seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}

igbvf: amend removal of MODULE_VERSION (Corinna Vinschen) [1969920 1955752]
bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971464 1971488] {CVE-2021-32399}
scsi: ibmvfc: Free channel_setup_buf during device tear down (Steve Best) [1964697 1938102]
i40e: Fix parameters in aq_get_phy_register() (Stefan Assmann) [1967099 1907852]

ixgbevf: Amend commit acf03026ec5a to include a version in module info. (Ken Cox) [1969911 1955764]
CI: Merge configuration (Veronika Kabatova)
igc: amend removal of MODULE_VERSION (Corinna Vinschen) [1969921 1955755]
igb: amend removal of MODULE_VERSION (Corinna Vinschen) [1969919 1955748]
locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Waiman Long) [1964419 1950110]
scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Nilesh Javali) [1974968 1899384]

iavf: amend removal of MODULE_VERSION (Stefan Assmann) [1969925 1955738]
ixgbe: Amend commit acf03026ec5a to include a version string in module info. (Ken Cox) [1969922 1955759]
i40e: amend removal of MODULE_VERSION (Stefan Assmann) [1969923 1955736]
redhat/configs: Add CONFIG_PINCTRL_EMMITSBURG (David Arcari) [1963984 1959506]
redhat/configs: Remove CONFIG_EMMITSBURG (David Arcari) [1963984 1959506]
netlink: add tracepoint at NL_SET_ERR_MSG (Marcelo Ricardo Leitner) [1972938 1956983]
Revert "[netdrv] net/intel: remove driver versions from Intel drivers" (Jonathan Toppins) [1969917 1955745]
Amends commit ea6244cc248b to include a version string in module info. (Ken Cox) [1969915 1955726]
Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1969914 1955721]
ena: revert removal of MODULE_VERSION from ena (Petr Oros) [1969913 1955712]
fm10k: amend removal of MODULE_VERSION (Vladis Dronov) [1969910 1955730]
net/sched: act_ct: Offload connections with commit action (Marcelo Ricardo Leitner) [1968679 1965817]
netfilter: flowtable: Remove redundant hw refresh bit (Marcelo Ricardo Leitner) [1968679 1965817]

net: zero-initialize tc skb extension on allocation (Ivan Vecera) [1965457 1946986]
net/sched: cls_flower: fix only mask bit check in the validate_ct_state (Ivan Vecera) [1965457 1946986]
net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb (Ivan Vecera) [1965457 1946986]
net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct (Ivan Vecera) [1965457 1946986]
net/sched: cls_flower: validate ct_state for invalid and reply flags (Ivan Vecera) [1965457 1946986]
flow_dissector: fix TTL and TOS dissection on IPv4 fragments (Paolo Abeni) [1963952 1950288]
Revert "sctp: Fix SHUTDOWN CTSN Ack in the peer restart case" (Xin Long) [1965632 1953839]
sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [1965632 1953839]
sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [1965632 1953839]
Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962544 1962546] {CVE-2021-33034}
x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (Lenny Szubowicz) [1964930 1934273]
x86/kvm: Disable all PV features on crash (Lenny Szubowicz) [1964930 1934273]
x86/kvm: Disable kvmclock on all CPUs on shutdown (Lenny Szubowicz) [1964930 1934273]
x86/kvm: Teardown PV features on boot CPU as well (Lenny Szubowicz) [1964930 1934273]
x86/kvm: Fix pr_info() for async PF setup/teardown (Lenny Szubowicz) [1964930 1934273]
net/sched: act_ct: Fix ct template allocation for zone 0 (Marcelo Ricardo Leitner) [1965150 1881824]

openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
net/sched: sch_frag: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti) [1963940 1924608]
net/sched: act_ct: fix wild memory access when clearing fragments (Davide Caratti) [1963940 1924608]
net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Ivan Vecera)
redhat/configs: Add CONFIG_SYSTEM_REVOCATION_KEYS and CONFIG_SYSTEM_REVOCATION_LIST (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
certs: add 'x509_revocation_list' to gitignore (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
integrity: Load mokx variables into the blacklist keyring (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
certs: Add ability to preload revocation certs (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
certs: Move load_system_certificate_list to a common function (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
certs: Add EFI_CERT_X509_GUID support for dbx entries (Vladis Dronov) [1965270 1893793] {CVE-2020-26541}
net/sched: cls_api: increase max_reclassify_loop (Davide Caratti) [1965148 1955136]
dm writecache: fix performance degradation in ssd mode (Mike Snitzer) [1962241 1961859]
scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Ewan D. Milne) [1961705 1949250]
scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Ewan D. Milne) [1961705 1949250]

