_ID \" $(DISTRIBUTOR) $(DISTRIBUTION_VERSION)\"
++endef
++else
++define filechk_package.h
++	echo \#define LINUX_PACKAGE_ID \"\"
++endef
++endif
++
+ $(version_h): PATCHLEVEL := $(if $(PATCHLEVEL), $(PATCHLEVEL), 0)
+ $(version_h): SUBLEVEL := $(if $(SUBLEVEL), $(SUBLEVEL), 0)
+ $(version_h): FORCE
+@@ -1267,6 +1277,9 @@ $(version_h): FORCE
+ include/generated/utsrelease.h: include/config/kernel.release FORCE
+ 	$(call filechk,utsrelease.h)
+ 
++include/generated/package.h: $(srctree)/Makefile FORCE
++	$(call filechk,package.h)
++
+ PHONY += headerdep
+ headerdep:
+ 	$(Q)find $(srctree)/include/ -name '*.h' | xargs --max-args 1 \
+Index: linux/arch/ia64/kernel/process.c
+===================================================================
+--- linux.orig/arch/ia64/kernel/process.c
++++ linux/arch/ia64/kernel/process.c
+@@ -34,6 +34,7 @@
+ #include <linux/utsname.h>
+ #include <linux/tracehook.h>
+ #include <linux/rcupdate.h>
++#include <generated/package.h>
+ 
+ #include <asm/cpu.h>
+ #include <asm/delay.h>
+@@ -101,9 +102,9 @@ show_regs (struct pt_regs *regs)
+ 	print_modules();
+ 	printk("\n");
+ 	show_regs_print_info(KERN_DEFAULT);
+-	printk("psr : %016lx ifs : %016lx ip  : [<%016lx>]    %s (%s)\n",
++	printk("psr : %016lx ifs : %016lx ip  : [<%016lx>]    %s (%s%s)\n",
+ 	       regs->cr_ipsr, regs->cr_ifs, ip, print_tainted(),
+-	       init_utsname()->release);
++	       init_utsname()->release, LINUX_PACKAGE_ID);
+ 	printk("ip is at %pS\n", (void *)ip);
+ 	printk("unat: %016lx pfs : %016lx rsc : %016lx\n",
+ 	       regs->ar_unat, regs->ar_pfs, regs->ar_rsc);
+Index: linux/arch/powerpc/kernel/process.c
+===================================================================
+--- linux.orig/arch/powerpc/kernel/process.c
++++ linux/arch/powerpc/kernel/process.c
+@@ -40,6 +40,7 @@
+ #include <linux/elf-randomize.h>
+ #include <linux/pkeys.h>
+ #include <linux/seq_buf.h>
++#include <generated/package.h>
+ 
+ #include <asm/interrupt.h>
+ #include <asm/io.h>
+@@ -1487,8 +1488,9 @@ static void __show_regs(struct pt_regs *
+ 
+ 	printk("NIP:  "REG" LR: "REG" CTR: "REG"\n",
+ 	       regs->nip, regs->link, regs->ctr);
+-	printk("REGS: %px TRAP: %04lx   %s  (%s)\n",
+-	       regs, regs->trap, print_tainted(), init_utsname()->release);
++	printk("REGS: %px TRAP: %04lx   %s  (%s%s)\n",
++	       regs, regs->trap, print_tainted(), init_utsname()->release,
++	       LINUX_PACKAGE_ID);
+ 	printk("MSR:  "REG" ", regs->msr);
+ 	print_msr_bits(regs->msr);
+ 	pr_cont("  CR: %08lx  XER: %08lx\n", regs->ccr, regs->xer);
+Index: linux/arch/x86/um/sysrq_64.c
+===================================================================
+--- linux.orig/arch/x86/um/sysrq_64.c
++++ linux/arch/x86/um/sysrq_64.c
+@@ -9,6 +9,7 @@
+ #include <linux/sched.h>
+ #include <linux/sched/debug.h>
+ #include <linux/utsname.h>
++#include <generated/package.h>
+ #include <asm/current.h>
+ #include <asm/ptrace.h>
+ #include <asm/sysrq.h>
+@@ -17,8 +18,9 @@ void show_regs(struct pt_regs *regs)
+ {
+ 	printk("\n");
+ 	print_modules();
+-	printk(KERN_INFO "Pid: %d, comm: %.20s %s %s\n", task_pid_nr(current),
+-		current->comm, print_tainted(), init_utsname()->release);
++	printk(KERN_INFO "Pid: %d, comm: %.20s %s %s%s\n", task_pid_nr(current),
++		current->comm, print_tainted(), init_utsname()->release,
++		LINUX_PACKAGE_ID);
+ 	printk(KERN_INFO "RIP: %04lx:[<%016lx>]\n", PT_REGS_CS(regs) & 0xffff,
+ 	       PT_REGS_IP(regs));
+ 	printk(KERN_INFO "RSP: %016lx  EFLAGS: %08lx\n", PT_REGS_SP(regs),
+Index: linux/kernel/hung_task.c
+===================================================================
+--- linux.orig/kernel/hung_task.c
++++ linux/kernel/hung_task.c
+@@ -24,6 +24,7 @@
+ #include <linux/sched/sysctl.h>
+ 
+ #include <trace/events/sched.h>
++#include <generated/package.h>
+ 
+ /*
+  * The number of tasks checked:
+@@ -129,10 +130,11 @@ static void check_hung_task(struct task_
+ 			sysctl_hung_task_warnings--;
+ 		pr_err("INFO: task %s:%d blocked for more than %ld seconds.\n",
+ 		       t->comm, t->pid, (jiffies - t->last_switch_time) / HZ);
+-		pr_err("      %s %s %.*s\n",
++		pr_err("      %s %s %.*s%s\n",
+ 			print_tainted(), init_utsname()->release,
+ 			(int)strcspn(init_utsname()->version, " "),
+-			init_utsname()->version);
++			init_utsname()->version,
++			LINUX_PACKAGE_ID);
+ 		pr_err("\"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\""
+ 			" disables this message.\n");
+ 		sched_show_task(t);
+Index: linux/lib/dump_stack.c
+===================================================================
+--- linux.orig/lib/dump_stack.c
++++ linux/lib/dump_stack.c
+@@ -14,6 +14,7 @@
+ #include <linux/kexec.h>
+ #include <linux/utsname.h>
+ #include <linux/stop_machine.h>
++#include <generated/package.h>
+ 
+ static char dump_stack_arch_desc_str[128];
+ 
+@@ -54,13 +55,15 @@ void __init dump_stack_set_arch_desc(con
+  */
+ void dump_stack_print_info(const char *log_lvl)
+ {
+-	printk("%sCPU: %d PID: %d Comm: %.20s %s%s %s %.*s" BUILD_ID_FMT "\n",
++	printk("%sCPU: %d PID: %d Comm: %.20s %s%s %s %.*s %s" BUILD_ID_FMT "\n",
+ 	       log_lvl, raw_smp_processor_id(), current->pid, current->comm,
+ 	       kexec_crash_loaded() ? "Kdump: loaded " : "",
+ 	       print_tainted(),
+ 	       init_utsname()->release,
+ 	       (int)strcspn(init_utsname()->version, " "),
+-	       init_utsname()->version, BUILD_ID_VAL);
++	       init_utsname()->version,
++	       LINUX_PACKAGE_ID,
++	       BUILD_ID_VAL);
+ 
+ 	if (dump_stack_arch_desc_str[0] != '\0')
+ 		printk("%sHardware name: %s\n",
diff --git a/debian/patches/debian/wireless-add-debian-wireless-regdb-certificates.patch b/debian/patches/debian/wireless-add-debian-wireless-regdb-certificates.patch
new file mode 100644
index 000000000000..edbf8657f444
--- /dev/null
+++ b/debian/patches/debian/wireless-add-debian-wireless-regdb-certificates.patch
@@ -0,0 +1,1452 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Fri, 13 Apr 2018 20:10:28 +0100
+Subject: wireless: Add Debian wireless-regdb certificates
+Forwarded: not-needed
+
+This hex dump is generated using:
+
+{
+    for cert in debian/certs/wireless-regdb-*.pem; do
+        openssl x509 -in $cert -outform der;
+    done
+} | hexdump -v -e '1/1 "0x%.2x," "\n"' > net/wireless/certs/debian.hex
+---
+ net/wireless/certs/debian.hex | 1426 +++++++++++++++++++++++++++++++++
+ 1 file changed, 1426 insertions(+)
+ create mode 100644 net/wireless/certs/debian.hex
+
+diff --git a/net/wireless/certs/debian.hex b/net/wireless/certs/debian.hex
+new file mode 100644
+index 000000000000..c5ab03f8c500
+--- /dev/null
++++ b/net/wireless/certs/debian.hex
+@@ -0,0 +1,1426 @@
++0x30,
++0x82,
++0x02,
++0xbd,
++0x30,
++0x82,
++0x01,
++0xa5,
++0x02,
++0x14,
++0x57,
++0x7e,
++0x02,
++0x1c,
++0xb9,
++0x80,
++0xe0,
++0xe8,
++0x20,
++0x82,
++0x1b,
++0xa7,
++0xb5,
++0x4b,
++0x49,
++0x61,
++0xb8,
++0xb4,
++0xfa,
++0xdf,
++0x30,
++0x0d,
++0x06,
++0x09,
++0x2a,
++0x86,
++0x48,
++0x86,
++0xf7,
++0x0d,
++0x01,
++0x01,
++0x0b,
++0x05,
++0x00,
++0x30,
++0x1a,
++0x31,
++0x18,
++0x30,
++0x16,
++0x06,
++0x03,
++0x55,
++0x04,
++0x03,
++0x0c,
++0x0f,
++0x62,
++0x65,
++0x6e,
++0x68,
++0x40,
++0x64,
++0x65,
++0x62,
++0x69,
++0x61,
++0x6e,
++0x2e,
++0x6f,
++0x72,
++0x67,
++0x30,
++0x20,
++0x17,
++0x0d,
++0x32,
++0x30,
++0x30,
++0x31,
++0x33,
++0x30,
++0x31,
++0x33,
++0x32,
++0x36,
++0x31,
++0x33,
++0x5a,
++0x18,
++0x0f,
++0x32,
++0x31,
++0x32,
++0x30,
++0x30,
++0x31,
++0x30,
++0x36,
++0x31,
++0x33,
++0x32,
++0x36,
++0x31,
++0x33,
++0x5a,
++0x30,
++0x1a,
++0x31,
++0x18,
++0x30,
++0x16,
++0x06,
++0x03,
++0x55,
++0x04,
++0x03,
++0x0c,
++0x0f,
++0x62,
++0x65,
++0x6e,
++0x68,
++0x40,
++0x64,
++0x65,
++0x62,
++0x69,
++0x61,
++0x6e,
++0x2e,
++0x6f,
++0x72,
++0x67,
++0x30,
++0x82,
++0x01,
++0x22,
++0x30,
++0x0d,
++0x06,
++0x09,
++0x2a,
++0x86,
++0x48,
++0x86,
++0xf7,
++0x0d,
++0x01,
++0x01,
++0x01,
++0x05,
++0x00,
++0x03,
++0x82,
++0x01,
++0x0f,
++0x00,
++0x30,
++0x82,
++0x01,
++0x0a,
++0x02,
++0x82,
++0x01,
++0x01,
++0x00,
++0x9d,
++0xe1,
++0x77,
++0xa0,
++0x24,
++0xa0,
++0xd5,
++0x79,
++0x65,
++0x3a,
++0x07,
++0x90,
++0xc9,
++0xf6,
++0xa5,
++0xa6,
++0x1f,
++0x84,
++0x1c,
++0x23,
++0x07,
++0x4b,
++0x4f,
++0xa5,
++0x03,
++0xc6,
++0x0f,
++0xf7,
++0x54,
++0xd5,
++0x8b,
++0x7e,
++0x79,
++0x81,
++0x00,
++0xd2,
++0xe9,
++0x3d,
++0xf4,
++0x97,
++0xfe,
++0x84,
++0xcd,
++0x55,
++0xbd,
++0xc9,
++0x8f,
++0x21,
++0x57,
++0x88,
++0x06,
++0x39,
++0x90,
++0x66,
++0x41,
++0x26,
++0x79,
++0x2c,
++0xca,
++0x3f,
++0x95,
++0x87,
++0x01,
++0x11,
++0x2f,
++0x2f,
++0xb0,
++0xe1,
++0x0b,
++0x43,
++0xfc,
++0x5f,
++0x2f,
++0x4f,
++0x67,
++0x04,
++0xdb,
++0x4d,
++0xb7,
++0x72,
++0x4d,
++0xd1,
++0xc5,
++0x76,
++0x73,
++0x4d,
++0x91,
++0x69,
++0xb0,
++0x71,
++0x17,
++0x36,
++0xea,
++0xab,
++0x0a,
++0x3a,
++0xcd,
++0x95,
++0x9b,
++0x76,
++0x1b,
++0x8e,
++0x21,
++0x17,
++0x8f,
++0xc5,
++0x02,
++0xbf,
++0x24,
++0xc7,
++0xc0,
++0x40,
++0xb1,
++0x3b,
++0xc4,
++0x80,
++0x7c,
++0x71,
++0xa5,
++0x51,
++0xdc,
++0xf7,
++0x3a,
++0x58,
++0x7f,
++0xb1,
++0x07,
++0x81,
++0x8a,
++0x10,
++0xd1,
++0xf6,
++0x93,
++0x17,
++0x71,
++0xe0,
++0xfa,
++0x51,
++0x79,
++0x15,
++0xd4,
++0xd7,
++0x8f,
++0xad,
++0xbd,
++0x6f,
++0x38,
++0xe1,
++0x26,
++0x7d,
++0xbc,
++0xf0,
++0x3e,
++0x80,
++0x89,
++0xb4,
++0xec,
++0x8e,
++0x69,
++0x90,
++0xdb,
++0x97,
++0x8a,
++0xf0,
++0x23,
++0x23,
++0x83,
++0x82,
++0x3b,
++0x6a,
++0xb1,
++0xac,
++0xeb,
++0xe7,
++0x99,
++0x74,
++0x2a,
++0x35,
++0x8e,
++0xa9,
++0x64,
++0xfd,
++0x46,
++0x9e,
++0xe8,
++0xe5,
++0x48,
++0x61,
++0x31,
++0x6e,
++0xe6,
++0xfc,
++0x19,
++0x18,
++0x54,
++0xc3,
++0x1b,
++0x4f,
++0xd6,
++0x00,
++0x44,
++0x87,
++0x1c,
++0x37,
++0x45,
++0xea,
++0xf5,
++0xc9,
++0xcb,
++0x0f,
++0x0c,
++0x55,
++0xec,
++0xcf,
++0x6a,
++0xc2,
++0x45,
++0x26,
++0x23,
++0xa2,
++0x31,
++0x52,
++0x4d,
++0xee,
++0x21,
++0x7d,
++0xfd,
++0x58,
++0x72,
++0xc2,
++0x28,
++0xc5,
++0x8e,
++0xa9,
++0xd0,
++0xee,
++0x01,
++0x77,
++0x08,
++0xa5,
++0xf0,
++0x22,
++0x2b,
++0x47,
++0x79,
++0x2b,
++0xcf,
++0x9a,
++0x46,
++0xb5,
++0x8f,
++0xfd,
++0x64,
++0xa2,
++0xb5,
++0xed,
++0x02,
++0x03,
++0x01,
++0x00,
++0x01,
++0x30,
++0x0d,
++0x06,
++0x09,
++0x2a,
++0x86,
++0x48,
++0x86,
++0xf7,
++0x0d,
++0x01,
++0x01,
++0x0b,
++0x05,
++0x00,
++0x03,
++0x82,
++0x01,
++0x01,
++0x00,
++0x20,
++0x44,
++0xfe,
++0xa9,
++0x9e,
++0xdd,
++0x9b,
++0xea,
++0xce,
++0x25,
++0x75,
++0x08,
++0xf0,
++0x2b,
++0x53,
++0xf7,
++0x5a,
++0x36,
++0x1c,
++0x4a,
++0x23,
++0x7f,
++0xd0,
++0x41,
++0x3c,
++0x12,
++0x2b,
++0xb9,
++0x80,
++0x4e,
++0x8a,
++0x15,
++0x5d,
++0x1f,
++0x40,
++0xa7,
++0x26,
++0x28,
++0x32,
++0xc3,
++0x5b,
++0x06,
++0x28,
++0x2d,
++0x3d,
++0x08,
++0x09,
++0x1e,
++0x01,
++0xe9,
++0x67,
++0xe3,
++0x33,
++0xe6,
++0x15,
++0x45,
++0x39,
++0xee,
++0x17,
++0x83,
++0xdb,
++0x42,
++0xff,
++0x7f,
++0x35,
++0xf4,
++0xac,
++0x16,
++0xdb,
++0xba,
++0xb8,
++0x1a,
++0x20,
++0x21,
++0x41,
++0xff,
++0xf3,
++0x92,
++0xff,
++0x65,
++0x6e,
++0x29,
++0x16,
++0xd0,
++0xbf,
++0x8d,
++0xdf,
++0x48,
++0x2c,
++0x73,
++0x36,
++0x7f,
++0x22,
++0xe6,
++0xee,
++0x78,
++0xb4,
++0x63,
++0x83,
++0x0e,
++0x39,
++0xeb,
++0xaf,
++0x10,
++0x2a,
++0x90,
++0xd3,
++0xfc,
++0xe6,
++0xc3,
++0x8f,
++0x97,
++0x5b,
++0x76,
++0xbf,
++0x9b,
++0xf5,
++0x98,
++0xd2,
++0x53,
++0x06,
++0x8b,
++0xf8,
++0xa4,
++0x04,
++0x9b,
++0x1b,
++0x62,
++0x6a,
++0x9d,
++0xac,
++0xe6,
++0x4b,
++0x0d,
++0xc9,
++0xd7,
++0x56,
++0x63,
++0x15,
++0x01,
++0x38,
++0x8c,
++0xbe,
++0xf1,
++0x44,
++0xc4,
++0x38,
++0x27,
++0xe0,
++0xcf,
++0x72,
++0xd6,
++0x3d,
++0xe4,
++0xf7,
++0x4b,
++0x3b,
++0xd2,
++0xb1,
++0x0c,
++0xd5,
++0x83,
++0x6d,
++0x1e,
++0x10,
++0x04,
++0x69,
++0x29,
++0x88,
++0x69,
++0xe0,
++0x7d,
++0xd7,
++0xdb,
++0xb4,
++0x59,
++0x72,
++0x8d,
++0x9d,
++0x3c,
++0x43,
++0xaf,
++0xc6,
++0x7d,
++0xb7,
++0x21,
++0x15,
++0x52,
++0x8a,
++0xe9,
++0x9b,
++0x6b,
++0x2e,
++0xe8,
++0x27,
++0x3c,
++0x3f,
++0x2d,
++0x84,
++0xfb,
++0x9a,
++0x22,
++0x0a,
++0x9f,
++0x6a,
++0x25,
++0xe6,
++0x39,
++0xe4,
++0x74,
++0x73,
++0xb6,
++0x2a,
++0x70,
++0xaa,
++0x1d,
++0xcb,
++0xcc,
++0xd4,
++0xa0,
++0x1b,
++0x26,
++0x71,
++0x63,
++0x04,
++0xc5,
++0x12,
++0x21,
++0x48,
++0xba,
++0x92,
++0x27,
++0x06,
++0xa8,
++0x3e,
++0x6d,
++0xa1,
++0x43,
++0xa5,
++0xd2,
++0x2a,
++0xf7,
++0xca,
++0xc4,
++0x26,
++0xe8,
++0x5b,
++0x1f,
++0xe4,
++0xdc,
++0x89,
++0xdc,
++0x1f,
++0x04,
++0x79,
++0x3f,
++0x30,
++0x82,
++0x02,
++0xcd,
++0x30,
++0x82,
++0x01,
++0xb5,
++0x02,
++0x14,
++0x3a,
++0xbb,
++0xc6,
++0xec,
++0x14,
++0x6e,
++0x09,
++0xd1,
++0xb6,
++0x01,
++0x6a,
++0xb9,
++0xd6,
++0xcf,
++0x71,
++0xdd,
++0x23,
++0x3f,
++0x03,
++0x28,
++0x30,
++0x0d,
++0x06,
++0x09,
++0x2a,
++0x86,
++0x48,
++0x86,
++0xf7,
++0x0d,
++0x01,
++0x01,
++0x0b,
++0x05,
++0x00,
++0x30,
++0x22,
++0x31,
++0x20,
++0x30,
++0x1e,
++0x06,
++0x03,
++0x55,
++0x04,
++0x03,
++0x0c,
++0x17,
++0x72,
++0x6f,
++0x6d,
++0x61,
++0x69,
++0x6e,
++0x2e,
++0x70,
++0x65,
++0x72,
++0x69,
++0x65,
++0x72,
++0x40,
++0x67,
++0x6d,
++0x61,
++0x69,
++0x6c,
++0x2e,
++0x63,
++0x6f,
++0x6d,
++0x30,
++0x20,
++0x17,
++0x0d,
++0x32,
++0x30,
++0x30,
++0x32,
++0x32,
++0x34,
++0x31,
++0x39,
++0x30,
++0x31,
++0x34,
++0x34,
++0x5a,
++0x18,
++0x0f,
++0x32,
++0x31,
++0x32,
++0x30,
++0x30,
++0x31,
++0x33,
++0x31,
++0x31,
++0x39,
++0x30,
++0x31,
++0x34,
++0x34,
++0x5a,
++0x30,
++0x22,
++0x31,
++0x20,
++0x30,
++0x1e,
++0x06,
++0x03,
++0x55,
++0x04,
++0x03,
++0x0c,
++0x17,
++0x72,
++0x6f,
++0x6d,
++0x61,
++0x69,
++0x6e,
++0x2e,
++0x70,
++0x65,
++0x72,
++0x69,
++0x65,
++0x72,
++0x40,
++0x67,
++0x6d,
++0x61,
++0x69,
++0x6c,
++0x2e,
++0x63,
++0x6f,
++0x6d,
++0x30,
++0x82,
++0x01,
++0x22,
++0x30,
++0x0d,
++0x06,
++0x09,
++0x2a,
++0x86,
++0x48,
++0x86,
++0xf7,
++0x0d,
++0x01,
++0x01,
++0x01,
++0x05,
++0x00,
++0x03,
++0x82,
++0x01,
++0x0f,
++0x00,
++0x30,
++0x82,
++0x01,
++0x0a,
++0x02,
++0x82,
++0x01,
++0x01,
++0x00,
++0xf0,
++0xb8,
++0x4f,
++0x3f,
++0x70,
++0x78,
++0xf8,
++0x74,
++0x45,
++0xa2,
++0x28,
++0xaf,
++0x04,
++0x75,
++0x04,
++0xa3,
++0xf3,
++0xa7,
++0xc7,
++0x04,
++0xac,
++0xb6,
++0xe1,
++0xfc,
++0xe1,
++0xc0,
++0x3d,
++0xe0,
++0x26,
++0x90,
++0x8a,
++0x45,
++0x60,
++0xc4,
++0x75,
++0xf3,
++0x1a,
++0x33,
++0x37,
++0x56,
++0x7d,
++0x30,
++0x07,
++0x75,
++0x0e,
++0xa6,
++0x79,
++0x06,
++0x95,
++0x9d,
++0x17,
++0x3c,
++0x09,
++0xa9,
++0x7f,
++0xab,
++0x95,
++0x5d,
++0xed,
++0xe0,
++0x75,
++0x26,
++0x2f,
++0x65,
++0x65,
++0xcd,
++0x61,
++0xb1,
++0x33,
++0x27,
++0x67,
++0x41,
++0xa1,
++0x01,
++0x13,
++0xe9,
++0x13,
++0x6a,
++0x6d,
++0x4e,
++0x98,
++0xe1,
++0x9e,
++0x7b,
++0x0b,
++0x5b,
++0x44,
++0xef,
++0x68,
++0x5a,
++0x6f,
++0x7d,
++0x97,
++0xa1,
++0x33,
++0x22,
++0x97,
++0x12,
++0x21,
++0x09,
++0x8f,
++0x90,
++0xe0,
++0x25,
++0x94,
++0xdd,
++0x8a,
++0x3a,
++0xf7,
++0x4a,
++0x60,
++0x04,
++0x26,
++0x6d,
++0x00,
++0x82,
++0xe4,
++0xcf,
++0x64,
++0x1c,
++0x79,
++0x15,
++0x24,
++0xf2,
++0x42,
++0x86,
++0xf5,
++0x10,
++0x86,
++0xac,
++0x20,
++0x88,
++0x90,
++0x87,
++0xdf,
++0x8c,
++0x37,
++0x7c,
++0xbf,
++0x35,
++0xd5,
++0x6f,
++0x9f,
++0x77,
++0xc3,
++0xcd,
++0x69,
++0x25,
++0x06,
++0xc2,
++0x65,
++0x51,
++0x71,
++0x89,
++0x7f,
++0x6e,
++0x4d,
++0xe5,
++0xd5,
++0x8a,
++0x36,
++0x1a,
++0xad,
++0xc1,
++0x18,
++0xd6,
++0x14,
++0x42,
++0x87,
++0xf0,
++0x93,
++0x83,
++0xf1,
++0x99,
++0x74,
++0xc4,
++0x13,
++0xaa,
++0x3b,
++0x66,
++0x85,
++0x6f,
++0xe0,
++0xbc,
++0x5f,
++0xb6,
++0x40,
++0xa6,
++0x41,
++0x06,
++0x0a,
++0xba,
++0x0e,
++0xe9,
++0x32,
++0x44,
++0x10,
++0x39,
++0x53,
++0xcd,
++0xbf,
++0xf3,
++0xd3,
++0x26,
++0xf6,
++0xb6,
++0x2b,
++0x40,
++0x2e,
++0xb9,
++0x88,
++0xc1,
++0xf4,
++0xe3,
++0xa0,
++0x28,
++0x77,
++0x4f,
++0xba,
++0xa8,
++0xca,
++0x9c,
++0x05,
++0xba,
++0x88,
++0x96,
++0x99,
++0x54,
++0x89,
++0xa2,
++0x8d,
++0xf3,
++0x73,
++0xa1,
++0x8c,
++0x4a,
++0xa8,
++0x71,
++0xee,
++0x2e,
++0xd2,
++0x83,
++0x14,
++0x48,
++0xbd,
++0x98,
++0xc6,
++0xce,
++0xdc,
++0xa8,
++0xa3,
++0x97,
++0x2e,
++0x40,
++0x16,
++0x2f,
++0x02,
++0x03,
++0x01,
++0x00,
++0x01,
++0x30,
++0x0d,
++0x06,
++0x09,
++0x2a,
++0x86,
++0x48,
++0x86,
++0xf7,
++0x0d,
++0x01,
++0x01,
++0x0b,
++0x05,
++0x00,
++0x03,
++0x82,
++0x01,
++0x01,
++0x00,
++0x76,
++0x5d,
++0x03,
++0x3d,
++0xb6,
++0x96,
++0x00,
++0x1b,
++0x6e,
++0x0c,
++0xdd,
++0xbb,
++0xc8,
++0xdf,
++0xbc,
++0xeb,
++0x6c,
++0x01,
++0x40,
++0x1a,
++0x2b,
++0x07,
++0x60,
++0xa1,
++0x1a,
++0xe1,
++0x43,
++0x57,
++0xfa,
++0xbe,
++0xde,
++0xbb,
++0x8f,
++0x73,
++0xf3,
++0x92,
++0xa2,
++0xaa,
++0x83,
++0x01,
++0xc1,
++0x17,
++0xe4,
++0x9d,
++0x09,
++0x41,
++0xe0,
++0x32,
++0x33,
++0x97,
++0x4b,
++0xf2,
++0xdc,
++0x0f,
++0x8b,
++0xa8,
++0xb8,
++0x5a,
++0x04,
++0x86,
++0xf6,
++0x71,
++0xa1,
++0x97,
++0xd0,
++0x54,
++0x56,
++0x10,
++0x8e,
++0x54,
++0x99,
++0x0d,
++0x2a,
++0xa9,
++0xaf,
++0x1b,
++0x55,
++0x59,
++0x06,
++0x2b,
++0xa4,
++0x5f,
++0xb1,
++0x54,
++0xa6,
++0xec,
++0xc7,
++0xd6,
++0x43,
++0xee,
++0x86,
++0x2c,
++0x9b,
++0x18,
++0x9d,
++0x8f,
++0x00,
++0x82,
++0xc1,
++0x88,
++0x61,
++0x16,
++0x85,
++0x3c,
++0x17,
++0x56,
++0xfe,
++0x6a,
++0xa0,
++0x7a,
++0x68,
++0xc5,
++0x7b,
++0x3d,
++0x3c,
++0xb6,
++0x13,
++0x18,
++0x99,
++0x6d,
++0x74,
++0x65,
++0x13,
++0x67,
++0xb7,
++0xfc,
++0x5a,
++0x44,
++0x48,
++0x72,
++0xa0,
++0x73,
++0xb8,
++0xff,
++0x02,
++0x9d,
++0x7c,
++0x5b,
++0xf9,
++0x7c,
++0x75,
++0x0a,
++0x3c,
++0x81,
++0x80,
++0x3c,
++0x41,
++0xf2,
++0xd5,
++0xfa,
++0x3d,
++0x1f,
++0xe3,
++0xda,
++0x8c,
++0xa5,
++0x17,
++0x1f,
++0x53,
++0x1a,
++0x75,
++0xad,
++0x4e,
++0x11,
++0x1c,
++0x07,
++0xec,
++0x0a,
++0x69,
++0xfd,
++0x33,
++0xfa,
++0x32,
++0x7e,
++0x66,
++0xf5,
++0x29,
++0xe8,
++0x4d,
++0x8a,
++0xfa,
++0x0d,
++0x4b,
++0x68,
++0xc3,
++0x95,
++0x11,
++0xba,
++0x6f,
++0x1e,
++0x07,
++0x8c,
++0x85,
++0xc7,
++0xc7,
++0xc9,
++0xc1,
++0x30,
++0xa3,
++0x70,
++0xb0,
++0xa1,
++0xe0,
++0xd5,
++0x85,
++0x15,
++0x94,
++0x77,
++0xc1,
++0x1c,
++0x91,
++0xf1,
++0x5f,
++0x50,
++0xcd,
++0x2c,
++0x57,
++0x4b,
++0x22,
++0x4f,
++0xee,
++0x95,
++0xd7,
++0xa7,
++0xa4,
++0x59,
++0x62,
++0xae,
++0xb9,
++0xbf,
++0xd7,
++0x63,
++0x5a,
++0x04,
++0xfc,
++0x24,
++0x11,
++0xae,
++0x34,
++0x4b,
++0xf4,
++0x0c,
++0x9f,
++0x0b,
++0x59,
++0x7d,
++0x27,
++0x39,
++0x54,
++0x69,
++0x4f,
++0xfd,
++0x6e,
++0x44,
++0x9f,
++0x21,
+-- 
+2.25.1
+
diff --git a/debian/patches/debian/yama-disable-by-default.patch b/debian/patches/debian/yama-disable-by-default.patch
new file mode 100644
index 000000000000..c33ac0c9d6cc
--- /dev/null
+++ b/debian/patches/debian/yama-disable-by-default.patch
@@ -0,0 +1,32 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Subject: yama: Disable by default
+Date: Wed, 19 Jun 2013 04:35:28 +0100
+Bug-Debian: https://bugs.debian.org/712740
+Forwarded: not-needed
+
+---
+ security/yama/yama_lsm.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/security/yama/yama_lsm.c b/security/yama/yama_lsm.c
+index efac68556b45..95ff3e778a17 100644
+--- a/security/yama/yama_lsm.c
++++ b/security/yama/yama_lsm.c
+@@ -28,7 +28,7 @@
+ #define YAMA_SCOPE_CAPABILITY	2
+ #define YAMA_SCOPE_NO_ATTACH	3
+ 
+-static int ptrace_scope = YAMA_SCOPE_RELATIONAL;
++static int ptrace_scope = YAMA_SCOPE_DISABLED;
+ 
+ /* describe a ptrace relationship for potential exception */
+ struct ptrace_relation {
+@@ -481,7 +481,7 @@ static inline void yama_init_sysctl(void) { }
+ 
+ static int __init yama_init(void)
+ {
+-	pr_info("Yama: becoming mindful.\n");
++	pr_info("Yama: disabled by default; enable with sysctl kernel.yama.*\n");
+ 	security_add_hooks(yama_hooks, ARRAY_SIZE(yama_hooks), "yama");
+ 	yama_init_sysctl();
+ 	return 0;
diff --git a/debian/patches/features/all/aufs5/aufs5-base.patch b/debian/patches/features/all/aufs5/aufs5-base.patch
new file mode 100644
index 000000000000..60f24b56b151
--- /dev/null
+++ b/debian/patches/features/all/aufs5/aufs5-base.patch
@@ -0,0 +1,332 @@
+From: J. R. Okajima <hooanon05@yahoo.co.jp>
+Date: Tue Apr 7 22:14:47 2020 +0900
+Subject: aufs5.6 base patch
+Origin: https://github.com/sfjro/aufs5-standalone/tree/7c07d9737e9de058981f020d66ac0d4407a80899
+Bug-Debian: https://bugs.debian.org/541828
+
+Patch headers added by debian/bin/genpatch-aufs
+
+SPDX-License-Identifier: GPL-2.0
+aufs5.6 base patch
+
+diff --git a/MAINTAINERS b/MAINTAINERS
+index b4a43a9e7fbc..32f7c8c48001 100644
+--- a/MAINTAINERS
++++ b/MAINTAINERS
+@@ -2984,6 +2984,19 @@ F:	include/linux/audit.h
+ F:	include/uapi/linux/audit.h
+ F:	kernel/audit*
+ 
++AUFS (advanced multi layered unification filesystem) FILESYSTEM
++M:	"J. R. Okajima" <hooanon05g@gmail.com>
++L:	aufs-users@lists.sourceforge.net (members only)
++L:	linux-unionfs@vger.kernel.org
++W:	http://aufs.sourceforge.net
++T:	git://github.com/sfjro/aufs4-linux.git
++S:	Supported
++F:	Documentation/filesystems/aufs/
++F:	Documentation/ABI/testing/debugfs-aufs
++F:	Documentation/ABI/testing/sysfs-aufs
++F:	fs/aufs/
++F:	include/uapi/linux/aufs_type.h
++
+ AUXILIARY DISPLAY DRIVERS
+ M:	Miguel Ojeda Sandonis <miguel.ojeda.sandonis@gmail.com>
+ S:	Maintained
+diff --git a/drivers/block/loop.c b/drivers/block/loop.c
+index 475e1a738560..8d77e68aa52b 100644
+--- a/drivers/block/loop.c
++++ b/drivers/block/loop.c
+@@ -763,6 +763,24 @@ static int loop_change_fd(struct loop_device *lo, struct block_device *bdev,
+ 	return error;
+ }
+ 
++/*
++ * for AUFS
++ * no get/put for file.
++ */
++struct file *loop_backing_file(struct super_block *sb)
++{
++	struct file *ret;
++	struct loop_device *l;
++
++	ret = NULL;
++	if (MAJOR(sb->s_dev) == LOOP_MAJOR) {
++		l = sb->s_bdev->bd_disk->private_data;
++		ret = l->lo_backing_file;
++	}
++	return ret;
++}
++EXPORT_SYMBOL_GPL(loop_backing_file);
++
+ /* loop sysfs attributes */
+ 
+ static ssize_t loop_attr_show(struct device *dev, char *page,
+diff --git a/fs/dcache.c b/fs/dcache.c
+index 361ea7ab30ea..3cd36474f302 100644
+--- a/fs/dcache.c
++++ b/fs/dcache.c
+@@ -1285,7 +1285,7 @@ enum d_walk_ret {
+  *
+  * The @enter() callbacks are called with d_lock held.
+  */
+-static void d_walk(struct dentry *parent, void *data,
++void d_walk(struct dentry *parent, void *data,
+ 		   enum d_walk_ret (*enter)(void *, struct dentry *))
+ {
+ 	struct dentry *this_parent;
+diff --git a/fs/fcntl.c b/fs/fcntl.c
+index 2e4c0fa2074b..0b28a37f7e50 100644
+--- a/fs/fcntl.c
++++ b/fs/fcntl.c
+@@ -32,7 +32,7 @@
+ 
+ #define SETFL_MASK (O_APPEND | O_NONBLOCK | O_NDELAY | O_DIRECT | O_NOATIME)
+ 
+-static int setfl(int fd, struct file * filp, unsigned long arg)
++int setfl(int fd, struct file *filp, unsigned long arg)
+ {
+ 	struct inode * inode = file_inode(filp);
+ 	int error = 0;
+@@ -63,6 +63,8 @@ static int setfl(int fd, struct file * filp, unsigned long arg)
+ 
+ 	if (filp->f_op->check_flags)
+ 		error = filp->f_op->check_flags(arg);
++	if (!error && filp->f_op->setfl)
++		error = filp->f_op->setfl(filp, arg);
+ 	if (error)
+ 		return error;
+ 
+diff --git a/fs/inode.c b/fs/inode.c
+index 72c4c347afb7..a7ff2099c2ef 100644
+--- a/fs/inode.c
++++ b/fs/inode.c
+@@ -1768,7 +1768,7 @@ EXPORT_SYMBOL(generic_update_time);
+  * This does the actual work of updating an inodes time or version.  Must have
+  * had called mnt_want_write() before calling this.
+  */
+-static int update_time(struct inode *inode, struct timespec64 *time, int flags)
++int update_time(struct inode *inode, struct timespec64 *time, int flags)
+ {
+ 	if (inode->i_op->update_time)
+ 		return inode->i_op->update_time(inode, time, flags);
+diff --git a/fs/namespace.c b/fs/namespace.c
+index f30ed401cc6d..8ddebaf7ad57 100644
+--- a/fs/namespace.c
++++ b/fs/namespace.c
+@@ -792,6 +792,12 @@ static inline int check_mnt(struct mount *mnt)
+ 	return mnt->mnt_ns == current->nsproxy->mnt_ns;
+ }
+ 
++/* for aufs, CONFIG_AUFS_BR_FUSE */
++int is_current_mnt_ns(struct vfsmount *mnt)
++{
++	return check_mnt(real_mount(mnt));
++}
++
+ /*
+  * vfsmount lock must be held for write
+  */
+diff --git a/fs/read_write.c b/fs/read_write.c
+index 4fb797822567..744831cd0094 100644
+--- a/fs/read_write.c
++++ b/fs/read_write.c
+@@ -507,6 +507,28 @@ static ssize_t new_sync_write(struct file *filp, const char __user *buf, size_t
+ 	return ret;
+ }
+ 
++vfs_readf_t vfs_readf(struct file *file)
++{
++	const struct file_operations *fop = file->f_op;
++
++	if (fop->read)
++		return fop->read;
++	if (fop->read_iter)
++		return new_sync_read;
++	return ERR_PTR(-ENOSYS); /* doesn't have ->read(|_iter)() op */
++}
++
++vfs_writef_t vfs_writef(struct file *file)
++{
++	const struct file_operations *fop = file->f_op;
++
++	if (fop->write)
++		return fop->write;
++	if (fop->write_iter)
++		return new_sync_write;
++	return ERR_PTR(-ENOSYS); /* doesn't have ->write(|_iter)() op */
++}
++
+ /* caller is responsible for file_start_write/file_end_write */
+ ssize_t __kernel_write(struct file *file, const void *buf, size_t count, loff_t *pos)
+ {
+diff --git a/fs/splice.c b/fs/splice.c
+index d7c8a7c4db07..f0b625e27554 100644
+--- a/fs/splice.c
++++ b/fs/splice.c
+@@ -839,8 +839,8 @@ EXPORT_SYMBOL(generic_splice_sendpage);
+ /*
+  * Attempt to initiate a splice from pipe to file.
+  */
+-static long do_splice_from(struct pipe_inode_info *pipe, struct file *out,
+-			   loff_t *ppos, size_t len, unsigned int flags)
++long do_splice_from(struct pipe_inode_info *pipe, struct file *out,
++		    loff_t *ppos, size_t len, unsigned int flags)
+ {
+ 	if (out->f_op->splice_write)
+ 		return out->f_op->splice_write(pipe, out, ppos, len, flags);
+@@ -850,9 +850,9 @@ static long do_splice_from(struct pipe_inode_info *pipe, struct file *out,
+ /*
+  * Attempt to initiate a splice from a file to a pipe.
