diff --git a/debian.oem/changelog b/debian.oem/changelog
index aa45ff56e29e7..a43ba1ac4ee55 100644
--- a/debian.oem/changelog
+++ b/debian.oem/changelog
@@ -1,10 +1,699 @@
-linux-oem-5.13 (5.13.0-1023.28) UNRELEASED; urgency=medium
+linux-oem-5.13 (5.13.0-1023.28) focal; urgency=medium
 
-  CHANGELOG: Do not edit directly. Autogenerated at release.
-  CHANGELOG: Use the printchanges target to see the curent changes.
-  CHANGELOG: Use the insertchanges target to create the final log.
+  * focal/linux-oem-5.13: 5.13.0-1023.28 -proposed tracker (LP: #1952262)
 
- -- Timo Aaltonen <timo.aaltonen@canonical.com>  Tue, 14 Dec 2021 14:28:48 +0200
+  * Impish update: upstream stable patchset 2021-11-09 (LP: #1950388)
+    - [Config] updateconfigs for ks8851 modules
+
+  * [SRU][I/J/OEM-5.13/OEM-5.14] Fix pci port lost when hotplug dock
+    (LP: #1954646)
+    - PCI: Re-enable Downstream Port LTR after reset or hotplug
+
+  * Faulty Elantech Trackpoint firmware unusable as it causes sudden cursor jump
+    to an edge/corner on Lenovo Thinkpad X13, T14s, A475 --> Apply kernel patch
+    to mitigate the FW bug  (LP: #1936295)
+    - Input: elantench - fix misreporting trackpoint coordinates
+
+  * shiftfs module is not built because CONFIG_SHIFT_FS is not set
+    (LP: #1938104)
+    - [Config] Set CONFIG_SHIFT_FS=m
+
+  [ Ubuntu: 5.13.0-23.23 ]
+
+  * impish/linux: 5.13.0-23.23 -proposed tracker (LP: #1952263)
+  * Packaging resync (LP: #1786013)
+    - [Packaging] resync update-dkms-versions helper
+    - debian/dkms-versions -- update from kernel-versions (main/2021.11.29)
+  * CVE-2021-4002
+    - hugetlbfs: flush TLBs correctly after huge_pmd_unshare
+  * [SRU][I/OEM-5.13/OEM-5.14] Add MAC passthrough support for more Lenovo docks
+    (LP: #1951767)
+    - net: usb: r8152: Add MAC passthrough support for more Lenovo Docks
+  * Fix non-working e1000e device after resume (LP: #1951861)
+    - SAUCE: Revert "e1000e: Additional PHY power saving in S0ix"
+    - SAUCE: Revert "e1000e: Add polling mechanism to indicate CSME DPG exit"
+    - SAUCE: Revert "e1000e: Add handshake with the CSME to support S0ix"
+  * CVE-2021-43267
+    - tipc: fix size validations for the MSG_CRYPTO type
+  * Impish update: upstream stable patchset 2021-11-22 (LP: #1951880)
+    - ext4: check and update i_disksize properly
+    - ext4: correct the error path of ext4_write_inline_data_end()
+    - ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
+    - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
+    - netfilter: ip6_tables: zero-initialize fragment offset
+    - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
+    - ASoC: SOF: loader: release_firmware() on load failure to avoid batching
+    - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
+    - netfilter: nf_nat_masquerade: defer conntrack walk to work queue
+    - mac80211: Drop frames from invalid MAC address in ad-hoc mode
+    - m68k: Handle arrivals of multiple signals correctly
+    - hwmon: (ltc2947) Properly handle errors when looking for the external clock
+    - net: prevent user from passing illegal stab size
+    - mac80211: check return value of rhashtable_init
+    - vboxfs: fix broken legacy mount signature checking
+    - net: sun: SUNVNET_COMMON should depend on INET
+    - drm/amdgpu: fix gart.bo pin_count leak
+    - scsi: ses: Fix unsigned comparison with less than zero
+    - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
+    - perf/core: fix userpage->time_enabled of inactive events
+    - sched: Always inline is_percpu_thread()
+    - hwmon: (pmbus/ibm-cffps) max_power_out swap changes
+    - ALSA: usb-audio: Unify mixer resume and reset_resume procedure
+    - KVM: arm64: nvhe: Fix missing FORCE for hyp-reloc.S build rule
+    - pinctrl: qcom: sc7280: Add PM suspend callbacks
+    - net: bgmac-platform: handle mac-address deferral
+    - scsi: qla2xxx: Fix excessive messages during device logout
+    - io_uring: kill fasync
+    - upstream stable to v5.10.74, v5.14.13
+    - ALSA: usb-audio: Add quirk for VF0770
+    - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
+    - ALSA: seq: Fix a potential UAF by wrong private_free call order
+    - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
+    - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
+    - ALSA: hda/realtek: Complete partial device name to avoid ambiguity
+    - ALSA: hda/realtek: Add quirk for Clevo X170KM-G
+    - ALSA: hda/realtek - ALC236 headset MIC recording issue
+    - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
+    - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
+    - nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^'
+    - s390: fix strrchr() implementation
+    - clk: socfpga: agilex: fix duplicate s2f_user0_clk
+    - csky: don't let sigreturn play with priveleged bits of status register
+    - csky: Fixup regs.sr broken in ptrace
+    - arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
+    - drm/msm: Avoid potential overflow in timeout_to_jiffies()
+    - btrfs: unlock newly allocated extent buffer after error
+    - btrfs: deal with errors when replaying dir entry during log replay
+    - btrfs: deal with errors when adding inode reference during log replay
+    - btrfs: check for error when looking up inode during dir entry replay
+    - btrfs: update refs for any root except tree log roots
+    - btrfs: fix abort logic in btrfs_replace_file_extents
+    - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
+    - mei: me: add Ice Lake-N device id.
