[PATCH 4.16 00/72] 4.16.9-stable review

From: Greg Kroah-Hartman
Date: Mon May 14 2018 - 03:06:36 EST


This is the start of the stable review cycle for the 4.16.9 release.
There are 72 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed May 16 06:47:58 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.16.9-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.16.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.16.9-rc1

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map()

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[]

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_*

Masami Hiramatsu <mhiramat@xxxxxxxxxx>
tracing/uprobe_event: Fix strncpy corner case

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]

Jean Delvare <jdelvare@xxxxxxx>
swiotlb: silent unwanted warning "buffer is full"

Steve French <smfrench@xxxxxxxxx>
smb3: directory sync should not return an error

Charles Machalow <charles.machalow@xxxxxxxxx>
nvme: Fix sync controller reset return

Jens Axboe <axboe@xxxxxxxxx>
nvme: add quirk to force medium priority for SQ creation

Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
thermal: exynos: Propagate error value from tmu_read()

Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
thermal: exynos: Reading temperature makes sense only when TMU is turned on

Hans de Goede <hdegoede@xxxxxxxxxx>
Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome chipsets

Hans de Goede <hdegoede@xxxxxxxxxx>
Bluetooth: btusb: Add Dell XPS 13 9360 to btusb_needs_reset_resume_table

Hans de Goede <hdegoede@xxxxxxxxxx>
Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174"

Uwe Kleine-KÃnig <u.kleine-koenig@xxxxxxxxxxxxxx>
arm: dts: imx[35]*: declare flexcan devices to be compatible to imx25's flexcan

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
cpufreq: schedutil: Avoid using invalid next_freq

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
PCI / PM: Check device_may_wakeup() in pci_enable_wake()

Kai Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
PCI / PM: Always check PME wakeup capability for runtime wakeup support

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
atm: zatm: Fix potential Spectre v1

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
net: atm: Fix potential Spectre v1

Ville SyrjÃlà <ville.syrjala@xxxxxxxxxxxxxxx>
drm/atomic: Clean private obj old_state/new_state in drm_atomic_state_default_clear()

Ville SyrjÃlà <ville.syrjala@xxxxxxxxxxxxxxx>
drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear()

Ben Skeggs <bskeggs@xxxxxxxxxx>
drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client

Lyude Paul <lyude@xxxxxxxxxx>
drm/nouveau: Fix deadlock in nv50_mstm_register_connector()

Rodrigo Vivi <rodrigo.vivi@xxxxxxxxx>
drm/i915: Adjust eDP's logical vco in a reliable place.

Florent Flament <contact@xxxxxxxxxxxxxxxxxx>
drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log

Michel DÃnzer <michel.daenzer@xxxxxxx>
drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages

Boris Brezillon <boris.brezillon@xxxxxxxxxxx>
drm/vc4: Fix scaling of uni-planar formats

Boris Brezillon <boris.brezillon@xxxxxxxxxxx>
mtd: rawnand: Make sure we wait tWB before polling the STATUS reg

Miquel Raynal <miquel.raynal@xxxxxxxxxxx>
mtd: rawnand: marvell: fix command xtype in BCH write hook

Chris Packham <chris.packham@xxxxxxxxxxxxxxxxxxx>
mtd: rawnand: marvell: pass ms delay to wait_op

Lukas Wunner <lukas@xxxxxxxxx>
can: hi311x: Work around TX complete interrupt erratum

Lukas Wunner <lukas@xxxxxxxxx>
can: hi311x: Acquire SPI lock on ->do_get_berr_counter

Jimmy Assarsson <extja@xxxxxxxxxx>
can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg()

Uwe Kleine-KÃnig <u.kleine-koenig@xxxxxxxxxxxxxx>
can: flexcan: fix endianess detection

Ilya Dryomov <idryomov@xxxxxxxxx>
ceph: fix rsize/wsize capping in ceph_direct_read_write()