gfs2: report "already frozen/thawed" errors (Bob Peterson) [1961849 1932236]
gfs2: move freeze glock outside the make_fs_rw and _ro functions (Bob Peterson) [1961849 1932236]
gfs2: Add common helper for holding and releasing the freeze glock (Bob Peterson) [1961849 1932236]
gfs2: in signal_our_withdraw wait for unfreeze of _this_ fs only (Bob Peterson) [1961849 1932236]
gfs2: Don't freeze the file system during unmount (Bob Peterson) [1961849 1932236]
gfs2: Fix regression in freeze_go_sync (Bob Peterson) [1961849 1932236]
gfs2: The freeze glock should never be frozen (Bob Peterson) [1961849 1932236]
gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE (Bob Peterson) [1961849 1932236]
gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson) [1961849 1932236]
gfs2: freeze should work on read-only mounts (Bob Peterson) [1961849 1932236]
gfs2: Abort gfs2_freeze if io error is seen (Bob Peterson) [1961849 1932236]
CI: Disable result checking for realtime check (Veronika Kabatova)
CI: Explicitly disable result checking for private CI (Veronika Kabatova)
CI: Rename variable (Veronika Kabatova)
CI: Update builder containers (Veronika Kabatova)

vmxnet3: Set the default of vxlan overlay offload to disabled (Cathy Avery) [1960702 1941714]

Revert "uio: use request_threaded_irq instead" (Vitaly Kuznetsov) [1952952 1946644]
drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]

net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (Jon Maloy) [1954221 1954219]
tools/power turbostat: Revert "[tools] tools/power turbostat: Enable accumulate RAPL display" (Prarit Bhargava) [1952987 1944699]

ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe (Jaroslav Kysela) [1954545 1870724]
ALSA: usb-audio: fix use after free in usb_audio_disconnect (Jaroslav Kysela) [1954545 1870724]
ALSA: usb-audio: Disable USB autosuspend properly in setup_disable_autosuspend() (Jaroslav Kysela) [1954545 1870724]
selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1945123 1924230]
geneve: do not modify the shared tunnel info when PMTU triggers an ICMP reply (Antoine Tenart) [1944667 1941753]
vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply (Antoine Tenart) [1944667 1941753]
redhat: switch to zstream (Jan Stancek)

perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Michael Petlan) [1950388]

mm: Revert "remove the account_page_dirtied export" (Waiman Long) [1941257]
Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1940842]

redhat: switch secureboot kernel image signing to release keys (Jan Stancek)
Revert "[md] md/raid5: add a new member of offset into r5dev" (Nigel Croxon) [1936903]
Revert "[md] md/raid5: make async_copy_data() to support different page offset" (Nigel Croxon) [1936903]
Revert "[crypto] md/raid5: add new xor function to support different page offset" (Nigel Croxon) [1936903]
Revert "[md] md/raid5: convert to new xor compution interface" (Nigel Croxon) [1936903]
Revert "[crypto] md/raid6: let syndrome computor support different page offset" (Nigel Croxon) [1936903]
Revert "[crypto] md/raid6: let async recovery function support different page offset" (Nigel Croxon) [1936903]
Revert "[md] md/raid5: let multiple devices of stripe_head share page" (Nigel Croxon) [1936903]
Revert "[md] md/raid5: resize stripe_head when reshape array" (Nigel Croxon) [1936903]
Revert "[md] md/raid5: reallocate page array after setting new stripe_size" (Nigel Croxon) [1936903]
ACPI: PNP: compare the string length in the matching_id() (Mark Langsdorf) [1933702]
ceph: add missing break when parsing "nowsync" mount option (Jeff Layton) [1932753]
get_maintainer.conf: Update with new location of RHMAINTAINERS (Prarit Bhargava)
redhat: make pathspec exclusion compatible with old git versions (Herton R. Krzesinski)
redhat/scripts: Update merge-subtrees.sh with new subtree location (Prarit Bhargava)
tree: Add RHMAINTAINERS soft link in 8.4 (Prarit Bhargava)
tree: remove existing redhat/rhdocs subtree in 8.4 (Prarit Bhargava)