+    - USB: xhci: dbc: fix tty registration race
+    - xhci: guard accesses to ep_state in xhci_endpoint_reset()
+    - xhci: Fix command ring pointer corruption while aborting a command
+    - xhci: Enable trust tx length quirk for Fresco FL11 USB controller
+    - cb710: avoid NULL pointer subtraction
+    - efi/cper: use stack buffer for error record decoding
+    - efi: Change down_interruptible() in virt_efi_reset_system() to
+      down_trylock()
+    - usb: musb: dsps: Fix the probe error path
+    - Input: xpad - add support for another USB ID of Nacon GC-100
+    - USB: serial: qcserial: add EM9191 QDL support
+    - USB: serial: option: add Quectel EC200S-CN module support
+    - USB: serial: option: add Telit LE910Cx composition 0x1204
+    - USB: serial: option: add prod. id for Quectel EG91
+    - misc: fastrpc: Add missing lock before accessing find_vma()
+    - EDAC/armada-xp: Fix output of uncorrectable error counter
+    - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
+    - x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically
+    - powerpc/xive: Discard disabled interrupts in get_irqchip_state()
+    - iio: adc: aspeed: set driver data when adc probe.
+    - drivers: bus: simple-pm-bus: Add support for probing simple bus only devices
+    - driver core: Reject pointless SYNC_STATE_ONLY device links
+    - iio: adc: ad7192: Add IRQ flag
+    - iio: adc: ad7780: Fix IRQ flag
+    - iio: adc: ad7793: Fix IRQ flag
+    - iio: adc128s052: Fix the error handling path of 'adc128_probe()'
+    - iio: adc: max1027: Fix wrong shift with 12-bit devices
+    - iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED
+    - iio: light: opt3001: Fixed timeout error when 0 lux
+    - iio: adc: max1027: Fix the number of max1X31 channels
+    - iio: ssp_sensors: add more range checking in ssp_parse_dataframe()
+    - iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
+    - iio: dac: ti-dac5571: fix an error code in probe()
+    - tee: optee: Fix missing devices unregister during optee_remove
+    - ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address
+    - ARM: dts: bcm2711: fix MDIO #address- and #size-cells
+    - ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
+    - ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
+    - nvme-pci: Fix abort command id
+    - sctp: account stream padding length for reconf chunk
+    - gpio: pca953x: Improve bias setting
+    - net: arc: select CRC32
+    - net: korina: select CRC32
+    - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
+    - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
+    - net: stmmac: fix get_hw_feature() on old hardware
+    - net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work
+    - net: encx24j600: check error in devm_regmap_init_encx24j600
+    - ethernet: s2io: fix setting mac address during resume
+    - vhost-vdpa: Fix the wrong input in config_cb
+    - nfc: fix error handling of nfc_proto_register()
+    - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
+    - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
+    - pata_legacy: fix a couple uninitialized variable bugs
+    - ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators()
+    - mlxsw: thermal: Fix out-of-bounds memory accesses
+    - platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call
+    - platform/mellanox: mlxreg-io: Fix read access of n-bytes size attributes
+    - spi: bcm-qspi: clear MSPI spifie interrupt during probe
+    - drm/panel: olimex-lcd-olinuxino: select CRC32
+    - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
+    - drm/msm: Fix null pointer dereference on pointer edp
+    - drm/msm/mdp5: fix cursor-related warnings
+    - drm/msm/a6xx: Track current ctx by seqno
+    - drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
+    - drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
+    - acpi/arm64: fix next_platform_timer() section mismatch error
+    - platform/x86: intel_scu_ipc: Fix busy loop expiry time
+    - mqprio: Correct stats in mqprio_dump_class_stats().
