This is the start of the stable review cycle for the 4.16.9 release. There are 72 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed May 16 06:47:58 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.16.9-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.16.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.16.9-rc1 Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map() Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_* Masami Hiramatsu <mhiramat@xxxxxxxxxx> tracing/uprobe_event: Fix strncpy corner case Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] Jean Delvare <jdelvare@xxxxxxx> swiotlb: silent unwanted warning "buffer is full" Steve French <smfrench@xxxxxxxxx> smb3: directory sync should not return an error Charles Machalow <charles.machalow@xxxxxxxxx> nvme: Fix sync controller reset return Jens Axboe <axboe@xxxxxxxxx> nvme: add quirk to force medium priority for SQ creation Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> thermal: exynos: Propagate error value from tmu_read() Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> thermal: exynos: Reading temperature makes sense only when TMU is turned on Hans de Goede <hdegoede@xxxxxxxxxx> Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome chipsets Hans de Goede <hdegoede@xxxxxxxxxx> Bluetooth: btusb: Add Dell XPS 13 9360 to btusb_needs_reset_resume_table Hans de Goede <hdegoede@xxxxxxxxxx> Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174" Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> arm: dts: imx[35]*: declare flexcan devices to be compatible to imx25's flexcan Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> cpufreq: schedutil: Avoid using invalid next_freq Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> PCI / PM: Check device_may_wakeup() in pci_enable_wake() Kai Heng Feng <kai.heng.feng@xxxxxxxxxxxxx> PCI / PM: Always check PME wakeup capability for runtime wakeup support Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> atm: zatm: Fix potential Spectre v1 Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> net: atm: Fix potential Spectre v1 Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/atomic: Clean private obj old_state/new_state in drm_atomic_state_default_clear() Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear() Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau: Fix deadlock in nv50_mstm_register_connector() Rodrigo Vivi <rodrigo.vivi@xxxxxxxxx> drm/i915: Adjust eDP's logical vco in a reliable place. Florent Flament <contact@xxxxxxxxxxxxxxxxxx> drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log Michel Dänzer <michel.daenzer@xxxxxxx> drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages Boris Brezillon <boris.brezillon@xxxxxxxxxxx> drm/vc4: Fix scaling of uni-planar formats Boris Brezillon <boris.brezillon@xxxxxxxxxxx> mtd: rawnand: Make sure we wait tWB before polling the STATUS reg Miquel Raynal <miquel.raynal@xxxxxxxxxxx> mtd: rawnand: marvell: fix command xtype in BCH write hook Chris Packham <chris.packham@xxxxxxxxxxxxxxxxxxx> mtd: rawnand: marvell: pass ms delay to wait_op Lukas Wunner <lukas@xxxxxxxxx> can: hi311x: Work around TX complete interrupt erratum Lukas Wunner <lukas@xxxxxxxxx> can: hi311x: Acquire SPI lock on ->do_get_berr_counter Jimmy Assarsson <extja@xxxxxxxxxx> can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg() Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> can: flexcan: fix endianess detection Ilya Dryomov <idryomov@xxxxxxxxx> ceph: fix rsize/wsize capping in ceph_direct_read_write() David Rientjes <rientjes@xxxxxxxxxx> mm, oom: fix concurrent munlock and oom reaper unmap, v3 Pavel Tatashin <pasha.tatashin@xxxxxxxxxx> mm: sections are not offlined during memory hotremove Vitaly Wool <vitalywool@xxxxxxxxx> z3fold: fix reclaim lock-ups Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracing: Fix regex_match_front() to not over compare the test string Mikulas Patocka <mpatocka@xxxxxxxxxx> dm integrity: use kvfree for kvmalloc'd memory Hans de Goede <hdegoede@xxxxxxxxxx> libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs Johan Hovold <johan@xxxxxxxxxx> rfkill: gpio: fix memory leak in probe error path Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> gpio: fix error path in lineevent_create Govert Overgaauw <govert.overgaauw@xxxxxxxxxxxxxxxxxxxxxxxxx> gpio: fix aspeed_gpio unmask irq Timur Tabi <timur@xxxxxxxxxxxxxx> gpioib: do not free unrequested descriptors Jann Horn <jannh@xxxxxxxxxx> compat: fix 4-byte