+  */
+-static long do_splice_to(struct file *in, loff_t *ppos,
+-			 struct pipe_inode_info *pipe, size_t len,
+-			 unsigned int flags)
++long do_splice_to(struct file *in, loff_t *ppos,
++		  struct pipe_inode_info *pipe, size_t len,
++		  unsigned int flags)
+ {
+ 	int ret;
+ 
+diff --git a/fs/sync.c b/fs/sync.c
+index 1373a610dc78..b7b5a0a0df6f 100644
+--- a/fs/sync.c
++++ b/fs/sync.c
+@@ -28,7 +28,7 @@
+  * wait == 1 case since in that case write_inode() functions do
+  * sync_dirty_buffer() and thus effectively write one block at a time.
+  */
+-static int __sync_filesystem(struct super_block *sb, int wait)
++int __sync_filesystem(struct super_block *sb, int wait)
+ {
+ 	if (wait)
+ 		sync_inodes_sb(sb);
+diff --git a/include/linux/fs.h b/include/linux/fs.h
+index f5abba86107d..0b008da5678d 100644
+--- a/include/linux/fs.h
++++ b/include/linux/fs.h
+@@ -1360,6 +1360,7 @@ extern void fasync_free(struct fasync_struct *);
+ /* can be called from interrupts */
+ extern void kill_fasync(struct fasync_struct **, int, int);
+ 
++extern int setfl(int fd, struct file *filp, unsigned long arg);
+ extern void __f_setown(struct file *filp, struct pid *, enum pid_type, int force);
+ extern int f_setown(struct file *filp, unsigned long arg, int force);
+ extern void f_delown(struct file *filp);
+@@ -1848,6 +1849,7 @@ struct file_operations {
+ 	ssize_t (*sendpage) (struct file *, struct page *, int, size_t, loff_t *, int);
+ 	unsigned long (*get_unmapped_area)(struct file *, unsigned long, unsigned long, unsigned long, unsigned long);
+ 	int (*check_flags)(int);
++	int (*setfl)(struct file *, unsigned long);
+ 	int (*flock) (struct file *, int, struct file_lock *);
+ 	ssize_t (*splice_write)(struct pipe_inode_info *, struct file *, loff_t *, size_t, unsigned int);
+ 	ssize_t (*splice_read)(struct file *, loff_t *, struct pipe_inode_info *, size_t, unsigned int);
+@@ -1918,6 +1920,12 @@ ssize_t rw_copy_check_uvector(int type, const struct iovec __user * uvector,
+ 			      struct iovec *fast_pointer,
+ 			      struct iovec **ret_pointer);
+ 
++typedef ssize_t (*vfs_readf_t)(struct file *, char __user *, size_t, loff_t *);
++typedef ssize_t (*vfs_writef_t)(struct file *, const char __user *, size_t,
++				loff_t *);
++vfs_readf_t vfs_readf(struct file *file);
++vfs_writef_t vfs_writef(struct file *file);
++
+ extern ssize_t vfs_read(struct file *, char __user *, size_t, loff_t *);
+ extern ssize_t vfs_write(struct file *, const char __user *, size_t, loff_t *);
+ extern ssize_t vfs_readv(struct file *, const struct iovec __user *,
+@@ -2352,6 +2360,7 @@ extern int current_umask(void);
+ extern void ihold(struct inode * inode);
+ extern void iput(struct inode *);
+ extern int generic_update_time(struct inode *, struct timespec64 *, int);
++extern int update_time(struct inode *, struct timespec64 *, int);
+ 
+ /* /sys/fs */
+ extern struct kobject *fs_kobj;
+@@ -2633,6 +2642,7 @@ static inline bool sb_is_blkdev_sb(struct super_block *sb)
+ 	return false;
+ }
+ #endif
++extern int __sync_filesystem(struct super_block *, int);
+ extern int sync_filesystem(struct super_block *);
+ extern const struct file_operations def_blk_fops;
+ extern const struct file_operations def_chr_fops;
+diff --git a/include/linux/lockdep.h b/include/linux/lockdep.h
+index 8fce5c98a4b0..c1a3f172e97a 100644
+--- a/include/linux/lockdep.h
++++ b/include/linux/lockdep.h
+@@ -395,6 +395,8 @@ static inline int lockdep_match_key(struct lockdep_map *lock,
+ 	return lock->key == key;
+ }
+ 
++struct lock_class *lockdep_hlock_class(struct held_lock *hlock);
++
+ /*
+  * Acquire a lock.
+  *
+@@ -540,6 +542,7 @@ struct lockdep_map { };
+ 
+ #define lockdep_depth(tsk)	(0)
+ 
++#define lockdep_is_held(lock)			(1)
+ #define lockdep_is_held_type(l, r)		(1)
+ 
+ #define lockdep_assert_held(l)			do { (void)(l); } while (0)
+diff --git a/include/linux/mnt_namespace.h b/include/linux/mnt_namespace.h
+index 8f882f5881e8..6b9808f09843 100644
+--- a/include/linux/mnt_namespace.h
++++ b/include/linux/mnt_namespace.h
+@@ -7,12 +7,15 @@ struct mnt_namespace;
+ struct fs_struct;
+ struct user_namespace;
+ struct ns_common;
++struct vfsmount;
+ 
+ extern struct mnt_namespace *copy_mnt_ns(unsigned long, struct mnt_namespace *,
+ 		struct user_namespace *, struct fs_struct *);
+ extern void put_mnt_ns(struct mnt_namespace *ns);
+ extern struct ns_common *from_mnt_ns(struct mnt_namespace *);
+ 
++extern int is_current_mnt_ns(struct vfsmount *mnt);
++
+ extern const struct file_operations proc_mounts_operations;
+ extern const struct file_operations proc_mountinfo_operations;
+ extern const struct file_operations proc_mountstats_operations;
+diff --git a/include/linux/splice.h b/include/linux/splice.h
+index 5c47013f708e..fef6c59ed92a 100644
+--- a/include/linux/splice.h
++++ b/include/linux/splice.h
+@@ -93,4 +93,10 @@ extern void splice_shrink_spd(struct splice_pipe_desc *);
+ 
+ extern const struct pipe_buf_operations page_cache_pipe_buf_ops;
+ extern const struct pipe_buf_operations default_pipe_buf_ops;
++
++extern long do_splice_from(struct pipe_inode_info *pipe, struct file *out,
++			   loff_t *ppos, size_t len, unsigned int flags);
++extern long do_splice_to(struct file *in, loff_t *ppos,
++			 struct pipe_inode_info *pipe, size_t len,
++			 unsigned int flags);
+ #endif
+diff --git a/kernel/locking/lockdep.c b/kernel/locking/lockdep.c
+index 29a8de4c50b9..6cfff5e18c84 100644
+--- a/kernel/locking/lockdep.c
++++ b/kernel/locking/lockdep.c
+@@ -169,7 +169,7 @@ static
+ struct lock_class lock_classes[MAX_LOCKDEP_KEYS];
+ static DECLARE_BITMAP(lock_classes_in_use, MAX_LOCKDEP_KEYS);
+ 
+-static inline struct lock_class *hlock_class(struct held_lock *hlock)
++inline struct lock_class *lockdep_hlock_class(struct held_lock *hlock)
+ {
+ 	unsigned int class_idx = hlock->class_idx;
+ 
+@@ -190,6 +190,7 @@ static inline struct lock_class *hlock_class(struct held_lock *hlock)
+ 	 */
+ 	return lock_classes + class_idx;
+ }
++#define hlock_class(hlock) lockdep_hlock_class(hlock)
+ 
+ #ifdef CONFIG_LOCK_STAT
+ static DEFINE_PER_CPU(struct lock_class_stats[MAX_LOCKDEP_KEYS], cpu_lock_stats);
+-- 
+2.27.0
+
diff --git a/debian/patches/features/all/aufs5/aufs5-mmap.patch b/debian/patches/features/all/aufs5/aufs5-mmap.patch
new file mode 100644
index 000000000000..4cf1e0b2b3e5
--- /dev/null
+++ b/debian/patches/features/all/aufs5/aufs5-mmap.patch
@@ -0,0 +1,405 @@
+From: J. R. Okajima <hooanon05@yahoo.co.jp>
+Date: Tue Apr 7 22:14:47 2020 +0900
+Subject: aufs5.6 mmap patch
+Origin: https://github.com/sfjro/aufs5-standalone/tree/7c07d9737e9de058981f020d66ac0d4407a80899
+Bug-Debian: https://bugs.debian.org/541828
+
+Patch headers added by debian/bin/genpatch-aufs
+
+SPDX-License-Identifier: GPL-2.0
+aufs5.6 mmap patch
+
+Index: debian-kernel/fs/proc/base.c
+===================================================================
+--- debian-kernel.orig/fs/proc/base.c
++++ debian-kernel/fs/proc/base.c
+@@ -2170,7 +2170,7 @@ static int map_files_get_link(struct den
+ 	rc = -ENOENT;
+ 	vma = find_exact_vma(mm, vm_start, vm_end);
+ 	if (vma && vma->vm_file) {
+-		*path = vma->vm_file->f_path;
++		*path = vma_pr_or_file(vma)->f_path;
+ 		path_get(path);
+ 		rc = 0;
+ 	}
+Index: debian-kernel/fs/proc/nommu.c
+===================================================================
+--- debian-kernel.orig/fs/proc/nommu.c
++++ debian-kernel/fs/proc/nommu.c
+@@ -40,7 +40,10 @@ static int nommu_region_show(struct seq_
+ 	file = region->vm_file;
+ 
+ 	if (file) {
+-		struct inode *inode = file_inode(region->vm_file);
++		struct inode *inode;
++
++		file = vmr_pr_or_file(region);
++		inode = file_inode(file);
+ 		dev = inode->i_sb->s_dev;
+ 		ino = inode->i_ino;
+ 	}
+Index: debian-kernel/fs/proc/task_mmu.c
+===================================================================
+--- debian-kernel.orig/fs/proc/task_mmu.c
++++ debian-kernel/fs/proc/task_mmu.c
+@@ -280,7 +280,10 @@ show_map_vma(struct seq_file *m, struct
+ 	const char *name = NULL;
+ 
+ 	if (file) {
+-		struct inode *inode = file_inode(vma->vm_file);
++		struct inode *inode;
++
++		file = vma_pr_or_file(vma);
++		inode = file_inode(file);
+ 		dev = inode->i_sb->s_dev;
+ 		ino = inode->i_ino;
+ 		pgoff = ((loff_t)vma->vm_pgoff) << PAGE_SHIFT;
+@@ -1793,7 +1796,7 @@ static int show_numa_map(struct seq_file
+ 	struct proc_maps_private *proc_priv = &numa_priv->proc_maps;
+ 	struct vm_area_struct *vma = v;
+ 	struct numa_maps *md = &numa_priv->md;
+-	struct file *file = vma->vm_file;
++	struct file *file = vma_pr_or_file(vma);
+ 	struct mm_struct *mm = vma->vm_mm;
+ 	struct mempolicy *pol;
+ 	char buffer[64];
+Index: debian-kernel/fs/proc/task_nommu.c
+===================================================================
+--- debian-kernel.orig/fs/proc/task_nommu.c
++++ debian-kernel/fs/proc/task_nommu.c
+@@ -155,7 +155,10 @@ static int nommu_vma_show(struct seq_fil
+ 	file = vma->vm_file;
+ 
+ 	if (file) {
+-		struct inode *inode = file_inode(vma->vm_file);
++		struct inode *inode;
++
++		file = vma_pr_or_file(vma);
++		inode = file_inode(file);
+ 		dev = inode->i_sb->s_dev;
+ 		ino = inode->i_ino;
+ 		pgoff = (loff_t)vma->vm_pgoff << PAGE_SHIFT;
+Index: debian-kernel/include/linux/mm.h
+===================================================================
+--- debian-kernel.orig/include/linux/mm.h
++++ debian-kernel/include/linux/mm.h
+@@ -1684,6 +1684,28 @@ static inline void unmap_shared_mapping_
+ 	unmap_mapping_range(mapping, holebegin, holelen, 0);
+ }
+ 
++extern void vma_do_file_update_time(struct vm_area_struct *, const char[], int);
++extern struct file *vma_do_pr_or_file(struct vm_area_struct *, const char[],
++				      int);
++extern void vma_do_get_file(struct vm_area_struct *, const char[], int);
++extern void vma_do_fput(struct vm_area_struct *, const char[], int);
++
++#define vma_file_update_time(vma)	vma_do_file_update_time(vma, __func__, \
++								__LINE__)
++#define vma_pr_or_file(vma)		vma_do_pr_or_file(vma, __func__, \
++							  __LINE__)
++#define vma_get_file(vma)		vma_do_get_file(vma, __func__, __LINE__)
++#define vma_fput(vma)			vma_do_fput(vma, __func__, __LINE__)
++
++#ifndef CONFIG_MMU
++extern struct file *vmr_do_pr_or_file(struct vm_region *, const char[], int);
++extern void vmr_do_fput(struct vm_region *, const char[], int);
++
++#define vmr_pr_or_file(region)		vmr_do_pr_or_file(region, __func__, \
++							  __LINE__)
++#define vmr_fput(region)		vmr_do_fput(region, __func__, __LINE__)
++#endif /* !CONFIG_MMU */
++
+ extern int access_process_vm(struct task_struct *tsk, unsigned long addr,
+ 		void *buf, int len, unsigned int gup_flags);
+ extern int access_remote_vm(struct mm_struct *mm, unsigned long addr,
+Index: debian-kernel/include/linux/mm_types.h
+===================================================================
+--- debian-kernel.orig/include/linux/mm_types.h
++++ debian-kernel/include/linux/mm_types.h
+@@ -276,6 +276,7 @@ struct vm_region {
+ 	unsigned long	vm_top;		/* region allocated to here */
+ 	unsigned long	vm_pgoff;	/* the offset in vm_file corresponding to vm_start */
+ 	struct file	*vm_file;	/* the backing file or NULL */
++	struct file	*vm_prfile;	/* the virtual backing file or NULL */
+ 
+ 	int		vm_usage;	/* region usage count (access under nommu_region_sem) */
+ 	bool		vm_icache_flushed : 1; /* true if the icache has been flushed for
+@@ -355,6 +356,7 @@ struct vm_area_struct {
+ 	unsigned long vm_pgoff;		/* Offset (within vm_file) in PAGE_SIZE
+ 					   units */
+ 	struct file * vm_file;		/* File we map to (can be NULL). */
++	struct file *vm_prfile;		/* shadow of vm_file */
+ 	void * vm_private_data;		/* was vm_pte (shared mem) */
+ 
+ #ifdef CONFIG_SWAP
+Index: debian-kernel/kernel/fork.c
+===================================================================
+--- debian-kernel.orig/kernel/fork.c
++++ debian-kernel/kernel/fork.c
+@@ -570,7 +570,7 @@ static __latent_entropy int dup_mmap(str
+ 			struct inode *inode = file_inode(file);
+ 			struct address_space *mapping = file->f_mapping;
+ 
+-			get_file(file);
++			vma_get_file(tmp);
+ 			if (tmp->vm_flags & VM_DENYWRITE)
+ 				atomic_dec(&inode->i_writecount);
+ 			i_mmap_lock_write(mapping);
+Index: debian-kernel/mm/Makefile
+===================================================================
+--- debian-kernel.orig/mm/Makefile
++++ debian-kernel/mm/Makefile
+@@ -52,7 +52,7 @@ obj-y			:= filemap.o mempool.o oom_kill.
+ 			   mm_init.o percpu.o slab_common.o \
+ 			   compaction.o vmacache.o \
+ 			   interval_tree.o list_lru.o workingset.o \
+-			   debug.o gup.o $(mmu-y)
++			   prfile.o debug.o gup.o $(mmu-y)
+ 
+ # Give 'page_alloc' its own module-parameter namespace
+ page-alloc-y := page_alloc.o
+Index: debian-kernel/mm/filemap.c
+===================================================================
+--- debian-kernel.orig/mm/filemap.c
++++ debian-kernel/mm/filemap.c
+@@ -2676,7 +2676,7 @@ vm_fault_t filemap_page_mkwrite(struct v
+ 	vm_fault_t ret = VM_FAULT_LOCKED;
+ 
+ 	sb_start_pagefault(inode->i_sb);
+-	file_update_time(vmf->vma->vm_file);
++	vma_file_update_time(vmf->vma);
+ 	lock_page(page);
+ 	if (page->mapping != inode->i_mapping) {
+ 		unlock_page(page);
+Index: debian-kernel/mm/mmap.c
+===================================================================
+--- debian-kernel.orig/mm/mmap.c
++++ debian-kernel/mm/mmap.c
+@@ -179,7 +179,7 @@ static struct vm_area_struct *remove_vma
+ 	if (vma->vm_ops && vma->vm_ops->close)
+ 		vma->vm_ops->close(vma);
+ 	if (vma->vm_file)
+-		fput(vma->vm_file);
++		vma_fput(vma);
+ 	mpol_put(vma_policy(vma));
+ 	vm_area_free(vma);
+ 	return next;
+@@ -910,7 +910,7 @@ again:
+ 	if (remove_next) {
+ 		if (file) {
+ 			uprobe_munmap(next, next->vm_start, next->vm_end);
+-			fput(file);
++			vma_fput(vma);
+ 		}
+ 		if (next->anon_vma)
+ 			anon_vma_merge(vma, next);
+@@ -1831,8 +1831,8 @@ out:
+ 	return addr;
+ 
+ unmap_and_free_vma:
++	vma_fput(vma);
+ 	vma->vm_file = NULL;
+-	fput(file);
+ 
+ 	/* Undo any partial mapping done by a device driver. */
+ 	unmap_region(mm, vma, prev, vma->vm_start, vma->vm_end);
+@@ -2683,7 +2683,7 @@ int __split_vma(struct mm_struct *mm, st
+ 		goto out_free_mpol;
+ 
+ 	if (new->vm_file)
+-		get_file(new->vm_file);
++		vma_get_file(new);
+ 
+ 	if (new->vm_ops && new->vm_ops->open)
+ 		new->vm_ops->open(new);
+@@ -2702,7 +2702,7 @@ int __split_vma(struct mm_struct *mm, st
+ 	if (new->vm_ops && new->vm_ops->close)
+ 		new->vm_ops->close(new);
+ 	if (new->vm_file)
+-		fput(new->vm_file);
++		vma_fput(new);
+ 	unlink_anon_vmas(new);
+  out_free_mpol:
+ 	mpol_put(vma_policy(new));
+@@ -2894,7 +2894,7 @@ SYSCALL_DEFINE5(remap_file_pages, unsign
+ 	struct vm_area_struct *vma;
+ 	unsigned long populate = 0;
+ 	unsigned long ret = -EINVAL;
+-	struct file *file;
++	struct file *file, *prfile;
+ 
+ 	pr_warn_once("%s (%d) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.\n",
+ 		     current->comm, current->pid);
+@@ -2969,10 +2969,27 @@ SYSCALL_DEFINE5(remap_file_pages, unsign
+ 		}
+ 	}
+ 
+-	file = get_file(vma->vm_file);
++	vma_get_file(vma);
++	file = vma->vm_file;
++	prfile = vma->vm_prfile;
+ 	ret = do_mmap_pgoff(vma->vm_file, start, size,
+ 			prot, flags, pgoff, &populate, NULL);
++	if (!IS_ERR_VALUE(ret) && file && prfile) {
++		struct vm_area_struct *new_vma;
++
++		new_vma = find_vma(mm, ret);
++		if (!new_vma->vm_prfile)
++			new_vma->vm_prfile = prfile;
++		if (new_vma != vma)
++			get_file(prfile);
++	}
++	/*
++	 * two fput()s instead of vma_fput(vma),
++	 * coz vma may not be available anymore.
++	 */
+ 	fput(file);
++	if (prfile)
++		fput(prfile);
+ out:
+ 	mmap_write_unlock(mm);
+ 	if (populate)
+@@ -3263,7 +3280,7 @@ struct vm_area_struct *copy_vma(struct v
+ 		if (anon_vma_clone(new_vma, vma))
+ 			goto out_free_mempol;
+ 		if (new_vma->vm_file)
+-			get_file(new_vma->vm_file);
++			vma_get_file(new_vma);
+ 		if (new_vma->vm_ops && new_vma->vm_ops->open)
+ 			new_vma->vm_ops->open(new_vma);
+ 		vma_link(mm, new_vma, prev, rb_link, rb_parent);
+Index: debian-kernel/mm/nommu.c
+===================================================================
+--- debian-kernel.orig/mm/nommu.c
++++ debian-kernel/mm/nommu.c
+@@ -540,7 +540,7 @@ static void __put_nommu_region(struct vm
+ 		up_write(&nommu_region_sem);
+ 
+ 		if (region->vm_file)
+-			fput(region->vm_file);
++			vmr_fput(region);
+ 
+ 		/* IO memory and memory shared directly out of the pagecache
+ 		 * from ramfs/tmpfs mustn't be released here */
+@@ -672,7 +672,7 @@ static void delete_vma(struct mm_struct
+ 	if (vma->vm_ops && vma->vm_ops->close)
+ 		vma->vm_ops->close(vma);
+ 	if (vma->vm_file)
+-		fput(vma->vm_file);
++		vma_fput(vma);
+ 	put_nommu_region(vma->vm_region);
+ 	vm_area_free(vma);
+ }
+@@ -1195,7 +1195,7 @@ unsigned long do_mmap(struct file *file,
+ 					goto error_just_free;
+ 				}
+ 			}
+-			fput(region->vm_file);
++			vmr_fput(region);
+ 			kmem_cache_free(vm_region_jar, region);
+ 			region = pregion;
+ 			result = start;
+@@ -1272,10 +1272,10 @@ error_just_free:
+ 	up_write(&nommu_region_sem);
+ error:
+ 	if (region->vm_file)
+-		fput(region->vm_file);
++		vmr_fput(region);
+ 	kmem_cache_free(vm_region_jar, region);
+ 	if (vma->vm_file)
+-		fput(vma->vm_file);
++		vma_fput(vma);
+ 	vm_area_free(vma);
+ 	return ret;
+ 
+Index: debian-kernel/mm/prfile.c
+===================================================================
+--- /dev/null
++++ debian-kernel/mm/prfile.c
+@@ -0,0 +1,86 @@
++// SPDX-License-Identifier: GPL-2.0
++/*
++ * Mainly for aufs which mmap(2) different file and wants to print different
++ * path in /proc/PID/maps.
++ * Call these functions via macros defined in linux/mm.h.
++ *
++ * See Documentation/filesystems/aufs/design/06mmap.txt
++ *
++ * Copyright (c) 2014-2020 Junjro R. Okajima
++ * Copyright (c) 2014 Ian Campbell
++ */
++
++#include <linux/mm.h>
++#include <linux/file.h>
++#include <linux/fs.h>
++
++/* #define PRFILE_TRACE */
++static inline void prfile_trace(struct file *f, struct file *pr,
++			      const char func[], int line, const char func2[])
++{
++#ifdef PRFILE_TRACE
++	if (pr)
++		pr_info("%s:%d: %s, %pD2\n", func, line, func2, f);
++#endif
++}
++
++void vma_do_file_update_time(struct vm_area_struct *vma, const char func[],
++			     int line)
++{
++	struct file *f = vma->vm_file, *pr = vma->vm_prfile;
++
++	prfile_trace(f, pr, func, line, __func__);
++	file_update_time(f);
++	if (f && pr)
++		file_update_time(pr);
++}
++
++struct file *vma_do_pr_or_file(struct vm_area_struct *vma, const char func[],
++			       int line)
++{
++	struct file *f = vma->vm_file, *pr = vma->vm_prfile;
++
++	prfile_trace(f, pr, func, line, __func__);
++	return (f && pr) ? pr : f;
++}
++
++void vma_do_get_file(struct vm_area_struct *vma, const char func[], int line)
++{
++	struct file *f = vma->vm_file, *pr = vma->vm_prfile;
++
++	prfile_trace(f, pr, func, line, __func__);
++	get_file(f);
++	if (f && pr)
++		get_file(pr);
++}
++
++void vma_do_fput(struct vm_area_struct *vma, const char func[], int line)
++{
++	struct file *f = vma->vm_file, *pr = vma->vm_prfile;
++
++	prfile_trace(f, pr, func, line, __func__);
++	fput(f);
++	if (f && pr)
++		fput(pr);
++}
++
++#ifndef CONFIG_MMU
++struct file *vmr_do_pr_or_file(struct vm_region *region, const char func[],
++			       int line)
++{
++	struct file *f = region->vm_file, *pr = region->vm_prfile;
++
++	prfile_trace(f, pr, func, line, __func__);
++	return (f && pr) ? pr : f;
++}
++
++void vmr_do_fput(struct vm_region *region, const char func[], int line)
++{
++	struct file *f = region->vm_file, *pr = region->vm_prfile;
++
++	prfile_trace(f, pr, func, line, __func__);
++	fput(f);
++	if (f && pr)
++		fput(pr);
++}
++#endif /* !CONFIG_MMU */
diff --git a/debian/patches/features/all/aufs5/aufs5-standalone.patch b/debian/patches/features/all/aufs5/aufs5-standalone.patch
new file mode 100644
index 000000000000..ffd06c8ce090
--- /dev/null
+++ b/debian/patches/features/all/aufs5/aufs5-standalone.patch
@@ -0,0 +1,308 @@
+From: J. R. Okajima <hooanon05@yahoo.co.jp>
+Date: Tue Apr 7 22:14:47 2020 +0900
+Subject: aufs5.6 standalone patch
+Origin: https://github.com/sfjro/aufs5-standalone/tree/7c07d9737e9de058981f020d66ac0d4407a80899
+Bug-Debian: https://bugs.debian.org/541828
+
+Patch headers added by debian/bin/genpatch-aufs
+
+SPDX-License-Identifier: GPL-2.0
+aufs5.6 standalone patch
+
+Index: debian-kernel/fs/dcache.c
+===================================================================
+--- debian-kernel.orig/fs/dcache.c
++++ debian-kernel/fs/dcache.c
+@@ -1390,6 +1390,7 @@ rename_retry:
+ 	seq = 1;
+ 	goto again;
+ }
++EXPORT_SYMBOL_GPL(d_walk);
+ 
+ struct check_mount {
+ 	struct vfsmount *mnt;
+@@ -2935,6 +2936,7 @@ void d_exchange(struct dentry *dentry1,
+ 
+ 	write_sequnlock(&rename_lock);
+ }
++EXPORT_SYMBOL_GPL(d_exchange);
+ 
+ /**
+  * d_ancestor - search for an ancestor
+Index: debian-kernel/fs/exec.c
+===================================================================
+--- debian-kernel.orig/fs/exec.c
++++ debian-kernel/fs/exec.c
+@@ -111,6 +111,7 @@ bool path_noexec(const struct path *path
+ 	return (path->mnt->mnt_flags & MNT_NOEXEC) ||
+ 	       (path->mnt->mnt_sb->s_iflags & SB_I_NOEXEC);
+ }
++EXPORT_SYMBOL_GPL(path_noexec);
+ 
+ #ifdef CONFIG_USELIB
+ /*
+Index: debian-kernel/fs/fcntl.c
+===================================================================
+--- debian-kernel.orig/fs/fcntl.c
++++ debian-kernel/fs/fcntl.c
+@@ -85,6 +85,7 @@ int setfl(int fd, struct file *filp, uns
+  out:
+ 	return error;
+ }
++EXPORT_SYMBOL_GPL(setfl);
+ 
+ static void f_modown(struct file *filp, struct pid *pid, enum pid_type type,
+                      int force)
+Index: debian-kernel/fs/file_table.c
+===================================================================
+--- debian-kernel.orig/fs/file_table.c
++++ debian-kernel/fs/file_table.c
+@@ -162,6 +162,7 @@ over:
+ 	}
+ 	return ERR_PTR(-ENFILE);
+ }
++EXPORT_SYMBOL_GPL(alloc_empty_file);
+ 
+ /*
+  * Variant of alloc_empty_file() that doesn't check and modify nr_files.
+@@ -376,6 +377,7 @@ void __fput_sync(struct file *file)
+ }
+ 
+ EXPORT_SYMBOL(fput);
++EXPORT_SYMBOL_GPL(__fput_sync);
+ 
+ void __init files_init(void)
+ {
+Index: debian-kernel/fs/inode.c
+===================================================================
+--- debian-kernel.orig/fs/inode.c
++++ debian-kernel/fs/inode.c
+@@ -1774,6 +1774,7 @@ int update_time(struct inode *inode, str
+ 		return inode->i_op->update_time(inode, time, flags);
+ 	return generic_update_time(inode, time, flags);
+ }
++EXPORT_SYMBOL_GPL(update_time);
+ 
+ /**
+  *	touch_atime	-	update the access time
+Index: debian-kernel/fs/namespace.c
+===================================================================
+--- debian-kernel.orig/fs/namespace.c
++++ debian-kernel/fs/namespace.c
+@@ -431,6 +431,7 @@ void __mnt_drop_write(struct vfsmount *m
+ 	mnt_dec_writers(real_mount(mnt));
+ 	preempt_enable();
+ }
++EXPORT_SYMBOL_GPL(__mnt_drop_write);
+ 
+ /**
+  * mnt_drop_write - give up write access to a mount
+@@ -797,6 +798,7 @@ int is_current_mnt_ns(struct vfsmount *m
+ {
+ 	return check_mnt(real_mount(mnt));
+ }
++EXPORT_SYMBOL_GPL(is_current_mnt_ns);
+ 
+ /*
+  * vfsmount lock must be held for write
+@@ -1961,6 +1963,7 @@ int iterate_mounts(int (*f)(struct vfsmo
+ 	}
+ 	return 0;
+ }
++EXPORT_SYMBOL_GPL(iterate_mounts);
+ 
+ static void lock_mnt_tree(struct mount *mnt)
+ {
+Index: debian-kernel/fs/notify/group.c
+===================================================================
+--- debian-kernel.orig/fs/notify/group.c
++++ debian-kernel/fs/notify/group.c
+@@ -100,6 +100,7 @@ void fsnotify_get_group(struct fsnotify_
+ {
+ 	refcount_inc(&group->refcnt);
+ }
++EXPORT_SYMBOL_GPL(fsnotify_get_group);
+ 
+ /*
+  * Drop a reference to a group.  Free it if it's through.
+Index: debian-kernel/fs/open.c
+===================================================================
+--- debian-kernel.orig/fs/open.c
++++ debian-kernel/fs/open.c
+@@ -65,6 +65,7 @@ int do_truncate(struct dentry *dentry, l
+ 	inode_unlock(dentry->d_inode);
+ 	return ret;
+ }
++EXPORT_SYMBOL_GPL(do_truncate);
+ 
+ long vfs_truncate(const struct path *path, loff_t length)
+ {
+Index: debian-kernel/fs/read_write.c
+===================================================================
+--- debian-kernel.orig/fs/read_write.c
++++ debian-kernel/fs/read_write.c
+@@ -488,6 +488,7 @@ ssize_t vfs_read(struct file *file, char
+ 	inc_syscr(current);
+ 	return ret;
+ }
++EXPORT_SYMBOL_GPL(vfs_read);
+ 
+ static ssize_t new_sync_write(struct file *filp, const char __user *buf, size_t len, loff_t *ppos)
+ {
+@@ -517,6 +518,7 @@ vfs_readf_t vfs_readf(struct file *file)
+ 		return new_sync_read;
+ 	return ERR_PTR(-ENOSYS); /* doesn't have ->read(|_iter)() op */
+ }
++EXPORT_SYMBOL_GPL(vfs_readf);
+ 
+ vfs_writef_t vfs_writef(struct file *file)
+ {
+@@ -528,6 +530,7 @@ vfs_writef_t vfs_writef(struct file *fil
+ 		return new_sync_write;
+ 	return ERR_PTR(-ENOSYS); /* doesn't have ->write(|_iter)() op */
+ }
++EXPORT_SYMBOL_GPL(vfs_writef);
+ 
+ /* caller is responsible for file_start_write/file_end_write */
+ ssize_t __kernel_write(struct file *file, const void *buf, size_t count, loff_t *pos)
+@@ -608,6 +611,7 @@ ssize_t vfs_write(struct file *file, con
+ 	file_end_write(file);
+ 	return ret;
+ }
++EXPORT_SYMBOL_GPL(vfs_write);
+ 
+ /* file_ppos returns &file->f_pos or NULL if file is stream */
+ static inline loff_t *file_ppos(struct file *file)
+Index: debian-kernel/fs/splice.c
+===================================================================
+--- debian-kernel.orig/fs/splice.c
++++ debian-kernel/fs/splice.c
+@@ -870,6 +870,7 @@ long do_splice_to(struct file *in, loff_
+ 		return in->f_op->splice_read(in, ppos, pipe, len, flags);
+ 	return default_file_splice_read(in, ppos, pipe, len, flags);
+ }
++EXPORT_SYMBOL_GPL(do_splice_from);
+ 
+ /**
+  * splice_direct_to_actor - splices data directly between two non-pipes
+@@ -1016,6 +1017,7 @@ static int direct_splice_actor(struct pi
+ 	return do_splice_from(pipe, file, sd->opos, sd->total_len,
+ 			      sd->flags);
+ }
++EXPORT_SYMBOL_GPL(do_splice_to);
+ 
+ /**
+  * do_splice_direct - splices data directly between two files
+Index: debian-kernel/fs/sync.c
+===================================================================
+--- debian-kernel.orig/fs/sync.c
++++ debian-kernel/fs/sync.c
+@@ -39,6 +39,7 @@ int __sync_filesystem(struct super_block
+ 		sb->s_op->sync_fs(sb, wait);
+ 	return __sync_blockdev(sb->s_bdev, wait);
+ }
++EXPORT_SYMBOL_GPL(__sync_filesystem);
+ 
+ /*
+  * Write out and wait upon all dirty data associated with this
+Index: debian-kernel/fs/xattr.c
+===================================================================
+--- debian-kernel.orig/fs/xattr.c
++++ debian-kernel/fs/xattr.c
+@@ -296,6 +296,7 @@ vfs_getxattr_alloc(struct dentry *dentry
+ 	*xattr_value = value;
+ 	return error;
+ }
++EXPORT_SYMBOL_GPL(vfs_getxattr_alloc);
+ 
+ ssize_t
+ __vfs_getxattr(struct dentry *dentry, struct inode *inode, const char *name,
+Index: debian-kernel/kernel/locking/lockdep.c
+===================================================================
+--- debian-kernel.orig/kernel/locking/lockdep.c
++++ debian-kernel/kernel/locking/lockdep.c
+@@ -190,6 +190,7 @@ inline struct lock_class *lockdep_hlock_
+ 	 */
+ 	return lock_classes + class_idx;
+ }
++EXPORT_SYMBOL_GPL(lockdep_hlock_class);
+ #define hlock_class(hlock) lockdep_hlock_class(hlock)
+ 
+ #ifdef CONFIG_LOCK_STAT
+Index: debian-kernel/kernel/task_work.c
+===================================================================
+--- debian-kernel.orig/kernel/task_work.c
++++ debian-kernel/kernel/task_work.c
+@@ -139,3 +139,4 @@ void task_work_run(void)
+ 		} while (work);
+ 	}
+ }
++EXPORT_SYMBOL_GPL(task_work_run);
+Index: debian-kernel/security/security.c
+===================================================================
+--- debian-kernel.orig/security/security.c
++++ debian-kernel/security/security.c
+@@ -1096,6 +1096,7 @@ int security_path_rmdir(const struct pat
+ 		return 0;
+ 	return call_int_hook(path_rmdir, 0, dir, dentry);
+ }
++EXPORT_SYMBOL_GPL(security_path_rmdir);
+ 
+ int security_path_unlink(const struct path *dir, struct dentry *dentry)
+ {
+@@ -1112,6 +1113,7 @@ int security_path_symlink(const struct p
+ 		return 0;
+ 	return call_int_hook(path_symlink, 0, dir, dentry, old_name);
+ }
++EXPORT_SYMBOL_GPL(security_path_symlink);
+ 
+ int security_path_link(struct dentry *old_dentry, const struct path *new_dir,
+ 		       struct dentry *new_dentry)
+@@ -1120,6 +1122,7 @@ int security_path_link(struct dentry *ol
+ 		return 0;
+ 	return call_int_hook(path_link, 0, old_dentry, new_dir, new_dentry);
+ }
++EXPORT_SYMBOL_GPL(security_path_link);
+ 
+ int security_path_rename(const struct path *old_dir, struct dentry *old_dentry,
+ 			 const struct path *new_dir, struct dentry *new_dentry,
+@@ -1147,6 +1150,7 @@ int security_path_truncate(const struct
+ 		return 0;
+ 	return call_int_hook(path_truncate, 0, path);
+ }
++EXPORT_SYMBOL_GPL(security_path_truncate);
+ 
+ int security_path_chmod(const struct path *path, umode_t mode)
+ {
+@@ -1154,6 +1158,7 @@ int security_path_chmod(const struct pat
+ 		return 0;
+ 	return call_int_hook(path_chmod, 0, path, mode);
+ }
++EXPORT_SYMBOL_GPL(security_path_chmod);
+ 
+ int security_path_chown(const struct path *path, kuid_t uid, kgid_t gid)
+ {
+@@ -1161,6 +1166,7 @@ int security_path_chown(const struct pat
+ 		return 0;
+ 	return call_int_hook(path_chown, 0, path, uid, gid);
+ }
++EXPORT_SYMBOL_GPL(security_path_chown);
+ 
+ int security_path_chroot(const struct path *path)
+ {
+@@ -1261,6 +1267,7 @@ int security_inode_permission(struct ino
+ 		return 0;
+ 	return call_int_hook(inode_permission, 0, inode, mask);
+ }
++EXPORT_SYMBOL_GPL(security_inode_permission);
+ 
+ int security_inode_setattr(struct dentry *dentry, struct iattr *attr)
+ {
+@@ -1453,6 +1460,7 @@ int security_file_permission(struct file
+ 
+ 	return fsnotify_perm(file, mask);
+ }
++EXPORT_SYMBOL_GPL(security_file_permission);
+ 
+ int security_file_alloc(struct file *file)
+ {
diff --git a/debian/patches/features/all/db-mok-keyring/0001-MODSIGN-do-not-load-mok-when-secure-boot-disabled.patch b/debian/patches/features/all/db-mok-keyring/0001-MODSIGN-do-not-load-mok-when-secure-boot-disabled.patch
new file mode 100644
index 000000000000..1eebc75e7d80
--- /dev/null
+++ b/debian/patches/features/all/db-mok-keyring/0001-MODSIGN-do-not-load-mok-when-secure-boot-disabled.patch
@@ -0,0 +1,40 @@
+From: "Lee, Chun-Yi" <joeyli.kernel@gmail.com>
+Date: Tue, 13 Mar 2018 18:37:59 +0800
+Subject: [PATCH 1/5] MODSIGN: do not load mok when secure boot disabled
+Origin: https://lore.kernel.org/patchwork/patch/933173/
+
+The mok can not be trusted when the secure boot is disabled. Which
+means that the kernel embedded certificate is the only trusted key.
+
+Due to db/dbx are authenticated variables, they needs manufacturer's
+KEK for update. So db/dbx are secure when secureboot disabled.
+
+Cc: David Howells <dhowells@redhat.com>
+Cc: Josh Boyer <jwboyer@fedoraproject.org>
+Cc: James Bottomley <James.Bottomley@HansenPartnership.com>
+Signed-off-by: "Lee, Chun-Yi" <jlee@suse.com>
+[Rebased by Luca Boccassi]
+[bwh: Forward-ported to 5.5.9:
+ - get_cert_list() takes a pointer to status and returns the cert list
+ - Adjust filename]
+[Salvatore Bonaccorso: Forward-ported to 5.10: Refresh for changes in
+38a1f03aa240 ("integrity: Move import of MokListRT certs to a separate
+routine")]
+[bwh: Adjust context after 5.13]
+---
+ security/integrity/platform_certs/load_uefi.c | 26 +++++++++++++++-----------
+ 1 file changed, 15 insertions(+), 11 deletions(-)
+
+--- a/security/integrity/platform_certs/load_uefi.c
++++ b/security/integrity/platform_certs/load_uefi.c
+@@ -176,6 +176,10 @@ static int __init load_uefi_certs(void)
+ 		kfree(dbx);
+ 	}
+ 
++	/* the MOK can not be trusted when secure boot is disabled */
++	if (!efi_enabled(EFI_SECURE_BOOT))
++		return 0;
++
+ 	mokx = get_cert_list(L"MokListXRT", &mok_var, &mokxsize, &status);
+ 	if (!mokx) {
+ 		if (status == EFI_NOT_FOUND)
diff --git a/debian/patches/features/all/db-mok-keyring/0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module.patch b/debian/patches/features/all/db-mok-keyring/0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module.patch
new file mode 100644
index 000000000000..a7ec5ccb5652
--- /dev/null
+++ b/debian/patches/features/all/db-mok-keyring/0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module.patch
@@ -0,0 +1,117 @@
+From: "Lee, Chun-Yi" <joeyli.kernel@gmail.com>
+Date: Tue, 13 Mar 2018 18:38:02 +0800
+Subject: [PATCH 3/4] MODSIGN: checking the blacklisted hash before loading a
+ kernel module
+Origin: https://lore.kernel.org/patchwork/patch/933175/
+
+This patch adds the logic for checking the kernel module's hash
+base on blacklist. The hash must be generated by sha256 and enrolled
+to dbx/mokx.