+    - qed: Fix missing error code in qed_slowpath_start()
+    - r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
+    - nfp: flow_offload: move flow_indr_dev_register from app init to app start
+    - net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb
+    - ionic: don't remove netdev->dev_addr when syncing uc list
+    - net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
+    - platform/x86: gigabyte-wmi: add support for B550 AORUS ELITE AX V2
+    - platform/x86: amd-pmc: Add alternative acpi id for PMC controller
+    - mtd: rawnand: qcom: Update code word value for raw read
+    - dm: fix mempool NULL pointer race when completing IO
+    - drm/nouveau/fifo: Reinstate the correct engine bit programming
+    - module: fix clang CFI with MODULE_UNLOAD=n
+    - mei: hbm: drop hbm responses on early shutdown
+    - xhci: add quirk for host controllers that don't update endpoint DCS
+    - virtio-blk: remove unneeded "likely" statements
+    - iio: adis16480: fix devices that do not support sleep mode
+    - iio: adis16475: fix deadlock on frequency set
+    - net/smc: improved fix wait on already cleared link
+    - net/mlx5e: Switchdev representors are not vlan challenged
+    - net: phy: Do not shutdown PHYs in READY state
+    - net: dsa: fix spurious error message when unoffloaded port leaves bridge
+    - drm/msm/submit: fix overflow check on 64-bit architectures
+    - drm/msm/a4xx: fix error handling in a4xx_gpu_init()
+    - drm/msm/a3xx: fix error handling in a3xx_gpu_init()
+    - drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in poll_for_ready
+    - block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs
+    - net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
+    - net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
+    - net: mscc: ocelot: deny TX timestamping of non-PTP packets
+    - net: mscc: ocelot: cross-check the sequence id from the timestamp FIFO with
+      the skb PTP header
+    - net: dsa: felix: break at first CPU port during init and teardown
+    - parisc: math-emu: Fix fall-through warnings
+    - arm: dts: vexpress-v2p-ca9: Fix the SMB unit-address
+    - ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default
+    - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
+    - xen/x86: prevent PVH type from getting clobbered
+    - drm/amdgpu/display: fix dependencies for DRM_AMD_DC_SI
+    - xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF
+    - xtensa: xtfpga: Try software restart before simulating CPU reset
+    - NFSD: Keep existing listeners on portlist error
+    - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
+      value
+    - dma-debug: fix sg checks in debug_dma_map_sg()
+    - ASoC: wm8960: Fix clock configuration on slave mode
+    - ice: fix getting UDP tunnel entry
+    - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
+    - netfilter: ipvs: make global sysctl readonly in non-init netns
+    - lan78xx: select CRC32
+    - tcp: md5: Fix overlap between vrf and non-vrf keys
+    - ipv6: When forwarding count rx stats on the orig netdev
+    - net: dsa: lantiq_gswip: fix register definition
+    - NIOS2: irqflags: rename a redefined register name
+    - powerpc/smp: do not decrement idle task preempt count in CPU offline
+    - net: hns3: reset DWRR of unused tc to zero
+    - net: hns3: add limit ets dwrr bandwidth cannot be 0
+    - net: hns3: schedule the polling again when allocation fails
+    - net: hns3: fix vf reset workqueue cannot exit
+    - net: hns3: disable sriov before unload hclge layer
+    - net: stmmac: Fix E2E delay mechanism
+    - e1000e: Fix packet loss on Tiger Lake and later
+    - ice: Add missing E810 device ids
+    - drm/panel: ilitek-ili9881c: Fix sync for Feixin K101-IM2BYL02 panel
+    - net: enetc: fix ethtool counter name for PM0_TERR
+    - can: rcar_can: fix suspend/resume
+    - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
+      notification
+    - can: peak_pci: peak_pci_remove(): fix UAF
+    - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
+    - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
+    - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
+    - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
+    - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
+      error length
+    - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
+    - ceph: skip existing superblocks that are blocklisted or shut down when
+      mounting
+    - ceph: fix handling of "meta" errors
+    - ocfs2: fix data corruption after conversion from inline format
+    - ocfs2: mount fails with buffer overflow in strlen
+    - userfaultfd: fix a race between writeprotect and exit_mmap()
+    - elfcore: correct reference to CONFIG_UML
+    - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
+    - ALSA: hda/realtek: Add quirk for Clevo PC50HS
+    - ASoC: DAPM: Fix missing kctl change notifications
+    - audit: fix possible null-pointer dereference in audit_filter_rules
+    - net: dsa: mt7530: correct ds->num_ports
+    - KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()
+    - KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to
+      guest
+    - powerpc/idle: Don't corrupt back chain when going idle
+    - mm, slub: fix mismatch between reconstructed freelist depth and cnt
+    - mm, slub: fix potential memoryleak in kmem_cache_open()
+    - mm, slub: fix incorrect memcg slab count for bulk free
+    - KVM: nVMX: promptly process interrupts delivered while in guest mode
+    - nfc: nci: fix the UAF of rf_conn_info object
+    - isdn: cpai: check ctr->cnr to avoid array index out of bound