infoleak via uninitialized struct field Jan Kara <jack@xxxxxxx> bdi: Fix oops in wb_workfn() Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> bdi: Fix use after free bug in debugfs_remove() Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> bdi: wake up concurrent wb_shutdown() callers. Eric Dumazet <edumazet@xxxxxxxxxx> tcp: fix TCP_REPAIR_QUEUE bound checking Alexander Popov <alex.popov@xxxxxxxxx> i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr() Jiri Olsa <jolsa@xxxxxxxxxx> perf: Remove superfluous allocation error check Michal Hocko <mhocko@xxxxxxxx> memcg: fix per_node_info cleanup Yonghong Song <yhs@xxxxxx> bpf/tracing: fix a deadlock in perf_event_detach_bpf_prog Eric Dumazet <edumazet@xxxxxxxxxx> inetpeer: fix uninit-value in inet_getpeer Eric Dumazet <edumazet@xxxxxxxxxx> soreuseport: initialise timewait reuseport field Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: fix uninit-value in ip_route_output_key_hash_rcu() Eric Dumazet <edumazet@xxxxxxxxxx> dccp: initialize ireq->ir_mark Eric Dumazet <edumazet@xxxxxxxxxx> net: fix uninit-value in __hw_addr_add_ex() Eric Dumazet <edumazet@xxxxxxxxxx> net: initialize skb->peeked when cloning Eric Dumazet <edumazet@xxxxxxxxxx> net: fix rtnh_ok() Eric Dumazet <edumazet@xxxxxxxxxx> netlink: fix uninit-value in netlink_sendmsg Eric Dumazet <edumazet@xxxxxxxxxx> crypto: af_alg - fix possible uninit-value in alg_bind() Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx> rds: tcp: must use spin_lock_irq* and not spin_lock_bh with rds_tcp_conn_lock Tom Herbert <tom@xxxxxxxxxxxxxx> kcm: Call strp_stop before strp_done in kcm_attach Tero Kristo <t-kristo@xxxxxx> clk: ti: fix flag space conflict with clkctrl clocks Florian Westphal <fw@xxxxxxxxx> netfilter: ebtables: don't attempt to allocate 0-sized compat array Julian Anastasov <ja@xxxxxx> ipvs: fix rtnl_lock lockups caused by start_sync_thread ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/imx35.dtsi | 4 +- arch/arm/boot/dts/imx53.dtsi | 4 +- arch/x86/events/core.c | 8 +- arch/x86/events/intel/cstate.c | 2 + arch/x86/events/msr.c | 9 +- crypto/af_alg.c | 8 +- drivers/ata/libata-core.c | 3 + drivers/atm/zatm.c | 3 + drivers/bluetooth/btusb.c | 19 +++- drivers/clk/ti/clock.h | 9 +- drivers/gpio/gpio-aspeed.c | 2 +- drivers/gpio/gpiolib.c | 7 +- drivers/gpu/drm/drm_atomic.c | 8 ++ drivers/gpu/drm/i915/intel_cdclk.c | 41 +++++++- drivers/gpu/drm/i915/intel_dp.c | 20 ---- drivers/gpu/drm/i915/intel_lvds.c | 3 +- drivers/gpu/drm/nouveau/nouveau_bo.c | 1 - drivers/gpu/drm/nouveau/nouveau_bo.h | 2 - drivers/gpu/drm/nouveau/nouveau_ttm.c | 6 +- drivers/gpu/drm/nouveau/nv50_display.c | 7 +- drivers/gpu/drm/ttm/ttm_page_alloc.c | 11 ++- drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 3 +- drivers/gpu/drm/vc4/vc4_plane.c | 2 +- drivers/i2c/i2c-dev.c | 2 +- drivers/md/dm-integrity.c | 2 +- drivers/mtd/nand/marvell_nand.c | 12 ++- drivers/mtd/nand/nand_base.c | 5 + drivers/net/can/flexcan.c | 26 +++--- drivers/net/can/spi/hi311x.c | 11 ++- drivers/net/can/usb/kvaser_usb.c | 2 +- drivers/nvme/host/core.c | 3 +- drivers/nvme/host/nvme.h | 5 + drivers/nvme/host/pci.c | 12 ++- drivers/pci/pci.c | 37 ++++++-- drivers/thermal/samsung/exynos_tmu.c | 14 ++- fs/ceph/file.c | 10 +- fs/cifs/cifsfs.c | 13 +++ fs/fs-writeback.c | 2 +- include/linux/bpf.h | 4 +- include/linux/oom.h | 2 + include/linux/wait_bit.h | 17 ++++ include/net/inet_timewait_sock.h | 1 + include/net/nexthop.h | 2 +- kernel/bpf/core.c | 45 +++++---- kernel/compat.c | 1 + kernel/events/callchain.c | 10 +- kernel/events/ring_buffer.c | 7 +- kernel/sched/autogroup.c | 7 +- kernel/sched/core.c | 7 +- kernel/sched/cpufreq_schedutil.c | 3 +- kernel/trace/bpf_trace.c | 25 ++++- kernel/trace/trace_events_filter.c | 3 + kernel/trace/trace_uprobe.c | 2 + lib/swiotlb.c | 2 +- mm/backing-dev.c | 3 +- mm/memcontrol.c | 3 + mm/mmap.c | 44 +++++---- mm/oom_kill.c | 81 ++++++++-------- mm/sparse.c | 2 +- mm/z3fold.c | 42 ++++++--- net/atm/lec.c | 9 +- net/bridge/netfilter/ebtables.c | 11 ++- net/core/dev_addr_lists.c | 4 +- net/core/skbuff.c | 1 + net/dccp/ipv4.c | 1 + net/dccp/ipv6.c | 1 + net/ipv4/inet_timewait_sock.c | 1 + net/ipv4/inetpeer.c | 1 + net/ipv4/route.c | 11 ++- net/ipv4/tcp.c | 2 +- net/kcm/kcmsock.c | 1 + net/netfilter/ipvs/ip_vs_ctl.c | 8 -- net/netfilter/ipvs/ip_vs_sync.c | 155 ++++++++++++++++--------------- net/netlink/af_netlink.c | 2 + net/rds/tcp.c | 17 ++-- net/rfkill/rfkill-gpio.c | 7 +- 77 files changed, 563 insertions(+), 324 deletions(-)