This is the start of the stable review cycle for the 4.16.9 release. There are 72 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed May 16 06:47:58 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.16.9-rc1.... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.16.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 4.16.9-rc1

Peter Zijlstra peterz@infradead.org perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map()

Peter Zijlstra peterz@infradead.org perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[]

Peter Zijlstra peterz@infradead.org perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver

Peter Zijlstra peterz@infradead.org perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr

Peter Zijlstra peterz@infradead.org perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_*

Masami Hiramatsu mhiramat@kernel.org tracing/uprobe_event: Fix strncpy corner case

Peter Zijlstra peterz@infradead.org sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]

Peter Zijlstra peterz@infradead.org sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]

Jean Delvare jdelvare@suse.de swiotlb: silent unwanted warning "buffer is full"

Steve French smfrench@gmail.com smb3: directory sync should not return an error

Charles Machalow charles.machalow@intel.com nvme: Fix sync controller reset return

Jens Axboe axboe@kernel.dk nvme: add quirk to force medium priority for SQ creation

Marek Szyprowski m.szyprowski@samsung.com thermal: exynos: Propagate error value from tmu_read()

Marek Szyprowski m.szyprowski@samsung.com thermal: exynos: Reading temperature makes sense only when TMU is turned on

Hans de Goede hdegoede@redhat.com Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome chipsets

Hans de Goede hdegoede@redhat.com Bluetooth: btusb: Add Dell XPS 13 9360 to btusb_needs_reset_resume_table

Hans de Goede hdegoede@redhat.com Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174"

Uwe Kleine-König u.kleine-koenig@pengutronix.de arm: dts: imx[35]*: declare flexcan devices to be compatible to imx25's flexcan

Rafael J. Wysocki rafael.j.wysocki@intel.com cpufreq: schedutil: Avoid using invalid next_freq

Rafael J. Wysocki rafael.j.wysocki@intel.com PCI / PM: Check device_may_wakeup() in pci_enable_wake()

Kai Heng Feng kai.heng.feng@canonical.com PCI / PM: Always check PME wakeup capability for runtime wakeup support

Gustavo A. R. Silva gustavo@embeddedor.com atm: zatm: Fix potential Spectre v1

Gustavo A. R. Silva gustavo@embeddedor.com net: atm: Fix potential Spectre v1

Ville Syrjälä ville.syrjala@linux.intel.com drm/atomic: Clean private obj old_state/new_state in drm_atomic_state_default_clear()

Ville Syrjälä ville.syrjala@linux.intel.com drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear()

Ben Skeggs bskeggs@redhat.com drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client

Lyude Paul lyude@redhat.com drm/nouveau: Fix deadlock in nv50_mstm_register_connector()

Rodrigo Vivi rodrigo.vivi@intel.com drm/i915: Adjust eDP's logical vco in a reliable place.

Florent Flament contact@florentflament.com drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log

Michel Dänzer michel.daenzer@amd.com drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages

Boris Brezillon boris.brezillon@bootlin.com drm/vc4: Fix scaling of uni-planar formats

Boris Brezillon boris.brezillon@bootlin.com mtd: rawnand: Make sure we wait tWB before polling the STATUS reg

Miquel Raynal miquel.raynal@bootlin.com mtd: rawnand: marvell: fix command xtype in BCH write hook

Chris Packham chris.packham@alliedtelesis.co.nz mtd: rawnand: marvell: pass ms delay to wait_op

Lukas Wunner lukas@wunner.de can: hi311x: Work around TX complete interrupt erratum

Lukas Wunner lukas@wunner.de can: hi311x: Acquire SPI lock on ->do_get_berr_counter

Jimmy Assarsson extja@kvaser.com can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg()

Uwe Kleine-König u.kleine-koenig@pengutronix.de can: flexcan: fix endianess detection

Ilya Dryomov idryomov@gmail.com ceph: fix rsize/wsize capping in ceph_direct_read_write()

David Rientjes rientjes@google.com mm, oom: fix concurrent munlock and oom reaper unmap, v3

Pavel Tatashin pasha.tatashin@oracle.com mm: sections are not offlined during memory hotremove

Vitaly Wool vitalywool@gmail.com z3fold: fix reclaim lock-ups

Steven Rostedt (VMware) rostedt@goodmis.org tracing: Fix regex_match_front() to not over compare the test string

Mikulas Patocka mpatocka@redhat.com dm integrity: use kvfree for kvmalloc'd memory

Hans de Goede hdegoede@redhat.com libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs

Johan Hovold johan@kernel.org rfkill: gpio: fix memory leak in probe error path

Uwe Kleine-König u.kleine-koenig@pengutronix.de gpio: fix error path in lineevent_create

Govert Overgaauw govert.overgaauw@prodrive-technologies.com gpio: fix aspeed_gpio unmask irq

Timur Tabi timur@codeaurora.org gpioib: do not free unrequested descriptors

Jann Horn jannh@google.com compat: fix 4-byte infoleak via uninitialized struct field

Jan Kara jack@suse.cz bdi: Fix oops in wb_workfn()

Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp bdi: Fix use after free bug in debugfs_remove()

Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp bdi: wake up concurrent wb_shutdown() callers.