+
+For example:
+	sha256sum sample.ko
+	mokutil --mokx --import-hash $HASH_RESULT
+
+Whether the signature on ko file is stripped or not, the hash can be
+compared by kernel.
+
+Cc: David Howells <dhowells@redhat.com>
+Cc: Josh Boyer <jwboyer@fedoraproject.org>
+Cc: James Bottomley <James.Bottomley@HansenPartnership.com>
+Signed-off-by: "Lee, Chun-Yi" <jlee@suse.com>
+[Rebased by Luca Boccassi]
+---
+ kernel/module_signing.c | 59 +++++++++++++++++++++++++++++++++++++++--
+ 1 file changed, 57 insertions(+), 2 deletions(-)
+
+--- a/kernel/module_signing.c
++++ b/kernel/module_signing.c
+@@ -12,15 +12,62 @@
+ #include <linux/string.h>
+ #include <linux/verification.h>
+ #include <crypto/public_key.h>
++#include <crypto/hash.h>
++#include <keys/system_keyring.h>
+ #include "module-internal.h"
+ 
++static int mod_is_hash_blacklisted(const void *mod, size_t verifylen)
++{
++	struct crypto_shash *tfm;
++	struct shash_desc *desc;
++	size_t digest_size, desc_size;
++	u8 *digest;
++	int ret = 0;
++
++	tfm = crypto_alloc_shash("sha256", 0, 0);
++	if (IS_ERR(tfm))
++		goto error_return;
++
++	desc_size = crypto_shash_descsize(tfm) + sizeof(*desc);
++	digest_size = crypto_shash_digestsize(tfm);
++	digest = kzalloc(digest_size + desc_size, GFP_KERNEL);
++	if (!digest) {
++		pr_err("digest memory buffer allocate fail\n");
++		ret = -ENOMEM;
++		goto error_digest;
++	}
++	desc = (void *)digest + digest_size;
++	desc->tfm = tfm;
++	ret = crypto_shash_init(desc);
++	if (ret < 0)
++		goto error_shash;
++
++	ret = crypto_shash_finup(desc, mod, verifylen, digest);
++	if (ret < 0)
++		goto error_shash;
++
++	pr_debug("%ld digest: %*phN\n", verifylen, (int) digest_size, digest);
++
++	ret = is_hash_blacklisted(digest, digest_size, "bin");
++	if (ret == -EKEYREJECTED)
++		pr_err("Module hash %*phN is blacklisted\n",
++		       (int) digest_size, digest);
++
++error_shash:
++	kfree(digest);
++error_digest:
++	crypto_free_shash(tfm);
++error_return:
++	return ret;
++}
++
+ /*
+  * Verify the signature on a module.
+  */
+ int mod_verify_sig(const void *mod, struct load_info *info)
+ {
+ 	struct module_signature ms;
+-	size_t sig_len, modlen = info->len;
++	size_t sig_len, modlen = info->len, wholelen;
+ 	int ret;
+ 
+ 	pr_devel("==>%s(,%zu)\n", __func__, modlen);
+@@ -28,6 +75,7 @@ int mod_verify_sig(const void *mod, stru
+ 	if (modlen <= sizeof(ms))
+ 		return -EBADMSG;
+ 
++	wholelen = modlen + sizeof(MODULE_SIG_STRING) - 1;
+ 	memcpy(&ms, mod + (modlen - sizeof(ms)), sizeof(ms));
+ 
+ 	ret = mod_check_sig(&ms, modlen, "module");
+@@ -38,8 +86,15 @@ int mod_verify_sig(const void *mod, stru
+ 	modlen -= sig_len + sizeof(ms);
+ 	info->len = modlen;
+ 
+-	return verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
++	ret = verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
+ 				      VERIFY_USE_SECONDARY_KEYRING,
+ 				      VERIFYING_MODULE_SIGNATURE,
+ 				      NULL, NULL);
++	pr_devel("verify_pkcs7_signature() = %d\n", ret);
++
++	/* checking hash of module is in blacklist */
++	if (!ret)
++		ret = mod_is_hash_blacklisted(mod, wholelen);
++
++	return ret;
+ }
diff --git a/debian/patches/features/all/db-mok-keyring/0004-MODSIGN-check-the-attributes-of-db-and-mok.patch b/debian/patches/features/all/db-mok-keyring/0004-MODSIGN-check-the-attributes-of-db-and-mok.patch
new file mode 100644
index 000000000000..e3e71d05ea5d
--- /dev/null
+++ b/debian/patches/features/all/db-mok-keyring/0004-MODSIGN-check-the-attributes-of-db-and-mok.patch
@@ -0,0 +1,114 @@
+From: "Lee, Chun-Yi" <joeyli.kernel@gmail.com>
+Date: Tue, 13 Mar 2018 18:38:03 +0800
+Subject: [PATCH 4/4] MODSIGN: check the attributes of db and mok
+Origin: https://lore.kernel.org/patchwork/patch/933176/
+
+That's better for checking the attributes of db and mok variables
+before loading certificates to kernel keyring.
+
+For db and dbx, both of them are authenticated variables. Which
+means that they can only be modified by manufacturer's key. So
+the kernel should checks EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS
+attribute before we trust it.
+
+For mok-rt and mokx-rt, both of them are created by shim boot loader
+to forward the mok/mokx content to runtime. They must be runtime-volatile
+variables. So kernel should checks that the attributes map did not set
+EFI_VARIABLE_NON_VOLATILE bit before we trust it.
+
+Cc: David Howells <dhowells@redhat.com>
+Cc: Josh Boyer <jwboyer@fedoraproject.org>
+Cc: James Bottomley <James.Bottomley@HansenPartnership.com>
+Signed-off-by: "Lee, Chun-Yi" <jlee@suse.com>
+[Rebased by Luca Boccassi]
+[bwh: Forward-ported to 5.5.9:
+ - get_cert_list() takes a pointer to status and returns the cert list
+ - Adjust filename, context]
+[bwh: Forward-ported to 5.10: MokListRT and MokListXRT are now both
+ loaded through a single code path.]
+[bwh: Forward-ported to 5.13: No they aren't]
+---
+ security/integrity/platform_certs/load_uefi.c | 27 ++++++++++++++-----
+ 1 file changed, 21 insertions(+), 6 deletions(-)
+
+--- a/security/integrity/platform_certs/load_uefi.c
++++ b/security/integrity/platform_certs/load_uefi.c
+@@ -35,11 +35,13 @@ static __init bool uefi_check_ignore_db(
+  * Get a certificate list blob from the named EFI variable.
+  */
+ static __init void *get_cert_list(efi_char16_t *name, efi_guid_t *guid,
+-				  unsigned long *size, efi_status_t *status)
++				  unsigned long *size, efi_status_t *status,
++				  u32 pos_attr, u32 neg_attr)
+ {
+ 	unsigned long lsize = 4;
+ 	unsigned long tmpdb[4];
+ 	void *db;
++	u32 attr = 0;
+ 
+ 	*status = efi.get_variable(name, guid, NULL, &lsize, &tmpdb);
+ 	if (*status == EFI_NOT_FOUND)
+@@ -54,13 +56,22 @@ static __init void *get_cert_list(efi_ch
+ 	if (!db)
+ 		return NULL;
+ 
+-	*status = efi.get_variable(name, guid, NULL, &lsize, db);
++	*status = efi.get_variable(name, guid, &attr, &lsize, db);
+ 	if (*status != EFI_SUCCESS) {
+ 		kfree(db);
+ 		pr_err("Error reading db var: 0x%lx\n", *status);
+ 		return NULL;
+ 	}
+ 
++	/* must have positive attributes and no negative attributes */
++	if ((pos_attr && !(attr & pos_attr)) ||
++	    (neg_attr && (attr & neg_attr))) {
++		kfree(db);
++		pr_err("Error reading db var attributes: 0x%016x\n", attr);
++		*status = EFI_SECURITY_VIOLATION;
++		return NULL;
++	}
++
+ 	*size = lsize;
+ 	return db;
+ }
+@@ -106,7 +117,8 @@ static int __init load_moklist_certs(voi
+ 	/* Get MokListRT. It might not exist, so it isn't an error
+ 	 * if we can't get it.
+ 	 */
+-	mok = get_cert_list(L"MokListRT", &mok_var, &moksize, &status);
++	mok = get_cert_list(L"MokListRT", &mok_var, &moksize, &status,
++				0, EFI_VARIABLE_NON_VOLATILE);
+ 	if (mok) {
+ 		rc = parse_efi_signature_list("UEFI:MokListRT",
+ 					      mok, moksize, get_handler_for_db);
+@@ -145,7 +157,8 @@ static int __init load_uefi_certs(void)
+ 	 * if we can't get them.
+ 	 */
+ 	if (!uefi_check_ignore_db()) {
+-		db = get_cert_list(L"db", &secure_var, &dbsize, &status);
++		db = get_cert_list(L"db", &secure_var, &dbsize, &status,
++			EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS, 0);
+ 		if (!db) {
+ 			if (status == EFI_NOT_FOUND)
+ 				pr_debug("MODSIGN: db variable wasn't found\n");
+@@ -161,7 +174,8 @@ static int __init load_uefi_certs(void)
+ 		}
+ 	}
+ 
+-	dbx = get_cert_list(L"dbx", &secure_var, &dbxsize, &status);
++	dbx = get_cert_list(L"dbx", &secure_var, &dbxsize, &status,
++		EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS, 0);
+ 	if (!dbx) {
+ 		if (status == EFI_NOT_FOUND)
+ 			pr_debug("dbx variable wasn't found\n");
+@@ -180,7 +194,8 @@ static int __init load_uefi_certs(void)
+ 	if (!efi_enabled(EFI_SECURE_BOOT))
+ 		return 0;
+ 
+-	mokx = get_cert_list(L"MokListXRT", &mok_var, &mokxsize, &status);
++	mokx = get_cert_list(L"MokListXRT", &mok_var, &mokxsize, &status,
++				0, EFI_VARIABLE_NON_VOLATILE);
+ 	if (!mokx) {
+ 		if (status == EFI_NOT_FOUND)
+ 			pr_debug("mokx variable wasn't found\n");
diff --git a/debian/patches/features/all/db-mok-keyring/KEYS-Make-use-of-platform-keyring-for-module-signature.patch b/debian/patches/features/all/db-mok-keyring/KEYS-Make-use-of-platform-keyring-for-module-signature.patch
new file mode 100644
index 000000000000..f00bf3d243ae
--- /dev/null
+++ b/debian/patches/features/all/db-mok-keyring/KEYS-Make-use-of-platform-keyring-for-module-signature.patch
@@ -0,0 +1,37 @@
+From: Robert Holmes <robeholmes@gmail.com>
+Date: Tue, 23 Apr 2019 07:39:29 +0000
+Subject: [PATCH] KEYS: Make use of platform keyring for module signature
+ verify
+Bug-Debian: https://bugs.debian.org/935945
+Origin: https://src.fedoraproject.org/rpms/kernel/raw/master/f/KEYS-Make-use-of-platform-keyring-for-module-signature.patch
+
+This patch completes commit 278311e417be ("kexec, KEYS: Make use of
+platform keyring for signature verify") which, while adding the
+platform keyring for bzImage verification, neglected to also add
+this keyring for module verification.
+
+As such, kernel modules signed with keys from the MokList variable
+were not successfully verified.
+
+Signed-off-by: Robert Holmes <robeholmes@gmail.com>
+Signed-off-by: Jeremy Cline <jcline@redhat.com>
+---
+ kernel/module_signing.c | 16 ++++++++++++----
+ 1 file changed, 12 insertions(+), 4 deletions(-)
+
+--- a/kernel/module_signing.c
++++ b/kernel/module_signing.c
+@@ -135,6 +135,13 @@ int mod_verify_sig(const void *mod, stru
+ 				      VERIFYING_MODULE_SIGNATURE,
+ 				      NULL, NULL);
+ 	pr_devel("verify_pkcs7_signature() = %d\n", ret);
++	if (ret == -ENOKEY && IS_ENABLED(CONFIG_INTEGRITY_PLATFORM_KEYRING)) {
++		ret = verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
++				VERIFY_USE_PLATFORM_KEYRING,
++				VERIFYING_MODULE_SIGNATURE,
++				NULL, NULL);
++                pr_devel("verify_pkcs7_signature() = %d\n", ret);
++	}
+ 
+ 	/* checking hash of module is in blacklist */
+ 	if (!ret)
diff --git a/debian/patches/features/all/db-mok-keyring/modsign-make-shash-allocation-failure-fatal.patch b/debian/patches/features/all/db-mok-keyring/modsign-make-shash-allocation-failure-fatal.patch
new file mode 100644
index 000000000000..2ae3ddde4cd7
--- /dev/null
+++ b/debian/patches/features/all/db-mok-keyring/modsign-make-shash-allocation-failure-fatal.patch
@@ -0,0 +1,28 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Sun, 05 May 2019 13:45:06 +0100
+Subject: MODSIGN: Make shash allocation failure fatal
+
+mod_is_hash_blacklisted() currently returns 0 (suceess) if
+crypto_alloc_shash() fails.  This should instead be a fatal error,
+so unwrap and pass up the error code.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+--- a/kernel/module_signing.c
++++ b/kernel/module_signing.c
+@@ -51,11 +51,13 @@ static int mod_is_hash_blacklisted(const
+ 	struct shash_desc *desc;
+ 	size_t digest_size, desc_size;
+ 	u8 *digest;
+-	int ret = 0;
++	int ret;
+ 
+ 	tfm = crypto_alloc_shash("sha256", 0, 0);
+-	if (IS_ERR(tfm))
++	if (IS_ERR(tfm)) {
++		ret = PTR_ERR(tfm);
+ 		goto error_return;
++	}
+ 
+ 	desc_size = crypto_shash_descsize(tfm) + sizeof(*desc);
+ 	digest_size = crypto_shash_digestsize(tfm);
diff --git a/debian/patches/features/all/drivers-media-dvb-usb-af9005-request_firmware.patch b/debian/patches/features/all/drivers-media-dvb-usb-af9005-request_firmware.patch
new file mode 100644
index 000000000000..a24ba17ef936
--- /dev/null
+++ b/debian/patches/features/all/drivers-media-dvb-usb-af9005-request_firmware.patch
@@ -0,0 +1,149 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 24 Aug 2009 23:19:58 +0100
+Subject: af9005: Use request_firmware() to load register init script
+Forwarded: no
+
+Read the register init script from the Windows driver.  This is sick
+but should avoid the potential copyright infringement in distributing
+a version of the script which is directly derived from the driver.
+---
+ drivers/media/dvb/dvb-usb/Kconfig     |    2 +-
+ drivers/media/dvb/dvb-usb/af9005-fe.c |   66 ++++++++++++++++++++++++++------
+ 2 files changed, 54 insertions(+), 14 deletions(-)
+
+Index: debian-kernel/drivers/media/usb/dvb-usb/Kconfig
+===================================================================
+--- debian-kernel.orig/drivers/media/usb/dvb-usb/Kconfig
++++ debian-kernel/drivers/media/usb/dvb-usb/Kconfig
+@@ -260,10 +260,10 @@ config DVB_USB_OPERA1
+ 
+ config DVB_USB_AF9005
+ 	tristate "Afatech AF9005 DVB-T USB1.1 support"
+-	depends on BROKEN
+ 	depends on DVB_USB
+ 	select MEDIA_TUNER_MT2060 if MEDIA_SUBDRV_AUTOSELECT
+ 	select MEDIA_TUNER_QT1010 if MEDIA_SUBDRV_AUTOSELECT
++	select FW_LOADER
+ 	help
+ 	  Say Y here to support the Afatech AF9005 based DVB-T USB1.1 receiver
+ 	  and the TerraTec Cinergy T USB XE (Rev.1)
+Index: debian-kernel/drivers/media/usb/dvb-usb/af9005-fe.c
+===================================================================
+--- debian-kernel.orig/drivers/media/usb/dvb-usb/af9005-fe.c
++++ debian-kernel/drivers/media/usb/dvb-usb/af9005-fe.c
+@@ -9,10 +9,26 @@
+  * see Documentation/driver-api/media/drivers/dvb-usb.rst for more information
+  */
+ #include "af9005.h"
+-#include "af9005-script.h"
+ #include "mt2060.h"
+ #include "qt1010.h"
+ #include <asm/div64.h>
++#include <linux/firmware.h>
++
++/* Register initialisation script to be extracted from the Windows driver */
++
++typedef struct {
++	__le16 reg;
++	u8 pos;
++	u8 len;
++	u8 val;
++	u8 pad;
++} __packed RegDesc;
++
++#define WIN_DRV_NAME		"AF05BDA.sys"
++#define WIN_DRV_VERSION		"6.3.2.1"
++#define WIN_DRV_SIZE		133504
++#define WIN_DRV_SCRIPT_OFFSET	88316
++#define WIN_DRV_SCRIPT_SIZE	1110
+ 
+ struct af9005_fe_state {
+ 	struct dvb_usb_device *d;
+@@ -804,6 +820,8 @@ static int af9005_fe_init(struct dvb_fro
+ {
+ 	struct af9005_fe_state *state = fe->demodulator_priv;
+ 	struct dvb_usb_adapter *adap = fe->dvb->priv;
++	const struct firmware *fw;
++	const RegDesc *script;
+ 	int ret, i, scriptlen;
+ 	u8 temp, temp0 = 0, temp1 = 0, temp2 = 0;
+ 	u8 buf[2];
+@@ -956,37 +974,55 @@ static int af9005_fe_init(struct dvb_fro
+ 	if ((ret = af9005_write_ofdm_register(state->d, 0xaefb, 0x01)))
+ 		return ret;
+ 
+-	/* load init script */
+-	deb_info("load init script\n");
+-	scriptlen = sizeof(script) / sizeof(RegDesc);
++	/* load and validate init script */
++	deb_info("load init script from Windows driver\n");
++	ret = request_firmware(&fw, WIN_DRV_NAME, &state->d->udev->dev);
++	if (ret)
++		return ret;
++	BUILD_BUG_ON(sizeof(RegDesc) != 6);
++	if (fw->size != WIN_DRV_SIZE ||
++	    memcmp(fw->data + WIN_DRV_SCRIPT_OFFSET,
++		   "\x80\xa1\x00\x08\x0a\x00", 6) ||
++	    memcmp(fw->data + WIN_DRV_SCRIPT_OFFSET + WIN_DRV_SCRIPT_SIZE - 6,
++		   "\x49\xa3\x00\x06\x02\x00", 6)) {
++		err("%s is invalid - should be version %s, size %u bytes\n",
++		    WIN_DRV_NAME, WIN_DRV_VERSION, WIN_DRV_SIZE);
++		ret = -EINVAL;
++		goto fail_release;
++	}
++
++	script = (const RegDesc *)(fw->data + WIN_DRV_SCRIPT_OFFSET);
++	scriptlen = WIN_DRV_SCRIPT_SIZE / sizeof(RegDesc);
+ 	for (i = 0; i < scriptlen; i++) {
++		u16 reg = le16_to_cpu(script[i].reg);
+ 		if ((ret =
+-		     af9005_write_register_bits(state->d, script[i].reg,
++		     af9005_write_register_bits(state->d, reg,
+ 						script[i].pos,
+ 						script[i].len, script[i].val)))
+-			return ret;
++			goto fail_release;
+ 		/* save 3 bytes of original fcw */
+-		if (script[i].reg == 0xae18)
++		if (reg == 0xae18)
+ 			temp2 = script[i].val;
+-		if (script[i].reg == 0xae19)
++		if (reg == 0xae19)
+ 			temp1 = script[i].val;
+-		if (script[i].reg == 0xae1a)
++		if (reg == 0xae1a)
+ 			temp0 = script[i].val;
+ 
+ 		/* save original unplug threshold */
+-		if (script[i].reg == xd_p_reg_unplug_th)
++		if (reg == xd_p_reg_unplug_th)
+ 			state->original_if_unplug_th = script[i].val;
+-		if (script[i].reg == xd_p_reg_unplug_rf_gain_th)
++		if (reg == xd_p_reg_unplug_rf_gain_th)
+ 			state->original_rf_unplug_th = script[i].val;
+-		if (script[i].reg == xd_p_reg_unplug_dtop_if_gain_th)
++		if (reg == xd_p_reg_unplug_dtop_if_gain_th)
+ 			state->original_dtop_if_unplug_th = script[i].val;
+-		if (script[i].reg == xd_p_reg_unplug_dtop_rf_gain_th)
++		if (reg == xd_p_reg_unplug_dtop_rf_gain_th)
+ 			state->original_dtop_rf_unplug_th = script[i].val;
+ 
+ 	}
+ 	state->original_fcw =
+ 	    ((u32) temp2 << 16) + ((u32) temp1 << 8) + (u32) temp0;
+ 
++	release_firmware(fw);
+ 
+ 	/* save original TOPs */
+ 	deb_info("save original TOPs\n");
+@@ -1066,6 +1102,10 @@ static int af9005_fe_init(struct dvb_fro
+ 
+ 	deb_info("profit!\n");
+ 	return 0;
++
++fail_release:
++	release_firmware(fw);
++	return ret;
+ }
+ 
+ static int af9005_fe_sleep(struct dvb_frontend *fe)
diff --git a/debian/patches/features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch b/debian/patches/features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch
new file mode 100644
index 000000000000..7f9ee1cf9c2a
--- /dev/null
+++ b/debian/patches/features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch
@@ -0,0 +1,153 @@
+From: Linn Crosetto <linn@hpe.com>
+Date: Tue, 30 Aug 2016 11:54:38 -0600
+Subject: arm64: add kernel config option to lock down when in Secure Boot mode
+Bug-Debian: https://bugs.debian.org/831827
+Forwarded: no
+
+Add a kernel configuration option to lock down the kernel, to restrict
+userspace's ability to modify the running kernel when UEFI Secure Boot is
+enabled. Based on the x86 patch by Matthew Garrett.
+
+Determine the state of Secure Boot in the EFI stub and pass this to the
+kernel using the FDT.
+
+Signed-off-by: Linn Crosetto <linn@hpe.com>
+[bwh: Forward-ported to 4.10: adjust context]
+[Lukas Wunner: Forward-ported to 4.11: drop parts applied upstream]
+[bwh: Forward-ported to 4.15 and lockdown patch set:
+ - Pass result of efi_get_secureboot() in stub through to
+   efi_set_secure_boot() in main kernel
+ - Use lockdown API and naming]
+[bwh: Forward-ported to 4.19.3: adjust context in update_fdt()]
+[dannf: Moved init_lockdown() call after uefi_init(), fixing SB detection]
+[bwh: Drop call to init_lockdown(), as efi_set_secure_boot() now calls this]
+[bwh: Forward-ported to 5.6: efi_get_secureboot() no longer takes a
+ sys_table parameter]
+[bwh: Forward-ported to 5.7: EFI initialisation from FDT was rewritten, so:
+ - Add Secure Boot mode to the parameter enumeration in fdtparams.c
+ - Add a parameter to efi_get_fdt_params() to return the Secure Boot mode
+ - Since Xen does not have a property name defined for Secure Boot mode,
+   change efi_get_fdt_prop() to handle a missing property name by clearing
+   the output variable]
+[Salvatore Bonaccorso: Forward-ported to 5.10: f30f242fb131 ("efi: Rename
+arm-init to efi-init common for all arch") renamed arm-init.c to efi-init.c]
+---
+ drivers/firmware/efi/efi-init.c    |    5 ++++-
+ drivers/firmware/efi/fdtparams.c   |   12 +++++++++++-
+ drivers/firmware/efi/libstub/fdt.c |    6 ++++++
+ include/linux/efi.h                |    3 ++-
+ 4 files changed, 23 insertions(+), 3 deletions(-)
+
+--- a/drivers/firmware/efi/efi-init.c
++++ b/drivers/firmware/efi/efi-init.c
+@@ -210,9 +210,10 @@ void __init efi_init(void)
+ {
+ 	struct efi_memory_map_data data;
+ 	u64 efi_system_table;
++	u32 secure_boot;
+ 
+ 	/* Grab UEFI information placed in FDT by stub */
+-	efi_system_table = efi_get_fdt_params(&data);
++	efi_system_table = efi_get_fdt_params(&data, &secure_boot);
+ 	if (!efi_system_table)
+ 		return;
+ 
+@@ -234,6 +235,8 @@ void __init efi_init(void)
+ 		return;
+ 	}
+ 
++	efi_set_secure_boot(secure_boot);
++
+ 	reserve_regions();
+ 	efi_esrt_init();
+ 	efi_mokvar_table_init();
+--- a/drivers/firmware/efi/fdtparams.c
++++ b/drivers/firmware/efi/fdtparams.c
+@@ -16,6 +16,7 @@ enum {
+ 	MMSIZE,
+ 	DCSIZE,
+ 	DCVERS,
++	SBMODE,
+ 
+ 	PARAMCOUNT
+ };
+@@ -26,6 +27,7 @@ static __initconst const char name[][22]
+ 	[MMSIZE] = "MemMap Size          ",
+ 	[DCSIZE] = "MemMap Desc. Size    ",
+ 	[DCVERS] = "MemMap Desc. Version ",
++	[SBMODE] = "Secure Boot Enabled  ",
+ };
+ 
+ static __initconst const struct {
+@@ -41,6 +43,7 @@ static __initconst const struct {
+ 			[MMSIZE] = "xen,uefi-mmap-size",
+ 			[DCSIZE] = "xen,uefi-mmap-desc-size",
+ 			[DCVERS] = "xen,uefi-mmap-desc-ver",
++			[SBMODE] = "",
+ 		}
+ 	}, {
+ #endif
+@@ -51,6 +54,7 @@ static __initconst const struct {
+ 			[MMSIZE] = "linux,uefi-mmap-size",
+ 			[DCSIZE] = "linux,uefi-mmap-desc-size",
+ 			[DCVERS] = "linux,uefi-mmap-desc-ver",
++			[SBMODE] = "linux,uefi-secure-boot",
+ 		}
+ 	}
+ };
+@@ -62,6 +66,11 @@ static int __init efi_get_fdt_prop(const
+ 	int len;
+ 	u64 val;
+ 
++	if (!pname[0]) {
++		memset(var, 0, size);
++		return 0;
++	}
++
+ 	prop = fdt_getprop(fdt, node, pname, &len);
+ 	if (!prop)
+ 		return 1;
+@@ -79,7 +88,7 @@ static int __init efi_get_fdt_prop(const
+ 	return 0;
+ }
+ 
+-u64 __init efi_get_fdt_params(struct efi_memory_map_data *mm)
++u64 __init efi_get_fdt_params(struct efi_memory_map_data *mm, u32 *secure_boot)
+ {
+ 	const void *fdt = initial_boot_params;
+ 	unsigned long systab;
+@@ -93,6 +102,7 @@ u64 __init efi_get_fdt_params(struct efi
+ 		[MMSIZE] = { &mm->size,		sizeof(mm->size) },
+ 		[DCSIZE] = { &mm->desc_size,	sizeof(mm->desc_size) },
+ 		[DCVERS] = { &mm->desc_version,	sizeof(mm->desc_version) },
++		[SBMODE] = { secure_boot,       sizeof(*secure_boot) },
+ 	};
+ 
+ 	BUILD_BUG_ON(ARRAY_SIZE(target) != ARRAY_SIZE(name));
+--- a/drivers/firmware/efi/libstub/fdt.c
++++ b/drivers/firmware/efi/libstub/fdt.c
+@@ -148,6 +148,12 @@ static efi_status_t update_fdt(void *ori
+ 		}
+ 	}
+ 
++	fdt_val32 = cpu_to_fdt32(efi_get_secureboot());
++	status = fdt_setprop(fdt, node, "linux,uefi-secure-boot",
++			     &fdt_val32, sizeof(fdt_val32));
++	if (status)
++		goto fdt_set_fail;
++
+ 	/* Shrink the FDT back to its minimum size: */
+ 	fdt_pack(fdt);
+ 
+--- a/include/linux/efi.h
++++ b/include/linux/efi.h
+@@ -665,7 +665,8 @@ extern void efi_mem_reserve(phys_addr_t
+ extern int efi_mem_reserve_persistent(phys_addr_t addr, u64 size);
+ extern void efi_initialize_iomem_resources(struct resource *code_resource,
+ 		struct resource *data_resource, struct resource *bss_resource);
+-extern u64 efi_get_fdt_params(struct efi_memory_map_data *data);
++extern u64 efi_get_fdt_params(struct efi_memory_map_data *data,
++			      u32 *secure_boot);
+ extern struct kobject *efi_kobj;
+ 
+ extern int efi_reboot_quirk_mode;
diff --git a/debian/patches/features/all/lockdown/efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch b/debian/patches/features/all/lockdown/efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch
new file mode 100644
index 000000000000..99d81b553fac
--- /dev/null
+++ b/debian/patches/features/all/lockdown/efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch
@@ -0,0 +1,153 @@
+From: David Howells <dhowells@redhat.com>
+Date: Mon, 18 Feb 2019 12:45:03 +0000
+Subject: [28/30] efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
+Origin: https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs.git/commit?id=a5d70c55c603233c192b375f72116a395909da28
+
+UEFI machines can be booted in Secure Boot mode.  Add an EFI_SECURE_BOOT
+flag that can be passed to efi_enabled() to find out whether secure boot is
+enabled.
+
+Move the switch-statement in x86's setup_arch() that inteprets the
+secure_boot boot parameter to generic code and set the bit there.
+
+Suggested-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+Signed-off-by: David Howells <dhowells@redhat.com>
+Reviewed-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
+cc: linux-efi@vger.kernel.org
+[rperier: Forward-ported to 5.5:
+ - Use pr_warn()
+ - Adjust context]
+[bwh: Forward-ported to 5.6: adjust context]
+[bwh: Forward-ported to 5.7:
+ - Use the next available bit in efi.flags
+ - Adjust context]
+---
+ arch/x86/kernel/setup.c           | 14 +----------
+ drivers/firmware/efi/Makefile     |  1 +
+ drivers/firmware/efi/secureboot.c | 39 +++++++++++++++++++++++++++++++
+ include/linux/efi.h               | 16 ++++++++-----
+ 4 files changed, 51 insertions(+), 19 deletions(-)
+ create mode 100644 drivers/firmware/efi/secureboot.c
+
+--- a/arch/x86/kernel/setup.c
++++ b/arch/x86/kernel/setup.c
+@@ -1126,19 +1126,7 @@
+ 	/* Allocate bigger log buffer */
+ 	setup_log_buf(1);
+ 
+-	if (efi_enabled(EFI_BOOT)) {
+-		switch (boot_params.secure_boot) {
+-		case efi_secureboot_mode_disabled:
+-			pr_info("Secure boot disabled\n");
+-			break;
+-		case efi_secureboot_mode_enabled:
+-			pr_info("Secure boot enabled\n");
+-			break;
+-		default:
+-			pr_info("Secure boot could not be determined\n");
+-			break;
+-		}
+-	}
++	efi_set_secure_boot(boot_params.secure_boot);
+ 
+ 	reserve_initrd();
+ 
+--- a/drivers/firmware/efi/Makefile
++++ b/drivers/firmware/efi/Makefile
+@@ -28,6 +28,7 @@
+ obj-$(CONFIG_EFI_BOOTLOADER_CONTROL)	+= efibc.o
+ obj-$(CONFIG_EFI_TEST)			+= test/
+ obj-$(CONFIG_EFI_DEV_PATH_PARSER)	+= dev-path-parser.o
++obj-$(CONFIG_EFI)			+= secureboot.o
+ obj-$(CONFIG_APPLE_PROPERTIES)		+= apple-properties.o
+ obj-$(CONFIG_EFI_RCI2_TABLE)		+= rci2-table.o
+ obj-$(CONFIG_EFI_EMBEDDED_FIRMWARE)	+= embedded-firmware.o
+--- /dev/null
++++ b/drivers/firmware/efi/secureboot.c
+@@ -0,0 +1,39 @@
++
++/* Core kernel secure boot support.
++ *
++ * Copyright (C) 2017 Red Hat, Inc. All Rights Reserved.
++ * Written by David Howells (dhowells@redhat.com)
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public Licence
++ * as published by the Free Software Foundation; either version
++ * 2 of the Licence, or (at your option) any later version.
++ */
++
++#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
++
++#include <linux/efi.h>
++#include <linux/kernel.h>
++#include <linux/printk.h>
++
++/*
++ * Decide what to do when UEFI secure boot mode is enabled.
++ */
++void __init efi_set_secure_boot(enum efi_secureboot_mode mode)
++{
++	if (efi_enabled(EFI_BOOT)) {
++		switch (mode) {
++		case efi_secureboot_mode_disabled:
++			pr_info("Secure boot disabled\n");
++			break;
++		case efi_secureboot_mode_enabled:
++			set_bit(EFI_SECURE_BOOT, &efi.flags);
++			pr_info("Secure boot enabled\n");
++			break;
++		default:
++			pr_warn("Secure boot could not be determined (mode %u)\n",
++				mode);
++			break;
++		}
++	}
++}
+--- a/include/linux/efi.h
++++ b/include/linux/efi.h
+@@ -782,6 +782,14 @@
+ #define EFI_MEM_ATTR		10	/* Did firmware publish an EFI_MEMORY_ATTRIBUTES table? */
+ #define EFI_MEM_NO_SOFT_RESERVE	11	/* Is the kernel configured to ignore soft reservations? */
+ #define EFI_PRESERVE_BS_REGIONS	12	/* Are EFI boot-services memory segments available? */
++#define EFI_SECURE_BOOT		13	/* Are we in Secure Boot mode? */
++
++enum efi_secureboot_mode {
++	efi_secureboot_mode_unset,
++	efi_secureboot_mode_unknown,
++	efi_secureboot_mode_disabled,
++	efi_secureboot_mode_enabled,
++};
+ 
+ #ifdef CONFIG_EFI
+ /*
+@@ -805,6 +813,7 @@
+ {
+ 	return (efi.runtime_supported_mask & mask) == mask;
+ }
++extern void __init efi_set_secure_boot(enum efi_secureboot_mode mode);
+ #else
+ static inline bool efi_enabled(int feature)
+ {
+@@ -822,6 +831,7 @@
+ {
+ 	return false;
+ }
++static inline void efi_set_secure_boot(enum efi_secureboot_mode mode) {}
+ #endif
+ 
+ extern int efi_status_to_err(efi_status_t status);
+@@ -1077,13 +1087,6 @@
+ extern void efi_call_virt_check_flags(unsigned long flags, const char *call);
+ extern unsigned long efi_call_virt_save_flags(void);
+ 
+-enum efi_secureboot_mode {
+-	efi_secureboot_mode_unset,
+-	efi_secureboot_mode_unknown,
+-	efi_secureboot_mode_disabled,
+-	efi_secureboot_mode_enabled,
+-};
+-
+ static inline
+ enum efi_secureboot_mode efi_get_secureboot_mode(efi_get_variable_t *get_var)
+ {
diff --git a/debian/patches/features/all/lockdown/efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch b/debian/patches/features/all/lockdown/efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch
new file mode 100644
index 000000000000..627e37154fd0
--- /dev/null
+++ b/debian/patches/features/all/lockdown/efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch
@@ -0,0 +1,127 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Tue, 10 Sep 2019 11:54:28 +0100
+Subject: efi: Lock down the kernel if booted in secure boot mode
+
+Based on an earlier patch by David Howells, who wrote the following
+description:
+
+> UEFI Secure Boot provides a mechanism for ensuring that the firmware will
+> only load signed bootloaders and kernels.  Certain use cases may also
+> require that all kernel modules also be signed.  Add a configuration option
+> that to lock down the kernel - which includes requiring validly signed
+> modules - if the kernel is secure-booted.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ arch/x86/kernel/setup.c           |    4 ++--
+ drivers/firmware/efi/secureboot.c |    3 +++
+ include/linux/security.h          |    6 ++++++
+ security/lockdown/Kconfig         |   15 +++++++++++++++
+ security/lockdown/lockdown.c      |    2 +-
+ 5 files changed, 27 insertions(+), 3 deletions(-)
+
+Index: debian-kernel/arch/x86/kernel/setup.c
+===================================================================
+--- debian-kernel.orig/arch/x86/kernel/setup.c
++++ debian-kernel/arch/x86/kernel/setup.c
+@@ -979,6 +979,8 @@ void __init setup_arch(char **cmdline_p)
+ 	if (efi_enabled(EFI_BOOT))
+ 		efi_init();
+ 
++	efi_set_secure_boot(boot_params.secure_boot);
++
+ 	dmi_setup();
+ 
+ 	/*
+@@ -1130,8 +1132,6 @@ void __init setup_arch(char **cmdline_p)
+ 	/* Allocate bigger log buffer */
+ 	setup_log_buf(1);
+ 
+-	efi_set_secure_boot(boot_params.secure_boot);
+-
+ 	reserve_initrd();
+ 
+ 	acpi_table_upgrade();
+Index: debian-kernel/drivers/firmware/efi/secureboot.c
+===================================================================
+--- debian-kernel.orig/drivers/firmware/efi/secureboot.c
++++ debian-kernel/drivers/firmware/efi/secureboot.c
+@@ -15,6 +15,7 @@
+ #include <linux/efi.h>
+ #include <linux/kernel.h>
+ #include <linux/printk.h>
++#include <linux/security.h>
+ 
+ /*
+  * Decide what to do when UEFI secure boot mode is enabled.
+@@ -28,6 +29,10 @@ void __init efi_set_secure_boot(enum efi
+ 			break;
+ 		case efi_secureboot_mode_enabled:
+ 			set_bit(EFI_SECURE_BOOT, &efi.flags);
++#ifdef CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT
++			lock_kernel_down("EFI Secure Boot",
++					 LOCKDOWN_INTEGRITY_MAX);
++#endif
+ 			pr_info("Secure boot enabled\n");
+ 			break;
+ 		default:
+Index: debian-kernel/include/linux/security.h
+===================================================================
+--- debian-kernel.orig/include/linux/security.h
++++ debian-kernel/include/linux/security.h
+@@ -451,6 +451,7 @@ int security_inode_notifysecctx(struct i
+ int security_inode_setsecctx(struct dentry *dentry, void *ctx, u32 ctxlen);
+ int security_inode_getsecctx(struct inode *inode, void **ctx, u32 *ctxlen);
+ int security_locked_down(enum lockdown_reason what);
++int lock_kernel_down(const char *where, enum lockdown_reason level);
+ #else /* CONFIG_SECURITY */
+ 
+ static inline int call_blocking_lsm_notifier(enum lsm_event event, void *data)
+@@ -1291,6 +1292,11 @@ static inline int security_locked_down(e
+ {
+ 	return 0;
+ }
++static inline int
++lock_kernel_down(const char *where, enum lockdown_reason level)
++{
++	return -EOPNOTSUPP;
++}
+ #endif	/* CONFIG_SECURITY */
+ 
+ #if defined(CONFIG_SECURITY) && defined(CONFIG_WATCH_QUEUE)
+Index: debian-kernel/security/lockdown/Kconfig
+===================================================================
+--- debian-kernel.orig/security/lockdown/Kconfig
++++ debian-kernel/security/lockdown/Kconfig
+@@ -45,3 +45,18 @@ config LOCK_DOWN_KERNEL_FORCE_CONFIDENTI
+ 	 disabled.
+ 
+ endchoice
++
++config LOCK_DOWN_IN_EFI_SECURE_BOOT
++	bool "Lock down the kernel in EFI Secure Boot mode"
++	default n
++	depends on SECURITY_LOCKDOWN_LSM
++	depends on EFI
++	select SECURITY_LOCKDOWN_LSM_EARLY
++	help
++	  UEFI Secure Boot provides a mechanism for ensuring that the firmware
++	  will only load signed bootloaders and kernels.  Secure boot mode may
++	  be determined from EFI variables provided by the system firmware if
++	  not indicated by the boot parameters.
