[PATCH 4.16 00/72] 4.16.9-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.16.9 release.
There are 72 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed May 16 06:47:58 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.16.9-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.16.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.16.9-rc1

Peter Zijlstra <peterz@infradead.org>
    perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map()

Peter Zijlstra <peterz@infradead.org>
    perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[]

Peter Zijlstra <peterz@infradead.org>
    perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver

Peter Zijlstra <peterz@infradead.org>
    perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr

Peter Zijlstra <peterz@infradead.org>
    perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_*

Masami Hiramatsu <mhiramat@kernel.org>
    tracing/uprobe_event: Fix strncpy corner case

Peter Zijlstra <peterz@infradead.org>
    sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]

Peter Zijlstra <peterz@infradead.org>
    sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]

Jean Delvare <jdelvare@suse.de>
    swiotlb: silent unwanted warning "buffer is full"

Steve French <smfrench@gmail.com>
    smb3: directory sync should not return an error

Charles Machalow <charles.machalow@intel.com>
    nvme: Fix sync controller reset return

Jens Axboe <axboe@kernel.dk>
    nvme: add quirk to force medium priority for SQ creation

Marek Szyprowski <m.szyprowski@samsung.com>
    thermal: exynos: Propagate error value from tmu_read()

Marek Szyprowski <m.szyprowski@samsung.com>
    thermal: exynos: Reading temperature makes sense only when TMU is turned on

Hans de Goede <hdegoede@redhat.com>
    Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome chipsets

Hans de Goede <hdegoede@redhat.com>
    Bluetooth: btusb: Add Dell XPS 13 9360 to btusb_needs_reset_resume_table

Hans de Goede <hdegoede@redhat.com>
    Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174"

Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    arm: dts: imx[35]*: declare flexcan devices to be compatible to imx25's flexcan

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    cpufreq: schedutil: Avoid using invalid next_freq

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    PCI / PM: Check device_may_wakeup() in pci_enable_wake()

Kai Heng Feng <kai.heng.feng@canonical.com>
    PCI / PM: Always check PME wakeup capability for runtime wakeup support

Gustavo A. R. Silva <gustavo@embeddedor.com>
    atm: zatm: Fix potential Spectre v1

Gustavo A. R. Silva <gustavo@embeddedor.com>
    net: atm: Fix potential Spectre v1

Ville Syrjälä <ville.syrjala@linux.intel.com>
    drm/atomic: Clean private obj old_state/new_state in drm_atomic_state_default_clear()

Ville Syrjälä <ville.syrjala@linux.intel.com>
    drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear()

Ben Skeggs <bskeggs@redhat.com>
    drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client

Lyude Paul <lyude@redhat.com>
    drm/nouveau: Fix deadlock in nv50_mstm_register_connector()

Rodrigo Vivi <rodrigo.vivi@intel.com>
    drm/i915: Adjust eDP's logical vco in a reliable place.

Florent Flament <contact@florentflament.com>
    drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log

Michel Dänzer <michel.daenzer@amd.com>
    drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages

Boris Brezillon <boris.brezillon@bootlin.com>
    drm/vc4: Fix scaling of uni-planar formats

Boris Brezillon <boris.brezillon@bootlin.com>
    mtd: rawnand: Make sure we wait tWB before polling the STATUS reg

Miquel Raynal <miquel.raynal@bootlin.com>
    mtd: rawnand: marvell: fix command xtype in BCH write hook

Chris Packham <chris.packham@alliedtelesis.co.nz>
    mtd: rawnand: marvell: pass ms delay to wait_op

Lukas Wunner <lukas@wunner.de>
    can: hi311x: Work around TX complete interrupt erratum

Lukas Wunner <lukas@wunner.de>
    can: hi311x: Acquire SPI lock on ->do_get_berr_counter

Jimmy Assarsson <extja@kvaser.com>
    can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg()

Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    can: flexcan: fix endianess detection

Ilya Dryomov <idryomov@gmail.com>
    ceph: fix rsize/wsize capping in ceph_direct_read_write()