+    - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
+    - selftests: netfilter: remove stray bash debug line
+    - net: bridge: mcast: use multicast_membership_interval for IGMPv3
+    - drm: mxsfb: Fix NULL pointer dereference crash on unload
+    - net: hns3: fix the max tx size according to user manual
+    - gcc-plugins/structleak: add makefile var for disabling structleak
+    - btrfs: deal with errors when checking if a dir entry exists during log
+      replay
+    - net: stmmac: add support for dwmac 3.40a
+    - ARM: dts: spear3xx: Fix gmac node
+    - isdn: mISDN: Fix sleeping function called from invalid context
+    - platform/x86: intel_scu_ipc: Update timeout value in comment
+    - ALSA: hda: avoid write to STATESTS if controller is in reset
+    - libperf tests: Fix test_stat_cpu
+    - perf/x86/msr: Add Sapphire Rapids CPU support
+    - Input: snvs_pwrkey - add clk handling
+    - scsi: iscsi: Fix set_param() handling
+    - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
+    - sched/scs: Reset the shadow stack when idle_task_exit
+    - net: hns3: fix for miscalculation of rx unused desc
+    - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
+    - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
+      isotp_sendmsg()
+    - s390/pci: fix zpci_zdev_put() on reserve
+    - bpf, test, cgroup: Use sk_{alloc,free} for test cases
+    - tracing: Have all levels of checks prevent recursion
+    - e1000e: Separate TGP board type from SPT
+    - selftests: bpf: fix backported ASSERT_FALSE
+    - ARM: 9122/1: select HAVE_FUTEX_CMPXCHG
+    - pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
+    - r8152: avoid to resubmit rx immediately
+    - drm/amdgpu: init iommu after amdkfd device init
+    - powerpc/lib: Add helper to check if offset is within conditional branch
+      range
+    - powerpc/bpf: Validate branch ranges
+    - powerpc/security: Add a helper to query stf_barrier type
+    - ASoC: pcm512x: Mend accesses to the I2S_1 and I2S_2 registers
+    - ASoC: fsl_xcvr: Fix channel swap issue with ARC
+    - netfilter: nf_tables: skip netdev events generated on netns removal
+    - ice: Print the api_patch as part of the fw.mgmt.api
+    - sctp: fix transport encap_port update in sctp_vtag_verify
+    - net/sched: act_ct: Fix byte count on fragmented packets
+    - net: dsa: Fix an error handling path in 'dsa_switch_parse_ports_of()'
+    - net: hns3: Add configuration of TM QCN error event
+    - igc: Update I226_K device ID
+    - drm/kmb: Work around for higher system clock
+    - drm/kmb: Remove clearing DPHY regs
+    - drm/kmb: Disable change of plane parameters
+    - drm/kmb: Corrected typo in handle_lcd_irq
+    - drm/kmb: Enable ADV bridge after modeset
+    - net: enetc: make sure all traffic classes can send large frames
+    - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on
+      blkg->iostat_cpu
+    - ucounts: Move get_ucounts from cred_alloc_blank to
+      key_change_session_keyring
+    - ucounts: Proper error handling in set_cred_ucounts
+    - KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA
+    - KVM: SEV-ES: rename guest_ins_data to sev_pio_data
+    - KVM: SEV-ES: clean up kvm_sev_es_ins/outs
+    - KVM: SEV-ES: keep INS functions together
+    - KVM: SEV-ES: fix length of string I/O
+    - KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed
+    - KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
+    - KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
+    - KVM: x86: check for interrupts before deciding whether to exit the fast path
+    - KVM: x86: split the two parts of emulator_pio_in
+    - KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
+    - KVM: SEV-ES: Set guest_state_protected after VMSA update
+    - drm/msm/a6xx: Serialize GMU communication
+    - iio/test-format: build kunit tests without structleak plugin
+    - device property: build kunit tests without structleak plugin
+    - thunderbolt: build kunit tests without structleak plugin
+    - bitfield: build kunit tests without structleak plugin
+    - objtool: Check for gelf_update_rel[a] failures
+    - objtool: Update section header before relocations
+    - platform/x86: intel_scu_ipc: Increase virtual timeout to 10s
+    - spi: Fix deadlock when adding SPI controllers on SPI buses
+    - spi-mux: Fix false-positive lockdep splats
+    - libperf test evsel: Fix build error on !x86 architectures
+    - mm/thp: decrease nr_thps in file's mapping on THP split
+    - drm/kmb: Enable alpha blended second plane
+    - drm/kmb: Limit supported mode to 1080p
+    - autofs: fix wait name hash calculation in autofs_wait()
+    - s390/pci: cleanup resources only if necessary
+  * Updates to ib_peer_memory requested by Nvidia (LP: #1947206)
+    - SAUCE: RDMA/core: Updated ib_peer_memory
+  * cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
+    (LP: #1950584)
+    - cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline
+  * keyboard not working on Medion notebook s17 series (LP: #1950536)
+    - ACPI: resources: Add one more Medion model in IRQ override quirk
+  * [UBUNTU 20.04] kernel:  unable to read partitions on virtio-block dasd (kvm)
+    (LP: #1950144)
+    - virtio: write back F_VERSION_1 before validate
+  * Let NVMe with HMB use native power control again (LP: #1950042)
+    - nvme-pci: use attribute group for cmb sysfs
+    - nvme-pci: cmb sysfs: one file, one value
+    - nvme-pci: disable hmb on idle suspend
+    - nvme: allow user toggling hmb usage
+  * ubuntu_ltp / finit_module02 fails on v4.15 and other kernels (LP: #1950644)