++
++	  Enabling this option results in kernel lockdown being
++	  triggered in confidentiality mode if EFI Secure Boot is set.
+Index: debian-kernel/security/lockdown/lockdown.c
+===================================================================
+--- debian-kernel.orig/security/lockdown/lockdown.c
++++ debian-kernel/security/lockdown/lockdown.c
+@@ -23,7 +23,7 @@ static const enum lockdown_reason lockdo
+ /*
+  * Put the kernel into lock-down mode.
+  */
+-static int lock_kernel_down(const char *where, enum lockdown_reason level)
++int lock_kernel_down(const char *where, enum lockdown_reason level)
+ {
+ 	if (kernel_locked_down >= level)
+ 		return -EPERM;
diff --git a/debian/patches/features/all/lockdown/mtd-disable-slram-and-phram-when-locked-down.patch b/debian/patches/features/all/lockdown/mtd-disable-slram-and-phram-when-locked-down.patch
new file mode 100644
index 000000000000..124b932c8df6
--- /dev/null
+++ b/debian/patches/features/all/lockdown/mtd-disable-slram-and-phram-when-locked-down.patch
@@ -0,0 +1,75 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Fri, 30 Aug 2019 15:54:24 +0100
+Subject: mtd: phram,slram: Disable when the kernel is locked down
+Forwarded: https://lore.kernel.org/linux-security-module/20190830154720.eekfjt6c4jzvlbfz@decadent.org.uk/
+
+These drivers allow mapping arbitrary memory ranges as MTD devices.
+This should be disabled to preserve the kernel's integrity when it is
+locked down.
+
+* Add the HWPARAM flag to the module parameters
+* When slram is built-in, it uses __setup() to read kernel parameters,
+  so add an explicit check security_locked_down() check
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+Cc: Matthew Garrett <mjg59@google.com>
+Cc: David Howells <dhowells@redhat.com>
+Cc: Joern Engel <joern@lazybastard.org>
+Cc: linux-mtd@lists.infradead.org
+---
+ drivers/mtd/devices/phram.c | 6 +++++-
+ drivers/mtd/devices/slram.c | 9 ++++++++-
+ 2 files changed, 13 insertions(+), 2 deletions(-)
+
+--- a/drivers/mtd/devices/phram.c
++++ b/drivers/mtd/devices/phram.c
+@@ -317,7 +317,11 @@
+ #endif
+ }
+ 
+-module_param_call(phram, phram_param_call, NULL, NULL, 0200);
++static const struct kernel_param_ops phram_param_ops = {
++	.set = phram_param_call
++};
++__module_param_call(MODULE_PARAM_PREFIX, phram, &phram_param_ops, NULL,
++		    0200, -1, KERNEL_PARAM_FL_HWPARAM | hwparam_iomem);
+ MODULE_PARM_DESC(phram, "Memory region to map. \"phram=<name>,<start>,<length>[,<erasesize>]\"");
+ 
+ 
+--- a/drivers/mtd/devices/slram.c
++++ b/drivers/mtd/devices/slram.c
+@@ -43,6 +43,7 @@
+ #include <linux/ioctl.h>
+ #include <linux/init.h>
+ #include <linux/io.h>
++#include <linux/security.h>
+ 
+ #include <linux/mtd/mtd.h>
+ 
+@@ -65,7 +66,7 @@
+ #ifdef MODULE
+ static char *map[SLRAM_MAX_DEVICES_PARAMS];
+ 
+-module_param_array(map, charp, NULL, 0);
++module_param_hw_array(map, charp, iomem, NULL, 0);
+ MODULE_PARM_DESC(map, "List of memory regions to map. \"map=<name>, <start>, <length / end>\"");
+ #else
+ static char *map;
+@@ -281,11 +282,17 @@
+ #ifndef MODULE
+ 	char *devstart;
+ 	char *devlength;
++	int ret;
+ 
+ 	if (!map) {
+ 		E("slram: not enough parameters.\n");
+ 		return(-EINVAL);
+ 	}
++
++	ret = security_locked_down(LOCKDOWN_MODULE_PARAMETERS);
++	if (ret)
++		return ret;
++
+ 	while (map) {
+ 		devname = devstart = devlength = NULL;
+ 
diff --git a/debian/patches/features/all/security-perf-allow-further-restriction-of-perf_event_open.patch b/debian/patches/features/all/security-perf-allow-further-restriction-of-perf_event_open.patch
new file mode 100644
index 000000000000..62da4d98afd9
--- /dev/null
+++ b/debian/patches/features/all/security-perf-allow-further-restriction-of-perf_event_open.patch
@@ -0,0 +1,86 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 11 Jan 2016 15:23:55 +0000
+Subject: security,perf: Allow further restriction of perf_event_open
+Forwarded: https://lkml.org/lkml/2016/1/11/587
+
+When kernel.perf_event_open is set to 3 (or greater), disallow all
+access to performance events by users without CAP_SYS_ADMIN.
+Add a Kconfig symbol CONFIG_SECURITY_PERF_EVENTS_RESTRICT that
+makes this value the default.
+
+This is based on a similar feature in grsecurity
+(CONFIG_GRKERNSEC_PERF_HARDEN).  This version doesn't include making
+the variable read-only.  It also allows enabling further restriction
+at run-time regardless of whether the default is changed.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ include/linux/perf_event.h | 5 +++++
+ kernel/events/core.c       | 8 ++++++++
+ security/Kconfig           | 9 +++++++++
+ 3 files changed, 22 insertions(+)
+
+Index: debian-kernel/include/linux/perf_event.h
+===================================================================
+--- debian-kernel.orig/include/linux/perf_event.h
++++ debian-kernel/include/linux/perf_event.h
+@@ -1287,6 +1287,11 @@ int perf_cpu_time_max_percent_handler(st
+ int perf_event_max_stack_handler(struct ctl_table *table, int write,
+ 		void *buffer, size_t *lenp, loff_t *ppos);
+ 
++static inline bool perf_paranoid_any(void)
++{
++	return sysctl_perf_event_paranoid > 2;
++}
++
+ /* Access to perf_event_open(2) syscall. */
+ #define PERF_SECURITY_OPEN		0
+ 
+Index: debian-kernel/kernel/events/core.c
+===================================================================
+--- debian-kernel.orig/kernel/events/core.c
++++ debian-kernel/kernel/events/core.c
+@@ -406,8 +406,13 @@ static cpumask_var_t perf_online_mask;
+  *   0 - disallow raw tracepoint access for unpriv
+  *   1 - disallow cpu events for unpriv
+  *   2 - disallow kernel profiling for unpriv
++ *   3 - disallow all unpriv perf event use
+  */
++#ifdef CONFIG_SECURITY_PERF_EVENTS_RESTRICT
++int sysctl_perf_event_paranoid __read_mostly = 3;
++#else
+ int sysctl_perf_event_paranoid __read_mostly = 2;
++#endif
+ 
+ /* Minimum for 512 kiB + 1 user control page */
+ int sysctl_perf_event_mlock __read_mostly = 512 + (PAGE_SIZE / 1024); /* 'free' kiB per user */
+@@ -11498,6 +11503,9 @@ SYSCALL_DEFINE5(perf_event_open,
+ 	if (flags & ~PERF_FLAG_ALL)
+ 		return -EINVAL;
+ 
++	if (perf_paranoid_any() && !capable(CAP_SYS_ADMIN))
++		return -EACCES;
++
+ 	/* Do we allow access to perf_event_open(2) ? */
+ 	err = security_perf_event_open(&attr, PERF_SECURITY_OPEN);
+ 	if (err)
+Index: debian-kernel/security/Kconfig
+===================================================================
+--- debian-kernel.orig/security/Kconfig
++++ debian-kernel/security/Kconfig
+@@ -19,6 +19,15 @@ config SECURITY_DMESG_RESTRICT
+ 
+ 	  If you are unsure how to answer this question, answer N.
+ 
++config SECURITY_PERF_EVENTS_RESTRICT
++	bool "Restrict unprivileged use of performance events"
++	depends on PERF_EVENTS
++	help
++	  If you say Y here, the kernel.perf_event_paranoid sysctl
++	  will be set to 3 by default, and no unprivileged use of the
++	  perf_event_open syscall will be permitted unless it is
++	  changed.
++
+ config SECURITY
+ 	bool "Enable different security models"
+ 	depends on SYSFS
diff --git a/debian/patches/features/arm64/arm64-dts-rockchip-Add-support-for-PCIe-on-helios64.patch b/debian/patches/features/arm64/arm64-dts-rockchip-Add-support-for-PCIe-on-helios64.patch
new file mode 100644
index 000000000000..b15e669b7d75
--- /dev/null
+++ b/debian/patches/features/arm64/arm64-dts-rockchip-Add-support-for-PCIe-on-helios64.patch
@@ -0,0 +1,110 @@
+From: Uwe Kleine-König <uwe@kleine-koenig.org>
+Date: Mon, 10 May 2021 11:09:32 +0200
+Subject: arm64: dts: rockchip: Add support for PCIe on helios64
+Origin: https://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip.git/patch/?id=5a65adfa2ad1542f856fc7de3999d51f3a35d2e2
+
+This is enough to make the SATA controller visible:
+
+# lspci
+00:00.0 PCI bridge: Fuzhou Rockchip Electronics Co., Ltd RK3399 PCI Express Root Port
+01:00.0 SATA controller: JMicron Technology Corp. JMB58x AHCI SATA controller
+
+Signed-off-by: Uwe Kleine-König <uwe@kleine-koenig.org>
+Link: https://lore.kernel.org/r/20210510090932.970447-1-uwe@kleine-koenig.org
+Signed-off-by: Heiko Stuebner <heiko@sntech.de>
+---
+ .../dts/rockchip/rk3399-kobol-helios64.dts    | 53 +++++++++++++++++++
+ 1 file changed, 53 insertions(+)
+
+Index: linux/arch/arm64/boot/dts/rockchip/rk3399-kobol-helios64.dts
+===================================================================
+--- linux.orig/arch/arm64/boot/dts/rockchip/rk3399-kobol-helios64.dts
++++ linux/arch/arm64/boot/dts/rockchip/rk3399-kobol-helios64.dts
+@@ -33,6 +33,16 @@
+ 		vin-supply = <&vcc1v8_sys_s3>;
+ 	};
+ 
++	avdd_0v9_s0: avdd-0v9-s0 {
++		compatible = "regulator-fixed";
++		regulator-name = "avdd_0v9_s0";
++		regulator-always-on;
++		regulator-boot-on;
++		regulator-min-microvolt = <900000>;
++		regulator-max-microvolt = <900000>;
++		vin-supply = <&vcc1v8_sys_s3>;
++	};
++
+ 	avdd_1v8_s0: avdd-1v8-s0 {
+ 		compatible = "regulator-fixed";
+ 		regulator-name = "avdd_1v8_s0";
+@@ -108,6 +118,18 @@
+ 		vin-supply = <&vcc5v0_perdev>;
+ 	};
+ 
++	pcie_power: pcie-power {
++		compatible = "regulator-fixed";
++		enable-active-high;
++		gpio = <&gpio1 RK_PD0 GPIO_ACTIVE_HIGH>;
++		pinctrl-0 = <&pcie_pwr>;
++		pinctrl-names = "default";
++		regulator-boot-on;
++		regulator-name = "pcie_power";
++		startup-delay-us = <10000>;
++		vin-supply = <&vcc5v0_perdev>;
++	};
++
+ 	vcc1v8_sys_s0: vcc1v8-sys-s0 {
+ 		compatible = "regulator-fixed";
+ 		regulator-name = "vcc1v8_sys_s0";
+@@ -155,6 +177,16 @@
+ 		vin-supply = <&vcc12v_dcin_bkup>;
+ 	};
+ 
++	vcc5v0_perdev: vcc5v0-perdev {
++		compatible = "regulator-fixed";
++		regulator-name = "vcc5v0_perdev";
++		regulator-always-on;
++		regulator-boot-on;
++		regulator-min-microvolt = <5000000>;
++		regulator-max-microvolt = <5000000>;
++		vin-supply = <&vcc12v_dcin_bkup>;
++	};
++
+ 	vcc5v0_sys: vcc5v0-sys {
+ 		compatible = "regulator-fixed";
+ 		regulator-name = "vcc5v0_sys";
+@@ -405,6 +437,20 @@
+ 	vpcie0v9-supply = <&avdd_0v9_s0>;
+ };
+ 
++&pcie_phy {
++	status = "okay";
++};
++
++&pcie0 {
++	num-lanes = <2>;
++	status = "okay";
++
++	vpcie12v-supply = <&vcc12v_dcin>;
++	vpcie3v3-supply = <&pcie_power>;
++	vpcie1v8-supply = <&avdd_1v8_s0>;
++	vpcie0v9-supply = <&avdd_0v9_s0>;
++};
++
+ &pinctrl {
+ 	gmac {
+ 		gphy_reset: gphy-reset {
+@@ -422,6 +468,13 @@
+ 		};
+ 	};
+ 
++	pcie {
++		pcie_pwr: pcie-pwr {
++			rockchip,pins =
++				<1 RK_PD0 RK_FUNC_GPIO &pcfg_pull_none>;
++		};
++	};
++
+ 	pcie {
+ 		pcie_pwr: pcie-pwr {
+ 			rockchip,pins =
diff --git a/debian/patches/features/arm64/arm64-dts-rockchip-Add-support-for-two-PWM-fans-on-h.patch b/debian/patches/features/arm64/arm64-dts-rockchip-Add-support-for-two-PWM-fans-on-h.patch
new file mode 100644
index 000000000000..0dac4898cfe6
--- /dev/null
+++ b/debian/patches/features/arm64/arm64-dts-rockchip-Add-support-for-two-PWM-fans-on-h.patch
@@ -0,0 +1,58 @@
+From: Uwe Kleine-König <uwe@kleine-koenig.org>
+Date: Mon, 10 May 2021 11:06:07 +0200
+Subject: arm64: dts: rockchip: Add support for two PWM fans on
+ helios64
+Origin: https://git.kernel.org/pub/scm/linux/kernel/git/mmind/linux-rockchip.git/patch/?id=271b66414df0b172c936b3cfd1894b7939f84165
+
+On the helios64 board the two connectors P6 and P7 are supposed to
+power two fans. Add the corresponding pwm-fan devices.
+
+Signed-off-by: Uwe Kleine-König <uwe@kleine-koenig.org>
+Link: https://lore.kernel.org/r/20210510090607.970145-1-uwe@kleine-koenig.org
+Signed-off-by: Heiko Stuebner <heiko@sntech.de>
+---
+ .../dts/rockchip/rk3399-kobol-helios64.dts    | 24 +++++++++++++++++++
+ 1 file changed, 24 insertions(+)
+
+Index: linux/arch/arm64/boot/dts/rockchip/rk3399-kobol-helios64.dts
+===================================================================
+--- linux.orig/arch/arm64/boot/dts/rockchip/rk3399-kobol-helios64.dts
++++ linux/arch/arm64/boot/dts/rockchip/rk3399-kobol-helios64.dts
+@@ -64,6 +64,20 @@
+ 		cooling-levels = <0 80 170 255>;
+ 	};
+ 
++	fan1 {
++		/* fan connected to P7 */
++		compatible = "pwm-fan";
++		pwms = <&pwm0 0 40000 0>;
++		cooling-levels = <0 80 170 255>;
++	};
++
++	fan2 {
++		/* fan connected to P6 */
++		compatible = "pwm-fan";
++		pwms = <&pwm1 0 40000 0>;
++		cooling-levels = <0 80 170 255>;
++	};
++
+ 	leds {
+ 		compatible = "gpio-leds";
+ 		pinctrl-names = "default";
+@@ -439,6 +453,16 @@
+ 	status = "okay";
+ };
+ 
++&pwm0 {
++	/* pwm-fan on P7 */
++	status = "okay";
++};
++
++&pwm1 {
++	/* pwm-fan on P6 */
++	status = "okay";
++};
++
+ &pwm0 {
+ 	/* pwm-fan on P7 */
+ 	status = "okay";
diff --git a/debian/patches/features/x86/intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch b/debian/patches/features/x86/intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch
new file mode 100644
index 000000000000..01602a76e45d
--- /dev/null
+++ b/debian/patches/features/x86/intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch
@@ -0,0 +1,80 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Wed, 21 Aug 2019 00:32:16 +0100
+Subject: intel-iommu: Add Kconfig option to exclude iGPU by default
+Bug-Debian: https://bugs.debian.org/935270
+Bug-Kali: https://bugs.kali.org/view.php?id=5644
+
+There is still laptop firmware that touches the integrated GPU behind
+the operating system's back, and doesn't say so in the RMRR table.
+Enabling the IOMMU for all devices causes breakage.
+
+Replace CONFIG_INTEL_IOMMU_DEFAULT_ON with a 3-way choice
+corresponding to "on", "off", and "on,intgpu_off".
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+Index: linux/drivers/iommu/intel/Kconfig
+===================================================================
+--- linux.orig/drivers/iommu/intel/Kconfig
++++ linux/drivers/iommu/intel/Kconfig
+@@ -54,14 +54,25 @@ config INTEL_IOMMU_SVM
+ 	  to access DMA resources through process address space by
+ 	  means of a Process Address Space ID (PASID).
+ 
+-config INTEL_IOMMU_DEFAULT_ON
+-	bool "Enable Intel DMA Remapping Devices by default"
+-	default y
++choice
++	prompt "Default state of Intel DMA Remapping Devices"
++	default INTEL_IOMMU_DEFAULT_ON
+ 	help
+-	  Selecting this option will enable a DMAR device at boot time if
+-	  one is found. If this option is not selected, DMAR support can
+-	  be enabled by passing intel_iommu=on to the kernel.
++	  Choose whether Intel DMA Remapping Devices should be enabled
++	  by default. This can be overridden at boot time using the
++	  intel_iommu= kernel parameter.
++
++config INTEL_IOMMU_DEFAULT_ON
++	bool "Enable"
++
++config INTEL_IOMMU_DEFAULT_ON_INTGPU_OFF
++	bool "Enable, excluding integrated GPU"
++
++config INTEL_IOMMU_DEFAULT_OFF
++	bool "Disable"
+ 
++endchoice
++ 
+ config INTEL_IOMMU_BROKEN_GFX_WA
+ 	bool "Workaround broken graphics drivers (going away soon)"
+ 	depends on BROKEN && X86
+Index: linux/drivers/iommu/intel/iommu.c
+===================================================================
+--- linux.orig/drivers/iommu/intel/iommu.c
++++ linux/drivers/iommu/intel/iommu.c
+@@ -331,14 +331,14 @@ static int intel_iommu_attach_device(str
+ static phys_addr_t intel_iommu_iova_to_phys(struct iommu_domain *domain,
+ 					    dma_addr_t iova);
+ 
+-int dmar_disabled = !IS_ENABLED(CONFIG_INTEL_IOMMU_DEFAULT_ON);
++int dmar_disabled = IS_ENABLED(CONFIG_INTEL_IOMMU_DEFAULT_OFF);
+ int intel_iommu_sm = IS_ENABLED(CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON);
+ 
+ int intel_iommu_enabled = 0;
+ EXPORT_SYMBOL_GPL(intel_iommu_enabled);
+ 
+ static int dmar_map_gfx = 1;
+-static int dmar_map_intgpu = 1;
++static int dmar_map_intgpu = IS_ENABLED(CONFIG_INTEL_IOMMU_DEFAULT_ON);
+ static int intel_iommu_superpage = 1;
+ static int iommu_identity_mapping;
+ static int iommu_skip_te_disable;
+@@ -420,6 +420,7 @@ static int __init intel_iommu_setup(char
+ 	while (*str) {
+ 		if (!strncmp(str, "on", 2)) {
+ 			dmar_disabled = 0;
++			dmar_map_intgpu = 1;
+ 			pr_info("IOMMU enabled\n");
+ 		} else if (!strncmp(str, "off", 3)) {
+ 			dmar_disabled = 1;
diff --git a/debian/patches/features/x86/intel-iommu-add-option-to-exclude-integrated-gpu-only.patch b/debian/patches/features/x86/intel-iommu-add-option-to-exclude-integrated-gpu-only.patch
new file mode 100644
index 000000000000..2b4cc3a3c26a
--- /dev/null
+++ b/debian/patches/features/x86/intel-iommu-add-option-to-exclude-integrated-gpu-only.patch
@@ -0,0 +1,94 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Wed, 21 Aug 2019 00:05:30 +0100
+Subject: intel-iommu: Add option to exclude integrated GPU only
+Bug-Debian: https://bugs.debian.org/935270
+Bug-Kali: https://bugs.kali.org/view.php?id=5644
+
+There is still laptop firmware that touches the integrated GPU behind
+the operating system's back, and doesn't say so in the RMRR table.
+Enabling the IOMMU for all devices causes breakage, but turning it off
+for all graphics devices seems like a major weakness.
+
+Add an option, intel_iommu=igpu_off, to exclude only integrated GPUs
+from remapping.  This is a narrower exclusion than igfx_off: it only
+affects Intel devices on the root bus.  Devices attached through an
+external port (Thunderbolt or ExpressCard) won't be on the root bus.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ Documentation/admin-guide/kernel-parameters.txt |  2 ++
+ drivers/iommu/intel/iommu.c                     | 14 ++++++++++++++
+ 2 files changed, 16 insertions(+)
+
+Index: linux/Documentation/admin-guide/kernel-parameters.txt
+===================================================================
+--- linux.orig/Documentation/admin-guide/kernel-parameters.txt
++++ linux/Documentation/admin-guide/kernel-parameters.txt
+@@ -1959,6 +1959,8 @@
+ 			bypassed by not enabling DMAR with this option. In
+ 			this case, gfx device will use physical address for
+ 			DMA.
++		intgpu_off [Default Off]
++			Bypass the DMAR unit for an integrated GPU only.
+ 		strict [Default Off]
+ 			Deprecated, equivalent to iommu.strict=1.
+ 		sp_off [Default Off]
+Index: linux/drivers/iommu/intel/iommu.c
+===================================================================
+--- linux.orig/drivers/iommu/intel/iommu.c
++++ linux/drivers/iommu/intel/iommu.c
+@@ -55,6 +55,9 @@
+ #define CONTEXT_SIZE		VTD_PAGE_SIZE
+ 
+ #define IS_GFX_DEVICE(pdev) ((pdev->class >> 16) == PCI_BASE_CLASS_DISPLAY)
++#define IS_INTGPU_DEVICE(pdev) (IS_GFX_DEVICE(pdev) &&		\
++				(pdev)->vendor == 0x8086 &&	\
++				pci_is_root_bus((pdev)->bus))
+ #define IS_USB_DEVICE(pdev) ((pdev->class >> 8) == PCI_CLASS_SERIAL_USB)
+ #define IS_ISA_DEVICE(pdev) ((pdev->class >> 8) == PCI_CLASS_BRIDGE_ISA)
+ #define IS_AZALIA(pdev) ((pdev)->vendor == 0x8086 && (pdev)->device == 0x3a3e)
+@@ -335,12 +338,14 @@ int intel_iommu_enabled = 0;
+ EXPORT_SYMBOL_GPL(intel_iommu_enabled);
+ 
+ static int dmar_map_gfx = 1;
++static int dmar_map_intgpu = 1;
+ static int intel_iommu_superpage = 1;
+ static int iommu_identity_mapping;
+ static int iommu_skip_te_disable;
+ 
+ #define IDENTMAP_GFX		2
+ #define IDENTMAP_AZALIA		4
++#define IDENTMAP_INTGPU		8
+ 
+ int intel_iommu_gfx_mapped;
+ EXPORT_SYMBOL_GPL(intel_iommu_gfx_mapped);
+@@ -423,6 +428,9 @@ static int __init intel_iommu_setup(char
+ 		} else if (!strncmp(str, "igfx_off", 8)) {
+ 			dmar_map_gfx = 0;
+ 			pr_info("Disable GFX device mapping\n");
++		} else if (!strncmp(str, "intgpu_off", 8)) {
++			dmar_map_intgpu = 0;
++			pr_info("Disable integrated GPU device mapping\n");
+ 		} else if (!strncmp(str, "forcedac", 8)) {
+ 			pr_warn("intel_iommu=forcedac deprecated; use iommu.forcedac instead\n");
+ 			iommu_dma_forcedac = true;
+@@ -2877,6 +2885,9 @@ static int device_def_domain_type(struct
+ 
+ 		if ((iommu_identity_mapping & IDENTMAP_GFX) && IS_GFX_DEVICE(pdev))
+ 			return IOMMU_DOMAIN_IDENTITY;
++
++		if ((iommu_identity_mapping & IDENTMAP_INTGPU) && IS_INTGPU_DEVICE(pdev))
++			return IOMMU_DOMAIN_IDENTITY;
+ 	}
+ 
+ 	return 0;
+@@ -3313,6 +3324,9 @@ static int __init init_dmars(void)
+ 	if (!dmar_map_gfx)
+ 		iommu_identity_mapping |= IDENTMAP_GFX;
+ 
++	if (!dmar_map_intgpu)
++		iommu_identity_mapping |= IDENTMAP_INTGPU;
++
+ 	check_tylersburg_isoch();
+ 
+ 	ret = si_domain_init(hw_pass_through);
diff --git a/debian/patches/features/x86/x86-make-x32-syscall-support-conditional.patch b/debian/patches/features/x86/x86-make-x32-syscall-support-conditional.patch
new file mode 100644
index 000000000000..574bb0c5e314
--- /dev/null
+++ b/debian/patches/features/x86/x86-make-x32-syscall-support-conditional.patch
@@ -0,0 +1,192 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 12 Feb 2018 23:59:26 +0000
+Subject: x86: Make x32 syscall support conditional on a kernel parameter
+Bug-Debian: https://bugs.debian.org/708070
+Forwarded: https://lore.kernel.org/lkml/1415245982.3398.53.camel@decadent.org.uk/T/#u
+
+Enabling x32 in the standard amd64 kernel would increase its attack
+surface while provide no benefit to the vast majority of its users.
+No-one seems interested in regularly checking for vulnerabilities
+specific to x32 (at least no-one with a white hat).
+
+Still, adding another flavour just to turn on x32 seems wasteful.  And
+the only differences on syscall entry are a few instructions that mask
+out the x32 flag and compare the syscall number.
+
+Use a static key to control whether x32 syscalls are really enabled, a
+Kconfig parameter to set its default value and a kernel parameter
+"syscall.x32" to change it at boot time.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ .../admin-guide/kernel-parameters.txt         |  4 ++
+ arch/x86/Kconfig                              |  8 ++++
+ arch/x86/entry/common.c                       |  3 +-
+ arch/x86/entry/syscall_64.c                   | 46 +++++++++++++++++++
+ arch/x86/include/asm/elf.h                    |  6 ++-
+ arch/x86/include/asm/syscall.h                | 13 ++++++
+ 6 files changed, 78 insertions(+), 2 deletions(-)
+
+Index: linux/Documentation/admin-guide/kernel-parameters.txt
+===================================================================
+--- linux.orig/Documentation/admin-guide/kernel-parameters.txt
++++ linux/Documentation/admin-guide/kernel-parameters.txt
+@@ -5539,6 +5539,10 @@
+ 			later by a loaded module cannot be set this way.
+ 			Example: sysctl.vm.swappiness=40
+ 
++	syscall.x32=	[KNL,x86_64] Enable/disable use of x32 syscalls on
++			an x86_64 kernel where CONFIG_X86_X32 is enabled.
++			Default depends on CONFIG_X86_X32_DISABLED.
++
+ 	sysfs.deprecated=0|1 [KNL]
+ 			Enable/disable old style sysfs layout for old udev
+ 			on older distributions. When this option is enabled
+Index: linux/arch/x86/Kconfig
+===================================================================
+--- linux.orig/arch/x86/Kconfig
++++ linux/arch/x86/Kconfig
+@@ -2834,6 +2834,14 @@ config COMPAT_32
+ 	select HAVE_UID16
+ 	select OLD_SIGSUSPEND3
+ 
++config X86_X32_DISABLED
++	bool "x32 ABI disabled by default"
++	depends on X86_X32
++	default n
++	help
++	  Disable the x32 ABI unless explicitly enabled using the
++	  kernel paramter "syscall.x32=y".
++
+ config COMPAT
+ 	def_bool y
+ 	depends on IA32_EMULATION || X86_X32
+Index: linux/arch/x86/entry/common.c
+===================================================================
+--- linux.orig/arch/x86/entry/common.c
++++ linux/arch/x86/entry/common.c
+@@ -62,7 +62,7 @@ static __always_inline bool do_syscall_x
+ 	 */
+ 	unsigned int xnr = nr - __X32_SYSCALL_BIT;
+ 
+-	if (IS_ENABLED(CONFIG_X86_X32_ABI) && likely(xnr < X32_NR_syscalls)) {
++	if (IS_ENABLED(CONFIG_X86_X32_ABI) && unlikely(x32_enabled) && likely(xnr < X32_NR_syscalls)) {
+ 		xnr = array_index_nospec(xnr, X32_NR_syscalls);
+ 		regs->ax = x32_sys_call_table[xnr](regs);
+ 		return true;
+Index: linux/arch/x86/entry/syscall_x32.c
+===================================================================
+--- linux.orig/arch/x86/entry/syscall_x32.c
++++ linux/arch/x86/entry/syscall_x32.c
+@@ -4,6 +4,9 @@
+ #include <linux/linkage.h>
+ #include <linux/sys.h>
+ #include <linux/cache.h>
++#include <linux/moduleparam.h>
++#undef MODULE_PARAM_PREFIX
++#define MODULE_PARAM_PREFIX "syscall."
+ #include <linux/syscalls.h>
+ #include <asm/syscall.h>
+ 
+@@ -16,3 +19,46 @@
+ asmlinkage const sys_call_ptr_t x32_sys_call_table[] = {
+ #include <asm/syscalls_x32.h>
+ };
++
++/* Maybe enable x32 syscalls */
++
++#if defined(CONFIG_X86_X32_DISABLED)
++DEFINE_STATIC_KEY_FALSE(x32_enabled_skey);
++#else
++DEFINE_STATIC_KEY_TRUE(x32_enabled_skey);
++#endif
++
++static int __init x32_param_set(const char *val, const struct kernel_param *p)
++{
++	bool enabled;
++	int ret;
++
++	ret = kstrtobool(val, &enabled);
++	if (ret)
++		return ret;
++	if (IS_ENABLED(CONFIG_X86_X32_DISABLED)) {
++		if (enabled) {
++			static_key_enable(&x32_enabled_skey.key);
++			pr_info("Enabled x32 syscalls\n");
++		}
++	} else {
++		if (!enabled) {
++			static_key_disable(&x32_enabled_skey.key);
++			pr_info("Disabled x32 syscalls\n");
++		}
++	}
++	return 0;
++}
++
++static int x32_param_get(char *buffer, const struct kernel_param *p)
++{
++	return sprintf(buffer, "%c\n",
++		       static_key_enabled(&x32_enabled_skey) ? 'Y' : 'N');
++}
++
++static const struct kernel_param_ops x32_param_ops = {
++	.set = x32_param_set,
++	.get = x32_param_get,
++};
++
++arch_param_cb(x32, &x32_param_ops, NULL, 0444);
+Index: linux/arch/x86/include/asm/elf.h
+===================================================================
+--- linux.orig/arch/x86/include/asm/elf.h
++++ linux/arch/x86/include/asm/elf.h
+@@ -11,6 +11,9 @@
+ #include <asm/user.h>
+ #include <asm/auxvec.h>
+ #include <asm/fsgsbase.h>
++#ifndef COMPILE_OFFSETS /* avoid a circular dependency on asm-offsets.h */
++#include <asm/syscall.h>
++#endif
+ 
+ typedef unsigned long elf_greg_t;
+ 
+@@ -161,7 +164,8 @@ do {						\
+ 
+ #define compat_elf_check_arch(x)					\
+ 	(elf_check_arch_ia32(x) ||					\
+-	 (IS_ENABLED(CONFIG_X86_X32_ABI) && (x)->e_machine == EM_X86_64))
++	 (IS_ENABLED(CONFIG_X86_X32_ABI) && x32_enabled &&		\
++	  (x)->e_machine == EM_X86_64))
+ 
+ #if __USER32_DS != __USER_DS
+ # error "The following code assumes __USER32_DS == __USER_DS"
+Index: linux/arch/x86/include/asm/syscall.h
+===================================================================
+--- linux.orig/arch/x86/include/asm/syscall.h
++++ linux/arch/x86/include/asm/syscall.h
+@@ -13,6 +13,7 @@
+ #include <uapi/linux/audit.h>
+ #include <linux/sched.h>
+ #include <linux/err.h>
++#include <linux/jump_label.h>
+ #include <asm/thread_info.h>	/* for TS_COMPAT */
+ #include <asm/unistd.h>
+ 
+@@ -30,6 +31,18 @@ extern const sys_call_ptr_t ia32_sys_cal
+ extern const sys_call_ptr_t x32_sys_call_table[];
+ #endif
+ 
++#if defined(CONFIG_X86_X32_ABI)
++#if defined(CONFIG_X86_X32_DISABLED)
++DECLARE_STATIC_KEY_FALSE(x32_enabled_skey);
++#define x32_enabled static_branch_unlikely(&x32_enabled_skey)
++#else
++DECLARE_STATIC_KEY_TRUE(x32_enabled_skey);
++#define x32_enabled static_branch_likely(&x32_enabled_skey)
++#endif
++#else
++#define x32_enabled 0
++#endif
++
+ /*
+  * Only the low 32 bits of orig_ax are meaningful, so we return int.
+  * This importantly ignores the high bits on 64-bit, so comparisons
diff --git a/debian/patches/features/x86/x86-memtest-WARN-if-bad-RAM-found.patch b/debian/patches/features/x86/x86-memtest-WARN-if-bad-RAM-found.patch
new file mode 100644
index 000000000000..7a7952003227
--- /dev/null
+++ b/debian/patches/features/x86/x86-memtest-WARN-if-bad-RAM-found.patch
@@ -0,0 +1,28 @@
+From: Ben Hutchings <ben@decadent.org.uk>
+Date: Mon, 5 Dec 2011 04:00:58 +0000
+Subject: x86: memtest: WARN if bad RAM found
+Bug-Debian: https://bugs.debian.org/613321
+Forwarded: http://thread.gmane.org/gmane.linux.kernel/1286471
+
+Since this is not a particularly thorough test, if we find any bad
+bits of RAM then there is a fair chance that there are other bad bits
+we fail to detect.
+
+Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
+---
+ mm/memtest.c |    2 ++
+ 1 files changed, 2 insertions(+), 0 deletions(-)
+
+--- a/mm/memtest.c
++++ b/mm/memtest.c
+@@ -26,6 +26,10 @@ static u64 patterns[] __initdata = {
+ 
+ static void __init reserve_bad_mem(u64 pattern, phys_addr_t start_bad, phys_addr_t end_bad)
+ {
++#ifdef CONFIG_X86
++	WARN_ONCE(1, "Bad RAM detected. Use memtest86+ to perform a thorough test\n"
++		  "and the memmap= parameter to reserve the bad areas.");
++#endif
+ 	pr_info("  %016llx bad mem addr %pa - %pa reserved\n",
+ 		cpu_to_be64(pattern), &start_bad, &end_bad);
+ 	memblock_reserve(start_bad, end_bad - start_bad);
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 000000000000..5a2bd37845fc
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1,125 @@
+debian/gitignore.patch
+
+# Disable features broken by exclusion of upstream files
+debian/dfsg/arch-powerpc-platforms-8xx-ucode-disable.patch
+debian/dfsg/drivers-media-dvb-dvb-usb-af9005-disable.patch
+debian/dfsg/vs6624-disable.patch
+debian/dfsg/drivers-net-appletalk-cops.patch
+debian/dfsg/video-remove-nvidiafb-and-rivafb.patch
+debian/dfsg/documentation-fix-broken-link-to-cipso-draft.patch
+
+# Changes to support package build system
+debian/version.patch
+debian/uname-version-timestamp.patch
+debian/kernelvariables.patch
+debian/ia64-hardcode-arch-script-output.patch
+debian/mips-disable-werror.patch
+debian/mips-boston-disable-its.patch
+debian/mips-ieee754-relaxed.patch
+debian/arch-sh4-fix-uimage-build.patch
+debian/tools-perf-version.patch
+debian/tools-perf-install.patch
+debian/wireless-add-debian-wireless-regdb-certificates.patch
+debian/export-symbols-needed-by-android-drivers.patch
+debian/android-enable-building-ashmem-and-binder-as-modules.patch
+debian/documentation-drop-sphinx-version-check.patch
+debian/perf-traceevent-support-asciidoctor-for-documentatio.patch
+debian/kbuild-look-for-module.lds-under-arch-directory-too.patch
+debian/kbuild-abort-build-if-subdirs-used.patch
+
+# Fixes/improvements to firmware loading
+features/all/drivers-media-dvb-usb-af9005-request_firmware.patch
+debian/iwlwifi-do-not-request-unreleased-firmware.patch
+bugfix/all/firmware_class-log-every-success-and-failure.patch
+bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch
+bugfix/all/radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch
+debian/firmware_class-refer-to-debian-wiki-firmware-page.patch
+
+# Patches from aufs5 repository, imported with debian/bin/genpatch-aufs.
+# These are only the changes needed to allow aufs to be built out-of-tree.