David Rientjes <rientjes@google.com>
    mm, oom: fix concurrent munlock and oom reaper unmap, v3

Pavel Tatashin <pasha.tatashin@oracle.com>
    mm: sections are not offlined during memory hotremove

Vitaly Wool <vitalywool@gmail.com>
    z3fold: fix reclaim lock-ups

Steven Rostedt (VMware) <rostedt@goodmis.org>
    tracing: Fix regex_match_front() to not over compare the test string

Mikulas Patocka <mpatocka@redhat.com>
    dm integrity: use kvfree for kvmalloc'd memory

Hans de Goede <hdegoede@redhat.com>
    libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs

Johan Hovold <johan@kernel.org>
    rfkill: gpio: fix memory leak in probe error path

Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    gpio: fix error path in lineevent_create

Govert Overgaauw <govert.overgaauw@prodrive-technologies.com>
    gpio: fix aspeed_gpio unmask irq

Timur Tabi <timur@codeaurora.org>
    gpioib: do not free unrequested descriptors

Jann Horn <jannh@google.com>
    compat: fix 4-byte infoleak via uninitialized struct field

Jan Kara <jack@suse.cz>
    bdi: Fix oops in wb_workfn()

Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
    bdi: Fix use after free bug in debugfs_remove()

Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
    bdi: wake up concurrent wb_shutdown() callers.

Eric Dumazet <edumazet@google.com>
    tcp: fix TCP_REPAIR_QUEUE bound checking

Alexander Popov <alex.popov@linux.com>
    i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr()

Jiri Olsa <jolsa@kernel.org>
    perf: Remove superfluous allocation error check

Michal Hocko <mhocko@suse.com>
    memcg: fix per_node_info cleanup

Yonghong Song <yhs@fb.com>
    bpf/tracing: fix a deadlock in perf_event_detach_bpf_prog

Eric Dumazet <edumazet@google.com>
    inetpeer: fix uninit-value in inet_getpeer

Eric Dumazet <edumazet@google.com>
    soreuseport: initialise timewait reuseport field

Eric Dumazet <edumazet@google.com>
    ipv4: fix uninit-value in ip_route_output_key_hash_rcu()

Eric Dumazet <edumazet@google.com>
    dccp: initialize ireq->ir_mark

Eric Dumazet <edumazet@google.com>
    net: fix uninit-value in __hw_addr_add_ex()

Eric Dumazet <edumazet@google.com>
    net: initialize skb->peeked when cloning

Eric Dumazet <edumazet@google.com>
    net: fix rtnh_ok()

Eric Dumazet <edumazet@google.com>
    netlink: fix uninit-value in netlink_sendmsg

Eric Dumazet <edumazet@google.com>
    crypto: af_alg - fix possible uninit-value in alg_bind()

Sowmini Varadhan <sowmini.varadhan@oracle.com>
    rds: tcp: must use spin_lock_irq* and not spin_lock_bh with rds_tcp_conn_lock

Tom Herbert <tom@quantonium.net>
    kcm: Call strp_stop before strp_done in kcm_attach

Tero Kristo <t-kristo@ti.com>
    clk: ti: fix flag space conflict with clkctrl clocks

Florian Westphal <fw@strlen.de>
    netfilter: ebtables: don't attempt to allocate 0-sized compat array

Julian Anastasov <ja@ssi.bg>
    ipvs: fix rtnl_lock lockups caused by start_sync_thread


-------------

Diffstat:

 Makefile                                 |   4 +-
 arch/arm/boot/dts/imx35.dtsi             |   4 +-
 arch/arm/boot/dts/imx53.dtsi             |   4 +-
 arch/x86/events/core.c                   |   8 +-
 arch/x86/events/intel/cstate.c           |   2 +
 arch/x86/events/msr.c                    |   9 +-
 crypto/af_alg.c                          |   8 +-
 drivers/ata/libata-core.c                |   3 +
 drivers/atm/zatm.c                       |   3 +
 drivers/bluetooth/btusb.c                |  19 +++-
 drivers/clk/ti/clock.h                   |   9 +-
 drivers/gpio/gpio-aspeed.c               |   2 +-
 drivers/gpio/gpiolib.c                   |   7 +-
 drivers/gpu/drm/drm_atomic.c             |   8 ++
 drivers/gpu/drm/i915/intel_cdclk.c       |  41 +++++++-
 drivers/gpu/drm/i915/intel_dp.c          |  20 ----
 drivers/gpu/drm/i915/intel_lvds.c        |   3 +-
 drivers/gpu/drm/nouveau/nouveau_bo.c     |   1 -
 drivers/gpu/drm/nouveau/nouveau_bo.h     |   2 -
 drivers/gpu/drm/nouveau/nouveau_ttm.c    |   6 +-
 drivers/gpu/drm/nouveau/nv50_display.c   |   7 +-
 drivers/gpu/drm/ttm/ttm_page_alloc.c     |  11 ++-
 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c |   3 +-
 drivers/gpu/drm/vc4/vc4_plane.c          |   2 +-
 drivers/i2c/i2c-dev.c                    |   2 +-
 drivers/md/dm-integrity.c                |   2 +-
 drivers/mtd/nand/marvell_nand.c          |  12 ++-
 drivers/mtd/nand/nand_base.c             |   5 +
 drivers/net/can/flexcan.c                |  26 +++---
 drivers/net/can/spi/hi311x.c             |  11 ++-
 drivers/net/can/usb/kvaser_usb.c         |   2 +-
 drivers/nvme/host/core.c                 |   3 +-
 drivers/nvme/host/nvme.h                 |   5 +
 drivers/nvme/host/pci.c                  |  12 ++-
 drivers/pci/pci.c                        |  37 ++++++--
 drivers/thermal/samsung/exynos_tmu.c     |  14 ++-
 fs/ceph/file.c                           |  10 +-
 fs/cifs/cifsfs.c                         |  13 +++
 fs/fs-writeback.c                        |   2 +-
 include/linux/bpf.h                      |   4 +-
 include/linux/oom.h                      |   2 +
 include/linux/wait_bit.h                 |  17 ++++
 include/net/inet_timewait_sock.h         |   1 +
 include/net/nexthop.h                    |   2 +-
 kernel/bpf/core.c                        |  45 +++++----
 kernel/compat.c                          |   1 +
 kernel/events/callchain.c                |  10 +-
 kernel/events/ring_buffer.c              |   7 +-
 kernel/sched/autogroup.c                 |   7 +-
 kernel/sched/core.c                      |   7 +-
 kernel/sched/cpufreq_schedutil.c         |   3 +-
 kernel/trace/bpf_trace.c                 |  25 ++++-
 kernel/trace/trace_events_filter.c       |   3 +
 kernel/trace/trace_uprobe.c              |   2 +
 lib/swiotlb.c                            |   2 +-
 mm/backing-dev.c                         |   3 +-
 mm/memcontrol.c                          |   3 +
 mm/mmap.c                                |  44 +++++----
 mm/oom_kill.c                            |  81 ++++++++--------
 mm/sparse.c                              |   2 +-
 mm/z3fold.c                              |  42 ++++++---
 net/atm/lec.c                            |   9 +-
 net/bridge/netfilter/ebtables.c          |  11 ++-
 net/core/dev_addr_lists.c                |   4 +-
 net/core/skbuff.c                        |   1 +
 net/dccp/ipv4.c                          |   1 +
 net/dccp/ipv6.c                          |   1 +
 net/ipv4/inet_timewait_sock.c            |   1 +
 net/ipv4/inetpeer.c                      |   1 +
 net/ipv4/route.c                         |  11 ++-
 net/ipv4/tcp.c                           |   2 +-
 net/kcm/kcmsock.c                        |   1 +
 net/netfilter/ipvs/ip_vs_ctl.c           |   8 --
 net/netfilter/ipvs/ip_vs_sync.c          | 155 ++++++++++++++++---------------
 net/netlink/af_netlink.c                 |   2 +
 net/rds/tcp.c                            |  17 ++--
 net/rfkill/rfkill-gpio.c                 |   7 +-
 77 files changed, 563 insertions(+), 324 deletions(-)