David Rientjes <rientjes@xxxxxxxxxx>
mm, oom: fix concurrent munlock and oom reaper unmap, v3

Pavel Tatashin <pasha.tatashin@xxxxxxxxxx>
mm: sections are not offlined during memory hotremove

Vitaly Wool <vitalywool@xxxxxxxxx>
z3fold: fix reclaim lock-ups

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
tracing: Fix regex_match_front() to not over compare the test string

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm integrity: use kvfree for kvmalloc'd memory

Hans de Goede <hdegoede@xxxxxxxxxx>
libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs

Johan Hovold <johan@xxxxxxxxxx>
rfkill: gpio: fix memory leak in probe error path

Uwe Kleine-KÃnig <u.kleine-koenig@xxxxxxxxxxxxxx>
gpio: fix error path in lineevent_create

Govert Overgaauw <govert.overgaauw@xxxxxxxxxxxxxxxxxxxxxxxxx>
gpio: fix aspeed_gpio unmask irq

Timur Tabi <timur@xxxxxxxxxxxxxx>
gpioib: do not free unrequested descriptors

Jann Horn <jannh@xxxxxxxxxx>
compat: fix 4-byte infoleak via uninitialized struct field

Jan Kara <jack@xxxxxxx>
bdi: Fix oops in wb_workfn()

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
bdi: Fix use after free bug in debugfs_remove()

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
bdi: wake up concurrent wb_shutdown() callers.

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: fix TCP_REPAIR_QUEUE bound checking

Alexander Popov <alex.popov@xxxxxxxxx>
i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr()

Jiri Olsa <jolsa@xxxxxxxxxx>
perf: Remove superfluous allocation error check

Michal Hocko <mhocko@xxxxxxxx>
memcg: fix per_node_info cleanup

Yonghong Song <yhs@xxxxxx>
bpf/tracing: fix a deadlock in perf_event_detach_bpf_prog

Eric Dumazet <edumazet@xxxxxxxxxx>
inetpeer: fix uninit-value in inet_getpeer

Eric Dumazet <edumazet@xxxxxxxxxx>
soreuseport: initialise timewait reuseport field

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: fix uninit-value in ip_route_output_key_hash_rcu()

Eric Dumazet <edumazet@xxxxxxxxxx>
dccp: initialize ireq->ir_mark

Eric Dumazet <edumazet@xxxxxxxxxx>
net: fix uninit-value in __hw_addr_add_ex()

Eric Dumazet <edumazet@xxxxxxxxxx>
net: initialize skb->peeked when cloning

Eric Dumazet <edumazet@xxxxxxxxxx>
net: fix rtnh_ok()

Eric Dumazet <edumazet@xxxxxxxxxx>
netlink: fix uninit-value in netlink_sendmsg

Eric Dumazet <edumazet@xxxxxxxxxx>
crypto: af_alg - fix possible uninit-value in alg_bind()

Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
rds: tcp: must use spin_lock_irq* and not spin_lock_bh with rds_tcp_conn_lock

Tom Herbert <tom@xxxxxxxxxxxxxx>
kcm: Call strp_stop before strp_done in kcm_attach

Tero Kristo <t-kristo@xxxxxx>
clk: ti: fix flag space conflict with clkctrl clocks

Florian Westphal <fw@xxxxxxxxx>
netfilter: ebtables: don't attempt to allocate 0-sized compat array

Julian Anastasov <ja@xxxxxx>
ipvs: fix rtnl_lock lockups caused by start_sync_thread