+#features/all/aufs5/aufs5-base.patch
+#features/all/aufs5/aufs5-mmap.patch
+#features/all/aufs5/aufs5-standalone.patch
+
+# Change some defaults for security reasons
+debian/af_802154-Disable-auto-loading-as-mitigation-against.patch
+debian/rds-Disable-auto-loading-as-mitigation-against-local.patch
+debian/decnet-Disable-auto-loading-as-mitigation-against-lo.patch
+debian/dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
+debian/hamradio-disable-auto-loading-as-mitigation-against-local-exploits.patch
+debian/fs-enable-link-security-restrictions-by-default.patch
+
+# Set various features runtime-disabled by default
+debian/sched-autogroup-disabled.patch
+debian/yama-disable-by-default.patch
+debian/add-sysctl-to-disallow-unprivileged-CLONE_NEWUSER-by-default.patch
+features/all/security-perf-allow-further-restriction-of-perf_event_open.patch
+features/x86/intel-iommu-add-option-to-exclude-integrated-gpu-only.patch
+features/x86/intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch
+
+# Disable autoloading/probing of various drivers by default
+debian/cdc_ncm-cdc_mbim-use-ncm-by-default.patch
+debian/snd-pcsp-disable-autoload.patch
+bugfix/x86/viafb-autoload-on-olpc-xo1.5-only.patch
+debian/fjes-disable-autoload.patch
+
+# Taint if dangerous features are used
+debian/fanotify-taint-on-use-of-fanotify_access_permissions.patch
+debian/btrfs-warn-about-raid5-6-being-experimental-at-mount.patch
+
+# Arch bug fixes
+bugfix/arm/arm-dts-kirkwood-fix-sata-pinmux-ing-for-ts419.patch
+bugfix/arm64/dts-rockchip-correct-voltage-selector-firefly-RK3399.patch
+bugfix/x86/perf-tools-fix-unwind-build-on-i386.patch
+bugfix/sh/sh-boot-do-not-use-hyphen-in-exported-variable-name.patch
+bugfix/arm/arm-mm-export-__sync_icache_dcache-for-xen-privcmd.patch
+bugfix/powerpc/powerpc-boot-fix-missing-crc32poly.h-when-building-with-kernel_xz.patch
+bugfix/arm64/arm64-acpi-Add-fixup-for-HPE-m400-quirks.patch
+bugfix/x86/x86-32-disable-3dnow-in-generic-config.patch
+
+# Arch features
+features/arm64/arm64-dts-rockchip-Add-support-for-two-PWM-fans-on-h.patch
+features/arm64/arm64-dts-rockchip-Add-support-for-PCIe-on-helios64.patch
+features/x86/x86-memtest-WARN-if-bad-RAM-found.patch
+features/x86/x86-make-x32-syscall-support-conditional.patch
+
+# Miscellaneous bug fixes
+bugfix/all/disable-some-marvell-phys.patch
+bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch
+
+# Miscellaneous features
+
+# Lockdown missing pieces
+features/all/lockdown/efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch
+features/all/lockdown/efi-lock-down-the-kernel-if-booted-in-secure-boot-mo.patch
+features/all/lockdown/mtd-disable-slram-and-phram-when-locked-down.patch
+features/all/lockdown/arm64-add-kernel-config-option-to-lock-down-when.patch
+
+# Improve integrity platform keyring for kernel modules verification
+features/all/db-mok-keyring/0001-MODSIGN-do-not-load-mok-when-secure-boot-disabled.patch
+features/all/db-mok-keyring/0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module.patch
+features/all/db-mok-keyring/0004-MODSIGN-check-the-attributes-of-db-and-mok.patch
+features/all/db-mok-keyring/modsign-make-shash-allocation-failure-fatal.patch
+features/all/db-mok-keyring/KEYS-Make-use-of-platform-keyring-for-module-signature.patch
+
+# Security fixes
+debian/i386-686-pae-pci-set-pci-nobios-by-default.patch
+debian/ntfs-mark-it-as-broken.patch
+
+# Fix exported symbol versions
+bugfix/all/module-disable-matching-missing-version-crc.patch
+
+# Tools bug fixes
+bugfix/all/usbip-document-tcp-wrappers.patch
+bugfix/all/kbuild-fix-recordmcount-dependency.patch
+bugfix/all/tools-perf-man-date.patch
+bugfix/all/tools-perf-remove-shebangs.patch
+bugfix/x86/revert-perf-build-fix-libunwind-feature-detection-on.patch
+bugfix/all/tools-build-remove-bpf-run-time-check-at-build-time.patch
+bugfix/all/cpupower-bump-soname-version.patch
+bugfix/all/cpupower-fix-checks-for-cpu-existence.patch
+bugfix/all/tools-perf-pmu-events-fix-reproducibility.patch
+bugfix/all/bpftool-fix-version-string-in-recursive-builds.patch
+bugfix/all/tools-include-uapi-fix-errno.h.patch
+
+# ABI maintenance
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 000000000000..3659e5b2b6ce
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,124 @@
+#!/usr/bin/make -f
+
+SHELL    := sh -e
+SOURCE := $(shell dpkg-parsechangelog -SSource)
+VERSION := $(shell dpkg-parsechangelog -SVersion)
+VERSION_UPSTREAM := $(shell echo "$(VERSION)" | sed -e 's,-[^-]*$$,,')
+VERSION_BINNMU := $(shell echo "$(VERSION)" | sed -rne 's,.*\+b([0-9]+)$$,\1,p')
+VERSION_SOURCE := $(patsubst %+b$(VERSION_BINNMU),%,$(VERSION))
+
+include debian/rules.defs
+
+ifneq (,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
+  DEBIAN_KERNEL_JOBS := $(subst parallel=,,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
+endif
+ifdef DEBIAN_KERNEL_JOBS
+  MAKEFLAGS += -j$(DEBIAN_KERNEL_JOBS)
+endif
+
+.NOTPARALLEL:
+
+source: debian/control
+	dh_testdir
+	$(MAKE) -f debian/rules.gen source
+
+setup: debian/control
+	dh_testdir
+	$(MAKE) -f debian/rules.gen setup_$(DEB_HOST_ARCH)
+
+build: build-arch build-indep
+
+build-arch: debian/control
+	dh_testdir
+	$(MAKE) -f debian/rules.gen build-arch_$(DEB_HOST_ARCH)
+
+build-indep: debian/control
+	dh_testdir
+	$(MAKE) -f debian/rules.gen build-indep
+
+binary:	binary-indep binary-arch
+
+binary-arch: build-arch
+	dh_testdir
+	$(MAKE) -f debian/rules.gen binary-arch_$(DEB_HOST_ARCH)
+
+binary-indep: build-indep
+	dh_testdir
+	$(MAKE) -f debian/rules.gen binary-indep
+
+DIR_ORIG = ../orig/$(SOURCE)-$(VERSION_UPSTREAM)
+TAR_ORIG_NAME = $(SOURCE)_$(VERSION_UPSTREAM).orig.tar.xz
+TAR_ORIG = $(firstword $(wildcard ../$(TAR_ORIG_NAME)) $(wildcard ../orig/$(TAR_ORIG_NAME)))
+
+orig: $(DIR_ORIG)
+	rsync --delete --exclude /debian --exclude .svk --exclude .svn --exclude .git --link-dest=$(DIR_ORIG)/ -a $(DIR_ORIG)/ .
+	QUILT_PATCHES='$(CURDIR)/debian/patches' QUILT_PC=.pc quilt push --quiltrc - -a -q --fuzz=0
+
+$(DIR_ORIG):
+ifeq ($(TAR_ORIG),)
+	$(error Cannot find orig tarball $(TAR_ORIG_NAME))
+else
+	mkdir -p ../orig
+	tar -C ../orig -xaf $(TAR_ORIG)
+endif
+
+CLEAN_PATTERNS := $(BUILD_DIR) $(STAMPS_DIR) debian/lib/python/debian_linux/*.pyc debian/lib/python/debian_linux/__pycache__ $$(find debian -maxdepth 1 -type d -name 'linux-*') debian/*-modules-*-di* debian/kernel-image-*-di* debian/*-tmp debian/*.substvars
+
+maintainerclean:
+	rm -rf $(CLEAN_PATTERNS)
+# We cannot use dh_clean here because it requires debian/control to exist
+	rm -rf debian/.debhelper debian/*.debhelper* debian/files
+	rm -f \
+		debian/linux-image-*.NEWS \
+		debian/linux-*.bug-presubj \
+		debian/linux-*.lintian-overrides \
+		debian/linux-*.maintscript \
+		debian/linux-*.postinst \
+		debian/linux-*.postrm \
+		debian/linux-*.preinst \
+		debian/linux-*.prerm \
+		debian/config.defines.dump \
+		debian/control \
+		debian/control.md5sum \
+		debian/rules.gen \
+		debian/tests/control
+	rm -rf $(filter-out debian .svk .svn .git, $(wildcard * .[^.]*))
+
+clean: debian/control
+	dh_testdir
+	rm -rf $(CLEAN_PATTERNS)
+	dh_clean
+
+CONTROL_FILES = $(BUILD_DIR)/version-info $(wildcard debian/templates/*.in)
+CONTROL_FILES += debian/config/defines $(wildcard debian/config/*/defines) $(wildcard debian/config/*/*/defines)
+CONTROL_FILES += debian/installer/kernel-versions debian/installer/package-list
+
+# debian/bin/gencontrol.py uses debian/changelog as input, but the
+# output only depends on the source name and version.  To avoid
+# frequent changes to debian/control.md5sum, include only those fields
+# in the checksum.
+$(BUILD_DIR)/version-info: debian/changelog
+	mkdir -p $(@D)
+	printf >$@ 'Source: %s\nVersion: %s\n' $(SOURCE) $(VERSION_SOURCE)
+
+debian/control debian/rules.gen: debian/bin/gencontrol.py $(CONTROL_FILES)
+ifeq ($(wildcard debian/control.md5sum),)
+	$(MAKE) -f debian/rules debian/control-real
+else
+	md5sum --check debian/control.md5sum --status || \
+		$(MAKE) -f debian/rules debian/control-real
+endif
+
+debian/control-real: debian/bin/gencontrol.py $(CONTROL_FILES)
+# Hash randomisation makes the pickled config unreproducible
+	PYTHONHASHSEED=0 $<
+	md5sum $^ > debian/control.md5sum
+	@echo
+	@echo This target is made to fail intentionally, to make sure
+	@echo that it is NEVER run during the automated build. Please
+	@echo ignore the following error, the debian/control file has
+	@echo been generated SUCCESSFULLY.
+	@echo
+	exit 1
+
+.PHONY: binary binary-% build build-% clean debian/control-real orig setup source
diff --git a/debian/rules.d/Makefile.inc b/debian/rules.d/Makefile.inc
new file mode 100644
index 000000000000..719e8ca6715d
--- /dev/null
+++ b/debian/rules.d/Makefile.inc
@@ -0,0 +1,59 @@
+# Normalise OUTDIR to avoid triggering rebuilds
+override OUTDIR := $(patsubst ./%,%,$(OUTDIR))
+
+VPATH = $(top_rulesdir)/$(OUTDIR) $(top_srcdir)/$(OUTDIR)
+
+SHELL = /bin/sh -e
+
+CC = $(CROSS_COMPILE)gcc
+CXX = $(CROSS_COMPILE)g++
+CFLAGS := $(shell dpkg-buildflags --get CFLAGS) -Wall
+CPPFLAGS := $(shell dpkg-buildflags --get CPPFLAGS) \
+	-I$(top_srcdir)/$(OUTDIR) \
+	-I$(top_srcdir)/debian/build/build-tools/$(OUTDIR) \
+	-isystem $(top_srcdir)/debian/build/build-tools/include
+CXXFLAGS := $(shell dpkg-buildflags --get CXXFLAGS) -Wall
+LDFLAGS := $(shell dpkg-buildflags --get LDFLAGS)
+
+installdir ?= $(prefix)/$(OUTDIR)
+
+all: all-local all-recursive
+clean: clean-recursive
+install: install-local install-recursive
+
+%-recursive:
+	+@list='$(SUBDIRS)'; \
+	for subdir in $$list; do \
+	  echo "Making $* in $$subdir"; \
+	  mkdir -p $$subdir; \
+	  $(MAKE) -C $$subdir -f $(top_rulesdir)/$(OUTDIR)/$$subdir/Makefile OUTDIR=$(OUTDIR)/$$subdir $*; \
+	done
+
+all-local: $(PROGS)
+
+install-local: install-local-progs install-local-scripts install-local-data
+
+install-local-progs: $(PROGS)
+	@for p in $^; do \
+	  echo " install -m755 '$$p' '$(DESTDIR)/$(installdir)'"; \
+	  install -D -m755 "$$p" "$(DESTDIR)/$(installdir)/$$(basename $$p)"; \
+	done
+
+SCRIPTS_REAL = $(wildcard $(addprefix $(top_srcdir)/$(OUTDIR)/,$(SCRIPTS)))
+
+install-local-scripts: $(SCRIPTS_REAL)
+	@for p in $^; do \
+	  echo " install -m755 '$$p' '$(DESTDIR)/$(installdir)'"; \
+	  install -D -m755 \
+	    -s --strip-program $(top_srcdir)/debian/bin/fix-shebang \
+	    "$$p" "$(DESTDIR)/$(installdir)/$$(basename $$p)"; \
+	done
+
+DATA_REAL = $(wildcard $(addprefix $(top_srcdir)/$(OUTDIR)/,$(DATA)))
+
+install-local-data: $(DATA_REAL)
+	@for p in $^; do \
+	  echo " install -m644 '$$p' '$(DESTDIR)/$(installdir)'"; \
+	  install -D -m644 "$$p" "$(DESTDIR)/$(installdir)/$$(basename $$p)"; \
+	done
+
diff --git a/debian/rules.d/arch/powerpc/boot/Makefile b/debian/rules.d/arch/powerpc/boot/Makefile
new file mode 100644
index 000000000000..9dc418f260c4
--- /dev/null
+++ b/debian/rules.d/arch/powerpc/boot/Makefile
@@ -0,0 +1,18 @@
+PROGS = \
+	addnote \
+	hack-coff \
+	mktree
+
+SCRIPTS = \
+	wrapper
+
+include $(top_rulesdir)/Makefile.inc
+
+CPPFLAGS += -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64
+
+# gcc for ppc64 currently seems to be treating -I like -isystem, and
+# since arch/powerpc/boot has substitute versions of some standard
+# headers for use at boot time, they are also included in these tools.
+# In this case there is actually no need to use the -I option, so
+# filter it out.
+CPPFLAGS := $(filter-out -I%,$(CPPFLAGS))
diff --git a/debian/rules.d/scripts/Makefile b/debian/rules.d/scripts/Makefile
new file mode 100644
index 000000000000..b38e7e888cbf
--- /dev/null
+++ b/debian/rules.d/scripts/Makefile
@@ -0,0 +1,46 @@
+PROGS = \
+	bin2c \
+	extract-cert \
+	kallsyms \
+	recordmcount \
+	sign-file \
+	unifdef
+
+DATA = \
+	Kbuild.include \
+	Makefile.* \
+	mkversion \
+	module-common.lds \
+	subarch.include
+
+SCRIPTS =  \
+	checkincludes.pl \
+	checkstack.pl \
+	checkversion.pl \
+	depmod.sh \
+	gcc-*.sh \
+	gen_initramfs_list.sh \
+	headers_install.sh \
+	kernel-doc \
+	ld-version.sh \
+	Lindent \
+	makelst \
+	mksysmap \
+	mkuboot.sh \
+	modules-check.sh \
+	namespace.pl \
+	patch-kernel \
+	recordmcount.pl \
+	setlocalversion \
+	ver_linux
+
+SUBDIRS = \
+	basic \
+	genksyms \
+	kconfig \
+	mod
+
+include $(top_rulesdir)/Makefile.inc
+
+CPPFLAGS += -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64
+extract-cert sign-file: LDLIBS += -lcrypto
diff --git a/debian/rules.d/scripts/basic/Makefile b/debian/rules.d/scripts/basic/Makefile
new file mode 100644
index 000000000000..127f53fa8668
--- /dev/null
+++ b/debian/rules.d/scripts/basic/Makefile
@@ -0,0 +1,4 @@
+PROGS = \
+	fixdep
+
+include $(top_rulesdir)/Makefile.inc
diff --git a/debian/rules.d/scripts/genksyms/Makefile b/debian/rules.d/scripts/genksyms/Makefile
new file mode 100644
index 000000000000..88524563ff02
--- /dev/null
+++ b/debian/rules.d/scripts/genksyms/Makefile
@@ -0,0 +1,16 @@
+PROGS = genksyms
+
+include $(top_rulesdir)/Makefile.inc
+
+genksyms: genksyms.o parse.tab.o lex.lex.o
+
+lex.lex.o: keywords.c parse.tab.h
+
+parse.tab.c: parse.y
+	$(YACC) -o$@ -t -l $<
+
+parse.tab.h: parse.y
+	$(YACC) -o/dev/null --defines=$@ -t -l $<
+
+lex.lex.c: lex.l
+	$(LEX) -o$@ -L $<
diff --git a/debian/rules.d/scripts/kconfig/Makefile b/debian/rules.d/scripts/kconfig/Makefile
new file mode 100644
index 000000000000..c9ad2aaf9814
--- /dev/null
+++ b/debian/rules.d/scripts/kconfig/Makefile
@@ -0,0 +1,16 @@
+PROGS = conf
+
+include $(top_rulesdir)/Makefile.inc
+
+conf: conf.o confdata.o expr.o lexer.lex.o menu.o parser.tab.o preprocess.o symbol.o util.o
+
+lexer.lex.o: parser.tab.h
+
+%.lex.c: %.l
+	flex -o$@ -L $<
+
+%.tab.c: %.y
+	bison -o$@ -t -l $<
+
+%.tab.h: %.y
+	bison -o/dev/null --defines=$@ -t -l $<
diff --git a/debian/rules.d/scripts/mod/Makefile b/debian/rules.d/scripts/mod/Makefile
new file mode 100644
index 000000000000..35bf77cd2f33
--- /dev/null
+++ b/debian/rules.d/scripts/mod/Makefile
@@ -0,0 +1,22 @@
+PROGS = \
+	modpost \
+	modpost.real-lsb-32 \
+	modpost.real-lsb-64 \
+	modpost.real-msb-32 \
+	modpost.real-msb-64
+
+include $(top_rulesdir)/Makefile.inc
+
+wrapperdir = $(top_rulesdir)/$(OUTDIR)
+
+modpost.real-%:
+	$(MAKE) -f $(wrapperdir)/Makefile.real TYPE=$* SOURCEDIR=$(top_srcdir)/scripts/mod
+
+%: %.o
+	$(CC) $(CFLAGS) $(LDFLAGS) -o $@ $^
+
+modpost-opts.h: $(top_srcdir)/scripts/mod/modpost.c
+	$(wrapperdir)/gendef.py $< > $@
+
+modpost.o: modpost.c modpost-opts.h
+	$(CC) $(CFLAGS) -I $(CURDIR) -c -o $@ $<
diff --git a/debian/rules.d/scripts/mod/Makefile.real b/debian/rules.d/scripts/mod/Makefile.real
new file mode 100644
index 000000000000..8b097f8970f1
--- /dev/null
+++ b/debian/rules.d/scripts/mod/Makefile.real
@@ -0,0 +1,23 @@
+PROGS = modpost.real-$(TYPE)
+
+include $(top_rulesdir)/Makefile.inc
+
+wrapperdir = $(top_rulesdir)/$(OUTDIR)
+CFLAGS += -I $(CURDIR)/real-$(TYPE) -I $(wrapperdir)/real-$(TYPE)
+
+modpost.real-$(TYPE): file2alias.real-$(TYPE).o modpost.real-$(TYPE).o sumversion.real-$(TYPE).o
+	$(CC) $(CFLAGS) $(LDFLAGS) -o $@ $^
+
+%.real-$(TYPE).o: $(SOURCEDIR)/%.c real-$(TYPE)/devicetable-offsets.h
+	$(CC) $(CFLAGS) -c -o $@ $<
+
+real-$(TYPE)/devicetable-offsets.s: $(SOURCEDIR)/devicetable-offsets.c
+	mkdir -p real-$(TYPE)
+	$(CC) -include $(wrapperdir)/real-$(TYPE)/types.h $(CFLAGS) -nostdinc -I$(top_srcdir)/include -S -o $@ $<
+
+real-$(TYPE)/devicetable-offsets.h: real-$(TYPE)/devicetable-offsets.s
+	echo >$@ "#define __DEVICEVTABLE_OFFSETS_H__"
+	sed -ne "s:^[[:space:]]*\.ascii[[:space:]]*\"\(.*\)\".*:\1:; \
+		 /^->/{s:->#\(.*\):/* \1 */:; \
+		 s:^->\([^ ]*\) [\$$#]*\([^ ]*\) \(.*\):#define \1 \2 /* \3 */:; \
+		 s:->::; p;}" $< >>$@
diff --git a/debian/rules.d/scripts/mod/elfconfig.h b/debian/rules.d/scripts/mod/elfconfig.h
new file mode 100644
index 000000000000..8c90ea6002c9
--- /dev/null
+++ b/debian/rules.d/scripts/mod/elfconfig.h
@@ -0,0 +1,7 @@
+#include <endian.h>
+
+#if __BYTE_ORDER == __LITTLE_ENDIAN
+#define HOST_ELFDATA ELFDATA2LSB
+#elif __BYTE_ORDER == __BIG_ENDIAN
+#define HOST_ELFDATA ELFDATA2MSB
+#endif
diff --git a/debian/rules.d/scripts/mod/gendef.py b/debian/rules.d/scripts/mod/gendef.py
new file mode 100755
index 000000000000..55d3fc60e4ea
--- /dev/null
+++ b/debian/rules.d/scripts/mod/gendef.py
@@ -0,0 +1,20 @@
+#!/usr/bin/python3
+import re
+import sys
+
+for line in open(sys.argv[1]):
+    match = re.search(r'getopt\(argc, argv, "([\w:]*?)"\)', line)
+    if match:
+        options = match.group(1)
+        break
+else:
+    raise RuntimeError
+
+print('#define GETOPT_OPTIONS "%s"' % options)
+
+print('#define GETOPT_CASE', end=' ')
+for c in options:
+    if c == ':' or c == 'T':
+        continue
+    print("case '%c':" % c, end=' ')
+print()
diff --git a/debian/rules.d/scripts/mod/modpost.c b/debian/rules.d/scripts/mod/modpost.c
new file mode 100644
index 000000000000..d574957ae3c1
--- /dev/null
+++ b/debian/rules.d/scripts/mod/modpost.c
@@ -0,0 +1,136 @@
+#include <elf.h>
+#include <errno.h>
+#include <getopt.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+
+#include "modpost-opts.h"
+
+int main (int argc, char *argv[])
+{
+  char const *data, *class;
+  char *list_name = NULL;
+  char *name = NULL;
+  char prog[1024];
+  unsigned char ei[EI_NIDENT];
+  int opt;
+  FILE *file;
+
+  while ((opt = getopt (argc, argv, GETOPT_OPTIONS)) != -1)
+  { 
+    switch(opt)
+    {
+      GETOPT_CASE
+        break;
+      case 'T':
+        list_name = optarg;
+        break;
+      default:
+        return EXIT_FAILURE;
+    }
+  }
+
+  if (optind != argc)
+  {
+    name = argv[optind];
+  }
+  else if (list_name)
+  {
+    size_t name_len;
+    int is_stdin = strcmp (list_name, "-") == 0;
+
+    /* Read first line of list file */
+    if (is_stdin)
+    {
+      file = stdin;
+      setvbuf(stdin, NULL, _IONBF, 0); /* don't over-read */
+    }
+    else
+    {
+      file = fopen (list_name, "r");
+      if (!file)
+      {
+        fprintf (stderr, "Can't open \"%s\"\n", list_name);
+        return EXIT_FAILURE;
+      }
+    }
+    if (getline (&name, &name_len, file) < 0)
+    {
+      if (errno)
+      {
+        fprintf (stderr, "Can't read \"%s\"\n", list_name);
+        return EXIT_FAILURE;
+      }
+      else
+      {
+        /* Empty list */
+        return EXIT_SUCCESS;
+      }
+    }
+    if (!is_stdin)
+      fclose(file);
+
+    /* Remove new-line */
+    name [strcspn (name, "\n")] = 0;
+
+    /* If this came from stdin, we need to add the first name to the
+     * arguments, because the upstream modpost can't read it again.
+     */
+    if (is_stdin)
+    {
+      char **new_argv = malloc (sizeof(*argv) * (argc + 2));
+      memcpy(new_argv, argv, sizeof(*argv) * argc);
+      new_argv [argc] = name;
+      new_argv [argc + 1] = NULL;
+      argv = new_argv;
+    }
+  }
+  else
+  {
+    /* Empty list */
+    return EXIT_SUCCESS;
+  }
+
+  if (!(file = fopen (name, "r")))
+  {
+    fprintf (stderr, "Can't open \"%s\"\n", name);
+    return EXIT_FAILURE;
+  }
+
+  if (fread (ei, 1, EI_NIDENT, file) != EI_NIDENT)
+  {
+    fprintf (stderr, "Error: input truncated\n");
+    return EXIT_FAILURE;
+  }
+
+  if (memcmp (ei, ELFMAG, SELFMAG) != 0)
+  {
+    fprintf (stderr, "Error: not ELF\n");
+    return EXIT_FAILURE;
+  }
+  switch (ei[EI_DATA]) {
+    case ELFDATA2LSB:
+      data = "lsb";
+      break;
+    case ELFDATA2MSB:
+      data = "msb";
+      break;
+    default:
+      return EXIT_FAILURE;
+  }
+  switch (ei[EI_CLASS]) {
+    case ELFCLASS32:
+      class = "32";
+      break;
+    case ELFCLASS64:
+      class = "64";
+      break;
+    default:
+      return EXIT_FAILURE;
+  }
+  snprintf (prog, sizeof prog, "%s.real-%s-%s", argv[0], data, class);
+
+  return execv (prog, argv);
+}
diff --git a/debian/rules.d/scripts/mod/real-lsb-32/elfconfig.h b/debian/rules.d/scripts/mod/real-lsb-32/elfconfig.h
new file mode 100644
index 000000000000..1f7a7321aab8
--- /dev/null
+++ b/debian/rules.d/scripts/mod/real-lsb-32/elfconfig.h
@@ -0,0 +1,4 @@
+#define KERNEL_ELFCLASS ELFCLASS32
+#define KERNEL_ELFDATA ELFDATA2LSB
+#define MODULE_SYMBOL_PREFIX ""
+#include "../elfconfig.h"
diff --git a/debian/rules.d/scripts/mod/real-lsb-32/types.h b/debian/rules.d/scripts/mod/real-lsb-32/types.h
new file mode 100644
index 000000000000..bad6dcccd906
--- /dev/null
+++ b/debian/rules.d/scripts/mod/real-lsb-32/types.h
@@ -0,0 +1,3 @@
+#include "../types.h"
+typedef __u32 kernel_ulong_t;
+#define BITS_PER_LONG 32
diff --git a/debian/rules.d/scripts/mod/real-lsb-64/elfconfig.h b/debian/rules.d/scripts/mod/real-lsb-64/elfconfig.h
new file mode 100644
index 000000000000..e6f519fcc8d4
--- /dev/null
+++ b/debian/rules.d/scripts/mod/real-lsb-64/elfconfig.h
@@ -0,0 +1,4 @@
+#define KERNEL_ELFCLASS ELFCLASS64
+#define KERNEL_ELFDATA ELFDATA2LSB
+#define MODULE_SYMBOL_PREFIX ""
+#include "../elfconfig.h"
diff --git a/debian/rules.d/scripts/mod/real-lsb-64/types.h b/debian/rules.d/scripts/mod/real-lsb-64/types.h
new file mode 100644
index 000000000000..8d7b8759164e
--- /dev/null
+++ b/debian/rules.d/scripts/mod/real-lsb-64/types.h
@@ -0,0 +1,3 @@
+#include "../types.h"
+typedef __u64 __attribute__((aligned(8))) kernel_ulong_t;
+#define BITS_PER_LONG 64
diff --git a/debian/rules.d/scripts/mod/real-msb-32/elfconfig.h b/debian/rules.d/scripts/mod/real-msb-32/elfconfig.h
new file mode 100644
index 000000000000..a9ae561aba8b
--- /dev/null
+++ b/debian/rules.d/scripts/mod/real-msb-32/elfconfig.h
@@ -0,0 +1,4 @@
+#define KERNEL_ELFCLASS ELFCLASS32
+#define KERNEL_ELFDATA ELFDATA2MSB
+#define MODULE_SYMBOL_PREFIX ""
+#include "../elfconfig.h"
diff --git a/debian/rules.d/scripts/mod/real-msb-32/types.h b/debian/rules.d/scripts/mod/real-msb-32/types.h
new file mode 100644
index 000000000000..bad6dcccd906
--- /dev/null
+++ b/debian/rules.d/scripts/mod/real-msb-32/types.h
@@ -0,0 +1,3 @@
+#include "../types.h"
+typedef __u32 kernel_ulong_t;
+#define BITS_PER_LONG 32
diff --git a/debian/rules.d/scripts/mod/real-msb-64/elfconfig.h b/debian/rules.d/scripts/mod/real-msb-64/elfconfig.h
new file mode 100644
index 000000000000..844d22f5c589
--- /dev/null
+++ b/debian/rules.d/scripts/mod/real-msb-64/elfconfig.h
@@ -0,0 +1,4 @@
+#define KERNEL_ELFCLASS ELFCLASS64
+#define KERNEL_ELFDATA ELFDATA2MSB
+#define MODULE_SYMBOL_PREFIX ""
+#include "../elfconfig.h"
diff --git a/debian/rules.d/scripts/mod/real-msb-64/types.h b/debian/rules.d/scripts/mod/real-msb-64/types.h
new file mode 100644
index 000000000000..8d7b8759164e
--- /dev/null
+++ b/debian/rules.d/scripts/mod/real-msb-64/types.h
@@ -0,0 +1,3 @@
+#include "../types.h"
+typedef __u64 __attribute__((aligned(8))) kernel_ulong_t;
+#define BITS_PER_LONG 64
diff --git a/debian/rules.d/scripts/mod/types.h b/debian/rules.d/scripts/mod/types.h
new file mode 100644
index 000000000000..bba382183b1a
--- /dev/null
+++ b/debian/rules.d/scripts/mod/types.h
@@ -0,0 +1,12 @@
+/* Minimal definitions for mod_devicetable.h and devicetable-offsets.c */
+typedef unsigned char __u8;
+typedef unsigned short __u16;
+typedef unsigned int __u32;
+typedef unsigned long long __u64;
+typedef struct {
+        __u8 b[16];
+} guid_t;
+typedef guid_t uuid_le;
+typedef unsigned char uuid_t[16];
+#define UUID_STRING_LEN 36
+#define offsetof(a,b) __builtin_offsetof(a,b)
diff --git a/debian/rules.d/tools/bpf/bpftool/Makefile b/debian/rules.d/tools/bpf/bpftool/Makefile
new file mode 100644
index 000000000000..f2b04125ea7f
--- /dev/null
+++ b/debian/rules.d/tools/bpf/bpftool/Makefile
@@ -0,0 +1,27 @@
+include $(top_rulesdir)/Makefile.inc
+
+MAKE_BPFTOOL := +$(MAKE) -C $(top_srcdir)/$(OUTDIR) O=$(CURDIR)
+MAKE_BPFTOOL += prefix=/usr
+MAKE_BPFTOOL += mandir=/usr/share/man
+MAKE_BPFTOOL += V=$(KBUILD_VERBOSE)
+MAKE_BPFTOOL += ARCH=$(KERNEL_ARCH)
+MAKE_BPFTOOL += EXTRA_CFLAGS='$(CFLAGS) $(CPPFLAGS)'
+MAKE_BPFTOOL += EXTRA_LDFLAGS='$(LDFLAGS)'
+
+# dynamically linking with libbfd is not allowed in Debian
+MAKE_BPFTOOL += feature-libbfd=0 feature-libbfd-liberty=0 feature-libbfd-liberty-z=0
+
+all:
+	$(MAKE_BPFTOOL)
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	$(MAKE_BPFTOOL) doc
+endif
+# Check that bpftool wasn't linked with libbfd
+	type ldd
+	! ldd $(CURDIR)/bpftool | grep -E '\blibbfd'
+
+install:
+	$(MAKE_BPFTOOL) install
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	$(MAKE_BPFTOOL) doc-install
+endif
diff --git a/debian/rules.d/tools/hv/Makefile b/debian/rules.d/tools/hv/Makefile
new file mode 100644
index 000000000000..8c563673bcf7
--- /dev/null
+++ b/debian/rules.d/tools/hv/Makefile
@@ -0,0 +1,17 @@
+ifeq ($(filter i386 amd64 x32,$(DEB_HOST_ARCH)),)
+
+# Build nothing
+include $(top_rulesdir)/Makefile.inc
+
+else
+
+PROGS = \
+	hv_fcopy_daemon \
+	hv_kvp_daemon \
+	hv_vss_daemon
+
+installdir = /usr/sbin
+
+include $(top_rulesdir)/Makefile.inc
+
+endif
diff --git a/debian/rules.d/tools/lib/lockdep/Makefile b/debian/rules.d/tools/lib/lockdep/Makefile
new file mode 100644
index 000000000000..9b66ecb9a790
--- /dev/null
+++ b/debian/rules.d/tools/lib/lockdep/Makefile
@@ -0,0 +1,23 @@
+include $(top_rulesdir)/Makefile.inc
+
+DEB_HOST_MULTIARCH := $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
+
+# Catch use of missing kernel APIs early
+CFLAGS += -Werror=implicit-function-declaration
+
+MAKE_LOCKDEP := +$(MAKE) -C $(top_srcdir)/$(OUTDIR) O=$(CURDIR) V=1 \
+	prefix=/usr libdir_relative=lib/$(DEB_HOST_MULTIARCH) \
+	LIBLOCKDEP_VERSION=$(VERSION) \
+	CONFIG_FLAGS='$(CFLAGS) $(filter -D%,$(CPPFLAGS))' LDFLAGS='$(LDFLAGS)'
+
+unexport CFLAGS
+
+all:
+	$(MAKE_LOCKDEP)
+
+install:
+	$(MAKE_LOCKDEP) install
+	mkdir -p $(DESTDIR)/usr/include
+	cp -R $(top_srcdir)/$(OUTDIR)/include/liblockdep $(DESTDIR)/usr/include/
+	ln -sf liblockdep.so.$(VERSION) \
+		$(DESTDIR)/usr/lib/$(DEB_HOST_MULTIARCH)/liblockdep.so
diff --git a/debian/rules.d/tools/lib/lockdep/lockdep.in b/debian/rules.d/tools/lib/lockdep/lockdep.in
new file mode 100644
index 000000000000..4a0d03ac5211
--- /dev/null
+++ b/debian/rules.d/tools/lib/lockdep/lockdep.in
@@ -0,0 +1,2 @@
+#!/bin/sh
+LD_PRELOAD="liblockdep.so.@VERSION@ $LD_PRELOAD" exec "$@"
diff --git a/debian/rules.d/tools/objtool/Makefile b/debian/rules.d/tools/objtool/Makefile
new file mode 100644
index 000000000000..9990cde31532
--- /dev/null
+++ b/debian/rules.d/tools/objtool/Makefile
@@ -0,0 +1,11 @@
+include $(top_rulesdir)/Makefile.inc
+
+all:
+# For now, only supported target architecture is x86.  Later we'll need to build
+# for multiple targets and add a wrapper, same as for modpost.
+# objtool explicitly sets CC and LD to be native tools; we need to override
+# this on the command line to make cross-builds work.
+	$(MAKE) -C $(top_srcdir)/tools/objtool O=$(CURDIR) HOSTARCH=$(KERNEL_ARCH) ARCH=x86 CC=$(CC) LD=$(CROSS_COMPILE)ld V=$(KBUILD_VERBOSE)
+
+install:
+	install -D -m755 objtool $(DESTDIR)/$(installdir)/objtool
diff --git a/debian/rules.d/tools/perf/Makefile b/debian/rules.d/tools/perf/Makefile
new file mode 100644
index 000000000000..e1ce69c57054
--- /dev/null
+++ b/debian/rules.d/tools/perf/Makefile
@@ -0,0 +1,65 @@
+include $(top_rulesdir)/Makefile.inc
+
+MAKE_PERF := $(MAKE) O=$(CURDIR) prefix=/usr V=1 VF=1 ARCH=$(KERNEL_ARCH) WERROR=0 EXTRA_CFLAGS='$(CFLAGS) $(CPPFLAGS)' LDFLAGS='$(LDFLAGS)'
+
+# Disable Gtk UI until it's more usable
+MAKE_PERF += NO_GTK2=1
+
+# Do not build the unversioned jvmti library
+MAKE_PERF += feature-jvmti=0
+
+# Include version in all directory names
+MAKE_PERF += perfexecdir=lib/perf_$(VERSION)-core plugindir=/usr/lib/traceevent_$(VERSION)/plugins STRACE_GROUPS_DIR=share/perf_$(VERSION)-core/strace/groups tipdir=share/doc/linux-perf-$(VERSION) perf_include_dir=include/perf_$(VERSION) perf_examples_dir=share/doc/linux-perf-$(VERSION)/examples
+
+# perf can link against libbfd if available, but the result is
+# undistributable as they are licenced under GPL v2 and v3+
+# respectively.  Override detection of libbfd and insist that
+# cplus_demangle() can be found in libiberty (LGPL v2.1+).
+MAKE_PERF += feature-libbfd=0 feature-libbfd-liberty=0 feature-libbfd-liberty-z=0 HAVE_CPLUS_DEMANGLE_SUPPORT=1
+
+# perf can link against libcrypto if available, but the result is
+# undistributable as GPL v2 and OpenSSL are not compatible without
+# an explicit exception.  Override detection of libcrypto.
+MAKE_PERF += NO_LIBCRYPTO=1
+
+# perf only links against libopencsd (coresight) if specifically enabled
+MAKE_PERF += CORESIGHT=1
+
+# Currently babeltrace support for `perf data' is not automatically detected.
+MAKE_PERF += LIBBABELTRACE=1
+
+# Build with asciidoctor, not asciidoc
+MAKE_PERF += USE_ASCIIDOCTOR=1
+
+# Build with Python 3, not Python 2
+MAKE_PERF += PYTHON=/usr/bin/python3
+
+all:
+# perf changes some default directories depending on whether DESTDIR is
+# set.  We must define it even when building to avoid a rebuild when we
+# run 'make install'.
+	+$(MAKE_PERF) -C $(top_srcdir)/tools/perf -f Makefile.perf all VERSION=$(VERSION) DESTDIR=dummy
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	+$(MAKE_PERF) -C $(top_srcdir)/tools/perf/Documentation man VERSION=$(VERSION)
+endif
+# Check that perf didn't get linked against libbfd or libcrypto
+	type ldd
+	! ldd $(CURDIR)/perf | grep -E '\blib(bfd|crypto)'
+# Check that it includes cplus_demangle from libiberty
+	grep cplus_demangle $(CURDIR)/perf
+
+install:
+	+$(MAKE_PERF) -C $(top_srcdir)/tools/perf -f Makefile.perf install VERSION=$(VERSION)
+# Don't install a 'trace' alias yet:
+# - We need a wrapper for it anyway, so there's little point adding a
+#   versioned link
+# - It doesn't work out-of-the-box as non-root (it depends on debugfs),
+#   so it's less widely useful than strace
+# - 'perf trace' doesn't take much more typing
+	rm -f $(DESTDIR)/usr/bin/trace_$(VERSION)
+	mkdir -p $(DESTDIR)/usr/share/bash-completion/
+	mv $(DESTDIR)/etc/bash_completion.d \
+		$(DESTDIR)/usr/share/bash-completion/completions
+	rmdir --ignore-fail-on-non-empty $(DESTDIR)/etc
+# Check for unversioned files that are likely to result in file conflicts
+	cd $(DESTDIR) && ! find \! -type d \! -path '*[_-]$(VERSION)*' | grep .
diff --git a/debian/rules.d/tools/power/cpupower/Makefile b/debian/rules.d/tools/power/cpupower/Makefile
new file mode 100644
index 000000000000..c43bd62f1a70
--- /dev/null
+++ b/debian/rules.d/tools/power/cpupower/Makefile
@@ -0,0 +1,26 @@
+include $(top_rulesdir)/Makefile.inc
+
+MAKE_CPUPOWER := $(shell dpkg-buildflags --export=cmdline) $(MAKE) O=$(CURDIR) CPUFREQ_BENCH=false V=true mandir=/usr/share/man
+
+MAKE_CPUPOWER += DEBUG=$(if $(filter noopt,$(DEB_BUILD_OPTIONS)),true,)
+
+# Don't strip binaries here; let dh_strip determine what to do
+MAKE_CPUPOWER += STRIP=true
+
+MAKE_CPUPOWER += CROSS='$(CROSS_COMPILE)'
+
+MAKE_CPUPOWER += PACKAGE_BUGREPORT='Debian\ \(reportbug\ linux-cpupower\)'
+
+MAKE_CPUPOWER += libdir=/usr/lib/$(DEB_HOST_MULTIARCH)
+
+all:
+	+$(MAKE_CPUPOWER) -C $(top_srcdir)/tools/power/cpupower
+
+install:
+	+$(MAKE_CPUPOWER) -C $(top_srcdir)/tools/power/cpupower install DESTDIR=$(DESTDIR)
+ifneq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	rm -rf $(DESTDIR)/usr/share/man
+endif
+
+clean:
+	+$(MAKE_CPUPOWER) -C $(top_srcdir)/tools/power/cpupower clean
diff --git a/debian/rules.d/tools/power/x86/Makefile b/debian/rules.d/tools/power/x86/Makefile
new file mode 100644
index 000000000000..2b9d7735c70d
--- /dev/null
+++ b/debian/rules.d/tools/power/x86/Makefile
@@ -0,0 +1,5 @@
+SUBDIRS = \
+	turbostat \
+	x86_energy_perf_policy
+
+include $(top_rulesdir)/Makefile.inc
diff --git a/debian/rules.d/tools/power/x86/turbostat/Makefile b/debian/rules.d/tools/power/x86/turbostat/Makefile
new file mode 100644
index 000000000000..eb5124d3a555
--- /dev/null
+++ b/debian/rules.d/tools/power/x86/turbostat/Makefile
@@ -0,0 +1,9 @@
+PROGS = turbostat
+
+installdir = /usr/sbin
+
+include $(top_rulesdir)/Makefile.inc
+
+CPPFLAGS += -I"$(top_srcdir)/tools/include" -DMSRHEADER='"$(top_srcdir)/arch/x86/include/asm/msr-index.h"' -DINTEL_FAMILY_HEADER='"$(top_srcdir)/arch/x86/include/asm/intel-family.h"'
+
+LDLIBS += -lcap -lrt
diff --git a/debian/rules.d/tools/power/x86/x86_energy_perf_policy/Makefile b/debian/rules.d/tools/power/x86/x86_energy_perf_policy/Makefile
new file mode 100644
index 000000000000..b9ec56c89cc8
--- /dev/null
+++ b/debian/rules.d/tools/power/x86/x86_energy_perf_policy/Makefile
@@ -0,0 +1,7 @@
+PROGS = x86_energy_perf_policy
+
+installdir = /usr/sbin
+
+include $(top_rulesdir)/Makefile.inc
+
+CPPFLAGS += -I"$(top_srcdir)/tools/include" -DMSRHEADER='"$(top_srcdir)/arch/x86/include/asm/msr-index.h"'
diff --git a/debian/rules.d/tools/usb/usbip/Makefile b/debian/rules.d/tools/usb/usbip/Makefile
new file mode 100644
index 000000000000..3decaac988b6
--- /dev/null
+++ b/debian/rules.d/tools/usb/usbip/Makefile
@@ -0,0 +1,31 @@
+srcdir := $(top_srcdir)/tools/usb/usbip
+
+# Make sure we don't override top_srcdir in the sub-make.  'unexport
+# top_srcdir' is *not* sufficient; nor is adding 'MAKEFLAGS=' to the
+# sub-make command line.