+    - vfs: check fd has read access in kernel_read_file_from_fd()
+  * reuseport_bpf_numa in net from ubuntu_kernel_selftests fails on ppc64le
+    (LP: #1867570)
+    - selftests/net: Fix reuseport_bpf_numa by skipping unavailable nodes
+  * Impish update: upstream stable patchset 2021-11-18 (LP: #1951460)
+    - Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
+    - usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
+    - USB: cdc-acm: fix racy tty buffer accesses
+    - USB: cdc-acm: fix break reporting
+    - usb: typec: tcpm: handle SRC_STARTUP state if cc changes
+    - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
+    - xen/privcmd: fix error handling in mmap-resource processing
+    - mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
+    - mmc: sdhci-of-at91: wait for calibration done before proceed
+    - mmc: sdhci-of-at91: replace while loop with read_poll_timeout
+    - ovl: fix missing negative dentry check in ovl_rename()
+    - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
+    - nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
+    - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
+    - SUNRPC: fix sign error causing rpcsec_gss drops
+    - xen/balloon: fix cancelled balloon action
+    - ARM: dts: omap3430-sdp: Fix NAND device node
+    - ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
+    - ARM: dts: qcom: apq8064: use compatible which contains chipid
+    - riscv: Flush current cpu icache before other cpus
+    - bus: ti-sysc: Add break in switch statement in sysc_init_soc()
+    - soc: qcom: socinfo: Fixed argument passed to platform_set_data()
+    - ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference
+    - ARM: at91: pm: do not panic if ram controllers are not enabled
+    - soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
+    - ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
+    - ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
+    - ARM: dts: imx6qdl-pico: Fix Ethernet support
+    - PCI: hv: Fix sleep while in non-sleep context when removing child devices
+      from the bus
+    - ath5k: fix building with LEDS=m
+    - arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
+    - xtensa: use CONFIG_USE_OF instead of CONFIG_OF
+    - xtensa: call irqchip_init only when CONFIG_USE_OF is selected
+    - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
+    - bpf, arm: Fix register clobbering in div/mod implementation
+    - soc: ti: omap-prm: Fix external abort for am335x pruss
+    - bpf: Fix integer overflow in prealloc_elems_and_freelist()
+    - net/mlx5e: IPSEC RX, enable checksum complete
+    - net/mlx5: E-Switch, Fix double allocation of acl flow counter
+    - phy: mdio: fix memory leak
+    - net_sched: fix NULL deref in fifo_set_limit()
+    - powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
+    - ptp_pch: Load module automatically if ID matches
+    - dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
+    - ARM: imx6: disable the GIC CPU interface before calling stby-poweroff
+      sequence
+    - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
+    - net: bridge: fix under estimation in br_get_linkxstats_size()
+    - net/sched: sch_taprio: properly cancel timer from taprio_destroy()
+    - net: sfp: Fix typo in state machine debug string
+    - netlink: annotate data races around nlk->bound
+    - bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
+    - drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
+    - video: fbdev: gbefb: Only instantiate device when built for IP32
+    - drm/nouveau: avoid a use-after-free when BO init fails
+    - drm/nouveau/kms/nv50-: fix file release memory leak
+    - drm/nouveau/debugfs: fix file release memory leak
+    - gve: Correct available tx qpl check
+    - gve: Avoid freeing NULL pointer
+    - rtnetlink: fix if_nlmsg_stats_size() under estimation
+    - gve: fix gve_get_stats()
+    - gve: report 64bit tx_bytes counter from gve_handle_report_stats()
+    - i40e: fix endless loop under rtnl
+    - i40e: Fix freeing of uninitialized misc IRQ vector
+    - net: prefer socket bound to interface when not in VRF
+    - powerpc/iommu: Report the correct most efficient DMA mask for PCI devices
+    - i2c: acpi: fix resource leak in reconfiguration device addition
+    - i2c: mediatek: Add OFFSET_EXT_CONF setting back
+    - riscv/vdso: make arch_setup_additional_pages wait for mmap_sem for write
+      killable
+    - bpf, s390: Fix potential memory leak about jit_data
+    - RISC-V: Include clone3() on rv32
+    - powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
+    - powerpc/64s: fix program check interrupt emergency stack path
+    - pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
+    - x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI
+    - x86/Kconfig: Correct reference to MWINCHIP3D
+    - x86/sev: Return an error on a returned non-zero SW_EXITINFO1[31:0]
+    - x86/entry: Correct reference to intended CONFIG_64_BIT
+    - x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
+    - x86/hpet: Use another crystalball to evaluate HPET usability
+    - usb: typec: tcpci: don't handle vSafe0V event if it's not enabled
+    - usb: typec: tipd: Remove dependency on "connector" child fwnode
+    - drm/amdgpu: During s0ix don't wait to signal GFXOFF
+    - drm/nouveau/ga102-: support ttm buffer moves via copy engine
+    - drm/i915: Fix runtime pm handling in i915_gem_shrink
+    - drm/i915: Extend the async flip VT-d w/a to skl/bxt
+    - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
+    - netfilter: nf_tables: add position handle in event notification
