This time with the patch applied

See: https://bugzilla.kernel.org/show_bug.cgi?id=213809

See: https://bugzilla.kernel.org/show_bug.cgi?id=213809

At least fix USB regression on APC

- Add soc sounds

This reverts commit 84c64d07.
Full LTO make kernel crash

dockerd requires Xtables and nft_compat to use iptable-nft.
This is not ideal but this commit restore xtables to support dockerd

kbuild read them from environment, so only put them as makefile var is not
sufficient

Early makefile patching achieve 2 goals.
Firstly, avoid adding variables to each make call.
Secondly, it is later used by tools (e.g dkms) to build out-of-tree modules.