+unexport MAKEFLAGS
+
+all: export CFLAGS := $(shell dpkg-buildflags --get CFLAGS)
+all: export CPPFLAGS := $(shell dpkg-buildflags --get CFLAGS) \
+	-isystem $(top_srcdir)/debian/build/build-tools/include
+all: export LDFLAGS := $(shell dpkg-buildflags --get LDFLAGS)
+all:
+	rsync -a $(srcdir)/ .
+	./autogen.sh
+	./configure \
+		--prefix=/usr \
+		--with-tcp-wrappers \
+		--with-usbids-dir=/usr/share/misc \
+		--disable-shared \
+		--disable-static \
+		--host=$(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
+	$(MAKE) V=$(KBUILD_VERBOSE)
+
+install:
+	$(MAKE) V=$(KBUILD_VERBOSE) install
+ifneq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	rm -rf $(DESTDIR)/usr/share/man
+endif
+
+clean:
+	rm -rf *
diff --git a/debian/rules.defs b/debian/rules.defs
new file mode 100644
index 000000000000..9384a9b3e434
--- /dev/null
+++ b/debian/rules.defs
@@ -0,0 +1,5 @@
+include /usr/share/dpkg/default.mk
+
+BUILD_DIR = debian/build
+STAMPS_DIR = debian/stamps
+
diff --git a/debian/rules.real b/debian/rules.real
new file mode 100644
index 000000000000..e15b11a0b55d
--- /dev/null
+++ b/debian/rules.real
@@ -0,0 +1,891 @@
+#
+# This Makefile executes the unpack/build/binary targets for a single
+# subarch, which is passed in the subarch variable. Empty subarch
+# variable means that we are building for an arch without the subarch.
+# Additionally, variables version, abiname and ltver are
+# expected to be available (need to be exported from the parent process).
+#
+SHELL  := bash -e
+MAINTAINER := $(shell sed -ne 's,^Maintainer: .[^<]*<\([^>]*\)>,\1,p' debian/control)
+DISTRIBUTION := $(shell dpkg-parsechangelog -SDistribution)
+SOURCE_DATE := $(shell dpkg-parsechangelog -SDate)
+SOURCE_DATE_UTC_ISO := $(shell date -u -d '$(SOURCE_DATE)' +%Y-%m-%d)
+
+DISTRIBUTOR := $(shell lsb_release -is 2>/dev/null)
+ifeq ($(DISTRIBUTOR),)
+DISTRIBUTOR := Debian
+endif
+
+include debian/rules.defs
+
+ifdef ARCH
+  ifneq ($(DEB_HOST_ARCH),$(ARCH))
+    $(error Attempting to build a $(ARCH) target but host architecture is $(DEB_HOST_ARCH).  Use dpkg-architecture to override the host architecture)
+  endif
+endif
+
+ifdef OVERRIDE_HOST_TYPE
+  CROSS_COMPILE := $(OVERRIDE_HOST_TYPE)-
+else ifneq ($(DEB_BUILD_ARCH),$(DEB_HOST_ARCH))
+  CROSS_COMPILE := $(DEB_HOST_GNU_TYPE)-
+else
+  CROSS_COMPILE :=
+endif
+export CROSS_COMPILE
+
+export DH_OPTIONS
+export DEB_HOST_ARCH DEB_HOST_GNU_TYPE DEB_BUILD_ARCH
+export DEB_BUILD_PATH = $(CURDIR)  # for dpkg-buildflags
+export LC_ALL = C.UTF-8
+undefine LANGUAGE
+export LINK_DOC_PACKAGE
+
+stamp = [ -d $(dir $@) ] || mkdir $(dir $@); touch $@
+
+setup_env := env -u ABINAME -u ARCH -u FEATURESET -u FLAVOUR -u VERSION -u LOCALVERSION
+setup_env += DISTRIBUTION_OFFICIAL_BUILD=1 DISTRIBUTOR="$(DISTRIBUTOR)" DISTRIBUTION_VERSION="$(SOURCEVERSION)" KBUILD_BUILD_TIMESTAMP="$(SOURCE_DATE)" KBUILD_BUILD_VERSION_TIMESTAMP="$(DISTRIBUTOR) $(SOURCEVERSION) ($(SOURCE_DATE_UTC_ISO))" KBUILD_BUILD_USER="$(word 1,$(subst @, ,$(MAINTAINER)))" KBUILD_BUILD_HOST="$(word 2,$(subst @, ,$(MAINTAINER)))"
+setup_env += KBUILD_VERBOSE=$(if $(filter terse,$(DEB_BUILD_OPTIONS)),0,1)
+
+MAKE_CLEAN = $(setup_env) $(MAKE) KCFLAGS=-fdebug-prefix-map=$(CURDIR)/=
+MAKE_SELF := $(MAKE) -f debian/rules.real $(MAKEOVERRIDES)
+MAKEOVERRIDES =
+
+#
+# Targets
+#
+
+packages_enabled := $(shell dh_listpackages)
+define if_package
+$(if $(filter $(1),$(packages_enabled)),$(2))
+endef
+
+build-arch-arch: \
+	$(call if_package, linux-kbuild-$(VERSION),      build-kbuild) \
+	$(call if_package, linux-perf-$(VERSION),        build-perf) \
+	$(call if_package, linux-bootwrapper-$(ABINAME), build-bootwrapper) \
+	$(call if_package, bpftool,                      build-bpftool) \
+	$(call if_package, usbip,                        build-usbip) \
+	$(call if_package, linux-cpupower,               build-cpupower) \
+	$(call if_package, liblockdep-dev,               build-liblockdep) \
+	$(call if_package, hyperv-daemons,               build-hyperv-daemons)
+binary-arch-arch: \
+	$(call if_package, $(SOURCE_BASENAME)-config-$(VERSION), install-config_$(ARCH)) \
+	$(call if_package, linux-libc-dev,               install-libc-dev_$(ARCH)) \
+	$(call if_package, linux-kbuild-$(VERSION),      install-kbuild) \
+	$(call if_package, linux-perf-$(VERSION),        install-perf) \
+	$(if $(filter-out x-$(VERSION),x$(SOURCE_SUFFIX)), \
+	  $(call if_package, linux-perf$(SOURCE_SUFFIX), install-perf-meta)) \
+	$(call if_package, linux-bootwrapper-$(ABINAME), install-bootwrapper) \
+	$(call if_package, bpftool,                      install-bpftool) \
+	$(call if_package, usbip,                        install-usbip) \
+	$(call if_package, linux-cpupower,               install-cpupower) \
+	$(call if_package, liblockdep-dev,               install-liblockdep) \
+	$(call if_package, hyperv-daemons,               install-hyperv-daemons)
+
+build-indep: \
+	$(call if_package, $(SOURCE_BASENAME)-doc-$(VERSION), $(STAMPS_DIR)/build-doc)
+binary-indep: \
+	$(call if_package, $(SOURCE_BASENAME)-doc-$(VERSION), install-doc) \
+	$(call if_package, $(SOURCE_BASENAME)-source-$(VERSION), install-source) \
+	$(if $(filter-out x-$(VERSION),x$(SOURCE_SUFFIX)), \
+	  $(call if_package, $(SOURCE_BASENAME)-doc$(SOURCE_SUFFIX), install-doc-meta) \
+	  $(call if_package, $(SOURCE_BASENAME)-source$(SOURCE_SUFFIX), install-source-meta)) \
+	$(call if_package, $(SOURCE_BASENAME)-support-$(ABINAME), install-support) \
+	$(call if_package, lockdep,                      install-lockdep)
+
+binary-arch-flavour: \
+	$(call if_package, $(IMAGE_PACKAGE_NAME),        install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR)) \
+	$(call if_package, linux-image$(SOURCE_SUFFIX)$(LOCALVERSION), install-image-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR)) \
+	$(call if_package, linux-image-$(ABINAME)$(LOCALVERSION)-dbg, install-image-dbg_$(ARCH)_$(FEATURESET)_$(FLAVOUR)) \
+	$(call if_package, linux-image$(SOURCE_SUFFIX)$(LOCALVERSION)-dbg, install-image-dbg-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR)) \
+	$(call if_package, linux-headers-$(ABINAME)$(LOCALVERSION), install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR)) \
+	$(call if_package, linux-headers$(SOURCE_SUFFIX)$(LOCALVERSION), install-headers-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR))
+
+binary-indep-featureset: \
+	$(call if_package, linux-headers-$(ABINAME)-common$(LOCALVERSION), install-common-headers_$(FEATURESET))
+
+build-arch-flavour: \
+	$(call if_package, $(IMAGE_PACKAGE_NAME),        $(STAMPS_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR))
+
+setup-arch-flavour: \
+	$(call if_package, $(IMAGE_PACKAGE_NAME),        $(STAMPS_DIR)/setup_$(ARCH)_$(FEATURESET)_$(FLAVOUR))
+
+source-featureset: $(STAMPS_DIR)/source_$(FEATURESET)
+
+$(BUILD_DIR)/config.$(ARCH)_$(FEATURESET)_$(FLAVOUR): $(KCONFIG)
+	mkdir -p '$(dir $@)'
+	debian/bin/kconfig.py '$@' $(KCONFIG) $(KCONFIG_OPTIONS)
+
+define copy_source
+mkdir -p '$(1)'
+cp -al $(filter-out debian .pc .svk .svn .git, $(wildcard * .[^.]*)) '$(1)'
+endef
+
+$(BUILD_DIR)/$(SOURCE_BASENAME)-source-$(UPSTREAMVERSION).tar.xz: DIR = $(BUILD_DIR)/$(SOURCE_BASENAME)-source-$(UPSTREAMVERSION)
+$(BUILD_DIR)/$(SOURCE_BASENAME)-source-$(UPSTREAMVERSION).tar.xz: $(STAMPS_DIR)/source
+	rm -rf '$@' '$(DIR)'
+	$(call copy_source,$(DIR))
+	chmod -R u+rw,go=rX '$(DIR)'
+	find '$(DIR)' -depth -newermt '$(SOURCE_DATE)' -print0 | \
+		xargs -0r touch --no-dereference --date='$(SOURCE_DATE)'
+	cd '$(BUILD_DIR)'; \
+	find '$(SOURCE_BASENAME)-source-$(UPSTREAMVERSION)' \
+		-name '*.pyc' -prune -o \
+		-print0 | \
+		sort -z | \
+		tar --owner=root --group=root --numeric-owner \
+			--no-recursion --null -T - -caf '$(SOURCE_BASENAME)-source-$(UPSTREAMVERSION).tar.xz'
+	rm -rf '$(DIR)'
+
+$(BUILD_DIR)/linux-patch-$(UPSTREAMVERSION)-%.patch.xz: $(STAMPS_DIR)/source_none $(STAMPS_DIR)/source_%
+	set -o pipefail;						\
+	(cd '$(BUILD_DIR)';						\
+	 set +e;							\
+         diff -urN -p -x debian -x .pc -x .svk -x .svn -x .git -x '*.pyc' source_none source_$*; \
+	 test $$? -eq 1) |						\
+	filterdiff --remove-timestamps --strip=1 --addoldprefix=a/ --addnewprefix=b/ | \
+	xz -c >$@ ||							\
+	(rm -f $@; exit 1)
+
+$(STAMPS_DIR)/source:
+	test -d .pc
+	set +e; QUILT_PC=.pc quilt unapplied --quiltrc - >/dev/null && echo 'Patch series not fully applied'; test $$? -eq 1
+	@$(stamp)
+
+$(STAMPS_DIR)/source_%: SOURCE_DIR=$(BUILD_DIR)/source
+$(STAMPS_DIR)/source_%: DIR=$(BUILD_DIR)/source_$*
+$(STAMPS_DIR)/source_%: $(STAMPS_DIR)/source
+	mkdir -p '$(BUILD_DIR)'
+	rm -rf '$(DIR)'
+	$(call copy_source,$(DIR))
+	cd '$(DIR)' && QUILT_PATCHES='$(CURDIR)/debian/patches-$*' QUILT_PC=.pc quilt push --quiltrc - -a -q --fuzz=0
+	@$(stamp)
+.PRECIOUS: $(STAMPS_DIR)/source_%
+
+$(STAMPS_DIR)/source_none: DIR=$(BUILD_DIR)/source_none
+$(STAMPS_DIR)/source_none: $(STAMPS_DIR)/source
+	mkdir -p '$(BUILD_DIR)'
+	rm -f '$(DIR)'
+	ln -s '$(CURDIR)' '$(DIR)'
+	@$(stamp)
+
+$(STAMPS_DIR)/setup_$(ARCH)_$(FEATURESET)_$(FLAVOUR): CONFIG=$(BUILD_DIR)/config.$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+$(STAMPS_DIR)/setup_$(ARCH)_$(FEATURESET)_$(FLAVOUR): SOURCE_DIR=$(BUILD_DIR)/source_$(FEATURESET)
+$(STAMPS_DIR)/setup_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DIR=$(BUILD_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+$(STAMPS_DIR)/setup_$(ARCH)_$(FEATURESET)_$(FLAVOUR): $(STAMPS_DIR)/source_$(FEATURESET) $(BUILD_DIR)/config.$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+	rm -rf '$(DIR)'
+	mkdir '$(DIR)'
+	cp '$(CONFIG)' '$(DIR)/.config'
+	echo 'override ARCH = $(KERNEL_ARCH)' >> '$(DIR)/.kernelvariables'
+	echo 'override KERNELRELEASE = $(ABINAME)$(LOCALVERSION_IMAGE)' >> '$(DIR)/.kernelvariables'
+	echo 'CCACHE = ccache' >> '$(DIR)/.kernelvariables'
+ifeq (./,$(dir $(COMPILER)))
+	echo 'CC = $$(if $$(DEBIAN_KERNEL_USE_CCACHE),$$(CCACHE)) $$(CROSS_COMPILE)$(COMPILER)' >> '$(DIR)/.kernelvariables'
+else
+# To allow for cross-compiles, we want to split up the configured
+# compiler filename and prepend the directory to $PATH.  For a native
+# compile, so long as the configured compiler is installed it should
+# always be found first.
+# However, $PATH changes don't work consistently in make (bug #895835).
+# Instead we do the path lookup here and generate a new absolute
+# filename.
+	echo 'CC = $$(if $$(DEBIAN_KERNEL_USE_CCACHE),$$(CCACHE)) $$(word 1,$$(foreach dir,$(dir $(COMPILER)) $$(subst :, ,$$(PATH)),$$(wildcard $$(dir)/$$(CROSS_COMPILE)$(notdir $(COMPILER)))))' >> '$(DIR)/.kernelvariables'
+endif
+# TODO: Should we set CROSS_COMPILE always?
+ifdef OVERRIDE_HOST_TYPE
+	echo 'override CROSS_COMPILE = $(OVERRIDE_HOST_TYPE)-' >> '$(DIR)/.kernelvariables'
+else
+	echo 'ifneq ($$(DEB_BUILD_ARCH),$$(DEB_HOST_ARCH))' >> '$(DIR)/.kernelvariables'
+	echo 'override CROSS_COMPILE = $$(DEB_HOST_GNU_TYPE)-' >> '$(DIR)/.kernelvariables'
+	echo 'endif' >> '$(DIR)/.kernelvariables'
+endif
+ifdef KCFLAGS
+	echo 'KCFLAGS += $(KCFLAGS)' >> '$(DIR)/.kernelvariables'
+endif
+	+$(MAKE_CLEAN) -C '$(SOURCE_DIR)' O='$(CURDIR)/$(DIR)' listnewconfig
+	+yes "" | $(MAKE_CLEAN) -C '$(SOURCE_DIR)' O='$(CURDIR)/$(DIR)' oldconfig >/dev/null
+	@$(stamp)
+
+$(STAMPS_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DIR=$(BUILD_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+$(STAMPS_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR): $(STAMPS_DIR)/setup_$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+
+$(STAMPS_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR):
+	+$(MAKE_CLEAN) -C '$(DIR)'
+	debian/bin/buildcheck.py $(DIR) $(ARCH) $(FEATURESET) $(FLAVOUR)
+	@$(stamp)
+
+$(STAMPS_DIR)/build-doc: DIR=$(BUILD_DIR)/build-doc
+# sphinx commands in /usr/bin are managed by the alternatives system.
+# Change $PATH to make sure we consistently use the Python 3 version.
+$(STAMPS_DIR)/build-doc: PATH:=/usr/share/sphinx/scripts/python3:$(PATH)
+$(STAMPS_DIR)/build-doc: $(STAMPS_DIR)/source
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	mkdir -p '$(BUILD_DIR)'
+	rm -rf '$(DIR)'
+	$(call copy_source,$(DIR))
+	+$(MAKE_CLEAN) -C '$(DIR)' PYTHON=python3 xmldocs
+	+$(MAKE_CLEAN) -C '$(DIR)' PYTHON=python3 htmldocs
+endif
+	@$(stamp)
+
+install-base:
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	dh_installdocs $(if $(LINK_DOC_PACKAGE),--link-doc=$(LINK_DOC_PACKAGE))
+endif
+	dh_installchangelogs
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_gencontrol -- $(GENCONTROL_ARGS)
+	dh_md5sums
+	dh_builddeb -- -Zxz $(BUILDDEB_ARGS)
+
+install-dummy:
+	dh_testdir
+	dh_testroot
+	dh_prep
+	+$(MAKE_SELF) install-base
+
+install-doc: PACKAGE_NAME = $(SOURCE_BASENAME)-doc-$(VERSION)
+install-doc: DIR = $(BUILD_DIR)/build-doc
+install-doc: PACKAGE_DIR = debian/$(PACKAGE_NAME)
+install-doc: OUT_DIR = $(PACKAGE_DIR)/usr/share/doc/$(PACKAGE_NAME)
+install-doc: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-doc: $(STAMPS_DIR)/build-doc
+	dh_prep
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	mkdir -p $(OUT_DIR)
+	set -o pipefail; \
+	find CREDITS MAINTAINERS README Documentation \
+		-name '.gitignore' -prune -o -name DocBook -prune -o \
+		-path Documentation/media -prune -o \
+		-path Documentation/sphinx -prune -o \
+		-name 'Makefile*' -prune -o \
+		-print | \
+	cpio -pd --preserve-modification-time '$(CURDIR)/$(OUT_DIR)'
+	set -o pipefail; \
+	cd $(DIR)/Documentation/output; \
+	find * -name '*.rst' -prune -o -name objects.inv -prune \
+		-o -name xml -prune -o -print | \
+	cpio -pd --preserve-modification-time '$(CURDIR)/$(OUT_DIR)/html'
+	find $(OUT_DIR)/Documentation -type f | xargs gzip -9n
+# Fix up symlinks to gzipped docs
+	cd $(OUT_DIR)/Documentation; \
+	find -type l | while read link; do \
+		dest="$$(readlink -f "$$link")"; \
+		if [ -f "$$dest.gz" ]; then \
+			rm -f "$$link"; \
+			ln -sr "$$dest.gz" "$$link.gz"; \
+		fi; \
+	done
+endif
+	+$(MAKE_SELF) install-base
+
+install-doc-meta: PACKAGE_NAME = $(SOURCE_BASENAME)-doc$(SOURCE_SUFFIX)
+install-doc-meta: PACKAGE_DIR = debian/$(PACKAGE_NAME)
+install-doc-meta: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-doc-meta: LINK_DOC_PACKAGE = $(SOURCE_BASENAME)-doc-$(VERSION)
+install-doc-meta:
+	dh_testdir
+	dh_prep
+	+$(MAKE_SELF) install-base
+
+install-common-headers_$(FEATURESET): PACKAGE_NAME = linux-headers-$(ABINAME)-common$(LOCALVERSION)
+install-common-headers_$(FEATURESET): PACKAGE_NAME_KBUILD = linux-kbuild-$(VERSION)
+install-common-headers_$(FEATURESET): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-common-headers_$(FEATURESET): BASE_DIR = /usr/src/$(PACKAGE_NAME)
+install-common-headers_$(FEATURESET): SOURCE_DIR = $(BUILD_DIR)/source_$(FEATURESET)
+install-common-headers_$(FEATURESET): DIR = debian/$(PACKAGE_NAME)/$(BASE_DIR)
+install-common-headers_$(FEATURESET): $(STAMPS_DIR)/source_$(FEATURESET)
+	dh_testdir
+	dh_testroot
+	dh_prep
+
+	set -o pipefail; \
+	cd $(SOURCE_DIR); \
+	( \
+		echo Makefile; \
+		for arch in $(ALL_KERNEL_ARCHES); do \
+			find arch/$$arch -maxdepth 1 -name 'Makefile*' -print; \
+			find arch/$$arch \( -name 'Kbuild.platforms' -o -name 'Platform' \) -print; \
+			find $$(find arch/$$arch \( -name include -o -name scripts \) -type d -print) -print; \
+		done; \
+		find include -print; \
+	) \
+	| \
+	cpio -pd --preserve-modification-time '$(CURDIR)/$(DIR)'
+
+	dh_link /usr/lib/$(PACKAGE_NAME_KBUILD)/scripts $(BASE_DIR)/scripts
+	dh_link /usr/lib/$(PACKAGE_NAME_KBUILD)/tools $(BASE_DIR)/tools
+
+	+$(MAKE_SELF) install-base
+
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): REAL_VERSION = $(ABINAME)$(LOCALVERSION)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_NAME = linux-headers-$(REAL_VERSION)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_NAME_COMMON = linux-headers-$(ABINAME)-common$(LOCALVERSION_HEADERS)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_NAME_KBUILD = linux-kbuild-$(VERSION)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): BASE_DIR = /usr/src/$(PACKAGE_NAME)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): BASE_DIR_COMMON = /usr/src/$(PACKAGE_NAME_COMMON)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): SOURCE_DIR = $(BUILD_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): REF_DIR = $(BUILD_DIR)/source_$(FEATURESET)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_DIR = debian/$(PACKAGE_NAME)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DIR = $(PACKAGE_DIR)/$(BASE_DIR)
+install-headers_$(ARCH)_$(FEATURESET)_$(FLAVOUR): $(STAMPS_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+	dh_testdir
+	dh_testroot
+	dh_prep
+
+	mkdir -p $(DIR)/arch/$(KERNEL_ARCH)/kernel
+	cp -a $(SOURCE_DIR)/{.config,.kernel*,Module.symvers,include} $(DIR)
+	cp -a $(SOURCE_DIR)/arch/$(KERNEL_ARCH)/include $(DIR)/arch/$(KERNEL_ARCH)
+	find $(DIR) -name '*.cmd' -delete
+
+	if [ -f $(SOURCE_DIR)/arch/$(KERNEL_ARCH)/lib/crtsavres.o ]; then \
+		mkdir $(DIR)/arch/$(KERNEL_ARCH)/lib; \
+		cp -a $(SOURCE_DIR)/arch/$(KERNEL_ARCH)/lib/crtsavres.o $(DIR)/arch/$(KERNEL_ARCH)/lib; \
+	fi
+
+	cp -a $(SOURCE_DIR)/scripts/module.lds $(DIR)/arch/$(KERNEL_ARCH)
+
+	@echo 'include $(BASE_DIR_COMMON)/Makefile' >> $(DIR)/Makefile
+
+	dh_link /usr/lib/$(PACKAGE_NAME_KBUILD)/scripts $(BASE_DIR)/scripts
+	dh_link /usr/lib/$(PACKAGE_NAME_KBUILD)/tools $(BASE_DIR)/tools
+
+	mkdir -p $(PACKAGE_DIR)/lib/modules/$(REAL_VERSION)
+	ln -s /usr/src/$(PACKAGE_NAME) $(PACKAGE_DIR)/lib/modules/$(REAL_VERSION)/build
+	ln -s /usr/src/$(PACKAGE_NAME_COMMON) $(PACKAGE_DIR)/lib/modules/$(REAL_VERSION)/source
+
+	+$(MAKE_SELF) install-base
+
+install-headers-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_NAME = linux-headers$(SOURCE_SUFFIX)$(LOCALVERSION)
+install-headers-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-headers-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR): LINK_DOC_PACKAGE = linux-headers-$(ABINAME)$(LOCALVERSION)
+install-headers-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR):
+	dh_testdir
+	dh_prep
+	+$(MAKE_SELF) install-base
+
+install-libc-dev_$(ARCH): PACKAGE_NAME = linux-libc-dev
+install-libc-dev_$(ARCH): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-libc-dev_$(ARCH): DIR = $(BUILD_DIR)/build-libc-dev
+install-libc-dev_$(ARCH): OUT_DIR = debian/$(PACKAGE_NAME)/usr
+install-libc-dev_$(ARCH):
+	dh_testdir
+	dh_testroot
+	dh_prep
+	rm -rf '$(DIR)'
+	mkdir -p $(DIR)
+	+$(MAKE_CLEAN) O='$(CURDIR)/$(DIR)' headers_install ARCH=$(KERNEL_ARCH) INSTALL_HDR_PATH='$(CURDIR)'/$(OUT_DIR)
+
+	rm -rf $(OUT_DIR)/include/drm $(OUT_DIR)/include/scsi
+	find $(OUT_DIR)/include \( -name .install -o -name ..install.cmd \) -execdir rm {} +
+
+# Move include/asm to arch-specific directory
+	mkdir -p $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)
+	mv $(OUT_DIR)/include/asm $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)/
+	test ! -d $(OUT_DIR)/include/arch || \
+		mv $(OUT_DIR)/include/arch $(OUT_DIR)/include/$(DEB_HOST_MULTIARCH)/
+
+	+$(MAKE_SELF) install-base
+
+install-support: PACKAGE_NAME = $(SOURCE_BASENAME)-support-$(ABINAME)
+install-support: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-support: PACKAGE_DIR = debian/$(PACKAGE_NAME)
+install-support: PACKAGE_ROOT = /usr/share/$(PACKAGE_NAME)
+install-support:
+	dh_testdir
+	dh_testroot
+	dh_prep
+	dh_installdirs $(PACKAGE_ROOT)/lib/python/debian_linux $(PACKAGE_ROOT)/modules
+	cp debian/config.defines.dump $(PACKAGE_DIR)$(PACKAGE_ROOT)
+	cp -R debian/installer $(PACKAGE_DIR)$(PACKAGE_ROOT)/installer
+	cp debian/lib/python/debian_linux/*.py $(PACKAGE_DIR)$(PACKAGE_ROOT)/lib/python/debian_linux
+	dh_python3
+	dh_link $(PACKAGE_ROOT) /usr/src/$(PACKAGE_NAME)
+	+$(MAKE_SELF) install-base
+
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR): REAL_VERSION = $(ABINAME)$(LOCALVERSION)
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_NAME = $(IMAGE_PACKAGE_NAME)
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_DIR = debian/$(PACKAGE_NAME)
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR): INSTALL_DIR = $(PACKAGE_DIR)/boot
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DIR = $(BUILD_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR): $(STAMPS_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR):
+	dh_testdir
+	dh_testroot
+	dh_prep
+	dh_installdirs 'boot'
+ifeq ($(IMAGE_FILE),vmlinux)
+# This is the unprocessed ELF image, so we need to strip debug symbols
+	$(CROSS_COMPILE)objcopy --strip-debug '$(DIR)/vmlinux' $(INSTALL_DIR)/$(IMAGE_INSTALL_STEM)-$(REAL_VERSION)
+else
+	install -m644 '$(DIR)/$(IMAGE_FILE)' $(INSTALL_DIR)/$(IMAGE_INSTALL_STEM)-$(REAL_VERSION)
+endif
+	+$(MAKE_SELF) \
+	  install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR)_dt \
+	  DIR='$(DIR)' PACKAGE_DIR='$(PACKAGE_DIR)' REAL_VERSION='$(REAL_VERSION)'
+	+$(MAKE_CLEAN) -C $(DIR) modules_install DEPMOD='$(CURDIR)/debian/bin/no-depmod' INSTALL_MOD_PATH='$(CURDIR)'/$(PACKAGE_DIR) INSTALL_MOD_STRIP=1
+ifeq ($(DEBUG),True)
+	set -o pipefail; \
+	find $(PACKAGE_DIR) -name '*.ko' | sed 's|$(PACKAGE_DIR)/lib/modules/$(REAL_VERSION)/kernel/||' | while read module ; do \
+	  $(CROSS_COMPILE)objcopy --add-gnu-debuglink=$(DIR)/$$module $(PACKAGE_DIR)/lib/modules/$(REAL_VERSION)/kernel/$$module || exit; \
+	done
+# stripping the modules removes signatures as well - if automated signing is enabled with
+# an ephemeral key, re-do the sign step
+	+if grep -qs '^CONFIG_MODULE_SIG_ALL=y' $(DIR)/.config; then \
+		$(MAKE_CLEAN) -C $(DIR) modules_sign INSTALL_MOD_PATH='$(CURDIR)'/$(PACKAGE_DIR); \
+	fi
+endif
+	sed '/CONFIG_\(MODULE_SIG_\(ALL\|KEY\)\|SYSTEM_TRUSTED_KEYS\|BUILD_SALT\)[ =]/d' $(DIR)/.config > $(PACKAGE_DIR)/boot/config-$(REAL_VERSION)
+	echo "ffffffffffffffff B The real System.map is in the linux-image-<version>-dbg package" \
+		> $(PACKAGE_DIR)/boot/System.map-$(REAL_VERSION)
+	rm -f $(PACKAGE_DIR)/lib/modules/$(REAL_VERSION)/build
+	rm -f $(PACKAGE_DIR)/lib/modules/$(REAL_VERSION)/source
+	rm $(PACKAGE_DIR)/lib/firmware -rf
+	+$(MAKE_SELF) \
+	  install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR)_bug \
+	  PACKAGE_DIR='$(PACKAGE_DIR)' PACKAGE_NAME='$(PACKAGE_NAME)' REAL_VERSION='$(REAL_VERSION)'
+	dh_strip --no-automatic-dbgsym -Xvmlinux -Xvmlinuz
+	ln -sf linux-image.NEWS debian/$(PACKAGE_NAME).NEWS
+	+$(MAKE_SELF) install-base
+
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR)_dt: DT_INSTALL_DIR = $(PACKAGE_DIR)/usr/lib/linux-image-$(REAL_VERSION)
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR)_dt:
+ifneq ($(filter arm64 armel armhf mipsr6 mipsr6el mips64r6 mips64r6el riscv64,$(ARCH)),)
+	+$(MAKE_CLEAN) -C $(DIR) dtbs
+	+$(MAKE_CLEAN) -C $(DIR) dtbs_install INSTALL_DTBS_PATH=$(CURDIR)/$(DT_INSTALL_DIR)
+endif
+ifneq ($(filter powerpc ppc64,$(ARCH)),)
+# Install wrapper code and DT source, but not the wrapper script or
+# the executables it calls.  Kbuild will always build these executable
+# as native code, which is wrong for a cross-built package.  Install
+# symlinks to the versions in the linux-bootwrapper package instead.
+	rm -rf '$(BUILD_DIR)/bootwrapper_$(ARCH)_$(FEATURESET)_$(FLAVOUR)'
+	+$(MAKE_CLEAN) -C '$(DIR)' bootwrapper_install \
+		WRAPPER_OBJDIR='$(CURDIR)/$(DT_INSTALL_DIR)' \
+		WRAPPER_DTSDIR='$(CURDIR)/$(DT_INSTALL_DIR)/dts' \
+		WRAPPER_BINDIR='$(CURDIR)/$(BUILD_DIR)/bootwrapper_$(ARCH)_$(FEATURESET)_$(FLAVOUR)'
+	for prog in '$(BUILD_DIR)/bootwrapper_$(ARCH)_$(FEATURESET)_$(FLAVOUR)'/*; do \
+		prog="$$(basename $$prog)"; \
+		ln -s ../linux-bootwrapper-$(ABINAME)/$$prog \
+			'$(DT_INSTALL_DIR)'/$$prog; \
+	done
+endif
+
+install-image_$(ARCH)_$(FEATURESET)_$(FLAVOUR)_bug:
+	dh_installdirs usr/share/bug/$(PACKAGE_NAME)
+	dh_install debian/templates/image.bug/* usr/share/bug/$(PACKAGE_NAME)
+	chmod 755 $(PACKAGE_DIR)/usr/share/bug/$(PACKAGE_NAME)/script
+	printf "RELEASE='$(REAL_VERSION)'\nDISTRIBUTOR='$(DISTRIBUTOR)'\nSOURCEVERSION='$(SOURCEVERSION)'\nPACKAGE_NAME='$(PACKAGE_NAME)'\nPACKAGE_VERSION='$(SOURCEVERSION)'" > $(PACKAGE_DIR)/usr/share/bug/$(PACKAGE_NAME)/info
+
+install-image-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_NAME = linux-image$(SOURCE_SUFFIX)$(LOCALVERSION)
+install-image-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-image-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR): LINK_DOC_PACKAGE = linux-image-$(ABINAME)$(LOCALVERSION)
+install-image-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR):
+	dh_testdir
+	dh_prep
+	dh_bugfiles
+	+$(MAKE_SELF) install-base
+
+install-image-dbg_$(ARCH)_$(FEATURESET)_$(FLAVOUR): REAL_VERSION = $(ABINAME)$(LOCALVERSION)
+install-image-dbg_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_NAME = linux-image-$(REAL_VERSION)-dbg
+install-image-dbg_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_DIR = debian/$(PACKAGE_NAME)
+install-image-dbg_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DEBUG_DIR = $(PACKAGE_DIR)/usr/lib/debug
+install-image-dbg_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DIR = $(BUILD_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+install-image-dbg_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-image-dbg_$(ARCH)_$(FEATURESET)_$(FLAVOUR): $(STAMPS_DIR)/build_$(ARCH)_$(FEATURESET)_$(FLAVOUR)
+	dh_testdir
+	dh_testroot
+	dh_prep
+	dh_installdirs usr/lib/debug usr/lib/debug/boot usr/share/lintian/overrides/
+	dh_lintian
+	install -m644 $(DIR)/vmlinux $(DEBUG_DIR)/boot/vmlinux-$(REAL_VERSION)
+	install -m644 $(DIR)/System.map $(DEBUG_DIR)/boot/System.map-$(REAL_VERSION)
+	+$(MAKE_CLEAN) -C $(DIR) modules_install DEPMOD='$(CURDIR)/debian/bin/no-depmod' INSTALL_MOD_PATH='$(CURDIR)'/$(DEBUG_DIR)
+	find $(DEBUG_DIR)/lib/modules/$(REAL_VERSION)/ -mindepth 1 -maxdepth 1 \! -name kernel -exec rm {} \+
+	rm $(DEBUG_DIR)/lib/firmware -rf
+ifeq ($(VDSO),True)
+	+$(MAKE_CLEAN) -C $(DIR) vdso_install INSTALL_MOD_PATH='$(CURDIR)'/$(DEBUG_DIR)
+# Create .build-id links.  Some architectures already do so, but in the
+# wrong place, so delete those first.
+	rm -rf $(DEBUG_DIR)/lib/modules/$(REAL_VERSION)/vdso/.build-id
+	find $(DEBUG_DIR)/lib/modules/$(REAL_VERSION)/vdso/ -type f | while read vdso; do \
+		if buildid="$$(readelf -n "$$vdso" | sed -rne 's/^\s+Build ID: (.*)$$/\1/p')" && [ "$$buildid" ]; then \
+			mkdir -p "$(DEBUG_DIR)/.build-id/$${buildid:0:2}"; \
+			ln -s -r "$$vdso" "$(DEBUG_DIR)/.build-id/$${buildid:0:2}/$${buildid:2}.debug"; \
+		fi; \
+	done
+endif
+# Add symlinks to vmlinux from the locations expected by kdump-tools,
+# systemtap and others
+	ln -s boot/vmlinux-$(REAL_VERSION) $(DEBUG_DIR)/
+	mkdir -p $(DEBUG_DIR)/lib/modules/$(REAL_VERSION)
+	ln -s ../../../boot/vmlinux-$(REAL_VERSION) $(DEBUG_DIR)/lib/modules/$(REAL_VERSION)/vmlinux
+	+$(MAKE_SELF) install-base
+
+install-image-dbg-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR): PACKAGE_NAME = linux-image$(SOURCE_SUFFIX)$(LOCALVERSION)-dbg
+install-image-dbg-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-image-dbg-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR): LINK_DOC_PACKAGE = linux-image-$(ABINAME)$(LOCALVERSION)-dbg
+install-image-dbg-meta_$(ARCH)_$(FEATURESET)_$(FLAVOUR):
+	dh_testdir
+	dh_prep
+	dh_lintian
+	+$(MAKE_SELF) install-base
+
+install-signed-template_$(ARCH): PACKAGE_NAME = linux-image$(SOURCE_SUFFIX)-$(ARCH)-signed-template
+install-signed-template_$(ARCH): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-signed-template_$(ARCH): PACKAGE_DIR = debian/$(PACKAGE_NAME)
+install-signed-template_$(ARCH): CODE_SIGNING_DIR = $(PACKAGE_DIR)/usr/share/code-signing/$(PACKAGE_NAME)
+install-signed-template_$(ARCH):
+ifneq (,$(filter linux-image$(SOURCE_SUFFIX)-$(ARCH)-signed-template,$(packages_enabled)))
+	dh_testdir
+	dh_testroot
+	dh_prep
+	rm -rf $(CODE_SIGNING_DIR)
+	mkdir -p $(CODE_SIGNING_DIR)
+	PYTHONHASHSEED=0 debian/bin/gencontrol_signed.py $(ARCH)
+	cp -R	debian/copyright \
+		debian/linux-image.NEWS \
+		debian/signing_templates/README.source \
+		debian/signing_templates/rules \
+		debian/signing_templates/rules.real \
+		debian/signing_templates/source \
+		$(CODE_SIGNING_DIR)/source-template/debian/
+	+$(MAKE_SELF) install-base
+endif  # enabled
+
+install-udeb_$(ARCH): export KW_DEFCONFIG_DIR=debian/installer
+install-udeb_$(ARCH): export KW_CONFIG_DIR=debian/installer
+install-udeb_$(ARCH): DH_OPTIONS=$(PACKAGE_NAMES:%=-p%)
+ifeq ($(UDEB_UNSIGNED_TEST_BUILD),True)
+install-udeb_$(ARCH): export DEB_BUILD_PROFILES=pkg.linux.udeb-unsigned-test-build
+endif
+install-udeb_$(ARCH):
+# Logically we should check for %-di here, but that would break test builds
+ifneq (,$(filter linux-image-%,$(packages_enabled)))
+	dh_testdir
+	dh_prep
+	kernel-wedge install-files $(ABINAME)
+	kernel-wedge check $(PACKAGE_NAMES)
+	dh_fixperms
+ifeq ($(UDEB_UNSIGNED_TEST_BUILD),False)
+	dh_gencontrol
+	dh_builddeb
+endif
+endif  # enabled
+
+install-source: PACKAGE_NAME = $(SOURCE_BASENAME)-source-$(VERSION)
+install-source: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-source: $(BUILD_DIR)/$(SOURCE_BASENAME)-source-$(UPSTREAMVERSION).tar.xz $(foreach FEATURESET,$(filter-out none,$(ALL_FEATURESETS)),$(BUILD_DIR)/linux-patch-$(UPSTREAMVERSION)-$(FEATURESET).patch.xz)
+	dh_testdir
+	dh_testroot
+	dh_install $^ /usr/src
+# We don't want to recompress, but -Znone is not compatible with older
+# tools and is currently rejected by dak.  -Zgzip -z0 (uncompressed
+# data.tar.gz!) makes dpkg and dak happy, but is incomaptible with
+# other things (#725492).  So use the fastest real gzip mode.
+	+$(MAKE_SELF) install-base BUILDDEB_ARGS='-Zgzip -z1'
+
+install-source-meta: PACKAGE_NAME = $(SOURCE_BASENAME)-source$(SOURCE_SUFFIX)
+install-source-meta: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-source-meta: LINK_DOC_PACKAGE = $(SOURCE_BASENAME)-source-$(VERSION)
+install-source-meta:
+	dh_testdir
+	dh_prep
+	+$(MAKE_SELF) install-base
+
+install-config_$(ARCH): PACKAGE_NAME = $(SOURCE_BASENAME)-config-$(VERSION)
+install-config_$(ARCH): DH_OPTIONS = -p$(PACKAGE_NAME)
+install-config_$(ARCH): TRIPLETS = $(subst $(BUILD_DIR)/build_,,$(wildcard $(BUILD_DIR)/build_$(ARCH)_*_*))
+install-config_$(ARCH):
+	dh_testdir
+	dh_testroot
+	dh_installdirs /usr/src/linux-config-$(UPSTREAMVERSION)
+# Fix the module signing configuration to work for custom kernels.  Also delete
+# CONFIG_BUILD_SALT which makes no sense for custom kernels.