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/dts/imx35.dtsi | 4 +-
arch/arm/boot/dts/imx53.dtsi | 4 +-
arch/x86/events/core.c | 8 +-
arch/x86/events/intel/cstate.c | 2 +
arch/x86/events/msr.c | 9 +-
crypto/af_alg.c | 8 +-
drivers/ata/libata-core.c | 3 +
drivers/atm/zatm.c | 3 +
drivers/bluetooth/btusb.c | 19 +++-
drivers/clk/ti/clock.h | 9 +-
drivers/gpio/gpio-aspeed.c | 2 +-
drivers/gpio/gpiolib.c | 7 +-
drivers/gpu/drm/drm_atomic.c | 8 ++
drivers/gpu/drm/i915/intel_cdclk.c | 41 +++++++-
drivers/gpu/drm/i915/intel_dp.c | 20 ----
drivers/gpu/drm/i915/intel_lvds.c | 3 +-
drivers/gpu/drm/nouveau/nouveau_bo.c | 1 -
drivers/gpu/drm/nouveau/nouveau_bo.h | 2 -
drivers/gpu/drm/nouveau/nouveau_ttm.c | 6 +-
drivers/gpu/drm/nouveau/nv50_display.c | 7 +-
drivers/gpu/drm/ttm/ttm_page_alloc.c | 11 ++-
drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 3 +-
drivers/gpu/drm/vc4/vc4_plane.c | 2 +-
drivers/i2c/i2c-dev.c | 2 +-
drivers/md/dm-integrity.c | 2 +-
drivers/mtd/nand/marvell_nand.c | 12 ++-
drivers/mtd/nand/nand_base.c | 5 +
drivers/net/can/flexcan.c | 26 +++---
drivers/net/can/spi/hi311x.c | 11 ++-
drivers/net/can/usb/kvaser_usb.c | 2 +-
drivers/nvme/host/core.c | 3 +-
drivers/nvme/host/nvme.h | 5 +
drivers/nvme/host/pci.c | 12 ++-
drivers/pci/pci.c | 37 ++++++--
drivers/thermal/samsung/exynos_tmu.c | 14 ++-
fs/ceph/file.c | 10 +-
fs/cifs/cifsfs.c | 13 +++
fs/fs-writeback.c | 2 +-
include/linux/bpf.h | 4 +-
include/linux/oom.h | 2 +
include/linux/wait_bit.h | 17 ++++
include/net/inet_timewait_sock.h | 1 +
include/net/nexthop.h | 2 +-
kernel/bpf/core.c | 45 +++++----
kernel/compat.c | 1 +
kernel/events/callchain.c | 10 +-
kernel/events/ring_buffer.c | 7 +-
kernel/sched/autogroup.c | 7 +-
kernel/sched/core.c | 7 +-
kernel/sched/cpufreq_schedutil.c | 3 +-
kernel/trace/bpf_trace.c | 25 ++++-
kernel/trace/trace_events_filter.c | 3 +
kernel/trace/trace_uprobe.c | 2 +
lib/swiotlb.c | 2 +-
mm/backing-dev.c | 3 +-
mm/memcontrol.c | 3 +
mm/mmap.c | 44 +++++----
mm/oom_kill.c | 81 ++++++++--------
mm/sparse.c | 2 +-
mm/z3fold.c | 42 ++++++---
net/atm/lec.c | 9 +-
net/bridge/netfilter/ebtables.c | 11 ++-
net/core/dev_addr_lists.c | 4 +-
net/core/skbuff.c | 1 +
net/dccp/ipv4.c | 1 +
net/dccp/ipv6.c | 1 +
net/ipv4/inet_timewait_sock.c | 1 +
net/ipv4/inetpeer.c | 1 +
net/ipv4/route.c | 11 ++-
net/ipv4/tcp.c | 2 +-
net/kcm/kcmsock.c | 1 +
net/netfilter/ipvs/ip_vs_ctl.c | 8 --
net/netfilter/ipvs/ip_vs_sync.c | 155 ++++++++++++++++---------------
net/netlink/af_netlink.c | 2 +
net/rds/tcp.c | 17 ++--
net/rfkill/rfkill-gpio.c | 7 +-
77 files changed, 563 insertions(+), 324 deletions(-)