+    - netfilter: nf_tables: reverse order in rule replacement expansion
+    - net/mlx5e: Keep the value for maximum number of channels in-sync
+    - net/mlx5: Force round second at 1PPS out start time
+    - net/mlx5: Avoid generating event after PPS out in Real time mode
+    - net/mlx5e: Fix the presented RQ index in PTP stats
+    - libbpf: Fix memory leak in strset
+    - net: mscc: ocelot: fix VCAP filters remaining active after being deleted
+    - MIPS: Revert "add support for buggy MT7621S core detection"
+    - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event
+      notification
+    - ARM: dts: imx: change the spi-nor tx
+    - arm64: dts: imx8mm-kontron-n801x-som: do not allow to switch off buck2
+    - arm64: dts: ls1028a: fix eSDHC2 node
+    - drm/i915/jsl: Add W/A 1409054076 for JSL
+    - drm/i915/tc: Fix TypeC port init/resume time sanitization
+    - drm/i915/bdb: Fix version check
+    - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
+    - afs: Fix afs_launder_page() to set correct start file position
+    - drm/amdgpu: handle the case of pci_channel_io_frozen only in
+      amdgpu_pci_resume
+    - perf jevents: Free the sys_event_tables list after processing entries
+    - drm/panel: abt-y030xx067a: yellow tint fix
+    - gve: Properly handle errors in gve_assign_qpl
+    - iavf: fix double unlock of crit_lock
+    - riscv: explicitly use symbol offsets for VDSO
+    - RISC-V: Fix VDSO build for !MMU
+    - riscv/vdso: Refactor asm/vdso.h
+    - riscv/vdso: Move vdso data page up front
+    - i2c: mlxcpld: Fix criteria for frequency setting
+    - i2c: mlxcpld: Modify register setting for 400KHz frequency
+    - objtool: Remove reloc symbol type checks in get_alt_entry()
+    - objtool: Make .altinstructions section entry size consistent
+    - powerpc/bpf ppc32: Fix ALU32 BPF_ARSH operation
+    - powerpc/bpf ppc32: Fix JMP32_JSET_K
+    - powerpc/bpf ppc32: Do not emit zero extend instruction for 64-bit BPF_END
+    - powerpc/bpf ppc32: Fix BPF_SUB when imm == 0x80000000
+    - powerpc/traps: do not enable irqs in _exception
+    - dsa: tag_dsa: Fix mask for trunked packets
+  * Impish update: upstream stable patchset 2021-11-16 (LP: #1951157)
+    - spi: rockchip: handle zero length transfers without timing out
+    - platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook (CWI514) tablet
+    - platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10 Plus (CWI527)
+      tablet
+    - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
+    - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
+    - btrfs: fix mount failure due to past and transient device flush error
+    - net: mdio: introduce a shutdown method to mdio device drivers
+    - xen-netback: correct success/error reporting for the SKB-with-fraglist case
+    - sparc64: fix pci_iounmap() when CONFIG_PCI is not set
+    - ext2: fix sleeping in atomic bugs on error
+    - scsi: sd: Free scsi_disk device via put_device()
+    - usb: testusb: Fix for showing the connection speed
+    - usb: dwc2: check return value after calling platform_get_resource()
+    - habanalabs/gaudi: fix LBW RR configuration
+    - selftests: be sure to make khdr before other targets
+    - selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn
+    - nvme-fc: update hardware queues before using them
+    - nvme-fc: avoid race between time out and tear down
+    - thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
+    - scsi: ses: Retry failed Send/Receive Diagnostic commands
+    - irqchip/gic: Work around broken Renesas integration
+    - smb3: correct smb3 ACL security descriptor
+    - tools/vm/page-types: remove dependency on opt_file for idle page tracking
+    - selftests: KVM: Align SMCCC call with the spec in steal_time
+    - KVM: do not shrink halt_poll_ns below grow_start
+    - kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
+    - KVM: x86: nSVM: restore int_vector in svm_clear_vintr
+    - perf/x86: Reset destroy callback on event init failure
+    - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
+    - afs: Add missing vnode validation checks
+    - platform/x86: gigabyte-wmi: add support for B550I Aorus Pro AX
+    - habanalabs/gaudi: use direct MSI in single mode
+    - habanalabs: fail collective wait when not supported
+    - selftests:kvm: fix get_trans_hugepagesz() ignoring fscanf() return warn
+    - selftests: kvm: move get_run_delay() into lib/test_util
+    - selftests: kvm: fix get_run_delay() ignoring fscanf() return warn
+    - Xen/gntdev: don't ignore kernel unmapping error
+    - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests
+    - x86/insn, tools/x86: Fix undefined behavior due to potential unaligned
+      accesses
+    - io_uring: allow conditional reschedule for intensive iterators
+    - block: don't call rq_qos_ops->done_bio if the bio isn't tracked
+    - kasan: always respect CONFIG_KASAN_STACK
+  * Impish update: upstream stable patchset 2021-11-09 (LP: #1950388)
+    - tty: Fix out-of-bound vmalloc access in imageblit
+    - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
+    - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
+    - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
+    - ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect
+    - fs-verity: fix signed integer overflow with i_size near S64_MAX
+    - hwmon: (tmp421) handle I2C errors
+    - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
+      structure field
+    - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
+      structure field
+    - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