Eric Dumazet edumazet@google.com tcp: fix TCP_REPAIR_QUEUE bound checking

Alexander Popov alex.popov@linux.com i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr()

Jiri Olsa jolsa@kernel.org perf: Remove superfluous allocation error check

Michal Hocko mhocko@suse.com memcg: fix per_node_info cleanup

Yonghong Song yhs@fb.com bpf/tracing: fix a deadlock in perf_event_detach_bpf_prog

Eric Dumazet edumazet@google.com inetpeer: fix uninit-value in inet_getpeer

Eric Dumazet edumazet@google.com soreuseport: initialise timewait reuseport field

Eric Dumazet edumazet@google.com ipv4: fix uninit-value in ip_route_output_key_hash_rcu()

Eric Dumazet edumazet@google.com dccp: initialize ireq->ir_mark

Eric Dumazet edumazet@google.com net: fix uninit-value in __hw_addr_add_ex()

Eric Dumazet edumazet@google.com net: initialize skb->peeked when cloning

Eric Dumazet edumazet@google.com net: fix rtnh_ok()

Eric Dumazet edumazet@google.com netlink: fix uninit-value in netlink_sendmsg

Eric Dumazet edumazet@google.com crypto: af_alg - fix possible uninit-value in alg_bind()

Sowmini Varadhan sowmini.varadhan@oracle.com rds: tcp: must use spin_lock_irq* and not spin_lock_bh with rds_tcp_conn_lock

Tom Herbert tom@quantonium.net kcm: Call strp_stop before strp_done in kcm_attach

Tero Kristo t-kristo@ti.com clk: ti: fix flag space conflict with clkctrl clocks

Florian Westphal fw@strlen.de netfilter: ebtables: don't attempt to allocate 0-sized compat array

Julian Anastasov ja@ssi.bg ipvs: fix rtnl_lock lockups caused by start_sync_thread

-------------

Diffstat:

Makefile | 4 +- arch/arm/boot/dts/imx35.dtsi | 4 +- arch/arm/boot/dts/imx53.dtsi | 4 +- arch/x86/events/core.c | 8 +- arch/x86/events/intel/cstate.c | 2 + arch/x86/events/msr.c | 9 +- crypto/af_alg.c | 8 +- drivers/ata/libata-core.c | 3 + drivers/atm/zatm.c | 3 + drivers/bluetooth/btusb.c | 19 +++- drivers/clk/ti/clock.h | 9 +- drivers/gpio/gpio-aspeed.c | 2 +- drivers/gpio/gpiolib.c | 7 +- drivers/gpu/drm/drm_atomic.c | 8 ++ drivers/gpu/drm/i915/intel_cdclk.c | 41 +++++++- drivers/gpu/drm/i915/intel_dp.c | 20 ---- drivers/gpu/drm/i915/intel_lvds.c | 3 +- drivers/gpu/drm/nouveau/nouveau_bo.c | 1 - drivers/gpu/drm/nouveau/nouveau_bo.h | 2 - drivers/gpu/drm/nouveau/nouveau_ttm.c | 6 +- drivers/gpu/drm/nouveau/nv50_display.c | 7 +- drivers/gpu/drm/ttm/ttm_page_alloc.c | 11 ++- drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 3 +- drivers/gpu/drm/vc4/vc4_plane.c | 2 +- drivers/i2c/i2c-dev.c | 2 +- drivers/md/dm-integrity.c | 2 +- drivers/mtd/nand/marvell_nand.c | 12 ++- drivers/mtd/nand/nand_base.c | 5 + drivers/net/can/flexcan.c | 26 +++--- drivers/net/can/spi/hi311x.c | 11 ++- drivers/net/can/usb/kvaser_usb.c | 2 +- drivers/nvme/host/core.c | 3 +- drivers/nvme/host/nvme.h | 5 + drivers/nvme/host/pci.c | 12 ++- drivers/pci/pci.c | 37 ++++++-- drivers/thermal/samsung/exynos_tmu.c | 14 ++- fs/ceph/file.c | 10 +- fs/cifs/cifsfs.c | 13 +++ fs/fs-writeback.c | 2 +- include/linux/bpf.h | 4 +- include/linux/oom.h | 2 + include/linux/wait_bit.h | 17 ++++ include/net/inet_timewait_sock.h | 1 + include/net/nexthop.h | 2 +- kernel/bpf/core.c | 45 +++++---- kernel/compat.c | 1 + kernel/events/callchain.c | 10 +- kernel/events/ring_buffer.c | 7 +- kernel/sched/autogroup.c | 7 +- kernel/sched/core.c | 7 +- kernel/sched/cpufreq_schedutil.c | 3 +- kernel/trace/bpf_trace.c | 25 ++++- kernel/trace/trace_events_filter.c | 3 + kernel/trace/trace_uprobe.c | 2 + lib/swiotlb.c | 2 +- mm/backing-dev.c | 3 +- mm/memcontrol.c | 3 + mm/mmap.c | 44 +++++---- mm/oom_kill.c | 81 ++++++++-------- mm/sparse.c | 2 +- mm/z3fold.c | 42 ++++++--- net/atm/lec.c | 9 +- net/bridge/netfilter/ebtables.c | 11 ++- net/core/dev_addr_lists.c | 4 +- net/core/skbuff.c | 1 + net/dccp/ipv4.c | 1 + net/dccp/ipv6.c | 1 + net/ipv4/inet_timewait_sock.c | 1 + net/ipv4/inetpeer.c | 1 + net/ipv4/route.c | 11 ++- net/ipv4/tcp.c | 2 +- net/kcm/kcmsock.c | 1 + net/netfilter/ipvs/ip_vs_ctl.c | 8 -- net/netfilter/ipvs/ip_vs_sync.c | 155 ++++++++++++++++--------------- net/netlink/af_netlink.c | 2 + net/rds/tcp.c | 17 ++-- net/rfkill/rfkill-gpio.c | 7 +- 77 files changed, 563 insertions(+), 324 deletions(-)