+	for triplet in $(TRIPLETS); do \
+		sed '/CONFIG_\(MODULE_SIG_\(ALL\|KEY\)\|SYSTEM_TRUSTED_KEYS\|BUILD_SALT\)[ =]/d' $(BUILD_DIR)/build_$$triplet/.config | xz -c >debian/$(PACKAGE_NAME)/usr/src/linux-config-$(UPSTREAMVERSION)/config.$$triplet.xz; \
+	done
+	+$(MAKE_SELF) install-base
+
+define make-tools
++mkdir -p $(BUILD_DIR)/build-tools/$(1) && $(MAKE_CLEAN) -C $(BUILD_DIR)/build-tools/$(1) -f $(CURDIR)/debian/rules.d/$(1)/Makefile top_srcdir=$(CURDIR) top_rulesdir=$(CURDIR)/debian/rules.d OUTDIR=$(1) VERSION=$(VERSION) KERNEL_ARCH=$(KERNEL_ARCH)
+endef
+
+$(STAMPS_DIR)/build-tools-headers:
+	mkdir -p $(BUILD_DIR)/build-tools/headers-tools
+	$(MAKE) ARCH=$(KERNEL_ARCH) O=$(BUILD_DIR)/build-tools/headers-tools \
+		INSTALL_HDR_PATH=$(CURDIR)/$(BUILD_DIR)/build-tools \
+		headers_install
+	@$(stamp)
+
+build-bpftool: $(STAMPS_DIR)/build-tools-headers
+	$(call make-tools,tools/bpf/bpftool)
+
+install-bpftool: PACKAGE_NAME = bpftool
+install-bpftool: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-bpftool: DIR = $(CURDIR)/debian/$(PACKAGE_NAME)
+install-bpftool: build-bpftool
+	dh_testdir
+	dh_testroot
+	dh_prep
+	$(call make-tools,tools/bpf/bpftool) install DESTDIR=$(DIR)
+	dh_installchangelogs
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	dh_installdocs
+endif
+	dh_lintian
+	dh_strip
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_shlibdeps
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+build-kbuild: $(STAMPS_DIR)/build-tools-headers
+	$(call make-tools,scripts)
+	$(call make-tools,tools/objtool)
+
+install-kbuild: PACKAGE_NAME = linux-kbuild-$(VERSION)
+install-kbuild: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-kbuild: PREFIX_DIR = /usr/lib/$(PACKAGE_NAME)
+install-kbuild: DIR = $(CURDIR)/debian/$(PACKAGE_NAME)
+install-kbuild: build-kbuild
+	dh_testdir
+	dh_testroot
+	dh_prep
+	$(call make-tools,scripts) install DESTDIR=$(DIR) prefix=$(PREFIX_DIR)
+	$(call make-tools,tools/objtool) install DESTDIR=$(DIR) prefix=$(PREFIX_DIR)
+	dh_link $(PREFIX_DIR) /usr/src/$(PACKAGE_NAME)
+	dh_installchangelogs
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	dh_installdocs
+endif
+	dh_strip
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_shlibdeps
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+build-cpupower: $(STAMPS_DIR)/build-tools-headers
+	$(call make-tools,tools/power/cpupower)
+ifneq ($(filter i386 amd64 x32,$(DEB_HOST_ARCH)),)
+	$(call make-tools,tools/power/x86)
+endif
+
+install-cpupower: DH_OPTIONS = -plinux-cpupower $(addprefix -p,$(filter libcpupower%,$(packages_enabled)))
+install-cpupower: DIR = $(CURDIR)/debian/cpupower-tmp
+install-cpupower: build-cpupower
+	dh_testdir
+	dh_testroot
+	dh_prep
+	$(call make-tools,tools/power/cpupower) install DESTDIR=$(DIR)
+ifneq ($(filter i386 amd64 x32,$(DEB_HOST_ARCH)),)
+	$(call make-tools,tools/power/x86) install DESTDIR=$(DIR)
+	echo >> debian/linux-cpupower.substvars 'cpupower:Arch-Description='\
+'The turbostat command reports topology, frequency, idle power-state$${Newline}'\
+'statistics, temperature and power consumption information as provided$${Newline}'\
+'by the CPU.$${Newline}'\
+'$${Newline}'\
+'The x86_energy_perf_policy command sets a general policy on some Intel$${Newline}'\
+'CPU models for the relative importance of performance versus energy$${Newline}'\
+'savings.'
+endif
+	dh_install --sourcedir=$(DIR)
+	dh_installchangelogs
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	dh_installdocs
+	dh_installman
+endif
+	dh_strip
+	dh_compress
+	dh_fixperms
+	dh_makeshlibs
+	dh_installdeb
+	dh_shlibdeps
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+build-perf: $(STAMPS_DIR)/build-tools-headers
+	$(call make-tools,tools/perf)
+
+install-perf: PACKAGE_NAME = linux-perf-$(VERSION)
+install-perf: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-perf: DIR = $(CURDIR)/debian/$(PACKAGE_NAME)
+install-perf: build-perf
+	dh_testdir
+	dh_testroot
+	dh_prep
+	$(call make-tools,tools/perf) install DESTDIR=$(DIR)
+	# do not ship python2 script
+	rm -f $(DIR)/usr/lib/perf_$(VERSION)-core/scripts/python/call-graph-from-sql.py
+	dh_perl /usr/lib/perf_$(VERSION)-core/scripts/perl/Perf-Trace-Util/lib/
+	dh_python3 /usr/lib/perf_$(VERSION)-core/scripts/python/Perf-Trace-Util/lib/
+	dh_installchangelogs
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	dh_installdocs
+endif
+	dh_lintian
+	dh_strip
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_shlibdeps -Xperf-read-vdso
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+install-perf-meta: PACKAGE_NAME = linux-perf$(SOURCE_SUFFIX)
+install-perf-meta: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-perf-meta: LINK_DOC_PACKAGE = linux-perf-$(VERSION)
+install-perf-meta:
+	dh_testdir
+	dh_prep
+	+$(MAKE_SELF) install-base
+
+build-usbip: $(STAMPS_DIR)/build-tools-headers
+	$(call make-tools,tools/usb/usbip)
+
+install-usbip: DH_OPTIONS = -pusbip
+install-usbip: DIR = $(CURDIR)/debian/usbip-tmp
+install-usbip: build-usbip
+	dh_testdir
+	dh_testroot
+	dh_prep
+	$(call make-tools,tools/usb/usbip) install DESTDIR=$(DIR)
+	dh_install --sourcedir=$(DIR)
+	dh_installchangelogs
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	dh_installdocs
+	dh_installman
+endif
+	dh_lintian
+	dh_strip
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_shlibdeps
+	VERSION=$$(sed -ne 's,^#define PACKAGE_VERSION "\(.*\)"$$,\1,p' $(BUILD_DIR)/build-tools/tools/usb/usbip/config.h) && \
+	test -n "$$VERSION" -a -n "$(DEB_VERSION)" && \
+	dh_gencontrol -- -v$$VERSION+$(DEB_VERSION)
+	dh_md5sums
+	dh_builddeb
+
+build-hyperv-daemons: $(STAMPS_DIR)/build-tools-headers
+	$(call make-tools,tools/hv)
+
+install-hyperv-daemons: PACKAGE_NAME = hyperv-daemons
+install-hyperv-daemons: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-hyperv-daemons: DIR = $(CURDIR)/debian/$(PACKAGE_NAME)
+install-hyperv-daemons: build-hyperv-daemons
+	dh_testdir
+	dh_testroot
+	dh_prep
+	$(call make-tools,tools/hv) install DESTDIR=$(DIR)
+	dh_install
+	dh_installchangelogs
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	dh_installdocs
+endif
+	for service in fcopy kvp vss; do \
+		dh_installsystemd --name hv-$$service-daemon --no-enable --no-start \
+			|| break; \
+		dh_installinit --name hv-$$service-daemon \
+			|| break; \
+	done
+	dh_installudev
+	dh_lintian
+	dh_strip
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_shlibdeps
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+build-liblockdep: $(STAMPS_DIR)/build-tools-headers
+	$(call make-tools,tools/lib/lockdep)
+
+install-liblockdep: DH_OPTIONS = -pliblockdep$(VERSION) -pliblockdep-dev
+install-liblockdep: DIR = $(CURDIR)/debian/liblockdep-tmp
+install-liblockdep: build-liblockdep
+	dh_testdir
+	dh_testroot
+	dh_prep
+	$(call make-tools,tools/lib/lockdep) install DESTDIR=$(DIR)
+	env -u DH_OPTIONS dh_install -pliblockdep$(VERSION) --sourcedir=$(DIR) \
+		'usr/lib/*/liblockdep.so.*'
+	dh_install --sourcedir=$(DIR)
+	dh_installchangelogs
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	dh_installdocs
+endif
+	dh_strip
+	dh_compress
+	dh_fixperms
+	env -u DH_OPTIONS dh_makeshlibs -pliblockdep$(VERSION) \
+		liblockdep$(VERSION)
+	dh_installdeb
+	dh_shlibdeps
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+install-lockdep: PACKAGE_NAME = lockdep
+install-lockdep: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-lockdep: DIR = $(CURDIR)/debian/$(PACKAGE_NAME)
+install-lockdep:
+	dh_testdir
+	dh_testroot
+	dh_prep
+	dh_installdirs
+# Upstream lockdep preload script is not suitable for installation
+	sed 's/@VERSION@/$(VERSION)/' debian/rules.d/tools/lib/lockdep/lockdep.in \
+		> $(DIR)/usr/bin/lockdep
+	chmod 755 $(DIR)/usr/bin/lockdep
+	dh_installchangelogs
+ifeq (,$(filter nodoc,$(DEB_BUILD_PROFILES)))
+	dh_installdocs
+endif
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+build-bootwrapper: $(STAMPS_DIR)/build-tools-headers
+	$(call make-tools,arch/powerpc/boot)
+
+install-bootwrapper: PACKAGE_NAME = linux-bootwrapper-$(ABINAME)
+install-bootwrapper: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-bootwrapper: DIR = $(CURDIR)/debian/$(PACKAGE_NAME)
+install-bootwrapper: build-bootwrapper
+	dh_testdir
+	dh_testroot
+	dh_prep
+	$(call make-tools,arch/powerpc/boot) install DESTDIR=$(DIR) installdir=/usr/lib/$(PACKAGE_NAME)
+	dh_installchangelogs
+	dh_strip
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_shlibdeps
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+.PHONY: binary-% build-% install-% setup-% source-%
+
+# vim: filetype=make
diff --git a/debian/signing_templates/README.source b/debian/signing_templates/README.source
new file mode 100644
index 000000000000..f175c35b3e7a
--- /dev/null
+++ b/debian/signing_templates/README.source
@@ -0,0 +1,4 @@
+This source package is generated by the Debian signing service from a
+template built by the linux package.  It should never be updated directly.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 06 Apr 2018 10:23:29 +0100
diff --git a/debian/signing_templates/control.image.in b/debian/signing_templates/control.image.in
new file mode 100644
index 000000000000..0bc4f6f8367b
--- /dev/null
+++ b/debian/signing_templates/control.image.in
@@ -0,0 +1,11 @@
+Package: linux-image-@abiname@@localversion@
+Depends: ${unsigned:Depends}, ${misc:Depends}
+Recommends: ${unsigned:Recommends}
+Suggests: ${unsigned:Suggests}
+Breaks: ${unsigned:Breaks}
+Conflicts: linux-image-@abiname@@localversion@-unsigned
+Replaces: linux-image-@abiname@@localversion@-unsigned
+Description: ${unsigned:DescriptionShort} (signed)
+ ${unsigned:DescriptionLong}
+ .
+ ${signed:Description}
diff --git a/debian/signing_templates/control.source.in b/debian/signing_templates/control.source.in
new file mode 100644
index 000000000000..92a0ed7ae770
--- /dev/null
+++ b/debian/signing_templates/control.source.in
@@ -0,0 +1,16 @@
+Source: linux-signed@source_suffix@-@arch@
+Section: kernel
+Priority: optional
+Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
+Uploaders: Bastian Blank <waldi@debian.org>, maximilian attems <maks@debian.org>, Ben Hutchings <benh@debian.org>, Salvatore Bonaccorso <carnil@debian.org>
+Standards-Version: 4.2.0
+Build-Depends:
+ debhelper-compat (= 12),
+ rsync,
+ sbsigntool [amd64 arm64 i386],
+ kernel-wedge (>= 2.102~),
+ linux-kbuild-@version@
+Rules-Requires-Root: no
+Vcs-Git: https://salsa.debian.org/kernel-team/linux.git
+Vcs-Browser: https://salsa.debian.org/kernel-team/linux
+Homepage: https://www.kernel.org/
diff --git a/debian/signing_templates/rules b/debian/signing_templates/rules
new file mode 100755
index 000000000000..ad6156b8728e
--- /dev/null
+++ b/debian/signing_templates/rules
@@ -0,0 +1,20 @@
+#!/usr/bin/make -f
+SHELL := sh -e
+
+include /usr/share/dpkg/architecture.mk
+
+build: build-arch build-indep
+build-arch:
+build-indep:
+
+clean:
+	dh_testdir
+	dh_clean
+
+binary: binary-arch binary-indep
+binary-arch: debian/control
+	dh_testdir
+	$(MAKE) -f debian/rules.gen binary-arch_$(DEB_HOST_ARCH)
+binary-indep:
+
+.PHONY: build build-arch build-indep clean binary binary-arch binary-indep
diff --git a/debian/signing_templates/rules.real b/debian/signing_templates/rules.real
new file mode 100644
index 000000000000..23df05ccd4fe
--- /dev/null
+++ b/debian/signing_templates/rules.real
@@ -0,0 +1,85 @@
+SHELL := bash -e
+
+export DH_OPTIONS
+
+build-indep:
+
+install-signed: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-signed: KERNEL_VERSION = $(ABINAME)$(LOCALVERSION)
+install-signed: IMAGE_PACKAGE_NAME = linux-image-$(KERNEL_VERSION)-unsigned
+install-signed: PACKAGE_DIR = debian/$(PACKAGE_NAME)
+install-signed: SIGNATURE_DIR = debian/signatures/$(IMAGE_PACKAGE_NAME)
+install-signed:
+	mkdir -p $(PACKAGE_DIR)/boot
+	rsync -a $(patsubst %,/boot/%-$(KERNEL_VERSION),config System.map $(IMAGE_INSTALL_STEM)) \
+		$(PACKAGE_DIR)/boot/
+	if [ -f $(SIGNATURE_DIR)/boot/vmlinuz-$(KERNEL_VERSION).sig ]; then \
+		sbattach --attach $(SIGNATURE_DIR)/boot/vmlinuz-$(KERNEL_VERSION).sig \
+			$(PACKAGE_DIR)/boot/vmlinuz-$(KERNEL_VERSION); \
+		echo >> debian/$(PACKAGE_NAME).substvars 'signed:Description=The kernel image and modules are signed for use with Secure Boot.'; \
+	else \
+		echo >> debian/$(PACKAGE_NAME).substvars 'signed:Description=The modules are signed.'; \
+	fi
+	mkdir -p $(PACKAGE_DIR)/lib/modules/$(KERNEL_VERSION)
+	rsync -a $(addprefix /lib/modules/$(KERNEL_VERSION)/,kernel modules.builtin modules.builtin.modinfo modules.order) \
+		$(PACKAGE_DIR)/lib/modules/$(KERNEL_VERSION)/
+	while read path; do \
+		/usr/lib/linux-kbuild-$(VERSION)/scripts/sign-file -s \
+			$(SIGNATURE_DIR)/lib/modules/$(KERNEL_VERSION)/$$path \
+			sha256 dummy \
+			$(PACKAGE_DIR)/lib/modules/$(KERNEL_VERSION)/$${path%.sig}; \
+	done < <(find $(SIGNATURE_DIR)/lib/modules/$(KERNEL_VERSION) -name '*.sig' -printf '%P\n')
+# Copy any device tree files
+	if [ -d /usr/lib/linux-image-$(KERNEL_VERSION) ]; then \
+		mkdir -p $(PACKAGE_DIR)/usr/lib/linux-image-$(KERNEL_VERSION); \
+		rsync -a /usr/lib/linux-image-$(KERNEL_VERSION)/ \
+			$(PACKAGE_DIR)/usr/lib/linux-image-$(KERNEL_VERSION)/; \
+	fi
+# Copy bug scripts but change the info file to refer to the right package
+	mkdir -p $(PACKAGE_DIR)/usr/share/bug/$(PACKAGE_NAME)
+	rsync -a /usr/share/bug/$(IMAGE_PACKAGE_NAME)/ \
+		$(PACKAGE_DIR)/usr/share/bug/$(PACKAGE_NAME)/
+	sed -i -e 's/^PACKAGE_NAME=.*/PACKAGE_NAME=$(PACKAGE_NAME)/' \
+		-e 's/^PACKAGE_VERSION=.*/PACKAGE_VERSION=$(PACKAGE_VERSION)/' \
+		$(PACKAGE_DIR)/usr/share/bug/$(PACKAGE_NAME)/info
+	dh_install
+	dh_installchangelogs
+	ln -sf linux-image.NEWS debian/$(PACKAGE_NAME).NEWS
+	dh_installdocs
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+# Copy most package relations and description from unsigned package
+	for field in Depends Suggests Recommends Breaks; do \
+		echo >> debian/$(PACKAGE_NAME).substvars "unsigned:$$field=$$(dpkg-query -f '$${'$$field'}' -W $(IMAGE_PACKAGE_NAME))"; \
+	done
+	echo >> debian/$(PACKAGE_NAME).substvars "unsigned:DescriptionShort=$$(dpkg-query -f '$${Description}' -W $(IMAGE_PACKAGE_NAME) | head -n 1)"
+	echo >> debian/$(PACKAGE_NAME).substvars "unsigned:DescriptionLong=$$(dpkg-query -f '$${Description}' -W $(IMAGE_PACKAGE_NAME) | tail -n +2 | sed -rz 's/\$$/$${}/g; s/^ //; s/\n \.?/$${Newline}/g')"
+	dh_gencontrol -- $(GENCONTROL_ARGS)
+	dh_md5sums
+	dh_builddeb
+
+install-meta: DH_OPTIONS = -p$(PACKAGE_NAME)
+install-meta:
+	dh_testdir
+	dh_prep
+	dh_bugfiles
+	dh_installdocs --link-doc=$(LINK_DOC_PACKAGE_NAME)
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_gencontrol -- $(GENCONTROL_ARGS)
+	dh_md5sums
+	dh_builddeb
+
+install-udeb_$(ARCH): export KW_DEFCONFIG_DIR=/usr/share/linux-support-$(ABINAME)/installer
+install-udeb_$(ARCH): export KW_CONFIG_DIR=/usr/share/linux-support-$(ABINAME)/installer
+install-udeb_$(ARCH): DH_OPTIONS=$(PACKAGE_NAMES:%=-p%)
+install-udeb_$(ARCH):
+	dh_testdir
+	dh_prep
+	kernel-wedge install-files $(ABINAME)
+	kernel-wedge check $(PACKAGE_NAMES)
+	dh_fixperms
+	dh_gencontrol -- $(GENCONTROL_ARGS)
+	dh_builddeb
diff --git a/debian/signing_templates/source/format b/debian/signing_templates/source/format
new file mode 100644
index 000000000000..89ae9db8f88b
--- /dev/null
+++ b/debian/signing_templates/source/format
@@ -0,0 +1 @@
+3.0 (native)
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 000000000000..c3d9f2407417
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1,2 @@
+3.0 (quilt)
+
diff --git a/debian/source/include-binaries b/debian/source/include-binaries
new file mode 100644
index 000000000000..f9b965374378
--- /dev/null
+++ b/debian/source/include-binaries
@@ -0,0 +1,2 @@
+debian/upstream/rt-signing-key.pgp
+debian/upstream/signing-key.pgp
diff --git a/debian/source/lintian-overrides b/debian/source/lintian-overrides
new file mode 100644
index 000000000000..cdc205b9d156
--- /dev/null
+++ b/debian/source/lintian-overrides
@@ -0,0 +1,14 @@
+# The copyright notice in the GFDL itself, mentioning invariant
+# sections, is just an example.  lintian seems to whitelist the
+# plain-text version but that doesn't cover this ReST version.
+linux source: license-problem-gfdl-invariants Documentation/media/uapi/fdl-appendix.rst invariant part is: with the :ref:`invariant sections <fdl-invariant>` being list their titles, with the :ref:`front-cover texts <fdl-cover-texts>` being list, and with the :ref:`back-cover texts <fdl-cover-texts>` being list
+
+# lintian fails to recognise that these notices say "with no invariant
+# sections ...", presumably due to the ReST markup (bug #924581).
+linux source: license-problem-gfdl-invariants Documentation/*.rst invariant part is: published by the free software .. foundation, with no invariant sections, no front-cover texts .. and no back-cover texts
+
+# Kernel dbg packages contain a full image with debug data.
+linux source: dbg-package-missing-depends
+
+# We repack the orig tarball
+linux source: orig-tarball-missing-upstream-signature *
diff --git a/debian/source/local-options b/debian/source/local-options
new file mode 100644
index 000000000000..2ee6f0fa1db4
--- /dev/null
+++ b/debian/source/local-options
@@ -0,0 +1 @@
+abort-on-upstream-changes
diff --git a/debian/templates/control.config.in b/debian/templates/control.config.in
new file mode 100644
index 000000000000..5b38227763ea
--- /dev/null
+++ b/debian/templates/control.config.in
@@ -0,0 +1,11 @@
+Package: @source_basename@-config-@version@
+Build-Profiles: <!stage1 !pkg.linux.nosource>
+Multi-Arch: same
+Depends: ${misc:Depends}
+Recommends: @source_basename@-source-@version@
+Description: Debian kernel configurations for Linux @version@
+ This package contains the configuration files used to build the
+ official Debian kernel files, but without references to Debian's
+ signing certificates.
+ .
+ These can be used as a basis for configuring custom kernels.
diff --git a/debian/templates/control.docs.in b/debian/templates/control.docs.in
new file mode 100644
index 000000000000..4bb7254e9a98
--- /dev/null
+++ b/debian/templates/control.docs.in
@@ -0,0 +1,14 @@
+Package: @source_basename@-doc-@version@
+Build-Profiles: <!stage1 !nodoc>
+Architecture: all
+Build-Depends: graphviz, python3-sphinx, python3-sphinx-rtd-theme,
+ texlive-latex-base, texlive-latex-extra, dvipng
+Depends: ${misc:Depends}
+Section: doc
+Multi-Arch: foreign
+Description: Linux kernel specific documentation for version @version@
+ This package provides the various README files and HTML documentation for
+ the Linux kernel version @version@.  Plenty of information, including the
+ descriptions of various kernel subsystems, filesystems, driver-specific
+ notes and the like.  An index to the documentation is installed as
+ /usr/share/doc/linux-doc-@version@/html/index.html.
diff --git a/debian/templates/control.docs.meta.in b/debian/templates/control.docs.meta.in
new file mode 100644
index 000000000000..d368d3211479
--- /dev/null
+++ b/debian/templates/control.docs.meta.in
@@ -0,0 +1,8 @@
+Package: @source_basename@-doc@source_suffix@
+Build-Profiles: <!stage1 !nodoc !pkg.linux.nometa>
+Section: doc
+Architecture: all
+Depends: @source_basename@-doc-@version@ (= ${binary:Version}), ${misc:Depends}
+Description: Linux kernel specific documentation (meta-package)
+ This package depends on the package containing the documentation for the
+ latest Linux kernel.
diff --git a/debian/templates/control.extra.in b/debian/templates/control.extra.in
new file mode 100644
index 000000000000..d176e8e51919
--- /dev/null
+++ b/debian/templates/control.extra.in
@@ -0,0 +1,44 @@
+Package: linux-compiler-gcc-11-arm
+Build-Profiles: <!stage1>
+Depends: gcc-11, ${misc:Depends}
+Architecture: armel armhf
+Multi-Arch: foreign
+Description: Compiler for Linux on ARM (meta-package)
+ This package depends on GCC of the appropriate version and architecture
+ for Linux on armel and armhf.
+
+Package: linux-compiler-gcc-11-s390
+Build-Profiles: <!stage1>
+Depends: gcc-11, ${misc:Depends}
+Architecture: s390 s390x
+Multi-Arch: foreign
+Description: Compiler for Linux on IBM zSeries (meta-package)
+ This package depends on GCC of the appropriate version and architecture
+ for Linux on s390 and s390x.
+
+Package: linux-compiler-gcc-11-x86
+Build-Profiles: <!stage1>
+Depends: gcc-11, ${misc:Depends}
+Architecture: amd64 i386 x32
+Multi-Arch: foreign
+Description: Compiler for Linux on x86 (meta-package)
+ This package depends on GCC of the appropriate version and architecture
+ for Linux on amd64, i386 and x32.
+
+Package: linux-image-parisc64-smp
+Build-Profiles: <!stage1 !pkg.linux.nokernel !pkg.linux.nometa>
+Architecture: hppa
+Section: oldlibs
+Priority: extra
+Depends: linux-image-parisc64, ${misc:Depends}
+Description: Linux for multiprocessor 64-bit PA-RISC (dummy package)
+ This is a dummy transitional package.  It can be safely removed.
+
+Package: linux-image-parisc-smp
+Build-Profiles: <!stage1 !pkg.linux.nokernel !pkg.linux.nometa>
+Architecture: hppa
+Section: oldlibs
+Priority: extra
+Depends: linux-image-parisc, ${misc:Depends}
+Description: Linux for multiprocessor 32-bit PA-RISC (dummy package)
+ This is a dummy transitional package.  It can be safely removed.
diff --git a/debian/templates/control.headers.featureset.in b/debian/templates/control.headers.featureset.in
new file mode 100644
index 000000000000..123fedf5a303
--- /dev/null
+++ b/debian/templates/control.headers.featureset.in
@@ -0,0 +1,11 @@
+Package: linux-headers-@abiname@-common@localversion@
+Build-Profiles: <!stage1 !pkg.linux.nokernel>
+Architecture: all
+Depends: ${misc:Depends}
+Multi-Arch: foreign
+Description: Common header files for Linux @abiname@@localversion@
+ This package provides the common kernel header files for Linux kernel
+ version @abiname@@featureset_desc@, generally used for building
+ out-of-tree kernel modules.  To obtain a complete set of headers you
+ also need to install the linux-headers-@abiname@-(flavour) package,
+ matching the flavour of the kernel you intend the build for.
diff --git a/debian/templates/control.headers.in b/debian/templates/control.headers.in
new file mode 100644
index 000000000000..dc77662cd571
--- /dev/null
+++ b/debian/templates/control.headers.in
@@ -0,0 +1,10 @@
+Package: linux-headers-@abiname@@localversion@
+Build-Profiles: <!stage1 !pkg.linux.nokernel>
+Depends: linux-headers-@abiname@-common@localversion_headers@ (= ${source:Version}), linux-kbuild-@version@ (>= ${source:Version}), ${misc:Depends}
+Description: Header files for Linux @abiname@@localversion@
+ This package provides the architecture-specific kernel header files
+ for Linux kernel @abiname@@localversion@, generally
+ used for building out-of-tree kernel modules.  These files are going to be
+ installed into /usr/src/linux-headers-@abiname@@localversion@, and can
+ be used for building modules that load into the kernel provided by the
+ linux-image-@abiname@@localversion@ package.
diff --git a/debian/templates/control.headers.meta.in b/debian/templates/control.headers.meta.in
new file mode 100644
index 000000000000..d9f698674764
--- /dev/null
+++ b/debian/templates/control.headers.meta.in
@@ -0,0 +1,6 @@
+Package: linux-headers@source_suffix@@localversion@
+Build-Profiles: <!stage1 !pkg.linux.nokernel !pkg.linux.nometa>
+Depends: linux-headers-@abiname@@localversion@ (= ${binary:Version}), ${misc:Depends}
+Description: Header files for Linux @flavour@ configuration (meta-package)
+ This package depends on the architecture-specific header files for the latest
+ Linux kernel @flavour@ configuration.
diff --git a/debian/templates/control.image-dbg.in b/debian/templates/control.image-dbg.in
new file mode 100644
index 000000000000..3c67d56ac658
--- /dev/null
+++ b/debian/templates/control.image-dbg.in
@@ -0,0 +1,8 @@
+Package: linux-image-@abiname@@localversion@-dbg
+Build-Profiles: <!stage1 !pkg.linux.nokernel>
+Depends: ${misc:Depends}
+Section: debug
+Priority: optional
+Description: Debug symbols for linux-image-@abiname@@localversion@
+ This package provides the detached debug symbols for the Linux kernel
+ and modules in linux-image-@abiname@@localversion@.
diff --git a/debian/templates/control.image-dbg.meta.in b/debian/templates/control.image-dbg.meta.in
new file mode 100644
index 000000000000..f6f317fa4a99
--- /dev/null
+++ b/debian/templates/control.image-dbg.meta.in
@@ -0,0 +1,7 @@
+Package: linux-image@source_suffix@@localversion@-dbg
+Build-Profiles: <!stage1 !pkg.linux.nokernel !pkg.linux.nometa>
+Depends: linux-image-@abiname@@localversion@-dbg (= ${binary:Version}), ${misc:Depends}
+Provides: linux-latest-image-dbg
+Description: Debugging symbols for Linux @flavour@ configuration (meta-package)
+ This package depends on the detached debugging symbols for the latest
+ Linux kernel @flavour@ configuration.
diff --git a/debian/templates/control.image-unsigned.in b/debian/templates/control.image-unsigned.in
new file mode 100644
index 000000000000..68c7ff32e860
--- /dev/null
+++ b/debian/templates/control.image-unsigned.in
@@ -0,0 +1,9 @@
+Package: linux-image-@abiname@@localversion@-unsigned
+Build-Profiles: <!stage1 !pkg.linux.nokernel>
+Depends: kmod, linux-base (>= 4.3~), ${misc:Depends}
+Recommends: firmware-linux-free
+Suggests: linux-doc-@version@, debian-kernel-handbook
+Conflicts: linux-image-@abiname@@localversion@
+Replaces: linux-image-@abiname@@localversion@
+Description: Linux @upstreamversion@ for @class@
+ The Linux kernel @upstreamversion@ and modules for use on @longclass@.
diff --git a/debian/templates/control.image.in b/debian/templates/control.image.in
new file mode 100644
index 000000000000..546310aef44c
--- /dev/null
+++ b/debian/templates/control.image.in
@@ -0,0 +1,7 @@
+Package: linux-image-@abiname@@localversion@
+Build-Profiles: <!stage1 !pkg.linux.nokernel>
+Depends: kmod, linux-base (>= 4.3~), linux-bootwrapper-@abiname@ [powerpc ppc64], ${misc:Depends}
+Recommends: firmware-linux-free
+Suggests: linux-doc-@version@, debian-kernel-handbook
+Description: Linux @upstreamversion@ for @class@
+ The Linux kernel @upstreamversion@ and modules for use on @longclass@.
diff --git a/debian/templates/control.image.meta.in b/debian/templates/control.image.meta.in
new file mode 100644
index 000000000000..7b71532553da
--- /dev/null
+++ b/debian/templates/control.image.meta.in
@@ -0,0 +1,7 @@
+Package: linux-image@source_suffix@@localversion@
+Build-Profiles: <!stage1 !pkg.linux.nokernel !pkg.linux.nometa>
+Depends: linux-image-@abiname@@localversion@ (= ${binary:Version}), ${misc:Depends}
+Provides: linux-latest-modules-@abiname@@localversion@, wireguard-modules (= 1.0.0), virtualbox-guest-modules [amd64 i386]
+Description: Linux for @class@ (meta-package)
+ This package depends on the latest Linux kernel and modules for use on
+ @longclass@.
diff --git a/debian/templates/control.libc-dev.in b/debian/templates/control.libc-dev.in
new file mode 100644
index 000000000000..e66513ea9221
--- /dev/null
+++ b/debian/templates/control.libc-dev.in
@@ -0,0 +1,7 @@
+Package: linux-libc-dev
+Section: devel
+Depends: ${misc:Depends}
+Multi-Arch: same
+Description: Linux support headers for userspace development
+ This package provides userspaces headers from the Linux kernel.  These headers
+ are used by the installed headers for GNU libc and other system libraries.
diff --git a/debian/templates/control.main.in b/debian/templates/control.main.in
new file mode 100644
index 000000000000..aa092b025cdd
--- /dev/null
+++ b/debian/templates/control.main.in
@@ -0,0 +1,11 @@
+Package: @source_basename@-support-@abiname@
+Build-Profiles: <!stage1>
+Architecture: all
+Section: devel
+Depends: ${python3:Depends}, ${misc:Depends}
+Multi-Arch: foreign
+Description: Support files for Linux @upstreamversion@
+ This package provides support files for the Linux kernel build,
+ e.g. scripts to handle ABI information and for generation of
+ build system meta data.
+
diff --git a/debian/templates/control.signed-template.in b/debian/templates/control.signed-template.in
new file mode 100644
index 000000000000..17508419104f
--- /dev/null
+++ b/debian/templates/control.signed-template.in
@@ -0,0 +1,6 @@
+Package: linux-image@source_suffix@-@arch@-signed-template
+Build-Profiles: <!stage1 !pkg.linux.nokernel>
+Depends: dpkg-dev, ${misc:Depends}
+Description: Template for signed linux-image packages for @arch@
+ This package is used to control code signing by the Debian signing
+ service.
diff --git a/debian/templates/control.source.in b/debian/templates/control.source.in
new file mode 100644
index 000000000000..da7d7493b40e
--- /dev/null
+++ b/debian/templates/control.source.in
@@ -0,0 +1,43 @@
+Section: kernel
+Priority: optional
+Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
+Uploaders: Bastian Blank <waldi@debian.org>, maximilian attems <maks@debian.org>, Ben Hutchings <benh@debian.org>, Salvatore Bonaccorso <carnil@debian.org>
+Standards-Version: 4.2.0
+Build-Depends:
+ debhelper-compat (= 12), dh-exec,
+# used to run debian/bin/*.py
+ python3:any,
+# used by debian/rules.real to prepare the source
+ quilt,
+# used by debian/rules.real to build linux-doc and linux-headers
+ cpio <!stage1>,
+# used by upstream to compress kernel and by debian/rules.real to build linux-source
+ xz-utils <!stage1>,
+# used by debian/rules.real to build linux-perf and linux-support
+ dh-python <!stage1>,
+# used by upstream to build genksyms, kconfig, and perf
+ bison <!stage1>, flex (>= 2.6.1-1.1~) <!stage1>,
+Build-Depends-Arch:
+# used by debian/rules.real to build udebs
+ kernel-wedge (>= 2.102~) <!stage1 !pkg.linux.nokernel>,
+# used by kernel-wedge (only on Linux, thus not declared as a dependency)
+ kmod <!stage1 !pkg.linux.nokernel>,
+# used by upstream to build include/generated/timeconst.h
+ bc <!stage1 !pkg.linux.nokernel>,
+# used by upstream to build signing tools and to process certificates
+ libssl-dev:native <!stage1 !pkg.linux.nokernel>,
+ libssl-dev <!stage1 !pkg.linux.notools>,
+ openssl (>= 1.1.0-1~) <!stage1 !pkg.linux.nokernel>,
+# used by upstream to build objtool (native for images; host arch for
+# linux-kbuild), perf (host arch)
+ libelf-dev:native <!stage1 !pkg.linux.nokernel>,
+ libelf-dev <!stage1 !pkg.linux.notools>,
+# used by upstream headers_install target and by debian/rules.d/tools/usb/usbip
+ rsync,
+ lz4 [amd64 arm64] <!stage1 !pkg.linux.nokernel>,
+# used for bft debug info (not multi-arch capable)
+ dwarves:native (>= 1.16~) <!stage1 !pkg.linux.nokernel>,
+Rules-Requires-Root: no
+Vcs-Git: https://salsa.debian.org/kernel-team/linux.git
+Vcs-Browser: https://salsa.debian.org/kernel-team/linux
+Homepage: https://www.kernel.org/
diff --git a/debian/templates/control.sourcebin.in b/debian/templates/control.sourcebin.in
new file mode 100644
index 000000000000..a3329e2a7e3a
--- /dev/null
+++ b/debian/templates/control.sourcebin.in
@@ -0,0 +1,15 @@
+Package: @source_basename@-source-@version@
+Build-Profiles: <!stage1 !pkg.linux.nosource>
+Architecture: all
+Section: kernel
+Build-Depends: patchutils
+Depends: binutils, xz-utils, ${misc:Depends}
+Recommends: libc6-dev | libc-dev, gcc, make, bc, bison, flex, @source_basename@-config-@version@
+Suggests: libncurses-dev | ncurses-dev, qtbase5-dev, pkg-config
+Multi-Arch: foreign
+Description: Linux kernel source for version @version@ with Debian patches
+ This package provides source code for the Linux kernel version @version@.
+ This source closely tracks official Linux kernel releases.  Debian's
+ modifications to that source consist of security fixes, bug fixes, and
+ features that have already been (or are believed to be) accepted by the
+ upstream maintainers.
diff --git a/debian/templates/control.sourcebin.meta.in b/debian/templates/control.sourcebin.meta.in
new file mode 100644
index 000000000000..13c996d3fa0e
--- /dev/null
+++ b/debian/templates/control.sourcebin.meta.in
@@ -0,0 +1,7 @@
+Package: @source_basename@-source@source_suffix@
+Build-Profiles: <!stage1 !pkg.linux.nosource !pkg.linux.nometa>
+Architecture: all
+Depends: @source_basename@-source-@version@ (= ${binary:Version}), ${misc:Depends}
+Description: Linux kernel source (meta-package)
+ This package depends on packages containing the sources of the latest Linux
+ kernel.
diff --git a/debian/templates/control.tools-unversioned.in b/debian/templates/control.tools-unversioned.in
new file mode 100644
index 000000000000..3ba694f210a7
--- /dev/null
+++ b/debian/templates/control.tools-unversioned.in
@@ -0,0 +1,137 @@
+Package: bpftool
+Build-Profiles: <!stage1 !pkg.linux.notools>
+Section: devel
+Architecture: linux-any
+Build-Depends:
+  python3-docutils <!stage1 !nodoc !pkg.linux.notools>,
+  libelf-dev,
+  zlib1g-dev,
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: Inspection and simple manipulation of BPF programs and maps
+ The bpftool command allows for inspection and simple modification of
+ Berkeley Packet Filter (BPF) objects on the system.
+
+Package: linux-cpupower
+Build-Profiles: <!stage1 !pkg.linux.notools>
+Section: admin
+Architecture: linux-any
+Build-Depends:
+  libcap-dev,
+  libpci-dev,
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: CPU power management tools for Linux
+ The cpupower command allows inspection and control of cpufreq and
+ cpuidle tunables for hardware that supports these features.  It
+ replaces "cpufreq-info" and "cpufreq-set" in cpufrequtils.
+ .
+ ${cpupower:Arch-Description}
+
+Package: libcpupower1
+Build-Profiles: <!stage1 !pkg.linux.notools>
+Section: libs
+Architecture: linux-any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: CPU frequency and voltage scaling tools for Linux (libraries)
+ libcpupower is a library for inspecting and controlling cpufreq and
+ cpuidle tunables.
+ .
+ This package contains the shared library.
+
+Package: libcpupower-dev
+Build-Profiles: <!stage1 !pkg.linux.notools>
+Section: libdevel
+Architecture: linux-any
+Depends: ${misc:Depends}, libcpupower1 (= ${binary:Version})
+Provides: libcpufreq-dev
+Conflicts: libcpufreq-dev
+Replaces: libcpufreq-dev
+Description: CPU frequency and voltage scaling tools for Linux (development files)
+ libcpupower is a library for inspecting and controlling cpufreq and
+ cpuidle tunables.
+ .
+ This package is needed to compile programs against libcpupower.