+      structure field
+    - gpio: pca953x: do not ignore i2c errors
+    - scsi: ufs: Fix illegal offset in UPIU event trace
+    - mac80211: fix use-after-free in CCMP/GCMP RX
+    - x86/kvmclock: Move this_cpu_pvti into kvmclock.h
+    - KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()
+    - KVM: x86: nSVM: don't copy virt_ext from vmcb12
+    - KVM: nVMX: Filter out all unsupported controls when eVMCS was activated
+    - media: ir_toy: prevent device from hanging during transmit
+    - RDMA/cma: Do not change route.addr.src_addr.ss_family
+    - drm/amd/display: Pass PCI deviceid into DC
+    - drm/amdgpu: correct initial cp_hqd_quantum for gfx9
+    - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
+    - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
+    - IB/cma: Do not send IGMP leaves for sendonly Multicast groups
+    - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
+    - bpf, mips: Validate conditional branch offsets
+    - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced
+      from sysfs
+    - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
+    - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
+    - mac80211: mesh: fix potentially unaligned access
+    - mac80211-hwsim: fix late beacon hrtimer handling
+    - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
+    - mptcp: don't return sockets in foreign netns
+    - hwmon: (tmp421) report /PVLD condition as fault
+    - hwmon: (tmp421) fix rounding for negative values
+    - net: enetc: fix the incorrect clearing of IF_MODE bits
+    - net: ipv4: Fix rtnexthop len when RTA_FLOW is present
+    - smsc95xx: fix stalled rx after link change
+    - drm/i915/request: fix early tracepoints
+    - dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
+    - dsa: mv88e6xxx: Fix MTU definition
+    - dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU
+      ports
+    - e100: fix length calculation in e100_get_regs_len
+    - e100: fix buffer overrun in e100_get_regs
+    - bpf: Exempt CAP_BPF from checks against bpf_jit_limit
+    - selftests, bpf: Fix makefile dependencies on libbpf
+    - selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
+    - [Config] updateconfigs for ks8851 modules
+    - net: ks8851: fix link error
+    - scsi: csiostor: Add module softdep on cxgb4
+    - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
+    - net: hns3: do not allow call hns3_nic_net_open repeatedly
+    - net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE
+    - net: hns3: fix show wrong state when add existing uc mac address
+    - net: hns3: reconstruct function hns3_self_test
+    - net: hns3: fix always enable rx vlan filter problem after selftest
+    - net: phy: bcm7xxx: Fixed indirect MMD operations
+    - net: sched: flower: protect fl_walk() with rcu
+    - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
+    - perf/x86/intel: Update event constraints for ICX
+    - hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller
+    - nvme: add command id quirk for apple controllers
+    - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
+    - debugfs: debugfs_create_file_size(): use IS_ERR to check for error
+    - ipack: ipoctal: fix stack information leak
+    - ipack: ipoctal: fix tty registration race
+    - ipack: ipoctal: fix tty-registration error handling
+    - ipack: ipoctal: fix missing allocation-failure check
+    - ipack: ipoctal: fix module reference leak
+    - ext4: fix loff_t overflow in ext4_max_bitmap_size()
+    - ext4: limit the number of blocks in one ADD_RANGE TLV
+    - ext4: fix reserved space counter leakage
+    - ext4: add error checking to ext4_ext_replay_set_iblocks()
+    - ext4: fix potential infinite loop in ext4_dx_readdir()
+    - HID: u2fzero: ignore incomplete packets without data
+    - net: udp: annotate data race around udp_sk(sk)->corkflag
+    - usb: hso: remove the bailout parameter
+    - HID: betop: fix slab-out-of-bounds Write in betop_probe
+    - netfilter: ipset: Fix oversized kvmalloc() calls
+    - mm: don't allow oversized kvmalloc() calls
+    - HID: usbhid: free raw_report buffers in usbhid_stop
+    - KVM: x86: Handle SRCU initialization failure during page track init
+    - netfilter: conntrack: serialize hash resizes and cleanups
+    - netfilter: nf_tables: Fix oversized kvmalloc() calls
+    - media: cedrus: Fix SUNXI tile size calculation
+    - media: s5p-jpeg: rename JPEG marker constants to prevent build warnings
+    - ASoC: fsl_sai: register platform component before registering cpu dai
+    - ASoC: fsl_esai: register platform component before registering cpu dai
+    - ASoC: fsl_micfil: register platform component before registering cpu dai
+    - ASoC: fsl_spdif: register platform component before registering cpu dai
+    - ASoC: fsl_xcvr: register platform component before registering cpu dai
+    - ASoC: mediatek: common: handle NULL case in suspend/resume function
+    - ASoC: SOF: Fix DSP oops stack dump output contents
+    - ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types
+    - ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types
+    - pinctrl: qcom: spmi-gpio: correct parent irqspec translation
+    - s390/qeth: Fix deadlock in remove_discipline
+    - s390/qeth: fix deadlock during failing recovery
+    - m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal
+    - NIOS2: fix kconfig unmet dependency warning for SERIAL_CORE_CONSOLE
+    - kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
+    - HID: amd_sfh: Fix potential NULL pointer dereference
+    - perf test: Fix DWARF unwind for optimized builds.