PCI: rpadlpar: Fix potential drc_name corruption in store functions (Gustavo Luiz Duarte) [1938116]
selftests: kvm: Add basic Hyper-V clocksources tests (Vitaly Kuznetsov) [1931782]
KVM: x86: hyper-v: Don't touch TSC page values when guest opted for re-enlightenment (Vitaly Kuznetsov) [1931782]
KVM: x86: hyper-v: Track Hyper-V TSC page status (Vitaly Kuznetsov) [1931782]
KVM: x86: hyper-v: Prevent using not-yet-updated TSC page by secondary CPUs (Vitaly Kuznetsov) [1931782]
KVM: x86: hyper-v: Limit guest to writing zero to HV_X64_MSR_TSC_EMULATION_STATUS (Vitaly Kuznetsov) [1931782]
drm/i915/guc: Update to use firmware v49.0.1 (Dave Airlie) [1935281] {CVE-2020-12362}
time: Enable __kernel_timespec for 32-bit vdso build (Waiman Long) [1936282]
lib/idr.c: document calling context for IDA APIs mustn't use locks (Chris von Recklinghausen) [1917764]
ida: Free allocated bitmap in error path (Chris von Recklinghausen) [1917764]
radix tree test suite: Fix compilation (Chris von Recklinghausen) [1917764]
vmalloc: convert to XArray (Chris von Recklinghausen) [1917764]
mm: pass addr as unsigned long to vb_free (Chris von Recklinghausen) [1917764]
radix tree: Remove multiorder support (Chris von Recklinghausen) [1917764]
radix tree test: Convert multiorder tests to XArray (Chris von Recklinghausen) [1917764]
radix tree tests: Convert item_delete_rcu to XArray (Chris von Recklinghausen) [1917764]
radix tree tests: Convert item_kill_tree to XArray (Chris von Recklinghausen) [1917764]
radix tree tests: Move item_insert_order (Chris von Recklinghausen) [1917764]
radix tree test suite: Remove multiorder benchmarking (Chris von Recklinghausen) [1917764]
radix tree test suite: Remove __item_insert (Chris von Recklinghausen) [1917764]
radix tree: Remove radix_tree_clear_tags (Chris von Recklinghausen) [1917764]
radix tree: Remove split/join code (Chris von Recklinghausen) [1917764]
radix tree: Remove radix_tree_update_node_t (Chris von Recklinghausen) [1917764]
mm: Convert truncate to XArray (Chris von Recklinghausen) [1917764]
copy rh_kabi.h to tools/testing/radix-tree/linux (Chris von Recklinghausen) [1917764]

ibmvnic: fix a race between open and reset (Diego Domingos) [1940042]
ibmvnic: Set to CLOSED state even on error (Diego Domingos) [1940042]
ibmvnic: device remove has higher precedence over reset (Diego Domingos) [1940042]
ibmvnic: merge do_change_param_reset into do_reset (Diego Domingos) [1940042]
ibmvfc: disable MQ channelization by default (Gustavo Luiz Duarte) [1939359]
pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process() (Steve Dickson) [1926945]
scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930833] {CVE-2021-27365}
scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930856] {CVE-2021-27363}
scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930809] {CVE-2021-27364}
futex: Handle faults correctly for PI futexes (Waiman Long) [1924635]
futex: Simplify fixup_pi_state_owner() (Waiman Long) [1924635]
futex: Use pi_state_update_owner() in put_pi_state() (Waiman Long) [1924635]
rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Waiman Long) [1924635]
futex: Provide and use pi_state_update_owner() (Waiman Long) [1924635]
futex: Replace pointless printk in fixup_owner() (Waiman Long) [1924635]
futex: Ensure the correct return value from futex_lock_pi() (Waiman Long) [1924635]
futex: Don't enable IRQs unconditionally in put_pi_state() (Waiman Long) [1924635]
futex: Fix incorrect should_fail_futex() handling (Waiman Long) [1924635]
futex: Consistently use fshared as boolean (Waiman Long) [1924635]
futex: Remove needless goto's (Waiman Long) [1924635]
futex: Remove put_futex_key() (Waiman Long) [1924635]
NFS: Correct size calculation for create reply length (Benjamin Coddington) [1934903]
SUNRPC: Set memalloc_nofs_save() for sync tasks (Benjamin Coddington) [1934098]
net/mlx5: CT: Add support for matching on ct_state reply flag (Alaa Hleihel) [1919651]
net/mlx5e: CT: manage the lifetime of the ct entry object (Alaa Hleihel) [1919651]
net/mlx5e: CT: Use per flow counter when CT flow accounting is enabled (Alaa Hleihel) [1919651]
net/mlx5e: Fix a use after free on error in mlx5_tc_ct_shared_counter_get() (Alaa Hleihel) [1919651]
net/mlx5e: CT: Use the same counter for both directions (Alaa Hleihel) [1919651]
ethtool: fix the check logic of at least one channel for RX/TX (Ivan Vecera) [1907406]