+
+Package: usbip
+Build-Profiles: <!stage1 !pkg.linux.notools>
+Architecture: linux-any
+Build-Depends:
+ autoconf,
+ automake,
+ libtool,
+ libglib2.0-dev,
+ libudev-dev,
+ libwrap0-dev,
+Depends: usb.ids, ${shlibs:Depends}, ${misc:Depends}
+Section: admin
+Description: USB device sharing system over IP network
+ USB/IP is a system for sharing USB devices over the network.
+ .
+ To share USB devices between computers with their full
+ functionality, USB/IP encapsulates "USB requests" into IP
+ packets and transmits them between computers.
+ .
+ Original USB device drivers and applications can be used
+ for remote USB devices without any modification of them. A
+ computer can use remote USB devices as if they were
+ directly attached.
+ .
+ Currently USB/IP provides no access control or encryption.
+ It should only be used in trusted environments.
+ .
+ This package provides the server component 'usbipd' and the
+ client tool 'usbip'.
+
+Package: hyperv-daemons
+Build-Profiles: <!stage1 !pkg.linux.notools>
+Architecture: i386 amd64 x32
+Pre-Depends: ${misc:Pre-Depends}
+Depends: lsb-base, ${shlibs:Depends}, ${misc:Depends}
+Section: admin
+Description: Support daemons for Linux running on Hyper-V
+ Suite of daemons for Linux guests running on Hyper-V, consisting of
+ hv_fcopy_daemon, hv_kvp_daemon and hv_vss_daemon.
+ .
+ hv_fcopy_daemon provides the file copy service, allowing the host to
+ copy files into the guest.
+ .
+ hv_kvp_daemon provides the key-value pair (KVP) service, allowing the
+ host to get and set the IP networking configuration of the guest.
+ (This requires helper scripts which are not currently included.)
+ .
+ hv_vss_daemon provides the volume shadow copy service (VSS), allowing
+ the host to freeze the guest filesystems while taking a snapshot.
+
+#Package: lockdep
+#Build-Profiles: <!stage1 !pkg.linux.notools>
+#Architecture: all
+#Depends: ${misc:Depends}, liblockdep@version@
+#Recommends: liblockdep-dev
+#Section: devel
+#Multi-Arch: allowed
+#Description: Runtime locking correctness validator
+# lockdep is a wrapper for programs that use the pthreads API, which detects
+# actual and potential deadlocks and other locking bugs.
+#
+#Package: liblockdep@version@
+#Build-Profiles: <!stage1 !pkg.linux.notools>
+#Architecture: linux-any
+#Depends: ${shlibs:Depends}, ${misc:Depends}
+#Section: libs
+#Multi-Arch: same
+#Description: Runtime locking correctness validator (shared library)
+# liblockdep is a library for programs that use the pthreads API, which can
+# be used to detect actual and potential deadlocks and other locking bugs.
+# .
+# This package contains the shared library.
+#
+#Package: liblockdep-dev
+#Build-Profiles: <!stage1 !pkg.linux.notools>
+#Architecture: linux-any
+#Depends: ${misc:Depends}, liblockdep@version@ (= ${binary:Version})
+#Section: libdevel
+#Multi-Arch: same
+#Description: Runtime locking correctness validator (development files)
+# liblockdep is a library for programs that use the pthreads API, which can
+# be used to detect actual and potential deadlocks and other locking bugs.
+# .
+# This package is needed to compile programs against liblockdep.
diff --git a/debian/templates/control.tools-versioned.in b/debian/templates/control.tools-versioned.in
new file mode 100644
index 000000000000..9219039fb23c
--- /dev/null
+++ b/debian/templates/control.tools-versioned.in
@@ -0,0 +1,48 @@
+Package: linux-kbuild-@version@
+Build-Profiles: <!stage1 !pkg.linux.notools>
+Architecture: linux-any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Multi-Arch: foreign
+Description: Kbuild infrastructure for Linux @version@
+ This package provides the kbuild infrastructure for the headers packages for Linux kernel version @version@.
+
+Package: linux-perf-@version@
+Build-Profiles: <!stage1 !pkg.linux.notools !nopython>
+Section: devel
+Architecture: alpha amd64 arm64 armel armhf hppa i386 mips mips64 mips64el mipsel mipsn32 mipsn32el mipsr6 mipsr6el mipsn32r6 mipsn32r6el mips64r6 mips64r6el powerpc ppc64 ppc64el riscv64 s390 s390x sh4 sparc sparc64
+Build-Depends:
+ asciidoctor <!stage1 !nodoc !pkg.linux.notools !nopython>,
+ gcc-multilib [amd64 mips64 mips64el mips64r6 mips64r6el ppc64 s390x sparc64],
+ libaudit-dev,
+ libbabeltrace-dev (>= 1.5.0),
+# libbabeltrace-ctf-dev may or may not be needed as well
+ libbabeltrace-dev (>= 1.5.3-2~) | libbabeltrace-ctf-dev (>= 1.5.0),
+ libdw-dev,
+ libiberty-dev,
+ libnewt-dev,
+ libnuma-dev,
+ libperl-dev,
+ libunwind-dev [amd64 arm64 armel armhf hppa i386 mips mips64 mips64el mipsel powerpc ppc64 ppc64el sh4],
+ libopencsd-dev,
+ python3-dev,
+Depends: ${shlibs:Depends}, ${misc:Depends}, ${perl:Depends}, ${python3:Depends}
+Recommends: linux-base
+Provides: linux-tools-@version@
+Conflicts: linux-tools-@version@
+Replaces: linux-tools-@version@
+Suggests: linux-doc-@version@
+Description: Performance analysis tools for Linux @version@
+ This package contains the 'perf' performance analysis tools for Linux
+ kernel version @version@.
+ .
+ The linux-base package contains a 'perf' command which will invoke the
+ appropriate version for the running kernel.
+
+Package: linux-bootwrapper-@abiname@
+Build-Profiles: <!stage1 !pkg.linux.notools>
+Architecture: powerpc ppc64
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Multi-Arch: foreign
+Description: Boot wrapper tools for Linux @version@ on PowerPC
+ This package provides the 'wrapper' script and related tools needed
+ to process the Linux kernel image for use with some PowerPC platforms.
diff --git a/debian/templates/control.tools-versioned.meta.in b/debian/templates/control.tools-versioned.meta.in
new file mode 100644
index 000000000000..b4eb1f5cf23d
--- /dev/null
+++ b/debian/templates/control.tools-versioned.meta.in
@@ -0,0 +1,7 @@
+Package: linux-perf@source_suffix@
+Build-Profiles: <!stage1 !pkg.linux.notools !nopython !pkg.linux.nometa>
+Architecture: alpha amd64 arm64 armel armhf hppa i386 mips mips64 mips64el mipsel mipsn32 mipsn32el mipsr6 mipsr6el mipsn32r6 mipsn32r6el mips64r6 mips64r6el powerpc ppc64 ppc64el riscv64 s390 s390x sh4 sparc sparc64
+Depends: linux-perf-@version@ (= ${binary:Version}), ${misc:Depends}
+Description: Performance analysis tools for Linux (meta-package)
+ This package depends on the package containing the 'perf' performance
+ analysis tools for the latest Linux kernel.
diff --git a/debian/templates/docs.meta.maintscript.in b/debian/templates/docs.meta.maintscript.in
new file mode 100644
index 000000000000..be9cf59f0de0
--- /dev/null
+++ b/debian/templates/docs.meta.maintscript.in
@@ -0,0 +1 @@
+dir_to_symlink /usr/share/doc/@source_basename@-doc@source_suffix@ @source_basename@-doc-@version@ 5.7~rc5-1~exp1 @source_basename@-doc@source_suffix@
diff --git a/debian/templates/headers.meta.maintscript.in b/debian/templates/headers.meta.maintscript.in
new file mode 100644
index 000000000000..e1f2662cb489
--- /dev/null
+++ b/debian/templates/headers.meta.maintscript.in
@@ -0,0 +1 @@
+dir_to_symlink /usr/share/doc/linux-headers@source_suffix@@localversion@ linux-headers-@abiname@@localversion@ 5.7~rc5-1~exp1 linux-headers@source_suffix@@localversion@
diff --git a/debian/templates/headers.postinst.in b/debian/templates/headers.postinst.in
new file mode 100755
index 000000000000..c13e6dc54e41
--- /dev/null
+++ b/debian/templates/headers.postinst.in
@@ -0,0 +1,18 @@
+#!/usr/bin/perl
+# Author: Michael Gilbert <michael.s.gilbert@gmail.com>
+# Origin: Stripped down version of the linux-headers postinst from Ubuntu's
+#         2.6.32-14-generic kernel, which was itself derived from a
+#         Debian linux-image postinst script.
+
+$|=1;
+my $version  = "@abiname@@localversion@";
+
+if (-d "/etc/kernel/header_postinst.d") {
+  system ("run-parts --report --exit-on-error --arg=$version " .
+          "/etc/kernel/header_postinst.d") &&
+            die "Failed to process /etc/kernel/header_postinst.d";
+}
+
+exit 0;
+
+__END__
diff --git a/debian/templates/image-dbg.lintian-overrides.in b/debian/templates/image-dbg.lintian-overrides.in
new file mode 100755
index 000000000000..4290c15664ad
--- /dev/null
+++ b/debian/templates/image-dbg.lintian-overrides.in
@@ -0,0 +1,15 @@
+#!/usr/bin/dh-exec
+
+# Kernel dbg packages contain a full image with debug data
+linux-image-@abiname@@localversion@-dbg: dbg-package-missing-depends
+
+# glibc doesn't seem to check for a PT_GNU_STACK section in vDSOs, so
+# it's OK that they don't have it
+[arm64 armhf] linux-image-@abiname@@localversion@-dbg: shlib-without-PT_GNU_STACK-section usr/lib/debug/lib/modules/@abiname@@localversion@/vdso/vdso.so
+[amd64 i386 ppc64el s390x] linux-image-@abiname@@localversion@-dbg: shlib-without-PT_GNU_STACK-section usr/lib/debug/lib/modules/@abiname@@localversion@/vdso/vdso32.so
+[amd64 ppc64el s390x] linux-image-@abiname@@localversion@-dbg: shlib-without-PT_GNU_STACK-section usr/lib/debug/lib/modules/@abiname@@localversion@/vdso/vdso64.so
+[amd64] linux-image-@abiname@@localversion@-dbg: shlib-without-PT_GNU_STACK-section usr/lib/debug/lib/modules/@abiname@@localversion@/vdso/vdsox32.so
+
+# It is intended that 64-bit kernels provide vDSOs for 32-bit executables
+[amd64 ppc64el s390x] linux-image-@abiname@@localversion@-dbg: binary-from-other-architecture usr/lib/debug/lib/modules/@abiname@@localversion@/vdso/vdso32.so
+[amd64] linux-image-@abiname@@localversion@-dbg: binary-from-other-architecture usr/lib/debug/lib/modules/@abiname@@localversion@/vdso/vdsox32.so
diff --git a/debian/templates/image-dbg.meta.lintian-overrides.in b/debian/templates/image-dbg.meta.lintian-overrides.in
new file mode 100644
index 000000000000..a3c7e848c599
--- /dev/null
+++ b/debian/templates/image-dbg.meta.lintian-overrides.in
@@ -0,0 +1,2 @@
+linux-image@source_suffix@-@flavour@-dbg: wrong-section-according-to-package-name linux-image@source_suffix@-@flavour@-dbg => debug
+linux-image@source_suffix@-@flavour@-dbg: debug-package-should-be-priority-extra linux-image@source_suffix@-@flavour@-dbg
diff --git a/debian/templates/image-dbg.meta.maintscript.in b/debian/templates/image-dbg.meta.maintscript.in
new file mode 100644
index 000000000000..f09fd9d76ca1
--- /dev/null
+++ b/debian/templates/image-dbg.meta.maintscript.in
@@ -0,0 +1 @@
+dir_to_symlink /usr/share/doc/linux-image@source_suffix@@localversion@-dbg linux-image-@abiname@@localversion@-dbg 5.7~rc5-1~exp1 linux-image@source_suffix@@localversion@-dbg
diff --git a/debian/templates/image.bug/control b/debian/templates/image.bug/control
new file mode 100644
index 000000000000..b60912c4cd5e
--- /dev/null
+++ b/debian/templates/image.bug/control
@@ -0,0 +1,2 @@
+Submit-As: src:linux
+Package-Status: firmware-amd-graphics firmware-atheros firmware-bnx2 firmware-bnx2x firmware-brcm80211 firmware-cavium firmware-intelwimax firmware-intel-sound firmware-ipw2x00 firmware-ivtv firmware-iwlwifi firmware-libertas firmware-linux-nonfree firmware-misc-nonfree firmware-myricom firmware-netxen firmware-qlogic firmware-realtek firmware-samsung firmware-siano firmware-ti-connectivity xen-hypervisor
diff --git a/debian/templates/image.bug/include-0version b/debian/templates/image.bug/include-0version
new file mode 100644
index 000000000000..b5b32bfbd120
--- /dev/null
+++ b/debian/templates/image.bug/include-0version
@@ -0,0 +1,9 @@
+add_0version() {
+  echo '** Version:' >&3
+  cat /proc/version >&3
+  echo >&3
+}
+
+ask_0version() {
+  true
+}
diff --git a/debian/templates/image.bug/include-1cmdline b/debian/templates/image.bug/include-1cmdline
new file mode 100644
index 000000000000..3fcc94098232
--- /dev/null
+++ b/debian/templates/image.bug/include-1cmdline
@@ -0,0 +1,9 @@
+add_1cmdline() {
+  echo '** Command line:' >&3
+  cat /proc/cmdline >&3
+  echo >&3
+}
+
+ask_1cmdline() {
+  true
+}
diff --git a/debian/templates/image.bug/include-1tainted b/debian/templates/image.bug/include-1tainted
new file mode 100644
index 000000000000..7eedf260b4e2
--- /dev/null
+++ b/debian/templates/image.bug/include-1tainted
@@ -0,0 +1,41 @@
+_check() {
+  if [ $(($tainted & 1<<$1)) -ne 0 ]; then
+    result_short="$result_short$2"
+    result_long="$result_long * $3\n"
+  fi
+}
+
+add_1tainted() {
+  tainted=$(cat /proc/sys/kernel/tainted)
+  if [ "$tainted" -gt 0 ]; then
+    local result_short result_long
+    # Use debian/bin/update-bug-taint-list to update this
+    _check 0 P 'proprietary module was loaded'
+    _check 1 F 'module was force loaded'
+    _check 2 S 'SMP kernel oops on an officially SMP incapable processor'
+    _check 3 R 'module was force unloaded'
+    _check 4 M 'processor reported a Machine Check Exception (MCE)'
+    _check 5 B 'bad page referenced or some unexpected page flags'
+    _check 6 U 'taint requested by userspace application'
+    _check 7 D 'kernel died recently, i.e. there was an OOPS or BUG'
+    _check 8 A 'ACPI table overridden by user'
+    _check 9 W 'kernel issued warning'
+    _check 10 C 'staging driver was loaded'
+    _check 11 I 'workaround for bug in platform firmware applied'
+    _check 12 O 'externally-built ("out-of-tree") module was loaded'
+    _check 13 E 'unsigned module was loaded'
+    _check 14 L 'soft lockup occurred'
+    _check 15 K 'kernel has been live patched'
+    _check 16 X 'auxiliary taint, defined for and used by distros'
+    _check 17 T 'kernel was built with the struct randomization plugin'
+    echo "** Tainted: $result_short ($tainted)" >&3
+    printf "$result_long" >&3
+  else
+    echo '** Not tainted' >&3
+  fi
+  echo >&3
+}
+
+ask_1tainted() {
+  true
+}
diff --git a/debian/templates/image.bug/include-dmesg b/debian/templates/image.bug/include-dmesg
new file mode 100644
index 000000000000..634dc99acb1d
--- /dev/null
+++ b/debian/templates/image.bug/include-dmesg
@@ -0,0 +1,21 @@
+add_dmesg() {
+  local got_log=
+  echo '** Kernel log:' >&3
+  if [ "$(cat /proc/sys/kernel/dmesg_restrict)" = 0 ]; then
+    dmesg > >(tail -n 100 >&3) && got_log=y
+  elif command -v sudo >/dev/null; then
+    yesno "Use sudo to read the kernel log? " yep
+    if [ "$REPLY" = yep ]; then
+      sudo dmesg > >(tail -n 100 >&3) && got_log=y
+    fi
+  fi
+  test "$got_log" || echo 'Unable to read kernel log; any relevant messages should be attached' >&3
+  echo >&3
+}
+
+ask_dmesg() {
+  # Remind the user to attach the kernel log.  This should also trigger
+  # a reminder in some MUAs if the user tries to send without it.
+  echo '** Kernel log: boot messages should be attached' >&3
+  echo >&3
+}
diff --git a/debian/templates/image.bug/include-model b/debian/templates/image.bug/include-model
new file mode 100644
index 000000000000..ba77fb26613f
--- /dev/null
+++ b/debian/templates/image.bug/include-model
@@ -0,0 +1,60 @@
+grep_model() {
+  case "$(uname -m)" in
+  alpha)
+    egrep '^(system (type|variation|revision)|platform string)\b' /proc/cpuinfo
+    ;;
+  arm*)
+    egrep '^(Processor|Hardware|Revision)\b' /proc/cpuinfo
+    ;;
+  i386|ia64|x86_64)
+    local found=
+    for name in {sys,product,chassis,bios,board}_{vendor,name,version}; do
+      if [ -f /sys/class/dmi/id/$name ]; then
+	echo -n "$name: "
+	cat /sys/class/dmi/id/$name
+	found=y
+      fi
+    done
+    test -n "$found"
+    ;;
+  mips|mips64)
+    egrep '^(system type|cpu model)\b' /proc/cpuinfo
+    ;;
+  parisc|parisc64)
+    egrep '^(model|[hs]version)\b' /proc/cpuinfo
+    ;;
+  ppc|ppc64|ppc64le)
+    egrep -i '^(board|machine|model|motherboard|platform|revision|vendor)\b' /proc/cpuinfo
+    ;;
+  s390|s390x)
+    egrep '^processor\b' /proc/cpuinfo
+    ;;
+  sparc|sparc64)
+    egrep '^(cpu|fpu|pmu|prom|type)\b' /proc/cpuinfo
+    ;;
+  sh4|sh4a)
+    egrep '^(machine|cpu)\b' /proc/cpuinfo
+    ;;
+  *)
+    false
+    ;;
+  esac
+
+  # Device Tree model
+  if [ -r /proc/device-tree/model ]; then
+    echo "Device Tree model:" $(cat /proc/device-tree/model)
+  fi
+}
+
+add_model() {
+  local found=
+  echo '** Model information' >&3
+  grep_model >&3 2>/dev/null || echo "not available" >&3
+  echo >&3
+}
+
+ask_model() {
+  # This is still valid as long as the bug is being reported on the same
+  # system.
+  test $same_system = nop || add_model
+}
diff --git a/debian/templates/image.bug/include-modules b/debian/templates/image.bug/include-modules
new file mode 100644
index 000000000000..22271c90588e
--- /dev/null
+++ b/debian/templates/image.bug/include-modules
@@ -0,0 +1,13 @@
+add_modules() {
+  echo '** Loaded modules:' >&3
+  # List modules along with any taint flags.
+  # We should be able to tell cut to use an empty output delimiter, but
+  # currently (coreutils 8.13-3) this results in null bytes in the output.
+  cut -d' ' -f1,7 /proc/modules | sed 's/ //' >&3
+  echo >&3
+}
+
+ask_modules() {
+  true
+}
+
diff --git a/debian/templates/image.bug/include-network b/debian/templates/image.bug/include-network
new file mode 100644
index 000000000000..89d9cb9de4b0
--- /dev/null
+++ b/debian/templates/image.bug/include-network
@@ -0,0 +1,69 @@
+_list_etc_network_interfaces() {
+  local file
+
+  for file in /etc/network/interfaces /etc/network/interfaces.d/*; do
+    if ! [ -f "$file" ]; then
+      continue
+    fi
+    case "${file##*/}" in
+    *[^-a-zA-Z0-9_]*)
+      continue
+      ;;
+    esac
+    echo "$file"
+  done
+}
+
+_add_etc_network_interfaces() {
+  local file
+  test -f /etc/network/interfaces || return 0
+
+  echo '** Network interface configuration:' >&3
+
+  while read file; do
+    if ! [ -r "$file" ]; then
+      echo "*** $file: unreadable" >&3
+      echo >&3
+      continue
+    fi
+    echo "*** $file:" >&3
+    # Hide passwords/keys
+    awk '$1 ~ /key|pass|^wpa-(anonymous|identity|phase|pin|private|psk)/ { gsub(".", "*", $2); }
+         $1 == "ethtool-wol" { gsub(".", "*", $3); }
+         !/^[[:space:]]*\#/ { print; }
+        ' <"$file" >&3
+    echo >&3
+  done < <(_list_etc_network_interfaces)
+}
+
+add_network() {
+  yesno "Include network configuration and status from this computer? " nop
+  test $REPLY = yep || return 0
+
+  _add_etc_network_interfaces
+  echo '** Network status:' >&3
+  if command -v ip >/dev/null; then
+    echo '*** IP interfaces and addresses:' >&3
+    ip address show >&3
+    echo >&3
+  fi
+  echo '*** Device statistics:' >&3
+  cat /proc/net/dev >&3
+  echo >&3
+  if command -v netstat >/dev/null; then
+    echo '*** Protocol statistics:' >&3
+    netstat -s >&3 || true
+    echo >&3
+  fi
+  echo >&3
+}
+
+ask_network() {
+  test $same_system = yep || return 0
+  test -f /etc/network/interfaces || return 0
+
+  yesno "Include network configuration from this computer? " nop
+  test $REPLY = yep || return 0
+
+  _add_etc_network_interfaces
+}
diff --git a/debian/templates/image.bug/include-pci b/debian/templates/image.bug/include-pci
new file mode 100644
index 000000000000..8e6528e5a7b8
--- /dev/null
+++ b/debian/templates/image.bug/include-pci
@@ -0,0 +1,12 @@
+add_pci() {
+  echo '** PCI devices:' >&3
+  lspci -nnvv >&3 2>/dev/null || echo 'not available' >&3
+  echo >&3
+}
+
+ask_pci() {
+  # This information shouldn't vary much between kernel versions, so
+  # include it anyway.
+  test $same_system = nop || add_pci
+}
+
diff --git a/debian/templates/image.bug/include-pstore b/debian/templates/image.bug/include-pstore
new file mode 100644
index 000000000000..43285bd6a9be
--- /dev/null
+++ b/debian/templates/image.bug/include-pstore
@@ -0,0 +1,77 @@
+_add_pstore_log() {
+  if [ $# -le 3 ]; then
+    return
+  fi
+
+  local backend="$1"
+  local event="$2"
+  local date="$3"
+
+  yesno "Include log of $event at $(date -d @$date +%c) stored by $backend?" yep
+  if [ $REPLY != yep ]; then
+    return
+  fi
+
+  echo >&3
+  echo "*** Log of $event at $(date -d @$date -Iseconds) from $backend" >&3
+
+  shift 3
+  for file in "$@"; do
+    tail -n +2 "$file" | sed 's/^<.>//' >&3
+  done
+}
+
+add_pstore() {
+  local backend
+  local i
+  local j
+  local file
+  local date
+  local head
+  local event
+  local log_files
+
+  if ! mountpoint -q /sys/fs/pstore; then
+    return 0
+  fi
+
+  set -- /sys/fs/pstore/dmesg-*-1
+  backend=${1#*/dmesg-}
+  backend=${backend%-1}
+  if [ "$backend" = '*' ]; then
+    return 0
+  fi
+
+  i=1
+  while [ -f /sys/fs/pstore/dmesg-$backend-$i ]; do
+    file=/sys/fs/pstore/dmesg-$backend-$i
+    head="$(head -1 "$file")"
+
+    # Is this the first part of a log?
+    if [ "x${head% Part1}" != "x$head" ]; then
+      # Flush previous log, if any
+      _add_pstore_log "$backend" "$event" "$date" $log_files
+
+      event="${head% Part1}"
+      date=$(stat -c %Y $file)
+      log_files=
+      j=1
+    fi
+
+    if [ "x$head" = "x$event Part$j" ]; then
+      # Each part is prepended to the list, because they're numbered
+      # backward in log history
+      log_files="$file $log_files"
+      j=$((j + 1))
+    fi
+
+    i=$((i + 1))
+  done
+
+  # Flush last log, if any
+  _add_pstore_log "$backend" "$event" "$date" $log_files
+}
+
+ask_pstore() {
+  add_pstore
+}
diff --git a/debian/templates/image.bug/include-usb b/debian/templates/image.bug/include-usb
new file mode 100644
index 000000000000..e8eb67e42d14
--- /dev/null
+++ b/debian/templates/image.bug/include-usb
@@ -0,0 +1,11 @@
+add_usb() {
+  echo '** USB devices:' >&3
+  lsusb >&3 2>/dev/null || echo 'not available' >&3
+  echo >&3
+}
+
+ask_usb() {
+  # This information shouldn't vary much between kernel versions, so
+  # include it anyway.
+  test $same_system = nop || add_usb 
+}
diff --git a/debian/templates/image.bug/presubj b/debian/templates/image.bug/presubj
new file mode 100644
index 000000000000..59b891acb965
--- /dev/null
+++ b/debian/templates/image.bug/presubj
@@ -0,0 +1,8 @@
+Please ensure that you are currently running the kernel version that you
+are reporting on.  This will allow your bug report to include useful
+diagnostic information about the running kernel.
+
+If you are reporting that the kernel fails to boot, please use a digital
+camera, serial console or netconsole to record the boot messages and
+attach these to your report.  You can use the kernel parameter
+'boot_delay=1000' to slow down the boot messages.
diff --git a/debian/templates/image.bug/script b/debian/templates/image.bug/script
new file mode 100644
index 000000000000..8e0b5d557d70
--- /dev/null
+++ b/debian/templates/image.bug/script
@@ -0,0 +1,46 @@
+#!/bin/bash
+set -e
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+
+dir="$(dirname $0)"
+
+. "$dir"/info
+
+for file in "$dir"/include-*; do
+  name="$(echo $file | sed -e 's,^.*/include-,,')"
+  hooks+=($name)
+  . "$file"
+done
+
+if [ "$RELEASE" == "$(uname -r)" ]; then
+  running_ver="$(uname -v)"
+  running_ver="${running_ver#* $DISTRIBUTOR }"
+  running_ver="${running_ver%% *}"
+  if [ "$running_ver" != "$SOURCEVERSION" ]; then
+    cat <<EOF
+You have installed version $PACKAGE_VERSION of
+$PACKAGE_NAME, but version $running_ver is currently
+running.
+
+You should reboot to complete the upgrade.  Until you do this, some
+modules may fail to load.  This is NOT a bug.
+
+If you have already rebooted, check your boot loader configuration.
+
+EOF
+    yesno "Do you still want to report a bug? " nop
+    if [ "$REPLY" = nop ]; then
+      exit 1
+    fi
+  fi
+  for hook in ${hooks[@]}; do
+    add_$hook
+  done
+else
+  yesno "Does the bug you are reporting affect this computer? " yep
+  same_system=$REPLY
+  for hook in ${hooks[@]}; do
+    ask_$hook
+  done
+fi
diff --git a/debian/templates/image.meta.bug-presubj.in b/debian/templates/image.meta.bug-presubj.in
new file mode 100644
index 000000000000..1f2c5e9c7567
--- /dev/null
+++ b/debian/templates/image.meta.bug-presubj.in
@@ -0,0 +1,5 @@
+You are about to report a bug in a Linux kernel meta package.
+This is probably not what you intended to do.
+
+If you want to report a bug in the Linux kernel or modules, you should use
+the package name linux-image-@abiname@@localversion@ instead.
diff --git a/debian/templates/image.meta.maintscript.in b/debian/templates/image.meta.maintscript.in
new file mode 100644
index 000000000000..76244f382403
--- /dev/null
+++ b/debian/templates/image.meta.maintscript.in
@@ -0,0 +1 @@
+dir_to_symlink /usr/share/doc/linux-image@source_suffix@@localversion@ linux-image-@abiname@@localversion@ 5.7~rc5-1~exp1 linux-image@source_suffix@@localversion@
diff --git a/debian/templates/image.postinst.in b/debian/templates/image.postinst.in
new file mode 100755
index 000000000000..25e7dd65467e
--- /dev/null
+++ b/debian/templates/image.postinst.in
@@ -0,0 +1,25 @@
+#!/bin/sh -e
+
+version=@abiname@@localversion@
+image_path=/boot/@image-stem@-$version
+
+if [ "$1" != configure ]; then
+    exit 0
+fi
+
+depmod $version
+
+if [ -f /lib/modules/$version/.fresh-install ]; then
+    change=install
+else
+    change=upgrade
+fi
+linux-update-symlinks $change $version $image_path
+rm -f /lib/modules/$version/.fresh-install
+
+if [ -d /etc/kernel/postinst.d ]; then
+    DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \
+	      --arg=$image_path /etc/kernel/postinst.d
+fi
+
+exit 0
diff --git a/debian/templates/image.postrm.in b/debian/templates/image.postrm.in
new file mode 100755
index 000000000000..4298752b333d
--- /dev/null
+++ b/debian/templates/image.postrm.in
@@ -0,0 +1,31 @@
+#!/bin/sh -e
+
+version=@abiname@@localversion@
+image_path=/boot/@image-stem@-$version
+
+rm -f /lib/modules/$version/.fresh-install
+
+if [ "$1" != upgrade ] && command -v linux-update-symlinks >/dev/null; then
+    linux-update-symlinks remove $version $image_path
+fi
+
+if [ -d /etc/kernel/postrm.d ]; then
+    DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \
+	      --arg=$image_path /etc/kernel/postrm.d
+fi
+
+if [ "$1" = purge ]; then
+    for extra_file in modules.dep modules.isapnpmap modules.pcimap \
+                      modules.usbmap modules.parportmap \
+                      modules.generic_string modules.ieee1394map \
+                      modules.ieee1394map modules.pnpbiosmap \
+                      modules.alias modules.ccwmap modules.inputmap \
+                      modules.symbols modules.ofmap \
+                      modules.seriomap modules.\*.bin \
+		      modules.softdep modules.devname; do
+	eval rm -f /lib/modules/$version/$extra_file
+    done
+    rmdir /lib/modules/$version || true
+fi
+
+exit 0
diff --git a/debian/templates/image.preinst.in b/debian/templates/image.preinst.in
new file mode 100755
index 000000000000..8a5658ecd1bb
--- /dev/null
+++ b/debian/templates/image.preinst.in
@@ -0,0 +1,21 @@
+#!/bin/sh -e
+
+version=@abiname@@localversion@
+image_path=/boot/@image-stem@-$version
+
+if [ "$1" = abort-upgrade ]; then
+    exit 0
+fi
+
+if [ "$1" = install ]; then
+    # Create a flag file for postinst
+    mkdir -p /lib/modules/$version
+    touch /lib/modules/$version/.fresh-install
+fi
+
+if [ -d /etc/kernel/preinst.d ]; then
+    DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \
+	      --arg=$image_path /etc/kernel/preinst.d
+fi
+
+exit 0
diff --git a/debian/templates/image.prerm.in b/debian/templates/image.prerm.in
new file mode 100755
index 000000000000..f1bde29b1151
--- /dev/null
+++ b/debian/templates/image.prerm.in
@@ -0,0 +1,17 @@
+#!/bin/sh -e
+
+version=@abiname@@localversion@
+image_path=/boot/@image-stem@-$version
+
+if [ "$1" != remove ]; then
+    exit 0
+fi
+
+linux-check-removal $version
+
+if [ -d /etc/kernel/prerm.d ]; then
+    DEB_MAINT_PARAMS="$*" run-parts --report --exit-on-error --arg=$version \
+	      --arg=$image_path /etc/kernel/prerm.d
+fi
+
+exit 0
diff --git a/debian/templates/perf.lintian-overrides.in b/debian/templates/perf.lintian-overrides.in
new file mode 100644
index 000000000000..858faa782efd
--- /dev/null
+++ b/debian/templates/perf.lintian-overrides.in
@@ -0,0 +1,3 @@
+# These executables are needed to handle processes running in compat mode
+linux-perf-@version@: binary-from-other-architecture usr/lib/perf_@version@-core/perf-read-vdso32
+linux-perf-@version@: binary-from-other-architecture usr/lib/perf_@version@-core/perf-read-vdsox32
diff --git a/debian/templates/perf.meta.maintscript.in b/debian/templates/perf.meta.maintscript.in
new file mode 100644
index 000000000000..cbdb955620c6
--- /dev/null
+++ b/debian/templates/perf.meta.maintscript.in
@@ -0,0 +1 @@
+dir_to_symlink /usr/share/doc/linux-perf linux-perf-@version@ 5.7~rc5-1~exp1 linux-perf
diff --git a/debian/templates/sourcebin.meta.maintscript.in b/debian/templates/sourcebin.meta.maintscript.in
new file mode 100644
index 000000000000..3943321b8ed0
--- /dev/null
+++ b/debian/templates/sourcebin.meta.maintscript.in
@@ -0,0 +1 @@
+dir_to_symlink /usr/share/doc/@source_basename@-source@source_suffix@ @source_basename@-source-@version@ 5.7~rc5-1~exp1 @source_basename@-source@source_suffix@
diff --git a/debian/templates/tests-control.image.in b/debian/templates/tests-control.image.in
new file mode 100644
index 000000000000..62497c67ae02
--- /dev/null
+++ b/debian/templates/tests-control.image.in
@@ -0,0 +1,4 @@
+Tests: selftests
+Restrictions: breaks-testbed, needs-root, isolation-machine
+Depends: kexec-tools, python3, gcc, make, libpopt-dev, gcc-multilib [amd64], bc, fuse, libfuse-dev, pkg-config
+Classes: smp
diff --git a/debian/templates/tests-control.main.in b/debian/templates/tests-control.main.in
new file mode 100644
index 000000000000..f63e7805dc77
--- /dev/null
+++ b/debian/templates/tests-control.main.in
@@ -0,0 +1,3 @@
+Tests: python
+Depends: python3, pycodestyle, pyflakes3
+Restrictions: superficial
diff --git a/debian/tests/python b/debian/tests/python
new file mode 100755
index 000000000000..c743f21efa99
--- /dev/null
+++ b/debian/tests/python
@@ -0,0 +1,40 @@
+#!/bin/bash -eu
+
+sources="$AUTOPKGTEST_TMP/sources"
+
+{
+    # Check Python modules under debian/lib and Python scripts under
+    # debian/bin or debian/rules.d.
+    find debian/lib/python -name '*.py'
+    find debian/bin debian/rules.d -type f -perm /111 |
+	while read script; do
+	    # Check for Python shebang on the first line only
+	    if awk '/^#!.*python/ { exit 0 } { exit 1 }' "$script"; then
+		echo "$script"
+	    fi
+	done
+} > "$sources"
+
+# autopkgtest checks for a non-zero exit code *or* any output to
+# stderr.  So we should continue after a failure, but make sure
+# something is written to stderr.
+
+echo "I: Running pycodestyle..."
+# Ignore E126,E226,W503 (ignored by default) and also E127,W291 which
+# give false positives.
+if ! xargs pycodestyle --max-line-length=100 --ignore E126,E127,E226,W291,W503 < "$sources"; then
+    # pycodestyle only writes to stdout
+    echo >&2 "E: pycodestyle detected problems"
+fi
+
+echo "I: Running pyflakes..."
+if ! xargs pyflakes3 < "$sources"; then
+    # pyflakes only writes to stdout
+    echo >&2 "E: pyflakes detected problems"
+fi
+
+echo "I: Running debian_linux.debian unit tests..."
+# unittest only writes to stderr
+if ! PYTHONPATH=debian/lib/python python3 -m debian_linux.debian 2>&1; then
+    echo >&2 "E: some unit tests failed"
+fi
diff --git a/debian/tests/selftests b/debian/tests/selftests
new file mode 100644
index 000000000000..c19064ca61a7
--- /dev/null
+++ b/debian/tests/selftests
@@ -0,0 +1,88 @@
+#!/bin/bash -eu
+
+PATH=/usr/sbin:/sbin:/usr/bin:/bin
+
+getconfig() {
+    debian/bin/getconfig.py "$@"
+}
+
+# Look up current ABI name and 'localversion' (featureset/flavour) suffixes
+abiname=$(getconfig version abiname)
+arch=$(dpkg --print-architecture)
+localversion=()
+for featureset in $(getconfig base $arch featuresets); do
+    if [ "$(getconfig base '' $featureset enabled || echo True)" = True ]; then
+	for flavour in $(getconfig base $arch $featureset flavours); do
+	    if [ "$featureset" = none ]; then
+		localversion+=(-$flavour)
+	    else
+		localversion+=(-$featureset-$flavour)
+	    fi
+	done
+    fi
+done
+steps=${#localversion[*]}
+
+case "${ADT_REBOOT_MARK:-}" in
+    "")
+	step=-1
+	;;
+    step*)
+	step=${ADT_REBOOT_MARK#step}
+	;;
+esac
+
+if [ "$step" -ge 0 ]; then
+    ver=$abiname${localversion[$step]}
+
+    if [ "$(uname -r)" != "$ver" ]; then
+	echo >&2 "Should be running: $ver"
+	echo >&2 "Actually running: $(uname -r)"
+    else
+	cp -lR . $ADTTMP/build
+	cd $ADTTMP/build
+	make headers_install
+
+	# Ignore compiler warnings
+	{
+	    make -C tools/testing/selftests &&
+	    make -C tools/testing/selftests/memfd build_fuse
+	} 2>&1 || echo >&2 "Build failed"
+
+	# Enable testing CLONE_USERNS by unprivileged users
+	sysctl kernel.unprivileged_userns_clone=1
+
+	# Some tests will write to stderr despite being successful,
+	# and the exit code from make will be 0 even if tests failed.
+	# So we have to do some post-analysis...
+	set -o pipefail
+	{
+	    make -C tools/testing/selftests quicktest=1 run_tests &&
+	    make -C tools/testing/selftests/cpu-hotplug run_full_test &&
+	    make -C tools/testing/selftests/memory-hotplug run_full_test &&
+	    make -C tools/testing/selftests/memfd run_fuse &&
+	    make -C tools/testing/selftests/timers run_destructive_tests
+	} 2>&1 | tee $ADTTMP/log
+	set +o pipefail
+	if grep -E '\[(FAIL|UNSUPPORTED)\]|recipe for target .run_tests. failed' $ADTTMP/log | \
+	    grep -q -v \
+		 -e '^selftests: fw_userhelper.sh \[FAIL\]' \
+		 -e 'ftrace - function profiler with function tracing   \[UNSUPPORTED\]' \
+		 -e '^selftests: ftracetest \[FAIL\]' \
+		 -e '|| echo .*\[FAIL\]' \
+		 ; then
+	    echo >&2 "Unexpected failures found"
+	fi
+    fi
+fi
+
+step=$((step + 1))
+
+if [ "$step" -lt "$steps" ]; then
+    # Load the next kernel
+    ver=$abiname${localversion[$step]}
+    kexec -l /boot/vmlinuz-$ver --initrd /boot/initrd.img-$ver --reuse-cmdline
+    /tmp/autopkgtest-reboot step$step
+fi
+
+exit 0
diff --git a/debian/upstream/rt-signing-key.pgp b/debian/upstream/rt-signing-key.pgp
new file mode 100644
index 000000000000..a176d69c38b1
--- /dev/null
+++ b/debian/upstream/rt-signing-key.pgp
diff --git a/debian/upstream/signing-key.pgp b/debian/upstream/signing-key.pgp
new file mode 100644
index 000000000000..60a46ab9714c
--- /dev/null
+++ b/debian/upstream/signing-key.pgp
diff --git a/debian/usbip.install b/debian/usbip.install
new file mode 100644
index 000000000000..04a6ce5b56da
--- /dev/null
+++ b/debian/usbip.install
@@ -0,0 +1,2 @@
+usr/sbin/usbip
+usr/sbin/usbipd
diff --git a/debian/usbip.manpages b/debian/usbip.manpages
new file mode 100644
index 000000000000..ff94009a6dff
--- /dev/null
+++ b/debian/usbip.manpages
@@ -0,0 +1,2 @@
+tools/usb/usbip/doc/usbip.8
+tools/usb/usbip/doc/usbipd.8
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 000000000000..54040107b3dc
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,4 @@
+# Find first non-rc tarball linked from kernel.org.
+version=3
+opts="pgpmode=mangle, pgpsigurlmangle=s|\.xz$|.sign|, decompress" \
+https://www.kernel.org/ .*/linux-([0-9.]+).tar.xz debian uupdate