+    - perf iostat: Use system-wide mode if the target cpu_list is unspecified
+    - perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
+    - watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST
+    - scsi: ufs: ufs-pci: Fix Intel LKF link stability
+    - ALSA: firewire-motu: fix truncated bytes in message tracepoints
+    - platform/x86/intel: hid: Add DMI switches allow list
+    - ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
+    - KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
+    - KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES
+    - KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
+    - KVM: SEV: Acquire vcpu mutex when updating VMSA
+    - KVM: SEV: Allow some commands for mirror VM
+    - KVM: SVM: fix missing sev_decommission in sev_receive_start
+    - KVM: nVMX: Fix nested bus lock VM exit
+    - KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
+    - mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
+    - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
+    - nbd: use shifts rather than multiplies
+    - drm/amd/display: initialize backlight_ramping_override to false
+    - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
+    - drm/amdgpu: check tiling flags when creating FB on GFX8-
+    - interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
+    - interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift and mask
+    - drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
+    - netfilter: nf_tables: unlink table before deleting it
+    - netfilter: log: work around missing softdep backend module
+    - driver core: fw_devlink: Add support for
+      FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD
+    - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents
+    - mptcp: allow changing the 'backup' bit when no sockets are open
+    - drm/i915: Remove warning from the rps worker
+    - RDMA/hfi1: Fix kernel pointer leak
+    - RDMA/hns: Fix the size setting error when copying CQE in clean_cq()
+    - RDMA/hns: Add the check of the CQE size of the user space
+    - libbpf: Fix segfault in static linker for objects without BTF
+    - bpf, x86: Fix bpf mapping of atomic fetch implementation
+    - ionic: fix gathering of debug stats
+    - net: hns3: remove tc enable checking
+    - net: hns3: don't rollback when destroy mqprio fail
+    - net: hns3: disable firmware compatible features when uninstall PF
+    - objtool: Teach get_alt_entry() about more relocation types
+    - sched/fair: Add ancestors of unthrottled undecayed cfs_rq
+    - sched/fair: Null terminate buffer when updating tunable_scaling
+    - hwmon: (occ) Fix P10 VRM temp sensors
+    - driver core: fw_devlink: Improve handling of cyclic dependencies
+    - ext4: flush s_error_work before journal destroy in ext4_fill_super
+    - NIOS2: setup.c: drop unused variable 'dram_start'
+    - crypto: aesni - xts_crypt() return if walk.nbytes is 0
+    - drivers: net: mhi: fix error path in mhi_net_newlink
+
+ -- Timo Aaltonen <timo.aaltonen@canonical.com>  Fri, 17 Dec 2021 14:05:22 +0200
 
 linux-oem-5.13 (5.13.0-1022.26) focal; urgency=medium
 
diff --git a/debian.oem/reconstruct b/debian.oem/reconstruct
index 42ebf2a1bf4a8..4ce8e868328fc 100644
--- a/debian.oem/reconstruct
+++ b/debian.oem/reconstruct
@@ -1,7 +1,10 @@
 # Recreate any symlinks created since the orig.
 # Remove any files deleted from the orig.
 rm -f 'arch/parisc/lib/string.S'
+rm -f 'arch/riscv/kernel/vdso/so2s.sh'
 rm -f 'drivers/platform/x86/dell/dell-wmi.c'
+chmod +x 'arch/riscv/kernel/vdso/gen_vdso_offsets.sh'
+chmod +x 'arch/riscv/kernel/vdso/so2s.sh'
 chmod +x 'debian/cloud-tools/hv_get_dhcp_info'
 chmod +x 'debian/cloud-tools/hv_get_dns_info'
 chmod +x 'debian/cloud-tools/hv_set_ifconfig'
@@ -49,6 +52,7 @@ chmod +x 'debian/templates/image.prerm.in'
 chmod +x 'debian/tests-build/check-aliases'
 chmod +x 'debian/tests/rebuild'
 chmod +x 'debian/tests/ubuntu-regression-suite'
+chmod +x 'tools/testing/selftests/net/forwarding/ip6_forward_instats_vrf.sh'
 chmod +x 'update-dkms-versions'
 chmod +x 'update-version-dkms'
 exit 0